Skip to content

Add an ADMX template for every StartSet setting - #27

Merged
rodchristiansen merged 1 commit into
mainfrom
feature/admx-policy
Oct 8, 2026
Merged

rodchristiansen merged 1 commit into
mainfrom
feature/admx-policy

Conversation

@rodchristiansen

Copy link
Copy Markdown
Collaborator

Closes #26

  • resources/StartSet.admx and resources/en-US/StartSet.adml: one machine policy per setting under HKLM\SOFTWARE\Policies\StartSet, in categories matching the Prefs tab groups (Network, Execution, Login, Logging), plus Security for the policy-only ManifestSigningKey (REG_SZ, base64 Ed25519 public key).
  • Toggles write REG_DWORD 1/0, numbers REG_DWORD (decimal element), LogLevel REG_SZ (enum), lists REG_MULTI_SZ (multiText), matching what PreferenceResolver accepts.
  • PolicyTemplateTests fails when a setting has no policy, has the wrong element type or category, or when a string, presentation or category reference does not resolve. It also checks each value, written as the template writes it, is read as policy and locks the Prefs field.
  • README points at the template.

No code change was needed: settings are resolved by reflection, so every Prefs field is already read from policy and locked when policy supplies it.

resources/StartSet.admx and en-US/StartSet.adml define one machine policy per
setting under SOFTWARE\Policies\StartSet, grouped like the Prefs tab: toggles as
REG_DWORD 1/0, numbers as REG_DWORD, LogLevel as REG_SZ and lists as
REG_MULTI_SZ. A Security category carries ManifestSigningKey, a policy-only
REG_SZ for the manifest signing public key.

PolicyTemplateTests checks that every setting has a policy of the right type in
its Prefs group, that a value written as the template writes it is read as
policy and locks the field, and that every string, presentation and category
reference resolves.
@rodchristiansen
rodchristiansen deleted the feature/admx-policy branch October 8, 2026 12:21
@rodchristiansen
rodchristiansen restored the feature/admx-policy branch October 8, 2026 12:23
@rodchristiansen
rodchristiansen merged commit 8a1924d into main Oct 8, 2026
2 checks passed
@rodchristiansen
rodchristiansen deleted the feature/admx-policy branch October 8, 2026 12:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Ship an ADMX template for StartSet settings

1 participant