Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

Server 03 location of GP adm/admx files

Posted on 2014-04-17
5
Medium Priority
?
419 Views
Last Modified: 2014-04-18
I added a server2012r2 DC to a 2003 domain. Then on the 2012r2 box, I copied the Polices folder from root/Windows/ to %logonserver%\sysvol\%userdnsdomain%\ so they could be centrally stored.

After, the old policy files are missing. Ie. when you open GPMC and select a GPO, it says the file cannot be found. New GPOs created work fine and I see the new policy ID folder created in the central store.

I am guessing the GP files just need to be moved to the central store from wherever they were locally stored on the 03 box. Any pointers?
0
Comment
Question by:Schuyler Dorsey
  • 2
  • 2
5 Comments
 
LVL 2

Expert Comment

by:Stuart Lupton
ID: 40008380
To enable a group policy central store you should add the ADMX files to SYSVOL\<domain>\policies\policydefinitions

See http://msdn.microsoft.com/en-us/library/bb530196.aspx for further instructions :)

Obvs SYSVOL replication will have to take place before these are available on all dc's
0
 
LVL 10

Author Comment

by:Schuyler Dorsey
ID: 40008635
Per my previous post, I already copied all of these files to that location. All of my available GPO options show in GPMC so I know it is reading the central store.

The issue is the specific GPOs I created BEFORE the move are 'missing'. When you click on those GPOs', it returns a file not found error. These folders are usually the UID of the GPO itself, ie. 409494r-3983r893r.
0
 
LVL 2

Accepted Solution

by:
Stuart Lupton earned 2000 total points
ID: 40008673
Apologies I misunderstood your question. Do you have a backup of the SYSVOL from before this change?
0
 
LVL 43

Expert Comment

by:Adam Brown
ID: 40008926
Just to be sure, do you have the ADMX files (And subfolders of PolicyDefinitions) stored in the *exact* location Stuart mentioned? The PolicyDefinitions folder should be in the same folder that all of your GPO GUID folders are located, so if you have it at sysvol\<domain>\ as you say, it's in the wrong location.

And the ADM templates on a 2003 server won't load if you put them in a central store. Only ADMX files load from there. THe ADMX templates that are included with 2008 server have all the 2003 settings included already.
0
 
LVL 10

Author Comment

by:Schuyler Dorsey
ID: 40008971
Per my post, I copied the POLICIES folder to the %logonserver%\sysvol\%userdnsdomain%\ location which would put PolicyDefinitions in the exact same spot Stuart mentioned.

I restored the GPO UID folders from a sysvol backup so I am good to go!
0

Featured Post

[Webinar] Cloud Security

In this webinar you will learn:

-Why existing firewall and DMZ architectures are not suited for securing cloud applications
-How to make your enterprise “Cloud Ready”, and fix your aging DMZ architecture
-How to transform your enterprise and become a Cloud Enabler

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In the absence of a fully-fledged GPO Management product like AGPM, the script in this article will provide you with a simple way to watch the domain (or a select OU) for GPOs changes and automatically take backups when policies are added, removed o…
High user turnover can cause old/redundant user data to consume valuable space. UserResourceCleanup was developed to address this by automatically deleting user folders when the user account is deleted.
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…
Sometimes it takes a new vantage point, apart from our everyday security practices, to truly see our Active Directory (AD) vulnerabilities. We get used to implementing the same techniques and checking the same areas for a breach. This pattern can re…

972 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question