SYSVOL

[Frank A, Zanotti]

Hi
I'm working on a problem with GPO's, but I have a question. In my
%systemroot%/sysvol/sysvol/domainname/Policies directory I see these folders
listed below.
{6AC1786C-016F-11D2-945F-00C04fB984F9}
{31B2F340-016D-11D2-945F-00C04FB984F9}
{77B9B1F9-888A-4331-AC33-C49363BCA982}
{A66B3D40-543F-4954-AAD6-803889B2F435}
{BC7DF157-6FB7-47B5-B9C3-8A6F6A9F2F3A}
{F672BD13-58BD-4982-8474-7BD5BFBC7C03}
Each folder contains three sub directories named (ADM), (Machine), and
(User). What I am testing is when I use GPEDIT according to a TechNet KB
(kb816662) If I do this on a system that has newer .adm file and I change or
even look at it using gpedit that the files on the local machine which are
located in %systemroot%/inf will get copied up to the domain sysvol folder
and overwrite the .adm files that are currently there. If I read the
document correctly. So I have two questions. My first question is what are
the above folder names what do they stand for, I thought one might be my
domain sid but my sid doesn't match any of the above, my sid is
(S-1-5-21-99165362-567814563-3911690144-1115), the above seems to be in
Hexadecimal. My second question is: on my local workstation which is XPsp1 I
went to the %systemroot%/inf and changed one of the .adm files, all I did
was change a letter in one of the comments so it wouldn't effect the
functionality of the file, the file that I changed is (wmplayer.adm), so now
I have a new timestamp on the file of today's date and time. Now what I did
was run gpedit from my workstation using the snapin (Active Directory Users
and Computers), right clicked on the domain and to the group policy tab then
to administration Templates, made a change and the closed the console, I
then went to the (%systemroot%/sysvol/sysvol/domainname/Policies ) and I
don't see that the file was copied up to the server. According to the
document as long as the file on the workstation had a new timestamp it would
inturn be copied up. Any help is greatly Appreciated.
Thanks In Advance
Frank A, Zanotti
(e-mail address removed)

 

[Frank A, Zanotti]

FYI
I figured out both of the problems: on why the file did not copy up to the
sysvol, when I edited the file I changed a character i.e.: (e to an a) I
didn't add a character, according to another TechNet article(kb316977) both
the time stamp and the file size has to change in order for the copy up to
the sysvol to succeed. The folder names I was questioning were POLICYGUID
folders, so these are the GUID's for each policy I have. Now if I delete a
Policy does the folder get deleted as well, I'll have to test this.
Thanks
(e-mail address removed)

 

[ys@work]

Hi Frank,

Typically, you wouldn't go and mess around with the policies folders in the
sysvol folder. SYSVOL is responsible for sharing the policies and scripts
for the domain. There is a copy on each DC and they are kept in sync by File
Replication Services (FRS).

To answer your questions, when you delete a policy object, you will be
prompted with 2 choices:
a. Remove the link from the list
b. Remove the link and delete the GPO permanently

If you choose (b), the GPO will be deleted from the SYSVOL container as
well.
If you choose (a), the GPO will still be around and you could link it to any
container by using the 'Add' button in the container's Group Policy tab.

P.S. To know which GUID is for which GPO, goto the container's Group Policy
property tab, select the Group Policy and open up the 'Properties' for the
policy. You will see the GUID for the policy under 'Unique Name' of the
General tab.

 

[Frank A, Zanotti]

Thanks you answered a question that just came up on how to find the guid of
the policy.
Thanks Again
Frank A, Zanotti
(e-mail address removed)