Can't configure group policy

ZCM 11.2.3a
Windows 7
Firefox 17.0.11 ESR
Per the docs:
http://www.novell.com/documentation/...a/bau5n2g.html
I have installed the helper application. But if I click on Configure,
I get a Configure Group Policy settings dialog with Upload and Cancel
buttons and nothing else happens. Am I missing something? Why doesn't
this work?
Ken

Originally Posted by ketter
On Wed, 19 Mar 2014 20:06:21 GMT, Shaun Pond
<[email protected]> wrote:
>KeN,
>
>sure this isn't happening? http://www.novell.com/support/kb/doc.php?id=3523946
On a whim, I just tried running Firefox with "Run as Administrator".
Suddenly things start working. Might be nice if the docs mentioned
the need for that. I think I will make a comment on the doc page.
KeN
I didn't even know you could configure GPO in Firefox
Thx for reporting back the solution and if you have time then please submit a doc feedback on that page.
Thomas

Similar Messages

  • Configuring group policy for user profiles in Windows Server 2012 R2 Domain

    Requesting some experts advise on configuring group policy for user profiles.
    We will be building new Windows Server 2012 R2 Domain Controllers (Domain of 400 users).
    The settings which I am concerned:
    1. Folder Redirection: Desktop, Documents, Favorites.
    2. Quota for Folder Redirection - 1 GB per user.
    3. Map a networked drive - 1 GB per user.
    4. Roaming profile - (Will ignore if it does not suit our requirement). 
    The question is how outlook profile will be retained / automatically moved if the users move from once computer to other?
    FYI, E-mails hosted on MS Office365 and OST file size of few users more than 25GB. So, in case the user moves from one computer to other, the entire mailbox will be downloaded via internet. This consumes high bandwidth if more than 3-4 users shift per day.
    Thanks a lot for your valuable time and efforts.

    Hi,
    >>The question is how outlook profile will be retained / automatically moved if the users move from once computer to other?
    This depends on where our outlook data files are stored. If these data files are stored under
    drive:\Users\<username>\AppData\Local, then these files can’t be redirected, for folder redirection can’t redirect appdata local or locallow.
    However, regarding your question, we can refer to the following thread to find the solution.
    Roam outlook profiles without roaming profiles
    http://social.technet.microsoft.com/Forums/office/en-US/3908b8e0-8f44-4a34-8eb5-5a024df3463e/roam-outlook-profiles-without-roaming-profiles
    In addition, regarding how to configure folder redirection, the following article can be referred to for more information.
    Configuring Folder Redirection
    http://technet.microsoft.com/library/cc786749.aspx
    Hope it helps.
    Best regards,
    Frank Shen

  • Renamed Domain - Clients Still "joined" to old domain, can't open Group Policy Management on Server

    Performed a Domain Rename as per the following instructions:
    http://www.bauer-power.net/2011/05/renaming-windows-domain-with-rendom.html#.U4OZRPmSyTM
    and then after these issues I have gone through the related technet articles starting here:
    http://technet.microsoft.com/en-us/library/cc794793(v=ws.10).aspx
    specifically the Fix Group Policy Objects and Links.
    But still I have the following issues:
    At least for group policy clients believe they are on the old domain - despite even having renamed the computers with the new domain name.
    When I perform a gpresult the output file shows as being connected to the old Domain - despite manually going into computer properties and renaming the computer with the new domain name...
    CN=Allister Wade,OU=Users,OU=Home,DC=NEWDOMAIN,DC=local
    Last time Group Policy was applied: 27/05/2014 at 5:36:31 AM
    Group Policy was applied from:      finch.newdomain.local
    Group Policy slow link threshold:   500 kbps
    Domain Name:                        OLDDOMAIN
    Domain Type:                        WindowsNT 4
    On the server I cannot open Group Policy Management on the single Domain Controller as it is looking for a DC on the old Domain:
    Even though it has listed the new domain in the root of the management console when I attempt to expand it out I am prompted:
    "The specified domain controller could not be contacted. This affects the following domain in the console.
    Domain: olddomain.local
    The error was:
    The specified domain either does not exist or could not be contacted."
    I can select to remove the domain from the console but this does nothing - as said it already shows the new domain in the console.
    Far as I am aware the clients should not even of needing renaming or changing the domain, but were having authentication issues before I did this. Not sure what I have done wrong here..?

