none
how to install admx files RRS feed

  • Question

  • hi all,

    i have found the admx files i need for a task iv been asked to do. However once the files are downloaded how do install the admx files?

    Thanks

    Wednesday, November 7, 2012 12:59 PM

Answers

All replies

  • Hi,

    You can store these files is %systemroot%\PolicyDefinitions on each of your DCs, However, it will not get replicated to other location which will cause to failure of few features appearance from other workstation.

    Microsoft already have a solution. It’s known as the Central Store where you can store the ADMX template. Essentially, this is a PolicyDefinitions folder within the SYSVOL folder hierarchy. By placing the ADMX files in this directory, they are replicated to every DC in the domain; by extension, the ADMX-aware Group Policy Management Console in Windows Vista, Windows 7, Windows Server 2008 and R2 can check this folder as an additional source of ADMX files, and will report them accordingly when setting your policies.

    By default, the folder is not created. Whether you are a single DC or several thousand, I would strongly recommend you create a Central Store and start using it for all your ADMX file storage. It really does work well.

    Also, you can refer below link on How to create the Central Store for Group Policy Administrative Template files

    HTH


    Thanks & Regards,
    Amit Katkar (MCTS)
    ------------------------------------------------------------
    This posting is provided "AS IS" with no warranties or guarantees and confers no rights.

    Wednesday, November 7, 2012 2:47 PM
  • ok that's a great response thank you, I have three domain controllers at the three different sites - is it still a good idea to place the admx files in policyDefs within SYSVOL? Im worried about replication killing the link between sites etc
    Wednesday, November 7, 2012 3:09 PM
  • I am going to install these admx files

    http://www.microsoft.com/en-us/download/details.aspx?id=18968

    my server is 64 bit but my clients are a mixture of 64 and 32 bit, also to add to this some of my other DCs are 32 bit

    which admx version do I download?

    Wednesday, November 7, 2012 3:12 PM
  •  
    >
    > my server is 64 bit but my clients are a mixture of 64 and 32 bit,
    > also to add to this some of my other DCs are 32 bit
    >
     
    Doesn't matter - the admx files are the same, only the installer is
    different.
     

    NO THEY ARE NOT EVIL, if you know what you are doing: Good or bad GPOs?
    Wenn meine Antwort hilfreich war, freue ich mich über eine Bewertung! If my answer was helpful, I'm glad about a rating!
    Wednesday, November 7, 2012 8:04 PM
  • Yeah, it is recommended to use the Central Store. The ADMX template files should only be a couple of MB. Since they don't Change often, it is a one-time replication between the DCs - neglectible in most cases.

    The views and opinions expressed in my postings do NOT necessarily correlate with the ones of my friends, family or my employer. If anyone should be allowed to mark a response as an "answer", it should be the thread creator. No one else.

    Wednesday, November 7, 2012 9:01 PM
  • Hi,

    I agree with others, they have provided the right suggestions, please refer to their suggestions to install the Office Administrative Template files. Additionally, regarding how to install ADMX files, I suggest we could refer to the following articles.

    ADMX Technology Review

    http://technet.microsoft.com/en-us/library/cc749513(WS.10).aspx

    Managing Group Policy ADMX Files Step-by-Step Guide

    http://technet.microsoft.com/en-us/library/cc709647.aspx

    Creating a Group Policy Central Store

    http://www.petri.co.il/creating-group-policy-central-store.htm

    Central Store for ADMX Templates

    http://ad.kazakinfo.com/2011/04/central-store-for-admx-templates/

    Windows 7, Windows Server 2008 R2 and the Group Policy Central Store

    http://blogs.technet.com/b/askds/archive/2009/12/09/windows-7-windows-server-2008-r2-and-the-group-policy-central-store.aspx

    Best Regards,

    Andy Qi

    TechNet Subscriber Support

    If you are TechNet Subscription user and have any feedback on our support quality, please send your feedback here.

    Thursday, November 8, 2012 6:33 AM
    Moderator
  •  
    > The ADMX template files should only be a couple of MB.
     
    To be precise:
     
    ADMX templates for Win8/2012 with languages en-us and de-de are 8 MB in
    size.
    ADMX templates for Office 2010, also en-us and de-de, are 10 MB in size.
     
