none
GPO system.adm not there

    Question

  • Could anyone please help me out with the following.
    I am trying to change the system.adm so I can hide specified drives for Windows 7 users.

    They are in a domain and the dc is windows server 2008 R2.

    When I follow microsoft guides it states that it should be in the following location:

    c:\windows\sysvol\sysvol\domain\policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\adm and then system.adm

    However this folder is empty.....

    Can anyone point me in the right direction?

    I think I know how to change the file I just need to know the correct location or if someone can tell me that I need to create or import or something else...


    Andre

    Monday, August 05, 2013 12:48 PM

Answers

All replies

  • Hi Andre,

    The ADM folder within the associated GPO folder does not exist until the Group Policy Object has been opened for the first time and you click either the Computer or User configuration node.

    When you create a GPO in the Active Directory and a User or Computer configuration node is selected, the Inetres.adm and System.adm files are copied from the %SystemRoot%\Inf folder on the client computer to the appropriate ADM folder for the GPO in SYSVOL. When an administrator adds an ADM template to a Group Policy Object that exists in the Active Directory, the ADM file is copied from the location the user specified into the ADM folder of the associated Group Policy Object in SYSVOL.

    The following article may be referred to for more details:

    http://support.microsoft.com/kb/228460

    Best regards,

    Frank Shen

    Wednesday, August 07, 2013 9:02 AM
    Moderator
  • Hi Frank,

    Thanks for replying to my post.
    However I already created 12 GPO's and the ADM folder is there only it is empty.

    Am I doing something wrong?
    According to the article it states that the ADM file will be created when a GPO is created and the user/computer configuration is selected. This folder does exist on the provided location only it is empty...

    All my policies work perfectly I just want to add a policy to hide specified ( that I want to hide instead of the default ) drives.


    Andre

    Wednesday, August 07, 2013 10:46 AM
  • Hi Andre,

    Since the server we use is Windows server 2008 R2, ADM files have been replaced with ADMX files.

    For more information, please refer to the following links:

    http://technet.microsoft.com/en-us/library/cc709647(v=ws.10).aspx

    As to the location of the ADMX file, it is %systemroot% \policyDefinitions. The following link can be referred to for some help. 

    http://social.technet.microsoft.com/Forums/windowsserver/en-US/df060a77-2f92-4c43-baa8-69c82c26ecfd/add-more-drive-options-to-the-hide-these-specified-drives-in-my-computer

    Please feel free to contact me if you have any more questions.

    Best regards,

    Frank Shen

    Friday, August 09, 2013 2:56 AM
    Moderator
  • Sorry Frank,

    Still hadn't the chanche to test it.

    I will test it this weekend.

    Will come back to you.

    Thanks for helping me out on this one, this is much appreciated.


    Andre


    • Edited by dre2008 Wednesday, August 14, 2013 11:19 AM typo
    Wednesday, August 14, 2013 11:19 AM
  • Hi Frank,

    Currently verifying the location %systemroot% \policyDefinitions but I can't find the system.admx file. I assume it still has the same name ( system.admx instead of system.adm ).

    The ones that I do can find is: Systemrestort.admx & systemresourcemanager.admx so I think I am looking in the right location as I do can see other admx files.

    I am also able to set the default "hide these specified drives" in GPMC but I just can't find the system.admx file which I need to set my settings in. Is it possible to just copy in a system.admx file in the specified location and make my changes in there or do I need to import it in the GPMC?


    Andre

    Saturday, August 17, 2013 11:36 AM
  • Hi,

    this setting is not stored in system.adm / system.admx.

    The reference spreadsheet details this:

    File Name: WindowsExplorer.admx
    Policy Setting Name: Hide these specified drives in My Computer  
    Scope: User  
    Policy Path: Windows Components\File Explorer  
    Registry Information: HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoDrives  
    Supported On: At least Windows 2000  
    Help Text: This policy setting allows you to hide these specified drives in My Computer.This policy setting allows you to remove the icons representing selected hard drives from My Computer and File Explorer. Also, the drive letters representing the selected drives do not appear in the standard Open dialog box.If you enable this policy setting, select a drive or combination of drives in the drop-down list.Note: This policy setting removes the drive icons. Users can still gain access to drive contents by using other methods, such as by typing the path to a directory on the drive in the Map Network Drive dialog box, in the Run dialog box, or in a command window.Also, this policy setting does not prevent users from using programs to access these drives or their contents. And, it does not prevent users from using the Disk Management snap-in to view and change drive characteristics.If you disable or do not configure this policy setting, all drives are displayed, or select the "Do not restrict drives" option in the drop-down list.Also, see the "Prevent access to drives from My Computer" policy setting.

