I need some clarification about updating Group Policy Templates (.admx, .adml) on a local Windows 10 machine please. Information on the web is not very clear.
Are the Administrative Templates downloaded from the MS website (for example, the 21H1 templates can be found at https://www.microsoft.com/en-us/download/details.aspx?id=103124) meant to update just a single, local computer? Or are they meant to update templates on a Central Store Server that handles multiple computers on a network? Or both?
If the Administrative Templates are used to update a local computer, what the correct procedure for doing so? When the Administrative Template MSI files downloaded from MS are executed, the newest template files are copied into the Program Files directory only. Does the user have to manually copy the .admx and .adml files into the %systemroot%\PolicyDefinitions folder?
It appears that each feature update also updates MOST of the Administrative Templates in the %systemroot%\PolicyDefinitions folder, but a couple are not updated, such as windowsmediadrm.admx and windowsmediaplayer.admx which involve Windows Media Player. However, the %systemroot%\PolicyDefinitions folder is protected and the older .admx, .adml files cannot be overwritten with newer files by simply copying without changing the owner from TrustedInstaller to User. Am I supposed to overwrite older templates with newer ones and is there a better way to update without changing owner?
The Administrative Templates downloaded from MS also include grouppolicypreferences.admx and mmcsnapins2.admx which are not included in %systemroot%\PolicyDefinitions. What do they do are are they intended for administering other network computers and, thus, unnecessary?
Are the Administrative Templates downloaded from the MS website for each feature update cumulative? Meaning, if you start with a fresh install of 21H1, you don't need to back install the previous templates (such as 20H1, 20H2, etc.) before installing the 21H1 templates? I am pretty sure each update is cumulative but I wanted to ask anyway.
For installing Administrative Templates for other programs, such as Office, OneDrive, Edge....these templates are not included in a Windows installation. I assume these .admx and .adml files are just copied into the %systemroot%\PolicyDefinitions folder?