    Client's NSLookup shows "UnKnown" as DNS Server so thought to check DNS out.
    This is result of dcdiag /test:DNS.
    Directory Server Diagnosis
    Performing initial setup:
       Trying to find home server...
       Home Server = finch
       * Identified AD Forest. 
       Done gathering initial info.
    Doing initial required tests
       Testing server: Default-First-Site-Name\FINCH
          Starting test: Connectivity
             ......................... FINCH passed test Connectivity
    Doing primary tests
       Testing server: Default-First-Site-Name\FINCH
          Starting test: DNS
             DNS Tests are running and not hung. Please wait a few minutes...
             ......................... FINCH passed test DNS
       Running partition tests on : ForestDnsZones
       Running partition tests on : DomainDnsZones
       Running partition tests on : Schema
       Running partition tests on : Configuration
       Running partition tests on : NEWDOMAIN
       Running enterprise tests on : NEWDOMAIN.local
          Starting test: DNS
             Test results for domain controllers:
                DC: finch.NEWDOMAIN.local
                Domain: NEWDOMAIN.local
                   TEST: Delegations (Del)
                      Error: DNS server: finch.olddomain.local. IP:<Unavailable>
                      [Missing glue A record]
             Summary of test results for DNS servers used by the above domain
             controllers:
                DNS server: 203.12.160.35 (<name unavailable>)
                   1 test failure on this DNS server
                   PTR record query for the 1.0.0.127.in-addr.arpa. failed on the DNS server 203.12.160.35               
             Summary of DNS test results:
                                                Auth Basc Forw Del  Dyn  RReg Ext
                Domain: NEWDOMAIN.local
                   finch                        PASS PASS PASS FAIL PASS PASS n/a  
             ......................... NEWDOMAIN.local failed test DNS

  • How to configure group policy for emet via a command line

    I have been tasked with installing emet on 50 servers that I only have access to with our patching server (so I can't remote in and open the gpedit gui). I can get it to install, but now the problem that I'm facing is I need to enable 6 of the group policies
    for emet. Is there a way to do this while installing it? or a way to do it after the install?

    cmd line you need to deal with is in the C:\Program Files (x86)\EMET 4.1 folder
    specifically emet_conf --refresh would tell the systems to pull in the settings from a GPO they have already applied.
    In a non - SCCM environment I would probably recommend using group policy preferences and create a task scheduler item on your servers that runs emet_conf --import
    \\fileserver\settingsfile.xml on some sort of automated basis. Then you can just configure a client like you need and run the emet_conf --export
    \\fileserver\settingsfile.xml whenever you need to change a mitigation etc and the clients will pick up on the change on their next run of the task scheduler item.
    In general installing on servers isn't a great idea and is not the intended use case for emet however if you are DoD/Gov then DISA has mandated it so won't argue there.  There's also the people that still have Internet access from servers so then it
    would make sense in that environment as well.
    CSS Security Support Engineer (FCS/MBSA/WUA/Incident Response/FOPE) Check out my blog http://blogs.technet.com/kfalde or better yet check out http://technet.com/wiki and start contributing :)

  • Can we configure company policy in ESS?

    Hi All,
    My client wants to update company policy in ESS (Like Company Dress Code, Office Timings etc,)
    HR Log-in into ESS and post company policies. After that
    This should be display for individuals who logs in ESS with their own user name and password.
    This above requirement in which workset can we configure.
    My idea about that........
    I think company should maintain separate blog (Website).
    After that create Custom URL (Iview)- Then we can call that URL (Blog/ Website).
    Am I right ? or Wrong?
    Else is there any other way to configure.
    Anoku

    Hi Raj,
    This can be achieved, ask your ABAP consultant to define a WD application to display PDF / Image documents and upload the respective file to repository. We can call such applications into ESS Portal and can display them.
    But end users can not update the same documents whenever changes happen in Policy, there is a dependency with consultant again.
    SAP has come up with HR Policy Management in India. Please check below link:
    https://websmp106.sap-ag.de/~sapidb/011000358700000959092012E/HR_Policy_Management.pdf

  • Where can I download Group Policy Health Check Tool v.1.0?

    I once saw a screenshot of this tool (Group Policy Health Check Tool v.1.0) from some document.  However, when I search on line for it, it looks like this tool simply does not exist.  Can someone help me?

    Hi,
    Any update?
    Just checking in to see if the suggestions were helpful. Please let us know if you would like further assistance.
    Best Regards,
    Andy Qi
    TechNet Subscriber Support
    If you are
    TechNet Subscription user and have any feedback
    on our support quality, please send your feedback here.
    Andy Qi
    TechNet Community Support

  • Can You Restore Group Policy to its Deafault Settings

    I was wondering if you can restore Group Policy to its default settings with no GPO's or anything (except of course for the deafult two)?
    Thanks for the help.

    You can use the DCGPOFIX.EXE utility (see
    http://technet.microsoft.com/en-us/library/cc736813(WS.10).aspx) to return the "Default Domain Policy" and "Default Domain Controllers Policy" back to their default settings. If you do decide to do that, be sure you save a copy of the settings report from
    the GPOs as they sit before you run DCGPOFIX so that you can create addt'l GPOs with your customizations in them.

