Resolution
NetIQ Group Policy Administrator 3.0
symptom
Built-in groups, such as Domain Admins, are being dropped from 'File Settings' and\or 'Registry' security settings when migrating a GPO from one domain to another in the Repository.
cause
The migration algorithm of the Repository can result in SIDs of well known groups being dropped from File Settings and Registry security settings.
fix
This problem can be corrected by installing Hotfix Q34200 for GPA.
Hotfix Q34200 corrects the following issues:
路 When performing a Repository Export operation, some of the SYSVOL GPO files get corrupted if the client machine has windows 2000 sp4 installed
路 Hotfix Q34200 addresses a flaw in the Repositories migration algorithm that can result in SIDs of well known groups being dropped from File Settings and Registry security settings. Once the hotfix has been installed a user must perform either a check-in or an import on any GPO in the source domain prior to the migration.
路 Hotfix Q34200 addresses a flaw in the remote diagnostics that can result in User GPO not being displayed on the XP platform.
To install this hotfix, run GPA300000_HotfixQ34200.exe on the computers that have the GPA consoles (MMC Snap-ins) with consolidated hotfix GPA300000_HotfixQ26953B.exe installed. This hotfix does not contain any updates for the Repository Server Components or Database so you do not need .
to install the hotfix on computers that do not have the GPA MMC consoles installed.
This hotfix requires that the consolidated hotfix Q26953B has been previously installed.
This hotfix modifies the following files on the computers that have the GPA consoles installed:
路 faGPRInterface.dll
路 PolicyAuditing.dll
.