    http://social.technet.microsoft.com/wiki/contents/articles/4976.selected-content-relating-to-group-policy-administrative-templates-adm-and-admx-en-us.aspx

    Note that you do not "set the settings in the adm/admx file" - this is not how GP works.
    The GPMC software tool, will use the adm/admx files, and read the adm/admx files itself, and you create GPOs with settings. The adm/admx files are merely templates which tell GPMC which settings to offer to us via GPMC, and when we use GPMC to choose to set some settings, the various items/settings are not written to the adm/admx file at all, the settings are written to the GPO (the GPO is a collection of files and AD objects, and this *may* include a copy of the adm file, but that copy, if present, is unedited)
    An adm/admx file is *always* a template, and is never edited from the default.
    There are only very very rare situations when you would ever edit a Microsoft supplied adm/admx file.


    Don
    (Please take a moment to "Vote as Helpful" and/or "Mark as Answer", where applicable.
    This helps the community, keeps the forums tidy, and recognises useful contributions. Thanks!)



    • Edited by DonPick Saturday, August 17, 2013 10:32 PM edit
    Saturday, August 17, 2013 10:24 PM
  • Hi Don,

    I haven't tested it yet but i do found the file. I think you helped me with my problem.

    Next saturday I will confirm.


    Andre

    Sunday, August 18, 2013 1:19 PM
  • Hi Don,

    Found some time to test it.
    However if I add a line like restring only the E drive it gives me the following error:

    Encoutered an error while parsing:
    Resource '$(String.EOnly)' referenced in attribute DisplayName could not be found.

    i only added another item in the admx file... what am I missing here?


    Andre

    Sunday, August 18, 2013 2:58 PM
  • Hi Don,

    Found some time to test it.
    However if I add a line like restring only the E drive it gives me the following error:

    Encoutered an error while parsing:
    Resource '$(String.EOnly)' referenced in attribute DisplayName could not be found.

    i only added another item in the admx file... what am I missing here?


    Andre

    are you following this article?
    http://support.microsoft.com/kb/231289 
    http://windowsitpro.com/systems-management/q-how-can-i-hide-certain-drive-letters-windows-explorer-and-my-computer

    an alternative, is to use GP Preferences.
    http://www.xenappblog.com/2010/using-group-policy-hide-map-specified-drives/

    http://daniel.streefkerkonline.com/use-group-policy-preferences-to-hide-a-physical-drive/


    Don
    (Please take a moment to "Vote as Helpful" and/or "Mark as Answer", where applicable.
    This helps the community, keeps the forums tidy, and recognises useful contributions. Thanks!)


    Sunday, August 18, 2013 8:58 PM
  • Hi Don,

    I wasn't aware of the prefrences option... this is great!! :-D I love it.

    However just for all completion.. how do I import a new adm(x) file with my details?
    If I open GPMC I don't have an import function and I can't find clear instructions on the sites you provided.

    Again, thanks for all your help. Much appreciated.


    Andre

    Monday, August 19, 2013 6:27 AM
  • by default, admx files are located at:
    %systemroot%\policyDefinitions
    this is on each DC and on each workstation/server where you will manage GPO.

    if you have enabled a "Central Store" in your domain, instead you should place them there:
    \\Your.Domain.Com\SYSVOL\Your.Domain.Com\Policies\PolicyDefinitions

    more info on Central Store:
    http://support.microsoft.com/kb/929841

    http://blogs.technet.com/b/askds/archive/2009/12/09/windows-7-windows-server-2008-r2-and-the-group-policy-central-store.aspx

    http://blogs.technet.com/b/askpfeplat/archive/2011/12/12/how-to-implement-the-central-store-for-group-policy-admin-templates-completely-hint-remove-those-adm-files.aspx


    Don
    (Please take a moment to "Vote as Helpful" and/or "Mark as Answer", where applicable.
    This helps the community, keeps the forums tidy, and recognises useful contributions. Thanks!)


    • Edited by DonPick Monday, August 19, 2013 11:17 AM edit
    • Marked as answer by dre2008 Wednesday, August 21, 2013 6:13 AM
    Monday, August 19, 2013 9:30 AM
  • Hi don,

    You clearly helped me out with your last post.
    I wasn't aware of this.

    I will create a new name for the gpo so an update won't replace it.

    Thanks for helping me out on this one, this is much appreciated.


    Andre

    Wednesday, August 21, 2013 6:13 AM