    More generally: ADMX for Win8 are ~2,5 Megs plus another 2,5 Megs for
    each language. ADMX for Office is 3 Megs plus another 3 Megs for each
    language.
     
    regards, Martin
     

    NO THEY ARE NOT EVIL, if you know what you are doing: Good or bad GPOs?
    Wenn meine Antwort hilfreich war, freue ich mich über eine Bewertung! If my answer was helpful, I'm glad about a rating!
    Thursday, November 8, 2012 8:03 AM
  • I am confused about the bit version of the installers  . . . I didn't think I needed to run an installer? I though I just simply copy and paste the contents of the download to the policydefintions folder iv created in SYSVOL?
    Thursday, November 8, 2012 8:50 AM
  • ok I have just done a test . . .I downloaded and extracted the 64 bit version, in the extracted contents I can see a number of folders . .do I place all of the folders into the policydefinitions folder?
    Thursday, November 8, 2012 8:55 AM
  • im getting confused here. Articles are saying I should create the policydefinitions folder in sysvol/policies which I am fine with . . but then it says iv to copy the admx files from my windows vista / 7 machine to the domain controller. I don't see what a windows vista /  machine has got to do with this! I want to download the admx files directly to the server and use group policy management from the server so why do I need to copy from a windows vista / 7 client?

    Am I missing something?

    Thursday, November 8, 2012 10:04 AM
  •  
    > ok I have just done a test . . .I downloaded and extracted the 64 bit
    > version, in the extracted contents I can see a number of folders . .do
    > I place all of the folders into the policydefinitions folder?
     
    I don't have the folder structure at hand, but: all ADMX files go
    directly to the policydefinitions folder, and all language specific
    subfolders are just copied.
     

    NO THEY ARE NOT EVIL, if you know what you are doing: Good or bad GPOs?
    Wenn meine Antwort hilfreich war, freue ich mich über eine Bewertung! If my answer was helpful, I'm glad about a rating!
    Thursday, November 8, 2012 8:38 PM
  • Am 08.11.2012 11:04, schrieb hyperNoddy:
    >
    > im getting confused here. Articles are saying I should create the
    > policydefinitions folder in sysvol/policies which I am fine with . .
    > but then it says iv to copy the admx files from my windows vista / 7
    > machine to the domain controller. I don't see what a windows vista / 
    > machine has got to do with this! I want to download the admx files
    > directly to the server and use group policy management from the server
    > so why do I need to copy from a windows vista / 7 client?
    >
    > Am I missing something?
    >
     
    Yes, you are missing something ;-)
     
    As soon as you create a central store, gpedit ignores
    %windir%\policydefinitions and only looks in the central store. If you
    do NOT copy %windir%\policydefinitions to the central store, you will
    not be able to edit OS policies anymore.
     
    regards, Martin
     

    NO THEY ARE NOT EVIL, if you know what you are doing: Good or bad GPOs?
    Wenn meine Antwort hilfreich war, freue ich mich über eine Bewertung! If my answer was helpful, I'm glad about a rating!
    Thursday, November 8, 2012 8:41 PM
  • oh shoot! so potentially I can wipe out the group policy structure in %windir%\policydefinitions if I go ahead and create a PolicyDefinitions folder in SYSVOL??

    so moving forward how do I get to use the admx files? there seems to be loads of stuff in %windir%\policydefinitions - do I need to copy all of this to PolicyDefinitions on SYSVOL? how will this affect the current group policies?

    Friday, November 9, 2012 11:27 AM
  •  
    > oh shoot! so potentially I can wipe out the group policy structure in
    > %windir%\policydefinitions if I go ahead and create a
    > PolicyDefinitions folder in SYSVOL??
    >
     
    Yes - but then local "gpedit.msc" will be somewhat unhappy about
    administrative templates ;-)
     
    > so moving forward how do I get to use the admx files? there seems to
    > be loads of stuff in %windir%\policydefinitions - do I need to copy
    > all of this to PolicyDefinitions on SYSVOL? how will this affect the
    > current group policies?
    >
     
    Yes, copy it all:
     
    robocopy %windir%\policydefinitions
    \\%userdomain%\sysvol\%userdnsdomain%\policies\policydefinitions /e
     
    It will in no way affect existing policies.
     

    NO THEY ARE NOT EVIL, if you know what you are doing: Good or bad GPOs?
    Wenn meine Antwort hilfreich war, freue ich mich über eine Bewertung! If my answer was helpful, I'm glad about a rating!
    Friday, November 9, 2012 2:31 PM
  • is there a reason I need to use robocopy?

    also . . do I need to copy them or can I just leave the adms where they are in  %windir%\policydefinitions  and simply add the admx to SYSVOL PolicyDefinitions?

