.adm File Management
The survey raised several questions about the difficulty of Administrative Template (.adm) file management. In response, Mark admitted, "Frankly, we challenged IT pros with the management of .adm files when we released Group Policy in Windows 2000. The manner in which we released .adm files created problems.
"But, since Windows Server 2003, we've introduced new processes and extended our documentation in this area. First, any .adm file we release will now be a superset of any version shipped in earlier versions of the operating system. By way of example, the Windows XP SP2 .adm files include all the policy settings included in the Windows Server 2003 .adm files plus those new for XP SP2. We've published all versions of these .adm files (for Windows 2000 and later) at http://go.microsoft.com/fwlink/?linkid=31057. And we've created a spreadsheet that lists all Administrative Templates policy settings—see http://go.microsoft.com/fwlink/?linkid=15165. In terms of the manner in which .adm files are handled (by default and when managed through policy settings), see the Microsoft article 'Recommendations for Managing Group Policy Administrative Templates (.adm) Files,' http://support.microsoft.com/default.aspx?kbid=816662.
"For an important note about the impact of the XP SP2 versions of the .adm files, see the article '"The following entry in the [strings] section is too long and has been truncated" Error Message When You Try to Modify or to View GPOs in Windows Server 2003, Windows XP Professional, or Windows 2000' (http://support.microsoft.com/default.aspx?kbid=842933). Finally, we'll soon be releasing a white paper that describes the .adm file syntax in detail so that you can create your own .adm files."
Complex and Powerful, but Hard
Microsoft prides itself on being a data-driven company, and this column is meant to gauge what readers need so that we can give Microsoft product teams data that they can act on. In the case of Group Policy, what readers want Microsoft to know is that they're using this powerful but complex technology and want to use it more widely. But it's hard!
One reader said it all: "Please, make it more straightforward!" Another reader asked, "Why is it so complex? There are too many options and I am concerned about crippling all my clients with an incorrect setting."
The good news is that the Group Policy team is eager to hear what users want, even if some customer comments are less than positive. Michael and his team are not only open to feedback and incorporate it into their technology as soon as they can, but they actively solicit input.
They also want to help you while they work on implementing improvements. Michael and the team gave me more information than I can put into print, so I invite you to check out this column's online Interact! area and look at Mark's "Group Policy Tips and Tricks" PowerPoint presentation from Microsoft TechEd 2003. You'll also find an audio recording of our conversation, the complete survey results, and an Instant Poll about RSoP.
Please let me know what you think about this column, and don't forget to post your suggestions for Microsoft to the Windows Feedback site. Also, I invite you to test your AD and Group Policy skills in the IT Prolympics at http://www.windowsitpro.com/prolympics. And please tell me what other Microsoft technologies you'd like me to explore in upcoming columns.