PC Review


Reply
 
 
Frank A, Zanotti
Guest
Posts: n/a
 
      6th Jan 2004
Hi
I'm working on a problem with GPO's, but I have a question. In my
%systemroot%/sysvol/sysvol/domainname/Policies directory I see these folders
listed below.
{6AC1786C-016F-11D2-945F-00C04fB984F9}
{31B2F340-016D-11D2-945F-00C04FB984F9}
{77B9B1F9-888A-4331-AC33-C49363BCA982}
{A66B3D40-543F-4954-AAD6-803889B2F435}
{BC7DF157-6FB7-47B5-B9C3-8A6F6A9F2F3A}
{F672BD13-58BD-4982-8474-7BD5BFBC7C03}
Each folder contains three sub directories named (ADM), (Machine), and
(User). What I am testing is when I use GPEDIT according to a TechNet KB
(kb816662) If I do this on a system that has newer .adm file and I change or
even look at it using gpedit that the files on the local machine which are
located in %systemroot%/inf will get copied up to the domain sysvol folder
and overwrite the .adm files that are currently there. If I read the
document correctly. So I have two questions. My first question is what are
the above folder names what do they stand for, I thought one might be my
domain sid but my sid doesn't match any of the above, my sid is
(S-1-5-21-99165362-567814563-3911690144-1115), the above seems to be in
Hexadecimal. My second question is: on my local workstation which is XPsp1 I
went to the %systemroot%/inf and changed one of the .adm files, all I did
was change a letter in one of the comments so it wouldn't effect the
functionality of the file, the file that I changed is (wmplayer.adm), so now
I have a new timestamp on the file of today's date and time. Now what I did
was run gpedit from my workstation using the snapin (Active Directory Users
and Computers), right clicked on the domain and to the group policy tab then
to administration Templates, made a change and the closed the console, I
then went to the (%systemroot%/sysvol/sysvol/domainname/Policies ) and I
don't see that the file was copied up to the server. According to the
document as long as the file on the workstation had a new timestamp it would
inturn be copied up. Any help is greatly Appreciated.
Thanks In Advance
Frank A, Zanotti
(E-Mail Removed)


 
Reply With Quote
 
 
 
 
Frank A, Zanotti
Guest
Posts: n/a
 
      7th Jan 2004
FYI
I figured out both of the problems: on why the file did not copy up to the
sysvol, when I edited the file I changed a character i.e.: (e to an a) I
didn't add a character, according to another TechNet article(kb316977) both
the time stamp and the file size has to change in order for the copy up to
the sysvol to succeed. The folder names I was questioning were POLICYGUID
folders, so these are the GUID's for each policy I have. Now if I delete a
Policy does the folder get deleted as well, I'll have to test this.
Thanks
(E-Mail Removed)
"Frank A, Zanotti" <(E-Mail Removed)> wrote in message
news:btfa17$ad0$(E-Mail Removed)...
> Hi
> I'm working on a problem with GPO's, but I have a question. In my
> %systemroot%/sysvol/sysvol/domainname/Policies directory I see these

folders
> listed below.
> {6AC1786C-016F-11D2-945F-00C04fB984F9}
> {31B2F340-016D-11D2-945F-00C04FB984F9}
> {77B9B1F9-888A-4331-AC33-C49363BCA982}
> {A66B3D40-543F-4954-AAD6-803889B2F435}
> {BC7DF157-6FB7-47B5-B9C3-8A6F6A9F2F3A}
> {F672BD13-58BD-4982-8474-7BD5BFBC7C03}
> Each folder contains three sub directories named (ADM), (Machine), and
> (User). What I am testing is when I use GPEDIT according to a TechNet KB
> (kb816662) If I do this on a system that has newer .adm file and I change

or
> even look at it using gpedit that the files on the local machine which are
> located in %systemroot%/inf will get copied up to the domain sysvol folder
> and overwrite the .adm files that are currently there. If I read the
> document correctly. So I have two questions. My first question is what are
> the above folder names what do they stand for, I thought one might be my
> domain sid but my sid doesn't match any of the above, my sid is
> (S-1-5-21-99165362-567814563-3911690144-1115), the above seems to be in
> Hexadecimal. My second question is: on my local workstation which is XPsp1

I
> went to the %systemroot%/inf and changed one of the .adm files, all I did
> was change a letter in one of the comments so it wouldn't effect the
> functionality of the file, the file that I changed is (wmplayer.adm), so

now
> I have a new timestamp on the file of today's date and time. Now what I

did
> was run gpedit from my workstation using the snapin (Active Directory

Users
> and Computers), right clicked on the domain and to the group policy tab

then
> to administration Templates, made a change and the closed the console, I
> then went to the (%systemroot%/sysvol/sysvol/domainname/Policies ) and I
> don't see that the file was copied up to the server. According to the
> document as long as the file on the workstation had a new timestamp it

would
> inturn be copied up. Any help is greatly Appreciated.
> Thanks In Advance
> Frank A, Zanotti
> (E-Mail Removed)
>
>



 
Reply With Quote
 
 
 
 
ys@work
Guest
Posts: n/a
 
      7th Jan 2004
Hi Frank,

Typically, you wouldn't go and mess around with the policies folders in the
sysvol folder. SYSVOL is responsible for sharing the policies and scripts
for the domain. There is a copy on each DC and they are kept in sync by File
Replication Services (FRS).

