[Samba] utility/script -> "Registry.pol" from "*.reg" or "*.ADM" ?
Urs Rau
urs.rau at uk.om.org
Thu Jul 31 20:22:42 GMT 2003
Does anybody have or know of a utility/(perl?)script that creates the
w2k/xp AD GPO style "Registry.pol" files from the unix cmd line?
The "Registry.pol & gpt.ini" file format is very very simple,
"http://msdn.microsoft.com/library/default.asp?url=/library/en-us/policy/policy/registry_policy_file_format.asp"
so somebody must have written it, surely?
My proof of concept tests show me that I could do a poor mans ADS only
using the builtin (local)gpo service by simply "playing" around with the
LGPO files Registry.pol (both for user or machine) and increasing the
version number in gpt.ini, during user login or using wmi. And at the
end of the update script/cycle do a "gpupdate /force", or possibly live
with a reasonable short gpo refresh time.
It works and allows me to use many gpo features, save software
distribution, which I can do differently anyway.
I am thinking of a (unix-side)commandline program that scans a "*.reg"
export and creates a corresponding "Registry.pol" file or maybe also
runs interactively and scans an "*.ADM" file to create the
"Registry.pol" files.
At the moment I have to use the win gui "gpedit.msc" (or gpmc.msc) to
read the "*.adm" file in order to create the "Registry.pol" file.
Any other ideas or pointers or ... greatly appreciated.
Urs Rau
More information about the samba
mailing list