samba - Nov 2021 - Microsoft's ADMX templates install message -- anything to worry about?

I don't recall seeing this message the last time I installed the Windows 
ADMX templates, which probably just means I forgot, but just in case:

root at samba-dc:~# samba-tool gpo admxload -U Administrator 
--admx-dir=./Program\ Files/Microsoft\ Group\ Policy/Windows\ 10\ 
October\ 2020\ Update\ \(20H2\)/PolicyDefinitions/
Password for [EA\Administrator]:
Installing ADMX templates to the Central Store prevents Windows from 
displaying its own templates in the Group Policy Management Console. You 
will need to install these templates from 
https://www.microsoft.com/en-us/download/102157 to continue using 
Windows Administrative Templates.


Since I downloaded these ADMX templates from

   https://www.microsoft.com/en-us/download/102157

I find this message a tad confusing.

Since this is a slightly different install from last time (4.15.2 rather 
than 4.15.1) asking just in case.

The thing is, as soon as you install any ADMX-file on your DC the RSAT
only uses the ADMX-files from the DC. Your local ADMX-files on your
workstation will no longer be used by RSAT. So copy all ADMX-files
either direct from Microsoft or from your local Windows-System (where
you installed the RSAT) to the DC in the right directory.



Am 20.11.21 um 23:07 schrieb Patrick Goetz via samba:
> I don't recall seeing this message the last time I installed the
Windows
> ADMX templates, which probably just means I forgot, but just in case:
> 
> root at samba-dc:~# samba-tool gpo admxload -U Administrator
> --admx-dir=./Program\ Files/Microsoft\ Group\ Policy/Windows\ 10\
> October\ 2020\ Update\ \(20H2\)/PolicyDefinitions/
> Password for [EA\Administrator]:
> Installing ADMX templates to the Central Store prevents Windows from
> displaying its own templates in the Group Policy Management Console. You
> will need to install these templates from
> https://www.microsoft.com/en-us/download/102157 to continue using
> Windows Administrative Templates.
> 
> 
> Since I downloaded these ADMX templates from
> 
> ? https://www.microsoft.com/en-us/download/102157
> 
> I find this message a tad confusing.
> 
> Since this is a slightly different install from last time (4.15.2 rather
> than 4.15.1) asking just in case.
> 
> 
-- 
Stefan Kania
Landweg 13
25693 St. Michaelisdonn


Signieren jeder E-Mail hilft Spam zu reduzieren und sch?tzt Ihre
Privatsph?re. Ein kostenfreies Zertifikat erhalten Sie unter
https://www.dgn.de/dgncert/index.html

On 11/20/21 3:07 PM, Patrick Goetz via samba wrote:
> I don't recall seeing this message the last time I installed the
Windows
> ADMX templates, which probably just means I forgot, but just in case:
> 
> root at samba-dc:~# samba-tool gpo admxload -U Administrator 
> --admx-dir=./Program\ Files/Microsoft\ Group\ Policy/Windows\ 10\ 
> October\ 2020\ Update\ \(20H2\)/PolicyDefinitions/
> Password for [EA\Administrator]:
> Installing ADMX templates to the Central Store prevents Windows from 
> displaying its own templates in the Group Policy Management Console. You 
> will need to install these templates from 
> https://www.microsoft.com/en-us/download/102157 to continue using 
> Windows Administrative Templates.
> 
> 
> Since I downloaded these ADMX templates from
> 
>  ? https://www.microsoft.com/en-us/download/102157
> 
> I find this message a tad confusing.
> 
Sorry that the message is confusing. The message was added to remind 
users to do exactly what you are doing. If you run that command without 
--admx-dir, it installs the default samba admx files, which causes RSAT 
to only use the admx files on the SYSVOL, ignoring local templates. At 
this point, the Windows Administrative templates disappear from RSAT.
I suppose I could try to disable that message when you're installing the 
Windows templates.

-- 
*David Mulder*
Labs Software Engineer, Samba
SUSE
1800 Novell Place
Provo, UT 84606
(P)+1 801.861.6571
dmulder at suse.com
  <http://www.suse.com/>