[Samba] Updating System Policy Templates

Author

Message

Mike Petersen
External

Since: Mar 22, 2007
Posts: 6

Posted: Thu Mar 22, 2007 1:04 pm Post subject: [Samba] Updating System Policy Templates Archived from groups: linux>samba (more info?)

Hi all, I am going to be in the process of updating my custom system policy templates (probably within a month or two) and I am asking for what policies anyone is in need of to help them deploy samba as a domain controller. Currently I basically have a single template.adm file, a few people have asked me to separate them into a few different files that would serve an overall single purpose - I guess like having a "folder_redirection.adm" file, a "security.adm" file, etc. Any ideas on this ?? I am definitely going to create policies for IE7 - I am planning on creating policies to make it look similar to IE6 instead of the horrible interface it has now. I am also going to create a policy that will allow it to use Google as the default search engine, and I will somehow try to figure out how to enforce the Home Page to a specific site (currently the policy is apparently different than IE6 as it currently doesn't work). Is there anything else that needs to be done for Internet Explorer 7 ? Does anyone need Windows Vista Policies ? Does anyone know if Vista will accept system policies from a Domain Controller ? Does anyone want to donate a copy of Vista to help create these policies (I haven't seen Vista, don't want it, definitely won't pay for it - but I will take the time to create policies for it if it is necessary and if Vista will allow System Policies). In lieu of anyone donating a copy, does anyone know if there is a trial version available that I could use to create the policies ? Finally, I am thinking of creating a few NTConfig.POL files so people can download so they don't have to create their own files. I would just adjust the Default User and Default Computer items and would probably just stick with what people would probably want on their network. This would probably alleviate some of the emails I receive (some people just don't comprehend the whole policy thing - I have heard it all). Does anyone think this is a good or bad idea ? Thanks all - feel free to email me directly on these questions. Mike Petersen mgpeter.DeleteThis@pcc-services.com http://www.pcc-services.com/custom_poledit.html -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba

Robert Schetterer
External

Since: Mar 04, 2005
Posts: 34

Posted: Thu Mar 22, 2007 1:04 pm Post subject: Re: [Samba] Updating System Policy Templates [Login to view extended thread Info.] Archived from groups: per prev. post (more info?)

Mike Petersen schrieb: > Hi all, > > I am going to be in the process of updating my custom system policy > templates (probably within a month or two) and I am asking for what > policies anyone is in need of to help them deploy samba as a domain > controller. > > Currently I basically have a single template.adm file, a few people have > asked me to separate them into a few different files that would serve an > overall single purpose - I guess like having a "folder_redirection.adm" > file, a "security.adm" file, etc. Any ideas on this ?? > > I am definitely going to create policies for IE7 - I am planning on > creating policies to make it look similar to IE6 instead of the horrible > interface it has now. I am also going to create a policy that will > allow it to use Google as the default search engine, and I will somehow > try to figure out how to enforce the Home Page to a specific site > (currently the policy is apparently different than IE6 as it currently > doesn't work). Is there anything else that needs to be done for Internet > Explorer 7 ? > > Does anyone need Windows Vista Policies ? Does anyone know if Vista > will accept system policies from a Domain Controller ? Does anyone want > to donate a copy of Vista to help create these policies (I haven't seen > Vista, don't want it, definitely won't pay for it - but I will take the > time to create policies for it if it is necessary and if Vista will > allow System Policies). In lieu of anyone donating a copy, does anyone > know if there is a trial version available that I could use to create > the policies ? > > Finally, I am thinking of creating a few NTConfig.POL files so people > can download so they don't have to create their own files. I would just > adjust the Default User and Default Computer items and would probably > just stick with what people would probably want on their network. This > would probably alleviate some of the emails I receive (some people just > don't comprehend the whole policy thing - I have heard it all). Does > anyone think this is a good or bad idea ? > > Thanks all - feel free to email me directly on these questions. > > Mike Petersen > mgpeter.TakeThisOut@pcc-services.com > > http://www.pcc-services.com/custom_poledit.html > > > HI Mike, creating policies is always welcome, i dont tried vista adms for now, cause i dont think most of my customers will switch to it, the plan is to get totally out of m$. I am nearly sure that adms will work for vista too, cause i dont read something that vista isnt any longer compatible to nt 4 pdcs ( but i may fail here ) Be sure that you dont make work which is allready done by others, there are few sources of adms on the web. -- Mit freundlichen Gruessen Best Regards Robert Schetterer https://www.schetterer.org Munich/Bavaria/Germany -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba

Mike Petersen
External

Since: Mar 22, 2007
Posts: 6

Posted: Thu Mar 22, 2007 10:03 pm Post subject: Re: [Samba] Updating System Policy Templates / ie7 adm found [Login to view extended thread Info.] Archived from groups: per prev. post (more info?)

Thanks for all of the links, I can't read German but I did manage to get some info from them. Also thanks for the link to the article on the new admx format - I don't know why MS is changing everything to something x (docx, xlsx and now admx) - I preferred the old format anyway, the Microsoft Engineers just made it extremely confusing reading their policy templates. Which turned out to be just fine for me because unfortunately I cannot base any of my policy template work off of any current Microsoft Templates - I contacted them about it 2 years ago, before I started working on my Custom Policies (just to be sure it was alright) and at first they were OK about it, but after a while I was contacted again to not base any work off of any policies they created (Go figure). So when I created my custom policy templates last time I simply searched the web for any registry settings that people were using to adjust Windows behavior, then implemented those as a policy. For the ones I didn't find I simply ran an Un-installer program to track registry changes to the system as I adjusted settings. This is what I will probably have to do with the IE7 policies since there are very few references to registry settings regarding Internet Explorer 7 yet. Also, for the IE7 policies I am going to try to start doing those at the beginning of next month, the Vista policies will probably have to wait a little longer (especially since no one seems to want to deploy Vista anyway). So if you want any specific policy for IE 7 just let me know and I will try to implement it. I will also try to keep an eye on the mail list. Thanks again, Mike Petersen mgpeter DeleteThis @pcc-services.com -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba

Robert Schetterer
External

Since: Mar 04, 2005
Posts: 34

Posted: Thu Mar 22, 2007 10:03 pm Post subject: Re: [Samba] Updating System Policy Templates / ie7 adm found [Login to view extended thread Info.] Archived from groups: per prev. post (more info?)

Mike Petersen schrieb: > Thanks for all of the links, I can't read German but I did manage to get > some info from them. Also thanks for the link to the article on the new > admx format - I don't know why MS is changing everything to something x > (docx, xlsx and now admx) - I preferred the old format anyway, the > Microsoft Engineers just made it extremely confusing reading their > policy templates. Which turned out to be just fine for me because > unfortunately I cannot base any of my policy template work off of any > current Microsoft Templates - I contacted them about it 2 years ago, > before I started working on my Custom Policies (just to be sure it was > alright) and at first they were OK about it, but after a while I was > contacted again to not base any work off of any policies they created > (Go figure). > > So when I created my custom policy templates last time I simply searched > the web for any registry settings that people were using to adjust > Windows behavior, then implemented those as a policy. > > For the ones I didn't find I simply ran an Un-installer program to track > registry changes to the system as I adjusted settings. This is what I > will probably have to do with the IE7 policies since there are very few > references to registry settings regarding Internet Explorer 7 yet. > > Also, for the IE7 policies I am going to try to start doing those at the > beginning of next month, the Vista policies will probably have to wait a > little longer (especially since no one seems to want to deploy Vista > anyway). > > So if you want any specific policy for IE 7 just let me know and I will > try to implement it. I will also try to keep an eye on the mail list. > > Thanks again, > Mike Petersen > mgpeter RemoveThis @pcc-services.com > Hi Mike, the main question is how to server the new admx format with a recent samba pdc ( my short overflow seems that they are stored in a different place, i maybe fail here), also i think if you wanna install a mixed setup with winxp and vista which isnt recommended anyway you have deploy both adms and admxs configured in the same way, as the complexity with configurations possible in policies this doesnt seem very easy done. So anyway the possibility to serve admx (or equal)should be included in samba 4 as it should work as active dir controller. So thats the question to the samba gurus. Maybe at interim reg patches ( or extracted from adms/x) will do the job, but i think they have to be different in xp and vista, also the admx migrator should help. As i understood the format change was made to near the admx programming language to other programming languages and simplify writing of it. in my eyes it just another example that windows version are not really compatible and shot users to upgrade their whole network . It dosnt make me wonder that m$ dont want you to create adms, in my eyes the dont wanna people doing free unlicend stuff anymore, so 2 days ago the pressed some windows friendly sites to get off their offline update packs for xp from the web. In the ie7.adm from gruppenrichtlinien.de should be allready some specials in, like configure search engine ( this what i read in parts there ) Sorry i havent a good english site for you. But i rememeber there where a few unfree tools creating adms, maybe they upgraded to admx edit -- Mit freundlichen Gruessen Best Regards Robert Schetterer https://www.schetterer.org Munich/Bavaria/Germany -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba

