Do I need to install RSAT client-side extensions to get Windows Server 2008 R2 GPOs to be processed on Vista clients?

I am trying to globally disable Adobe Flash updates on 24 Vista computers who are joined to the domain.  The servers are Windows 2003 SP2 (not R2) and I am integrating a Windows Server 2008 R2 server to replace th 2003 server.  Flash can be updated by copying a mms.cfg file to the client computer. The GPO was developed on the Windows 2008 R2 computer.

The gpsvc.log debug log indicates the GPO is version 0 and is being skipped.  As well, the log indicates that client-side extensions arenot present.

1. What is the significance of a GPO being version 0? And  how I do I make it non zero?
2. Do I need to download and install RSAT to every Vista client to get this GPO and future GPOs to work? Seems that deploying RSAT is just as big a pain as trying  tp get the GPO to  function?

capestryAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Ayman BakrSenior ConsultantCommented:
The version of the GPO is to control GPO application when more than one DC exist in the domain and thus control the way of the replication among them. With such an issue you might have version mismatches between your DCs for several reasons - check the following thread:

http://social.technet.microsoft.com/Forums/en-US/winserverGP/thread/0979620a-6f22-4e61-b345-758ab64465ed/

As for your second question- RSAT is the windows server 2008 equivalent of the admin pack of windows server 2003 - that is you install it on client PC to gain administrative control of the roles of your 2008 server REMOTELY. RSAT is not needed to have your GPOs applied on your Vista machines - it must be the GPO mismatch between the DCs and replication between them which is causing the issue.  Therefore you don't have to install the RSAT on all your Vista machines. You only install it on the machine which you want to use to remotely manage your server from. The following KB has all the information:

http://support.microsoft.com/kb/941314
0
capestryAuthor Commented:
While waiting for possible solutions, I tried the following:

Group Policy Preference Client Side Extensions for Windows Vista (KB943729)

I downloaded and installed Client Side Extensions for Vista, not RSAT and determined that these "Client Side Extensions"  are required to correctly apply the GPOs.  This worked for  me but it  seems to be cumbersome to have to do this on every machine to resolve the problem.  It's like chicken-and-egg. The whole point of GPO is to make and manage changes centrally but without "Client Side Extensions" the GPOs did not work.

I guess I don't understand why it's not obvious (at least to me) that the CSEs are required.  I have not seen any Microsoft KB that explicity spells this out.

It's not a GPO version mismatch problem.

Thanks  for the response.
0
Ayman BakrSenior ConsultantCommented:
Glad that you found the resolution.

If you have a software delivery solution like CA software delivery or Numara's Precision, you can utilize it to centrally push the CSE to all the vista machines.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2003

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.