Adding a registry setting

[araczek]

Hi-
I need to diable SSLv2 on all machines. I made the registry setting and exported it. Then I used RegtoADM from NUTS to convert it to an ADM file. I imported the ADM but have trouble with putting in the proper value. To disable SSLv2 you need to put in a dword
"Enable" and set it to 0 (zero). GPMC will not let me set a zero value so this policy is basically useless.

FYI native server 2003 domain. Relutant template is below:

CLASS MACHINE

CATEGORY "SYSTEM\CurrentControlSet\Control\SecurityProvider s\SCHANNEL\Protocols\SSL 2.0\Server"
KEYNAME "SYSTEM\CurrentControlSet\Control\SecurityProvider s\SCHANNEL\Protocols\SSL 2.0\Server"

POLICY "Enabled"
PART "Enabled"
NUMERIC
VALUENAME "Enabled"
END PART
END POLICY

END CATEGORY

[araczek]

Okay, found problems with RegtoAdm output, this is what I have which still doesn't work, get a syntax error on 'VALUE', or same thing if I try VALUEON NUMERIC 1, VALUEOFF NUMERIC 0 (after valuename)

CLASS MACHINE

CATEGORY "SYSTEM\CurrentControlSet\Control\SecurityProv ider s\SCHANNEL\Protocols\SSL 2.0\Server"
KEYNAME "SYSTEM\CurrentControlSet\Control\SecurityProv ider s\SCHANNEL\Protocols\SSL 2.0\Server"

POLICY "Enabled"
PART "Enabled" NUMERIC
VALUENAME "Enabled"
VALUE NUMERIC 0
END PART
END POLICY

END CATEGORY

[robingp]

hi araczek,

don't use regtoadm tool ... it is NUTS <eg> ...

assuming you really want to set the value mentioned to "0" if "enabled" is chosen the following custom adm template WILL definitely Do the job :-)

it comes with explain and on / off values ... your sample was still quite wrong formatted :-(

btw.: to check and generate adm's and amdx's use adm/admx template editor INSTEAD, it's freeware version is readonly, but helps!

see SysPro Software -> News

cu rainer



CLASS MACHINE

CATEGORY "Template for SSLv2"

POLICY "Enable SSLv2"
KEYNAME "SYSTEM\CurrentControlSet\Control\SecurityProvider s\SCHANNEL\Protocols\SSL 2.0\Server"
EXPLAIN !!SSLv2_Explain
VALUENAME "Enabled"
VALUEON NUMERIC 0
VALUEOFF NUMERIC 1
PART "Enable Support for SSLv2 for Servers" TEXT END PART
END POLICY


END CATEGORY

[strings]
SSLv2_Explain="This setting controls the behaviour of SSLv2 for Servers."