Apply Policy

Hi,
I try to apply a policy(test) from a policy set (int) to a document using the apply policy service in a process, and in LC ES 8 I get this error
Caused by: com.adobe.edc.sdk.SDKException: Failed to retrieve policy [int:test] -- Invalid policy(error code bin: 1284, hex: 0x504)
at com.adobe.livecycle.rightsmanagement.RightsManagementService.getPolicyId(RightsManagement Service.java:206)
at com.adobe.livecycle.rightsmanagement.RightsManagementService.applyPolicy(RightsManagement Service.java:296)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:585)
at com.adobe.idp.dsc.component.impl.DefaultPOJOInvokerImpl.invoke(DefaultPOJOInvokerImpl.jav a:181)
... 88 more
The same process works with the same configuration works fine in LC 8.2.
Why?
regards
Johannes

I have a problem in apply a policy using watched folder. An error occurs and document (a PDF) is trasferred in failure folder. Here is then log. Someone can help me? Thanks.<br /><br />Failure Time----Tue Jul 29 18:03:18 CEST 2008<br />source location ---- Reason of failure is-----Internal error.<br />Internal error.<br />Cannot coerce object: <document state="active" senderVersion="0" persistent="false" senderPersistent="false" passivated="false" senderPassivated="false" deserialized="false" senderHostId="null" callbackId="0" senderCallbackId="0" callbackRef="null" isLocalizable="true" isTransactionBound="false" defaultDisposalTimeout="600" disposalTimeout="600" maxInlineSize="65536" defaultMaxInlineSize="65536" inlineSize="0" contentType="application/pdf" length="-1"><cacheId currentCacheId="13748333066588340" cacheId="13748333066588340" documentId="2"/><localBackendId/><globalBackendId/><senderLocalBackendId/><senderGlobalBa ckendId/><inline/><senderPullServantJndiName/><attributes ADOBE_SAVE_MODE_ATTRIBUTE="NO_CHANGE" ADOBE_SAVE_MODE_REQUIRED_ATTRIBUTE="false"/></document> of type: com.adobe.idp.Document to type: class com.adobe.livecycle.formsservice.client.AcrobatVersion<br />ALC-DSC-000-000: com.adobe.idp.dsc.DSCRuntimeException: Internal error.<br />     at com.adobe.idp.workflow.dsc.invoker.WorkflowDSCInvoker.transientInvoke(WorkflowDSCInvoker. java:311)<br />     at com.adobe.idp.workflow.dsc.invoker.WorkflowDSCInvoker.invoke(WorkflowDSCInvoker.java:98)< br />     at com.adobe.idp.dsc.interceptor.impl.InvocationInterceptor.intercept(InvocationInterceptor. java:134)<br />     at com.adobe.idp.dsc.interceptor.impl.RequestInterceptorChainImpl.proceed(RequestInterceptor ChainImpl.java:44)<br />     at com.adobe.idp.dsc.transaction.interceptor.TransactionInterceptor$1.doInTransaction(Transa ctionInterceptor.java:74)<br />     at com.adobe.idp.dsc.transaction.impl.ejb.adapter.EjbTransactionCMTAdapterBean.execute(EjbTr ansactionCMTAdapterBean.java:336)<br />     at com.adobe.idp.dsc.transaction.impl.ejb.adapter.EjbTransactionCMTAdapterBean.doRequiresNew (EjbTransactionCMTAdapterBean.java:282)<br />     at sun.reflect.GeneratedMethodAccessor268.invoke(Unknown Source)<br />     at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)<br />     at java.lang.reflect.Method.invoke(Method.java:585)<br />     at org.jboss.invocation.Invocation.performCall(Invocation.java:345)<br />     at org.jboss.ejb.StatelessSessionContainer$ContainerInterceptor.invoke(StatelessSessionConta iner.java:214)<br />     at org.jboss.resource.connectionmanager.CachedConnectionInterceptor.invoke(CachedConnectionI nterceptor.java:149)<br />     at org.jboss.ejb.plugins.StatelessSessionInstanceInterceptor.invoke(StatelessSessionInstance Interceptor.java:154)<br />     at org.jboss.webservice.server.ServiceEndpointInterceptor.invoke(ServiceEndpointInterceptor. java:54)<br />     at org.jboss.ejb.plugins.CallValidationInterceptor.invoke(CallValidationInterceptor.java:48) <br />     at org.jboss.ejb.plugins.AbstractTxInterceptor.invokeNext(AbstractTxInterceptor.java:106)<br />     at org.jboss.ejb.plugins.TxInterceptorCMT.runWithTransactions(TxInterceptorCMT.java:389)<br />     at org.jboss.ejb.plugins.TxInterceptorCMT.invoke(TxInterceptorCMT.java:166)<br />     at org.jboss.ejb.plugins.SecurityInterceptor.invoke(SecurityInterceptor.java:153)<br />     at org.jboss.ejb.plugins.LogInterceptor.invoke(LogInterceptor.java:192)<br />     at org.jboss.ejb.plugins.ProxyFactoryFinderInterceptor.invoke(ProxyFactoryFinderInterceptor. java:122)<br />     at org.jboss.ejb.SessionContainer.internalInvoke(SessionContainer.java:624)<br />     at org.jboss.ejb.Container.invoke(Container.java:873)<br />     at org.jboss.ejb.plugins.local.BaseLocalProxyFactory.invoke(BaseLocalProxyFactory.java:415)< br />     at org.jboss.ejb.plugins.local.StatelessSessionProxy.invoke(StatelessSessionProxy.java:88)<b r />     at $Proxy210.doRequiresNew(Unknown Source)<br />     at com.adobe.idp.dsc.transaction.impl.ejb.EjbTransactionProvider.execute(EjbTransactionProvi der.java:143)<br />     at com.adobe.idp.dsc.transaction.interceptor.TransactionInterceptor.intercept(TransactionInt erceptor.java:72)<br />     at com.adobe.idp.dsc.interceptor.impl.RequestInterceptorChainImpl.proceed(RequestInterceptor ChainImpl.java:44)<br />     at com.adobe.idp.dsc.interceptor.impl.InvalidStateInterceptor.intercept(InvalidStateIntercep tor.java:37)<br />     at com.adobe.idp.dsc.interceptor.impl.RequestInterceptorChainImpl.proceed(RequestInterceptor ChainImpl.java:44)<br />     at com.adobe.idp.dsc.interceptor.impl.AuthorizationInterceptor.intercept(AuthorizationInterc eptor.java:93)<br />     at com.adobe.idp.dsc.interceptor.impl.RequestInterceptorChainImpl.proceed(RequestInterceptor ChainImpl.java:44)<br />     at com.adobe.idp.dsc.engine.impl.ServiceEngineImpl.invoke(ServiceEngineImpl.java:113)<br />     at com.adobe.idp.dsc.routing.Router.routeRequest(Router.java:102)<br />     at com.adobe.idp.dsc.provider.impl.base.AbstractMessageReceiver.routeMessage(AbstractMessage Receiver.java:88)<br />     at com.adobe.idp.dsc.provider.impl.vm.VMMessageDispatcher.doSend(VMMessageDispatcher.java:21 0)<br />     at com.adobe.idp.dsc.provider.impl.base.AbstractMessageDispatcher.send(AbstractMessageDispat cher.java:57)<br />     at com.adobe.idp.dsc.clientsdk.ServiceClient.invoke(ServiceClient.java:208)<br />     at com.adobe.idp.jobmanager.ejb.JobManagerBean.doOnMessage(JobManagerBean.java:967)<br />     at com.adobe.idp.jobmanager.ejb.JobManagerBean.onMessage(JobManagerBean.java:817)<br />     at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)<br />     at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)<br />     at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)<br />     at java.lang.reflect.Method.invoke(Method.java:585)<br />     at org.jboss.invocation.Invocation.performCall(Invocation.java:345)<br />     at org.jboss.ejb.MessageDrivenContainer$ContainerInterceptor.invoke(MessageDrivenContainer.j ava:475)<br />     at org.jboss.resource.connectionmanager.CachedConnectionInterceptor.invoke(CachedConnectionI nterceptor.java:149)<br />     at org.jboss.ejb.plugins.CallValidationInterceptor.invoke(CallValidationInterceptor.java:48) <br />     at org.jboss.ejb.plugins.AbstractTxInterceptor.invokeNext(AbstractTxInterceptor.java:106)<br />     at org.jboss.ejb.plugins.AbstractTxInterceptorBMT.invokeNext(AbstractTxInterceptorBMT.java:1 58)<br />     at org.jboss.ejb.plugins.MessageDrivenTxInterceptorBMT.invoke(MessageDrivenTxInterceptorBMT. java:32)<br />     at org.jboss.ejb.plugins.MessageDrivenInstanceInterceptor.invoke(MessageDrivenInstanceInterc eptor.java:101)<br />     at org.jboss.ejb.plugins.RunAsSecurityInterceptor.invoke(RunAsSecurityInterceptor.java:94)<b r />     at org.jboss.ejb.plugins.LogInterceptor.invoke(LogInterceptor.java:192)<br />     at org.jboss.ejb.plugins.ProxyFactoryFinderInterceptor.invoke(ProxyFactoryFinderInterceptor. java:122)<br />     at org.jboss.ejb.MessageDrivenContainer.internalInvoke(MessageDrivenContainer.java:389)<br />     at org.jboss.ejb.Container.invoke(Container.java:873)<br />     at org.jboss.ejb.plugins.jms.JMSContainerInvoker.invoke(JMSContainerInvoker.java:1077)<br />     at org.jboss.ejb.plugins.jms.JMSContainerInvoker$MessageListenerImpl.onMessage(JMSContainerI nvoker.java:1379)<br />     at org.jboss.jms.asf.StdServerSession.onMessage(StdServerSession.java:256)<br />     at org.jboss.mq.SpyMessageConsumer.sessionConsumerProcessMessage(SpyMessageConsumer.java:904 )<br />     at org.jboss.mq.SpyMessageConsumer.addMessage(SpyMessageConsumer.java:160)<br />     at org.jboss.mq.SpySession.run(SpySession.java:333)<br />     at org.jboss.jms.asf.StdServerSession.run(StdServerSession.java:180)<br />     at EDU.oswego.cs.dl.util.concurrent.PooledExecutor$Worker.run(PooledExecutor.java:748)<br />     at java.lang.Thread.run(Thread.java:595)<br />Caused by: ALC-DSC-119-000: com.adobe.idp.dsc.util.InvalidCoercionException: Cannot coerce object: <document state="active" senderVersion="0" persistent="false" senderPersistent="false" passivated="false" senderPassivated="false" deserialized="false" senderHostId="null" callbackId="0" senderCallbackId="0" callbackRef="null" isLocalizable="true" isTransactionBound="false" defaultDisposalTimeout="600" disposalTimeout="600" maxInlineSize="65536" defaultMaxInlineSize="65536" inlineSize="0" contentType="application/pdf" length="-1"><cacheId cur

Similar Messages

  • Apply policy from VB 6.0 using webservices?

    Hi All,
    Our requirement is to call Adobe methods from VB 6.0 to apply policy, i have the .wsdl file of the service, using which i tried generating VB project to generate VB DLL with the help of tools Pocket Soap / wsdl.exe (for command line). but i am facing errors and unable to generate the VBP. Please help me in this regard, am i doing the right thing to generate interface between Adobe  and VB 6.0.
    Any suggesions of help will really help me solve my problem.
    thanks in advance,
    Srinivas

    Hi neveen,
    We can retieve data from SAP by using RFC fuction modules .
    here can you elabarate you question . from which system to which sytem you
    want to retrive.
    Regards
    ramesh

  • Apply policy to documents (doc, docx...)

    Hello everyone,
    we are using LiveCycle Rights Management web service and we have discovered a plugin for MS Office called RightsManagement Plugin for MS-Office.
    We are wondering if there is any way to apply policy to office documents using live cycle (by web service).
    I have searched in the documentation/forums and have only seen stuffs like "applying policy to pdf documents", nothing about office documents.
    I have also tried if the web service would also apply a policy over a docx file but of course it has returned me an exception "not a pdf document".
    So here are my questions:
    is there a way to apply policy to office documents using live cycle (web service or java API)?
    if yes, how ?
    Thanks for your help
    Antoine
    BTW: lc_version: 8.2.1

    The current version of LiveCycle (8.2) only allows the application of policies on PDFs.  You can apply policies to Office documents using the Office plugin, but it must be done at the client end.
    From what I understand, the next version of LiveCycle (currently in public Beta) will address this.

