WXP GP setting not showing in Domain GP

  • Thread starter Thread starter Charlie
  • Start date Start date
C

Charlie

This is driving me insane! (What else is new?) -
On WXP/W2K3 there are Remote Assitance GP settings under
Computer Config>Admin Templates>System, as well as others
that aren't available on W2K. Somehow a while back I
managed to set these Remote Assistance policies under the
Default Domain GP on a W2K domain. I now want to change
them back but no matter which GP editor I use, they don't
show up. I've tried GP editor on the DC and those
settings aren't there (no surprise). I've tried the new
GP Management Tool installed on a WXP machine and the
gpedit.msc on a WXP machine with the focus on Default
Domain Policy but they don't show up. If I run RSOP, I
can see that the policies are in fact set and that they
are applied from the Default Domain Policy. I even tried
changing them in Local GP on the XP machine, thinking
that maybe it was a bug and that they were local after
all. No luck - the Domain settings overrode the local
settings, proving that there is a setting in the Domain
policy. Can someone tell me how the heck I did this so I
can undo it?
Thanks in advance!
 
Check to make sure your system.adm file has not been replaced with a version
that does not have these options defined. The file will be located in the
sysvol. The default domain policy directory begins with 31b

\\domainname\sysvol\domainname\policies\31b2f340.....\adm

If necessary copy the system.adm from you workstation to the sysvol (after
backing up the current one)
 
*Skip to the last paragraph where I ask the question if
you don't have time to read all of this!
Thanks Warren -
No luck with that. It may need to be done in DS
Restore mode. I renamed the current system.adm from the
folder representing the Domain policy (31b.....) and
manually replaced it with one from an XP box. I also
tried the usual method to add a template, choosing to
replace the current system.adm when prompted. In both
cases the system.adm ended up with the same settings,
time stamp and size as the one that I replaced. I even
did it on the PDC Emulator while no other DCs were on the
network. I used secedit to refresh the policy multiple
times.

More importantly, there's one thing I don't
understand - As I said in the original post, I wouldn't
expect to see those XP-only settings listed in the W2K
Domain Policy, at least not in the W2K version of the GP
Editor even though I somehow managed to make the changes
in the first place. I have the new GP Management tool
installed on an XP machine and I was figuring that I must
have made the changes using that. Those settings appear
under Default Domain Policy in that utiity on the
Settings tab. However, they don't show up in the editor
from the utility.
So the question is - How would one configure a setting
that is only available on WXP for the Domain policy in a
W2K AD domain? Or the more embarassing question - How
did I do it?
 
I should have checked the KB first. 307900 tells me that
I did this simply by opening GP editor on an XP machine
with the focus on the Default Domain Policy.
But the problem remains. Using a GP editor from an XP
box no longer shows the XP-only settings and I haven't
been able to replace the system.adm in Sysvol for the
domain.
 
Actually this did work. I had to replace system.adm in
the Inf folder as well as sysvol. Once I did that all
was well with that node. It looks like I'm going to have
to do that for every GP because simply opening the GP on
an XP box is not doing it for some reason.
Thanks.
 
Back
Top