Weird - Settings gone missing in Domain GP editor

[nitrokid]

Hi

In the last 2 days, something has happened to my GP Editor on my SBS2k3 machine. Most of the settings under both the USER and COMPUTER administrative templates sections have disappeared. I am just left with a couple of sections left under 'windows components' and nothing else (see here:

http://legalcosts.uk.com/GP.JPG)

I have tried the solutions in the article at

http://technet2.microsoft.com/Windo...65b7-4084-a8ef-eb4ca907fe921033.mspx?mfr=true

All of the normal ADM files have been selected too.

Any ideas? Would it be a good idea if I replaced the DLL and the ADM files on the server with ones found elsewhere?

I should note that previous GPOs created with the settings that are now missing still work fine and also I've just looked at the server's LOCAL GPeditor and all of the usual settings are there, they just aren't displaying on the Domain GP editor

 

[ncotton]

Create a NEW GPO, if you get the same problem > Right click Admin Templates > add/remove templates > remove them all > click ok > right click again > add/remove > select your standard 5, make sure you are getting them from c:\windows\inf\

With these freshly imported, if you still get the same problem....replace all the ADMs with the originals, backups of the c:\windows\inf directory.

The GPOs aren't affected by corrupted ADMs as they are held in their own kind of policy file. The ADMs are only used to add/remove settings to the GPO policy file durring editing. However, I should caution you to messing around with the working GPOs whilst you have this problem. They will still run fine, just don't try and edit them (make any settings changes) as it will detect a change when it is saved, and the setting scope will be compiled and then remove references to any adm files that are not "imported", if you leave them as imported though, even if your settings aren't showing up, you should be alright. Personally, I would just leave them alone until you fix it. Test only on new GPOs first.

Another brain wave I've just had, you've not had any other strange behaviour to the file system have you recently? Check c:\windows\inf\system.adm manually yourself, make sure it is a) there and b) readable.

Hope this Helps.

Neil J Cotton
njc Information Systems
Systems Consultant

 

[markdmac]

I agree with Neil's advice. Give that a try and report back.

Also, were you editing the default domain policy? If so then you may need to recreate that policy (which should only be edited for password policies and nothing else).

You can use DCGPOFIX to reset the default policy.

http://technet2.microsoft.com/Windo...1907-4149-b6aa-9788d38209d21033.mspx?mfr=true

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript