I've got a few policies, such as the Small Business Client Computer
GPO which has "SyncForegroundPolicy" under "Extra Registry Settings".
Why does it show here? I can go in and enable (or disable) "Wait for
network..." (which is the SyncForeGroundPolicy) and it'll show in my
Settings Summary page under both Extra Registry Settings and
Administrative Templates/System Logon.

Furthermore, in RSOP I have Extra Registry Settings for the IE7
settings I made with the new ADM file. I have a policy called "IE
Settings", in which I linked inetres.adm to. (I overwrote the old one
in \%systemroot%\inf). If I don't delete inetres out of the linked
gpo it still shows the smaller 1.6MB size. Once I delete it and re-
add it, it shows the 2.3MB(or whatever) size.

Anyway, RSOP shows these policies under "Extra Registry Settings" as
opposed to in their appropriate 'tree'. The way I "fixed" that was to
re-link the larger inetres.adm on every single GPO. Why is it when
you replace a .ADM file all of the GPO's don't start using it?

Anyway, once I did that and ran gpupdate /force on my workstation all
of the IE policies appeared in their 'appropriate' tree's rather than
in "Extra Registry Settings".

Can anyone help me on this?

Re: Can someone explain "Extra Registry Settings" to me? GPMC and RSOP? by Cliff

Cliff
Wed Jun 25 12:07:41 PDT 2008

It is an odd limitation of the older GP editors and GPMC tools. One thing
that people regularly get confused about is that ADM files are *not*
necessary for GPO settings to be applied. They are a tool that the GP
snapins use to *display* GPO settings, but once set, the ADM files can be
deleted. Obviously it isn't recommended to delete them since editing a GPO
in the future becomes more conplex.

It was this limitation that caused Microsoft to move away from ADM files and
create the technologies in the newer GPO tools. ADMX files can be stored in
a new area on the server called the "Central Store" and they are shared
among all group policies residing on that server. These tools are available
in Windows Vista and Windows Server 2008, and you can create a central store
on Windows 2003 (including SBS.) You just have to do the editing from a
vista or 2008 machine to reap the benefits.

-Cliff

"Ryan" <mindflux98@gmail.com> wrote in message
news:f3a3040a-1777-46bf-acdf-4259f5e4c8e7@k30g2000hse.googlegroups.com...
> I've got a few policies, such as the Small Business Client Computer
> GPO which has "SyncForegroundPolicy" under "Extra Registry Settings".
> Why does it show here? I can go in and enable (or disable) "Wait for
> network..." (which is the SyncForeGroundPolicy) and it'll show in my
> Settings Summary page under both Extra Registry Settings and
> Administrative Templates/System Logon.
>
> Furthermore, in RSOP I have Extra Registry Settings for the IE7
> settings I made with the new ADM file. I have a policy called "IE
> Settings", in which I linked inetres.adm to. (I overwrote the old one
> in \%systemroot%\inf). If I don't delete inetres out of the linked
> gpo it still shows the smaller 1.6MB size. Once I delete it and re-
> add it, it shows the 2.3MB(or whatever) size.
>
> Anyway, RSOP shows these policies under "Extra Registry Settings" as
> opposed to in their appropriate 'tree'. The way I "fixed" that was to
> re-link the larger inetres.adm on every single GPO. Why is it when
> you replace a .ADM file all of the GPO's don't start using it?
>
> Anyway, once I did that and ran gpupdate /force on my workstation all
> of the IE policies appeared in their 'appropriate' tree's rather than
> in "Extra Registry Settings".
>
> Can anyone help me on this?


Re: Can someone explain "Extra Registry Settings" to me? GPMC and RSOP? by v-gzwang

v-gzwang
Thu Jun 26 02:43:25 PDT 2008

Hello Ryan,

Thank you for your post and thanks for your great help.
My name is Gary Wang, and it is my pleasure to work with you on this issue!
Please allow me to confirm that my understandings are correct. As I
understand it, the issue is:

You would like to get some information about "Extra Registry Settings" in
GPMC and RSOP.

If I have misunderstood your concerns please feel free to let me know.

Suggestion :
==============
Cliff is right. Besides his inputs, I would like to share some additional
information for you. This behavior occurs because that Windows XP SP2
introduces version 5 of Group Policy Administrative Templates (.adm) files.
The Group Policy Management console cannot correctly interpret certain
settings in version 5 .adm files. Therefore, it displays these settings in
the Extra Registry Settings section.

Note: This behavior does not affect how Group Policy functions. The effect
of this behavior is limited to the display of this information in the Group
Policy Management console.

For more details, please refer to the following link:

Managing Group Policy ADMX Files Step-by-Step Guide
http://technet2.microsoft.com/WindowsVista/en/library/02633470-396c-4e34-971
a-0c5b090dc4fd1033.mspx?mfr=true

Hope it helps.

