一、How to create a Group Policy Central Store

You have downloaded or created your own Group Policy Administrative Templates, and would like them to be stored centrally, opposed to individually on each Domain Controller.

Here’s how to create a Group Policy Central Store:

Solution

  1. Open Group Policy Management.
  2. Right-click on the Default Domain Controllers Policy under Group Policy Objects, and view the Settings Tab.
  3. Notice Policy definitions (ADMX files) retrieved from the local machine is displayed under Administrative Templates:
  1. Copy the C:\Windows\PolicyDefinitions folder to the C:\Windows\SYSVOL\domain\Policies folder:
  1. Now if we check the Default Domain Controller Policy Settings Tab, we can see Policy definitions (ADMX files) retrieved from the central store is displayed under Administrative Templates:

All current and future Group Policy Administrative Templates will now be kept in the Central Store.


二、组策略控制面板异常:

1.

  1. Rename “PolicyDefinitions_NTFRS_48964141” folder on the DC that you created “PolicyDefinitions” folder to “PolicyDefinitionsOLD” (or any name you want except PolicyDefinitions)
  2. Allow enough time to wait the change replicate to all other DCs.
  3. Then rename the folder back to “PolicyDefinitions”
  4. Check whether it works

More information, please refer to the article:

Folder name is changed to "FolderName_NTFRS_<xxxxxxxx>"

http://support.microsoft.com/kb/328492/EN-US

If it is not working, please try step 2.

2.

  1. Delete “PolicyDefinitions_NTFRS_48964141” folder and wait the change replicate to all other DCs.
  1. Stop “File Replication Service” on all the DCs
  1. Logon PDC and do Authoritative FRS restore. Here is steps:
  1. Click Start, and then click Run.
  2. In the Open box, type regedit and then press ENTER.
  3. Locate the following subkey in the registry:

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NtFrs\Parameters\Backup/Restore\Process at Startup

  1. In the right pane, double click BurFlags.
  2. In the Edit DWORD Value dialog box, type D4 and then click OK.
  3. Quit Registry Editor, and then switch to the Command box.
  4. In the Command box, type net start ntfrs.
  5. Quit the Command box.
  1. Logon on other DCs and do nonauthoritative restores in turn
  1. Click Start, and then click Run.
  2. In the Open box, type regedit and then press ENTER.
  3. Locate the following subkey in the registry:

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NtFrs\Parameters\Backup/Restore\Process at Startup

  1. In the right pane, double-click "BurFlags". In the "Edit DWORD Value" dialog box, type "D2" (without the quotation marks) and then click "OK".
  2. Quit Registry Editor.
  3. Click Start, click Run, type in "net start NTFRS" (without the quotation marks) and press ENTER to start File Replication Service.

More information, please refer to the article:

Using the BurFlags registry key to reinitialize File Replication Service replica sets

http://support.microsoft.com/kb/290762


参考博文:http://www.virtuallyimpossible.co.uk/how-to-create-a-group-policy-central-store/

Create a Group Policy Central Store的更多相关文章

  1. Managing Group Policy with PowerShell

    Overview In this article, I’ll talk about your options when it comes to managing Group Policy using ...

  2. Setting IE11 with Group Policy Preferences

    一.Setting Home Page with Group Policy Preferences 1.Open the Group Policy Management Console and cre ...

  3. Three Steps to Migrate Group Policy Between Active Directory Domains or Forests Using PowerShell

    Three Steps Ahead Have you ever wished that you had three legs? Imagine how much faster you could ru ...

  4. DFS security warning and use group policy to set up internet security zones

    Opening a file from a DFS domain share shows a security warning while openning from the server share ...

  5. 10 Common Problems Causing Group Policy To Not Apply

    10 Common Problems Causing Group Policy To Not Apply Group Policy is a solid tool and is very stable ...

  6. How to apply Local Group Policy settings silently using the ImportRegPol.exe and Apply_LGPO_Delta.exe utilities.

    参考:http://supportishere.com/how-to-apply-local-group-policy-settings-silently-using-the-importregpol ...

  7. RDP setting group policy

    RDP setting group policy 1.Login to domain controller and go to Group Policy Management tool2.Click ...

  8. How to Add Trust Sites into IE before IE10 through Group Policy

    Due to IE10 published, I'll conclude the methods that how to add trust sites in to IE of the version ...

  9. [转]Missing MSS Settings in Security Options of Group Policy (GPO)

    I'm currently working on a new Windows Server 2012 and Windows 8 project. As part of that project is ...

随机推荐

  1. socket 통신

    00.C# --> Application.ThreadException --> Application.Run --> Container --> Application. ...

  2. JVM虚拟机(二):堆、栈、方法区概念区别

    Java 堆 Java堆是和Java应用程序关系最密切的内存空间,几乎所有的对象都放在其中,并且Java堆完全是自动化管理,通过垃圾收集机制,垃圾对象会自动清理,不需自己去释放. 根据垃圾回收机制的不 ...

  3. 多线程-CountDownLatch,CyclicBarrier,Semaphore,Exchanger,Phaser

    CountDownLatch 一个同步辅助类,在完成一组正在其他线程中执行的操作之前,它允许一个或多个线程一直等待.用给定的计数初始化CountDownLatch.调用countDown()计数减一, ...

  4. Atitit .h5文件上传

    Atitit .h5文件上传 1. 上传原理1 2. Html1 3. Js2 4. uploadV2.js2 5. upServlet & FileUploadService {3 6. 注 ...

  5. 使用SQLite

    SQLite是一种嵌入式数据库,它的数据库就是一个文件.由于SQLite本身是C写的,而且体积很小,所以,经常被集成到各种应用程序中,甚至在iOS和Android的App中都可以集成. Python就 ...

  6. 正常断开连接情况下,判断非阻塞模式socket连接是否断开

    摘自:http://blog.chinaunix.net/uid-15014334-id-3429627.html 在UNIX/LINUX下, 1,对于主动关闭的SOCKET, recv返回-1,而且 ...

  7. 根据现有IP地址获取其地理位置(省份,城市等)的方法

    根据现有IP地址获取其地理位置(省份,城市等)的方法 function GetIpLookup($ip = ''){ if(empty($ip)){ return '请输入IP地址'; } $res ...

  8. layui实现点击按钮添加行(方法渲染创建的table)

    / jquery实现的搜索功能 $('#search_btn').on('click',function(){ var txt=$('#inputValue').val(); var value=$( ...

  9. 0054 Spring MVC的@Controller和@RequestMapping注解

    @Controller注解 该注解用来指示一个类是一个控制器,在Spring的配置xml文件中开启注解扫描 <context:conponent-scan base-package=" ...

  10. 无语的Filezilla

    之前也一直用filezilla,今天遇到个奇葩问题:在2008R2上装完filezilla server,本打算生成个证书用于SSL加密,没想到一直报错"Failed to initiali ...