Solved

Setting 2008 Domain Policy

Posted on 2008-10-21
10
332 Views
Last Modified: 2012-05-05
Hi, we currently have 3 DC's, all using win 2008 Server.  With Win 2000 Server, when we set a domain policy on one DC, the other two would pick it up.  When we try this with the 2008 DC's, the other two DC's don't pick it up.  My question is, how do we set a domain policy on one DC, and have it used by the other two?

Thanks
0
Comment
Question by:crobotti
  • 5
  • 4
10 Comments
 
LVL 58

Expert Comment

by:tigermatt
ID: 22770645

If all the DCs are member of the same domain then they should replicate in due course and the setting will be visible in Group Policy Management on the other DCs after a while.

If the DCs are in the same site, the default settings mean replication should be almost instantaneous, although this may not be the case.

-tigermatt
0
 
LVL 58

Expert Comment

by:tigermatt
ID: 22770662

Sorry, just to clarify my above post, any changes to Active Directory (Group Policy, User Accounts, Computer Accounts etc.) should automatically replicate to the other Domain Controllers in the domain after a while, but it all depends on the configured replication topology for the network. If the DCs are not members of the same domain, then they have completely separate Active Directory domains and therefore Group Policy will not be the same between them; if they are members of the same domain, you may have to wait a while for replication to take place.

-tigermatt
0
 
LVL 31

Expert Comment

by:Henrik Johansson
ID: 22772207
As stated, this shall work automatically. Check with AD Sites and Services that replication links are configured correctly.

Is replication working when modifying users?
Firewall/DNS/routing issue?
Anything in eventlogs?
0
 

Author Comment

by:crobotti
ID: 22778229
Maybe I mistated my question.  In Win 2000 AD, when we wanted to change a domain policy, we would right click the domain name in AD Users and Computers, select Properties, and from the Policy tab, we would change the domain policies.  In Win 2008 AD, this option is not available as a right click.  My question is, where to change the Policies that affect the whole domain, is it by running gpedit from a DC (which may take a while to propagate), or would that only change the Policies local to that DC?

User replication has no issues, same with firewall/DNS/routing.  Also, all DC's are located in the same building, in two different subnets.  But as above, routing isn't an issue.

Sorry for not stating this better for you all, bit I greatly appreciate the help
0
 
LVL 58

Accepted Solution

by:
tigermatt earned 500 total points
ID: 22779048

Ah, I understand you now! There's a much better tool out there which overwrites the right-click > Group Policy option known as Group Policy Management, which essentially enables you to see where all policies are linked across the domain in much more detail. This is installed by default on Server 2008 and is the tool to use when you are making GPO changes. Access it from Start > (Control Panel >) Administrative Tools > Group Policy Management.

-tigermatt
0
Are end users causing IT problems again?

You’ve taken the time to design and update all your end user’s email signatures, only to find out they’re messing up the HTML, changing the font and ruining the imagery. What can you do to prevent this? Find out how you can save your signatures from end users today.

 

Author Comment

by:crobotti
ID: 22780182
I don't see it listed.  This DC was originally Win 2000 Server upgraded to Win 2008 Server with the quick stop at Win 2003 Server.  Maybe I'll need to install it?  If so, any ideas on that?

Thanks
0
 
LVL 58

Expert Comment

by:tigermatt
ID: 22780298

Just to check, you are looking in the same place I am looking, and you see Services, Active Directory icons etc. in there?
0
 

Author Closing Comment

by:crobotti
ID: 31508420
It wasn't installed by default, this may be because we upgraded from Win 2000 Server.  But by clicking on Start\Administrative Tools\Server Manager, we were able to add it thru Features. Thanks for all your help on this
0
 

Author Comment

by:crobotti
ID: 22780456
It wasn't installed by default, this may be because we upgraded from Win 2000 Server. But by clicking on Start\Administrative Tools\Server Manager, we were able to add it thru Features.
0
 
LVL 58

Expert Comment

by:tigermatt
ID: 22780488
That was going to be my next port of call :)

Glad it sorted it, and you can now Group Policy-away!
0

Featured Post

Integrate social media with email signatures

Is your company active on social media? Do you also use email signatures? Including social media icons in your email signature is a great way to get fans for free. Let all your email users know you’re on social media quickly and easily, in a single click.

Join & Write a Comment

Normally after a failure of Domain Controller, when promoting new DC the DC is renamed, we will discuss the options in Dcpromo to re-create the DC with the same name. Scenario: You are a small IT shop with two Domain Controllers (Domain Contr…
Possible fixes for Windows 7 and Windows Server 2008 updating problem. Solutions mentioned are from Microsoft themselves. I started a case with them from our Microsoft Silver Partner option to open a case and get direct support from Microsoft. If s…
This tutorial will give a short introduction and overview of Backup Exec 2012 and how to navigate and perform basic functions. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as conne…
This tutorial will walk an individual through configuring a drive on a Windows Server 2008 to perform shadow copies in order to quickly recover deleted files and folders. Click on Start and then select Computer to view the available drives on the se…

744 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now