none
registry.pol being renamed to Registry.pol

    Question

  • I have spent quite some time looking into why after a GPO edit, registry.pol will be renamed to Registry.pol. I have not been successful in seeing why this is happening. Manually renaming the file after, while is a fix, is not a long term fix. Ideas?

    Sorry, forgot this info:

    Windows Server 2012 R2 Domain and functional levels.

    8 domain controllers in total.

    • Edited by LouisMarkham Tuesday, August 30, 2016 5:32 PM Added environment info.
    Tuesday, August 30, 2016 5:30 PM

Answers

  • Hi,

    Thanks for your post.

    When did this issue start to occur? Before the issue happened, did you do any modifications? Or install any updates?

    Have you tried re-creating the Registry.pol file to have a test?

    To detect the file change, below tools may be helpful to you:

    Process Explorer

    https://technet.microsoft.com/en-us/sysinternals/bb896653

    Process Monitor

    https://technet.microsoft.com/en-us/sysinternals/processmonitor.aspx

    If the process holds a handle to the file in question then just run procexp and choose "Find Handle or DLL" from the Find menu then type in part of the file name you're searching for.

    Alternatively (and as mentioned in the comments to the question), to use procmon to find, for example, a file called readme.txt open the filter dialog and set the filter as so:

    Then press the Add button. Make sure there are no other processes that are excluded that might be touching your file.

    Then start capturing events and sit back and wait.

    Best Regards,

    Alvin Wang


    Please remember to mark the replies as an answers if they help and unmark them if they provide no help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Wednesday, August 31, 2016 9:00 AM
    Moderator