Create a Group Policy Central Store
一、How to create a Group Policy Central Store
You have downloaded or created your own Group Policy Administrative Templates, and would like them to be stored centrally, opposed to individually on each Domain Controller.
Here’s how to create a Group Policy Central Store:
Solution
- Open Group Policy Management.
- Right-click on the Default Domain Controllers Policy under Group Policy Objects, and view the Settings Tab.
- Notice Policy definitions (ADMX files) retrieved from the local machine is displayed under Administrative Templates:
- Copy the C:\Windows\PolicyDefinitions folder to the C:\Windows\SYSVOL\domain\Policies folder:
- Now if we check the Default Domain Controller Policy Settings Tab, we can see Policy definitions (ADMX files) retrieved from the central store is displayed under Administrative Templates:
All current and future Group Policy Administrative Templates will now be kept in the Central Store.
二、组策略控制面板异常:
1.
- Rename “PolicyDefinitions_NTFRS_48964141” folder on the DC that you created “PolicyDefinitions” folder to “PolicyDefinitionsOLD” (or any name you want except PolicyDefinitions)
- Allow enough time to wait the change replicate to all other DCs.
- Then rename the folder back to “PolicyDefinitions”
- Check whether it works
More information, please refer to the article:
Folder name is changed to "FolderName_NTFRS_<xxxxxxxx>"
http://support.microsoft.com/kb/328492/EN-US
If it is not working, please try step 2.
2.
- Delete “PolicyDefinitions_NTFRS_48964141” folder and wait the change replicate to all other DCs.
- Stop “File Replication Service” on all the DCs
- Logon PDC and do Authoritative FRS restore. Here is steps:
- Click Start, and then click Run.
- In the Open box, type regedit and then press ENTER.
- Locate the following subkey in the registry:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NtFrs\Parameters\Backup/Restore\Process at Startup
- In the right pane, double click BurFlags.
- In the Edit DWORD Value dialog box, type D4 and then click OK.
- Quit Registry Editor, and then switch to the Command box.
- In the Command box, type net start ntfrs.
- Quit the Command box.
- Logon on other DCs and do nonauthoritative restores in turn
- Click Start, and then click Run.
- In the Open box, type regedit and then press ENTER.
- Locate the following subkey in the registry:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NtFrs\Parameters\Backup/Restore\Process at Startup
- In the right pane, double-click "BurFlags". In the "Edit DWORD Value" dialog box, type "D2" (without the quotation marks) and then click "OK".
- Quit Registry Editor.
- Click Start, click Run, type in "net start NTFRS" (without the quotation marks) and press ENTER to start File Replication Service.
More information, please refer to the article:
Using the BurFlags registry key to reinitialize File Replication Service replica sets
参考博文:http://www.virtuallyimpossible.co.uk/how-to-create-a-group-policy-central-store/
Create a Group Policy Central Store的更多相关文章
- Managing Group Policy with PowerShell
Overview In this article, I’ll talk about your options when it comes to managing Group Policy using ...
- Setting IE11 with Group Policy Preferences
一.Setting Home Page with Group Policy Preferences 1.Open the Group Policy Management Console and cre ...
- Three Steps to Migrate Group Policy Between Active Directory Domains or Forests Using PowerShell
Three Steps Ahead Have you ever wished that you had three legs? Imagine how much faster you could ru ...
- DFS security warning and use group policy to set up internet security zones
Opening a file from a DFS domain share shows a security warning while openning from the server share ...
- 10 Common Problems Causing Group Policy To Not Apply
10 Common Problems Causing Group Policy To Not Apply Group Policy is a solid tool and is very stable ...
- How to apply Local Group Policy settings silently using the ImportRegPol.exe and Apply_LGPO_Delta.exe utilities.
参考:http://supportishere.com/how-to-apply-local-group-policy-settings-silently-using-the-importregpol ...
- RDP setting group policy
RDP setting group policy 1.Login to domain controller and go to Group Policy Management tool2.Click ...
- How to Add Trust Sites into IE before IE10 through Group Policy
Due to IE10 published, I'll conclude the methods that how to add trust sites in to IE of the version ...
- [转]Missing MSS Settings in Security Options of Group Policy (GPO)
I'm currently working on a new Windows Server 2012 and Windows 8 project. As part of that project is ...
随机推荐
- Lintcode---区间求和 I
给定一个整数数组(下标由 0 到 n-1,其中 n 表示数组的规模),以及一个查询列表.每一个查询列表有两个整数 [start, end] . 对于每个查询,计算出数组中从下标 start 到 end ...
- LINQ - 在Where條件式中使用in與not in(转载)
算算時間,接觸LINQ也有一個月的時間了,可以算是落伍兼新生,不過最近在寫專案的時候,遇到了在LINQ的Where條件式中要如何使用in與 not in呢!? 這時候真的只能坐在位子上仰天長笑,開始懷 ...
- atom执行num run dev报错
# atom运行npm run dev报错问题 运行描述 vue项目,直接在终端中运行 npm run dev 可以成功执行.但是在atom安装的platformio-ide-terminal插件中打 ...
- signed distance field 算法
将二值图转化成signed distance field后,可以在双线性插值下实现平滑放大. 定义: 到前景的distance field:各点到最近前景点的距离. 到背景的distance fiel ...
- 百度语音识别demo:去掉离线识别功能
如果离线识别功能不是必须的,则为了减小包体积,可按下面方法将官方demo中的离线功能去掉: 1,删除loadOfflineEngine调用.2,删除data和license文件夹. 如此可使包体积减少 ...
- python学习之io模块
class io.BytesIO([initial_bytes]) 他是一个_io.BytesIO对象. 用这个类的实例可以操作内存缓冲区中的字节流. >>> s = 'hello' ...
- 李洪强iOS开发OC[001]-NSLog函数的使用方法
- Ajax同步与异步优缺点与使用
一.什么是同步请求:(false) 同步请求即是当前发出请求后,浏览器什么都不能做,必须得等到请求完成返回数据之后,才会执行后续的代码,相当于是排队,前一个人办理完自己的事务,下一个人才能 ...
- MySQL 记录中包含换行符
换行符: \r\n \r CHAR(10) 处理方法: REPLACE(str,from_str,to_str); 如:REPLACE('aaa\nbbb','\n','');
- Golang并发原理及GPM调度策略(一)
其实从一开始了解到go的goroutine概念就应该想到,其实go应该就是在内核级线程的基础上做了一层逻辑上的虚拟线程(用户级线程)+ 线程调度系统,如此分析以后,goroutine也就不再那么神秘了 ...