  • How can I apply group policy but exception some users like administrator?

    Hello all.
    How can I set a group policy and apply it to users exception the administrator ?
    Cheers.

    Hello,
    please see
    http://www.grouppolicy.biz/2015/03/how-to-stop-local-administrators-from-bypassing-group-policy/if you talk about local administrator accounts. In shortyou CAN'T.
    Best regards
    Meinolf Weber
    MVP, MCP, MCTS
    Microsoft MVP - Directory Services
    My Blog: http://blogs.msmvps.com/MWeber
    Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.
    Twitter:  

  • The processing of Group Policy failed. Windows attempted to read the file...

    Hello all-
    I am currently trying to configure group policy (specifically folder redirects) from a new Windows Server 2008 in my home... the server acts as both an AD DS and file server for 4 client computers, all running Windows Vista Ultimate.
    Here are the steps I am currently taking:
    I create a new Group Policy called All Users and Computers and apply it to the All Users and Computers OU, which contains exactly what it says (all users and computers in the domain).
    I verify that a new folder was created in \\<FQDN>\sysvol\<FQDN>\Policies.  The new folder created is named {6479C8E0-3134-4B4F-B047-7ADD51684684}
    I change the GPO Enforced setting to Enforced.
    I attempt to use the gpupdate command to see if the group policy can be updated successfully.  In a command prompt, I type gpupdate <enter>.  I receive the message 'Updating Policy...' then after about 15 seconds the message 'User Policy update has completed successfully.'
    I keep the cmd window open.  After about 10 seconds another message apperas which says "Computer policy could not be updated successfully.  The following errors were encountered: The processing of Group Policy failed.  Windows attempted to read the file \\<FQDN>\sysvol\<FQDN>\Policies\{6AC1786C-016F-11D2-945F-00C04Fb984F9}\gpt.ini from a domain controller and was not successful.  Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:
    a) Name Resolution/Network Connectivity to the current domain controller.
    b) File Replication Service Latency (a file created on another domain controller has not replicated to the current domain controller).
    c) The Distributed File System (DFS) client has been disabled.
    To diagnose the failure, review the event log or invoke gpmc.msc to access information about Group Policy results."
    I confirm that the error code is #3 using the Event Log, "The system cannot find the file specificed"
    Of course the system cannot find the file specified because the folder does not exist in the sysvol folder. I am wondering why Windows is trying to read from this location when it does not exist, and is not the new group policy I created!  I have no other group policies linked or enforced to any other OU/Domain/etc.  Any help resolving this issue would be greatly appreciated.

