Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.

Windows 7: ADMX Templates vs Registry files

14 Jun 2012   #1

Windows 7 Professional
ADMX Templates vs Registry files

Hi all,

I'm working on hardening a Windows 7 host. I was given a spreadsheet with all the settings that it needs to be hardened with, so I went ahead and applied those. However, it sounds like in the future we will have more Win7 hosts that will also need to be hardened, so I'd like to try and automate/streamline this process somehow.

What I've done so far (and now I'm not sure I'm doing the right thing) is create a Security Template (.inf file) using MMC. For the rest of the settings, I've downloaded the ADMX templates from the Microsoft website, and I've been "configuring" those with the settings that are outlined in the spreadsheet given to me.

That said, I haven't actually tested the templates. I'm currently working on converting an old .adm file to .admx. Then it hit me: is this even the best way to go about this? Should I just create a big .reg file containing all these keys, and then run them on the target boxes?

What do y'all think? What has been your experience with Windows 7 hardening? Am I going down the right path?

Thanks in advance!

My System SpecsSystem Spec
14 Jun 2012   #2

Windows 8.1 Pro RTM x64

Hi Pedro and welcome to W7 Forums

It all depends. Many of the settings will have an equivalent in the Registry, but not all. In addition, some Registry settings will need to be applied from an administrative account whereas others will need applying separately for each user. Without knowing the settings you're working with, we cannot say for sure what your best cause of action will be.
My System SpecsSystem Spec
14 Jun 2012   #3

Windows 7 Professional

I see. Well, it is comforting to know that there's a chance I didn't waste ~4 hours today setting up templates. I'll test out the templates I've been working on and see if they work, and depending on how that goes I may just try to "automate" as much as I can using registry values (since, to my current knowledge, are easier to apply than a template).

That makes sense that some values may need to be set for individual users. I believe all of what I'm dealing with are admin-side policies/settings, so I think I'm off the hook on that.

Y'know, it's taken me a lot of time to try and "automate" all this. I hope that whenever I'm done, the amount of time it took me to work on this is still less than the amount of time that it would take to configure the computers manually! :/

Thanks for your reply, and for welcoming me to the forums :)
My System SpecsSystem Spec


 ADMX Templates vs Registry files

Thread Tools

Similar help and support threads
Thread Forum
How To Move Saved New Templates From My Documents To My Templates?
I changed a standard word template that appeared in 'Available Templates' on Word 2010 to suit my needs. I followed some online advice about saving the new/amended template as a Word template in 'My Templates'. However, whatever I did, I couldn't save the template there and had to save it in...
Microsoft Office
Text (.txt) files behaving like registry files
When I double click a file with the .txt extension it asks if it wants to be added to the registry:
General Discussion
fix registry files
hi when i click on my registry files (.reg) and select merge , reg files was open with note pad how can i fix this problem? please help me
General Discussion
.reg files open Notepad - do not change registry to read older files
Running Win7Pro 64-bit. Am unable to open older Office 97 files with Office2003 which is installed and running fine. I found a couple of files here and elsewhere with .reg extensions that were supposed to make the necessary registry changes. eg. "UnlockWord.reg" and a more elaborate-looking...
Microsoft Office
Driver Sweeper can't delete all registry files in registry editor So this is the situation: I've unistalled Amd Driver from Device Manager, Unistalled Catalyst software and ran Driver Sweeper. There is only 3 registeries that the Driver Sweeper CAN'T delete and these are under SYSTEM\ folder. I've tried to change user...

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 16:24.
Twitter Facebook Google+