Eprs_Admin
asked on
want to use 2012 R2 GPO´s in 2008 domain
Hi Experts,
I have a RDS collection installed with WIN 2012 R2.
My Domain is still in 2008.
My policies are not working on the new RDS servers.
I have installed one new DC 2012 R2.
But the new DC cannot read the old GPO´s.
What can I do ?
I have a RDS collection installed with WIN 2012 R2.
My Domain is still in 2008.
My policies are not working on the new RDS servers.
I have installed one new DC 2012 R2.
But the new DC cannot read the old GPO´s.
What can I do ?
"the new DC cannot read the old GPO´s" - what should that mean? Of course it can. The other way round would make some sense. Please explain.
ASKER
Hi VB IT,
Your link is for VISTA.
But my Servers are 2008.
Can I use your link ?
Your link is for VISTA.
But my Servers are 2008.
Can I use your link ?
ASKER
ok do I have problems when the DC´s installed in german and the RDS in english ?
ASKER
Next , my DC is WIN 2008.
My RDS servers are 2012R2.
When I put my RDS server to same OU like my old TS, the GPO´s are not working on the new RDS.
What I have to do ?
My RDS servers are 2012R2.
When I put my RDS server to same OU like my old TS, the GPO´s are not working on the new RDS.
What I have to do ?
Please address my question as well, thanks.
ASKER
Hi MCKNIFE,
look, we have installed the new ADMX files for 2012R2 into the folder Policy Definitions on the SYSVOL.
Now I open my GroupPolicyManagement and then I get a lot of errors.
Don´t forget, my DC is WIN2008 ! NOT R2.
One Error is, error with FileRevocation.admx.
My investigation was, in 2008 the FileRevocation.admx file is not present in 2008.
It comes with the new ADMX files of 2012R2.
Now always when I open the GropuPolicyManagement, I have to click a lot of errors....
Why this happens ?
look, we have installed the new ADMX files for 2012R2 into the folder Policy Definitions on the SYSVOL.
Now I open my GroupPolicyManagement and then I get a lot of errors.
Don´t forget, my DC is WIN2008 ! NOT R2.
One Error is, error with FileRevocation.admx.
My investigation was, in 2008 the FileRevocation.admx file is not present in 2008.
It comes with the new ADMX files of 2012R2.
Now always when I open the GropuPolicyManagement, I have to click a lot of errors....
Why this happens ?
Ok, you DID confuse us by writing "I have installed one new DC 2012 R2" and "the new DC cannot read the old GPO". Now you say, the 2008 cannot read them, that makes sense.
The problem is easily solved by simply using RSAT from win8.1. Do you have access to an 8.1 pro/enterprise workstation or VM?
The problem is easily solved by simply using RSAT from win8.1. Do you have access to an 8.1 pro/enterprise workstation or VM?
My apologies, you can have a look at this article if you still want to implement the Group Policy Central Store, as it makes GPO management easier (in my opinion): http://deployhappiness.com/creating-the-group-policy-central-store-updated-for-windows-8-12012r2/
With that being said, the above article will not resolve your issue after you clarified things in your most recent post. Sorry, I was confused, like McKnife, when you said you "installed one new DC 2012 R2". As McKnife has stated above, you can install the RSAT tools on a Windows 8.1 Pro machine that's joined to your domain.
Alternatively you can also just install the Group Policy Management Console on one of your 2012 R2 RDS hosts to manage the GPOs for these servers: http://technet.microsoft.com/en-us/library/dn265969.aspx
With that being said, the above article will not resolve your issue after you clarified things in your most recent post. Sorry, I was confused, like McKnife, when you said you "installed one new DC 2012 R2". As McKnife has stated above, you can install the RSAT tools on a Windows 8.1 Pro machine that's joined to your domain.
Alternatively you can also just install the Group Policy Management Console on one of your 2012 R2 RDS hosts to manage the GPOs for these servers: http://technet.microsoft.com/en-us/library/dn265969.aspx
ASKER
OK, when I understand I can install also a new VM with a new DC 2012 R2 in my domain, right ?
I don't think you understood.
The easiest way to solve this little problem is to use RSAT. Google RSAT, read what it's all about. It enables you to use the latest GPOs on 2008 servers as well.