I look forward to your reply. Also, if you have any questions or concerns,
please do not hesitate to let me know. I am happy to help. :-)

Thank you for your time and cooperation!

Best regards,

Gary Wang(MSFT)
Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
| From: "Cliff Galiher" <cgaliher@gmail.com>
| References:
<f3a3040a-1777-46bf-acdf-4259f5e4c8e7@k30g2000hse.googlegroups.com>
| In-Reply-To:
<f3a3040a-1777-46bf-acdf-4259f5e4c8e7@k30g2000hse.googlegroups.com>
| Subject: Re: Can someone explain "Extra Registry Settings" to me? GPMC
and RSOP?
| Date: Wed, 25 Jun 2008 13:07:41 -0600
| Lines: 44
| Message-ID: <11C0D7E1-E84E-417D-9E77-D5B2F6008AC3@microsoft.com>
| MIME-Version: 1.0
| Content-Type: text/plain;
| format=flowed;
| charset="iso-8859-1";
| reply-type=original
| Content-Transfer-Encoding: 7bit
| X-Priority: 3
| X-MSMail-Priority: Normal
| X-Newsreader: Microsoft Windows Mail 6.0.6001.18000
| X-MimeOLE: Produced By Microsoft MimeOLE V6.0.6001.18000
| X-MS-CommunityGroup-PostID: {11C0D7E1-E84E-417D-9E77-D5B2F6008AC3}
| X-MS-CommunityGroup-ThreadID: 3BD6B3D9-D226-4985-84A7-DCDFC2A64327
| X-MS-CommunityGroup-ParentID: 3BD6B3D9-D226-4985-84A7-DCDFC2A64327
| Newsgroups: microsoft.public.windows.server.sbs
| Path: TK2MSFTNGHUB02.phx.gbl
| Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:113019
| NNTP-Posting-Host: TK2MSFTNGHUB02.phx.gbl 127.0.0.1
| X-Tomcat-NG: microsoft.public.windows.server.sbs
|
| It is an odd limitation of the older GP editors and GPMC tools. One
thing
| that people regularly get confused about is that ADM files are *not*
| necessary for GPO settings to be applied. They are a tool that the GP
| snapins use to *display* GPO settings, but once set, the ADM files can be
| deleted. Obviously it isn't recommended to delete them since editing a
GPO
| in the future becomes more conplex.
|
| It was this limitation that caused Microsoft to move away from ADM files
and
| create the technologies in the newer GPO tools. ADMX files can be stored
in
| a new area on the server called the "Central Store" and they are shared
| among all group policies residing on that server. These tools are
available
| in Windows Vista and Windows Server 2008, and you can create a central
store
| on Windows 2003 (including SBS.) You just have to do the editing from a
| vista or 2008 machine to reap the benefits.
|
| -Cliff
|
| "Ryan" <mindflux98@gmail.com> wrote in message
| news:f3a3040a-1777-46bf-acdf-4259f5e4c8e7@k30g2000hse.googlegroups.com...
| > I've got a few policies, such as the Small Business Client Computer
| > GPO which has "SyncForegroundPolicy" under "Extra Registry Settings".
| > Why does it show here? I can go in and enable (or disable) "Wait for
| > network..." (which is the SyncForeGroundPolicy) and it'll show in my
| > Settings Summary page under both Extra Registry Settings and
| > Administrative Templates/System Logon.
| >
| > Furthermore, in RSOP I have Extra Registry Settings for the IE7
| > settings I made with the new ADM file. I have a policy called "IE
| > Settings", in which I linked inetres.adm to. (I overwrote the old one
| > in \%systemroot%\inf). If I don't delete inetres out of the linked
| > gpo it still shows the smaller 1.6MB size. Once I delete it and re-
| > add it, it shows the 2.3MB(or whatever) size.
| >
| > Anyway, RSOP shows these policies under "Extra Registry Settings" as
| > opposed to in their appropriate 'tree'. The way I "fixed" that was to
| > re-link the larger inetres.adm on every single GPO. Why is it when
| > you replace a .ADM file all of the GPO's don't start using it?
| >
| > Anyway, once I did that and ran gpupdate /force on my workstation all
| > of the IE policies appeared in their 'appropriate' tree's rather than
| > in "Extra Registry Settings".
| >
| > Can anyone help me on this?
|
|


Re: Can someone explain "Extra Registry Settings" to me? GPMC and by Ryan

Ryan
Thu Jun 26 06:38:59 PDT 2008

But why do these show up as extra in both RSOP on the workstation (SP2
and up) and in GPMC?

I had a number of IE7 policies show up in RSOP only as "Extra Registry
Settings" from the new inetres.adm. the way I got rid of that is I
removed and re-added the larger inetres.adm to every single GPO object
under my domain tree. Then they quit showing as Extra. Best guess is
RSOP was trying to use both the 'old' inetres.adm and the 'new'
inetres.adm and couldn't show the settings for some?