To answer your questions, when you delete a policy object, you will be
prompted with 2 choices:
a. Remove the link from the list
b. Remove the link and delete the GPO permanently

If you choose (b), the GPO will be deleted from the SYSVOL container as
well.
If you choose (a), the GPO will still be around and you could link it to any
container by using the 'Add' button in the container's Group Policy tab.

P.S. To know which GUID is for which GPO, goto the container's Group Policy
property tab, select the Group Policy and open up the 'Properties' for the
policy. You will see the GUID for the policy under 'Unique Name' of the
General tab.


"Frank A, Zanotti" <(E-Mail Removed)> wrote in message
news:btfi1f$d4s$(E-Mail Removed)...
> FYI
> I figured out both of the problems: on why the file did not copy up to the
> sysvol, when I edited the file I changed a character i.e.: (e to an a) I
> didn't add a character, according to another TechNet article(kb316977)

both
> the time stamp and the file size has to change in order for the copy up to
> the sysvol to succeed. The folder names I was questioning were POLICYGUID
> folders, so these are the GUID's for each policy I have. Now if I delete a
> Policy does the folder get deleted as well, I'll have to test this.
> Thanks
> (E-Mail Removed)
> "Frank A, Zanotti" <(E-Mail Removed)> wrote in message
> news:btfa17$ad0$(E-Mail Removed)...
> > Hi
> > I'm working on a problem with GPO's, but I have a question. In my
> > %systemroot%/sysvol/sysvol/domainname/Policies directory I see these

> folders
> > listed below.
> > {6AC1786C-016F-11D2-945F-00C04fB984F9}
> > {31B2F340-016D-11D2-945F-00C04FB984F9}
> > {77B9B1F9-888A-4331-AC33-C49363BCA982}
> > {A66B3D40-543F-4954-AAD6-803889B2F435}
> > {BC7DF157-6FB7-47B5-B9C3-8A6F6A9F2F3A}
> > {F672BD13-58BD-4982-8474-7BD5BFBC7C03}
> > Each folder contains three sub directories named (ADM), (Machine), and
> > (User). What I am testing is when I use GPEDIT according to a TechNet KB
> > (kb816662) If I do this on a system that has newer .adm file and I

change
> or
> > even look at it using gpedit that the files on the local machine which

are
> > located in %systemroot%/inf will get copied up to the domain sysvol

folder
> > and overwrite the .adm files that are currently there. If I read the
> > document correctly. So I have two questions. My first question is what

are
> > the above folder names what do they stand for, I thought one might be my
> > domain sid but my sid doesn't match any of the above, my sid is
> > (S-1-5-21-99165362-567814563-3911690144-1115), the above seems to be in
> > Hexadecimal. My second question is: on my local workstation which is

XPsp1
> I
> > went to the %systemroot%/inf and changed one of the .adm files, all I

did
> > was change a letter in one of the comments so it wouldn't effect the
> > functionality of the file, the file that I changed is (wmplayer.adm), so

> now
> > I have a new timestamp on the file of today's date and time. Now what I

> did
> > was run gpedit from my workstation using the snapin (Active Directory

> Users
> > and Computers), right clicked on the domain and to the group policy tab

> then
> > to administration Templates, made a change and the closed the console, I
> > then went to the (%systemroot%/sysvol/sysvol/domainname/Policies ) and I
> > don't see that the file was copied up to the server. According to the
> > document as long as the file on the workstation had a new timestamp it

> would
> > inturn be copied up. Any help is greatly Appreciated.
> > Thanks In Advance
> > Frank A, Zanotti
> > (E-Mail Removed)
> >
> >

>
>



 
Reply With Quote
 
Frank A, Zanotti
Guest
Posts: n/a
 
      7th Jan 2004
Thanks you answered a question that just came up on how to find the guid of
the policy.
Thanks Again
Frank A, Zanotti
(E-Mail Removed)
"ys@work" <(E-Mail Removed)> wrote in message
news:%(E-Mail Removed)...
> Hi Frank,
>
> Typically, you wouldn't go and mess around with the policies folders in

the
> sysvol folder. SYSVOL is responsible for sharing the policies and scripts
> for the domain. There is a copy on each DC and they are kept in sync by