RSAT will need to be installed on 8.1 or on a 2012 member server. Those can be VMs, right.
The easiest way to solve this little problem is to use RSAT. Google RSAT, read what it's all about. It enables you to use the latest GPOs on 2008 servers as well.
RSAT will need to be installed on 8.1 or on a 2012 member server. Those can be VMs, right.
ASKER
I know, I don´t a win8 machine.
I have a 3rd DC with 2012 R2.
I have a 3rd DC with 2012 R2.
ASKER
...and my Group Policy Management COnsole is installed on the 3rd DC.
Right. Do you have another 2012 R2 server that is not a DC?
ASKER
yes. How to install the RSAT ?
ASKER
Ok, it is a feature.
Do I need the whole feature set with 40 selections ?
Do I have to install RSAT completely ?
Do I need the whole feature set with 40 selections ?
Do I have to install RSAT completely ?
It does not hurt and it's very small.
ASKER
Ok I have installed all 40 items of the RSAT.
What is the next step ?
How to open now my GroupPolicyManagementConso le ?
What is the next step ?
How to open now my GroupPolicyManagementConso
It can be found below "administrative tools" now.
ASKER
ASKER
for example, the file access12.admx, this file is present in the folder.
When I check the date, it is an old file.
What can I do to solve the admx errors ?
When I check the date, it is an old file.
What can I do to solve the admx errors ?
To solve this, understand RSAT, first.
RSAT works like this: it takes the admx files of the computer where RSAT is running on - NOT those from the server. So if you run it on 8.1 or 2012 R2, you have all their ADMX files, no need for a central store at all. If however you want office 2013 administrative templates to work through RSAT, you need to install those ADMX files locally on the RSAT machine OR install office 2013 on the RSAT machine.
We do this - NO errors at all.
RSAT works like this: it takes the admx files of the computer where RSAT is running on - NOT those from the server. So if you run it on 8.1 or 2012 R2, you have all their ADMX files, no need for a central store at all. If however you want office 2013 administrative templates to work through RSAT, you need to install those ADMX files locally on the RSAT machine OR install office 2013 on the RSAT machine.
We do this - NO errors at all.
ASKER
When I understand correctly,
I delete the new ADMX files from my central store.
Then I install the new ADMX files on my member server with RSAT
And from where I configure now my GPO´s ?
I delete the new ADMX files from my central store.
Then I install the new ADMX files on my member server with RSAT
And from where I configure now my GPO´s ?
"I delete the new ADMX files from my central store.
Then I install the new ADMX files on my member server with RSAT" - correct.
You configure your GPOs using the GPMC on the RSAT machine.
Then I install the new ADMX files on my member server with RSAT" - correct.
You configure your GPOs using the GPMC on the RSAT machine.
ASKER
And you are able to open those ADMX files? With the same account you are starting the GPMC with?
ASKER
Yes I can open it with notepad.
The GPMC is started with the administrator and the admx file too.
When I open the GPMC on my 2008 DC and select the different policies, I have no errors.
The 2008 policies have no errors.
And the 2012 policies have no errors, how it works ?
Because the new ADMX files for 2012 are deleted from the central store.
The GPMC is started with the administrator and the admx file too.
When I open the GPMC on my 2008 DC and select the different policies, I have no errors.
The 2008 policies have no errors.
And the 2012 policies have no errors, how it works ?
Because the new ADMX files for 2012 are deleted from the central store.
"And the 2012 policies have no errors, how it works ?" - the policies are just hosted by the 2008 server, he has them on a file share as xml files. But whenever you would want to modify a policy with settings for 2012/win8.x, those settings would be invisible on the 2008 server and you would have to use RSAT.
Sorry, I don't know the reason for your current error, but I would assume you create a new policy and then the settings and resource files will be found for sure.
Sorry, I don't know the reason for your current error, but I would assume you create a new policy and then the settings and resource files will be found for sure.
ASKER
ok let me check this...
Eprs_Admin2014-10-29 at 20:29:50ID: 40410273Did you also copy over the .ADML files to the your Central Store when you created it? When you downloaded the GPO Templates, you should have seen a bunch of subfolders with the names of all the locales, such as en-us, bg-bg, cs-cz, etc.
