EvilPeppard
asked on
Default group policy edit error
I just discovered when I edit my default group policy on my main domain controller, I initially get this message two times. I say 'ok' to each popup, then I can work on my default group policy accordingly.
I am running a 2003 server function level domain. The DC is running the latest windows updates.
Can anyone shed some light on what this error may be and how I can resolve it, please? I am happy to supply any other information as needed. Thanks.
GPO-edit-error1.JPG
I am running a 2003 server function level domain. The DC is running the latest windows updates.
Can anyone shed some light on what this error may be and how I can resolve it, please? I am happy to supply any other information as needed. Thanks.
GPO-edit-error1.JPG
This error is prompting because it cannot find the ADM file or the ADM file (custome file) you have created has improper syntax.
- What you can do is open GPMC.msc on your DC
- Expand Computer Configuration
- Right click on Administrative Templates and click Add/Remove
- From here view the the ADM files it has listed default ADM templates are (conf, inetres, system, wmplayer, wuau)
If you cannot find the ADM file under Computer Configuration expand User Config and do the same procedure. Either remove the ADM file or fix the synatx on the Cusotme ADM template.
Hope this helps~!
- What you can do is open GPMC.msc on your DC
- Expand Computer Configuration
- Right click on Administrative Templates and click Add/Remove
- From here view the the ADM files it has listed default ADM templates are (conf, inetres, system, wmplayer, wuau)
If you cannot find the ADM file under Computer Configuration expand User Config and do the same procedure. Either remove the ADM file or fix the synatx on the Cusotme ADM template.
Hope this helps~!
ASKER
I have attached my system.adm along with the text from the area you are referring to. I do not want to mess anything up. Could you tell me what I should edit or remove, please? Thanks again in advance.
From my system.adm file:
CLASS MACHINE
CATEGORY !!AdministrativeServices
#if version >= 4
EXPLAIN !!AdministrativeServices_H elp
#endif
POLICY !!HelpQualifiedRootDir_Com p
#if version >= 4
SUPPORTED !!SUPPORTED_IE6SP1
#endif
KEYNAME "Software\Policies\Microso ft\Windows \System"
EXPLAIN !!HelpQualifiedRootDir_Hel p
PART !!HelpQualifiedRootDir_Edi t EDITTEXT
VALUENAME "HelpQualifiedRootDir"
END PART
PART !!HelpQualifiedRootDir_Exa mple TEXT
END PART
END POLICY
From my system.adm file:
CLASS MACHINE
CATEGORY !!AdministrativeServices
#if version >= 4
EXPLAIN !!AdministrativeServices_H
#endif
POLICY !!HelpQualifiedRootDir_Com
#if version >= 4
SUPPORTED !!SUPPORTED_IE6SP1
#endif
KEYNAME "Software\Policies\Microso
EXPLAIN !!HelpQualifiedRootDir_Hel
PART !!HelpQualifiedRootDir_Edi
VALUENAME "HelpQualifiedRootDir"
END PART
PART !!HelpQualifiedRootDir_Exa
END PART
END POLICY
In tha policy is there a "strings" section (after what you cut and pasted)
Example of a custom ADM and the strings section http://support.microsoft.com/kb/231289
Fear of messing something up is normal...you can backup the GPO in GPCM too.
Thanks
Mike
Example of a custom ADM and the strings section http://support.microsoft.com/kb/231289
Fear of messing something up is normal...you can backup the GPO in GPCM too.
Thanks
Mike
ASKER
@mkline71:
No "strings" section. When I search the entire system.adm file for 'strings' or 'string' I get no results.
I attached the complete system.adm in my previous post for reference too.
No "strings" section. When I search the entire system.adm file for 'strings' or 'string' I get no results.
I attached the complete system.adm in my previous post for reference too.
Try downloading the "Group Policy ADM files" here
http://www.microsoft.com/downloads/en/details.aspx?FamilyID=92759d4b-7112-4b6c-ad4a-bbf3802a5c9b&displaylang=en
and replace the system.adm file
http://www.microsoft.com/downloads/en/details.aspx?FamilyID=92759d4b-7112-4b6c-ad4a-bbf3802a5c9b&displaylang=en
and replace the system.adm file
ASKER
@dstewartjr:
If I replace my current system.adm with one from your link, will I screw up my current default group policy?