  • Apply Policy On a Dynamic PDF

    Hi,
    I want to apply a policy on a pdf document. I have created a policy through admin ui.
    When i am invoking the process following exception occurs:--
    ALC-DSC-003-000: com.adobe.idp.dsc.DSCInvocationException: Invocation error.
    at com.adobe.idp.dsc.component.impl.DefaultPOJOInvokerImpl.invoke(DefaultPOJOInvokerImpl.jav a:152)
    at com.adobe.idp.dsc.interceptor.impl.InvocationInterceptor.intercept(InvocationInterceptor. java:140)
    at com.adobe.idp.dsc.interceptor.impl.RequestInterceptorChainImpl.proceed(RequestInterceptor ChainImpl.java:60)
    at com.adobe.idp.dsc.interceptor.impl.DocumentPassivationInterceptor.intercept(DocumentPassi vationInterceptor.java:53)
    at com.adobe.idp.dsc.interceptor.impl.RequestInterceptorChainImpl.proceed(RequestInterceptor ChainImpl.java:60)
    at com.adobe.idp.dsc.transaction.interceptor.TransactionInterceptor$1.doInTransaction(Transa ctionInterceptor.java:74)
    at com.adobe.idp.dsc.transaction.impl.ejb.adapter.EjbTransactionCMTAdapterBean.execute(EjbTr ansactionCMTAdapterBean.java:357)
    at com.adobe.idp.dsc.transaction.impl.ejb.adapter.EjbTransactionCMTAdapterBean.doSupports(Ej bTransactionCMTAdapterBean.java:227)
    at sun.reflect.GeneratedMethodAccessor681.invoke(Unknown Source)
    at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
    at java.lang.reflect.Method.invoke(Unknown Source)
    at org.jboss.invocation.Invocation.performCall(Invocation.java:359)
    at org.jboss.ejb.StatelessSessionContainer$ContainerInterceptor.invoke(StatelessSessionConta iner.java:237)
    at org.jboss.resource.connectionmanager.CachedConnectionInterceptor.invoke(CachedConnectionI nterceptor.java:158)
    at org.jboss.ejb.plugins.StatelessSessionInstanceInterceptor.invoke(StatelessSessionInstance Interceptor.java:169)
    at org.jboss.ejb.plugins.CallValidationInterceptor.invoke(CallValidationInterceptor.java:63)
    at org.jboss.ejb.plugins.AbstractTxInterceptor.invokeNext(AbstractTxInterceptor.java:121)
    at org.jboss.ejb.plugins.TxInterceptorCMT.runWithTransactions(TxInterceptorCMT.java:378)
    at org.jboss.ejb.plugins.TxInterceptorCMT.invoke(TxInterceptorCMT.java:181)
    at org.jboss.ejb.plugins.SecurityInterceptor.invoke(SecurityInterceptor.java:168)
    at org.jboss.ejb.plugins.LogInterceptor.invoke(LogInterceptor.java:205)
    at org.jboss.ejb.plugins.ProxyFactoryFinderInterceptor.invoke(ProxyFactoryFinderInterceptor. java:138)
    at org.jboss.ejb.SessionContainer.internalInvoke(SessionContainer.java:648)
    at org.jboss.ejb.Container.invoke(Container.java:960)
    at org.jboss.ejb.plugins.local.BaseLocalProxyFactory.invoke(BaseLocalProxyFactory.java:430)
    at org.jboss.ejb.plugins.local.StatelessSessionProxy.invoke(StatelessSessionProxy.java:103)
    at $Proxy384.doSupports(Unknown Source)
    at com.adobe.idp.dsc.transaction.impl.ejb.EjbTransactionProvider.execute(EjbTransactionProvi der.java:104)
    at com.adobe.idp.dsc.transaction.interceptor.TransactionInterceptor.intercept(TransactionInt erceptor.java:72)
    at com.adobe.idp.dsc.interceptor.impl.RequestInterceptorChainImpl.proceed(RequestInterceptor ChainImpl.java:60)
    at com.adobe.idp.dsc.interceptor.impl.InvocationStrategyInterceptor.intercept(InvocationStra tegyInterceptor.java:55)
    at com.adobe.idp.dsc.interceptor.impl.RequestInterceptorChainImpl.proceed(RequestInterceptor ChainImpl.java:60)
    at com.adobe.idp.dsc.interceptor.impl.InvalidStateInterceptor.intercept(InvalidStateIntercep tor.java:37)
    at com.adobe.idp.dsc.interceptor.impl.RequestInterceptorChainImpl.proceed(RequestInterceptor ChainImpl.java:60)
    at com.adobe.idp.dsc.interceptor.impl.AuthorizationInterceptor.intercept(AuthorizationInterc eptor.java:188)
    at com.adobe.idp.dsc.interceptor.impl.RequestInterceptorChainImpl.proceed(RequestInterceptor ChainImpl.java:60)
    at com.adobe.idp.dsc.interceptor.impl.JMXInterceptor.intercept(JMXInterceptor.java:48)
    at com.adobe.idp.dsc.interceptor.impl.RequestInterceptorChainImpl.proceed(RequestInterceptor ChainImpl.java:60)
    at com.adobe.idp.dsc.engine.impl.ServiceEngineImpl.invoke(ServiceEngineImpl.java:115)
    at com.adobe.idp.dsc.routing.Router.routeRequest(Router.java:129)
    at com.adobe.idp.dsc.provider.impl.base.AbstractMessageReceiver.routeMessage(AbstractMessage Receiver.java:93)
    at com.adobe.idp.dsc.provider.impl.vm.VMMessageDispatcher.doSend(VMMessageDispatcher.java:20 9)
    at com.adobe.idp.dsc.provider.impl.base.AbstractMessageDispatcher.send(AbstractMessageDispat cher.java:66)
    at com.adobe.idp.dsc.clientsdk.ServiceClient.invoke(ServiceClient.java:208)
    at com.adobe.workflow.engine.PEUtil.invokeAction(PEUtil.java:886)
    at com.adobe.idp.workflow.dsc.invoker.WorkflowDSCInvoker.transientInvoke(WorkflowDSCInvoker. java:347)
    at com.adobe.idp.workflow.dsc.invoker.WorkflowDSCInvoker.invoke(WorkflowDSCInvoker.java:158)
    at com.adobe.idp.dsc.interceptor.impl.InvocationInterceptor.intercept(InvocationInterceptor. java:140)
    at com.adobe.idp.dsc.interceptor.impl.RequestInterceptorChainImpl.proceed(RequestInterceptor ChainImpl.java:60)
    at com.adobe.idp.dsc.interceptor.impl.DocumentPassivationInterceptor.intercept(DocumentPassi vationInterceptor.java:53)
    at com.adobe.idp.dsc.interceptor.impl.RequestInterceptorChainImpl.proceed(RequestInterceptor ChainImpl.java:60)
    at com.adobe.idp.dsc.transaction.interceptor.TransactionInterceptor$1.doInTransaction(Transa ctionInterceptor.java:74)
    at com.adobe.idp.dsc.transaction.impl.ejb.adapter.EjbTransactionCMTAdapterBean.execute(EjbTr ansactionCMTAdapterBean.java:357)
    at com.adobe.idp.dsc.transaction.impl.ejb.adapter.EjbTransactionCMTAdapterBean.doRequiresNew (EjbTransactionCMTAdapterBean.java:299)
    at sun.reflect.GeneratedMethodAccessor595.invoke(Unknown Source)
    at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
    at java.lang.reflect.Method.invoke(Unknown Source)
    at org.jboss.invocation.Invocation.performCall(Invocation.java:359)
    at org.jboss.ejb.StatelessSessionContainer$ContainerInterceptor.invoke(StatelessSessionConta iner.java:237)
    at org.jboss.resource.connectionmanager.CachedConnectionInterceptor.invoke(CachedConnectionI nterceptor.java:158)
    at org.jboss.ejb.plugins.StatelessSessionInstanceInterceptor.invoke(StatelessSessionInstance Interceptor.java:169)
    at org.jboss.ejb.plugins.CallValidationInterceptor.invoke(CallValidationInterceptor.java:63)
    at org.jboss.ejb.plugins.AbstractTxInterceptor.invokeNext(AbstractTxInterceptor.java:121)
    at org.jboss.ejb.plugins.TxInterceptorCMT.runWithTransactions(TxInterceptorCMT.java:404)
    at org.jboss.ejb.plugins.TxInterceptorCMT.invoke(TxInterceptorCMT.java:181)
    at org.jboss.ejb.plugins.SecurityInterceptor.invoke(SecurityInterceptor.java:168)
    at org.jboss.ejb.plugins.LogInterceptor.invoke(LogInterceptor.java:205)
    at org.jboss.ejb.plugins.ProxyFactoryFinderInterceptor.invoke(ProxyFactoryFinderInterceptor. java:138)
    at org.jboss.ejb.SessionContainer.internalInvoke(SessionContainer.java:648)
    at org.jboss.ejb.Container.invoke(Container.java:960)
    at org.jboss.ejb.plugins.local.BaseLocalProxyFactory.invoke(BaseLocalProxyFactory.java:430)
    at org.jboss.ejb.plugins.local.StatelessSessionProxy.invoke(StatelessSessionProxy.java:103)
    at $Proxy384.doRequiresNew(Unknown Source)
    at com.adobe.idp.dsc.transaction.impl.ejb.EjbTransactionProvider.execute(EjbTransactionProvi der.java:143)
    at com.adobe.idp.dsc.transaction.interceptor.TransactionInterceptor.intercept(TransactionInt erceptor.java:72)
    at com.adobe.idp.dsc.interceptor.impl.RequestInterceptorChainImpl.proceed(RequestInterceptor ChainImpl.java:60)
    at com.adobe.idp.dsc.interceptor.impl.InvocationStrategyInterceptor.intercept(InvocationStra tegyInterceptor.java:55)
    at com.adobe.idp.dsc.interceptor.impl.RequestInterceptorChainImpl.proceed(RequestInterceptor ChainImpl.java:60)
    at com.adobe.idp.dsc.interceptor.impl.InvalidStateInterceptor.intercept(InvalidStateIntercep tor.java:37)
    at com.adobe.idp.dsc.interceptor.impl.RequestInterceptorChainImpl.proceed(RequestInterceptor ChainImpl.java:60)
    at com.adobe.idp.dsc.interceptor.impl.AuthorizationInterceptor.intercept(AuthorizationInterc eptor.java:188)
    at com.adobe.idp.dsc.interceptor.impl.RequestInterceptorChainImpl.proceed(RequestInterceptor ChainImpl.java:60)
    at com.adobe.idp.dsc.interceptor.impl.JMXInterceptor.intercept(JMXInterceptor.java:48)
    at com.adobe.idp.dsc.interceptor.impl.RequestInterceptorChainImpl.proceed(RequestInterceptor ChainImpl.java:60)
    at com.adobe.idp.dsc.engine.impl.ServiceEngineImpl.invoke(ServiceEngineImpl.java:115)
    at com.adobe.idp.dsc.routing.Router.routeRequest(Router.java:129)
    at com.adobe.idp.dsc.provider.impl.base.AbstractMessageReceiver.invoke(AbstractMessageReceiv er.java:329)
    at com.adobe.idp.dsc.provider.impl.soap.axis.sdk.SoapSdkEndpoint.invokeCall(SoapSdkEndpoint. java:139)
    at com.adobe.idp.dsc.provider.impl.soap.axis.sdk.SoapSdkEndpoint.invoke(SoapSdkEndpoint.java :81)
    at sun.reflect.GeneratedMethodAccessor859.invoke(Unknown Source)
    at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
    at java.lang.reflect.Method.invoke(Unknown Source)
    at org.apache.axis.providers.java.RPCProvider.invokeMethod(RPCProvider.java:397)
    at org.apache.axis.providers.java.RPCProvider.processMessage(RPCProvider.java:186)
    at org.apache.axis.providers.java.JavaProvider.invoke(JavaProvider.java:323)
    at org.apache.axis.strategies.InvocationStrategy.visit(InvocationStrategy.java:32)
    at org.apache.axis.SimpleChain.doVisiting(SimpleChain.java:118)
    at org.apache.axis.SimpleChain.invoke(SimpleChain.java:83)
    at org.apache.axis.handlers.soap.SOAPService.invoke(SOAPService.java:454)
    at org.apache.axis.server.AxisServer.invoke(AxisServer.java:281)
    at org.apache.axis.transport.http.AxisServlet.doPost(AxisServlet.java:699)
    at javax.servlet.http.HttpServlet.service(HttpServlet.java:710)
    at org.apache.axis.transport.http.AxisServletBase.service(AxisServletBase.java:327)
    at javax.servlet.http.HttpServlet.service(HttpServlet.java:803)
    at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.j ava:290)
    at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
    at com.adobe.idp.dsc.provider.impl.soap.axis.InvocationFilter.doFilter(InvocationFilter.java :43)
    at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.j ava:235)
    at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
    at com.adobe.idp.um.auth.filter.CSRFFilter.doFilter(CSRFFilter.java:41)
    at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.j ava:235)
    at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
    at org.jboss.web.tomcat.filters.ReplyHeaderFilter.doFilter(ReplyHeaderFilter.java:96)
    at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.j ava:235)
    at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
    at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:230)
    at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:175)
    at org.jboss.web.tomcat.security.SecurityAssociationValve.invoke(SecurityAssociationValve.ja va:179)
    at org.jboss.web.tomcat.security.JaccContextValve.invoke(JaccContextValve.java:84)
    at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:128)
    at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:104)
    at org.jboss.web.tomcat.service.jca.CachedConnectionValve.invoke(CachedConnectionValve.java: 157)
    at org.apache.catalina.authenticator.SingleSignOn.invoke(SingleSignOn.java:393)
    at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
    at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:241)
    at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:844)
    at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.ja va:580)
    at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:447)
    at java.lang.Thread.run(Unknown Source)
    Caused by: com.adobe.edc.sdk.SDKException: user_identifier:Abhishek Test domain:DefaultDom -- Authentication failed(error code bin: 513, hex: 0x201)
    at com.adobe.edc.sdk.impl.ExceptionHandler.throwException(ExceptionHandler.java:443)
    at com.adobe.livecycle.rightsmanagement.helper.RMServiceEJBHelper.throwException(RMServiceEJ BHelper.java:423)
    at com.adobe.livecycle.rightsmanagement.helper.RMServiceEJBHelper.getPublishLicenseDTO(RMSer viceEJBHelper.java:197)
    at com.adobe.livecycle.rightsmanagement.RightsManagementService.applyPolicy(RightsManagement Service.java:313)
    at com.adobe.livecycle.rightsmanagement.RightsManagementService.protectDocument(RightsManage mentService.java:215)
    at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
    at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
    at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
    at java.lang.reflect.Method.invoke(Unknown Source)
    at com.adobe.idp.dsc.component.impl.DefaultPOJOInvokerImpl.invoke(DefaultPOJOInvokerImpl.jav a:118)
    ... 128 more
    Caused by: com.adobe.idp.um.api.UMException| [com.adobe.idp.um.api.impl.AuthenticationManagerImpl] errorCode:16386 errorCodeHEX:0x4002 message:user_identifier:Abhishek Test domain:DefaultDomcom.adobe.idp.common.errors.exception.IDPException| [com.adobe.idp.um.businesslogic.directoryservices.DirectoryServicesManagerBean] errorCode:13316 errorCodeHEX:0x3404 message:user_identifier:Abhishek Test domain:DefaultDom
    at com.adobe.idp.um.api.impl.ManagerImpl.handleException(ManagerImpl.java:251)
    at com.adobe.idp.um.api.impl.ManagerImpl.handleException(ManagerImpl.java:194)
    at com.adobe.idp.um.api.impl.AuthenticationManagerImpl.getAuthResultOnBehalfOfUser(Authentic ationManagerImpl.java:191)
    at com.adobe.idp.um.dscservice.AuthenticationManagerServiceImpl.getAuthResultOnBehalfOfUser( AuthenticationManagerServiceImpl.java:91)
    at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
    at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
    at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
    at java.lang.reflect.Method.invoke(Unknown Source)
    at com.adobe.idp.dsc.component.impl.DefaultPOJOInvokerImpl.invoke(DefaultPOJOInvokerImpl.jav a:118)
    at com.adobe.idp.dsc.interceptor.impl.InvocationInterceptor.intercept(InvocationInterceptor. java:140)
    at com.adobe.idp.dsc.interceptor.impl.RequestInterceptorChainImpl.proceed(RequestInterceptor ChainImpl.java:60)
    at com.adobe.idp.dsc.interceptor.impl.DocumentPassivationInterceptor.intercept(DocumentPassi vationInterceptor.java:53)
    at com.adobe.idp.dsc.interceptor.impl.RequestInterceptorChainImpl.proceed(RequestInterceptor ChainImpl.java:60)
    at com.adobe.idp.dsc.transaction.interceptor.TransactionInterceptor$1.doInTransaction(Transa ctionInterceptor.java:74)
    at com.adobe.idp.dsc.transaction.impl.ejb.adapter.EjbTransactionBMTAdapterBean.doRequiresNew (EjbTransactionBMTAdapterBean.java:218)
    at sun.reflect.GeneratedMethodAccessor640.invoke(Unknown Source)
    at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
    at java.lang.reflect.Method.invoke(Unknown Source)
    at org.jboss.invocation.Invocation.performCall(Invocation.java:359)
    at org.jboss.ejb.StatelessSessionContainer$ContainerInterceptor.invoke(StatelessSessionConta iner.java:237)
    at org.jboss.resource.connectionmanager.CachedConnectionInterceptor.invoke(CachedConnectionI nterceptor.java:158)
    at org.jboss.ejb.plugins.CallValidationInterceptor.invoke(CallValidationInterceptor.java:63)
    at org.jboss.ejb.plugins.AbstractTxInterceptor.invokeNext(AbstractTxInterceptor.java:121)
    at org.jboss.ejb.plugins.AbstractTxInterceptorBMT.invokeNext(AbstractTxInterceptorBMT.java:1 73)
    at org.jboss.ejb.plugins.TxInterceptorBMT.invoke(TxInterceptorBMT.java:77)
    at org.jboss.ejb.plugins.StatelessSessionInstanceInterceptor.invoke(StatelessSessionInstance Interceptor.java:169)
    at org.jboss.ejb.plugins.SecurityInterceptor.invoke(SecurityInterceptor.java:168)
    at org.jboss.ejb.plugins.LogInterceptor.invoke(LogInterceptor.java:205)
    at org.jboss.ejb.plugins.ProxyFactoryFinderInterceptor.invoke(ProxyFactoryFinderInterceptor. java:138)
    at org.jboss.ejb.SessionContainer.internalInvoke(SessionContainer.java:648)
    at org.jboss.ejb.Container.invoke(Container.java:960)
    at org.jboss.ejb.plugins.local.BaseLocalProxyFactory.invoke(BaseLocalProxyFactory.java:430)
    at org.jboss.ejb.plugins.local.StatelessSessionProxy.invoke(StatelessSessionProxy.java:103)
    at $Proxy385.doRequiresNew(Unknown Source)
    at com.adobe.idp.dsc.transaction.impl.ejb.EjbTransactionProvider.execute(EjbTransactionProvi der.java:145)
    at com.adobe.idp.dsc.transaction.interceptor.TransactionInterceptor.intercept(TransactionInt erceptor.java:72)
    at com.adobe.idp.dsc.interceptor.impl.RequestInterceptorChainImpl.proceed(RequestInterceptor ChainImpl.java:60)
    at com.adobe.idp.dsc.interceptor.impl.InvocationStrategyInterceptor.intercept(InvocationStra tegyInterceptor.java:55)
    at com.adobe.idp.dsc.interceptor.impl.RequestInterceptorChainImpl.proceed(RequestInterceptor ChainImpl.java:60)
    at com.adobe.idp.dsc.interceptor.impl.InvalidStateInterceptor.intercept(InvalidStateIntercep tor.java:37)
    at com.adobe.idp.dsc.interceptor.impl.RequestInterceptorChainImpl.proceed(RequestInterceptor ChainImpl.java:60)
    at com.adobe.idp.dsc.interceptor.impl.AuthorizationInterceptor.intercept(AuthorizationInterc eptor.java:165)
    at com.adobe.idp.dsc.interceptor.impl.RequestInterceptorChainImpl.proceed(RequestInterceptor ChainImpl.java:60)
    at com.adobe.idp.dsc.interceptor.impl.JMXInterceptor.intercept(JMXInterceptor.java:48)
    at com.adobe.idp.dsc.interceptor.impl.RequestInterceptorChainImpl.proceed(RequestInterceptor ChainImpl.java:60)
    at com.adobe.idp.dsc.engine.impl.ServiceEngineImpl.invoke(ServiceEngineImpl.java:115)
    at com.adobe.idp.dsc.routing.Router.routeRequest(Router.java:129)
    at com.adobe.idp.dsc.provider.impl.base.AbstractMessageReceiver.routeMessage(AbstractMessage Receiver.java:93)
    at com.adobe.idp.dsc.provider.impl.vm.VMMessageDispatcher.doSend(VMMessageDispatcher.java:20 9)
    at com.adobe.idp.dsc.provider.impl.base.AbstractMessageDispatcher.send(AbstractMessageDispat cher.java:66)
    at com.adobe.idp.dsc.clientsdk.ServiceClient.invoke(ServiceClient.java:208)
    at com.adobe.livecycle.usermanager.client.AuthenticationManagerServiceClient.getAuthResultOn BehalfOfUser(AuthenticationManagerServiceClient.java:193)
    at com.adobe.livecycle.rightsmanagement.helper.RMServiceEJBHelper.getPublishLicenseDTO(RMSer viceEJBHelper.java:174)
    ... 135 more
    Below diagram shows the attributes:-
    Thanks

