Corrupt GPO? How do I fix it?

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

Guest
Archived from groups: microsoft.public.win2000.group_policy (More info?)

Greetings-

Single Site, single domain; three DCS; two are Windows Server 2003, Upgraded
from Win2K; One is Win2K (it's our mail server and we're planning on
demoting it soon)
I have some GPOs which apparently aren't showing all the subsections they
should be.

Using GPMC, I do a report on the settings for GPO "A". It shows several
settings applied from the Computer Settings>Administrative Templates>Network
folder (specifically, the Offline Files, SNMP and Network Connections
sub-folders)

The PROBLEM is when I edit the GPO and browse to Computer
Settings>Administrative Templates>Network I DON'T have the SNMP folder. Why
can't I see it? How can I fix this? As I said before, there is a setting
applied from under this folder and I need to change it.

--
Thanx
OregonSteve

"..You should never, never doubt what nobody is sure about." -Willy Wonka
 
Archived from groups: microsoft.public.win2000.group_policy (More info?)

I suspect that the .adm file associated with that GPO is probably damaged.
By default, when you edit a GPO, you're focused on the GPO storage on the
PDC emulator DC in your domain. Look on that DC, under SYSVOL, within the
Policies folder. Under the policies folder, you'll see a number of
GUID-named folders. One of them should correspond to the GUID of your
problem GPO (you can get the GPO's GUID easily by viewing the GPO Properties
from within the GPO editor). Under the GUID-named folder for your problem
GPO, go into the ADM folder and look for a file called system.adm. Compare
that file size and date/timestamp to the same file within the ADM folder of
another GPO on SYSVOL. I'm guessing the file in your problem GPO is
smaller. Try copying the system.adm from the good ADM folder to that
problematic ADM folder on the PDC emulator, then try editing the GPO again.

--
Darren Mar-Elia
MS-MVP-Windows Management
http://www.gpoguy.com



"OregonSteve" <steven.r.smothers@state.or.us> wrote in message
news:egEOsL2cEHA.3128@TK2MSFTNGP11.phx.gbl...
> Greetings-
>
> Single Site, single domain; three DCS; two are Windows Server 2003,
Upgraded
> from Win2K; One is Win2K (it's our mail server and we're planning on
> demoting it soon)
> I have some GPOs which apparently aren't showing all the subsections they
> should be.
>
> Using GPMC, I do a report on the settings for GPO "A". It shows several
> settings applied from the Computer Settings>Administrative
Templates>Network
> folder (specifically, the Offline Files, SNMP and Network Connections
> sub-folders)
>
> The PROBLEM is when I edit the GPO and browse to Computer
> Settings>Administrative Templates>Network I DON'T have the SNMP folder.
Why
> can't I see it? How can I fix this? As I said before, there is a setting
> applied from under this folder and I need to change it.
>
> --
> Thanx
> OregonSteve
>
> "..You should never, never doubt what nobody is sure about." -Willy Wonka
>
>
 
Archived from groups: microsoft.public.win2000.group_policy (More info?)

GREAT! Worked like a charm.

--
Thanx
OregonSteve

"..You should never, never doubt what nobody is sure about." -Willy Wonka






"Darren Mar-Elia" <dmanonymous@discussions.microsoft.com> wrote in message
news:eDjiaX2cEHA.3988@tk2msftngp13.phx.gbl...
> I suspect that the .adm file associated with that GPO is probably damaged.
> By default, when you edit a GPO, you're focused on the GPO storage on the
> PDC emulator DC in your domain. Look on that DC, under SYSVOL, within the
> Policies folder. Under the policies folder, you'll see a number of
> GUID-named folders. One of them should correspond to the GUID of your
> problem GPO (you can get the GPO's GUID easily by viewing the GPO
Properties
> from within the GPO editor). Under the GUID-named folder for your problem
> GPO, go into the ADM folder and look for a file called system.adm. Compare
> that file size and date/timestamp to the same file within the ADM folder
of
> another GPO on SYSVOL. I'm guessing the file in your problem GPO is
> smaller. Try copying the system.adm from the good ADM folder to that
> problematic ADM folder on the PDC emulator, then try editing the GPO
again.
>
> --
> Darren Mar-Elia
> MS-MVP-Windows Management
> http://www.gpoguy.com
>
>
>
> "OregonSteve" <steven.r.smothers@state.or.us> wrote in message
> news:egEOsL2cEHA.3128@TK2MSFTNGP11.phx.gbl...
> > Greetings-
> >
> > Single Site, single domain; three DCS; two are Windows Server 2003,
> Upgraded
> > from Win2K; One is Win2K (it's our mail server and we're planning on
> > demoting it soon)
> > I have some GPOs which apparently aren't showing all the subsections
they
> > should be.
> >
> > Using GPMC, I do a report on the settings for GPO "A". It shows several
> > settings applied from the Computer Settings>Administrative
> Templates>Network
> > folder (specifically, the Offline Files, SNMP and Network Connections
> > sub-folders)
> >
> > The PROBLEM is when I edit the GPO and browse to Computer
> > Settings>Administrative Templates>Network I DON'T have the SNMP folder.
> Why
> > can't I see it? How can I fix this? As I said before, there is a
setting
> > applied from under this folder and I need to change it.
> >
> > --
> > Thanx
> > OregonSteve
> >
> > "..You should never, never doubt what nobody is sure about." -Willy
Wonka
> >
> >
>
>
 
Archived from groups: microsoft.public.win2000.group_policy (More info?)

