none
how to apply changes of suoers file attached to GPO.

    Question

  • Hello Guys,

    As we know there are two parts of each GPO: GPC and GPT. And there is also GPO version in GPT.ini file on sysvol folder in GPT part. If I raise the version of GPO there, will servers to which this GPO applies apply updates or not? I'm asking because I've encountered with some strange thing. When I amend SUDOERS file for Unix servers via GPO (it is bound to GPO) manually, changes are applied in 10-15 minutes on UNIX servers and when I do this via direct changing the SUDOERS TXT file on sysvol folder in GPT part of GPO by Powershell script it doesn't happen for some reason, so I'm searching the way to somehow apply this sudoers file after changing. I hope that does make sense.

    Thanks.

    Friday, July 29, 2016 7:43 AM

Answers

  • > bound to GPO) manually, changes are applied in 10-15 minutes on UNIX
    > servers and when I do this via direct changing the SUDOERS TXT file on
    > sysvol folder in GPT part of GPO by Powershell script it doesn't happen
     
    Yes. The version number must be increased so the GPO client component
    knows this GPO is a newer version. It resides in a 32 Bit value both in
    gpt.ini (you already know that) and in the "Version" attribute of the
    GPC in active directory. The low 16 bits are the computer version, the
    high 16 bits are the user version.
     
    This increment is done "under the hood" if you use GPMC/Gpedit. If you
    simply replace a file within the GPT, you need to do this manually.
     
    Monday, August 1, 2016 2:24 PM