    Hello all and thanks for the help.  First a few things:
    I understand that the DC should not be running RRAS, but this a simple server being used in aa home environment by 4 users and getting another server just for RRAS would be overkill.
    Secondly, I currently have it so that while the router is handling DHCP, I have reserved a fixed IP for the server, so it always has 192.168.1.100.  If I were to use the server as the DHCP, what would my hardware configuration have to look like?  I currently have the router plugged into the ISP modem, and then server plugged into the router.  All other clients connect to the router wirelessly.
    Here's the dcdiag output.  I tried dcdiag /fix but to no avail.
    Directory Server Diagnosis
    Performing initial setup:
    Trying to find home server...
    * Verifying that the local machine KELLERDCFS, is a Directory Server.
    Home Server = KELLERDCFS
    * Connecting to directory service on server KELLERDCFS.
    * Identified AD Forest.
    Collecting AD specific global data
    * Collecting site info.
    Calling ldap_search_init_page(hld,CN=Sites,CN=Configuration,DC=keller-pa,DC=net,LDAP_SCOPE_SUBTREE,(objectCategory=ntDSSiteSettings),.......
    The previous call succeeded
    Iterating through the sites
    Looking at base site object: CN=NTDS Site Settings,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=keller-pa,DC=net
    Getting ISTG and options for the site
    * Identifying all servers.
    Calling ldap_search_init_page(hld,CN=Sites,CN=Configuration,DC=keller-pa,DC=net,LDAP_SCOPE_SUBTREE,(objectClass=ntDSDsa),.......
    The previous call succeeded....
    The previous call succeeded
    Iterating through the list of servers
    Getting information for the server CN=NTDS Settings,CN=KELLERDCFS,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=keller-pa,DC=net
    objectGuid obtained
    InvocationID obtained
    dnsHostname obtained
    site info obtained
    All the info for the server collected
    * Identifying all NC cross-refs.
    * Found 1 DC(s). Testing 1 of them.
    Done gathering initial info.
    Doing initial required tests
    Testing server: Default-First-Site-Name\KELLERDCFS
    Starting test: Connectivity
    * Active Directory LDAP Services Check
    Determining IP4 connectivity
    Determining IP6 connectivity
    * Active Directory RPC Services Check
    ......................... KELLERDCFS passed test Connectivity
    Doing primary tests
    Testing server: Default-First-Site-Name\KELLERDCFS
    Starting test: Advertising
    The DC KELLERDCFS is advertising itself as a DC and having a DS.
    The DC KELLERDCFS is advertising as an LDAP server
    The DC KELLERDCFS is advertising as having a writeable directory
    The DC KELLERDCFS is advertising as a Key Distribution Center
    The DC KELLERDCFS is advertising as a time server
    The DS KELLERDCFS is advertising as a GC.
    ......................... KELLERDCFS passed test Advertising
    Test omitted by user request: CheckSecurityError
    Test omitted by user request: CutoffServers
    Starting test: FrsEvent
    * The File Replication Service Event log test
    Skip the test because the event log File Replication Service does not exist.
    ......................... KELLERDCFS passed test FrsEvent
    Starting test: DFSREvent
    The DFS Replication Event Log.
    ......................... KELLERDCFS passed test DFSREvent
    Starting test: SysVolCheck
    * The File Replication Service SYSVOL ready test
    File Replication Service's SYSVOL is ready
    ......................... KELLERDCFS passed test SysVolCheck
    Starting test: KccEvent
    * The KCC Event log test
    Found no KCC errors in "Directory Service" Event log in the last 15 minutes.
    ......................... KELLERDCFS passed test KccEvent
    Starting test: KnowsOfRoleHolders
    Role Schema Owner = CN=NTDS Settings,CN=KELLERDCFS,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=keller-pa,DC=net
    Role Domain Owner = CN=NTDS Settings,CN=KELLERDCFS,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=keller-pa,DC=net
    Role PDC Owner = CN=NTDS Settings,CN=KELLERDCFS,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=keller-pa,DC=net
    Role Rid Owner = CN=NTDS Settings,CN=KELLERDCFS,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=keller-pa,DC=net
    Role Infrastructure Update Owner = CN=NTDS Settings,CN=KELLERDCFS,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=keller-pa,DC=net
    ......................... KELLERDCFS passed test KnowsOfRoleHolders
    Starting test: MachineAccount
    Checking machine account for DC KELLERDCFS on DC KELLERDCFS.
    * SPN found :LDAP/KELLERDCFS.keller-pa.net/keller-pa.net
    * SPN found :LDAP/KELLERDCFS.keller-pa.net
    * SPN found :LDAP/KELLERDCFS
    * SPN found :LDAP/KELLERDCFS.keller-pa.net/KELLER-PA
    * SPN found :LDAP/42268b36-801f-4a6d-b162-34f3b01e04bb._msdcs.keller-pa.net
    * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/42268b36-801f-4a6d-b162-34f3b01e04bb/keller-pa.net
    * SPN found :HOST/KELLERDCFS.keller-pa.net/keller-pa.net
    * SPN found :HOST/KELLERDCFS.keller-pa.net
    * SPN found :HOST/KELLERDCFS
    * SPN found :HOST/KELLERDCFS.keller-pa.net/KELLER-PA
    * SPN found :GC/KELLERDCFS.keller-pa.net/keller-pa.net
    ......................... KELLERDCFS passed test MachineAccount
    Starting test: NCSecDesc
    * Security Permissions check for all NC's on DC KELLERDCFS.
    * Security Permissions Check for
    DC=ForestDnsZones,DC=keller-pa,DC=net
    (NDNC,Version 3)
    * Security Permissions Check for
    DC=DomainDnsZones,DC=keller-pa,DC=net
    (NDNC,Version 3)
    * Security Permissions Check for
    CN=Schema,CN=Configuration,DC=keller-pa,DC=net
    (Schema,Version 3)
    * Security Permissions Check for
    CN=Configuration,DC=keller-pa,DC=net
    (Configuration,Version 3)
    * Security Permissions Check for
    DC=keller-pa,DC=net
    (Domain,Version 3)
    ......................... KELLERDCFS passed test NCSecDesc
    Starting test: NetLogons
    * Network Logons Privileges Check
    Verified share \\KELLERDCFS\netlogon