    Hi,
    I am invoking process through workbench and user 'Abhishek Test' is listed as Document Publisher in the policy set.
    Thanks.

  • Apply policy to large files

    Hello everyone,
    i´m using LC Rightsmanagement to apply policies to pdf documents. It
    works fine but applying a policy to a 120 MB file takes more than four
    minutes. Here is some example code
    >Properties connectionProps = new Properties();
    >connectionProps.setProperty(ServiceClientFactoryProperties.DSC_DEFAULT_EJB_ENDPOINT,"jnp: //localhost:1099");
    >connectionProps.setProperty(ServiceClientFactoryProperties.DSC_TRANSPORT_PROTOCOL,Service ClientFactoryProperties.DSC_EJB_PROTOCOL);
    >connectionProps.setProperty(ServiceClientFactoryProperties.DSC_SERVER_TYPE,"JBoss");
    >connectionProps.setProperty(ServiceClientFactoryProperties.DSC_CREDENTIAL_USERNAME,"admin istrator");
    >connectionProps.setProperty(ServiceClientFactoryProperties.DSC_CREDENTIAL_PASSWORD,"passw ord");
    >// Create a ServiceClientFactory instance
    >ServiceClientFactory myFactory = ServiceClientFactory.createInstance(connectionProps);
    >// Specify the PDF document to encrypt with a password
    >FileInputStream fileInputStream = new FileInputStream("c:\\TMP\\large.pdf");
    >Document inDoc = new Document(fileInputStream);
    >RightsManagementClient c = new RightsManagementClient(myFactory);
    >Document protected = c.getDocumentManager().applyPolicy(inDoc, "large", "Policy Set", "Policy", "Domain", "user");
    >File myFile = new File("c:\\TMP\\large_protected.pdf");
    >protected.copyToFile(myFile);
    The last statement "protected.copyToFile(myFile)" takes most time (up
    to 4 minutes). Watching the network shows a lot of traffic, so i think
    the protected content is streamed via network.
    If i use acrobat pro to apply the policy it only needs a few seconds
    till the jobs done, so i think that there must be a much faster way to
    apply a policy to a document.
    Does anyone know about this problem?
    thx
    rijn

    It takes about 4 1/2 Minutes to execute the whole code.
    >.applyPolicy(inDoc, "large", "Policy Set", "Policy", "Domain", "user");
    returns after 20 seonds.
    The execution of "protected.copyToFile(myFile);" is the one with the highest costs. If i watch the file in explorer i can see it grow with a rate of ~ 400KB/second. Of course our network is much more performant and i would like to instruct lc server to send 4000KB/sec [or more :-)]. adobe livedocs pages (http://livedocs.adobe.com/livecycle/es/sdkHelp/programmer/javadoc/) tell me to set system properties to tune performance. But
    >System.setProperty("com.adobe.idp.defaultDocumentMaxInlineSize",String.valueOf(1024*1024) );
    doesn´t have any effect.

  • Can't apply policy route-map on C3750 stack vlan interface

    Hi All.
    I've come up with this problem and i could see some people have had the same issue. I've tried to overlook and check other replies but it didn't help me. So I'm hoping someone could spot the problem. Here are the details:
    2 x WS-C3750G-24T-E in stack
    Cisco IOS Software, C3750 Software (C3750-ADVIPSERVICESK9-M), Version 12.2(46)SE, RELEASE SOFTWARE (fc2)
    switch#sh sdm prefe
    The current template is "desktop IPv4 and IPv6 routing" template.
    The selected template optimizes the resources in
    the switch to support this level of features for
    8 routed interfaces and 1024 VLANs.
      number of unicast mac addresses:                  1.5K
      number of IPv4 IGMP groups + multicast routes:    1K
      number of IPv4 unicast routes:                    2.75K
        number of directly-connected IPv4 hosts:        1.5K
        number of indirect IPv4 routes:                 1.25K
      number of IPv6 multicast groups:                  1.125k
      number of directly-connected IPv6 addresses:      1.5K
      number of indirect IPv6 unicast routes:           1.25K
      number of IPv4 policy based routing aces:         0.25K
      number of IPv4/MAC qos aces:                      0.5K
      number of IPv4/MAC security aces:                 0.5K
      number of IPv6 policy based routing aces:         0.25K
      number of IPv6 qos aces:                          0.5K
      number of IPv6 security aces:                     0.5K
    There are 2 ISPs, G1/0/1 and G2/0/1. After creating a route-map i can apply a policy route-map to Vlan5 and it accepts without any errors. But when you do sh run vlan5 the command is not there, it's not applied.
    Any help will be appretiated.
    Thanks.

