|
I have
saw similar behavior. Editing GPOs from XP or 2000 seem to return different
results. So....I now administor everything from an XP machine. And yes, it is
Microsofts stance that you should only edit GPOs, ADUC, etc. from an XP machine
once you have XP clients on the domain.
I missed what version
of AD you�re running, but with AD 2000 (SP3?) I�ve seen issues with opening a
GPO from a W2K box or from a WinXP box. XP added extensions that 2000
couldn�t read. Editing Account Lockout settings from XP caused one entry
in particular � logon banner text � to be truncated at 256 char, and we had to
re-edit it from Win2K to fix it. There was a KB article on that.
Anyway could this have been a case of W2K3 vs. W2K extensions, or something
related to the above?
Rich
From:
Rimmerman, Russ [mailto:[EMAIL PROTECTED]
Sent: Monday, January 05, 2004 6:38
PM
To:
'[EMAIL PROTECTED]'
Subject: RE: [ActiveDir] GPO
problem
It basically seems
like we have two different versions of system.adm's. Some were missing a
bunch of options and some were complete. Overwriting the smaller ones
with the larger sized ones seems to have fixed it.
-----Original
Message-----
From: Darren
Mar-Elia [mailto:[EMAIL PROTECTED] On Behalf Of Darren Mar-Elia
Sent: Monday, January 05, 2004 6:33
PM
To:
[EMAIL PROTECTED]
Subject: RE: [ActiveDir] GPO
problem
It could be a few things. It could be an
FRS replication problem. Check for FRS errors on your DCs. There could
also be a contention issue where two people are focused on a GPO at once,
have the adm files open and are attempting to replicate changes while the
files are open. Not sure how robust FRS replication is at handling this but I
have seen these file contention issues before related to GPOs.
It shouldn't matter that you're launching
the GPO editor standalone vs. from the GPMC.
-----Original
Message-----
From:
[EMAIL PROTECTED] on behalf of Rimmerman, Russ
Sent: Mon 1/5/2004 4:19 PM
To:
'[EMAIL PROTECTED]'
Cc:
Subject: RE: [ActiveDir] GPO
problem
Well I
fixed it but I'm not sure what caused it to break. I did a search for
system.adm and 4 of them were only 750k while the rest of the system.adm's
were 1.3MB. (I was looking in c:\winnt\sysvol\domain\policies).
So I copied the larger ones over top the smaller ones, and now everything
seems to be OK. I'm guessing people are opening with GPMC and others
aren't. Would something like that cause this? Do we need to
always open using the same GPO editor?
-----Original
Message-----
From: Darren
Mar-Elia [mailto:[EMAIL PROTECTED] On Behalf Of Darren
Mar-Elia
Sent: Monday,
January 05, 2004 6:00 PM
To:
[EMAIL PROTECTED]
Subject: RE: [ActiveDir] GPO
problem
Couple of things to check. The easy
thing to check is to make sure you don't have the view option checked in the
GPO Editor that says, "Only show configured policy settings". If that is
checked, that would explain why the other stuff is gone.
If that isn't it, then it could be that
the .adm template associated with that GPO is corrupt. The file holding the
policies you've referenced below is system.adm. The .adm files for a given
GPO are stored in SYSVOL in the Group Policy Template (found in
SYSVOL\<domain name>\policies\<GUID of GPO>\ADM). The easiest
place to check this would be on the PDC emulator, which is where the GPO
editor defaults to when you're editing a GPO.
-----Original
Message-----
From:
[EMAIL PROTECTED] on behalf of Rimmerman, Russ
Sent: Mon 1/5/2004 9:14
AM
To:
'[EMAIL PROTECTED]'
Cc:
Subject: [ActiveDir] GPO
problem
I'm looking at two separate GPOs I have applied to
two separate OUs. When I
expand Computer
Configuration/Administrative Templates/System, on one GPO
there's a
large amount of items listed under System. On the other
GPO
(applied to OU #2), I'm missing:
User Profiles
Scripts
Net
Logon
Remote Assistance
System Restore
And a few others.
What would cause me to see more options in one GPO versus
another
GPO? I'm looking at both GPOs from the same
machine.
Thanks,
Russ
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
This
e-mail is confidential, may contain proprietary information
of the
Cooper Cameron Corporation and its operating Divisions
and may be
confidential or privileged.
This e-mail should be read, copied,
disseminated and/or used only
by the addressee. If you have received
this message in error please
delete it, together with any attachments,
from your
system.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
List
info : http://www.activedir.org/mail_list.htm
List
FAQ : http://www.activedir.org/list_faq.htm
List
archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
This e-mail is confidential, may contain proprietary information
of the Cooper Cameron Corporation and its operating Divisions
and may be confidential or privileged.
This e-mail should be read, copied, disseminated and/or used only
by the addressee. If you have received this message in error please
delete it, together with any attachments, from your system.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
This e-mail is confidential, may contain proprietary information
of the Cooper Cameron Corporation and its operating Divisions
and may be confidential or privileged.
This e-mail should be read, copied, disseminated and/or used only
by the addressee. If you have received this message in error please
delete it, together with any attachments, from your system.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
-------APPLEBEE'S INTERNATIONAL, INC.
CONFIDENTIALITY NOTICE------- PRIVILEGED / CONFIDENTIAL INFORMATION may be
contained in this message or any attachments. This information is strictly
confidential and may be subject to attorney-client privilege. This message is
intended only for the use of the named addressee. If you are not the intended
recipient of this message, unauthorized forwarding, printing, copying,
distribution, or using such information is strictly prohibited and may be
unlawful. If you have received this in error, you should kindly notify the
sender by reply e-mail and immediately destroy this message. Unauthorized
interception of this e-mail is a violation of federal criminal law. Applebee's
International, Inc. reserves the right to monitor and review the content of
all messages sent to and from this e-mail address. Messages sent to or from
this e-mail address may be stored on the Applebee's International, Inc. e-mail
system.
|
