AD Integrity Checker ??

[Patrickm]

I have a Windows 2000 AD Domian, where ALL servers are running Windows 2000
Server. We recently started rolling out Windows XP to the clients, all
previously Win2K pro. On my particular machine I have XP Pro with all the
admin tools ( Admin Pak, Exchange Admin etc etc. etc) to manage the domain.
I just put XP SP2 on MY Workstation and now I'm experiencing all sorts of
strange behaviors on the domain in regards to domain policies. People are
not getting mapped drives, Folder redirections works randomly, users are
getting "Access Denied" errors to server shares they've been using for
years, accounts are getting locked out for no apparent reason, people are
being prompted to change passwords, when they do, they continue to get
prompted at the next login to change them again, just all sorts of weird
sh*t, very sporadically. The one thing that I have noticed is that the
default.ADM files and policy.adm files on the domain controllers now have
the same date and time as the new .adm files that were installed on my XP
workstation with SP2. Is there any type of tool that I can run on the DC's
that will report/fix/repair any inconsistancies with .adm files. I have read
that the .adm are very specific to OS and SP levels and what I have appears
to be incorrect but I am not positive, nor do I know how to correct it, if
it is wrong??? Please Help

 

[Mark Renoden [MSFT]]

Hi Patrick

To start .ADM files are not related to security policies so the XP SP2
versions shouldn't effect this.

Some background ... when you edit or create a policy, the .ADM files stored
in the local %windir%\inf folder are used provided they are date stamped
later than the ones that already exist for the policy in SYSVOL. If they
are, they're copied over the ones in sysvol. You can update the .ADM files
in the %windir%\inf folder of other operating systems/service packs by
grabbing one of the .MSI packages from:

http://www.microsoft.com/downloads/...4B-7112-4B6C-AD4A-BBF3802A5C9B&displaylang=en

Also be aware of

http://support.microsoft.com/default.aspx?kbid=842933

The behaviour you're seeing with folder redirection, drive mapping and
account lockout is probably unrelated. I'd investigate each of these issues
on a case by case basis.

HTH
--
Mark Renoden [MSFT]
Windows Platform Support Team
Email: (e-mail address removed)

Please note you'll need to strip ".online" from my email address to email
me; I'll post a response back to the group.

This posting is provided "AS IS" with no warranties, and confers no rights.