Setting up a Group Policy Central Store

Hi guys, hope you are all well and can assist.

We have a mixed domain of 2003, 2008 and 2012 domain controllers.
We currently don't use a central store for group policy, but we now wish to.
I would just like some clarity about the following if that is okay?

1.On our PDC Emulator, lets call it "SERVERA", I will create a new folder in SYSVOL called "PolicyDefinitions" using the following command:
mkdir C:\Windows\SYSVOL\sysvol\%UserDNSDomain%\Policies\PolicyDefinitions

2.I will then copy all of our ADMX and ADML files to the Central Store.
xcopy /s c:\Windows\PolicyDefinitions\* C:\Windows\SYSVOL\sysvol\%UserDNSDomain%\Policies\PolicyDefinitions

3.I will then verify in GPMC that the administrative templates are being received from the central store, and not from the local computer.

Questions:

1.If I add GPMC to another domain controller, lets say its called "SERVERB", how will this domain controller know that I am using a central store that I set up on SERVERA, the PDC Emulator, and not local computer?

2.What clean up work can I safely do in the SYSVOL share once the Central Store has been set up? For example, can I safely remove the Adm folder for every single GPO?

3.If I did a search for all *.adm files in the SYSVOL share, can safely delete all of these adm files returned? What would be the impact on group policy delivery to clients, to domain controllers?

4.What is the best way to clean up (remove admin templates) from SYSVOL once the Group  Policy Central Store has been set up? This is the thing that makes me a little nervous.

5.If I did not convert any adm files to admx files, and I did have group policies that required editing, and that these same gpos made use of adm files, then is it true that editing of the group policy, once moved to the central store, is not possible?

6.How can I know which, if any, gpos currently rely on adm files as opposed to admx files? The reason I ask is so to be sure of which adm files to remove.

Any help greatly appreciated about this entire process going from No Central Store, to one which does have a Central Store.

Thanks everyone.
LVL 1
Simon336697Asked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

David Johnson, CD, MVPOwnerCommented:
5 is it true that editing of the group policy, once moved to the central store, is not possible?  Not True
6. How can I know which, if any, gpos currently rely on adm files as opposed to admx files? The reason I ask is so to be sure of which adm files to remove. Simply DONT delete them .. they really don't take up a lot of  space.
3.If I did a search for all *.adm files in the SYSVOL share, can safely delete all of these adm files returned? What would be the impact on group policy delivery to clients, to domain controllers? Don't delete things.
1.If I add GPMC to another domain controller, lets say its called "SERVERB", how will this domain controller know that I am using a central store that I set up on SERVERA, the PDC Emulator, and not local computer? they get replicated
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Simon336697Author Commented:
Hi Dave,
Can you create and use a central store if you still have 2003 DCs in your environment?
We have 2008R2 and 2012R2 DCs as well.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Active Directory

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.