Write your own ADM and take control of the registry!

Discussion in 'Windows Small Business Server' started by Karl Middleton, Dec 8, 2005.

  1. Good afternoon NG,

    Over the years I have had great support from this NG with tricky problems at
    my customers' sites.

    I have never seen a post regarding taking control of the registry via
    writing your own ADM files.

    So I would like to "give back" a little for the help I have been given.
    Forgive me if others have posted ADMs and how to do them.

    At the end of this post is a cut and paste of an ADM file I created that
    allows you to control the registry on the SBS box and any domain attached
    Server 2003, Win2K or WinXP box. I use it to get rid of annoyances like the
    Passport nagware, and to tweak parts of the OS such as TCP/IP, or
    applications like the Exchange IMF. It is fantastic if you have lots of
    workstations that you want to give a common behaviour or look and feel. The
    tweaks I particularly like are the network tweaks. www.speedguide.net has a
    good listing of preferred settings to make your tcp/ip sing.

    To use it follow these instructions:
    1. Cut and paste the ADM text into Notepad and then save the file as
    TWEAK.ADM on the SBS Server Desktop
    2. Open Server Management and go to
    AdvancedManagement/GroupPolicyManagement/Forest:Domain.local/DefaultDomainPolicy
    (NOTE 1)
    3. Right Click and select Edit. The GPO Editor will open.
    4. Select Administrative Templates (either one) and Right Click and select
    Add/Remove Templates.
    5. Click Add and navigate to your desktop and select TWEAKS.ADM. Click OK.
    6. Click Close. An item labelled Tweaks will now appear on the list of
    Administrative Templates along with all your Windows stuff.
    7. You now need to adjust the filter so you can see the items. Highlight
    Administrative Templates and click the View menu and select Filtering.
    8. Uncheck the box titled "Only show policy settings that can be fully
    managed". Click OK.
    9. Click on Tweaks to open the policies. You will now see a list of them
    with red on the items' icons. (NOTE 2)
    10. Make your selections for each item as you would for any other GPO.
    11. When finished close all the windows. Click Start/Run and enter GPUPDATE
    and click on OK. You may need to reboot your systems for the changes to take
    effect, especially if you have changed the machine policies. User policies
    will take effect when the user logs off and back on.

    NOTE 1: Some sources say NEVER add stuff to the Default Domain Policy. I
    personally do but it is your choice.
    NOTE 2: The red icon indicates that any change you make will remain even if
    you subsequently disable the policy. Technet has a description of the
    reasons if you put Group Policy and ADM into a search engine.
    NOTE 3. Wherever you see VALUENAME is the registry key that is being
    tweaked. Put that into Google to get some background on it if you are
    uncertain of what it does.

    I can be emailed at karl dot middleton AT tickingclock dot com dot au if
    anyone wants a bit of help.

    Happy ADMing!

    Karl from Oz

    ============cut starts here============
    CLASS USER
    CATEGORY Tweaks
    POLICY "Disable the Windows Tour"
    KEYNAME "Software\Microsoft\Windows\CurrentVersion\Applets\Tour"
    VALUENAME "RunCount"
    VALUEON NUMERIC 0
    END POLICY
    POLICY "Disable Desktop Cleanup Wizard"
    KEYNAME
    "Software\Microsoft\Windows\CurrentVersion\Explorer\Desktop\CleanupWiz"
    VALUENAME "NoRun"
    VALUEON NUMERIC 1
    VALUEOFF NUMERIC 0
    END POLICY
    POLICY "Enable Local Printer Notification Balloon"
    KEYNAME "Printers\Settings"
    VALUENAME "EnableBalloonNotificationsLocal"
    VALUEON NUMERIC 1
    VALUEOFF NUMERIC 0
    END POLICY
    POLICY "Enable Remote Printer Notification Balloon"
    KEYNAME "Printers\Settings"
    VALUENAME "EnableBalloonNotificationsRemote"
    VALUEON NUMERIC 1
    VALUEOFF NUMERIC 0
    END POLICY
    POLICY "Menu Show Delay"
    KEYNAME "Control Panel\Desktop"
    PART "Min 1, Max 800, Windows Std 400" NUMERIC
    VALUENAME "MenuShowDelay"
    MIN 1
    MAX 800
    END PART
    END POLICY
    POLICY "Visual Effects Speed"
    KEYNAME "Software\Microsoft\Windows\CurrentVersion\Explorer\VisualEffects"
    PART "Visual Effects Speed [0. Windows Choice | 1. Best Appearance | 2. Best
    Performance]" NUMERIC
    VALUENAME "VisualFXSetting"
    MIN 0
    MAX 2
    END PART
    END POLICY
    POLICY "Disable Creation of Outlook PST files (per User policy setting)"
    KEYNAME "Software\Policies\Microsoft\Office\11.0\Outlook"
    VALUENAME "DisablePST"
    VALUEON NUMERIC 1
    VALUEOFF NUMERIC 0
    END POLICY
    END CATEGORY