    Hi Jon.
    Thanks for your reply. I didn't put those configs as they're basic without use of VRF and WCCP. Also i've checked or tried to find the list of unsupported commands and didn't see them in that list. See config below with some extras:
    track 11 rtr 1 reachability
    track 22 rtr 2 reachability
    ip routing
    no ip dhcp use vrf connected
    interface GigabitEthernet1/0/1
    description ISP1
    no switchport
    ip address 9.9.9.2 255.255.255.252
    no ip proxy-arp
    no ip mroute-cache
    speed 100
    duplex full
    ipv6 address 2B01:4B8:0:3::2/64
    ipv6 ospf 1 area 0
    no mdix auto
    no cdp enable
    interface GigabitEthernet2/0/1
    description ISP2
    no switchport
    ip address 9.9.9.5 255.255.255.252
    ip ospf cost 10000
    speed 1000
    duplex full
    ipv6 address 2B01:4B8:0:7::2/64
    ipv6 enable
    ipv6 ospf cost 10000
    ipv6 ospf 1 area 0
    interface Vlan5
    description Company Ext Subnet
    ip address 9.9.8.1 255.255.255.128
    no ip proxy-arp
    no ip mroute-cache
    ipv6 address 2B01:4B8:1:22::1/64
    ipv6 ospf 1 area 15
    access-list 111 permit tcp any any eq www
    route-map pbr1 permit 10
    match ip address 111
    set interface GigabitEthernet2/0/1 GigabitEthernet1/0/1
    route-map pbr1 permit 20
    set interface GigabitEthernet1/0/1 GigabitEthernet2/0/1
    route-map pbr2 permit 10
    match ip address 111
    set ip next-hop verify-availability 9.9.9.6 1 track 11
    set ip next-hop 9.9.9.1
    route-map pbr2 permit 20
    set ip next-hop verify-availability 9.9.9.1 1 track 22
    set ip next-hop 9.9.9.6
    I've tried to apply both policies pbr1 and pbr2, it allowed to do that without errors but at the end it wasn't there.
    Cheers,

  • Applying Policy to a Webservice in Data services Project

    I have a webservice map created on the ALDSP against a data service which has the a WSDL file that I can access and test. I want to apply Policies against this Service. Where can I do this? The documentation explains applying the security on a JWS file,but this one is not a jws file (it is a mapped .ws file)
    AD

    Please re-post in the ODSI/ALDSP forum
    Data Service Integrator

  • Apply policy based on workstation package

    Hi! I've searched all over the Internet and can't seem to find anything
    on this.
    Here's what I need. I've got three computer rooms here at a school
    where I administrate and I need a way to block Internet acces based on
    the computer and not the user.
    So I thought this:
    Have a login script that checks if the computer name on the computer
    running the script is associated with a workstation package and then
    apply a registry file if it is.
    Seems easy enought, but I can't find the variabel used for this!
    Any suggestions? Or any other ideas on how to do this?
    raziel014

    On Mon, 12 Dec 2005 13:15:45 GMT, raziel014 wrote:
    > Have a login script that checks if the computer name on the computer
    > running the script is associated with a workstation package and then
    > apply a registry file if it is.
    > Seems easy enought, but I can't find the variabel used for this!
    why not create a custom action in the workstation package?
    Marcus Breiden
    If you are asked to email me information please change -- to - in my e-mail
    address.
    The content of this mail is my private and personal opinion.
    http://www.edu-magic.net

  • Not getting alerts even after applied the monitoring policy on user defined group.

    Hi,
    recently we have installed OEM Ops center 12c for monitoring our oracle servers. I have created a user defined group and applied a userdefined monitoring policy on that group. I have threshold  70% as crtical and 50 % as warning in my monitoring policy.
    Some of my servers are having 77% disk utlization and im not getting any alerts for that.
    What will be the problem?
    When i see the membership of particular group (group -> membership in center pane), im not able to see the monitoring policy name on the monitoring policy column but i have applied policy on that group.
    Please help me to resolve the issue.
    Thanks,
    Veijar

    Hi Stijn,
    Thanks for the response.
    You are right. I was sending personalized iBot to group 'Financial Analyst'. A non-OBI user(Reshmi) belongs to this group.
    But still problem has not been completely resolved.Still users in group either Administrator/Financial Analyst not getting alert via mail.
    Atleast the users in Administrator group should get alert via mail, since both are defined in rpd.
    Now when i send non-personalized ibot to group 'Financial Analyst', All the users other than Reshmi get alert on their dashboard but they don't get alert
    via mail.Also Reshmi does not get alert via mail and error file shows error like -
    No devices for user: Reshmi.
    Now i am not getting the error nQSError: 43001 Authentication failed for Reshmil in repository Star: invalid user/password. (08004)
    which i was getting earlier while sending personalized ibot.
    I have already defined the Mail tab contents using Job Manager. Also i have selected User Destinations both Interactive Dashboard and Active Delivery
    Profile.
    Why the users don't get alert via mail? What could be the problem?

  • Group Policy not Applying

    Currently we are running ZfD 7 and Netware 6.5 and have recently upgraded all our workstations to Windows XP Service Pack 2. Our tree structure consists of an OU for each school level, elementary, middle, and high, and an OU for each school in that respective level. Example:
    Elementary
    West Main
    South Main
    Middle
    Brown Middle
    The current contents in each School OU have users, groups, policies, ect. Previously policy was applied by a workstation policy package that distributed all policies: user, machine, and security which were associated with the School OU. Now we split the policy into workstation packages and a user packages. The goal was to have the workstation apply the machine and security policy and the user policy to apply user settings and create dynamic the local user account.
    The workstation policy remains persistent on the workstation while the user policy creates a local user (non-volatile) and applies the user policy from a server path depending on group membership. We have four different user policy packages: Student, Teacher, Specialist and Technology. Each with there own group policy user configuration. Everyone in our Tree has the appropriate permissions to access the policies. We configure the user policy package as follows:
    Policies  Windows XP
    Enabled Dynamic Local User
    Enabled Windows Group Policy
    Workstation Manager
    Network Location
    \\serverpath
    Checked User Configuration
    Policy Schedule
    User Desktop is active
    Advanced Schedule
    Impersonation
    Interactive User
    Associations
    Groups (Teachers, Students)
    I can get the workstation policy to apply with no problem. The problem comes when a users logs on. It doesnt matter if a new user is being created or if they are simply just switching users. User group policy doesnt apply randomly. The strange thing is it does copy down to the machine. If I connect to the admin share on a newly imaged workstation (with no policy applied) and open c:\windows\system32\ you see the creation of GroupPolicy.Usercache Folder and it copies to the GroupPolicy Folder which is were it applies policy from. Also you can see policy dynamically changing if different users logs on. The Registry.pol updates in the c:\windows\system32\ GroupPolicy.Usercache\User folder and c:\windows\system32\ GroupPolicy \User Sometimes group policy applies and sometimes it does not. When a user logs on you see the policy that was copied down apply. For example the run option is taken away from the start menu. During the log on process this remains in effect but when the process completes its almost like policy is take away. When this occurs I can run WMSCHED.Exe and reapply the user policy and it will apply sometimes. I tried applying group policy through both groups and organizational units. Both with the same results. I was wondering if anyone has had issues with applying group policy with ZEN or if I am doing this incorrectly. Any help would be much appreciated. Thanks.

    rscurr,
    It appears that in the past few days you have not received a response to your
    posting. That concerns us, and has triggered this automated reply.
    Has your problem been resolved? If not, you might try one of the following options:
    - Visit http://support.novell.com and search the knowledgebase and/or check all
    the other self support options and support programs available.
    - You could also try posting your message again. Make sure it is posted in the
    correct newsgroup. (http://forums.novell.com)
    Be sure to read the forum FAQ about what to expect in the way of responses:
    http://forums.novell.com/faq.php
    If this is a reply to a duplicate posting, please ignore and accept our apologies
    and rest assured we will issue a stern reprimand to our posting bot.
    Good luck!
    Your Novell Product Support Forums Team
    http://support.novell.com/forums/

  • 11.2.3 security policy not applying

    This was in another post felt it need its on post and subject.
    11.2.3 has help, but now on device that have 11.2.3 the security policy is
    not applying. I have 4 device I'm testing on one was a clean instill of
    11.2.3 the other 3 were upgraded, out of all 4 only one the security policy
    is applying right. Where would the security policy be store when it is
    applied to a device. Is their a better way to apply security policy.
    I found that the gpttmpl.inf file is not being copy to the
    [C:\Windows\System32\GroupPolicy\Machine\Microsoft\ Windows NT\SecEdit]
    folder and did confirm that it is in the zcm meachine cache folder
    [C:\Program Files
    (x86)\Novell\ZENworks\bin\handlers\CacheFiles\Work stationCache\GroupPolicy\M
    achine\Microsoft\Windows NT\SecEdit]. I manual copy it to the SecEdit
    folder
    logged off back on and then did get the Security Options Settings set
    properly.
    So why is it not copying it over, the Registry.pol file is and all other
    group policy are working (so far). And on the one computer that Security
    Options is working right on and running 11.2.3 the gpttmpl.inf is not in
    the
    [C:\Windows\System32\GroupPolicy\Machine\Microsoft\ Windows NT\SecEdit]
    folder ether and I have checked computers that are still on 11.2.0 and the
    Security Settings are applied but the gpttmpl.inf file in not in the
    [C:\Windows\System32\GroupPolicy\Machine\Microsoft\ Windows NT\SecEdit]. Is
    ZEN suppose to copy gpttmpl.inf to the system32 group policy folder and if
    so can this be fix? I really need Security Settings to apply.
    Hope this makes sense.
    And I have this problem on both 32 & 64 bit windows 7
    I don't know if this affects Windows XP because I don't have any Security
    Settings for XP set.
    Thanks
    Scott

    Well I found this in the ZCM troubleshooting guide with the help of google
    [When more than one Windows Group policy is applied to a device, the
    security settings of the last applied policy are effective on the device.].
    I have all ways had device first user last sense 10.3.3 - 11.2.0 and the
    security policy did apply, at lease with WIN7. So on my test machines I
    change it to user fist device last and now the security policy now works
    with 11.2.3, but I still have to have a bundle to run gpupdate /force at
    user login. If I done have the bundle to run the device group policy does
    not apply sometime, I don't mine to have the bundle to run just why with
    win7 is does not apply with out it and XP does with out it.
    Also why does it not copy the gpttmpl.inf to
    [C:\Windows\System32\GroupPolicy\Machine\Microsoft\ Windows NT\SecEdit]
    directory?
    >>> On Friday, March 15, 2013 at 12:34 PM, in message
    <[email protected]>, Scott Malugin<[email protected]> wrote:
    > This was in another post felt it need its on post and subject.
    >
    >
    > 11.2.3 has help, but now on device that have 11.2.3 the security policy
    > is
    > not applying. I have 4 device I'm testing on one was a clean instill of
    > 11.2.3 the other 3 were upgraded, out of all 4 only one the security
    > policy
    > is applying right. Where would the security policy be store when it is
    > applied to a device. Is their a better way to apply security policy.
    >
    >
    > I found that the gpttmpl.inf file is not being copy to the
    > [C:\Windows\System32\GroupPolicy\Machine\Microsoft\ Windows NT\SecEdit]
    > folder and did confirm that it is in the zcm meachine cache folder
    > [C:\Program Files
    > (x86)\Novell\ZENworks\bin\handlers\CacheFiles\Work stationCache\GroupPoli
    > cy\M
    >
    > achine\Microsoft\Windows NT\SecEdit]. I manual copy it to the SecEdit
    > folder
    > logged off back on and then did get the Security Options Settings set
    > properly.
    >
    > So why is it not copying it over, the Registry.pol file is and all other
    > group policy are working (so far). And on the one computer that Security
    > Options is working right on and running 11.2.3 the gpttmpl.inf is not in
    > the
    > [C:\Windows\System32\GroupPolicy\Machine\Microsoft\ Windows NT\SecEdit]
    > folder ether and I have checked computers that are still on 11.2.0 and
    > the
    > Security Settings are applied but the gpttmpl.inf file in not in the
    > [C:\Windows\System32\GroupPolicy\Machine\Microsoft\ Windows NT\SecEdit].
    > Is
    > ZEN suppose to copy gpttmpl.inf to the system32 group policy folder and
    > if
    > so can this be fix? I really need Security Settings to apply.
    >
    > Hope this makes sense.
    >
    > And I have this problem on both 32 & 64 bit windows 7
    > I don't know if this affects Windows XP because I don't have any
    > Security
    > Settings for XP set.
    >
    >
    > Thanks
    > Scott

  • Takes up to 5 min "Applying User Settings" with events ID 6005 6006 after a reboot - Win Server 2008 R2 Standard 64bit

