User Extensible policies are contained in the User Package; Computer Extensible policies are contained in the Workstation Package. This topic applies to both packages; however, keep in mind the differences between the two packages. When you set User Extensible policies, the policies apply to all associated users regardless of which computer they log in to in your Desktop Management system. When you set Computer Extensible policies, the policies apply to all users who log in to the associated computer.
The User Extensible policies set user-based policies (from .adm files) for associated User, Group, or Container objects; the Computer Extensible policies set computer-based policies (from .adm files) for Workstation, Group, or Container objects.
These policies are not found on the General or Windows XP platform pages. Extensible policies are not supported on Windows* XP. You should use Windows Group policies to configure policies for Windows XP systems. Additionally, we recommend that you use Windows Group policies instead of extensible policies for Windows 2000 or newer. You should continue using extensible policies for the Windows 9.x/NT platforms.
Files with the .adm extension provide customizable attributes for users and workstations. You can add existing .adm files and configure their settings to create extensible policies. Depending on whether you are configuring User Extensible policies or Computer Extensible policies, the attributes you can customize will vary.
Extensible policies are not cumulative. Unless specified differently in a Search policy, when Desktop Management starts searching for an object's associated policy packages, it starts at the object and works its way up the tree. Because extensible policies are not cumulative, Desktop Management walks the tree until it finds the first effective policy for the object and applies that policy's settings.
The User Package or Workstation Package must be associated for the extensible policy to be in effect.
You can also schedule the extensible policy, rather than accept the default of Package Schedule. To do so, click the Policy Schedule tab before exiting the Extensible Policies dialog box. Click Help for detailed information.
Hint: For a Windows 98 User Extensible policy, even if you select User Login on the Policy Schedule page, the Color Scheme settings are not applied until the user logs out. When the user logs in again, the settings will be correct. However, if you first create a user profile on the workstation under Control Panel > Users, the settings are applied when the user logs in the first time.
Extensible policies are not supported on Windows XP. You should use Windows Group policies to configure policies for Windows XP systems.
ADM Files
Lists the .adm files for the current policy package. You can add or remove a
.adm file from this list.
Click a .adm file to view its attributes in the Policies box.
Policies
Displays the policy attributes for the selected .adm file. You can expand and
traverse the policy tree to enable or disable each policy attribute. For information
on the different states of a policy check box, see Check
Box States.
The box below the Policies box displays other attribute options with check boxes that can be enabled or disabled. It can also provide fields for information entry, or drop-down boxes for selecting attribute options.
Add
Adds a .adm file for the current policy package. Enter the full path to the
.adm file, or browse for the file.
Remove
Deletes the selected .adm file from the policy. Removing it means you also remove
any policies that were in place as defined by that .adm file.
WARNING: Do not manually delete a .adm file from its directory without first removing it in ConsoleOne® from the ADM Files list. If you delete it from the directory first, registry changes that enable the policy are still in effect.
Always Update Extensible Policies on eDirectory Authentication
Allows extensible policies to be pushed when the user or workstation is authenticated.
Apply
Click to copy the policy changes to Novell® eDirectoryTM
. Until you click Apply, policy changes are kept in a temporary location. Because
of this, if two .adm files have the same check box item attribute (the same
Windows registry entry), a change made in one .adm file is seen in the other.
ZENworks
Desktop Management Online Documentation
A trademark symbol (®, TM, etc.) denotes a Novell trademark. An asterisk denotes a third-party trademark. For information on trademarks, see Legal Notices.