Error: "Network GPT.INI marked with a newer/older version number (version no.) than GPC (version (4343164)

Error messages such as below are seen in the syslog when VGP refreshes the policies:

server01 syslog[13864]: [ID 715588 daemon.warning] [UnixLogger:WARNING] [gptdownloader.cpp:220] - GPT.INI marked with newer version number than GPC
server01 The GPT.INI was probably locally modified. The vgptool clean command can be
server01 used to force a refresh of the GPT from the network.

Or you receive the following error when running a # /opt/quest/bin/vgptool apply:

Network GPT.INI marked with a newer/older version number (version no.) than GPC (version no.)
GPT: /var/opt/quest/vgp/gpt/<GPO GUID>

The GPT.INI was probably modified manually. Please notify Active Directory administrators of this problem. vgptool will re-download this GPT.

This error means there is an Active Directory (AD) Group Policy Object (GPO) version mismatch between the Group Policy Container (GPC) and the Group Policy Template (GPT). The GPO downloaded from Active Directory will still be deployed by Quest Authentication Services (QAS/VAS).

Due to differing replication schedules between AD and SYSVOL information you may see this error as a one-off occurrence. In this case the error can be ignored. If this occurs for longer the issue should be investigated using Microsoft tools such as gpotool.

The GPT version number is stored in SysVol and is replicated using FRS (File Replication Service):

e.g.: \\dc-name\SYSVOL\yourdomain.com\Policies\<GPO GUID>\GPT.INI

The GPC version number is stored in AD under the attribute versionNumber:

e.g.: cn=<GPO GUID>,cn=Policies,cn=System,dn=yourdomain,dn=com