asked on

Having trouble adding Windows 10 ADMX policy definitons

Having trouble adding Windows 10 ADMX policy definitons

Hello - I read an article on how to add ADMX policies to my SYSVOL folder. I followed it pretty carefully - unzipped the policy definitons for 1903 and 1909 Windows versions, copied them into the SYSVOL folder on the primary AD domain server, and rebooted the domain. When I go into GP editor, however, and compare the policies I see from my own Windows 10 machine, compared to what's showing up on the domain server, they do not match and the AD server seems to only show older policies for Windows 7 and prior. What am I missing? how do I get it to recognize the new policies? We're a Windows 2016 AD environment, by the way.

Thanks for your help

Jeff Glover

Without the article you followed, hard to say if anything was missed. I have to assume you created a PolicyDefinitions folder in the correct place.
(c:\windows\sysvol\sysvol\<your domain FQDN>\Policies if you are using defaults).
Then you Extracted the Policy ADMX files to a folder and copied them to the new PolicyDefinitions folder. (When I did it, I copied the existing files from c:\windows\policydefinitions to the new Folder first, then copied the new ADMX files there to be thorough. )

That is really all you have to do. Wait for Replication and you should see the new policies being used. Open a Group Policy and look at the Administrative Templates folder in either Computer or User It should read Administrative Templates:Policy Definitions (ADMX Files) retrieved from Central Store. If it does, it is now using the new Central store.

Damian Gardner

ASKER

Thanks for your help Jeff. I did extract the Policy Definitions for each of the two Windows versions, and put them under the "Policies" folder in Sysvol. Take a look at the screenshot attached. Is this the correct location?
SYSVOL-Folder-with-new-policies.rtf

ASKER CERTIFIED SOLUTION

Jeff Glover

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

Damian Gardner

ASKER

Ahh - I see. I did not realize I have to merge them all into the same folder. let me do that. Can I run a GPUPDATE / FROCE to get it to read the SYSVOL folder for the new policies? or do I have to wait for it to replicate?

Thanks Jeff

Jeff Glover

GPupdate /force simply applies the policies on the computer. You have to wait for Sysvol to replicate if you have multiple DCs. By default, it replicates once per hour (you can change that to as little as 15 minutes)

Damian Gardner

ASKER

Disregard - it looks like its working. I see policies in the GPO editor for Windows 10 now. thank you!

Damian Gardner

ASKER

Appreciate your help Jeff. thank you

Jeff Glover

Anytime