ADMX Files and Windows Server 2003 AD

3rd question:
No, you need either Vista or Windows 2008 to manage GPOs that require ADMX.

Great support kb article, oBdA! Haven't seen it before.

Please tell me if I am wrong regarding the following points:

1- Basically , Windows 2003 servers store the ADM files under:

C:\WINDOWS\SYSVOL\sysvol\DOMAIN.LOCAL\Policies

while Vista and 2008 stores the policy files under:

C:\windows\PolicyDefinitions


2- In a typical 2003 environment ADMX files do not exist by default

3- In order to extend the functionality of the domain GPO policy interface , we have to download indivisual ADMX files in order to be able to manage new MS products that were released after 2003 and that includes Vista , 2008 , Office 2007 , etc

4- In a Windows 2003 typical domain environment , domain controllers will replicate the ADM files to each Sysvol folder on each domain controller as part of AD replication process

5 - Windows 2003 machines cannot be used to manage ADMX files and related settings.In order for us to do that , we have to use a 2008 or Vista machine in order to manage domain-wide settings

If all of the above is true , then please consider the following question:

Will the GPO management machine (Vista or 2008) replicate (or update) the Sysvol folder on all domain controllers that are running Windows server 2003?

Regards

Some answers from http://support.microsoft.com/kb/929841


The files that are in the Central Store are later replicated to all domain controllers in the domain.

Windows Vista does not include Administrative Templates that have an .adm extension. Additionally, earlier versions of Windows cannot use the new administrative format. Therefore, client computers that are running earlier versions of Windows cannot administer new policies that are included with Windows Vista. We recommend that you use computers that are running Windows Vista or later versions of Windows to perform Group Policy administration.

Your points are all correct.
To get ADMX files replicated automatically, follow the kb article posted by oBdA.
And if you want to update ADMX files in your entire domain, you have to copy them to your replicated PolicyDefinitions folder on your domain controller.

Thank you , so by simply implementing ADMX files on either Vista or 2008 domain member machine , the Sysvol folders on actual DC running 2003 will not be updated automatically

Sorry but I am little confused and don't have enogh time to read MS articles

Good , what about changes being made from Vista or 2008 machines , will those be replicated to other DCs (sysvol) as well?

REgards

The GPO itself resides in the same places as in earlier versions of Windows within the SysVol structure, so replication takes place independent from the OS you used to edit it.

Here is our setup:

• DC1 & DC2 as our domain controllers running Windows server 2003 AD 
• All clients are running Vista business 
• A single Windows server 2008 server (domain member only) is being used as a management station 
• A single Vista business with RSAT installed to manage the domain 

Now by default , Windows server 2003 DCs are preconfigured with all necessary ADM files

Its said that ADMX files can only be incorporated into 2008 and Vista machines.While the GPO settings are being added and managed say from the 2008 machine , will those settings be replicated to all other DCs and be also available to the Vista-based management node?

Sorry , but I am still confused

What exactly is confusing you?
You can edit a logon script in the netlogon share from any machine in the network; the exact same thing happens with GPOs.
The management consoles edit and store files that live in the Sysvol tree; that's all.
The Sysvol tree is then replicated by the NTFRS to all DCs, and this has nothing, really nothing at all, to do with group policy management tools, and on which OS they run.
It's as simple as that. Really.

So changes that are made to C:\WINDOWS\SYSVOL\sysvol\DOMAIN.LOCAL\Policies in 2008 or Vista machine will be replicated to C:\windows\PolicyDefinitions on all DCs running 2003?

I have checked the contents of both and they do not match

What is really confusing me is that changes to GPO made from 2008 or vista machine will not appear under DCs running 2003 and thus if the 2008 or vista machine is down then all settings are lost or at least become inaccessible!

Please explain

OK , here is what I have done so far:

Following MS article http://support.microsoft.com/kb/929841 , I have done the followings:

• Created a folder called PolicyDefinitions under C:\WINDOWS\SYSVOL\sysvol\FQDN\Policies on one of our 2003 domain controllers 
• Copied all ADMX files from a normal Vista machine (C:\windows\PolicyDefinitions) to the 2003 DC path specified above 
• Copied all language files from the same Vista machine (C:\windows\PolicyDefinitions\en-US) to the same DC under (C:\WINDOWS\SYSVOL\sysvol\FQDN\Policies\PolicyDefinitions\en-US) 
• I have also done the same with Office 2007 files extracted from the MS download link
   

Now all Vista & Office 2007 ADMX and ADML files are stored on one 2003 DC
Next , I initiated manual replication to all other 2003 DCs.Replication was successful and the new PolicyDefinitions folder has been successful replicated to other DCs

Using a 2008 management station , all Vista & Office 2007 related GPO settings are now available :)

I have noticed that all Vista and Office ADMX files were stored under the same folder.The same applies for the language files
I am not sure if its possible to create a sub-folder for each , one for vista , one for Office and so on
Although the GPO editor is clearly grouping them separately as in the following screen capture

Give it a try, but I believe it won't recognize ADMX files in subfolders.