Darren Mar-Elia wrote:
> *I suspect that the .adm file associated with that GPO is probably
> damaged.
> By default, when you edit a GPO, you're focused on the GPO storage on
> the
> PDC emulator DC in your domain. Look on that DC, under SYSVOL, within
> the
> Policies folder. Under the policies folder, you'll see a number of
> GUID-named folders. One of them should correspond to the GUID of
> your
> problem GPO (you can get the GPO's GUID easily by viewing the GPO
> Properties
> from within the GPO editor). Under the GUID-named folder for your
> problem
> GPO, go into the ADM folder and look for a file called system.adm.
> Compare
> that file size and date/timestamp to the same file within the ADM
> folder of
> another GPO on SYSVOL. I'm guessing the file in your problem GPO is
> smaller. Try copying the system.adm from the good ADM folder to that
> problematic ADM folder on the PDC emulator, then try editing the GPO
> again.
>
> --
> Darren Mar-Elia
> MS-MVP-Windows Management
> http://www.gpoguy.com
>
>
>
> "OregonSteve" <steven.r.smothers@state.or.us> wrote in message
> news:egEOsL2cEHA.3128@TK2MSFTNGP11.phx.gbl...
> > Greetings-
> >
> > Single Site, single domain; three DCS; two are Windows Server
> 2003,
> Upgraded
> > from Win2K; One is Win2K (it's our mail server and we're planning
> on
> > demoting it soon)
> > I have some GPOs which apparently aren't showing all the
> subsections they
> > should be.
> >
> > Using GPMC, I do a report on the settings for GPO "A". It shows
> several
> > settings applied from the Computer Settings>Administrative
> Templates>Network
> > folder (specifically, the Offline Files, SNMP and Network
> Connections
> > sub-folders)
> >
> > The PROBLEM is when I edit the GPO and browse to Computer
> > Settings>Administrative Templates>Network I DON'T have the SNMP
> folder.
> Why
> > can't I see it? How can I fix this? As I said before, there is a
> setting
> > applied from under this folder and I need to change it.
> >
> > --
> > Thanx
> > OregonSteve
> >
> > "..You should never, never doubt what nobody is sure about."
> -Willy Wonka
> >
> > *



--
zounglas
------------------------------------------------------------------------
Posted via http://www.mcse.ms
------------------------------------------------------------------------
View this thread: http://www.mcse.ms/message895363.html
 
Archived from groups: microsoft.public.win2000.group_policy (More info?)

I tried the trick but it did not work for me.

Do I have to reboot the PDC emulator in order to work?

The symptoms are identical, and I have lost access to the GPO while I
was changing/adding ADM's.

So I assume that you are right about the system.adm being the
problem... the system.adm in another GPO is larger as you suggested,
and I did copy it over to the dammaged GPO...but yet this solution did
not do it for me.

Any ideas?



Darren Mar-Elia wrote:
> *I suspect that the .adm file associated with that GPO is probably
> damaged.
> By default, when you edit a GPO, you're focused on the GPO storage on
> the
> PDC emulator DC in your domain. Look on that DC, under SYSVOL, within
> the
> Policies folder. Under the policies folder, you'll see a number of
> GUID-named folders. One of them should correspond to the GUID of
> your
> problem GPO (you can get the GPO's GUID easily by viewing the GPO
> Properties
> from within the GPO editor). Under the GUID-named folder for your
> problem
> GPO, go into the ADM folder and look for a file called system.adm.
> Compare
> that file size and date/timestamp to the same file within the ADM
> folder of
> another GPO on SYSVOL. I'm guessing the file in your problem GPO is
> smaller. Try copying the system.adm from the good ADM folder to that
> problematic ADM folder on the PDC emulator, then try editing the GPO
> again.
>
> --
> Darren Mar-Elia
> MS-MVP-Windows Management
> http://www.gpoguy.com
>
>
>
> "OregonSteve" <steven.r.smothers@state.or.us> wrote in message
> news:egEOsL2cEHA.3128@TK2MSFTNGP11.phx.gbl...
> > Greetings-
> >
> > Single Site, single domain; three DCS; two are Windows Server
> 2003,
> Upgraded
> > from Win2K; One is Win2K (it's our mail server and we're planning
> on
> > demoting it soon)
> > I have some GPOs which apparently aren't showing all the
> subsections they
> > should be.
> >
> > Using GPMC, I do a report on the settings for GPO "A". It shows
> several
> > settings applied from the Computer Settings>Administrative
> Templates>Network
> > folder (specifically, the Offline Files, SNMP and Network
> Connections
> > sub-folders)
> >
> > The PROBLEM is when I edit the GPO and browse to Computer
> > Settings>Administrative Templates>Network I DON'T have the SNMP
> folder.
> Why
> > can't I see it? How can I fix this? As I said before, there is a
> setting
> > applied from under this folder and I need to change it.
> >
> > --
> > Thanx
> > OregonSteve
> >
> > "..You should never, never doubt what nobody is sure about."
> -Willy Wonka
> >
> > *



--
zounglas
------------------------------------------------------------------------
Posted via http://www.mcse.ms
------------------------------------------------------------------------
View this thread: http://www.mcse.ms/message895363.html