Create a Group Policy Central Store

 

---

一、How to create a Group Policy Central Store

You have downloaded or created your own Group Policy Administrative Templates, and would like them to be stored centrally, opposed to individually on each Domain Controller.

Here’s how to create a Group Policy Central Store:

Solution

1. Open Group Policy Management.
2. Right-click on the Default Domain Controllers Policy under Group Policy Objects, and view the Settings Tab.
3. Notice Policy definitions (ADMX files) retrieved from the local machine is displayed under Administrative Templates:

 

4. Copy the C:WindowsPolicyDefinitions folder to the C:WindowsSYSVOLdomainPolicies folder:

 

5. Now if we check the Default Domain Controller Policy Settings Tab, we can see Policy definitions (ADMX files) retrieved from the central store is displayed under Administrative Templates:

 

All current and future Group Policy Administrative Templates will now be kept in the Central Store.

 

---

二、组策略控制面板异常： 

1.

1. Rename “PolicyDefinitions_NTFRS_48964141” folder on the DC that you created “PolicyDefinitions” folder to “PolicyDefinitionsOLD” (or any name you want except PolicyDefinitions)
2. Allow enough time to wait the change replicate to all other DCs.
3. Then rename the folder back to “PolicyDefinitions”
4. Check whether it works

 

More information, please refer to the article:

 

Folder name is changed to "FolderName_NTFRS_<xxxxxxxx>"

http://support.microsoft.com/kb/328492/EN-US

 

If it is not working, please try step 2.

 

2.

1. Delete “PolicyDefinitions_NTFRS_48964141” folder and wait the change replicate to all other DCs.

 

2. Stop “File Replication Service” on all the DCs

 

3. Logon PDC and do Authoritative FRS restore. Here is steps:

1. Click Start, and then click Run.
2. In the Open box, type regedit and then press ENTER.
3. Locate the following subkey in the registry:

 

HKEY_LOCAL_MACHINESystemCurrentControlSetServicesNtFrsParametersBackup/RestoreProcess at Startup

 

4. In the right pane, double click BurFlags.
5. In the Edit DWORD Value dialog box, type D4 and then click OK.
6. Quit Registry Editor, and then switch to the Command box.
7. In the Command box, type net start ntfrs.
8. Quit the Command box.

 

4. Logon on other DCs and do nonauthoritative restores in turn

1. Click Start, and then click Run.
2. In the Open box, type regedit and then press ENTER.
3. Locate the following subkey in the registry:

 

HKEY_LOCAL_MACHINESystemCurrentControlSetServicesNtFrsParametersBackup/RestoreProcess at Startup

 

4. In the right pane, double-click "BurFlags". In the "Edit DWORD Value" dialog box, type "D2" (without the quotation marks) and then click "OK".
5. Quit Registry Editor.
6. Click Start, click Run, type in "net start NTFRS" (without the quotation marks) and press ENTER to start File Replication Service.

 

More information, please refer to the article:

 

Using the BurFlags registry key to reinitialize File Replication Service replica sets

http://support.microsoft.com/kb/290762

---

参考博文：http://www.virtuallyimpossible.co.uk/how-to-create-a-group-policy-central-store/