18 May, 2012

How To Create a Central Store for ADMX/ADML

Active Directory Management eXtension (ADMX)

ADMX Files are divided into Language-Neutral (.admx Files) and Language-Specific (.adml Files)

Till Windows 2003, We use to have ADM Files instead of ADMX. With Windows Vista came the concept of ADMX (XML Based Files)

The settings that are reflected in ADM/ADMX are stored in the Registry

One of the main benefits of using ADMX over ADM was the Introduction of ADML. With ADM, for every language specific server, you have to download a complete set of ADM Files which may run up to few MB`s. With ADMX, the ADMX File remains the same for all the Languages, Its only the ADML Pack that you have to download for every Language. And the size of ADML is much smaller then the size of ADM

In Windows 2003, We use to have only few ADMs covering all the settings
In Windows 2008, We have around 150 + ADMXs covering all the settings

ADMX and ADML (by Default) are stored at the following Location : C:\Windows\PolicyDefinations

When you open a Group Policy Object, and Expand Administrative Templates, It will show "Policy Definitions (ADMX Files) retrieved from the Local Store"

So when it says, "Retrieved from the Local Store", It means that it has pull up the ADMX and ADML from C:\Windows\PolicyDefinations

So will it also show something else... Yes... In certain scenarios, It might show "Policy Definitions (ADMX Files) retrieved from the Central Store"

We will discuss the Central Store later...


Default Location for ADMX and ADML: C:\Windows\PolicyDefinations


List of all ADMX....


List of all ADML....


Central Store

Another new feature of ADMX and ADML... With ADM, one of the problem were that the ADMs were local to the Server. So If I have 100 Domain Controllers and I have few ADMs that I have created, then I have to manually copy those ADMs on all the servers manually... huh (I really wish I had that much if time...)

Thanks to Microsoft for saving my and countless administrators time.... Microsoft came up with the concept of "Central Store"...

Storing ADMX and ADML on a Central Location... And whats a common share between all the domain controllers.... No points for guessing... SYSVOL

So, You now need to create a folder "PolicyDefinitions" in SYSVOL and then place all the ADMX and ADML in that Folder...

Now this Folder will Replicate among all the Domain Controllers... So whats the Advantage

100 Domain Controllers.... Put the ADMX / ADML on one server and rest of the 99 servers will take those files automatically.... Secondly, 25 Servers in English Language, 25 in French, 25 in Spanish and 25 in German.... Don't Worry.... We have ADML.... :)

So place all the ADMX (Common to all the Languages) and ADMLs for English, French, Spanish and German...

Now when you open Group Policy Object on a server in English Language, it will use the ADMX + Eng ADML to display the Group Policy Object Settings

Now when you open Group Policy Object on a server in German Language, it will use the ADMX + German ADML to display the Group Policy Object Settings

Simple.... :)


"Policy Definitions (ADMX Files) retrieved from the Central Store"

This is because a Central Store Named "PolicyDefinitions" has been created in SYSVOL


ADMX....


ADML...


Size of PolicyDefinitions containing ADMX and ADML.... 6.28 MB Only...


We talked about different Languages... Here is the Administrative Pack that you need to download to support all the Languages

http://www.microsoft.com/en-us/download/details.aspx?id=6243


So Many Languages....




Here I download....



Lets Install It...


Location where it will store all the ADMXs and ADMLs...





Installed...


Oops.... Wow.... So many languages (ADMLs)



And our Language Neutral ADMX....






Just copy the complete PolicyDefinitions Folder from the location where the ADMX and ADML were downloaded to the PolicyDefinitions in SYSVOL





The Size... 131 MB....

But Remember the Fact... You don't have to use all the Languages... Use only which is being used on your Domain Controllers else it will Increase the Replication Traffic without any Use...

This was just downloaded and installed to show you that all these Languages are Possible... :)