    Verified share \\KELLERDCFS\sysvol
    ......................... KELLERDCFS passed test NetLogons
    Starting test: ObjectsReplicated
    KELLERDCFS is in domain DC=keller-pa,DC=net
    Checking for CN=KELLERDCFS,OU=Domain Controllers,DC=keller-pa,DC=net in domain DC=keller-pa,DC=net on 1 servers
    Object is up-to-date on all servers.
    Checking for CN=NTDS Settings,CN=KELLERDCFS,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=keller-pa,DC=net in domain CN=Configuration,DC=keller-pa,DC=net on 1 servers
    Object is up-to-date on all servers.
    ......................... KELLERDCFS passed test ObjectsReplicated
    Test omitted by user request: OutboundSecureChannels
    Starting test: Replications
    * Replications Check
    * Replication Latency Check
    ......................... KELLERDCFS passed test Replications
    Starting test: RidManager
    * Available RID Pool for the Domain is 1600 to 1073741823
    * KELLERDCFS.keller-pa.net is the RID Master
    * DsBind with RID Master was successful
    * rIDAllocationPool is 1100 to 1599
    * rIDPreviousAllocationPool is 1100 to 1599
    * rIDNextRID: 1111
    ......................... KELLERDCFS passed test RidManager
    Starting test: Services
    * Checking Service: EventSystem
    * Checking Service: RpcSs
    * Checking Service: NTDS
    * Checking Service: DnsCache
    * Checking Service: DFSR
    * Checking Service: IsmServ
    * Checking Service: kdc
    * Checking Service: SamSs
    * Checking Service: LanmanServer
    * Checking Service: LanmanWorkstation
    * Checking Service: w32time
    * Checking Service: NETLOGON
    ......................... KELLERDCFS passed test Services
    Starting test: SystemLog
    * The System Event log test
    An Error Event occurred. EventID: 0x00000422
    Time Generated: 07/07/2009 17:53:59
    Event String:
    The processing of Group Policy failed. Windows attempted to read the file \\keller-pa.net\sysvol\keller-pa.net\Policies\{6AC1786C-016F-11D2-945F-00C04FB984F9}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:
    a) Name Resolution/Network Connectivity to the current domain controller.
    b) File Replication Service Latency (a file created on another domain controller has not replicated to the current domain controller).
    c) The Distributed File System (DFS) client has been disabled.
    An Error Event occurred. EventID: 0x00000422
    Time Generated: 07/07/2009 17:59:02
    Event String:
    The processing of Group Policy failed. Windows attempted to read the file \\keller-pa.net\sysvol\keller-pa.net\Policies\{6AC1786C-016F-11D2-945F-00C04FB984F9}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:
    a) Name Resolution/Network Connectivity to the current domain controller.
    b) File Replication Service Latency (a file created on another domain controller has not replicated to the current domain controller).
    c) The Distributed File System (DFS) client has been disabled.
    An Error Event occurred. EventID: 0x00000422
    Time Generated: 07/07/2009 18:04:04
    Event String:
    The processing of Group Policy failed. Windows attempted to read the file \\keller-pa.net\sysvol\keller-pa.net\Policies\{6AC1786C-016F-11D2-945F-00C04FB984F9}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:
    a) Name Resolution/Network Connectivity to the current domain controller.
    b) File Replication Service Latency (a file created on another domain controller has not replicated to the current domain controller).
    c) The Distributed File System (DFS) client has been disabled.
    An Error Event occurred. EventID: 0x00000422
    Time Generated: 07/07/2009 18:09:06
    Event String:
    The processing of Group Policy failed. Windows attempted to read the file \\keller-pa.net\sysvol\keller-pa.net\Policies\{6AC1786C-016F-11D2-945F-00C04FB984F9}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:
    a) Name Resolution/Network Connectivity to the current domain controller.
    b) File Replication Service Latency (a file created on another domain controller has not replicated to the current domain controller).
    c) The Distributed File System (DFS) client has been disabled.
    An Error Event occurred. EventID: 0x00000422
    Time Generated: 07/07/2009 18:14:08
    Event String:
    The processing of Group Policy failed. Windows attempted to read the file \\keller-pa.net\sysvol\keller-pa.net\Policies\{6AC1786C-016F-11D2-945F-00C04FB984F9}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:
    a) Name Resolution/Network Connectivity to the current domain controller.
    b) File Replication Service Latency (a file created on another domain controller has not replicated to the current domain controller).
    c) The Distributed File System (DFS) client has been disabled.
    An Error Event occurred. EventID: 0x00000422
    Time Generated: 07/07/2009 18:19:10
    Event String:
    The processing of Group Policy failed. Windows attempted to read the file \\keller-pa.net\sysvol\keller-pa.net\Policies\{6AC1786C-016F-11D2-945F-00C04FB984F9}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:
    a) Name Resolution/Network Connectivity to the current domain controller.
    b) File Replication Service Latency (a file created on another domain controller has not replicated to the current domain controller).
    c) The Distributed File System (DFS) client has been disabled.
    An Error Event occurred. EventID: 0x00000422
    Time Generated: 07/07/2009 18:24:12
    Event String:
    The processing of Group Policy failed. Windows attempted to read the file \\keller-pa.net\sysvol\keller-pa.net\Policies\{6AC1786C-016F-11D2-945F-00C04FB984F9}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:
    a) Name Resolution/Network Connectivity to the current domain controller.
    b) File Replication Service Latency (a file created on another domain controller has not replicated to the current domain controller).
    c) The Distributed File System (DFS) client has been disabled.
    An Error Event occurred. EventID: 0x00000422
    Time Generated: 07/07/2009 18:29:15
    Event String:
