I missed what version of AD you’re
running, but with AD 2000 (SP3?) I’ve seen issues with opening a GPO from
a W2K box or from a WinXP box. XP added extensions that 2000 couldn’t
read. Editing Account Lockout settings from XP caused one entry in
particular – logon banner text – to be truncated at 256 char, and
we had to re-edit it from Win2K to fix it. There was a KB article on
that. Anyway could this have been a case of W2K3 vs. W2K extensions, or
something related to the above?
Rich
From: Rimmerman, Russ
[mailto:[EMAIL PROTECTED]
Sent: Monday, January 05, 2004
6:38 PM
To: '[EMAIL PROTECTED]'
Subject: RE: [ActiveDir] GPO
problem
It basically seems like we have two
different versions of system.adm's. Some were missing a bunch of options
and some were complete. Overwriting the smaller ones with the larger
sized ones seems to have fixed it.
-----Original Message-----
From: Darren Mar-Elia
[mailto:[EMAIL PROTECTED] On
Behalf Of Darren Mar-Elia
Sent: Monday, January 05, 2004
6:33 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] GPO
problem
It could be a few things. It could be an FRS
replication problem. Check for FRS errors on your DCs. There could also be
a contention issue where two people are focused on a GPO at once, have the adm
files open and are attempting to replicate changes while the files are open.
Not sure how robust FRS replication is at handling this but I have seen these
file contention issues before related to GPOs.
It shouldn't matter that you're launching the GPO
editor standalone vs. from the GPMC.
-----Original
Message-----
From:
[EMAIL PROTECTED] on behalf of Rimmerman, Russ
Sent: Mon 1/5/2004 4:19 PM
To: '[EMAIL PROTECTED]'
Cc:
Subject: RE: [ActiveDir] GPO
problem
Well I fixed it but I'm
not sure what caused it to break. I did a search for system.adm and 4 of
them were only 750k while the rest of the system.adm's were 1.3MB. (I was
looking in c:\winnt\sysvol\domain\policies). So I copied the larger ones
over top the smaller ones, and now everything seems to be OK. I'm
guessing people are opening with GPMC and others aren't. Would something
like that cause this? Do we need to always open using the same GPO
editor?
-----Original Message-----
From: Darren Mar-Elia
[mailto:[EMAIL PROTECTED] On
Behalf Of Darren Mar-Elia
Sent: Monday, January 05, 2004
6:00 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] GPO
problem
Couple of things to check. The easy thing to check is
to make sure you don't have the view option checked in the GPO Editor that
says, "Only show configured policy settings". If that is checked,
that would explain why the other stuff is gone.
If that isn't it, then it could be that the .adm
template associated with that GPO is corrupt. The file holding the policies
you've referenced below is system.adm. The .adm files for a given GPO are
stored in SYSVOL in the Group Policy Template (found in SYSVOL\<domain
name>\policies\<GUID of GPO>\ADM). The easiest place to check this
would be on the PDC emulator, which is where the GPO editor defaults
to when you're editing a GPO.
-----Original
Message-----
From:
[EMAIL PROTECTED] on behalf of Rimmerman, Russ
Sent: Mon 1/5/2004 9:14 AM
To: '[EMAIL PROTECTED]'
Cc:
Subject: [ActiveDir] GPO problem
I'm looking at two separate GPOs I have applied to two
separate OUs. When I
expand Computer Configuration/Administrative Templates/System, on one GPO
there's a large amount of items listed under System. On the other GPO
(applied to OU #2), I'm missing:
User Profiles
Scripts
Net Logon
Remote Assistance
System Restore
And a few others. What would cause me to see more options in one GPO
versus
another GPO? I'm looking at both GPOs from the same machine.
Thanks,
Russ
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
This e-mail is confidential, may contain proprietary information
of the Cooper Cameron Corporation and its operating Divisions
and may be confidential or privileged.
This e-mail should be read, copied, disseminated and/or used only
by the addressee. If you have received this message in error please
delete it, together with any attachments, from your system.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
List info : http://www.activedir.org/mail_list.htm
List FAQ : http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
This e-mail is confidential, may contain proprietary information
of the Cooper Cameron Corporation and its operating Divisions
and may be confidential or privileged.
This e-mail should be read, copied, disseminated and/or used only
by the addressee. If you have received this message in error please
delete it, together with any attachments, from your system.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
This e-mail is confidential, may contain proprietary information
of the Cooper Cameron Corporation and its operating Divisions
and may be confidential or privileged.
This e-mail should be read, copied, disseminated and/or used only
by the addressee. If you have received this message in error please
delete it, together with any attachments, from your system.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
-------APPLEBEE'S INTERNATIONAL, INC. CONFIDENTIALITY NOTICE------- PRIVILEGED / CONFIDENTIAL INFORMATION may be contained in this message or any attachments. This information is strictly confidential and may be subject to attorney-client privilege. This message is intended only for the use of the named addressee. If you are not the intended recipient of this message, unauthorized forwarding, printing, copying, distribution, or using such information is strictly prohibited and may be unlawful. If you have received this in error, you should kindly notify the sender by reply e-mail and immediately destroy this message. Unauthorized interception of this e-mail is a violation of federal criminal law. Applebee's International, Inc. reserves the right to monitor and review the content of all messages sent to and from this e-mail address. Messages sent to or from this e-mail address may be stored on the Applebee's International, Inc. e-mail system.
|
