Solved

ADMX files - folder locked and can't be updated

Posted on 2016-10-24
7
30 Views
Last Modified: 2016-11-15
Hello,

I am trying to update my Central Store with updated ADMX files but I am getting a message about files being locked/open and it prevents me from copying new files over the old versions. Please see attached. I definitely have done this 2 times in the past with no issues and I am not sure what the problem is at this moment. We are running a mix of 2012/2012R2 servers, with the PDC being a 2012. The ADMX files are for Win10 (1511) version. I am trying to copy/paste those onto the PDC server.

Please see the error below. Is there perhaps a service that I should stop before trying to update those?

Error from the copy/paste operation
0
Comment
Question by:rr2r
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 2
7 Comments
 
LVL 37

Expert Comment

by:ArneLovius
ID: 41858408
What path are you using to access the directory ?

Are you using a Domain Administrator account ?
0
 
LVL 25

Expert Comment

by:Lionel MM
ID: 41858426
That error like like you may have the GPO editor open or in use--may also be due to users logging on and access the GPOs.
0
 
LVL 1

Author Comment

by:rr2r
ID: 41859582
I was able to copy the files over the existing ones after restarting the DC.
I was using an admin-level account yes. There were no other people logged in.
The path was as follows: C:\Windows\SYSVOL\domain\Policies\PolicyDefinitions

I am seeing some inconsistent behavior after the upgrade however. Seems that any GPOs created/after the ADMX for Win10 were installed are not working. I do not even see them under the list of GPOs to be applied when I run the gpresult /r. I am seeing GPOs that I assign to new users without editing them so some changes are propagating and some are not. Is that possible?
0
Get 15 Days FREE Full-Featured Trial

Benefit from a mission critical IT monitoring with Monitis Premium or get it FREE for your entry level monitoring needs.
-Over 200,000 users
-More than 300,000 websites monitored
-Used in 197 countries
-Recommended by 98% of users

 
LVL 37

Expert Comment

by:ArneLovius
ID: 41859630
Are you using FRS or DFS for sysvol replication ?

Have you checked the event logs for sysvol replication issues ?
0
 
LVL 1

Author Comment

by:rr2r
ID: 41860278
I guess we are using both - FRS and DFS as we have a new site coming online that will be running 2012R2 which is my understanding use DFS. The logs will be a bit "dirty" I think as our network team did not catch all the ports at first but I will check with them if we can start monitoring now.

When I look at the GPO objects in the GP Editor, all are looking as if they are fully replicated - see the sample image below:

status.JPG
0
 
LVL 1

Accepted Solution

by:
rr2r earned 0 total points
ID: 41882905
Hello all,

Thanks for posting. It turns out that the folder time stamps were not updating correctly, but the content was all synced up.
As far as the inconsistent behavior that had to do with changes that Microsoft did on the security side as far as permission to read/apply GPOs. At this point either "Authenticated Users" or "Domain Computers" have to have read access to the GPOs, up to this point we were only giving the read permission to the group that we wanted to apply the GPOs to...

Thanks all!
0
 
LVL 1

Author Closing Comment

by:rr2r
ID: 41887602
This was solved in-house.
0

Featured Post

The Ultimate Checklist to Optimize Your Website

Websites are getting bigger and complicated by the day. Video, images, custom fonts are all great for showcasing your product/service. But the price to pay in terms of reduced page load times and ultimately, decreased sales, can lead to some difficult decisions about what to cut.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

My GPO's made for 2008 R2 servers were not allowing me to RDP into a new 2012 server by default.  That’s why I tried to allow RDP via Powershell, because I could log into a remote shell without further configuration. Below I will describe how I wen…
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
In this Micro Tutorial viewers will learn how to use Windows Server Backup to create full image of their system. Tutorial shows how to install Windows Server Backup Feature on Windows 2012R2 and how to configure scheduled Bare Metal Recovery backup.…
In this Micro Tutorial viewers will learn how to use Boot Corrector from Paragon Rescue Kit Free to identify and fix the boot problems of Windows 7/8/2012R2 etc. As an example is used Windows 2012R2 which lost its active partition flag (often happen…

696 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question