    Its quite a large production environment and im worried about breaking things :(

    Friday, November 9, 2012 3:16 PM
  • iv just noticed there are loads of admx files in C:\Windows\PolicyDefinitions

    now im uber confused

    there is 147 admx files on each DC in the C:\Windows\PolicyDefinitions folder

    so do I add my newly downloaded admx fles to C:\Windows\PolicyDefinitions or do I create a new central store?

    • Edited by hyperNoddy Friday, November 9, 2012 3:42 PM
    Friday, November 9, 2012 3:25 PM
  • > is there a reason I need to use robocopy?
    >
     
    No. Feel free to use "copy" or explorer or TotalCommander.
     
    > also . . do I need to copy them or can I just leave the adms where
    > they are in  %windir%\policydefinitions  and simply add the admx to
    > SYSVOL PolicyDefinitions?
    >
     
    There are no ADMs in PolicyDefinitions. ADM lives in %windir%\Inf.
     
     

    NO THEY ARE NOT EVIL, if you know what you are doing: Good or bad GPOs?
    Wenn meine Antwort hilfreich war, freue ich mich über eine Bewertung! If my answer was helpful, I'm glad about a rating!
    Monday, November 12, 2012 1:38 PM
  •  
    > now im uber confused
    > there is 147 admx files on each DC in the C:\Windows\PolicyDefinitions
    > folder
     
    Yes, why shouldn't they? In Win 8/2012, it will be over 170 of them...
     

    NO THEY ARE NOT EVIL, if you know what you are doing: Good or bad GPOs?
    Wenn meine Antwort hilfreich war, freue ich mich über eine Bewertung! If my answer was helpful, I'm glad about a rating!
    Monday, November 12, 2012 1:39 PM
  • Hi,

    Any update about the issue?

    Just checking in to see if the suggestions were helpful. Please let us know if you would like further assistance.

    Best Regards,

    Andy Qi

    TechNet Subscriber Support

    If you are TechNet Subscription user and have any feedback on our support quality, please send your feedback here.

    Wednesday, November 14, 2012 7:41 AM
    Moderator
  • ok . . .:) I added the admx files to the local policy defs folder on the dc in question and it worked. I can now see all the settings I require in gpmc.

    THANK YOU ALL VERY MUCH FOR THE HELP!!!

    • Marked as answer by hyperNoddy Friday, November 16, 2012 2:22 PM
    Friday, November 16, 2012 2:22 PM
  • Hi Everyone

    Sorry for bringing back an old thread....

    Have a question about adding a specific ADMX/ADML file into Server 2008 R2 SP1 domain.

    1. I would like to add IE10 admx, and considering setting up central store. Can i simply copy one admx file for IE10, or do i have to copy everything? Have read that, once you setup central store, it will ignore local policydefinition folder, so if i just copy one IE10 admx file, will this cause problems?

    2. Noticed there are various versions of the template available for download. There is 2008 R2 version, and 2012 version. As i am using 2008 R2 SP1, should i be using the latest 2012 version? or doesn't matter which one i use?

    3. Apparently you can also install the templates into your local WIN7 PC as well. However, if i do this, and then launch GPMC from WIN7, and decide to make a change to one of the policies, will this change actually take affect in the domain? I have read that in Win2008 environment, there is no longer automatic updates to templates from local workstations to Sysvol in AD. So if this is the case, what is the purpose of being bale to install the templates in your local workstation?

    Thanks!!

    DM

    Tuesday, April 15, 2014 6:44 AM
  • > store. Can i simply copy one admx file for IE10, or do i have to copy
    > everything?
     
    Everything - the whole local %windir%\policydefinitions folder.
     
    > 2. Noticed there are various versions of the template available for
    > download. There is 2008 R2 version, and 2012 version. As i am using 2008
    > R2 SP1, should i be using the latest 2012 version? or doesn't matter
    > which one i use?
     
    Use the version you need for your target OS. If your clients are running
    Win8, use 2012 and Win8.
     
    > 3. Apparently you can also install the templates into your local WIN7 PC
    > as well. However, if i do this, and then launch GPMC from WIN7, and
    > decide to make a change to one of the policies, will this change
    > actually take affect in the domain?
     
    Yes. ADMX only defines the UI in gpedit, not the real "content" of GPOs.
     
    > local workstations to Sysvol in AD. So if this is the case, what is the
    > purpose of being bale to install the templates in your local workstation?
     
    One example: In Win7, MS introduced the ability in ADM templates to
    write REG_MULTI_SZ. Vista doesn't understand this ability. So, if you
    use a central store AND have both Vista and Win7 clients AND you
    populate the central store with Win7 ADMX, you cannot edit ADM templates
    on Vista anymore...
     