    Hi,
    Has anybody seen the issue below showing in the logs? The time for the logs messages switch from the real time (17:57) to some random time (10:55). There seem to be a disconnect with the time. I noticed right when the status message while logging in switches
    to "apply user settings", the time get screwed up on the gpsvc.log file and switches to the random time (10:55) and keeps reporting that random time till "apply user settings" process completes and switches back to regular real time (17:57).
    I made sure the server is synced up with w32tm /resync command. Tried different DNS settings. Tried dis joining and rejoining to the domain. tried to block inheritance on GPMC to that OU. Created new domain user. Deleted local profiles. All with no luck and
    same behavior which is taking up to 5 min "applying user setting" only after a reboot. If I log in and out without reboot, it would log in just fine within seconds.
    Any thoughts or suggestions are appreciated!
    Thanks,
    Here is a copy from the gpsvc.log:
    GPSVC(338.354) 17:57:08:406 -------------------------------------------
    GPSVC(338.354) 17:57:08:406 Use the Event Viewer to analyze the Group Policy operational log for details on Group Policy service activity.
    GPSVC(338.354) 17:57:08:406 -------------------------------------------
    GPSVC(338.354) 17:57:08:406  
    GPSVC(338.354) 17:57:08:406 InitializeProductType: Product Type: 2
    GPSVC(338.354) 17:57:08:406 Register for connectivity notification is Enabled.
    GPSVC(338.354) 17:57:08:406 Connectivity manager class initialized with for IntranetAuth connectivity
    GPSVC(338.354) 17:57:08:640 Target = Machine
    GPSVC(338.350) 17:57:08:640 Target = Machine, ChangeNumber 0
    GPSVC(338.39c) 17:57:09:232 bMachine = 1 
    GPSVC(338.39c) 17:57:09:232 Setting GPsession state = 1
    GPSVC(338.27c) 17:57:09:232 Waiting for connectivity before applying policies
    GPSVC(338.27c) 17:57:09:232 Waiting for SamSs with timeout 8264
    GPSVC(338.39c) 17:57:09:232 Message Status = <Applying computer settings...>
    GPSVC(338.39c) 17:57:09:232 Target = Machine
    GPSVC(338.39c) 17:57:09:232 Target = Machine, ChangeNumber 0
    GPSVC(338.39c) 17:57:09:248 Setting GPsession state = 1
    GPSVC(338.27c) 17:57:09:357 Waiting for NTDS.IndexRecreateEvent with timeout 8139
    GPSVC(338.27c) 17:57:09:357 Waiting for NlaSvc with timeout 8139
    GPSVC(338.350) 17:57:09:576 Sid = (null), dwTimeout = 1, dwFlags = 268435459
    GPSVC(338.350) 17:57:09:576 LockPolicySection called for user <Machine>
    GPSVC(338.350) 17:57:09:576 Async Lock called
    GPSVC(338.350) 17:57:09:576 Reader Lock got immediately. m_cReadersInLock : 1
    GPSVC(338.350) 17:57:09:576 Sid = (null), dwTimeout = 1, dwFlags = 268435459
    GPSVC(338.350) 17:57:09:576 LockPolicySection called for user <Machine>
    GPSVC(338.350) 17:57:09:576 Async Lock called
    GPSVC(338.350) 17:57:09:576 Reader Lock got immediately. m_cReadersInLock : 2
    GPSVC(338.350) 17:57:09:576 Sid = (null)
    GPSVC(338.350) 17:57:09:576 UnLockPolicySection called for user <Machine>
    GPSVC(338.350) 17:57:09:576 Found the caller in the ReaderHavingLock List. Removing it...
    GPSVC(338.350) 17:57:09:576 UnLocked successfully
    GPSVC(338.350) 17:57:09:576 Sid = (null), dwTimeout = 1, dwFlags = 268435459
    GPSVC(338.350) 17:57:09:576 LockPolicySection called for user <Machine>
    GPSVC(338.350) 17:57:09:576 Async Lock called
    GPSVC(338.350) 17:57:09:576 Reader Lock got immediately. m_cReadersInLock : 2
    GPSVC(338.350) 17:57:09:576 Sid = (null)
    GPSVC(338.350) 17:57:09:576 UnLockPolicySection called for user <Machine>
    GPSVC(338.350) 17:57:09:576 Found the caller in the ReaderHavingLock List. Removing it...
    GPSVC(338.350) 17:57:09:576 UnLocked successfully
    GPSVC(338.350) 17:57:09:576 Sid = (null), dwTimeout = 1, dwFlags = 268435459
    GPSVC(338.350) 17:57:09:576 LockPolicySection called for user <Machine>
    GPSVC(338.350) 17:57:09:576 Async Lock called
    GPSVC(338.350) 17:57:09:576 Reader Lock got immediately. m_cReadersInLock : 2
    GPSVC(338.350) 17:57:09:576 Sid = (null)
    GPSVC(338.350) 17:57:09:576 UnLockPolicySection called for user <Machine>
    GPSVC(338.350) 17:57:09:576 Found the caller in the ReaderHavingLock List. Removing it...
    GPSVC(338.350) 17:57:09:576 UnLocked successfully
    GPSVC(338.350) 17:57:09:576 Sid = (null), dwTimeout = 1, dwFlags = 268435459
    GPSVC(338.350) 17:57:09:576 LockPolicySection called for user <Machine>
    GPSVC(338.350) 17:57:09:576 Async Lock called
    GPSVC(338.350) 17:57:09:576 Reader Lock got immediately. m_cReadersInLock : 2
    GPSVC(338.350) 17:57:09:576 Sid = (null)
    GPSVC(338.350) 17:57:09:576 UnLockPolicySection called for user <Machine>
    GPSVC(338.350) 17:57:09:576 Found the caller in the ReaderHavingLock List. Removing it...
    GPSVC(338.350) 17:57:09:576 UnLocked successfully
    GPSVC(338.350) 17:57:09:576 Sid = (null), dwTimeout = 1, dwFlags = 268435459
    GPSVC(338.350) 17:57:09:576 LockPolicySection called for user <Machine>
    GPSVC(338.350) 17:57:09:576 Async Lock called
    GPSVC(338.350) 17:57:09:576 Reader Lock got immediately. m_cReadersInLock : 2
    GPSVC(338.350) 17:57:09:576 Sid = (null)
    GPSVC(338.350) 17:57:09:576 UnLockPolicySection called for user <Machine>
    GPSVC(338.350) 17:57:09:576 Found the caller in the ReaderHavingLock List. Removing it...
    GPSVC(338.350) 17:57:09:576 UnLocked successfully
    GPSVC(338.350) 17:57:09:576 Sid = (null), dwTimeout = 1, dwFlags = 268435459
    GPSVC(338.350) 17:57:09:576 LockPolicySection called for user <Machine>
    GPSVC(338.350) 17:57:09:576 Async Lock called
    GPSVC(338.350) 17:57:09:576 Reader Lock got immediately. m_cReadersInLock : 2
    GPSVC(338.350) 17:57:09:576 Sid = (null)
    GPSVC(338.350) 17:57:09:576 UnLockPolicySection called for user <Machine>
    GPSVC(338.350) 17:57:09:576 Found the caller in the ReaderHavingLock List. Removing it...
    GPSVC(338.350) 17:57:09:576 UnLocked successfully
    GPSVC(338.350) 17:57:09:576 Sid = (null), dwTimeout = 1, dwFlags = 268435459
    GPSVC(338.350) 17:57:09:576 LockPolicySection called for user <Machine>
    GPSVC(338.350) 17:57:09:576 Async Lock called
    GPSVC(338.350) 17:57:09:576 Reader Lock got immediately. m_cReadersInLock : 2
    GPSVC(338.350) 17:57:09:576 Sid = (null)
    GPSVC(338.350) 17:57:09:576 UnLockPolicySection called for user <Machine>
    GPSVC(338.350) 17:57:09:576 Found the caller in the ReaderHavingLock List. Removing it...
    GPSVC(338.350) 17:57:09:576 UnLocked successfully
    GPSVC(338.350) 17:57:09:576 Sid = (null), dwTimeout = 1, dwFlags = 268435459
    GPSVC(338.350) 17:57:09:576 LockPolicySection called for user <Machine>
    GPSVC(338.350) 17:57:09:576 Async Lock called
    GPSVC(338.350) 17:57:09:576 Reader Lock got immediately. m_cReadersInLock : 2
    GPSVC(338.350) 17:57:09:576 Sid = (null)
    GPSVC(338.350) 17:57:09:576 UnLockPolicySection called for user <Machine>
    GPSVC(338.350) 17:57:09:576 Found the caller in the ReaderHavingLock List. Removing it...
    GPSVC(338.350) 17:57:09:576 UnLocked successfully
    GPSVC(338.350) 17:57:09:576 Sid = (null), dwTimeout = 1, dwFlags = 268435459
    GPSVC(338.350) 17:57:09:576 LockPolicySection called for user <Machine>
    GPSVC(338.350) 17:57:09:576 Async Lock called
    GPSVC(338.350) 17:57:09:576 Reader Lock got immediately. m_cReadersInLock : 2
    GPSVC(338.350) 17:57:09:576 Sid = (null)
    GPSVC(338.350) 17:57:09:576 UnLockPolicySection called for user <Machine>
    GPSVC(338.350) 17:57:09:576 Found the caller in the ReaderHavingLock List. Removing it...
    GPSVC(338.350) 17:57:09:576 UnLocked successfully
    GPSVC(338.350) 17:57:09:576 Sid = (null), dwTimeout = 1, dwFlags = 268435459
    GPSVC(338.350) 17:57:09:576 LockPolicySection called for user <Machine>
    GPSVC(338.350) 17:57:09:576 Async Lock called
    GPSVC(338.350) 17:57:09:576 Reader Lock got immediately. m_cReadersInLock : 2
    GPSVC(338.350) 17:57:09:576 Sid = (null)
    GPSVC(338.350) 17:57:09:576 UnLockPolicySection called for user <Machine>
    GPSVC(338.350) 17:57:09:576 Found the caller in the ReaderHavingLock List. Removing it...
    GPSVC(338.350) 17:57:09:576 UnLocked successfully
    GPSVC(338.350) 17:57:09:576 Sid = (null), dwTimeout = 1, dwFlags = 268435459
    GPSVC(338.350) 17:57:09:576 LockPolicySection called for user <Machine>
    GPSVC(338.350) 17:57:09:576 Async Lock called
    GPSVC(338.350) 17:57:09:576 Reader Lock got immediately. m_cReadersInLock : 2
    GPSVC(338.350) 17:57:09:576 Sid = (null)
    GPSVC(338.350) 17:57:09:576 UnLockPolicySection called for user <Machine>
    GPSVC(338.350) 17:57:09:576 Found the caller in the ReaderHavingLock List. Removing it...
    GPSVC(338.350) 17:57:09:576 UnLocked successfully
    GPSVC(338.350) 17:57:09:576 Sid = (null), dwTimeout = 1, dwFlags = 268435459
    GPSVC(338.350) 17:57:09:576 LockPolicySection called for user <Machine>
    GPSVC(338.350) 17:57:09:576 Async Lock called
    GPSVC(338.350) 17:57:09:576 Reader Lock got immediately. m_cReadersInLock : 2
    GPSVC(338.350) 17:57:09:576 Sid = (null)
    GPSVC(338.350) 17:57:09:576 UnLockPolicySection called for user <Machine>
    GPSVC(338.350) 17:57:09:576 Found the caller in the ReaderHavingLock List. Removing it...
    GPSVC(338.350) 17:57:09:576 UnLocked successfully
    GPSVC(338.350) 17:57:09:576 Sid = (null), dwTimeout = 1, dwFlags = 268435459
    GPSVC(338.350) 17:57:09:576 LockPolicySection called for user <Machine>
    GPSVC(338.350) 17:57:09:576 Async Lock called
    GPSVC(338.350) 17:57:09:576 Reader Lock got immediately. m_cReadersInLock : 2
    GPSVC(338.350) 17:57:09:576 Sid = (null)
    GPSVC(338.350) 17:57:09:576 UnLockPolicySection called for user <Machine>
    GPSVC(338.350) 17:57:09:591 Found the caller in the ReaderHavingLock List. Removing it...
    GPSVC(338.350) 17:57:09:591 UnLocked successfully
    GPSVC(338.350) 17:57:09:591 Sid = (null), dwTimeout = 1, dwFlags = 268435459
    GPSVC(338.350) 17:57:09:591 LockPolicySection called for user <Machine>
    GPSVC(338.350) 17:57:09:591 Async Lock called
    GPSVC(338.350) 17:57:09:591 Reader Lock got immediately. m_cReadersInLock : 2
    GPSVC(338.350) 17:57:09:591 Sid = (null)
    GPSVC(338.350) 17:57:09:591 UnLockPolicySection called for user <Machine>
    GPSVC(338.350) 17:57:09:591 Found the caller in the ReaderHavingLock List. Removing it...
    GPSVC(338.350) 17:57:09:591 UnLocked successfully
    GPSVC(338.350) 17:57:09:591 Sid = (null), dwTimeout = 1, dwFlags = 268435459
    GPSVC(338.350) 17:57:09:591 LockPolicySection called for user <Machine>
    GPSVC(338.350) 17:57:09:591 Async Lock called
    GPSVC(338.350) 17:57:09:591 Reader Lock got immediately. m_cReadersInLock : 2
    GPSVC(338.350) 17:57:09:591 Sid = (null)
    GPSVC(338.350) 17:57:09:591 UnLockPolicySection called for user <Machine>
    GPSVC(338.350) 17:57:09:591 Found the caller in the ReaderHavingLock List. Removing it...
    GPSVC(338.350) 17:57:09:591 UnLocked successfully
    GPSVC(338.350) 17:57:09:591 Sid = (null), dwTimeout = 1, dwFlags = 268435459
    GPSVC(338.350) 17:57:09:591 LockPolicySection called for user <Machine>
    GPSVC(338.350) 17:57:09:591 Async Lock called
    GPSVC(338.350) 17:57:09:591 Reader Lock got immediately. m_cReadersInLock : 2
    GPSVC(338.350) 17:57:09:591 Sid = (null)
    GPSVC(338.350) 17:57:09:591 UnLockPolicySection called for user <Machine>
    GPSVC(338.350) 17:57:09:591 Found the caller in the ReaderHavingLock List. Removing it...
    GPSVC(338.350) 17:57:09:591 UnLocked successfully
    GPSVC(338.350) 17:57:09:591 Sid = (null), dwTimeout = 1, dwFlags = 268435459
    GPSVC(338.350) 17:57:09:591 LockPolicySection called for user <Machine>
    GPSVC(338.350) 17:57:09:591 Async Lock called
    GPSVC(338.350) 17:57:09:591 Reader Lock got immediately. m_cReadersInLock : 2
    GPSVC(338.350) 17:57:09:591 Sid = (null)
    GPSVC(338.350) 17:57:09:591 UnLockPolicySection called for user <Machine>
    GPSVC(338.350) 17:57:09:591 Found the caller in the ReaderHavingLock List. Removing it...
    GPSVC(338.350) 17:57:09:591 UnLocked successfully
    GPSVC(338.350) 17:57:09:669 Sid = (null)
    GPSVC(338.350) 17:57:09:669 UnLockPolicySection called for user <Machine>
    GPSVC(338.350) 17:57:09:669 Found the caller in the ReaderHavingLock List. Removing it...
    GPSVC(338.350) 17:57:09:669 Setting lock state as notLocked
    GPSVC(338.350) 17:57:09:669 UnLocked successfully
    GPSVC(338.27c) 10:55:29:426 Waiting for NETLOGON with timeout 6392
    GPSVC(338.27c) 10:55:29:426 Waiting for MUP with timeout 6392
    GPSVC(338.27c) 10:55:29:426 Waiting for wkssvc to signal MUP event
    GPSVC(338.5bc) 10:55:29:519 Target = Machine
    GPSVC(338.5bc) 10:55:29:519 Target = Machine, ChangeNumber 0
    GPSVC(3b0.67c) 10:55:29:535 CGPNotify::RegisterForNotification: Entering with target Machine and event 0x16c
    GPSVC(3b0.67c) 10:55:29:535 Client_InitialRegisterForNotification: User = machine, changenumber = 0
    GPSVC(338.5bc) 10:55:29:535 Target = Machine
    GPSVC(3b0.67c) 10:55:29:535 Client_RegisterForNotification: User = machine, changenumber = 0
    GPSVC(3b0.67c) 10:55:29:535 CGPNotify::RegisterForNotification: Exiting with status = 0
    GPSVC(338.6c4) 10:55:29:535 Target = Machine
    GPSVC(338.5b0) 10:55:29:535 Target = Machine, ChangeNumber 0
    GPSVC(338.5b0) 10:55:29:535 Sid = (null), dwTimeout = 600000, dwFlags = 268435456
    GPSVC(338.5b0) 10:55:29:535 LockPolicySection called for user <Machine>
    GPSVC(338.5b0) 10:55:29:535 Async Lock called
    GPSVC(338.5b0) 10:55:29:535 Reader Lock got immediately. m_cReadersInLock : 1
    GPSVC(338.5bc) 10:55:29:535 Sid = (null)
    GPSVC(338.5bc) 10:55:29:535 UnLockPolicySection called for user <Machine>
    GPSVC(338.5bc) 10:55:29:535 Found the caller in the ReaderHavingLock List. Removing it...
    GPSVC(338.5bc) 10:55:29:535 Setting lock state as notLocked
    GPSVC(338.5bc) 10:55:29:535 UnLocked successfully
    GPSVC(338.754) 10:55:29:816 CGPNotify::RegisterForNotification: Entering with target Machine and event 0xc18
    GPSVC(338.754) 10:55:29:816 Client_InitialRegisterForNotification: User = machine, changenumber = 0
    GPSVC(338.350) 10:55:29:816 Target = Machine
    GPSVC(338.754) 10:55:29:816 Client_RegisterForNotification: User = machine, changenumber = 0
    GPSVC(338.754) 10:55:29:816 CGPNotify::RegisterForNotification: Exiting with status = 0
    GPSVC(338.27c) 10:55:29:987 Done waiting for MUP
    GPSVC(338.27c) 10:55:29:987 Waiting for DS with timeout 5830
    GPSVC(338.27c) 10:55:29:987 Registered for NLA notification successfully
    GPSVC(338.27c) 10:55:29:987 NlaGetIntranetCapability returned Not Ready error. Consider it as NOT intranet capable.
    GPSVC(338.27c) 10:55:29:987 There is no connectivity. Waiting for connectivity again...
    GPSVC(338.27c) 10:55:30:455 There is connectivity.
    GPSVC(338.27c) 10:55:30:455 We have network connectivity... proceeding to apply policy.
    GPSVC(338.27c) 10:55:30:455 NlaQueryNetSignatures returned 1 networks
    GPSVC(338.27c) 10:55:30:455 Found a intranet+auth network
    GPSVC(338.27c) 10:55:30:455 # of interfaces : 1
    GPSVC(338.27c) 10:55:30:455 Interface ID: {9538E3E7-197E-4A34-82B6-F457DC25D35D}
    GPSVC(338.27c) 10:55:30:455 Compartment ID: 1
    GPSVC(338.27c) 10:55:30:455 Setting the CompartmentId [1] on the current thread
    GPSVC(338.27c) 10:55:30:455 GetDomainControllerConnectionInfo: Enabling bandwidth estimate.
    GPSVC(338.27c) 10:55:30:502 Started bandwidth estimation successfully
    GPSVC(338.27c) 10:55:30:502 GetDomainControllerConnectionInfo: Getting Ldap Handles.
    GPSVC(338.27c) 10:55:30:502 GetLdapHandle:  Getting ldap handle for host: DC-MLIB.DOMAIN-NAME in domain: DOMAIN-NAME.
    GPSVC(338.27c) 10:55:30:502 GetLdapHandle:  Server connection established.
    GPSVC(338.27c) 10:55:30:502 GetLdapHandle:  Binding using only kerberos.
    GPSVC(338.27c) 10:55:30:518 GetLdapHandle:  Bound successfully.
    GPSVC(338.27c) 10:55:30:518 ReadGPExtensions: Rsop entry point not found for C:\Windows\System32\dskquota.dll.
    GPSVC(338.27c) 10:55:30:518 ReadGPExtensions: Rsop entry point not found for gptext.dll.
    GPSVC(338.27c) 10:55:30:518 ReadGPExtensions: Rsop entry point not found for C:\Windows\System32\iedkcs32.dll.
    GPSVC(338.27c) 10:55:30:518 ReadGPExtensions: Rsop entry point not found for C:\Windows\System32\iedkcs32.dll.
    GPSVC(338.27c) 10:55:30:518 ReadGPExtensions: Rsop entry point not found for gptext.dll.
    GPSVC(338.27c) 10:55:30:518 ReadGPExtensions: Rsop entry point not found for C:\Windows\System32\iedkcs32.dll.
    GPSVC(338.27c) 10:55:30:518 ReadGPExtensions: Rsop entry point not found for gptext.dll.
    GPSVC(338.27c) 10:55:30:518 ReadGPExtensions: Rsop entry point not found for gptext.dll.
    GPSVC(338.27c) 10:55:30:518 ProcessGPOs:  No site name defined.  Skipping site policy.
    GPSVC(338.27c) 10:55:30:518 GetGPOInfo:  ********************************
    GPSVC(338.27c) 10:55:30:518 GetGPOInfo:  Entering...
    GPSVC(338.27c) 10:55:30:533 GetMachineToken:  Looping for authentication again.
    GPSVC(338.27c) 10:55:30:580 GetMachineToken:  Looping for authentication again.
    GPSVC(338.27c) 10:55:30:596 GetMachineToken:  InitializeSecurityContext failed with 0x80090324
    GPSVC(338.27c) 10:55:30:596 GetGPOInfo:  Failed to get the machine token with  -2146893020
    GPSVC(338.27c) 10:55:30:596 GetGPOInfo:  Leaving with 0
    GPSVC(338.27c) 10:55:30:596 GetGPOInfo:  ********************************
    GPSVC(338.27c) 10:55:30:596 ProcessGPOs: GetGPOInfo failed.
    GPSVC(338.27c) 10:55:30:596 ProcessGPOs: No WMI logging done in this policy cycle.
    GPSVC(338.27c) 10:55:30:596 ProcessGPOs: Processing failed with error -2146893020.
    GPSVC(338.27c) 10:55:30:596 ProcessGPOs: Boot/Logon Policy processing - checking if UBPM trigger events need to be fired
    GPSVC(338.27c) 10:55:30:596 CheckAndFireGPTriggerEvent: Fired Policy present UBPM trigger event for Machine.
    GPSVC(338.27c) 10:55:30:596 Application complete with bConnectivityFailure = 0.
    GPSVC(338.27c) 10:55:30:596 Application complete with bConnectivityFailure = 0.
    GPSVC(338.4d0) 10:55:32:281 CGPNotify::RegisterForNotification: Entering with target Machine and event 0xd94
    GPSVC(338.4d0) 10:55:32:281 Client_InitialRegisterForNotification: User = machine, changenumber = 0
    GPSVC(338.4f0) 10:55:32:281 Target = Machine
    GPSVC(338.4d0) 10:55:32:281 Client_RegisterForNotification: User = machine, changenumber = 0
    GPSVC(338.4d0) 10:55:32:281 CGPNotify::RegisterForNotification: Exiting with status = 0
    GPSVC(338.384) 10:55:32:281 Target = Machine, ChangeNumber 0
    GPSVC(338.384) 10:55:35:900 SID = S-1-5-21-1599696121-1964574698-334091239-301107
    GPSVC(338.384) 10:55:35:900 bMachine = 0 
    GPSVC(338.384) 10:55:35:900 Setting GPsession state = 1
    GPSVC(338.384) 10:55:35:900 Message Status = <Applying user settings...>
    GPSVC(338.6c4) 10:55:35:900 Setting GPsession state = 1
    GPSVC(338.718) 10:55:35:900 StartTime For network wait: 11200ms
    GPSVC(338.718) 10:55:35:900 Current Time: 19546ms
    GPSVC(338.718) 10:55:35:900 MaxTimeToWaitForNetwork: 7034ms
    GPSVC(338.718) 10:55:35:900 TimeRemainingToWaitForNetwork: 0ms
    GPSVC(338.718) 10:55:35:900 UserPolicy: Waiting for machine policy wait for network event with timeout 0 ms
    GPSVC(338.718) 10:55:35:915 GPLockPolicySection: Sid = (null), dwTimeout = 30000, dwFlags = 65538
    GPSVC(338.718) 10:55:35:915 LockPolicySection called for user <Machine>
    GPSVC(338.718) 10:55:35:915 Sync Lock Called
    GPSVC(338.718) 10:55:35:915 Reader Lock got immediately. m_cReadersInLock : 1
    GPSVC(338.718) 10:55:35:915 Lock taken successfully
    GPSVC(338.718) 10:55:35:915 UnLockPolicySection called for user <Machine>
    GPSVC(338.718) 10:55:35:915 Found the caller in the ReaderHavingLock List. Removing it...
    GPSVC(338.718) 10:55:35:915 Setting lock state as notLocked
    GPSVC(338.718) 10:55:35:915 UnLocked successfully
    GPSVC(338.718) 10:55:35:915 GetDomainControllerConnectionInfo: Enabling bandwidth estimate.
    GPSVC(338.718) 10:55:36:430 Started bandwidth estimation successfully
    GPSVC(338.718) 10:55:36:430 GetDomainControllerConnectionInfo: Getting Ldap Handles.
    GPSVC(338.718) 10:55:36:430 GetLdapHandle:  Getting ldap handle for host: DC-MLIB.DOMAIN-NAME in domain: DOMAIN-NAME.
    GPSVC(338.718) 10:55:36:430 GetLdapHandle:  Server connection established.
    GPSVC(338.718) 10:55:36:430 GetLdapHandle:  Bound successfully.
    GPSVC(338.718) 10:55:36:430 ProcessGPOs: Computer's domain is same as user's domain so using user's domain DC
    GPSVC(338.718) 10:55:36:430 GetLdapHandle:  Getting ldap handle for host: DC-MLIB.DOMAIN-NAME in domain: <Unspecified>.
    GPSVC(338.718) 10:55:36:430 GetLdapHandle:  Server connection established.
    GPSVC(338.718) 10:55:36:446 GetLdapHandle:  Bound successfully.
    GPSVC(338.718) 10:55:36:446 ReadGPExtensions: Rsop entry point not found for C:\Windows\System32\dskquota.dll.
    GPSVC(338.718) 10:55:36:446 ReadGPExtensions: Rsop entry point not found for gptext.dll.
    GPSVC(338.718) 10:55:36:446 ReadGPExtensions: Rsop entry point not found for C:\Windows\System32\iedkcs32.dll.
    GPSVC(338.718) 10:55:36:446 ReadGPExtensions: Rsop entry point not found for C:\Windows\System32\iedkcs32.dll.
    GPSVC(338.718) 10:55:36:446 ReadGPExtensions: Rsop entry point not found for gptext.dll.
    GPSVC(338.718) 10:55:36:446 ReadGPExtensions: Rsop entry point not found for C:\Windows\System32\iedkcs32.dll.
    GPSVC(338.718) 10:55:36:446 ReadGPExtensions: Rsop entry point not found for gptext.dll.
    GPSVC(338.718) 10:55:36:446 ReadGPExtensions: Rsop entry point not found for gptext.dll.
    GPSVC(338.718) 10:55:36:446 ProcessGPOs:  No site name defined.  Skipping site policy.
    GPSVC(338.718) 10:55:36:446 GetGPOInfo:  ********************************
    GPSVC(338.718) 10:55:36:446 GetGPOInfo:  Entering...
    GPSVC(338.718) 10:55:36:446 SearchDSObject:  Searching <OU=People,DC=ad,DC=*****,DC=****>
    GPSVC(338.718) 10:55:36:446 SearchDSObject:  Found GPO(s):  < >
    GPSVC(338.718) 10:55:36:446 SearchDSObject:  Searching <DC=ad,DC=*****,DC=****>
    GPSVC(338.718) 10:55:36:446 SearchDSObject:  Found GPO(s):  <[LDAP://CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=ad,DC=*****,DC=****;0]>
    GPSVC(338.718) 10:55:36:446 ProcessGPO:  ==============================
    GPSVC(338.718) 10:55:36:446 ProcessGPO:  Deferring search for <LDAP://CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=ad,DC=*****,DC=****>
    GPSVC(338.718) 10:55:36:446 EvaluateDeferredGPOs:  Searching for GPOs in cn=policies,cn=system,DC=ad,DC=*****,DC=****
    GPSVC(338.718) 10:55:36:446 ProcessGPO:  ==============================
    GPSVC(338.718) 10:55:36:446 ProcessGPO:  Searching <CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=ad,DC=*****,DC=****>
    GPSVC(338.718) 10:55:36:446 ProcessGPO:  User has access to this GPO.
    GPSVC(338.718) 10:55:36:446 ProcessGPO:  GPO passes the filter check.
    GPSVC(338.718) 10:55:36:446 ProcessGPO:  Found functionality version of:  2
    GPSVC(338.718) 10:55:36:446 ProcessGPO:  Found file system path of:  <\\DOMAIN-NAME\sysvol\DOMAIN-NAME\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}>
    GPSVC(418.430) 17:59:09:821 CGPNotify::RegisterForNotification: Entering with target Machine and event 0x3dc
    GPSVC(418.430) 17:59:09:821 Client_InitialRegisterForNotification: User = machine, changenumber = 0
    GPSVC(338.6b8) 17:59:09:821 Target = Machine
    GPSVC(418.430) 17:59:09:821 Client_RegisterForNotification: User = machine, changenumber = 0
    GPSVC(418.430) 17:59:09:821 CGPNotify::RegisterForNotification: Exiting with status = 0
    GPSVC(338.30c) 17:59:09:821 Target = Machine, ChangeNumber 0
    GPSVC(418.430) 17:59:09:837 CGPNotify::RegisterForNotification: Entering with target Machine and event 0x448
    GPSVC(418.430) 17:59:09:837 Client_InitialRegisterForNotification: User = machine, changenumber = 0
    GPSVC(338.30c) 17:59:09:837 Target = Machine
    GPSVC(418.430) 17:59:09:837 Client_RegisterForNotification: User = machine, changenumber = 0
    GPSVC(418.430) 17:59:09:837 CGPNotify::RegisterForNotification: Exiting with status = 0
    GPSVC(338.6b8) 17:59:09:837 Target = Machine, ChangeNumber 0
    GPSVC(3b0.3c0) 17:59:11:085 CGPNotify::UnregisterNotification: Entering with event 0x16c
    GPSVC(3b0.3c0) 17:59:11:085 CGPNotify::AbortAsyncRegistration: No asyn registration is pending
    GPSVC(3b0.3c0) 17:59:11:085 CGPNotify::UnregisterNotification: Canceling pending calls
    GPSVC(3b0.3c0) 17:59:11:288 Client_CompleteNotificationCall: failed with 0x71a
    GPSVC(3b0.3c0) 17:59:11:288 CGPNotify::UnregisterNotification: Cancelled pending calls
    GPSVC(3b0.3c0) 17:59:11:288 CGPNotify::UnregisterNotification: Exiting with dwStatus = 0x0
    GPSVC(338.30c) 17:59:12:380 Target = Machine
    GPSVC(338.30c) 17:59:12:380 Target = Machine, ChangeNumber 0
    GPSVC(338.30c) 17:59:13:051 Target = Machine
    GPSVC(338.30c) 17:59:13:051 Target = Machine, ChangeNumber 0
    GPSVC(338.30c) 17:59:13:285 Target = Machine
    GPSVC(338.30c) 17:59:13:285 Target = Machine, ChangeNumber 0
    GPSVC(338.5a0) 17:59:14:143 CGPNotify::RegisterForNotification: Entering with target Machine and event 0xf04
    GPSVC(338.5a0) 17:59:14:143 Client_InitialRegisterForNotification: User = machine, changenumber = 0
    GPSVC(338.6b8) 17:59:14:143 Target = Machine
    GPSVC(338.5a0) 17:59:14:143 Client_RegisterForNotification: User = machine, changenumber = 0
    GPSVC(338.5a0) 17:59:14:143 CGPNotify::RegisterForNotification: Exiting with status = 0
    GPSVC(204.228) 17:59:59:897 CGPNotify::RegisterForNotification: Entering with target Machine and event 0xb50
    GPSVC(204.228) 17:59:59:897 Client_InitialRegisterForNotification: User = machine, changenumber = 0
    GPSVC(338.6b8) 17:59:59:897 Target = Machine
    GPSVC(204.228) 17:59:59:897 Client_RegisterForNotification: User = machine, changenumber = 0
    GPSVC(204.228) 17:59:59:897 CGPNotify::RegisterForNotification: Exiting with status = 0
    GPSVC(338.718) 18:01:58:941 ProcessGPO:  Found common name of:  <{31B2F340-016D-11D2-945F-00C04FB984F9}>
    GPSVC(338.718) 18:01:58:941 ProcessGPO:  Found display name of:  <Default Domain Policy>
    GPSVC(338.718) 18:01:58:941 ProcessGPO:  Found user version of:  GPC is 1, GPT is 1
    GPSVC(338.718) 18:01:58:941 ProcessGPO:  Found flags of:  0
    GPSVC(338.718) 18:01:58:941 ProcessGPO:  Found extensions:  [{3060E8D0-7020-11D2-842D-00C04FA372D4}{3060E8CE-7020-11D2-842D-00C04FA372D4}]
    GPSVC(338.718) 18:01:58:941 ProcessGPO:  ==============================
    GPSVC(338.718) 18:01:58:941 ProcessLocalGPO:  Local GPO's gpt.ini is not accessible, assuming default state.
    GPSVC(338.718) 18:01:58:941 ProcessLocalGPO:  GPO Local Group Policy doesn't contain any data since the version number is 0.  It will be skipped.
    GPSVC(338.718) 18:01:58:941 GetGPOInfo:  Leaving with 1
    GPSVC(338.718) 18:01:58:941 GetGPOInfo:  ********************************
    GPSVC(338.718) 18:01:58:941 GetGPOInfo:  ********************************
    GPSVC(338.718) 18:01:58:941 GetGPOInfo:  Entering...
    GPSVC(338.718) 18:01:59:097 SearchDSObject:  Searching <OU=FM-Security Video Servers,OU=FM-Servers,OU=FM,OU=Department OUs,DC=ad,DC=*****,DC=****>
    GPSVC(338.718) 18:01:59:097 SearchDSObject:  Found GPO(s):  <[LDAP://cn={B957D759-2AF4-4592-95B8-5B7C62F9B340},cn=policies,cn=system,DC=ad,DC=*****,DC=****;0]>
    GPSVC(338.718) 18:01:59:097 ProcessGPO:  ==============================
    GPSVC(338.718) 18:01:59:113 ProcessGPO:  Deferring search for <LDAP://cn={B957D759-2AF4-4592-95B8-5B7C62F9B340},cn=policies,cn=system,DC=ad,DC=*****,DC=****>
    GPSVC(338.718) 18:01:59:113 SearchDSObject:  Searching <OU=FM-Servers,OU=FM,OU=Department OUs,DC=ad,DC=*****,DC=****>
    GPSVC(338.718) 18:01:59:113 SearchDSObject:  Found GPO(s):  <[LDAP://cn={E8A9990E-57AD-4B7B-BAE4-C56E20FB6314},cn=policies,cn=system,DC=ad,DC=*****,DC=****;0][LDAP://cn={251254DD-27DC-419F-816D-C51CDB309D8F},cn=policies,cn=system,DC=ad,DC=*****,DC=****;0]>
    GPSVC(338.718) 18:01:59:113 ProcessGPO:  ==============================
    GPSVC(338.718) 18:01:59:113 ProcessGPO:  Deferring search for <LDAP://cn={E8A9990E-57AD-4B7B-BAE4-C56E20FB6314},cn=policies,cn=system,DC=ad,DC=*****,DC=****>
    GPSVC(338.718) 18:01:59:113 ProcessGPO:  ==============================
    GPSVC(338.718) 18:01:59:113 ProcessGPO:  Deferring search for <LDAP://cn={251254DD-27DC-419F-816D-C51CDB309D8F},cn=policies,cn=system,DC=ad,DC=*****,DC=****>
    GPSVC(338.718) 18:01:59:113 SearchDSObject:  Searching <OU=FM,OU=Department OUs,DC=ad,DC=*****,DC=****>
    GPSVC(338.718) 18:01:59:113 SearchDSObject:  Found GPO(s):  <[LDAP://cn={1A42DA26-38F9-491C-940B-9D37895BE92A},cn=policies,cn=system,DC=ad,DC=*****,DC=****;1][LDAP://cn={F3D0434D-3EFF-4713-908C-3D8AB8189FB9},cn=policies,cn=system,DC=ad,DC=*****,DC=****;0][LDAP://cn={F03FA73B-A5B5-496B-94E5-5315D1D8F5F3},cn=policies,cn=system,DC=ad,DC=*****,DC=****;0][LDAP://cn={386C2C68-BB18-483B-AF36-92E76C1178D2},cn=policies,cn=system,DC=ad,DC=*****,DC=****;0][LDAP://cn={3D83F7A1-D4C2-4F8E-8808-CD5415D5A91E},cn=policies,cn=system,DC=ad,DC=*****,DC=****;0][LDAP://cn={462C2912-2318-4F46-A082-8BCC07EBDA29},cn=policies,cn=system,DC=ad,DC=*****,DC=****;0][LDAP://cn={7690B141-A1C2-4381-BD63-1AF5C09B4456},cn=policies,cn=system,DC=ad,DC=*****,DC=****;0][LDAP://cn={62C29217-3E25-42FC-8469-78312109323E},cn=policies,cn=system,DC=ad,DC=*****,DC=****;0][LDAP://cn={E795AC88-A750-45AF-870C-7EEDF00AA64A},cn=policies,cn=system,DC=ad,DC=*****,DC=****;0][LDAP://cn={B7C7410F-A3C0-4F12-8C3A-245C317EDFBA},cn=policies,cn=system,DC=ad,DC=*****,DC=****;0][LDAP://cn={CE1F85C1-DF2D-4E34-898B-2D6E3D0B55BE},cn=policies,cn=system,DC=ad,DC=*****,DC=****;0][LDAP://cn={D1B4C3BE-41CD-41B2-8A26-BE2EFD6953D0},cn=policies,cn=system,DC=ad,DC=*****,DC=****;0][LDAP://cn={E2673882-F33C-4879-AE75-583829D8BDA8},cn=policies,cn=system,DC=ad,DC=*****,DC=****;0][LDAP://cn={074DE127-4DBA-43F2-9C19-5953AD76CE9F},cn=policies,cn=system,DC=ad,DC=*****,DC=****;0][LDAP://cn={F4BAB9C5-0B6E-426B-93D3-1950A7002DC7},cn=policies,cn=system,DC=ad,DC=*****,DC=****;0][LDAP://cn={4A2C73AF-509F-4434-AF58-1AB3888959B4},cn=policies,cn=system,DC=ad,DC=*****,DC=****;0]>
    GPSVC(338.718) 18:01:59:113 SearchDSObject:  The link to GPO LDAP://cn={1A42DA26-38F9-491C-940B-9D37895BE92A},cn=policies,cn=system,DC=ad,DC=*****,DC=**** is disabled.  It will be skipped for processing.
    GPSVC(338.718) 18:01:59:113 ProcessGPO:  ==============================
    GPSVC(338.718) 18:01:59:113 ProcessGPO:  Deferring search for <LDAP://cn={F3D0434D-3EFF-4713-908C-3D8AB8189FB9},cn=policies,cn=system,DC=ad,DC=*****,DC=****>
    GPSVC(338.718) 18:01:59:113 ProcessGPO:  ==============================
    GPSVC(338.718) 18:01:59:113 ProcessGPO:  Deferring search for <LDAP://cn={F03FA73B-A5B5-496B-94E5-5315D1D8F5F3},cn=policies,cn=system,DC=ad,DC=*****,DC=****>
    GPSVC(338.718) 18:01:59:113 ProcessGPO:  ==============================
    GPSVC(338.718) 18:01:59:113 ProcessGPO:  Deferring search for <LDAP://cn={386C2C68-BB18-483B-AF36-92E76C1178D2},cn=policies,cn=system,DC=ad,DC=*****,DC=****>
    GPSVC(338.718) 18:01:59:113 ProcessGPO:  ==============================
    GPSVC(338.718) 18:01:59:113 ProcessGPO:  Deferring search for <LDAP://cn={3D83F7A1-D4C2-4F8E-8808-CD5415D5A91E},cn=policies,cn=system,DC=ad,DC=*****,DC=****>
    GPSVC(338.718) 18:01:59:113 ProcessGPO:  ==============================
    GPSVC(338.718) 18:01:59:113 ProcessGPO:  Deferring search for <LDAP://cn={462C2912-2318-4F46-A082-8BCC07EBDA29},cn=policies,cn=system,DC=ad,DC=*****,DC=****>
    GPSVC(338.718) 18:01:59:113 ProcessGPO:  ==============================
    GPSVC(338.718) 18:01:59:113 ProcessGPO:  Deferring search for <LDAP://cn={7690B141-A1C2-4381-BD63-1AF5C09B4456},cn=policies,cn=system,DC=ad,DC=*****,DC=****>
    GPSVC(338.718) 18:01:59:113 ProcessGPO:  ==============================
    GPSVC(338.718) 18:01:59:113 ProcessGPO:  Deferring search for <LDAP://cn={62C29217-3E25-42FC-8469-78312109323E},cn=policies,cn=system,DC=ad,DC=*****,DC=****>
    GPSVC(338.718) 18:01:59:113 ProcessGPO:  ==============================
    GPSVC(338.718) 18:01:59:113 ProcessGPO:  Deferring search for <LDAP://cn={E795AC88-A750-45AF-870C-7EEDF00AA64A},cn=policies,cn=system,DC=ad,DC=*****,DC=****>
    GPSVC(338.718) 18:01:59:113 ProcessGPO:  ==============================
    GPSVC(338.718) 18:01:59:113 ProcessGPO:  Deferring search for <LDAP://cn={B7C7410F-A3C0-4F12-8C3A-245C317EDFBA},cn=policies,cn=system,DC=ad,DC=*****,DC=****>
    GPSVC(338.718) 18:01:59:113 ProcessGPO:  ==============================
    GPSVC(338.718) 18:01:59:113 ProcessGPO:  Deferring search for <LDAP://cn={CE1F85C1-DF2D-4E34-898B-2D6E3D0B55BE},cn=policies,cn=system,DC=ad,DC=*****,DC=****>
    GPSVC(338.718) 18:01:59:113 ProcessGPO:  ==============================
    GPSVC(338.718) 18:01:59:113 ProcessGPO:  Deferring search for <LDAP://cn={D1B4C3BE-41CD-41B2-8A26-BE2EFD6953D0},cn=policies,cn=system,DC=ad,DC=*****,DC=****>
    GPSVC(338.718) 18:01:59:113 ProcessGPO:  ==============================
    GPSVC(338.718) 18:01:59:113 ProcessGPO:  Deferring search for <LDAP://cn={E2673882-F33C-4879-AE75-583829D8BDA8},cn=policies,cn=system,DC=ad,DC=*****,DC=****>
    GPSVC(338.718) 18:01:59:113 ProcessGPO:  ==============================
    GPSVC(338.718) 18:01:59:113 ProcessGPO:  Deferring search for <LDAP://cn={074DE127-4DBA-43F2-9C19-5953AD76CE9F},cn=policies,cn=system,DC=ad,DC=*****,DC=****>
    GPSVC(338.718) 18:01:59:113 ProcessGPO:  ==============================
    GPSVC(338.718) 18:01:59:113 ProcessGPO:  Deferring search for <LDAP://cn={F4BAB9C5-0B6E-426B-93D3-1950A7002DC7},cn=policies,cn=system,DC=ad,DC=*****,DC=****>
    GPSVC(338.718) 18:01:59:113 ProcessGPO:  ==============================
    GPSVC(338.718) 18:01:59:113 ProcessGPO:  Deferring search for <LDAP://cn={4A2C73AF-509F-4434-AF58-1AB3888959B4},cn=policies,cn=system,DC=ad,DC=*****,DC=****>
    GPSVC(338.718) 18:01:59:113 SearchDSObject:  Searching <OU=Department OUs,DC=ad,DC=*****,DC=****>
    GPSVC(338.718) 18:01:59:113 SearchDSObject:  No GPO(s) for this object.
    GPSVC(338.718) 18:01:59:113 SearchDSObject:  Searching <DC=ad,DC=*****,DC=****>

