Group Policy version in SYSVOL and AD do not match

[Guest]

I have a single policy out of many that I seem to have a problem with. The
default domain policy has a mismatch in both the user and computer version.
Each shows the AD version ahead of the sysvol version. I have now uypdated
the policy twice and in all occasions the AD incremented while the sysvol did
not. I know replication is working as other policy changes are reflected
correctly. I've even added a text file to the directory that holds that
policy and that file replicated without issue. Anything I should be looking
for or is there a way to force synchronization of one policy between AD and
sysvol??

Thanks in advance,
Marc

 

[Cary Shultz [A.D. MVP]]

Marc,

Are you sure that this is a problem? Does the GPO in question work? All?
Some? None?

While Microsoft would like both versions to be in synch I have found that
this does not need to be the case. And, sometimes they will be out of synch
for a short period of time ( we might both have a different definition for
'short'..... ).

What troubleshooting techniques have you done so for?

You mentioned that you have placed a .txt file in the SYSVOL of one Domain
Controller. You stated that it replicated to all of the other Domain
Controllers. What happens if you create a user account object ( do not
mail-enable it )? Does this user account object replicate to all of the
other Domain Controllers? What you are checking here is the replication.
There are two parts to a GPO: the GPC and the GPT. The GPC, or Group Policy
Container, resides in the AD ( specifically in the Domain NC ) and is
subject to Active Directory Replication ( both Intersite and
Intrasite.....you do not tell us if you have only one Site or if you have
multiple Sites ). The GPT, or Group Policy Template, resides in the SYSVOL
and is subject to that replication ( handled by FRS ).

If you have done both and all is well then I might not worry. However, we
need to make sure that things eventually do synch up.

Have you installed the Support Tools ( located on the Windows 2000 Service
Pack CD as well as on the MS web site ) and taken a look at GPOTOOL and
Replmon? These two will be your friend.

--
Cary W. Shultz
Roanoke, VA 24014
Microsoft Active Directory MVP

http://www.activedirectory-win2000.com
http://www.grouppolicy-win2000.com