Re: Inconsistent GPO objects
From: David Bolton (DavidBolton_at_discussions.microsoft.com)
Date: 01/23/05
- Next message: Herb Martin: "Re: Sites and Services Replication Partner Question"
- Previous message: Eloy: "Sites and Services Replication Partner Question"
- In reply to: Oli Restorick [MVP]: "Re: Inconsistent GPO objects"
- Messages sorted by: [ date ] [ thread ]
Date: Sat, 22 Jan 2005 19:31:01 -0800
Oli,
Thanks for pointing me in the right direction, although it begs a few more
questions.
When I looked on both servers and my workstation, I saw different dates of
the .adm files that were stored. My main concern was that when I create a new
GPO, it always gives me default Computer and User configurations with not all
the options I was used to seeing.
My question really is, At which point did my GPMC begin to use the old .adm
files (with not as many options) and not the newer ones? Why was it that my
original GPO's I created with GPMC were loaded from an .adm file with a date
of 7-17-03 and my new GPO's that I created loaded with an .adm file with an
older date (3-25-03 I believe)? I had three different dated versions of the
system.adm with varying sizes in the Windows\inf directories on my servers
and workstation. Yes, I saw all of the ones in \sysvol that are already tied
to the GPO ids and all had the date of 7-17-03. But why if nothing has
changed except installing patches and updates, would the GPMC revert to using
the older, dated .adm?
I have now syncronized all three systems to use the latest system.adm file.
When I tested this by creating a new GPO, it did come up with the same GPO
options as I had before. So, thanks again for pointing me in the right
direction. I am just baffled as to how or why this would take place if all I
have done is patched my systems.
"Oli Restorick [MVP]" wrote:
> If the differences are all under Administrative templates, it's because some
> of the policies have extra templates (ADM files) loaded. That's the idea of
> administrative templates.
>
> Search sysvol for *.ADM and you'll be able to see all the ADMs in use on
> your domain.
>
> Oli
>
>
> "David Bolton" <David Bolton@discussions.microsoft.com> wrote in message
> news:09137973-71B3-40D1-B414-A5B432D1BDC4@microsoft.com...
> >I have been running an AD domain (Server 03) now for about a year. I use
> >the
> > GPMC to manage my GPO's. I have multiple OU's to manage both machines and
> > users. I also have 8 GPO's that I created when I first setup my AD. I work
> > for a school district and today I needed to add a new OU and a GPO for
> > that
> > OU to manage one of our new labs. In this new GPO, I noticed that I do not
> > have the "Security Features" option under
> > UserConfig>AdminTemplates>Internet
> > Explorer. My other older GPO's do. My management desktop is running XPsp2
> > and
> > my two DC's running Server 03 are both patched with the most recent
> > patches.
> >
> > Upon further investigation, I have found some other descrepencies as well,
> > all similar to the above. It's like I have two different versions of GPO's
> > running!
> >
> > Has anybody seen this before and why is it that a new GPO has less options
> > than the original ones I set up? My temporary workaround for this so I can
> > get the Security Options was to backup my original GPO's and then create a
> > new one and import one of my old ones into it. There has to be an
> > explanation
> > and a solution for this oddity.
> >
> > Any help would be greatly appreciated!
>
>
>
- Next message: Herb Martin: "Re: Sites and Services Replication Partner Question"
- Previous message: Eloy: "Sites and Services Replication Partner Question"
- In reply to: Oli Restorick [MVP]: "Re: Inconsistent GPO objects"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|
