POLICY Name [KEYNAME Subkey] EXPLAIN Help VALUENAME Value [Parts] END POLICY in Visual Studio .NET

Paint DataMatrix in Visual Studio .NET POLICY Name [KEYNAME Subkey] EXPLAIN Help VALUENAME Value [Parts] END POLICY

Name This is the name of the policy as you want to see it in the Group Policy editor. Use a descriptive but short name. Subkey This is an optional subkey of HKLM or HKCU to use for the category. Do not include either root key in the path, though, because the preceding CLASS keyword specifies which of these root keys to use. If you specify a subkey, all subcategories, policies, and parts use it unless they specifically provide a subkey of their own. Enclose names that contain spaces in double quotes. 140

This is the string that the Group Policy editor displays on the Explain tab and on the Extended tab of the policy's dialog box. This is the registry value to modify. Enabling the policy sets the REG_DWORD value to 0x01. Select the Not Configured option or disable the policy, and the policy editor removes the value from the registry. To specify values other than the default 0x01, use the VALUEON and VALUEOFF keywords directly following the VALUENAME keyword:

When you use these keywords, the policy editor sets the registry value to Enabled when you enable the policy and sets the value to Disabled when you disable the policy. The default value type is REG_SZ, but you can change it to REG_DWORD by prefixing the value with the keyword NUMERIC. Regardless, setting the policy to Not Configured removes the value altogether. Example Listing 6 6: example.adm

CLASS MACHINE CATEGORY "Disk Quotas" KEYNAME "Software\Policies\MS\DiskQuota" POLICY "Enable disk quotas" EXPLAIN "Enables and disables disk quotas management." VALUENAME "Enable" VALUEON NUMERIC 1 VALUEOFF NUMERIC 0 END POLICY END CATEGORY

Keywords The valid keywords within a POLICY section include the following: ACTIONLISTOFF ACTIONLISTON END KEYNAME PART VALUENAME VALUEOFF VALUEON HELP POLICY Note Additional keywords are available for policies, but they are for developers creating policy 141

extensions. For example, CLIENTEXT associates a client side extension with a policy via the extension's GUID. I'm not covering these because they don't fit our purposes here.

The EXPLAIN keyword provides help text for a specific policy. In Windows 2000 and Windows XP, each policy's dialog box includes an Explain tab, which provides details about the policy settings. You also see this help text on the Extended tab of the editor's right pane in Windows XP. Each policy you create for Windows 2000 and Windows XP should contain one EXPLAIN keyword followed by a full description of the policy and its settings. Although I don't show this in my examples (trying to keep them simple), you should enclose this keyword between #if version >=3 and #endif to prevent earlier versions of the policy editor from choking on these keywords: Listing 6 7: example.adm

The VALUENAME keyword identifies the registry value that the policy editor modifies when you enable or disable the policy. The syntax is VALUENAME Name. You saw an example of this keyword in the section "POLICY." Unless you set the VALUEON and VALUEOFF keywords, described in the next section, the policy editor creates the policy as a REG_DWORD value: Enabled. Sets the value to 0x01 Disabled. Removes the value Not Configured. Removes the value VALUENAME, VALUEON, and VALUEOFF describe the value that enables and disables the policy. If you want to define additional settings that enable you to collect additional values to refine the policy, you must use the PART keyword. Settings in a PART section are in the bottom part of the policy's dialog box.

You can use the VALUEON and VALUEOFF keywords to write specific values based on the state of the policy. The section "POLICY" contains an example of how these keywords are used. The syntaxes are VALUEON [NUMERIC] Enabled and VALUEOFF [NUMERIC] Disabled. By default, the policy editor creates the value as a REG_SZ value; if you want it to create the value as a REG_DWORD value, prefix it with the NUMERIC keyword. For example:

VALUEON 0 // Created as a REG_SZ value containing "0" VALUEOFF NUMERIC 1 // Created as a REG_DWORD value containing 0x01