Also, if I do try your solution, can I just rename my current system.adm to something like 'system.adm.old' and download the file from your link? If the downloaded file causes problems, can I just delete it and rename my old file back to system.adm?
If I replace my current system.adm with one from your link, will I screw up my current default group policy?
Also, if I do try your solution, can I just rename my current system.adm to something like 'system.adm.old' and download the file from your link? If the downloaded file causes problems, can I just delete it and rename my old file back to system.adm?
<<If I replace my current system.adm with one from your link, will I screw up my current default group policy?>>
No
<<Also, if I do try your solution, can I just rename my current system.adm to something like 'system.adm.old' >>
sure
Also in the future you shouldnt be editing the "Default Group Policy" you should always create and link a new GPO.
No
<<Also, if I do try your solution, can I just rename my current system.adm to something like 'system.adm.old' >>
sure
Also in the future you shouldnt be editing the "Default Group Policy" you should always create and link a new GPO.
That is the entire file; checked a DC in our lab under strings for that one it says
"administrativeservices=sy stem"
Thanks
Mike
"administrativeservices=sy
Thanks
Mike
ASKER
@dstewartjr:
Unfortunately, the link you provided to download the replacement *.adm files only has files through Windows Server 2003 SP1. I am running Windows Server 2003 SP2 and do not see an installer file for that version of operating system.
Unfortunately, the link you provided to download the replacement *.adm files only has files through Windows Server 2003 SP1. I am running Windows Server 2003 SP2 and do not see an installer file for that version of operating system.
ASKER
@mkline71
Could you tell me exactly what I need to put back in the file? As I stated, I have nothing referring to 'strings' in my system.adm file.
I have reattached my system.adm file for reference. This time I renamed it so it would stay attached.
system.adm.txt
Could you tell me exactly what I need to put back in the file? As I stated, I have nothing referring to 'strings' in my system.adm file.
I have reattached my system.adm file for reference. This time I renamed it so it would stay attached.
system.adm.txt
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
It will still work for you, there is no changes to the system.adm from sp1 to sp2....it installs to a folder of your choice and then you can place the system.adm appropriately in the correct folder.
Your system.adm is missing quite a bit, yours has only 2288 lines compared to what should be 13797 lines.
ASKER
@mkline71:
I checked one of my other DCs (DC02) and it DID have a 'scripts' section. I am attaching it for reference.
The DC with information missing from the system.adm is named DC01.
Now what? Can I just copy the system.adm from DC02 to DC01 and see if my errors go away?
system.adm.dc02.txt
I checked one of my other DCs (DC02) and it DID have a 'scripts' section. I am attaching it for reference.
The DC with information missing from the system.adm is named DC01.
Now what? Can I just copy the system.adm from DC02 to DC01 and see if my errors go away?
system.adm.dc02.txt
ASKER
@dstewartjr:
Please check the system.adm I took from one of my other DCs. It did have a 'scripts' section.
Please check the system.adm I took from one of my other DCs. It did have a 'scripts' section.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
@dstewartjr:
Ok, I downloaded the templates from the link you provided, renamed the existing system.adm to 'system.adm.old' and copied over the newly downloaded system.adm. I have attached the newly replaced system.adm for reference.
Let me know your thoughts. Thank you again for everyone's assistance.
system.adm.dc01-replaced.txt
Ok, I downloaded the templates from the link you provided, renamed the existing system.adm to 'system.adm.old' and copied over the newly downloaded system.adm. I have attached the newly replaced system.adm for reference.
Let me know your thoughts. Thank you again for everyone's assistance.
system.adm.dc01-replaced.txt
That looks better ; ^ )
ASKER
I have verified I am no longer getting the error as listed in my initial screen shot. Is there anything else I need to do? Do I need to copy this same system.adm to my other DCs?
What is next, please?
What is next, please?
I would and then you should be fine.
ASKER
Looks like my DC01 already replicated the newly replaced system.adm to the other two DCs.
Thank you all again for your help.
Thank you all again for your help.
Good work...no more errors :)
ASKER
Excellent and quick feedback.
Not a big deal but you can open up a text editor and fix it if you want.
similar issue here: http://www.minasi.com/forum/topic.asp?TOPIC_ID=22459
Thanks
Mike