Link to home
Start Free TrialLog in
Avatar of EvilPeppard
EvilPeppard

asked on

Default group policy edit error

I just discovered when I edit my default group policy on my main domain controller, I initially get this message two times.  I say 'ok' to each popup, then I can work on my default group policy accordingly.

I am running a 2003 server function level domain.  The DC is running the latest windows updates.

Can anyone shed some light on what this error may be and how I can resolve it, please?  I am happy to supply any other information as needed.  Thanks.
GPO-edit-error1.JPG
Avatar of Mike Kline
Mike Kline
Flag of United States of America image

So it means that in that group policy (you can find the GPO GUID in GPMC) you have a category entry in the system.adm file labeled !!AdministrativeServices and there is no corresponding AdministrativeServices="explanation" entry in the [strings] sectioin of the file.
Not a big deal but you can open up a text editor and fix it if you want.
similar issue here:   http://www.minasi.com/forum/topic.asp?TOPIC_ID=22459
Thanks
 
Mike
This error is prompting because it cannot find the ADM file or the ADM file (custome file) you have created has improper syntax.

- What you can do is open GPMC.msc on your DC
- Expand Computer Configuration
- Right click on Administrative Templates and click Add/Remove
- From here view the the ADM files it has listed default ADM templates are (conf, inetres, system, wmplayer, wuau)

If you cannot find the ADM file under Computer Configuration expand User Config and do the same procedure. Either remove the ADM file or fix the synatx on the Cusotme ADM template.

Hope this helps~!
Avatar of EvilPeppard
EvilPeppard

ASKER

I have attached my system.adm along with the text from the area you are referring to.  I do not want to mess anything up.  Could you tell me what I should edit or remove, please?  Thanks again in advance.

From my system.adm file:

CLASS MACHINE

CATEGORY !!AdministrativeServices
      #if version >= 4
      EXPLAIN !!AdministrativeServices_Help
      #endif

      POLICY !!HelpQualifiedRootDir_Comp
            #if version >= 4
            SUPPORTED !!SUPPORTED_IE6SP1
            #endif

            KEYNAME "Software\Policies\Microsoft\Windows\System"
            EXPLAIN !!HelpQualifiedRootDir_Help

            PART !!HelpQualifiedRootDir_Edit EDITTEXT
                  VALUENAME "HelpQualifiedRootDir"
            END PART

            PART !!HelpQualifiedRootDir_Example TEXT
            END PART

      END POLICY
In tha policy is there a "strings" section (after what you cut and pasted)
Example of a custom ADM and the strings section   http://support.microsoft.com/kb/231289
Fear of messing something up is normal...you can backup the GPO in GPCM too.
Thanks
Mike
@mkline71:

No "strings" section.  When I search the entire system.adm file for 'strings' or 'string' I get no results.

I attached the complete system.adm in my previous post for reference too.
Try downloading the "Group Policy ADM files" here
 
http://www.microsoft.com/downloads/en/details.aspx?FamilyID=92759d4b-7112-4b6c-ad4a-bbf3802a5c9b&displaylang=en 
 
and replace the system.adm file
@dstewartjr:

If I replace my current system.adm with one from your link, will I screw up my current default group policy?

Also, if I do try your solution, can I just rename my current system.adm to something like 'system.adm.old' and download the file from your link?  If the downloaded file causes problems, can I just delete it and rename my old file back to system.adm?
<<If I replace my current system.adm with one from your link, will I screw up my current default group policy?>>
No

 
<<Also, if I do try your solution, can I just rename my current system.adm to something like 'system.adm.old' >>
sure
 
Also in the future you shouldnt be editing the "Default Group Policy" you should always create and link a new GPO.
That is the entire file; checked a DC in our lab under strings for that one it says
"administrativeservices=system"  
Thanks
Mike
@dstewartjr:

Unfortunately, the link you provided to download the replacement *.adm files only has files through Windows Server 2003 SP1.  I am running Windows Server 2003 SP2 and do not see an installer file for that version of operating system.
@mkline71

Could you tell me exactly what I need to put back in the file?  As I stated, I have nothing referring to 'strings' in my system.adm file.

I have reattached my system.adm file for reference.  This time I renamed it so it would stay attached.


system.adm.txt
SOLUTION
Avatar of Mike Kline
Mike Kline
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
It will still work for you, there is no changes to the system.adm from sp1 to sp2....it installs to a folder of your choice and then you can place the system.adm appropriately in the correct folder.
Your system.adm is missing quite a bit, yours has only 2288 lines compared to what should be 13797 lines.
@mkline71:

I checked one of my other DCs (DC02) and it DID have a 'scripts' section.  I am attaching it for reference.

The DC with information missing from the system.adm is named DC01.

Now what?  Can I just copy the system.adm from DC02 to DC01 and see if my errors go away?


system.adm.dc02.txt
@dstewartjr:

Please check the system.adm I took from one of my other DCs.  It did have a 'scripts' section.
ASKER CERTIFIED SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
@dstewartjr:

Ok, I downloaded the templates from the link you provided, renamed the existing system.adm to 'system.adm.old' and copied over the newly downloaded system.adm.  I have attached the newly replaced system.adm for reference.

Let me know your thoughts.  Thank you again for everyone's assistance.
system.adm.dc01-replaced.txt
That looks better ; ^ )
I have verified I am no longer getting the error as listed in my initial screen shot.  Is there anything else I need to do?  Do I need to copy this same system.adm to my other DCs?

What is next, please?
I would and then you should be fine.
Looks like my DC01 already replicated the newly replaced system.adm to the other two DCs.

Thank you all again for your help.
Good work...no more errors :)
Excellent and quick feedback.