Mike Petersen
External

Since: Mar 22, 2007
Posts: 6

Posted: Fri Mar 23, 2007 12:02 am Post subject: Re: [Samba] Updating System Policy Templates / ie7 adm found [Login to view extended thread Info.] Archived from groups: per prev. post (more info?)

On Fri, 2007-03-23 at 02:37 +0100, Robert Schetterer wrote: > Hi Mike, the main question is > how to server the new admx format with a recent samba pdc ( my short > overflow seems that they are stored in a different place, i maybe fail > here), also > i think if you wanna install a mixed setup with winxp and vista > which isnt recommended anyway you have deploy both adms and admxs > configured in the same way, as the complexity with configurations > possible in policies this doesnt seem very easy done. > So anyway the possibility to serve admx (or equal)should be included > in samba 4 as it should work as active dir controller. > So thats the question to the samba gurus. > Maybe at interim reg patches ( or extracted from adms/x) will do the > job, but i think > they have to be different in xp and vista, also the admx migrator should > help. The question right now only becomes "Can Vista read and implement policies from the NTConfig.POL file within the Netlogon share ?". If it can I can create all of the policies anyone would need for Vista, if it will only read Active Directory Policies then we will have to wait until samba implements Group Policy Objects. The file format of adm and admx format doesn't make a difference in this case as you could not load an Active Directory Group Policy ADM file into the System Policy Editor anyway. Thus I created my own templates for Windows 2000 and XP (along with ones specifically for NT4). I personally am not looking forward to Samba implementing Group Policies because No One documents their changes to their networks and finding a stupid policy in a whole Active Directory tree is a royal pain. I really prefer the way of including all the policies in a single file (easy to locate, and someone has to be somewhat knowledgeable to implement policies). > As i understood the format change was made to near the admx programming > language to other programming languages and simplify writing of it. > in my eyes it just another example that windows version are not really > compatible and shot users to upgrade their whole network . > It dosnt make me wonder that m$ dont want you to create adms, > in my eyes the dont wanna people doing free unlicend stuff > anymore, so 2 days ago the pressed some windows friendly sites to get > off their offline update packs for xp from the web. Yeah, don't really know why Microsoft is going this direction. > In the ie7.adm from gruppenrichtlinien.de should be allready some > specials in, like configure search engine ( this what i read in parts > there ) > Sorry i havent a good english site for you. > But i rememeber there where a few unfree tools creating adms, maybe they > upgraded to admx edit I couldn't read that particular site, but it didn't look to give a valid adm file anyway. BTW: I use notepad2 to create the adm files (Free in every sense of the word Thanks again for the info, Mike Petersen mgpeter RemoveThis @pcc-services.com -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba

Display posts from previous: