Windows OS Hub
  • Windows
    • Windows 11
    • Windows Server 2022
    • Windows 10
    • Windows Server 2019
    • Windows Server 2016
  • Microsoft
    • Active Directory (AD DS)
    • Group Policies (GPOs)
    • Exchange Server
    • Azure and Microsoft 365
    • Microsoft Office
  • Virtualization
    • VMware
    • Hyper-V
  • PowerShell
  • Linux
  • Home
  • About

Windows OS Hub

  • Windows
    • Windows 11
    • Windows Server 2022
    • Windows 10
    • Windows Server 2019
    • Windows Server 2016
  • Microsoft
    • Active Directory (AD DS)
    • Group Policies (GPOs)
    • Exchange Server
    • Azure and Microsoft 365
    • Microsoft Office
  • Virtualization
    • VMware
    • Hyper-V
  • PowerShell
  • Linux

 Windows OS Hub / Group Policies / Configuring Central Store for Group Policy ADMX Templates

March 12, 2024

Configuring Central Store for Group Policy ADMX Templates

The Group Policy Central Store is located in the SYSVOL directory on the domain controllers, replicated between them, and used to store ADMX/ADML GPO template files used to manage Active Directory domain clients. In this article, we’ll show how to create a GPO Central Store, copy administrative (admx) templates to it, and update the template files to support the latest Windows versions.

If you have not created a Central Store for Group Policy files, the list of administrative templates is loaded from the C:\Windows\PolicyDefinitions folder on a local computer when you run the domain GPO editor (gpmc.msc – Group Policy Management Console). Then you will see the following message next to the Administrative Templates section of your GPO editor: Policy definitions (ADMS files) retrieved from the local computer.

By default, the domain GPO editor first tries to load ADMX templates from the Central Store, and if it is not available, the local PolicyDefinitions folder is used.

If you want to force your GPO editor to use local administrative templates from the current computer, create a REG_DWORD parameter with the name EnableLocalStoreOverride and value 1 under the HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows registry key.

gpo editor: Policy definitions (ADMS files) retrieved from the local computer

Each computer or server may have different ADMX file versions (for example, depending on Windows version and build). Accordingly, some GPO settings may not be available to the administrator on some computers. To address this issue, the Group Policy administrative templates central repository (GPO Central Store) was developed.

By default, the GPO Central Store in Active Directory is not created. To create a repository, copy the local PolicyDefinitions folder from any domain controller to the \\woshub.com\SYSVOL\woshub.com\Policies folder.

copy policydefinitions folder to GPO Central Store

Both administrative template (*.admx) and localization files (*.adml) will appear in the PolicyDefinitions folder in SYSVOL. If you want to see policy or section names in the GPO editor in German, copy locale subdirectories with ADML files for all languages that will be used by Group Policy administrators (for example, de_DE and en_US folders).

I recommend using only English ADML files for GPOs (en-US folder), even if you are using the Deutsch Windows version.

Copy administrative template language ADML files to the GPO Central Store

Then update ADMX templates in the Central Store to the latest Windows version available in your domain environment. The template files in the Central Store are replicated to all domain controllers. Learn more about how to install and update ADMX templates.

Important! Before updating ADMX files in the Group Policy Central Store, it is strongly recommended to create a backup copy of this directory.

In my case, I will copy the PolicyDefinitions folder from Windows 10 to the GPO Central Store.

You can copy the files using PowerShell:

$Destination = "\\woshub.com\SysVol\woshub.com\Policies\PolicyDefinitions"
$Source = "C:\Windows\PolicyDefinitions"
Copy-Item -Path $Source\* -Destination $Destination –Recurse –Force –PassThru

copy PolicyDefinitions admx templates to the sysvol using powershell

You can download GPO administrative templates for all new Windows versions here: https://docs.microsoft.com/en-us/troubleshoot/windows-client/group-policy/create-and-manage-central-store.