File
> Replication Services (FRS).
>
> To answer your questions, when you delete a policy object, you will be
> prompted with 2 choices:
> a. Remove the link from the list
> b. Remove the link and delete the GPO permanently
>
> If you choose (b), the GPO will be deleted from the SYSVOL container as
> well.
> If you choose (a), the GPO will still be around and you could link it to

any
> container by using the 'Add' button in the container's Group Policy tab.
>
> P.S. To know which GUID is for which GPO, goto the container's Group

Policy
> property tab, select the Group Policy and open up the 'Properties' for the
> policy. You will see the GUID for the policy under 'Unique Name' of the
> General tab.
>
>
> "Frank A, Zanotti" <(E-Mail Removed)> wrote in message
> news:btfi1f$d4s$(E-Mail Removed)...
> > FYI
> > I figured out both of the problems: on why the file did not copy up to

the
> > sysvol, when I edited the file I changed a character i.e.: (e to an a) I
> > didn't add a character, according to another TechNet article(kb316977)

> both
> > the time stamp and the file size has to change in order for the copy up

to
> > the sysvol to succeed. The folder names I was questioning were

POLICYGUID
> > folders, so these are the GUID's for each policy I have. Now if I delete

a
> > Policy does the folder get deleted as well, I'll have to test this.
> > Thanks
> > (E-Mail Removed)
> > "Frank A, Zanotti" <(E-Mail Removed)> wrote in message
> > news:btfa17$ad0$(E-Mail Removed)...
> > > Hi
> > > I'm working on a problem with GPO's, but I have a question. In my
> > > %systemroot%/sysvol/sysvol/domainname/Policies directory I see these

> > folders
> > > listed below.
> > > {6AC1786C-016F-11D2-945F-00C04fB984F9}
> > > {31B2F340-016D-11D2-945F-00C04FB984F9}
> > > {77B9B1F9-888A-4331-AC33-C49363BCA982}
> > > {A66B3D40-543F-4954-AAD6-803889B2F435}
> > > {BC7DF157-6FB7-47B5-B9C3-8A6F6A9F2F3A}
> > > {F672BD13-58BD-4982-8474-7BD5BFBC7C03}
> > > Each folder contains three sub directories named (ADM), (Machine), and
> > > (User). What I am testing is when I use GPEDIT according to a TechNet

KB
> > > (kb816662) If I do this on a system that has newer .adm file and I

> change
> > or
> > > even look at it using gpedit that the files on the local machine which

> are
> > > located in %systemroot%/inf will get copied up to the domain sysvol

> folder
> > > and overwrite the .adm files that are currently there. If I read the
> > > document correctly. So I have two questions. My first question is what

> are
> > > the above folder names what do they stand for, I thought one might be

my
> > > domain sid but my sid doesn't match any of the above, my sid is
> > > (S-1-5-21-99165362-567814563-3911690144-1115), the above seems to be

in
> > > Hexadecimal. My second question is: on my local workstation which is

> XPsp1
> > I
> > > went to the %systemroot%/inf and changed one of the .adm files, all I

> did
> > > was change a letter in one of the comments so it wouldn't effect the
> > > functionality of the file, the file that I changed is (wmplayer.adm),

so
> > now
> > > I have a new timestamp on the file of today's date and time. Now what

I
> > did
> > > was run gpedit from my workstation using the snapin (Active Directory

> > Users
> > > and Computers), right clicked on the domain and to the group policy

tab
> > then
> > > to administration Templates, made a change and the closed the console,

I
> > > then went to the (%systemroot%/sysvol/sysvol/domainname/Policies ) and

I
> > > don't see that the file was copied up to the server. According to the
> > > document as long as the file on the workstation had a new timestamp it

> > would
> > > inturn be copied up. Any help is greatly Appreciated.
> > > Thanks In Advance
> > > Frank A, Zanotti
> > > (E-Mail Removed)
> > >
> > >

> >
> >

>
>



 
Reply With Quote
 
 
 
Reply

Thread Tools
Rate This Thread
Rate This Thread:

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
sysvol domain issue Todd Hudson Windows XP Security 3 17th Apr 2004 09:20 AM
XP and SYSVOL Issues Amanda Windows XP Security 0 29th Jul 2003 08:35 PM
Re: sysvol replication ? Matjaz Ladava [MVP] Microsoft Windows 2000 Active Directory 1 22nd Jul 2003 03:37 PM
SYSVOL Replication David Microsoft Windows 2000 Active Directory 2 19th Jul 2003 04:29 AM
Re: SysVol - event id 1000 and 1001 Matjaz Ladava [MVP] Microsoft Windows 2000 Active Directory 3 10th Jul 2003 04:36 PM


Features
 

Advertising
 

Newsgroups
 


All times are GMT +1. The time now is 09:30 AM.