What should you do?

A company has an Active Directory Domain Services (AD DS) forest with a single domain. Domain controllers are located in the companys offices in New York and Boston. You deploy a group policy at the domain level that includes security filtering. You discover that Group Policy object (GPO) settings are being applied to computers in the New York office, but not to computers in the Boston office. You suspect there might be replication problems with the policies. What should you do?

A company has an Active Directory Domain Services (AD DS) forest with a single domain. Domain controllers are located in the companys offices in New York and Boston. You deploy a group policy at the domain level that includes security filtering. You discover that Group Policy object (GPO) settings are being applied to computers in the New York office, but not to computers in the Boston office. You suspect there might be replication problems with the policies. What should you do?

A.
Run a Group Policy Results report against computers in the Boston office.

B.
Run a Group Policy Modeling report against computers in the Boston office.

C.
Use the GpoTool.exe command-line tool.

D.
Use the RepAdmin.exe command-line tool.



Leave a Reply 5

Your email address will not be published. Required fields are marked *


Lou

Lou

Does GPOTool even work with 08, looks to me like it’s a 2000&2003 tool.

Bud

Bud

I don’t think C is the right answer.

The right answer has to be A or B. Probably A so that you can ascertain what GPO’s are being applied.

Ed

Ed

Should be C, then D. From: http://support.microsoft.com/kb/250842

Use Gpotool.exe to determine if there is an inconsistency between Active Directory and SYSVOL versions of the same GPO across peer domain controllers. This information can help you determine if replication latency is causing the Windows 2000 client to not receive the correct policy. If you think this is the case, use Replmon.exe and Repadmin.exe (both from the Windows 2000 Support Tools suite) to determine the replication partners for the domain controller that the client used as a source for the Group Policy and determine if replication is succeeding.