Solved

PolicyDefinition folder safe?

Posted on 2011-03-09
11
1,077 Views
Last Modified: 2012-08-13
We have two 2008 DCs in our network but all clients are XP for now.

We have custom ADM templates and administrative template policy settings

I noticed right after copying the local DCs policydefinition folder C:\Windows\PolicyDefinitions to the Sysvol, that the GPO states that the settings are now pulling from the Central store.

It occurred to me that this may cause issues if an XP machine is trying to find ADM Templates from the central store but doesn't because it now only contains ADMX files.

I can't find articles saying this is an issue or not.

Can someone confirm?
0
Comment
Question by:snyderkv
  • 5
  • 3
  • 2
  • +1
11 Comments
 
LVL 12

Expert Comment

by:Navdeep
ID: 35093698
Hi,

Why you want such kind of setup. You shouldn't be copying it to sysvol folders. Adm/amdx templates will allow you to see the GPO setting that you have made to it. for example server 2003 wil not be able to see server2008 admx template but that doesn't mean you need to put them in sysvol folder. This will overload you sysvol folder.
0
 

Author Comment

by:snyderkv
ID: 35093776
I have no clue what you are saying.

Read this article. This is a post 2008 DC install step to take advantage of the new feature.

http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/Windows_Server_2008/A_3786-Installing-ADMX-Administrative-Templates-in-Windows-Server-2008-Group-Policy.html
0
 
LVL 12

Expert Comment

by:Navdeep
ID: 35093919
are you going to manage your GPO's using an xp client?
0
PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

 

Author Comment

by:snyderkv
ID: 35093990

No I'm not. We have a 2008 DC to manage the new settings via GPMC. I rarely use my workstation to manage domain wide tasks. I just noticed it seems to run faster and is less glitchy.

Does anyone have the answer to my question?

Will creating the policydefinitions folder screw existing settings up that XP/2003 is using?. (since they use ADM files and not ADMX files)
0
 
LVL 37

Accepted Solution

by:
Neil Russell earned 334 total points
ID: 35094030
Yes the answer is that they are only accessed from sysvol repository when you use GPMC to manage the policyies NOT by clients applying the policy.
0
 
LVL 12

Expert Comment

by:Navdeep
ID: 35094179
These will not be required by the clients as told by Neilsr. Clients have nothing to do with adm/admx templates unless you are going to manage all your GPO from winxp machine only then you would be requiring such a setup.

Hope you get the clue now :)
0
 

Author Comment

by:snyderkv
ID: 35094404
Yeah I get it now.

Crap, some people still use xp/2003 to manage settings, so I guess they won't see the new 2008 settings for preferences?

Not a huge deal I guess.
0
 

Author Comment

by:snyderkv
ID: 35094423
I see that in XP/2003, the preference setting I set is not visible and the administrative templates shows up as extra registry settings.

Ok no big deal, but are we talking about the same thing? Because this happens regardless if I have the policydefinition file or not.
0
 
LVL 21

Assisted Solution

by:snusgubben
snusgubben earned 166 total points
ID: 35094881
In the Central Store you keep your xml based templates and language files. If you have 2 DC's both will use the same templates from that store located in the SYSVOL. If you don't have a Central Store, the DC's will use its own local template. These templates may be different on the 2 DC's.


XP machines don't understand the XML based templates, so only Vista/2008 and later will have the benefit to use the Central Store.

You can though use GPP with XP as long as the XP clients have the GPP client side extension installed (you can get it from Windows/Microsoft Update).
0
 
LVL 37

Assisted Solution

by:Neil Russell
Neil Russell earned 334 total points
ID: 35095597
Although not part of your original question here is a link to the Windows XP Group policies preferences client that you would need installed for them to take effect.

http://www.microsoft.com/downloads/en/details.aspx?FamilyID=e60b5c8f-d7dc-4b27-a261-247ce3f6c4f8&displaylang=en

0
 

Author Comment

by:snyderkv
ID: 35096158
Already downloaded and installed the CSEs thanks though and the GPP did work on XP.

I was just making sure I don't break anything by creating the policydefinition folder.
0

Featured Post

Is Your AD Toolbox Looking More Like a Toybox?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

OfficeMate Freezes on login or does not load after login credentials are input.
This script can help you clean up your user profile database by comparing profiles to Active Directory users in a particular OU, and removing the profiles that don't match.
This tutorial will give a short introduction and overview of Backup Exec 2012 and how to navigate and perform basic functions. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as conne…
This tutorial will walk an individual through setting the global and backup job media overwrite and protection periods in Backup Exec 2012. Log onto the Backup Exec Central Administration Server. Examine the services. If all or most of them are stop…

777 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question