    CLASS MACHINE
    CATEGORY Tweaks
    POLICY "Passport Solicitation"
    KEYNAME "Software\Microsoft\MessengerService"
    VALUENAME "PassportBallon"
    VALUEON NUMERIC 1
    VALUEOFF NUMERIC 0
    END POLICY
    POLICY "Security Centre Antivirus Notifications"
    KEYNAME "SOFTWARE\Microsoft\Security Center"
    VALUENAME "AntiVirusDisableNotify"
    VALUEON NUMERIC 1
    VALUEOFF NUMERIC 0
    END POLICY
    POLICY "Security Centre Firewall Notifications"
    KEYNAME "SOFTWARE\Microsoft\Security Center"
    VALUENAME "FirewallDisableNotify"
    VALUEON NUMERIC 1
    VALUEOFF NUMERIC 0
    END POLICY
    POLICY "Security Centre Automatic Updates Notifications"
    KEYNAME "SOFTWARE\Microsoft\Security Center"
    VALUENAME "UpdatesDisableNotify"
    VALUEON NUMERIC 1
    VALUEOFF NUMERIC 0
    END POLICY
    POLICY "Security Centre Override Antivirus"
    KEYNAME "SOFTWARE\Microsoft\Security Center"
    VALUENAME "AntiVirusOverride"
    VALUEON NUMERIC 1
    VALUEOFF NUMERIC 0
    END POLICY
    POLICY "Security Centre Override Firewall"
    KEYNAME "SOFTWARE\Microsoft\Security Center"
    VALUENAME "FirewallOverride"
    VALUEON NUMERIC 1
    VALUEOFF NUMERIC 0
    END POLICY
    POLICY "Offline Folder Synchronisation Progress Level"
    KEYNAME "Software\Microsoft\Windows\CurrentVersion\Syncmgr"
    PART "Pause On [1. Errors | 2. Info | 3. Both | 4. INFO]" NUMERIC
    VALUENAME "KeepProgressLevel"
    MIN 1
    MAX 4
    END PART
    END POLICY
    POLICY "Exchange IMF Save SCL Rating With Archived Message"
    KEYNAME "Software\Microsoft\Exchange\ContentFilter"
    VALUENAME "ArchiveSCL"
    VALUEON NUMERIC 1
    VALUEOFF NUMERIC 0
    END POLICY
    POLICY "Exchange Extended Rule Size"
    KEYNAME "System\CurrentControlSet\Services\MSExchangeIS\ParametersSystem"
    PART "Min 100Kb, Max 2048Kb, Default 510Kb" NUMERIC
    VALUENAME "Max Extended Rule Size"
    MIN 100
    MAX 2048
    END PART
    END POLICY
    POLICY "Disable Creation of Outlook PST files (per Machine setting)"
    KEYNAME "Software\Microsoft\Office\11.0\Outlook"
    VALUENAME "DisablePST"
    VALUEON NUMERIC 1
    VALUEOFF NUMERIC 0
    END POLICY
    POLICY "Performance - Always Unload DLL"
    KEYNAME "SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer"
    VALUENAME "AlwaysUnloadDLL"
    VALUEON NUMERIC 1
    VALUEOFF NUMERIC 0
    END POLICY
    POLICY "Performance - Disable Paging NT Executive"
    KEYNAME "SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management"
    VALUENAME "DisablePagingExecutive"
    VALUEON NUMERIC 1
    VALUEOFF NUMERIC 0
    END POLICY
    POLICY "Performance - Large System Cache"
    KEYNAME "SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management"
    VALUENAME "LargeSystemCache"
    VALUEON NUMERIC 1
    VALUEOFF NUMERIC 0
    END POLICY
    POLICY "Performance - Network - Disable Task Offload"
    KEYNAME "SYSTEM\CurrentControlSet\Services\Tcpip\Parameters"
    VALUENAME "DisableTaskOffload"
    VALUEON NUMERIC 1
    VALUEOFF NUMERIC 0
    END POLICY
    POLICY "Performance - Network - Request Buffer Size"
    KEYNAME "SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters"
    PART "Bytes - Min 1024, Max 65535, Default 4356/16644" NUMERIC
    VALUENAME "SizReqBuf"
    MIN 1024
    MAX 65535
    DEFAULT 16644
    END PART
    END POLICY
