Deny users right to delete own meetings in room mailbox

Hi there.
I have a room mailbox where i need to deny users the right to delete/edit meetings that they have created.
The rights on the mailbox are like this at the moment
Kalender is the danish word for calender ;-)
[PS] C:\>get-mailboxfolderpermission -identity "Roommailbox":\kalender
RunspaceId   : 7634b87a-f0e0-40f7-9ced-165092cd99e2
FolderName   : Kalender
User         : Default
AccessRights : {Reviewer}
Identity     : Default
IsValid      : True
RunspaceId   : 7634b87a-f0e0-40f7-9ced-165092cd99e2
FolderName   : Kalender
User         : Anonymous
AccessRights : {None}
Identity     : Anonymous
IsValid      : True
RunspaceId   : 7634b87a-f0e0-40f7-9ced-165092cd99e2
FolderName   : Kalender
User         : F-Lon
AccessRights : {Editor}
Identity     : F-Lon
IsValid      : True
Is it possible to do this?

Hi Jesper,
According to your further description, I now understand that the requirement is that you want to deny users cancel meeting in their own calendar instead of directly deleting items in room mailbox. But canceling a meeting is a default right for users who
is the organizer of this meeting and it is by design.
I have tried to create a transport rule as a workaround to reject canceled meeting message transport in my test environment:
Apply rule to messages
Sent to ‘[email protected]
  And when the Subject field contains
‘Canceled’
  And if the message type is ‘Calendaring’
Send ‘cannot cancel this meeting’ to sender with
‘5.7.1’
Except when the message if from ‘[email protected]
But it failed, it could reject the meeting being deleted from the room mailbox but it deleted all meeting information in attendees’ and organizer’s calendar.
Therefore, it cannot be achieved to deny users to manage their own meetings as an organizer. Maybe we need to find another ways to manage your summerhouse.
Best regards,
Winnie Liang
TechNet Community Support

Similar Messages

  • Exchange 2010 - All users can delete scheduled and accepted meetings in a room mailbox

    Hello Everyone,
         I have a strange situation.  I created 4 conference room "room" mailboxes for calendaring of the conference rooms.  We tested to see if user A booked a meeting in room 1 - that user B could not go delete or change
    that meeting if it was accepted.
         Now - for some reason - user B (or any other user on Exchange) can now go delete any meeting made by anyone and has been accepted on the calendar.  I cannot figure out what has happened to my permissions that is letting this
    happen. As far as I know - we have not made any changes to these room mailboxes.   We are Exchange 2010  version 14.01.0355.002.

    Hi
    Have a try with the steps on this thread
    http://social.technet.microsoft.com/Forums/en-US/exchangesvradmin/thread/ed89d6ac-0c48-43a8-8ed4-3d4f5d441737
    1.       Create a test mailbox as a new room mailbox, remove all permission on the Properties of “Mailbox” and “Calendar”
    Notes: Confirm the permission under “Default” and “Anonymous” account is “None”
    2.       Use “Delegate” function in “Tools” menu to share calendar for “TESTALL” group as “Author”
    3.       Go to the Properties of calendar in room mailbox, confirm “Author” permission
    4.       In User C’s outlook, see if you still can delete the calendar item that User A created
    Cheers
    Zi Feng
    TechNet Community Support

  • Regedit Permissions -"Access Denied" or "Error while deleting key" EVEN AS ADMIN!

    Anyone tried deleting a registry key in Windows 7?  Got "access denied" or "Error while deleting key"?
    The usual response is, "You need to run regedit as an administrator".  but I *AM* logged in as Administrator, and running regedit as administrator, trying to assign administrator full permissions on that registry key in order to delete it!!  
    Am I mistaken, or isn't Administrator supposed to be able to administer and control all the settings on the computer, in order to set it up for the "Average Joe" user?
    So, under the permissions menu of that key, go to advanced, change the owner from System to Administrator, and try again.  It's no longer saying "access denied", but "Cannot delete xxxxxx. Error while deleting key".
    The scenario: Basically, the wireless has stopped working on a laptop. The device does not show up in Device Manager, but is in the registry, so the normal procedure is to delete the registry entry for the device in HKLM/System/CurrentControlSet (and /ControlSet001) /Enum/PCI    ,then attach the device or restart the computer, it finds the "new" hardware and reinstalls it. Easy!...
    Not with permission restrictions on the administrator account it's not!  So I need to give myself permission, to give myself permission, to do a simple task like delete a single registry key!  Why, Microsoft, why???!!!  Please just make the Administrator account a hidden "God mode" account that can do anything, and make the lives of us techies much easier in the process!  
    /RANT
    Now, where did I put that XP disc?!....

