22 Installing Administrative Templates

Administrative Templates allow you to define policies that can be administered from the Group Policy Management Editor.

The samba-tool gpo admxload command copies ADMX templates to the <domain>/Policies/PolicyDefinitions directory on the SYSVOL share. After installing any ADMX templates, you MUST install Microsoft’s ADMX templates also, otherwise you will be unable to administer Windows domain members (see section 22.4).

The following is instructions on how to obtain and install the various ADMX templates that are used by Samba.

22.1 Install Samba ADMX Templates

The Samba ADMX templates are available in the Samba source tree, and can be downloaded from https://download.samba.org/pub/samba/samba-latest.tar.gz, and can then be installed using the samba-tool gpo admxload command.

> tar -xf samba-latest.tar.gz
> samba-tool gpo admxload \
 --admx-dir=./samba-4.18.0/libgpo/admx -UAdministrator

Warning: There are several bugs in the GNOME Settings ADMX templates in Samba versions less than 4.18, which prevents them from being displayed in some versions of the Group Policy Management Editor (GPME). Please use the templates from a newer version of the Samba sources.

22.2 Installing Firefox ADMX Templates

Download the Firefox ADMX templates from https://github.com/mozilla/policy-templates/releases, then extract and install them to your SYSVOL using the samba-tool gpo admxload command.

> tar -xf v4.4.tar.gz
> samba-tool gpo admxload \
 --admx-dir=./policy-templates-4.4/windows -UAdministrator

22.3 Installing Chromium ADMX Templates

Download the Chromium ADMX templates from https://support.google.com/chrome/a/answer/187202, then extract and install them to your SYSVOL using the samba-tool gpo admxload command.

> unzip policy_templates.zip
> samba-tool gpo admxload --admx-dir=./windows/admx \
 -UAdministrator

22.4 Installing Windows ADMX Templates

Download the Windows ADMX templates from https://www.microsoft.com/en-us/download/102157, then extract and install them to your SYSVOL using the samba-tool gpo admxload command.

> msiextract Administrative\ Templates\ \(.admx\)\ for\
             Windows\ 10\ October\ 2020\ Update.msi
> cd ./Program\ Files/Microsoft\ Group\ Policy
> cd Windows\ 10\ October\ 2020\ Update\ \(20H2\)
> samba-tool gpo admxload  --admx-dir=./PolicyDefinitions \
 -UAdministrator