Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

What happens if you deploy a GPO to a pc without gpmc installed?

Posted on 2016-08-31
11
Medium Priority
?
22 Views
Last Modified: 2016-10-22
What happens if you deploy a GPO to a pc without gpmc installed? Will the GPO still be applied?
0
Comment
Question by:Eyal Filkovsky
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 5
  • 3
  • 2
11 Comments
 
LVL 22

Accepted Solution

by:
Joseph Moody earned 1200 total points
ID: 41778050
Yes. The GPO is processed by the Group Policy Client Service (on Vista+ machines). The GPMC just allows you to edit the GPO.
1
 

Author Comment

by:Eyal Filkovsky
ID: 41778053
So the ADMX/ADML files for Windows 10 Pro only need to be on the Domain Controller?
0
 
LVL 22

Assisted Solution

by:Joseph Moody
Joseph Moody earned 1200 total points
ID: 41778056
Every machine has the ADMX/ADML files locally. These are located on C:\windows\PolicyDefinitions. If the GPMC is installed on a windows 10 pro machine, the settings you see in the GPMC are pulled from C:\windows\PolicyDefinitions (this assumes you don't have the central store configured).
1
Office 365 Training for IT Pros

Learn how to provision tenants, synchronize on-premise Active Directory, implement Single Sign-On, customize Office deployment, and protect your organization with eDiscovery and DLP policies.  Only from Platform Scholar.

 

Author Comment

by:Eyal Filkovsky
ID: 41778066
If the machine doesn't have ADMX/ADML files locally, will GPOs from the DC apply?
0
 
LVL 29

Assisted Solution

by:Michael Pfister
Michael Pfister earned 800 total points
ID: 41778072
Yes, the ADMX files are only required for editing the GPO.
1
 
LVL 29

Assisted Solution

by:Michael Pfister
Michael Pfister earned 800 total points
ID: 41778077
Ist good practice  to create a central store for the ADMX templates  in a domain environment.
https://support.microsoft.com/en-us/kb/3087759

This prevents you from editing GPOs from a different computer with an "out-of-date" set of templates.
0
 

Author Comment

by:Eyal Filkovsky
ID: 41778079
Thank you.
Back to the drawing board.
0
 

Author Comment

by:Eyal Filkovsky
ID: 41778089
Ist good practice  to create a central store for the ADMX templates  in a domain environment.
https://support.microsoft.com/en-us/kb/3087759

I have already added the Windows 10 ADMX templates onto my Domain controller and it automatically replicated them onto my second domain controller.

I guess the question is, do I need to add the templates to each of my windows 10 Pro PCs?
0
 
LVL 22

Assisted Solution

by:Joseph Moody
Joseph Moody earned 1200 total points
ID: 41778091
no.
1
 

Author Comment

by:Eyal Filkovsky
ID: 41778096
Thanks again!
0

Featured Post

Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Active Directory security has been a hot topic of late, and for good reason. With 90% of the world’s organization using this system to manage access to all parts of their IT infrastructure, knowing how to protect against threats and keep vulnerabil…
Uncontrolled local administrators groups within any organization pose a huge security risk. Because these groups are locally managed it becomes difficult to audit and maintain them.
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…
Suggested Courses

722 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question