    Hi,
    I explain you:
    Administrator does not mean "you get all rights to do anything." Administrator happens to be an account (or in your case, most likely the Local Administrators group) which by default is given some sensitive privileges like SeDebugPrivilege and
    similar. However, as far as the security subsystem is concerned, it is just an account. (Very much unlike root in
    Unix-like operating systems) If you aren't the owner of the key in question, and your account does not have WRITE_DAC access
    to the registry key in question, then you won't be able to change the access control list on the key in question.
    Try taking ownership first. By default, the local administrators group has SeTakeOwnershipPrivilege,
    which allows taking ownership of any object even without the WRITE_OWNER permission
    being granted by the object's discretionary access control list. Once you are the owner, you should be implicitly granted READ_CONTROL (which
    allows you to read the security descriptor on the object in question), and WRITE_DAC (which
    allows you to write to the DACL on the key in question). (Assuming the OWNER_RIGHTS SID
    isn't in use; that's extremely unlikely)

  • Pulseaudio: /run/user/ myuid /pulse gets owned by root "randomly"

    Hi,
    I'm sorry I think it's impossible that this hasn't come up yet, but I'm unable to find anything related.
    Since a month or so I have a weird problem with the ownership of /run/user/<myuid>/pulse/*
    From time to time those files get owned by root without any obvious reason I can think of.
    I then get the can't connect to audio bla bla messages when I try to run vlc.
    When the problem appears I just chown <myuser> -R /run/user/<myuid>/pulse/ and everything's fine again.
    Everytime I check pulseaudio runs as my user, I never caught it running as root. I don't understand why those files get owned by root from time to time.
    /usr/bin/pulseaudio --start --log-target=syslog
    /usr/lib/pulse/gconf-helper
    I'm using kde and pulse gets started automatically.
    After logging in everything works fine. It *seems* random to me when this happens, although recently I have discovered that this happens when vlc's output module was set to automatic.
    I've had files playing in vlc, hit the stop button and immediately hit play again which resulted in that error. Hitting stop, changing owner and hitting play worked.
    I then changed audio output module in vlc to pulseaudio and wasn't able to reproduce it since.
    But this still happens from time to time.
    To make sure there are no old strange settings, I've deleted ~/.pulse already but this didn't help.
    I'm sorry that I'm not posting logs since I have no idea where to start looking.
    It would be great if someone could point me into the right direction in order to find out what's happening there.
    Thank you very much!
    Max

    Thanks for your reply!
    I noticed that I mixed things up. Not the contents of /run/user/<myuid>/pulse/* get owned by root, but the "pulse" directory itself.
    I've just done a pacman -Syu. Let's see if it happens again

  • ITunes 10.4.1.10 how to stop downloads of free news pods?  (right click delete doesn't work) also can't scroll down list of downloads!

    (ITunes 10.4.1.10) How to stop downloads of free news pods?  (right click delete doesn't work)
    Also can't scroll down list of downloads so as to pause them.  Would like to delete them as ISP has download limit.
    Thanks in advance!  (this seems to be a dumb problem of the software having a life of its own!)

    I have been talking to Apple support about this very problem. So far they have asked me to disable both Firewall and Anti Virus software (Windows Firewall and ESAT NOD32 anti virus) - this didn't work. Rebuild my library - this didn't work. Un-install all Apple applications and re-install - this didn't work. I have created a second user account on my PC and from that account (both accounts set as Administrator) I can activate Genius. This suggests to me that the problem is possibly linked to my original User Account, which is the one I always use. I am waiting for the next update from Apple and will post an update if/when the problem is resolved.
    What I also notice is about 2 seconds in to Step 2 of the Genius activation, the progress diagonal lines bar stops, and then starts again. As soon as I see this short freeze I know that the activation will fail.

  • Delegate Right to delete gpos (new created policies and existing policies)

    Hi
    I want to create a delegation for all group policies in the domain for Active Directory Group over GPMC.
    The users in this group should have rights to delete existing group policies .
    I know that I can delegate this per gpo (Select GPO > Delegation Tab > AD Group). But I want to delegate this right on the whole Domain. For existing gpos, I could use a powershell script which adds the delegation group on all existing policies. But
    I can't find a way to delegate this right for new created GPOs.
    Is there a way to this?
    Thanks for your support!
    Miro

