Corrupt GPO? How do I fix it?

[OregonSteve]

Greetings-

Single Site, single domain; three DCS; two are Windows Server 2003, Upgraded
from Win2K; One is Win2K (it's our mail server and we're planning on
demoting it soon)
I have some GPOs which apparently aren't showing all the subsections they
should be.

Using GPMC, I do a report on the settings for GPO "A". It shows several
settings applied from the Computer Settings>Administrative Templates>Network
folder (specifically, the Offline Files, SNMP and Network Connections
sub-folders)

The PROBLEM is when I edit the GPO and browse to Computer
Settings>Administrative Templates>Network I DON'T have the SNMP folder. Why
can't I see it? How can I fix this? As I said before, there is a setting
applied from under this folder and I need to change it.

 

[Darren Mar-Elia]

I suspect that the .adm file associated with that GPO is probably damaged.
By default, when you edit a GPO, you're focused on the GPO storage on the
PDC emulator DC in your domain. Look on that DC, under SYSVOL, within the
Policies folder. Under the policies folder, you'll see a number of
GUID-named folders. One of them should correspond to the GUID of your
problem GPO (you can get the GPO's GUID easily by viewing the GPO Properties
from within the GPO editor). Under the GUID-named folder for your problem
GPO, go into the ADM folder and look for a file called system.adm. Compare
that file size and date/timestamp to the same file within the ADM folder of
another GPO on SYSVOL. I'm guessing the file in your problem GPO is
smaller. Try copying the system.adm from the good ADM folder to that
problematic ADM folder on the PDC emulator, then try editing the GPO again.

 

[OregonSteve]

GREAT! Worked like a charm.

--
Thanx
OregonSteve

"..You should never, never doubt what nobody is sure about." -Willy Wonka

 

[zounglas]

*I suspect that the .adm file associated with that GPO is probably
damaged.
By default, when you edit a GPO, you're focused on the GPO storage on
the
PDC emulator DC in your domain. Look on that DC, under SYSVOL, within
the
Policies folder. Under the policies folder, you'll see a number of
GUID-named folders. One of them should correspond to the GUID of
your
problem GPO (you can get the GPO's GUID easily by viewing the GPO
Properties
from within the GPO editor). Under the GUID-named folder for your
problem
GPO, go into the ADM folder and look for a file called system.adm.
Compare
that file size and date/timestamp to the same file within the ADM
folder of
another GPO on SYSVOL. I'm guessing the file in your problem GPO is
smaller. Try copying the system.adm from the good ADM folder to that
problematic ADM folder on the PDC emulator, then try editing the GPO
again.

 

[zounglas]

I tried the trick but it did not work for me.

Do I have to reboot the PDC emulator in order to work?

The symptoms are identical, and I have lost access to the GPO while
was changing/adding ADM's.

So I assume that you are right about the system.adm being th
problem... the system.adm in another GPO is larger as you suggested
and I did copy it over to the dammaged GPO...but yet this solution di
not do it for me.

Any ideas?

*I suspect that the .adm file associated with that GPO is probabl
damaged.
By default, when you edit a GPO, you're focused on the GPO storage o
the
PDC emulator DC in your domain. Look on that DC, under SYSVOL, withi
the
Policies folder. Under the policies folder, you'll see a number of
GUID-named folders. One of them should correspond to the GUID o
your
problem GPO (you can get the GPO's GUID easily by viewing the GP
Properties
from within the GPO editor). Under the GUID-named folder for you
problem
GPO, go into the ADM folder and look for a file called system.adm
Compare
that file size and date/timestamp to the same file within the AD
folder of
another GPO on SYSVOL. I'm guessing the file in your problem GPO is
smaller. Try copying the system.adm from the good ADM folder to that
problematic ADM folder on the PDC emulator, then try editing the GP
again.

-
zoungla