• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 60
  • Last Modified:

ADMX files - folder locked and can't be updated

Hello,

I am trying to update my Central Store with updated ADMX files but I am getting a message about files being locked/open and it prevents me from copying new files over the old versions. Please see attached. I definitely have done this 2 times in the past with no issues and I am not sure what the problem is at this moment. We are running a mix of 2012/2012R2 servers, with the PDC being a 2012. The ADMX files are for Win10 (1511) version. I am trying to copy/paste those onto the PDC server.

Please see the error below. Is there perhaps a service that I should stop before trying to update those?

Error from the copy/paste operation
0
rr2r
Asked:
rr2r
  • 4
  • 2
1 Solution
 
ArneLoviusCommented:
What path are you using to access the directory ?

Are you using a Domain Administrator account ?
0
 
Lionel MMSmall Business IT ConsultantCommented:
That error like like you may have the GPO editor open or in use--may also be due to users logging on and access the GPOs.
0
 
rr2rAuthor Commented:
I was able to copy the files over the existing ones after restarting the DC.
I was using an admin-level account yes. There were no other people logged in.
The path was as follows: C:\Windows\SYSVOL\domain\Policies\PolicyDefinitions

I am seeing some inconsistent behavior after the upgrade however. Seems that any GPOs created/after the ADMX for Win10 were installed are not working. I do not even see them under the list of GPOs to be applied when I run the gpresult /r. I am seeing GPOs that I assign to new users without editing them so some changes are propagating and some are not. Is that possible?
0
Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

 
ArneLoviusCommented:
Are you using FRS or DFS for sysvol replication ?

Have you checked the event logs for sysvol replication issues ?
0
 
rr2rAuthor Commented:
I guess we are using both - FRS and DFS as we have a new site coming online that will be running 2012R2 which is my understanding use DFS. The logs will be a bit "dirty" I think as our network team did not catch all the ports at first but I will check with them if we can start monitoring now.

When I look at the GPO objects in the GP Editor, all are looking as if they are fully replicated - see the sample image below:

status.JPG
0
 
rr2rAuthor Commented:
Hello all,

Thanks for posting. It turns out that the folder time stamps were not updating correctly, but the content was all synced up.
As far as the inconsistent behavior that had to do with changes that Microsoft did on the security side as far as permission to read/apply GPOs. At this point either "Authenticated Users" or "Domain Computers" have to have read access to the GPOs, up to this point we were only giving the read permission to the group that we wanted to apply the GPOs to...

Thanks all!
0
 
rr2rAuthor Commented:
This was solved in-house.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Free Tool: Subnet Calculator

The subnet calculator helps you design networks by taking an IP address and network mask and returning information such as network, broadcast address, and host range.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

  • 4
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now