We help IT Professionals succeed at work.

Having trouble adding Windows 10 ADMX policy definitons

Having trouble adding Windows 10 ADMX policy definitons

Hello - I read an article on how to add ADMX policies to my SYSVOL folder.  I followed it pretty carefully - unzipped the policy definitons for 1903 and 1909 Windows versions, copied them into the SYSVOL folder on the primary AD domain server, and rebooted the domain.  When I go into GP editor, however, and compare the policies I see from my own Windows 10 machine, compared to what's showing up on the domain server, they do not match and the AD server seems to only show older policies for Windows 7 and prior.  What am I missing?  how do I get it to recognize the new policies?  We're a Windows 2016 AD environment, by the way.

Thanks for your help
Comment
Watch Question

Jeff GloverSr. Systems Administrator

Commented:
Without the article you followed, hard to say if anything was missed. I have to assume you created a PolicyDefinitions folder in the correct place.
(c:\windows\sysvol\sysvol\<your domain FQDN>\Policies if you are using defaults).
  Then you Extracted the Policy ADMX files to a folder and copied them to the new PolicyDefinitions folder. (When I did it, I copied the existing files from c:\windows\policydefinitions to the new Folder first, then copied the new ADMX files there to be thorough. )

 That is really all you have to do. Wait for Replication and you should see the new policies being used. Open a Group Policy and look at the Administrative Templates folder in either Computer or User It should read Administrative Templates:Policy Definitions (ADMX Files) retrieved from Central Store. If it does, it is now using the new Central store.
Damian GardnerIT Admin

Author

Commented:
Thanks for your help Jeff.  I did extract the Policy Definitions for each of the two Windows versions, and put them under the "Policies" folder in Sysvol.  Take a look at the screenshot attached.  Is this the correct location?
SYSVOL-Folder-with-new-policies.rtf
Sr. Systems Administrator
Commented:
So, the Folder "PolicyDefinitions" is correct but it is the only one. Take the contents of the other two folders(Policy Definitions (1903) and Policydefinitions (1909) and merge them into the PolicyDefinitions folder (just the admx files, not the folders themselves). Group Policy will look in 2 places for ADMX files and two places only (and in this order). It will look in the Windows\Sysvol\Sysvol\<domainname>\Policies\PolicyDefinitions folder first. If there is not a folder there, it then looks in C:\windows\policydefinitions (the default location for PolicyDefinitions out of the box). If the folder in Sysvol is there but does not contain all the ADMX files, it will not look anywhere else, it just uses what it finds. Placing new files in a different folder does nothing in this case.
  New ADMX files will replace the old ones if they have the same name. So, you start with the basic settings (copied from C:\windows\PolicyDefinitions) in the new folder in Sysvol. Then add any new ADMX files to that same folder (they will overwrite the old files if they have the same name). You can also add admx files for Chrome, Office, etc....  in the same PolicyDefinitions folder.
  Last, the reason for placing this folder in Sysvol is so it is replicated to all DCs. From now on, you will be using the Central store and not the local files on each DC.

I hope this makes sense.
Damian GardnerIT Admin

Author

Commented:
Ahh - I see.  I did not realize I have to merge them all into the same folder.  let me do that.  Can I run a GPUPDATE / FROCE to get it to read the SYSVOL folder for the new policies?  or do I have to wait for it to replicate?

Thanks Jeff
Jeff GloverSr. Systems Administrator

Commented:
GPupdate /force simply applies the policies on the computer. You have to wait for Sysvol to replicate if you have multiple DCs. By default, it replicates once per hour (you can change that to as little as 15 minutes)
Damian GardnerIT Admin

Author

Commented:
Disregard - it looks like its working.  I see policies in the GPO editor for Windows 10 now.  thank you!
Damian GardnerIT Admin

Author

Commented:
Appreciate your help Jeff.  thank you
Jeff GloverSr. Systems Administrator

Commented:
Anytime