How to Install and Update Group Policy Administrative ...

文章推薦指數: 80 %
投票人數:10人

How to Update ADMX GPO Templates in AD When Upgrading Windows 10 Build? Installing a New Administrative Template in an Active Directory Domain ... Home About  WindowsOSHub/GroupPolicies/HowtoInstallandUpdateGroupPolicyAdministrativeTemplates(ADMX)? July13,2021 ActiveDirectoryGroupPoliciesWindows10WindowsServer2019 HowtoInstallandUpdateGroupPolicyAdministrativeTemplates(ADMX)? Inthisarticle,wewillshowhowtoupdate(install)newGPOadministrativetemplates(admx)intheActiveDirectorydomainwhenupgradingaWindows10orWindowsServer2016/2019buildonyourdevices. AdministrativetemplatesarespecialADMX(andADML)filesusedintheGroupPolicyEditortosetcomputerorusersettings.Actually,theadministrativetemplatesdescribethechangestobemadeintheregistrytoapplydifferentsettings. Contents: HowtoUpdateADMXGPOTemplatesinADWhenUpgradingWindows10Build? InstallingaNewAdministrativeTemplateinanActiveDirectoryDomain HowtoUpdateADMXGPOTemplatesinADWhenUpgradingWindows10Build? SinceMicrosoftisconstantlyupgradingitsoperatingsystemsandaddsnewfeaturestothem,itregularlyreleasesnewadministrativetemplatefiles.ToenableanadministratortomanagenewWindowsfeaturescentrallyusingGPO,theymustregularlyupdateadministrativetemplatesintheirADdomains. Forexample,youhaveaWindowsServer2016domainwithcomputersupgradedtobuildWindows102004.AnewDeliveryOptimizationoptiontomanageWindowsUpdateforBusiness(WufB)appearedinthebuild.NowyoucansetthemaximumbandwidththatDeliveryOptimizationcanusetodownloadupdatesinthebackground. MaximumForegroundDownloadBandwidth(inkb/s)optionisavailableinthefollowingsectionoftheLocalGroupPolicyEditor(gpedit.msc)oncomputersrunningWindows102004(20H2):ComputerConfiguration->Policies->AdministrativeTemplates->WindowsComponents->DeliveryOptimization. Butyouwon’tbeabletoconfigurethisoptiononallcomputersusingdomainGPOs,sincethereisnosuchoptioninthedomainGroupPolicyManagementeditor(gpmc.msc).Thisisbecausetherearenonewsettingsintheadministrativetemplatefilesondomaincontrollers.TheymaybeusedonlyinlocalpoliciesorinMLGPOonadevicewithanewWindows10build. IfyouhaveinstalledtheRSATmanagementconsoleonacomputerwiththenewWindows10build,newpolicysettingswillbeavailableinthegpmc.msceditor. Inthiscase,youhavetoupdatetheGPOadministrativetemplatesonyourdomaincontrollers.Let’sseehowtodoit: DownloadadministrativetemplatesforthelatestWindows10buildusedinyourdomain.Inourcase,itisWindows102004.Itiseasiertosearchfor“AdministrativeTemplates(.admx)forWindows102004”inGoogle;ThecompletelistofdirectlinkstodownloadadministrativetemplatesfordifferentWindowsversionsandbuildsisavailablehere:https://docs.microsoft.com/en-us/troubleshoot/windows-client/group-policy/create-and-manage-central-store. DownloadandinstalltheMSIfile(AdministrativeTemplates.admxforWindows10May2020Update.msi). ThencopythecontentsofC:\ProgramFiles(x86)\MicrosoftGroupPolicy\Windows10May2020Update(2004)\PolicyDefinitionstotheGPOCentralStoreonyourdomaincontroller(\\woshub.com\SYSVOL\woshub.com\Policies\PolicyDefinitions)withfilereplacement(!).Someimportanttips! RemembertobackupPolicyDefinitionsdirectoryonyourdomaincontrollerpriortoreplacingfiles(thusyouwillbeabletorollbacktopreviousadmxtemplatesversion); Itisnotnecessarytocopydirectorieswiththeadmlfilesfordifferentlanguages.JustcopythedirectoriesforthoselanguagesyouareusinginyourGPOeditor.ThusyouwillreducethereplicationtrafficandthesizeofSYSVOLfolderonyourDC; IfyoualreadyhaveacomputerwithanewWindows10build,youcancopytheadministrativetemplatesfrom%WinDir%\PolicyDefinitionswithoutinstallingtheMSIfile. ThenopentheGroupPolicyManagementConsole(gpmc.msc),createanewGPO,andmakesurethatithasthepolicysettingsfromthenewWindows10build.IfyouwantaGPOwithnewsettingstobeappliedtothespecificWindows10buildsonly,youcanusetheGPOWMIfilters. Configurethepolicy,assignittoclients,updatetheGPOsettingsonthemandmakesurethatthenewsettingshavebeenapplied. InstallingaNewAdministrativeTemplateinanActiveDirectoryDomain Inthesameway,newadministrativetemplatesareinstalled.Forexample,youaregoingtouseGPOtomanageEdgeChromiumsettingsonusercomputers.TherearenoadministrativetemplatesforEdgeChromiumbothinWindows102004andin20H2.YouwillhavetodownloadEdgeChromiumpolicyfilesmanuallyandcopytheadmxfilestothePolicyDefinitionsdirectoryonyourdomaincontroller. GototheMicrosoftEdgeforbusiness(https://www.microsoft.com/en-us/edge/business/download); SelectEdgeversion,build,andplatformyouwanttouse.ClickGetPolicyFiles; ExtracttheMicrosoftEdgePolicyTemplates.cabfile; Goto\MicrosoftEdgePolicyTemplates\windows\admx.Copymsedge.admx,msedgeupdate.admxanddirectoriescontaininglanguagepackages(forexample,de-DEanden-US)totheCentralGroupPolicystoreonadomaincontroller(\\woshub.com\SYSVOL\woshub.com\Policies\PolicyDefinitions); MakesurethatnewpolicysectionstoconfigureMicrosoftEdgesettingshaveappearedinthedomainGPOeditor. EarlierweshowedhowtoinstalltheadministrativetemplatesforMicrosoftOfficeapps(Word,Excel.Outlook,etc.). IfyourcompanyisusingmultiplesoftwareversionsyouwanttomanageusingGPO,downloadandinstallallADMXfilesforallversionsstartingwiththeearliestoneonyourDC(admxtemplatesforthelatestsoftwareversionmustbeinstalledlast). 0comment 3 Facebook Twitter Google+ Pinterest previouspost ConfiguringCronJobswithCrontabonCentOS/RHELLinux nextpost UpdatingPowerShellVersiononWindows RelatedReading OutlookKeepsAskingforPasswordonWindows May24,2022 HowtoShareFilesandPrintersinWindows... May23,2022 CreateOrganizationalUnits(OU)StructureinActiveDirectory... May17,2022 WindowsSecurityWon’tOpenorShowsaBlank... May17,2022 HowtoManuallyInstallWindowsUpdatesfromCAB... May16,2022 LeaveaCommentCancelReply Notifymeoffollowupcommentsviae-mail.Youcanalsosubscribewithoutcommenting. Currentye@r* Leavethisfieldempty Categories ActiveDirectory GroupPolicies ExchangeServer Microsoft365 Azure Windows11 Windows10 Windows7 WindowsServer2019 WindowsServer2016 WindowsServer2012R2 PowerShell VMWare Hyper-V MSOffice RecentPosts ManagingCalendarPermissionsonExchangeServerandMicrosoft365 May25,2022 PowerShellProfileFiles:GettingStarted May25,2022 OutlookKeepsAskingforPasswordonWindows May24,2022 HowtoShareFilesandPrintersinWindows10and11? May23,2022 CreateOrganizationalUnits(OU)StructureinActiveDirectorywithPowerShell May17,2022 WindowsSecurityWon’tOpenorShowsaBlankScreenonWindows10/11 May17,2022 HowtoManuallyInstallWindowsUpdatesfromCABandMSUFiles? May16,2022 RDSandRemoteAppPerformanceIssuesonWindowsServer2019/2016 May16,2022 DeployingSoftware(MSIPackages)UsingGroupPolicy May12,2022 UpdatingVMwareESXiHostfromtheCommandLine May11,2022 Followus woshub.com ad



請為這篇文章評分?