Select the product you need help with
- Internet Explorer
- Windows Phone
- More products
Group Policy Template Behavior in Windows Server 2003
Article ID: 316977 - View products that this article applies to.
This article was previously published under Q316977
In Enterprise environments, there may be hundreds of Group Policy objects that you want to deploy in a domain. Each Group Policy object is stored in the Sysvol share of each domain controller. By default, a copy of the Administrative Templates (.adm) files are copied to each policy object in the file path:
%systemroot%\sysvol\domainname\Policies\POLICYGUID\AdmIn Windows Server 2003, the size of the Administrative Templates has grown. As a result, the set of Administrative Templates has grown to almost 1.75 MB. When you multiply this size by each Policy that Sysvol contains, you can see that much space is devoted to these templates.
Based on these facts, Administrators may want to use two Group Policy settings that reduce some of the strain that this Sysvol size growth causes. You must make sure that you set the settings correctly. If you do not, you may not be able to manage the Administrative Templates settings on some Group Policy objects. The two settings are Always use local ADM files for Group Policy Editor and Turn off automatic update of ADM files.
To locate these settings, in Group Policy expand Computer Configuration, expand Administrative Templates, expand System, and then expand Group Policy. Complete descriptions of these settings are included in the "More Information" section of this article.
The following list of scenarios describes how Group Policy behaves after you modify the settings:
When you define these settings, make sure that you consider the method the computer uses to determine whether to upgrade the copy of .adm files that are contained in the SYSVOL ADM folder. When the computer does this, it checks for timestamp and size. By default, if a client has a version of the .adm files that has a more recent timestamp than the server's version, and if the size of the file is different from what is already in place, the client copies the .adm files from the local computer to the SYSVOL share.
It is not important what operating system the client uses. Therefore, a client that runs Windows 2000 or Windows XP can upgrade, and therefore overwrite, an .adm file from Windows Server 2003. This is especially true if a Service Pack has been applied to the Windows 2000 or Windows XP computer that makes the timestamp on the .adm files more recent than the timestamp of the Windows Server 2003 .adm file.
Article ID: 316977 - Last Review: December 3, 2007 - Revision: 4.4