How to Identify what settings a Group Policy (ADM/ADMX) action is applying to the Registry

Version 1

    Verified Product Versions

    AppSense Environment Manager 10.0AppSense Environment Manager 8.6AppSense Environment Manager 10.1

    Introduction

     

    When applying Group Policy though Environment Manager, Its possible to identify what settings are being set in the registry to help with troubleshooting

     

    Detail

     

    The easiest way to do this is to Highlight the ADM/ADMX action that you have configured and then copy this to the clipboard

     

     

    Once copied you can then paste this into a text editor, for example Notepad++

     

    This will show you the xml behind the action and in tun the registry keys being set

     

    <EMSnippet ClassName="UEM.EMSnippet.0000" CreatedByVerion="10.1.423.0" OriginConfigFriendlyName="" OriginConfigID="F0E9EDAA-1C16-4811-B4B7-8C2DDB7D1FA9">
      <Actions ClassName="UEM.ActionBaseCollection.0000">
        <Action ClassName="UEM.Action.0000" Identifier="UEM.Action.ADMXPolicies" ActionType="256" LinkID="42013EB7-E951-4458-B920-5CEACC055F06" OriginID="F0E9EDAA-1C16-4811-B4B7-8C2DDB7D1FA9" Name="Set ADMX Policy: Prohibit access to Control Panel and PC settings" Enabled="True" EventType="UserPostLogOn">
          <ActionProperties ClassName="UEM.ActionPropertyCollection.0000">
            <ActionProperty ClassName="UEM.ActionProperty.0000" Name="PolicyDir" PropertyType="String" Value="C:\Windows\PolicyDefinitions" />
            <ActionProperty ClassName="UEM.ActionProperty.0000" Name="Policy0" PropertyType="PolicyCollection">
              <ActionProperties ClassName="UEM.ActionPropertyCollection.0000">
                <ActionProperty ClassName="UEM.ActionProperty.0000" Name="DisplayName" PropertyType="String" Value="Prohibit access to Control Panel and PC settings" />
                <ActionProperty ClassName="UEM.ActionProperty.0000" Name="PolicyStatus" PropertyType="String" Value="Enabled" />
                <ActionProperty ClassName="UEM.ActionProperty.0000" Name="Name" PropertyType="String" Value="NoControlPanel" />
                <ActionProperty ClassName="UEM.ActionProperty.0000" Name="Category" PropertyType="String" Value="windows:ControlPanel" />
                <ActionProperty ClassName="UEM.ActionProperty.0000" Name="FileName" PropertyType="String" Value="ControlPanel.admx" />
                <ActionProperty ClassName="UEM.ActionProperty.0000" Name="Class" PropertyType="String" Value="User" />
                <ActionProperty ClassName="UEM.ActionProperty.0000" Name="Hive" PropertyType="String" Value="HKEY_CURRENT_USER" />
                <ActionProperty ClassName="UEM.ActionProperty.0000" Name="Key" PropertyType="String" Value="Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" />
                <ActionProperty ClassName="UEM.ActionProperty.0000" Name="ValueName" PropertyType="String" Value="NoControlPanel" />
                <ActionProperty ClassName="UEM.ActionProperty.0000" Name="Value" PropertyType="Integer" Value="1" />
                <ActionProperty ClassName="UEM.ActionProperty.0000" Name="ValueType" PropertyType="String" Value="REG_DWORD" />
                <ActionProperty ClassName="UEM.ActionProperty.0000" Name="Flags" PropertyType="Integer" Value="3" />
                <ActionProperty ClassName="UEM.ActionProperty.0000" Name="ParentDisplayName" PropertyType="String" Value="Control Panel" />
              </ActionProperties>
            </ActionProperty>
            <ActionProperty ClassName="UEM.ActionProperty.0000" Name="Unapply" PropertyType="Boolean" Value="True" />
          </ActionProperties>
          <Description ClassName="UEM.Description.0000" Text="" />
          <Notes ClassName="UEM.Notes.0000" Text="" />
        </Action>
      </Actions>
      <RunAsUserLibrary ClassName="UEM.RunAsUserLibrary.0000" RunAsUserLibraryID="ED80C5A4-F138-40E9-BAA0-5517E34CD1FE" />
    </EMSnippet>
    

     

     

    This method can then be used to assist with troubleshooting and identifying what the ADM/ADMX is setting within the registry.