You can also copy other ADMX templates to GPO Central Store. For example, there may be administrative templates for Microsoft Office, Microsoft Security Baseline, Firefox, Chrome, LAPS, Java settings, Adobe Reader, etc.

Note. If you are using legacy ADM template files, they cannot be used in the GPO central repository.
Important! Always use the latest version of the Group Policy Editor (gpedit.msc) to prevent conflicts between Group Policy versions and Administrative Template settings. To do it, an administrator should work with GPO objects from a computer with the latest Windows version (many administrators prefer editing Group Policies directly from the domain controllers only), or from a computer that has the latest RSAT package version installed.

Open the Group Policy Management Editor and make sure that there is the message Policy Definitions (ADMX files) retrieved from the central store next to Administrative Templates. Local administrative templates are ignored in this case.

Policy Definitions (ADMX files) retrieved from the central store

Now you can configure your GPOs, and apply new Group Policy settings on the clients.

In some cases, after updating the Central Store you may see multiple errors like shown below when you start the GPO editor:

Administrative Templates
Resource xxxx referenced in attribute xxxx could not be found.File \\xxx\SysVol\ xxx \Policies\PolicyDefinitions\xxx.admx, line 175, column 331

Then make sure that you have updated GPO language files (*.adml) in en-US, de-DE, etc. folders. If the problem persists, restore the PolicyDefinitions directory from a backup folder (or a domain controller backup image).

To make the new administrative templates available on all domain controllers, wait for the file replication service to copy the changes to other DCs.

0 comment
4
Facebook Twitter Google + Pinterest
Active DirectoryGroup PoliciesWindows 10Windows Server 2019
previous post
Delegating Administrative Permissions in Active Directory
next post
How to Backup and Restore Websites and IIS configuration

Related Reading

How to Find the Source of Account Lockouts...

March 12, 2024

How to Delete Old User Profiles in Windows

March 15, 2024

Configuring Windows Firewall Rules Using Group Policy

March 15, 2024

How to Hide or Show User Accounts from...

July 24, 2024

Copy Files and Folders to User Computers via...

March 15, 2024

How to Disable NTLM Authentication in Windows Domain

March 16, 2024

Updating List of Trusted Root Certificates in Windows

March 11, 2024

Updating Group Policy Administrative Templates (ADMX)

January 24, 2025

Leave a Comment Cancel Reply

join us telegram channel https://t.me/woshub
Join WindowsHub Telegram channel to get the latest updates!

Recent Posts

  • Map a Network Drive over SSH (SSHFS) in Windows

    May 13, 2025
  • Configure NTP Time Source for Active Directory Domain

    May 6, 2025
  • Cannot Install Network Adapter Drivers on Windows Server

    April 29, 2025
  • Change BIOS from Legacy to UEFI without Reinstalling Windows

    April 21, 2025
  • How to Prefer IPv4 over IPv6 in Windows Networks

    April 9, 2025
  • Load Drivers from WinPE or Recovery CMD

    March 26, 2025
  • How to Block Common (Weak) Passwords in Active Directory

    March 25, 2025
  • Fix: The referenced assembly could not be found error (0x80073701) on Windows

    March 17, 2025
  • Exclude a Specific User or Computer from Group Policy

    March 12, 2025
  • AD Domain Join: Computer Account Re-use Blocked

    March 11, 2025

Follow us

  • Facebook
  • Twitter
  • Telegram
Popular Posts
  • Configure Google Chrome Settings with Group Policy
  • Get-ADUser: Find Active Directory User Info with PowerShell
  • Allow Non-admin Users RDP Access to Windows Server
  • How to Find the Source of Account Lockouts in Active Directory
  • How to Disable or Enable USB Drives in Windows using Group Policy
  • Get-ADComputer: Find Computer Properties in Active Directory with PowerShell
  • Configuring Proxy Settings on Windows Using Group Policy Preferences
Footer Logo

@2014 - 2024 - Windows OS Hub. All about operating systems for sysadmins


Back To Top