Active Directory

[linuxnewbi]

Hello,

I have an active directory problem with regards to a satellite office. I have a DC in SITE 1 and I just setup a DC in SITE 2 - When I go to setup a group policy in SITE 2 at the very top of the "Computer Configuration" and "user configuration" window it states User Policy 1 [SITE 1 DC] - How can I change the group policy to reference the local server.
This creates a lot of lag when editing the group policy.

ie: User Policy 1 [SITE 2 DC]

Does this make sense - can anyone help?

Thanks

 

[ntinlin]

In GPMC do a right click at top of tree and select the DC you want to use.

Can't remember if you can/need to do that in the actual GP editing portion. But I do remember that it saves your choice.

Neill

 

[linuxnewbi]

When I first open the Group Policy Editor - The Server is correct (SITE2DC.domain.com) However when I enter a group policy on an OU within the active directory tree. The top line reads

%grouppolicyname% [SITE1DC.domain.com]
-Computer configuration
-User Configuration

I want to change this instance of SITEDC.domain.com to SITE2DC .domain.com

How does a person do this??

Thanks

 

[pagy]

Probably site 1 DC is the holds the PDC emulator role, editing or creation of group policy is done against the PDC emulator.

See here for more info on FSMO roles;

http://www.petri.co.il/understanding_fsmo_roles_in_ad.htm

Also this;
Options governing selection of a domain controller for GPMC

In GPMC, when you right-click a domain or the sites container and click Change Domain Controller, you see a Change Domain Controller dialog box. The domain controller options for GPMC are:
•

The one with the Operations Master token for the PDC emulator. This is the default and preferred option.
•

Use any available domain controller. This is the least safe option.
•

Use any available domain controller that is running Windows Server 2003 or later. This option is useful if you are restoring deleted GPOs that contain software installation settings. If possible, it is recommended to perform restoration of GPOs containing software installation settings on domain controllers running Windows Server 2003. For more information, see Restore using GPMC.
•

This domain controller. This option allows you to choose a specific domain controller from a list of domain controllers in the domain.

If you are changing the domain controller for a site, you can also choose any available trusted domain from the Look in this domain drop-down list box in the Change Domain Controller dialog box.

When you open the Group Policy Object Editor from GPMC it always uses the same domain controller that is targeted in GPMC for the domain where that GPO is located.

For step-by-step instructions for choosing a domain controller, see Specify a domain controller.

the above is from here;

http://technet2.microsoft.com/windo...ffd5-4125-92b3-ae26d9eaa3fc1033.mspx?mfr=true

The group policy will still be replicated to the dc in site 2 by normal replication.


Paul
MCSE


"Two things are infinite: the universe and human stupidity; and I'm not sure about the the universe."
Albert Einstein