Microsoft Windows Active Directory Setup Central Store

Welcome to my Microsoft Tips & Tricks section. In this session I will describe how I setup Active Directory Central Store.

In older versions of MS Windows Servers, the SYSVOL was where logon-scrips etc. was kept. This folder was then replicated to all the domain controllers in the domain. To avoid issues with replication and potential corruption of administrative templates, MS has created the concept of centralized group policy storage. This storage repository, known as the “Central Store,” needs to be manually created on a domain controller. Once the Central Store is created, the maintenance of GPO’s can be done from any location where we have the Group Policy Admin Console installed.

Setting up this centralized storage is a fairly straightforward procedure.

I log into one of my dc’s with at user with administrative privileges..

Create the folder “PolicyDefinitions” in:

C:\Windows\SYSVOL\sysvol\ad.admin.frelab.net\Policies

centralstore00

I then check visibility in:

\\ad.admin.frelab.net\SYSVOL\ad.admin.frelab.net\Policies\PolicyDefinitions

Next, I copy content of C:\Windows\PolicyDefinitions to C:\Windows\SYSVOL\sysvol\ad.admin.frelab.net\Policies\PolicyDefinitions

centralstore01

Including the .adml-files in the en-US folder

centralstore02

When I now open a GPO, I can see that the administrative template is retrieved from the Central Store.

centralstore03

Recommended reading:

Daniel Petri’s: Creating a GPO Central Store in Windows Server 2012 R2

 

Microsoft Tips & Tricks section

Disclaimer: Every tips/tricks/posting I have published here, is tried and tested in different it-solutions. It is not guaranteed to work everywhere, but is meant as a tip for other users out there. Remember, Google is your friend and don’t be afraid to steal with pride! Feel free to comment below as needed.