{"id":22122,"date":"2021-11-14T00:42:00","date_gmt":"2021-11-13T23:42:00","guid":{"rendered":"http:\/\/159.69.82.204\/win\/?p=22122"},"modified":"2021-11-13T10:35:33","modified_gmt":"2021-11-13T09:35:33","slug":"zentralen-windows-admx-store-sichern-und-aktualisieren","status":"publish","type":"post","link":"https:\/\/borncity.com\/win\/2021\/11\/14\/zentralen-windows-admx-store-sichern-und-aktualisieren\/","title":{"rendered":"Backup and update your central Windows ADMX store"},"content":{"rendered":"<p><img decoding=\"async\" title=\"Windows\" style=\"float: left; margin: 0px 10px 0px 0px; display: inline\" alt=\"Windows\" src=\"https:\/\/www.borncity.com\/blog\/wp-content\/uploads\/2021\/04\/Windows-klein.jpg\" width=\"200\" align=\"left\">[<a href=\"https:\/\/www.borncity.com\/blog\/?p=259393\" target=\"_blank\" rel=\"noopener\">German<\/a>]I'm going to post a topic here on the blog that affects administrators of Windows systems in companies. How do you actually make sure that the central ADMX store for Windows group policies always stays up to date and can be restored in case of corruption? Without up-to-date ADMX files in the store, group policies can't really be used efficiently.<\/p>\n<p><!--more--><\/p>\n<p><img loading=\"lazy\" decoding=\"async\" alt=\"\" src=\"https:\/\/vg08.met.vgwort.de\/na\/25f473693e4a485da4a3fdffc8734fae\" width=\"1\" height=\"1\">It's imho a problem that didn't exist like this before Windows 10 and Microsoft's as-a-service approach with other products like Office or Edge, etc. You only had to update the ADM(X) files at long intervals. The constant Windows 10\/11 feature updates and updates to other Microsoft products mean that the ADMX files are constantly changing. Without an up-to-date ADMX store, group policies that have been newly introduced with a feature update or a new software version are not available.&nbsp; <\/p>\n<p>For non English Windows admins, another problem is that Microsoft itself cannot keep up with its pace. After all, the ADMX policy templates have to be localized. Currently, I have no direct overview of the status, since I do not practically work as an administrator in an enterprise environment. But I know from personal communications last year with consultants working in the Microsoft environment that there were many localization issues with ADMX files.<\/p>\n<h2>Backup and update of the Windows ADMX Store<\/h2>\n<p>Blog reader Karl got me thinking about the topic for this blog post on Twitter. Karl supports various business customers with Windows systems. It is important to have an updated ADMX store for Windows in a central location. And to be able to react quickly in case of a disaster, backups for recovery are also important. Karl puts this up for debate in the following <a href=\"https:\/\/twitter.com\/tweet_alqamar\/status\/1459059810427625473\" target=\"_blank\" rel=\"noopener\">tweet<\/a>.<\/p>\n<p><a href=\"https:\/\/twitter.com\/tweet_alqamar\/status\/1459059810427625473\" target=\"_blank\" rel=\"noopener\"><img decoding=\"async\" title=\"Backup your admx centralized store and Update it\" alt=\"Backup your admx centralized store and Update it\" src=\"https:\/\/i.imgur.com\/2vTL0Xn.png\"><\/a><\/p>\n<p>The short message is actually quite unspectacular: remember to update the centralized ADMX store regularly and don't fail to keep all ADMX files up to date. This is the only way you can use the potential of the latest group policies. <\/p>\n<p>Actually, it goes without saying when you think about it. But it's a thankless job, because this is a white spot for Microsoft. To my knowledge there is no mechanism to keep the ADMX store files up to date and backup them if necessary. How do you guys actually solve it this way?<\/p>\n<blockquote>\n<p>Wolfgang Sommergut has published <a href=\"https:\/\/4sysops.com\/archives\/create-and-update-the-group-policy-central-store-for-admx-templates\/\" target=\"_blank\" rel=\"noopener\">this article<\/a> on 4sysops.com, which deals with how to create a central ADMX store and keep it up to date if necessary. From Ali Tarjan there is <a href=\"https:\/\/www.alitajran.com\/create-central-store-group-policy-for-administrative-templates\/\" target=\"_blank\" rel=\"noopener\">this article<\/a> with hints on how to build a \"Central Store\" for Group Policy Templates (ADMX). And on deploywindows.com there is <a href=\"https:\/\/deploywindows.com\/2015\/08\/20\/how-do-you-update-your-group-policy-admx-files\/#:~:text=You%20can%20get%20these%20ADMX,all%20service%20packs%2C%20patches%20etc.\" target=\"_blank\" rel=\"noopener\">this article<\/a> with hints on how to update GPO template files. Might be well known to administrators, but it looks a lot like \"manual work\" to me, though. <\/p>\n<\/blockquote>\n<h2>A suggested solution<\/h2>\n<p>That Twitter can be a helpful medium, proves itself also in this case. Dennis Mohrmann points in <a href=\"https:\/\/twitter.com\/mohrpheus78\/status\/1459299088726433795\" target=\"_blank\" rel=\"noopener\">this tweet<\/a> to a script (EverGreenAdmx), which should at least keep the ADMX files up to date.<\/p>\n<p><a href=\"https:\/\/twitter.com\/mohrpheus78\/status\/1459299088726433795\" target=\"_blank\" rel=\"noopener\"><img decoding=\"async\" title=\"EverGreenAdmx script to update Admx files\" alt=\"EverGreenAdmx script to update Admx files\" src=\"https:\/\/i.imgur.com\/phbSEpZ.png\"><\/a><\/p>\n<p>Msfreaks has provided the script in question on <a href=\"https:\/\/github.com\/msfreaks\/EvergreenAdmx\" target=\"_blank\" rel=\"noopener\">GitHub<\/a> and writes:&nbsp; After setting up several Windows virtual desktop environments, I decided I didn't want to manually download the admx files I needed, and I wanted a way to keep them up to date.<\/p>\n<p>The script in question solves both problems: it checks for newer versions of the existing Admx files, and processes the new version if found Optionally copies the new Admx files to the Policy Store or Definition folder, or to a folder of choice. The PowerShell script can be downloaded and run in any folder or installed from the PowerShell Gallery with the following command:<\/p>\n<pre>Install-Script -Name EvergreenAdmx<\/pre>\n<p>On GitHub, <a href=\"https:\/\/github.com\/msfreaks\/EvergreenAdmx\" target=\"_blank\" rel=\"noopener\">msfreaks writes<\/a> that he runs the script daily and gives the command in question. It also lists the Microsoft products whose ADMX files are updated by the script. But I can't judge if the script does what Karl or you need. But maybe the topic is helpful for you.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>[German]I'm going to post a topic here on the blog that affects administrators of Windows systems in companies. How do you actually make sure that the central ADMX store for Windows group policies always stays up to date and can &hellip; <a href=\"https:\/\/borncity.com\/win\/2021\/11\/14\/zentralen-windows-admx-store-sichern-und-aktualisieren\/\">Continue reading <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[2221,30,194],"class_list":["post-22122","post","type-post","status-publish","format-standard","hentry","category-windows","tag-gpo","tag-tip","tag-windows"],"_links":{"self":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts\/22122","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/comments?post=22122"}],"version-history":[{"count":0,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts\/22122\/revisions"}],"wp:attachment":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/media?parent=22122"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/categories?post=22122"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/tags?post=22122"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}