A. A. When system policy editor is run you can select which templates to include. There are 3 which are supplied with NT, and are stored in the %systemroot%/inf directory

  • common.adm
  • windows.adm
  • winnt.adm

The only ones you will use normally are common.adm and winnt.adm. Windows.adm was supplied for compatibility with windows95 machines, however policies created with Windows NT will not work on Windows 95 so this template is not used.

To select which templates to use, select "Policy template" from the options menu.

The structure of an adm file is simple and follows the structure shown below

CLASS MACHINE or USER                               CATEGORY !!<string for first level>                                 CATEGORY !!<string for second level> this is optional                                    POLICY !!<string for name to be displayed next to check box>                                    KEYNAME !!<string for the keyname where the value is, do not include the first                                       VALUENAME !!<actual value name>                                       VALUEON "1" VALUEOFF "0"                                       PART !!<displayed in the bottom of the system policy screen> TEXT                                        END PART                                    END POLICY                                 END CATEGORY                              END CATEGORY                              \[strings\]                              <strings defined>="Windows NT Network"

Simple! The !! means what's after is a string and has to then be defined in the \[strings\] section. You don't have to use strings and can just put the entries directly be enclosing in quotes if it contains a space, it just might help for long key names if used repeatedly. For every keyword (except for class) there must be a end keyword, e.g. for category there must be a end category, same as an if and endif etc.

For examples, look at the common.adm and winnt.adm files and then compare to how they look in the system policy editor to get the display and effect you want. There are many other combinations and effects such as a drop down box which can be accomplished using the following

   PART !!<string> DROPDOWNLIST                                 VALUENAME ""<actual value>                                    ITEMLIST                                       NAME "<string>" VALUE NUMERIC n                                       NAME "<string>" VALUE NUMERIC n                                       NAME "<string>" VALUE NUMERIC n                                    END ITEMLIST                                 END PART