    >
    > Thanks!!
    >
    > DM
    >
    > -----
    > -----
    >
     --
    Martin
     
    Mal ein Buch über GPOs
    lesen?
     
    NO THEY ARE NOT EVIL, if you know what you are doing: Good or bad GPOs?
    And if IT bothers me - coke bottle design refreshment
     

    Martin

    Mal ein GUTES Buch über GPOs lesen?

    NO THEY ARE NOT EVIL, if you know what you are doing: Good or bad GPOs?
    And if IT bothers me - coke bottle design refreshment :))
    • Proposed as answer by D_M_K Tuesday, April 15, 2014 11:10 PM
    Tuesday, April 15, 2014 9:09 AM
  • Thanks for the quick reply Martin.

    Just few more things if your don't mind.

    Theoretically, if i copy only the new IE10 ADMX templates to %windir%\policydefinitions of every DC, would this also work? (rather than using central store).

    My target OS are Win7 and Server 2008 R2 SP1. However, looks like the newer templates for Win8.1/2012 R2 are backwards compatible to Win7/2008. Hence, i guess it would be safe to load these latest templates? Or would you still recommend using the ones for Win7/2008?

    Thanks again!!

    DM

    Tuesday, April 15, 2014 12:01 PM
  • > Theoretically, if i copy only the new IE10 ADMX templates to
    > %windir%\policydefinitions of every DC, would this also work? (rather
    > than using central store).
     
    If you edit GPOs only on DCs, yes this would work.
     
    > Win7/2008. Hence, i guess it would be safe to load these latest
    > templates? Or would you still recommend using the ones for Win7/2008?
     
    If you implement a central store, use the latest available. This will
    prevent issues about "hey I have a 8.1 workstation but settings are
    missing"...
     
    And don't forget to copy both Client _AND_ Server ADMX to the central
    store. There are some files only on clients, some only on servers.
     

    Martin

    Mal ein GUTES Buch über GPOs lesen?

    NO THEY ARE NOT EVIL, if you know what you are doing: Good or bad GPOs?
    And if IT bothers me - coke bottle design refreshment :))
    Tuesday, April 15, 2014 12:40 PM
  • Hi Martin

    One last question for the night... I promise! :)

    On a Win2008 R2 DC (that's not using the central store), if I go ahead and create a new GPO, and set a new policy, this should create a new policy subfolder with a GUID under SYSVOL. Will these new GUID subfolder still contain the 4MB ADM folders?

    Thanks for all your help tonight!!!

    DM

    Tuesday, April 15, 2014 1:23 PM
  • > policy subfolder with a GUID under SYSVOL. Will these new GUID subfolder
    > still contain the 4MB ADM folders?
     
    No.
     

    Martin

    Mal ein GUTES Buch über GPOs lesen?

    NO THEY ARE NOT EVIL, if you know what you are doing: Good or bad GPOs?
    And if IT bothers me - coke bottle design refreshment :))
    Tuesday, April 15, 2014 1:37 PM
  • Martin

    Hope your not sick of me yet, after giving me a lecture on ADMX. :)

    I have a scenario where in a Win2008 R2 domain, also have one Win2003 DC (PDC). Hence in a mixed mode.

    In the XP/2003 environment, i believe there is an auto update of templates feature, where if i update the templates locally on a WinXP machine, and fire up GPMC, it would automatically update the DC's. (Provided there is no policy blocking this from happening).

    In my environment, this policy "Turn off automatic update of ADM files" is not enabled.

    Hence, if i decide to update the new ADMX templates on my Win7 machine, and launch GPMC, would there be any danger of the the templates being automatically updated to the Win2003 DC?

    Thanks again!!

    DM

    Tuesday, April 15, 2014 11:30 PM
  • > In my environment, this policy "Turn off automatic update of ADM files"
    > is not enabled.
     
    This policy only affects XP and 2003.
     
    > Hence, if i decide to update the new ADMX templates on my Win7 machine,
    > and launch GPMC, would there be any danger of the the templates being
    > automatically updated to the Win2003 DC?
     
    ADMX are never copied to Sysvol. But as soon as you work with GPOs on
    your 2003 server, sysvol will get populated with the 5 default ADM files
    from 2003 if you do not enable the above policy.
     

    Martin

    Mal ein GUTES Buch über GPOs lesen?

    NO THEY ARE NOT EVIL, if you know what you are doing: Good or bad GPOs?
    And if IT bothers me - coke bottle design refreshment :))
    Wednesday, April 16, 2014 9:39 AM