    POLICY "Performance - Network - Redirector Buffers MaxCmds"
    KEYNAME "SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters"
    PART "MaxCmds - Min 0, Max 255, Default 15" NUMERIC
    VALUENAME "MaxCmds"
    MIN 0
    MAX 255
    DEFAULT 15
    END PART
    END POLICY
    POLICY "Performance - Network - Redirector Buffers MaxThreads"
    KEYNAME "SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters"
    PART "MaxThreads - Min 0, Max 255, Default 15" NUMERIC
    VALUENAME "MaxThreads"
    MIN 0
    MAX 255
    DEFAULT 15
    END PART
    END POLICY
    POLICY "Performance - Network - Redirector Buffers MaxCollectionCount"
    KEYNAME "SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters"
    PART "MaxCollectionCount - Min 0, Max 65535, Default 16" NUMERIC
    VALUENAME "MaxCollectionCount"
    MIN 0
    MAX 65535
    DEFAULT 16
    END PART
    END POLICY
    POLICY "Performance - Network - RWIN GlobalMaxTcpWindowSize"
    KEYNAME "SYSTEM\CurrentControlSet\Services\Tcpip\Parameters"
    PART "GlobalMaxTcpWindowSize - Min 0, Max 1073741823, Default 17520/65536"
    NUMERIC
    VALUENAME "GlobalMaxTcpWindowSize"
    MIN 0
    MAX 1073741823
    DEFAULT 65535
    END PART
    END POLICY
    POLICY "Performance - Network - RWIN TcpWindowSize"
    KEYNAME "SYSTEM\CurrentControlSet\Services\Tcpip\Parameters"
    PART "TcpWindowSize - Min 0, Max 1073741823, Default 17520/65536" NUMERIC
    VALUENAME "TcpWindowSize"
    MIN 0
    MAX 1073741823
    DEFAULT 65535
    END PART
    END POLICY
    POLICY "Performance - Network - RFC 1323 Options"
    KEYNAME "SYSTEM\CurrentControlSet\Services\Tcpip\Parameters"
    PART "RFC 1323 Options - Min 0, Max 3, Default 3" NUMERIC
    VALUENAME "Tcp1323Opts "
    MIN 0
    MAX 3
    DEFAULT 3
    END PART
    END POLICY
    POLICY "Performance - Network - Default Time To Live"
    KEYNAME "SYSTEM\CurrentControlSet\Services\Tcpip\Parameters"
    PART "Default TTL Secs - Min 1, Max 255, Default 128" NUMERIC
    VALUENAME "DefaultTTL"
    MIN 1
    MAX 255
    DEFAULT 128
    END PART
    END POLICY
    POLICY "Performance - Network - Enable MTU Discovery"
    KEYNAME "SYSTEM\CurrentControlSet\Services\Tcpip\Parameters"
    VALUENAME "EnablePMTUDiscovery"
    VALUEON NUMERIC 1
    VALUEOFF NUMERIC 0
    END POLICY
    POLICY "Performance - Network - Enable Black Hole Router Discovery"
    KEYNAME "SYSTEM\CurrentControlSet\Services\Tcpip\Parameters"
    VALUENAME "EnablePMTUBHDetect"
    VALUEON NUMERIC 1
    VALUEOFF NUMERIC 0
    END POLICY
    POLICY "Performance - Network - Enable Selective Acknowledgement"
    KEYNAME "SYSTEM\CurrentControlSet\Services\Tcpip\Parameters"
    VALUENAME "SackOpts"
    VALUEON NUMERIC 1
    VALUEOFF NUMERIC 0
    END POLICY
    POLICY "Performance - Network - Fast Retransmit No Of ACKS"
    KEYNAME "SYSTEM\CurrentControlSet\Services\Tcpip\Parameters"
    PART "Fast Retransmit ACKS - Min 1, Max 3, Default 2" NUMERIC
    VALUENAME "TcpMaxDupAcks"
    MIN 1
    MAX 3
    DEFAULT 2
    END PART
    END POLICY
    END CATEGORY
    ============cut ends here====================

    ===============
     
    Karl Middleton, Dec 8, 2005
    #1
    1. Advertisements

  2. Karl Middleton

    cjobes Guest

    Great stuff, thanks Karl

    Claus
     
    cjobes, Dec 8, 2005
    #2
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.