Extra Registry Settings in GPO

[Geoff]

I have an entry called 'Extra Registry Settings' in one of my GPO's. I need to remove it as its causing problems, trouble is the GPMC wont let me manipulate the entry. How can I kill it?

[Dos_Box]

Edit the .adm file directly (eeeek!) perhaps?

[ajbritton]

Are they the settings for XP firewall? That's what I usually see in 'Extra Registry Settings'.

As a least resort you could try using GPMC to backup the GPO, which creates an XML file. You should then be able to edit the XML file and re-import it.

[Geoff]

No its a GPO off W2k ADM templates that's been upgraded to XP SP2 ADM templates with the GPMC. The setting is for the 'NoDrive' registry key. It seems to be preventing USB pen drives from showing up on machines.

[ajbritton]

Strange. It should just be a question of loading the correct ADM templates. I suppose you could print out the GPMC report of all the settings and then recreate a new GPO with the same settings.

[Geoff]

Yup, tried the 'backup' option but it didn't produce anything human editable. I'll have to make an ADM template for the extra settings.

[catbert]

The "Extra Settings" can happen when settings were made when the GP was edited by a node that had different ADM's

for example, if you use windows 2003 server to edit the group policy and then windows xp or vice versa, you'll notice this happens.

can't remember the link, but if you goto MS and look for ADM if should provide you with a package of all the latest ADM's install that on the node you use GPMC on. I'd recommend you only use one station to save this issue in the future.

also if you added an ADM, made a few setting changes then removed the ADM, the settings stay. so unless you have the ADM to hand it may be the case of making a new GPO to apply to the OU.

oh, is this the default domain or default domain controller GPO your editing. The general recommendation is to not edit these.

Alan

[Geoff]

Ok, bit of history.

This is an Viglen ClassLink XP network. So the original setup, GPO settings, etc all came 'out of the box' so to speak. The GPO's seem to of been down with 2k Server SP4 and GPEdit. I'm trying to edit them with XP SP2 and the GPMC. I think thats where the issue has arisen from.

Its not the default domain/domain controller policy.

I'll probably wind up making a new ADM template to control these old settings. Its not a big deal really. I've had experience cooking up ADM templates before. I

[catbert]

A new adm seems likely, so does a recreation of the GPO if it's not applying successfully.

http://www.gpoguy.com/Tools.htm

i found this site quite useful on many occasions. hopefully it'll help with your adm creation.

Alan