BUG: ADDITIVE Keyword Does Not Work in Custom .ADM Files

• Microsoft Windows NT version 4.0

SYMPTOMS

The Resource Kit for Windows 95 and the Platform SDK document how to create custom .ADM files that can be used with the System Policy Editor (POLEDIT.EXE) under the Windows 95 and Windows NT platforms. This documentation refers to the ADDITIVE keyword that you can use to add values to the System Registry via a list box entry in the Policy Editor. The ADDITIVE keyword is documented as follows:

   ADDITIVE
   If specified, values set in the list box are added to whatever values
   exist in the target Registry entry. Existing values are not deleted; by
   default, the content of list boxes will "override" whatever values are
   set in the target Registry. Specifically, a control value is inserted in
   the policy file which causes existing values to be deleted before the
   values set in the policy file are merged.

RESOLUTION

Do not use the ADDITIVE keyword while creating custom .ADM files to be used by the Policy Editor.

STATUS

Microsoft has confirmed this to be a bug in the System Policy Editor (POLEDIT.EXE) component of the Microsoft products listed at the beginning of this article. We are researching this bug and will post new information here in the Microsoft Knowledge Base as it becomes available.

MORE INFORMATION

Below is a sample TEST.ADM file that reproduces the problem with the ADDITIVE keyword. This .ADM file will modify the following key in the Registry:

  "Software\Microsoft\WindowsNT\CurrentVersion\Winlogon\System".

     CLASS MACHINE
     CATEGORY "SYSTEM Startup Programs"
       POLICY "Execute My TEST Program in system context"
         KEYNAME "Software\Microsoft\Windows NT\CurrentVersion\Winlogon"
         PART "Add Entry"
             LISTBOX EXPLICITVALUE ADDITIVE
         END PART
       END POLICY
     END CATEGORY

Steps to Reproduce the Problem

1. First, save your original WINLOGON key by exporting it to a .REG file using the Registry Editor (REGEDTI.EXE).

2. Add the above TEST.ADM file into the System Policy Editor along with WINNT.ADM and COMMON.ADM.

3. Inside the Policy Editor, open the Registry and select the "Execute Custom Program" option listed in the TEST.ADM file above. Add a string like "TEST.EXE" which should be added to the existing value of the Winlogon registry key. Close the Policy Editor saving your changes to the Registry.

4. Open the Registry Editor and check the Winlogon registry key to see if "TEST.EXE" was appended to the key. You will notice that this key only contains "TEST.EXE", and that the original values have been deleted.

5. To restore the Registry back to normal, double-click the .REG file created in Step 1.

REFERENCES

The Template file format for .ADM files is documented in the following places:

• Windows 95 Resource Kit under the section User Profiles and System Services, System Policies
• Platform SDK documentation under the section Setup and Systems Management Services, System Policies