Re: registry.pol missing under {6AC1786C-016F-11D2-945F-00C04FB984

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

GPMC.MSC

GPUPDATE /FORCE ask me to reboot the DC... ouch, this is major, only to get
security event log larger! This is what I did (rebooted) the DC, and this
setting finally got applied!

All DCs need to be rebooted to get this new setting... incredible, but true.

Thanks.

"Jorge Silva" wrote:

Hi
Can you explainhow you edit that policy (what tool did you used)?
and what chnages did you make to that policy?
Do you have any errors in DCs eventlog after running gpupdate /force?
--
===================================
I hope that the information above helps you.
Have a Nice day.

Jorge Silva
MCSE, MVP Directory Services
===================================

"Claude Lachapelle" <ClaudeLachapelle@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in
message news:0AF9412C-7BB8-4F73-9506-E8F75D574D87@xxxxxxxxxxxxxxxx
Sorry for that mistake, I finally found that everything is written in
GptTmpl.inf under:

C:\WINDOWS\SYSVOL\sysvol\domain.name\Policies\{6AC1786C-016F-11D2-945F-00C04fB984F9}\MACHINE\Microsoft\Windows
NT\SecEdit

Normal behavior? I'm asking that, since I did some changes, and since this
morning, they are not applying to DCs into this domain... even after doing
GPUPDATE directly on DCs.

Thanks.

"Claude Lachapelle" wrote:

Correct me if I'm wrong, but I could not find registry.pol files under
our
"Default domain controllers policy"
({6AC1786C-016F-11D2-945F-00C04FB984F9})
under USER & MACHINE directories!

What is strange, with GPMC.MSC I could edit and apply change to those
policies, but when searching which files have been updated under
c:\windows\sysvol\sysvol\domain.name\ we found no modified files...

When re-opening GPMC.MSC, all changes are kept!

On which files I'm working???

Thanks.

Claude Lachapelle
Systems Administrator, MCSE



.

Relevant Pages

  • Re: Disable group policy on a server
    ... instead of you can use gpupdate or gpupdate /force in the run line. ... Sometimes a reboot is required depending on the setting the policy has changed so after gpupdate the command window displays to reboot. ... If the policy setting comes form the default domain policy or another ...
    (microsoft.public.windows.server.active_directory)
  • Re: Disable group policy on a server
    ... instead of you can use gpupdate or gpupdate /force in the run line. ... Sometimes a reboot is required depending on the setting the policy has changed so after gpupdate the command window displays to reboot. ... If the policy setting comes form the default domain policy or another ...
    (microsoft.public.windows.server.active_directory)
  • Re: Deleted policy still seems to be applying
    ... I don't know where to look on the DCs for the policy, ... Exchange servers, but only one clustered node is really doing anything at ... No reboot is needed. ...
    (microsoft.public.exchange.admin)
  • Group Policy XP firewall disabled works most of the time but not all the time
    ... Windows XP firewall, but every now and again the policy does not take effect ... and I have to get the user to reboot or do a gpupdate /force and then reboot ...
    (microsoft.public.windows.server.active_directory)
  • Weird network failure/ duplicate machine name MYSTERY, 2003 AD
    ... I have two DCs.. ... So then I decided just to give one of the DCs a reboot (the main one, ... There was this autoenrollment error too (Eventid 13): ... DHCP server event log for more information on this error. ...
    (microsoft.public.windows.server.general)