    The processing of Group Policy failed. Windows attempted to read the file \\keller-pa.net\sysvol\keller-pa.net\Policies\{6AC1786C-016F-11D2-945F-00C04FB984F9}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:
    a) Name Resolution/Network Connectivity to the current domain controller.
    b) File Replication Service Latency (a file created on another domain controller has not replicated to the current domain controller).
    c) The Distributed File System (DFS) client has been disabled.
    An Error Event occurred. EventID: 0x00000422
    Time Generated: 07/07/2009 18:34:17
    Event String:
    The processing of Group Policy failed. Windows attempted to read the file \\keller-pa.net\sysvol\keller-pa.net\Policies\{6AC1786C-016F-11D2-945F-00C04FB984F9}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:
    a) Name Resolution/Network Connectivity to the current domain controller.
    b) File Replication Service Latency (a file created on another domain controller has not replicated to the current domain controller).
    c) The Distributed File System (DFS) client has been disabled.
    An Error Event occurred. EventID: 0x00000422
    Time Generated: 07/07/2009 18:39:19
    Event String:
    The processing of Group Policy failed. Windows attempted to read the file \\keller-pa.net\sysvol\keller-pa.net\Policies\{6AC1786C-016F-11D2-945F-00C04FB984F9}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:
    a) Name Resolution/Network Connectivity to the current domain controller.
    b) File Replication Service Latency (a file created on another domain controller has not replicated to the current domain controller).
    c) The Distributed File System (DFS) client has been disabled.
    The processing of Group Policy failed. Windows attempted to read the file \\keller-pa.net\sysvol\keller-pa.net\Policies\{6AC1786C-016F-11D2-945F-00C04FB984F9}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:
    a) Name Resolution/Network Connectivity to the current domain controller.
    b) File Replication Service Latency (a file created on another domain controller has not replicated to the current domain controller).
    c) The Distributed File System (DFS) client has been disabled.
    An Error Event occurred. EventID: 0x00000422
    Time Generated: 07/07/2009 18:49:23
    Event String:
    The processing of Group Policy failed. Windows attempted to read the file \\keller-pa.net\sysvol\keller-pa.net\Policies\{6AC1786C-016F-11D2-945F-00C04FB984F9}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:
    a) Name Resolution/Network Connectivity to the current domain controller.
    b) File Replication Service Latency (a file created on another domain controller has not replicated to the current domain controller).
    c) The Distributed File System (DFS) client has been disabled.
    ......................... KELLERDCFS failed test SystemLog
    Test omitted by user request: Topology
    Test omitted by user request: VerifyEnterpriseReferences
    Starting test: VerifyReferences
    The system object reference (serverReference)
    CN=KELLERDCFS,OU=Domain Controllers,DC=keller-pa,DC=net and backlink
    on
    CN=KELLERDCFS,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=keller-pa,DC=net
    are correct.
    The system object reference (serverReferenceBL)
    CN=KELLERDCFS,CN=Topology,CN=Domain System Volume,CN=DFSR-GlobalSettings,CN=System,DC=keller-pa,DC=net
    and backlink on
    CN=NTDS Settings,CN=KELLERDCFS,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=keller-pa,DC=net
    are correct.
    ......................... KELLERDCFS passed test VerifyReferences
    Test omitted by user request: VerifyReplicas
    Test omitted by user request: DNS
    Test omitted by user request: DNS
    Running partition tests on : ForestDnsZones
    Starting test: CheckSDRefDom
    ......................... ForestDnsZones passed test CheckSDRefDom
    Starting test: CrossRefValidation
    ......................... ForestDnsZones passed test
    CrossRefValidation
    Running partition tests on : DomainDnsZones
    Starting test: CheckSDRefDom
    ......................... DomainDnsZones passed test CheckSDRefDom
    Starting test: CrossRefValidation
    ......................... DomainDnsZones passed test
    CrossRefValidation
    Running partition tests on : Schema
    Starting test: CheckSDRefDom
    ......................... Schema passed test CheckSDRefDom
    Starting test: CrossRefValidation
    ......................... Schema passed test CrossRefValidation
    Running partition tests on : Configuration
    Starting test: CheckSDRefDom
    ......................... Configuration passed test CheckSDRefDom
    Starting test: CrossRefValidation
    ......................... Configuration passed test CrossRefValidation
    Running partition tests on : keller-pa
    Starting test: CheckSDRefDom
    ......................... keller-pa passed test CheckSDRefDom
    Starting test: CrossRefValidation
    ......................... keller-pa passed test CrossRefValidation
    Running enterprise tests on : keller-pa.net
    Test omitted by user request: DNS
    Test omitted by user request: DNS
    Starting test: LocatorCheck
    GC Name: \\KELLERDCFS.keller-pa.net
    Locator Flags: 0xe00013fd
    PDC Name: \\KELLERDCFS.keller-pa.net
    Locator Flags: 0xe00013fd
    Time Server Name: \\KELLERDCFS.keller-pa.net
    Locator Flags: 0xe00013fd
    Preferred Time Server Name: \\KELLERDCFS.keller-pa.net
    Locator Flags: 0xe00013fd
    KDC Name: \\KELLERDCFS.keller-pa.net
    Locator Flags: 0xe00013fd
    ......................... keller-pa.net passed test LocatorCheck
    Starting test: Intersite
    Skipping site Default-First-Site-Name, this site is outside the scope
    provided by the command line arguments provided.
    ......................... keller-pa.net passed test Intersite
    Here's the nslookup from Vista client:
    Microsoft Windows [Version 6.0.6001]
    Copyright (c) 2006 Microsoft Corporation. All rights reserved.
    C:\Users\Andrew>nslookup KELLERDCFS
    Server: UnKnown
    Address: 192.168.1.100
    Name: KELLERDCFS.keller-pa.net
    Addresses: 192.168.1.150
    192.168.1.100
    C:\Users\Andrew>
    Thanks again!

  • Windows 8 and IE10 and 11 not accepting Proxy Settings via Group Policy from windows server 2003

    Hi
    We are still running Windows Server 2003 with a Win7 and Win8 desktop environment. I can control Win7 IE9 settings,
    But Win8 systems are running IE10. We have an internal proxy server.
    Is there any way to force the proxy settings to the Win8/IE10 or 11 systems .
    i have tried with The IE 10 .adm template and applied gpo,but does not have any proxy settings for ie10 and no changes were applies
    please can anyone help me regarding this
    i want to apply GPO from windows server 2003  to windows 8 ie10/11
    Thanks
    KNC

    Hi,   
    I agree with Zanderol24, we can install RSAT on a windows8 client, and then we can use Group Policy Management to manage group policy from the client.
    For more information about RSAT, we can refer to the following link:
    Remote Server Administration Tools (RSAT) for Windows Client and Windows Server (dsforum2wiki)
    http://social.technet.microsoft.com/wiki/contents/articles/2202.remote-server-administration-tools-rsat-for-windows-client-and-windows-server-dsforum2wiki.aspx
    For more detailed information about how to use GPP to configure the proxy setting for ie10 and ie11, we can refer to the following link:
    How to configure Group Policy Preference settings for Internet Explorer 11 in Windows 8.1 or Windows Server 2012 R2
    http://support.microsoft.com/kb/2898604
    When we use GPPs you need to be aware of the F5-F8 keys:
    Red / Green: GP Preferences doesn’t work even though the policy applied and after gpupdate \force
    http://blogs.technet.com/b/grouppolicy/archive/2008/10/13/red-green-gp-preferences-doesn-t-work-even-though-the-policy-applied-and-after-gpupdate-force.aspx
    Besides, aside from using group policy to manage IE, IEAK can also be used to do this.
    For IEAK, the following article can be referred to for more information.
    Internet Explorer Administration Kit (IEAK) Information and Downloads
    http://technet.microsoft.com/en-in/ie/bb219517.aspx
    Best Regards,
    Erin

  • Win7 Computer Config group policy not applying

    Hi all: I am having a bit of trouble getting a Computer Configuration group policy to apply in Windows 7 using ZCM 11.2.3. I have two group policies, one for User Configuration settings and the other for Computer Configuration settings. User Config GP is associated with users and Computer Config GP is associated with Workstations. ZCM shows both policies as being successfully applied. Yet, if I run rsop.msc to generate a resultant GP set, all Computer Config settings show up as undefined.
    I have used this same technique in XP for many years without issue. I suspect the User Config GP is overwriting all GP settings as it is the last to be applied, but since that policy is ONLY for User Config settings I do not see how. Can someone show me the "errors of my ways"?
    Thanks a bunch, Chris.

    I have an identical policy setup - a policy wherein "Computer configuration" is checked and configured (I don't even touch the User related settings) and is applied to workstations as well as a second policy with "User configuration" checked and configured (as with the computer policy, I don't touch the Computer related policy in this User policy) and applied to users. I set it up that way because I want general settings specific to our environment to exist and be effective for all users including IT staff in the Computer policy. I then want to restrict users within the User Policy. I have no Active Directory.
    The computer settings apply intermittently with no rhyme or reason, which makes it difficult to troubleshoot. I have Internet Zone Assignments configured in the Computer policy, so specific users have problems when this policy is not effective which is how I became aware of the problem. I found that I can run "gpudate /force" as the user and the computer policy becomes effective, which is what I do most of the time since it's a quick fix and I can move on to other things. I've tried changing the order the policies are applied. I am considering creating a single policy with both computer and user settings and associating it with users in hopes that it will always apply, but thought I'd check out the forum before doing so. ZCM 11.2.3 and Windows 7.

  • Group Policy Request

    Group Policy is very individualized. However, I have discovered the following tips that have helped me well over the years:Never, Never edit the Default Domain and Default Domain Controller policies - this provides a way to fall back to the defaults.If you deploy software via GPO, put any firewall rules needed for that software in the same policy. This allows you to close the firewall rules if you retire the software from your environment or move a PC to a different OU that doesn't use this software.Group Policy is OU based.Security Groups can cross OUs, making Group Policy and Security Groups orthogonal to each other. The two work together - use GPOs to set the base rules and Security Groups to provide access. Also, because it is OU based, do not put anything into the default Users and Computers containers. You cannot apply Group...

    Hi Spiceheads,
    I'm new in Group Policy but I need to setup our Group Policy in the domain can anyone with good heart provide me some standard group policy configuration or working group policy you have or group policy templates then I will check and explore the uses of it so I can setup our group policy correctly.
    Sorry If a new like me ask this kind of request.
    This topic first appeared in the Spiceworks Community

  • How to use Group Policy to remove the shutdown button on the logon screen

    Environment:  Shared use computers running Window 7 Professional and MS office Suite; Windows 2008 Standard server, Windows 7 EC Domain Policy and MS Office 2007 ADML Template downloaded from Microsoft. WIndows 7 Accounts OU.
    I am in the process of developing a shared use computer lockdown policy for several Windows 7 computers that will made available in my client's computer lab.  I need to use a group policy setting to remove the Shut Down button on
    the logon screen of the Windows 7 client computers.  I am editing the Windows 7 EC Domain Policy to user accounts in a Windows 7 Accounts OU that I created.  I am using the Group Policy editor in the Group Policy Management Console.  
    Please let me know the best practice for accomplishing this using Group Policy editor.
    Thanks.
    P.S. I tried a setting recommended in the following link in the Windows 7 EC Domain Policy which did not seem to work.
    http://www.windowsitpro.com/article/group-policy/can-i-use-group-policy-to-display-or-remove-the-shut-down-button-on-the-logon-screen-.aspx

    Hi Vernon,
    I tried the group policy you mentioned (Computer Configuration, Windows Settings, Security Settings, Local Policies, and select Security Options, "Shutdown: Allow system to be shut down without having to log on") and it worked on a Windows 7 client.
    Thus you may need to check if the group policy you created is actually applied to clients.
    A screenshot can be found here:
    http://cid-b7ed40feb32ba29f.office.live.com/self.aspx/.Public/desktop/Capture.JPG

  • Don't have proper privilege to change the date and time. Group Policy does not work

    Hello All,
    I have configure group policy to change date and time only administrator. The problem is Windows XP machine cannot view the calendar but windows 7 can. So i need to view the calender for windows XP machine.
    Error: you do not have proper privilege to change the date and time.  
    Please suggest.
    Thanks

    Hi Parvez,
    Before going further:
    I applied a VM Windows XP pro. When I logged in as a local admin, I can view the calendar from the right corner of desktop or from control
    panel. However, when I logged in as a normal user account, I received the same message as yours.
    For now:
    I know this is not what you want. However, for normal users to view calendar, we can consider to give
    Change System Time permissions to these users.
    In addition, regarding this topic, the following article and thread can be referred to for more information.
    You cannot set the date, time, or time zone on your computer
    http://support.microsoft.com/kb/300022/en-us
    Check windows calendar in XP pro without admin rights
    http://community.spiceworks.com/topic/100116-check-windows-calendar-in-xp-pro-without-admin-rights
    Please Note: Since the second website is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information.
    Best regards,
    Frank Shen

  • Local Policy / Group Policy

    With 300 machines you are going to have to use GPO and not local policies. The scope is just way too large for going to each machine and doing the configAs for where and when to use Computer vs User GPO's, that's totally up to youYou should read the below:Computer Configuration in Group PolicyUser Configuration in Group PolicyWhat policies to apply will be in the scope of the desktop hardening so you will have to do your searches on that. Typically hardening would include security settings or some sort which will include password complexity, length and expiration right down to stopping the installation of executables on a machine.These policies will be different in each environment so you will have to do some homework about what GPO's need to be applied

    Hi Spiceheads,
    I have a question regarding local policy and group policy.
    I received a workstation hardening procedure but I need to apply this settings for 300 computers can I use group policy instead of local policy? if yes how and what option I need to select Computer Configuration of User Configuration?
    All 300 computers are connected to the same Domain.
    Thank you.
    This topic first appeared in the Spiceworks Community

Maybe you are looking for