Re: Can someone explain "Extra Registry Settings" to me? GPMC and RSOP? by v-gzwang

v-gzwang
Fri Jun 27 03:26:22 PDT 2008

Hi Ryan,

This behavior may due to the method how GPMC using to treat ADM files.

Each administrative workstation that is used to run Group Policy Object
Editor stores ADM files in the %windir%\Inf folder. When GPOs are created
and first edited, the ADM files from this folder are copied to the Adm
subfolder in the GPT. This includes the standard ADM files and any custom
ADM files that are added by the administrator.

Note: Creating a GPO without later editing that GPO creates a GPT without
any ADM files.

By default, when GPOs are edited, Group Policy Object Editor compares the
timestamps of the ADM files in the workstation's %windir%\Inf folder with
those that are stored in the GPTs Adm folder. If the workstation's files
are newer, Group Policy Object Editor copies these files to the GPT Adm
folder, overwriting any existing files of the same name.This comparison
occurs when the Administrative Templates node (computer or user
configuration) is selected in Group Policy Object Editor, regardless of
whether the administrator actually edits the GPO.

Note: The ADM files stored in the GPT can be updated by viewing a GPO in
Group Policy Object Editor.

However, by default, the Group Policy Management Console (GPMC) always uses
local ADM files, regardless of their time stamp, and never copies the ADM
files to the Sysvol. If an ADM file is not found, GPMC looks for the ADM
file in the GPT. Also, the GPMC user can specify an alternative location
for ADM files. If an alternative location is specified, this alternative
location takes precedence.

I suspect that the new inetre.adm file you are using is download form below:

Administrative Template for Internet Explore for Windows XP SP2 and Windows
Server 2003 SP1
http://download.microsoft.com/download/5/e/9/5e99b2a5-9b68-456d-a28d-1af1100
b84fd/admFiles_IE7.msi

This new inetre.adm's size is about 2.3M. And the default inetre.adm's size
is about 1.6M. So you will see different size in case delete the default
inetre.adm or not.

If there are anything unclear, please feel free to contact me.

Have a nice day :-)

Best regards,

Gary Wang(MSFT)
Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
| From: Ryan <mindflux98@gmail.com>
| Newsgroups: microsoft.public.windows.server.sbs
| Subject: Re: Can someone explain "Extra Registry Settings" to me? GPMC
and
| RSOP?
| Date: Thu, 26 Jun 2008 06:38:59 -0700 (PDT)
| Organization: http://groups.google.com
| Lines: 9
| Message-ID:
<ec5528c9-92ef-4f81-bf9a-e39621c0a087@z66g2000hsc.googlegroups.com>
| References:
<f3a3040a-1777-46bf-acdf-4259f5e4c8e7@k30g2000hse.googlegroups.com>
| <11C0D7E1-E84E-417D-9E77-D5B2F6008AC3@microsoft.com>
<cWCYZE31IHA.5360@TK2MSFTNGHUB02.phx.gbl>
| NNTP-Posting-Host: 74.213.35.170
| Mime-Version: 1.0
| Content-Type: text/plain; charset=ISO-8859-1
| Content-Transfer-Encoding: 7bit
| X-Trace: posting.google.com 1214487539 7864 127.0.0.1 (26 Jun 2008
13:38:59 GMT)
| X-Complaints-To: groups-abuse@google.com
| NNTP-Posting-Date: Thu, 26 Jun 2008 13:38:59 +0000 (UTC)
| Complaints-To: groups-abuse@google.com
| Injection-Info: z66g2000hsc.googlegroups.com; posting-host=74.213.35.170;
| posting-account=91rW4woAAACE3FL1eVNfpIe0khdxGUL8
| User-Agent: G2/1.0
| X-HTTP-UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9)
| Gecko/2008052906 Firefox/3.0,gzip(gfe),gzip(gfe)
| Bytes: 1837
| Path:
TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTFEEDS02.phx.gbl!TK2MSFTFE
EDS01.phx.gbl!newsfeed00.sul.t-online.de!t-online.de!border2.nntp.dca.gigane
ws.com!nntp.giganews.com!postnews.google.com!z66g2000hsc.googlegroups.com!no
t-for-mail
| Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:113112
| X-Tomcat-NG: microsoft.public.windows.server.sbs
|
| But why do these show up as extra in both RSOP on the workstation (SP2
| and up) and in GPMC?
|
| I had a number of IE7 policies show up in RSOP only as "Extra Registry
| Settings" from the new inetres.adm. the way I got rid of that is I
| removed and re-added the larger inetres.adm to every single GPO object
| under my domain tree. Then they quit showing as Extra. Best guess is
| RSOP was trying to use both the 'old' inetres.adm and the 'new'
| inetres.adm and couldn't show the settings for some?
|