[ActiveDir] GP version mismatch between DS & SYSVOL

[Kamlesh Parmar]

You know, there are some settings like, "automatically detect configuration settings" under IE maintenance and  some certificate enrollment settings etc.

Which once configured, can't be made "not - configured" as you can do with other settings.

This values are either disable or enable, there is no option like "not configured"

I have two or three such policies, and I want to get rid of these settings, without recreating the GPO.
so I thought I would go directly in SYSVOL folder of this policies and delete the appropriate settings and UP the version number in gpt.ini so that it replicates.

But, since I have not used standard group policy editor, the version in Active Directory remains old.
Now it gives error in monitoring tools saying version mismatch between DS & SYSVOL.

So,
1)  Is there better way to handle these sticky settings? other than recreating GPO.
2)  Can I change the version in DS using adsiedit.msc to reflect the same as SYSVOL? will it have any effect on GP application?


--
Kamlesh
~~~~~~~~~~~~~~~~~~~~~~~~~~~
"Fortune and Love befriend the bold"
~~~~~~~~~~~~~~~~~~~~~~~~~~~