From my 2012R2 member server where I have installed RSAT, I open the GPMC.
When I open an old policy for 2008 Terminal users I have the same errors:
When I open the new policy for 2012 Terminal users I also have errors.
But all old files present on the central store.
The errors you are seeing above is most likely due to the fact that these .ADML files are missing. The .ADMX files require these .ADML files as they provide the description for each of the policy settings. I've highlighted this in red below to give you a better idea of what they do:
I believe the fix would be to just copy over the entire relevant locale folder (in this case I believe it is the en-us folder) to the \\domain.com\SYSVOL\domain
Please let me know how you go once you have done this.
ASKER
from the beginning I also copied the whole content of the admx file.
Feedback for all, please.
ASKER
still the same.
when I open the GPMC from my dc WIN2008 -> no errors in the GPMC.
when I open the GPMC from my dc WIN2012R2 -> again errors in the GPMC.
when I open the GPMC from my dc WIN2008 -> no errors in the GPMC.
when I open the GPMC from my dc WIN2012R2 -> again errors in the GPMC.
I suspect you may have copied over the language files from you 2008 R2 DC to the GP Central Store, but you copied over the actual .admx files from your 2012 R2 DC.
Try this:
On your Windows 2012 R2 Domain Controller, copy the en-us folder from C:\Windows\PolicyDefinitio ns to \\domain.com\SYSVOL\domain .com\Polic ies\Policy Definition s
Open GPMC on both your 2008 R2 and 2012 R2 DCs, hopefully the error messages will now be gone.
Try this:
On your Windows 2012 R2 Domain Controller, copy the en-us folder from C:\Windows\PolicyDefinitio
Open GPMC on both your 2008 R2 and 2012 R2 DCs, hopefully the error messages will now be gone.
ASKER
The GP central store is on my DC WIN2008. This one is working since 5 years.
When I copy the new ADMX files into the folder PolicyDefinitions on my WIN2008 DC, then I get the errors.
So I have restored to the old status.
When I copy the new ADMX files into the folder PolicyDefinitions on my WIN2008 DC, then I get the errors.
So I have restored to the old status.
Ok, take the old "status", use RSAT, problem solved.
I keep forgetting that you have a 2008 non R2 DC, my apologies.
So what is the status now with GPMC on your servers? Does it work OK on your 2008 server or are you getting errors on both servers? If you are getting errors, please post a screenshot (unless they are the same errors that you posted previously)
So what is the status now with GPMC on your servers? Does it work OK on your 2008 server or are you getting errors on both servers? If you are getting errors, please post a screenshot (unless they are the same errors that you posted previously)
ASKER
you are right my servers are 2008 non R2 !!
I have added one DC WIN2012R2 to the 2008 domain.
I have installed the new admx files.
And I have the same errors with the new admx files.
I have added one DC WIN2012R2 to the 2008 domain.
I have installed the new admx files.
And I have the same errors with the new admx files.
I'll make sure I don't forget that you are using 2008 non R2 from now on, don't worry :)
Where are the errors appearing? When you open GPMC on 2012 R2 DC or on your 2008 DC?
Where are the errors appearing? When you open GPMC on 2012 R2 DC or on your 2008 DC?
ASKER
when I install the new admx files on the win2008 server, then the files in the PolicyDefinition folder are updated and overwritten. Then I have all my errors.
So are you copying the new 2012 R2 ADMX files directly to C:\Windows\PolicyDefinitio ns folder on your 2008 server?
ASKER
Yes I did it.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Ok then I bring back my old admx files to the WIN2008 server.
In this status my GPO Central Store is working.
Let me test the GPO´s when I open it from 2012R2 server.....
In this status my GPO Central Store is working.
Let me test the GPO´s when I open it from 2012R2 server.....
May I ask in what way this accepted solution differs from using RSAT?
Instructions to create the Central Store: http://support.microsoft.com/kb/929841
Download link for Window 2012 R2 Group Policies: http://www.microsoft.com/en-au/download/details.aspx?id=41193
Now do you want to troubleshoot your issue with the 2012 R2 DC having issues reading the GPOs or do you want to try the above first then see how you go?