    > GPSVC(338.350) 17:57:09:669 UnLocked successfully
    > GPSVC(338.27c) 10:55:29:426 Waiting for NETLOGON with timeout 6392
    The numbers in parenthesis are PID.TID of gpsvc.exe. So we see a thread
    change, and this usually indicates that a different logon process has
    begun. Could you try to map this log entries to events in the group
    policy event log?
    But to be honest: No, I've never seen such a behavior in gpsvc.log :(
    I'm almost sure that a service is responsible, but how to identify it -
    I don't know. There's no auditing for system time changes, AFAIK.
    Greetings/Grüße,
    Martin
    Mal ein
    gutes Buch über GPOs lesen?
    Good or bad GPOs? - my blog…
    And if IT bothers me -
    coke bottle design refreshment (-:

  • Unable to apply GPO on 209 clients (RPC Issues)

    I am in the process of cross forest DC migration with an environment of 400 users, first I have configured the GPO to add the dns suffix search domains to the
    current clients of the old domain however upon applying policy I get The RPC server is unavailable or RPC was cancelled or access denied sometimes.
    I have checked the domains (4) health , replication and all looks very well. 
    I connected to one of the clients that has an issue to make sure these clients are joined to the domain and using the proper DNS list. then checked if the domain
    has the correct hostname as it appears in the domain and everything looked fine.
    I disabled Kaspersky firewall on the client and disabled Windows firewall client but still the same issue occur .
    When trying to connect to any of these clients with hostname to browse to the C$ folder it gives an error, I also tried with the FQDN and had the same problem
    but with IP it connects fine.
    I checked the RPC service, Computer browser service to see if they are running and they were running. 
    I am attaching screenshots of the GPO policy and the error that appears when trying to browse to the client folder C$ with hostname or fqdn. 
    I have tried the following but it didn't fix anything.. I hope someone could help point me out to the right direction
    Checked DNS (Servers and clients)
    Checked relative services (Netbios, RPC, Computer browser ..etc)
    Checked firewall (Kaspersky and windows) and closed them both.
    Checked connected DC on clients and pointed clients to different DCs  to check if it'll solve the problem.
    Checking DCs replication and health using DCdiag /v 
    Ran nltest.exe /sc_verify:domain.local and returned success ... 
    I am attaching 
    On one of the clients that have the issues I have also find this error on the event viewer. 
    This computer was not able to setup secure session with a domain controller in domain domain.local due to the folliowing "there are currently no logon servers available to service the logon request.
    The weird thing is that the client have no issues and can logon to his computer which is a domain member without any issues. 
    thanks
    Mohammed JH

    Hi Vivian, 
    I found the problem, it was due to duplicated hostnames on the DNS for all these problematic clients! The DNS scavenging seems it's not working .. I would appreciate if you could assist me on how to troubleshoot the scavenging.
    I have already applied the following checks
    1- Checked the refresh and no refresh interval (both were 7 days and I changed them to 1 hour) 
    2- Restarted DNS.
    3- Set DNS to automatic scavenging of stale records.
    Still no sign of items are being deleted? 
    I would appreciate your help
    thanks
    Mohammed JH

  • New Group Policy not working on 2008 RDS in 2012 Domain - Security Filtering problem?

    We have a Windows 2008 R2 RDS in a Windows 2012R2 Domain. We want to lockdown the 2008 RDS for Domain users that we have added to a new  security Group--named "Data Collection Users". These users are "Domain Users" and login to the
    2008 RDS using Windows XP SP3 machines to run a specific application -they do not use their local desktops for anything. WE added this group to the local RDU group on the RDS.  We do not have any other users that login to the RDS through terminal,
    including any Domain Admins.
    So far we have done these steps:
    On the DC, created new OU (called Terminal Servers) and moved the RDS into it.
    Opened Group Policy on the DC, and under GP Objects, created a new policy called "TS Users Lockdown".
    Linked the Policy to the OU.
    Under Security Filtering we removed the Authenticated Users, added the RDS computer account (called QS2), added the "Data Collection Users" and chose Allow for "Read" and "Apply Policy"
    Under Security Filtering, for Domain Admins, we chose Deny for "Apply Group Policy"
    We edited the Policy (under Computer Configuration>AT>SYS>GP) to Enable Loopback processing - Replace mode.
    We first tested the policy by trying to remove the "Run" from startup menu and "prohibit access to Control Panel".
    We ran the Group Policy force update from within GP Management - ran successfully.
    We did not reboot the RDS.
    Neither of the settings we tried in Step 7 worked.  Why Not?
    Here are images from the Security Filtering:

    Ok--Do I reboot the RDS or the DC?  or both?
    Does it look like my Security Filtering is correct?  I have seen posts where you should not remove the "Authenticated users"?

  • Java Web Start and Policy File

    Hi,
    I've a problem for Java Web Start (JWS) in working with Policy File.
    I like to apply a policy file for a JWS application to fine tune the secuirty setting instead of granting permission in JWS.
    For an applet environment, I can apply policy file like this:
    appletviewer -J"-Djava.security.policy=all.policy" writeFile.html
    However, in JWS environment, I try to apply in JNLP file as below but fail:
    <?xml version="1.0" encoding="UTF-8"?>
    <jnlp spec="1.0+"
    codebase="http://130.18.52.226:8080/testing/"
    >
    <information>
    <title>JWS JFrame App</title>
    <vendor>Java Developer Connection</vendor>
    <homepage href="http://java.sun.com/jdc" />
    <description>Demonstration of JNLP</description>
    <icon href="hsbc.gif" width="32" height="32" />
    </information>
    <resources>
    <j2se version="1.3*" />
    <property name="java.security.manager" value="x" />
    <property name="java.security.policy" value="testing.policy"/>
    <jar href="testing.jar"/>
    </resources>
    <application-desc main-class="JWSJFrameApp" />
    </jnlp>
    The error message like this:
    Java Web Start Console, started Tue Sep 03 09:59:36 CST 2002
    Java 2 Runtime Environment: Version 1.3.0 by Sun Microsystems Inc.
    java.security.AccessControlException: access denied (java.util.PropertyPermission java.security.manager write)
    java.security.AccessControlException: access denied (java.util.PropertyPermission java.security.policy write)
    Could anyone please help on this!
    Many thanks!
    Regards,
    Simon Ho

    There are two problems with what you are trying to do.
    First, setting a property PROP=VALUE in the jnlp file does not mean that java will be launched -DPROP=VALUE, instead, javawebstart will call System.setProperty(PROP,VALUE) before your apps main() is called. The difference is, the property will not be set at the time the VM is initialized.
    Second, the javaws security policy will not allow you to set arbitrary properties in an unsigned application. Only properties begining with "jnlp." or "javaws." (and possibly a few other specific props known to the native javaws code) can be set in an application unless <all-permissions> is specified and the app is signed.

Maybe you are looking for