This problem occurs when one of the following conditions is true:
- You use the Group Policy Management Console (GPMC) to restore a Group Policy object (GPO) on a domain controller. In this GPO, either the Computer Configuration setting or the User Configuration setting is undefined. Then, you use Group Policy Object Editor to view the undefined GPO setting on two different domain controllers.
- You use Group Policy Object Editor to create a GPO on a domain controller. In this GPO, either the Computer Configuration setting or the User Configuration setting is undefined. Then, you use Group Policy Object Editor to view the undefined GPO setting on two different domain controllers.
If you restore a GPO on one domain controller, and then view the GPO on two different domain controllers all within one File Replication Service (FRS) interval, morphed folders may appear in the SYSVOL Group Policy folder.
- Recommendation 1
Do not use Group Policy Object Editor as a tool to test FRS replication.
- Recommendation 2
Perform GPO management tasks on a certain domain controller. For example, perform GPO management tasks on the primary domain controller (PDC) emulator only.
However, in some scenarios, you may have trouble logging on to the PDC emulator locally to manage the GPOs. In this situation, follow these steps:
- Configure Terminal Services on the PDC emulator.
- Log on to the PDC emulator in a terminal server session.
- Recommendation 3
In some scenarios, you cannot perform follow-up GPO management tasks on the PDC emulator. In this situation, you can view the GPO in Group Policy Object Editor immediately after you create a new GPO in the GPMC. Or you can view the GPO after you restore a GPO in the GPMC. This step recreates the deleted folders before you view the GPO from remote computers.
- Recommendation 4
Third-party GPO extensions require additional operations to make the GPMC recognize the extensions. For example, you can edit the GPOLayout.xml file of the GPMC according to the instructions of vendors. For more information about how to incorporate third-party GPO extensions into the GPMC backup, contact the vendor.
- The restore operation creates a MachineStaging folder and a UserStaging folder that are under the policy folder. By default, the policy folder is located in the following path:%WINDIR%\SYSVOL\Sysvol\FQDN\Policies
- The GPMC restores policies from the backup files to the MachineStaging folder and the UserStaging folder by using the corresponding folder structure.
- The restore operation creates a MachineOld folder, a UserOld folder, and an AdmOld folder under the policy folder.
- A rollback is needed if the restore operation fails. Therefore, the restore operation backs up the existing content from the Machine folder and the User folder in the MachineOld folder and the UserOld folder.
- If the restored content in the MachineStaging folder and the UserStaging folder contains a folder that already exists in the Machine folder or the User folder, the existing folder is retained.
- If the backup does not contain a folder, the folder is not included in the MachineStaging folder or the UserStaging folder. Therefore, this folder is deleted under the Machine folder or the User folder in the finalization process. This is the step where previously existing folders, without GPO configuration content, may disappear after the GPMC restore.
- Finally, the existing files and folders in the Machine folder or in the User folder are overwritten. The Windows NT File Replication service (NTFRS) file GUIDs of these objects in the NTFRS Database are retained.
Note Both files and folders have NTFRS file GUIDs.
- If all these operations are successful, the following folders are removed: