Solved

Group Policy MachineCNF

Posted on 2016-09-27
1
38 Views
Last Modified: 2016-10-02
In ADSIEdit unter 'System\Policies' I have some Conflict Objects (MachineCNF). Can they be safely deleted?
0
Comment
Question by:albatros99
1 Comment
 
LVL 6

Accepted Solution

by:
sAMAccountName earned 500 total points
ID: 41818057
They can, but dont use ADSIEdit.  Thats a jackhammer when a finish hammer is sufficient.  (Im a strong poroponent of never using ADSIEdit since theres no real input validation and typos can be catastrophic).  You can easily delete them using explorer or powershell.  

It's important you make sure the conflicting item that matches the CNF-<GUID> has the proper contents before you delete the CNF-{GUID} folder... S, for each CNF-{GUID} policy object folder, you should have a corresponding folder with the same {GUID}.  Use gmpc to view the policy that corresponds to the GUID to make sure the settings are correct, then use a workstation that should be in the policies scope to make sure its applying correctly.  If everything checks out, you can delete it...

If you do this, its best to do it on the PDC which is the authority for group policies and the DFSr replication group.  Doing it elsewhere can cause more CNF folders to appear (though this is more likely in large volatile environments)
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I know all systems administrator at some time or another has had to create a script to copy file from a server share to a desktop. Well now there is an easy way to do this in Group Policy. Using Group policy preferences is not hard. The first thing …
Resolve DNS query failed errors for Exchange
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …

895 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

15 Experts available now in Live!

Get 1:1 Help Now