none
PolicyDefinitions

    Question

  • We're looking to apply the Windows 10 Administration pack and there seems to be some confusion over to where the files should be stored.

    We've always put the .ADMX files in: \\DC\C$\Windows\PolicyDefinitions\ and the (English) .ADML files in: \\DC\C$\Windows\PolicyDefinitions\en-US (we have two domain controllers).

    But after reading online it would appear the correct location is \\DC\SYSVOL\FQDN\PolicyDefinitions (currently this location doesn't exist for us but we can create if required).

    1) Should they only go into the SYSVOL location, or both?

    2) If they should only go into the SYSVOL location, should we remove the existing files in our domain controllers \\DC\C$\Windows\PolicyDefinitions\ folders?

    3) There appears to be some discrepancies on our two domain controllers PoilcyDefinitions folder (one has more ADMX files than the other!) Should they match?

    Wednesday, April 12, 2017 9:55 AM

All replies

  • > We've always put the .ADMX files in: \\DC\C$\Windows\PolicyDefinitions\
     
    This path is valid only if you edit your GPOs on the DC itself...
     
    > But after reading online it would appear the correct location is \\DC\SYSVOL\FQDN\PolicyDefinitions
     
    This is the correct location for a central store - it enables each and every computer to use the same set of ADMX templates.
     
    > 1) Should they only go into the SYSVOL location, or both?
     
    It's up to you - as soon as they are found in sysvol, the local path (C:\Windows\PolicyDefinitions) is ignored.
     
    > 2) If they should only go into the SYSVOL location, should we remove the existing files in our domain controllers \\DC\C$\Windows\PolicyDefinitions\
     
    Does not matter.
     
    > 3) There appears to be some discrepancies on our two domain controllers PoilcyDefinitions folder (one has more ADMX files than the other!) Should they match?
     
    No - depends on enabled features, OS versions, hotfixes and so on.
     
    • Proposed as answer by vaadadmin2010 Friday, April 14, 2017 12:54 PM
    Wednesday, April 12, 2017 10:19 AM
  • Hi,
    Administrative Templates files are used by Group Policy Object Editor and the Group Policy Management Console to display registry-based policy settings.  If you update these files based on windows system version, it doesn’t affect the existing GPOs’ settings.
    As Martin said, the path you put the files is used to edit group policy for DC locally. If you want to edit for domain, you could create central store:
    1. Create the root folder for the central store %systemroot%\sysvol\domain\policies\PolicyDefinitions on your domain controller.
    2. Create the subfolder: %systemroot%\sysvol\domain\policies\PolicyDefinitions\EN-US for ADML files.
    Then put the downloaded files into this path, restart GPMC to read the files.
    You could view more details regarding to manage Group Policy ADMX Files Step by Step from: https://msdn.microsoft.com/en-us/library/bb530196.aspx
    Best regards, 
    Wendy

    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com

    Thursday, April 13, 2017 9:43 AM
    Moderator