A. A. When system policy editor is run you can select
which templates to include. There are 3 which are supplied with NT, and
are stored in the %systemroot%/inf directory
- common.adm
- windows.adm
- winnt.adm
The only ones you will use normally are common.adm and winnt.adm.
Windows.adm was supplied for compatibility with windows95 machines,
however policies created with Windows NT will not work on Windows 95 so
this template is not used.
To select which templates to use, select "Policy template"
from the options menu.
The structure of an adm file is simple and follows the structure shown
below
CLASS MACHINE or USER
CATEGORY !!<string for first level>
CATEGORY !!<string for second level> this is optional
POLICY !!<string for name to be displayed next to check box>
KEYNAME !!<string for the keyname where the value is, do not include the first
VALUENAME !!<actual value name>
VALUEON "1" VALUEOFF "0"
PART !!<displayed in the bottom of the system policy screen> TEXT
END PART
END POLICY
END CATEGORY
END CATEGORY
[strings]
<strings defined>="Windows NT Network"
Simple! The !! means what's after is a string and has to then be defined
in the [strings] section. You don't have to use strings and can just put
the entries directly be enclosing in quotes if it contains a space, it
just might help for long key names if used repeatedly. For every keyword
(except for class) there must be a end keyword, e.g. for category there
must be a end category, same as an if and endif etc.
For examples, look at the common.adm and winnt.adm files and then
compare to how they look in the system policy editor to get the display
and effect you want. There are many other combinations and effects such as
a drop down box which can be accomplished using the following
PART !!<string> DROPDOWNLIST
VALUENAME ""<actual value>
ITEMLIST
NAME "<string>" VALUE NUMERIC n
NAME "<string>" VALUE NUMERIC n
NAME "<string>" VALUE NUMERIC n
END ITEMLIST
END PART