PC Review


Reply
Thread Tools Rate Thread

Cleaning up Group Policies

 
 
mhoneycutt@pcassistance.com
Guest
Posts: n/a
 
      13th Mar 2006
I have a Windows 2000 domain, where the domain controller was re-dated
multiple times. There are actually 5 group policies, but the folder
C:\WINNT\SYSVOL\sysvol\domain.name has over 500 folders of policies
with inside each.

I ended up doing an authoritative System State restore, to get
replication running again between the DC's. But I still have those 500
plus folders....

These folders seem to be variants of the real GPO's.
Policies_NTFRS_0001294d
Policies_NTFRS_0001294d_NTFRS_00021fd2
Policies_NTFRS_0001294d_NTFRS_00021fd2_NTFRS_0001e2c9
Policies_NTFRS_0001294d_NTFRS_00021fd2_NTFRS_0001e2c9_NTFRS_00021a35
Policies_NTFRS_0001294d_NTFRS_00021fd2_NTFRS_0001e2c9_NTFRS_00021a35_NTFRS_0003ec36

And so on -
After replication completed I am aslo receiving this error regularly:
Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1000
Date: 3/13/2006
Time: 4:17:09 AM
User: NT AUTHORITY\SYSTEM
Computer: SVRLR04
Description:
Windows cannot access the file gpt.ini for GPO The file must be
present at the location <>. (). Group Policy processing aborted.

Looking inside the above referenced folders - only some of the 5
policies show under the various folders, except the first. It seems to
have the 5 GUID's shown in Active Directory\Users &
Computers\System\Policies.

Any recommendations on how to clean this mess up will be greatly
appreciated.

 
Reply With Quote
 
 
 
 
=?Utf-8?B?QnJpYW4gRGVsYW5leQ==?=
Guest
Posts: n/a
 
      17th Mar 2006
How many DCs? If it's not significant (< 10) here's what you do:

1.) Stop the File Replication Service on ALL your DCs
2.) Clean up the sysvol on your PDC Emulator so that it only contains
policies and scripts, get rid of the other ones (the morphs)
3.) Set the registry key
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NtFrs\Parameters\Backup/Restore\Process at Startup\Burflags to d4 on the PDC Emulator
4.) Start the File replication service on the PDC Emulator and wait for a
13516 event in your File Replication Service log
5.) Set the registry key
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NtFrs\Parameters\Backup/Restore\Process
at Startup\Burflags to d2 on an additional domain controller and Start the
File Replication Service on it
6.) Wait for 13516 in the file replication service log on that additional DC
7.) Repeat 5&6 for each additional DC until you are done.

--
Brian Delaney, MCSE


"(E-Mail Removed)" wrote:

> I have a Windows 2000 domain, where the domain controller was re-dated
> multiple times. There are actually 5 group policies, but the folder
> C:\WINNT\SYSVOL\sysvol\domain.name has over 500 folders of policies
> with inside each.
>
> I ended up doing an authoritative System State restore, to get
> replication running again between the DC's. But I still have those 500
> plus folders....
>
> These folders seem to be variants of the real GPO's.
> Policies_NTFRS_0001294d
> Policies_NTFRS_0001294d_NTFRS_00021fd2
> Policies_NTFRS_0001294d_NTFRS_00021fd2_NTFRS_0001e2c9
> Policies_NTFRS_0001294d_NTFRS_00021fd2_NTFRS_0001e2c9_NTFRS_00021a35
> Policies_NTFRS_0001294d_NTFRS_00021fd2_NTFRS_0001e2c9_NTFRS_00021a35_NTFRS_0003ec36
>
> And so on -
> After replication completed I am aslo receiving this error regularly:
> Event Type: Error
> Event Source: Userenv
> Event Category: None
> Event ID: 1000
> Date: 3/13/2006
> Time: 4:17:09 AM
> User: NT AUTHORITY\SYSTEM
> Computer: SVRLR04
> Description:
> Windows cannot access the file gpt.ini for GPO The file must be
> present at the location <>. (). Group Policy processing aborted.
>
> Looking inside the above referenced folders - only some of the 5
> policies show under the various folders, except the first. It seems to
> have the 5 GUID's shown in Active Directory\Users &
> Computers\System\Policies.
>
> Any recommendations on how to clean this mess up will be greatly
> appreciated.
>
>

 
Reply With Quote
Reply

Thread Tools
Rate This Thread
Rate This Thread:

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Group Policies VS Group Policy folders in SYSVOL =?Utf-8?B?Y2Rlbm5pcw==?= Microsoft Windows 2000 Group Policy 4 10th Feb 2006 01:56 PM
Active Directory Group Policies not showing in Group Policy editor Chupacabra Microsoft Windows 2000 Group Policy 2 9th Dec 2004 05:18 PM
Creating a local user/group using Group Policies KDP Microsoft Windows 2000 Group Policy 1 12th Nov 2004 03:26 AM
Creating a local user/group using Group Policies KDP Microsoft Windows 2000 Active Directory 1 12th Nov 2004 03:26 AM
Creating Group Policies using the Group Policy Management MMC Sabo, Eric Microsoft Windows 2000 Group Policy 1 2nd Jul 2003 06:36 PM


Features
 

Advertising
 

Newsgroups
 


All times are GMT +1. The time now is 01:22 PM.