Re: Inconsistent GPO objects

From: Oli Restorick [MVP] (oli_at_mvps.org)
Date: 01/23/05 

Date: Sun, 23 Jan 2005 00:22:19 -0000

If the differences are all under Administrative templates, it's because some
of the policies have extra templates (ADM files) loaded. That's the idea of
administrative templates.

Search sysvol for *.ADM and you'll be able to see all the ADMs in use on
your domain.

Oli

"David Bolton" <David Bolton@discussions.microsoft.com> wrote in message
news:09137973-71B3-40D1-B414-A5B432D1BDC4@microsoft.com...
>I have been running an AD domain (Server 03) now for about a year. I use
>the
> GPMC to manage my GPO's. I have multiple OU's to manage both machines and
> users. I also have 8 GPO's that I created when I first setup my AD. I work
> for a school district and today I needed to add a new OU and a GPO for
> that
> OU to manage one of our new labs. In this new GPO, I noticed that I do not
> have the "Security Features" option under
> UserConfig>AdminTemplates>Internet
> Explorer. My other older GPO's do. My management desktop is running XPsp2
> and
> my two DC's running Server 03 are both patched with the most recent
> patches.
>
> Upon further investigation, I have found some other descrepencies as well,
> all similar to the above. It's like I have two different versions of GPO's
> running!
>
> Has anybody seen this before and why is it that a new GPO has less options
> than the original ones I set up? My temporary workaround for this so I can
> get the Security Options was to backup my original GPO's and then create a
> new one and import one of my old ones into it. There has to be an
> explanation
> and a solution for this oddity.
>
> Any help would be greatly appreciated!

Relevant Pages

  • Re: GPO missing some options
    ... You can download the .ADM files for various operating systems and service ... > options are missing on the already created gpo objects. ...
    (microsoft.public.windows.server.active_directory)
  • RE: Windows 2kserver with XP clients - Policies
    ... you mean that you want to control specific XP settings ... Another thing you can do is to import .ADM templates from a Windows ... On a XP machine install a registry monitor tool which monitors the ... if you want to have a gPO setting that disables the ...
    (Security-Basics)
  • Re: GPO Question
    ... You can continue to create and edit GPOs from Win2K. ... Win2K, it will have Win2K ADMs so as soon as it is opened by an XP, SP2 ... the GPO will be updated. ... chances are they are still supported in the newer ADM ...
    (microsoft.public.win2000.group_policy)
  • Re: GPO Question
    ... The default behavior is that if you create a new GPO or open one ... I think its easiest if you can always edit them ... newer ADM gets onto one of your Win2K systems. ... >>have policies already set up. ...
    (microsoft.public.win2000.group_policy)
  • Re: Disabling Update notifications
    ... Did you added the wuau.adm to the administrative templates under computer configuration? ... If not create a new GPO rightclick the administrative template, choose Add/remove templates, remove all existing and add the wuau.adm. ... about available updates but all of the computers should be updated on ...
    (microsoft.public.windows.server.general)