• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 121
  • Last Modified:

Group Policy MachineCNF

In ADSIEdit unter 'System\Policies' I have some Conflict Objects (MachineCNF). Can they be safely deleted?
0
albatros99
Asked:
albatros99
1 Solution
 
sAMAccountNameSr. Systems EngineerCommented:
They can, but dont use ADSIEdit.  Thats a jackhammer when a finish hammer is sufficient.  (Im a strong poroponent of never using ADSIEdit since theres no real input validation and typos can be catastrophic).  You can easily delete them using explorer or powershell.  

It's important you make sure the conflicting item that matches the CNF-<GUID> has the proper contents before you delete the CNF-{GUID} folder... S, for each CNF-{GUID} policy object folder, you should have a corresponding folder with the same {GUID}.  Use gmpc to view the policy that corresponds to the GUID to make sure the settings are correct, then use a workstation that should be in the policies scope to make sure its applying correctly.  If everything checks out, you can delete it...

If you do this, its best to do it on the PDC which is the authority for group policies and the DFSr replication group.  Doing it elsewhere can cause more CNF folders to appear (though this is more likely in large volatile environments)
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Tackle projects and never again get stuck behind a technical roadblock.
Join Now