    Am 24.10.2014 um 09:24 schrieb m.hegnauer:
    > Now the delegation is set on both (domain level and "Group Policy
    > Objects"), but "Access denied" appears again. On the "Group Policy
    > Objects"  Delegations Tab, I only can Add or Remove a user / group, but
    > I can't adjust the rights.
    I seem to remember that granting through the UI will
    a) not take effect on existing GPOs and
    b) not take effect on GPOs created by others.
    You need to modify the "policies" container ACL and the WMI filters
    container ACL in Active Directory.
    A colleague of mine implemented this some time ago. This is what we set:
         <grant objectdn="CN=SOM,CN=WMIPolicy,CN=System,DC=yourdomain"
    nc="DefaultNC" type="Container" trustee="GPO-Admins"
                        description="Full Control"
    inheritance="ADS_ACEFLAG_INHERIT_ACE" rights="FULL_CONTROL" />
        <grant objectdn="CN=Policies,CN=System,DC=yourdomain"
    nc="DefaultNC" type="Action"    trustee="GPO-Admins"
    objectguid="ATTRIBUTE_GUID_GPOGUID"    description="Create/Delete GPOs"
    inheritance="ADS_ACEFLAG_INHERIT_ACE"
    rights="DS_CREATE_CHILD;DS_DELETE_CHILD"/>
        <grant objectdn="DC=yourdomain"                 nc="DefaultNC"
    type="Action"    trustee="GPO-Admins"
    objectguid="ATTRIBUTE_GUID_GP_LINK"    description="Link GPOs"
    inheritance="ADS_ACEFLAG_INHERIT_ACE" rights="DS_READ_PROP;DS_WRITE_PROP"/>
        <grant objectdn="DC=yourdomain"                 nc="DefaultNC"
    type="Action"    trustee="GPO-Admins"
    objectguid="ATTRIBUTE_GUID_GP_OPTIONS" description="Change GP Options"
    inheritance="ADS_ACEFLAG_INHERIT_ACE" rights="DS_READ_PROP;DS_WRITE_PROP"/>
    I checked his script, but it is way too complicated to post it here or
    anywhere else =:o
    In addition, you have to grant GPO-Admins sufficient access to
    sysvol\policies:
    "icacls.exe" & SysvolRoot & "\Policies /grant
    GPO-Admins:(OI)(CI)(X,RD,RA,REA,WD,AD,WA,WEA,DC,RC)"
    Both is done through VBS, so you need some Constants and GUIDs :)
    'ACL Constants
    Const   ADS_ACETYPE_ACCESS_ALLOWED           = 0
    Const   ADS_ACETYPE_ACCESS_DENIED            = &H1
    Const   ADS_ACETYPE_SYSTEM_AUDIT             = &H2
    Const   ADS_ACETYPE_ACCESS_ALLOWED_OBJECT    = &H5
    Const   ADS_ACETYPE_ACCESS_DENIED_OBJECT     = &H6
    Const   ADS_ACETYPE_SYSTEM_AUDIT_OBJECT      = &H7
    Const   ADS_RIGHT_DELETE                     = &H10000
    Const   ADS_RIGHT_READ_CONTROL               = &H20000
    Const   ADS_RIGHT_WRITE_DAC                  = &H40000
    Const   ADS_RIGHT_WRITE_OWNER                = &H80000
    Const   ADS_RIGHT_SYNCHRONIZE                = &H100000
    Const   ADS_RIGHT_ACCESS_SYSTEM_SECURITY     = &H1000000
    Const   ADS_RIGHT_GENERIC_READ               = &H80000000
    Const   ADS_RIGHT_GENERIC_WRITE              = &H40000000
    Const   ADS_RIGHT_GENERIC_EXECUTE            = &H20000000
    Const   ADS_RIGHT_GENERIC_ALL                = &H10000000
    Const   ADS_RIGHT_DS_CREATE_CHILD            = &H1
    Const   ADS_RIGHT_DS_DELETE_CHILD            = &H2
    Const   ADS_RIGHT_ACTRL_DS_LIST              = &H4
    Const   ADS_RIGHT_DS_SELF                    = &H8
    Const   ADS_RIGHT_DS_READ_PROP               = &H10
    Const   ADS_RIGHT_DS_WRITE_PROP              = &H20
    Const   ADS_RIGHT_DS_DELETE_TREE             = &H40
    Const   ADS_RIGHT_DS_LIST_OBJECT             = &H80
    Const   ADS_RIGHT_DS_CONTROL_ACCESS          = &H100
    Const   ADS_RIGHT_FULL_CONTROL               = 983551
    Const   ADS_ACEFLAG_INHERIT_ACE              = &H2
    Const   ADS_ACEFLAG_NO_PROPAGATE_INHERIT_ACE = &H4
    Const   ADS_ACEFLAG_INHERIT_ONLY_ACE         = &H8
    Const   ADS_ACEFLAG_INHERITED_ACE            = &H10
    Const   ADS_ACEFLAG_VALID_INHERIT_FLAGS      = &H1f
    Const   ADS_ACEFLAG_SUCCESSFUL_ACCESS        = &H40
    Const   ADS_ACEFLAG_FAILED_ACCESS            = &H80
    'Object GUIDs
    Const OBJECT_GUID_COMPUTERS         =
    "{bf967a86-0de6-11d0-a285-00aa003049e2}"
    Const OBJECT_GUID_USERS             =
    "{bf967aba-0de6-11d0-a285-00aa003049e2}"
    Const OBJECT_GUID_GROUPS            =
    "{bf967a9c-0de6-11d0-a285-00aa003049e2}"
    Const OBJECT_GUID_PRINTERS          =
    "{bf967aa8-0de6-11d0-a285-00aa003049e2}"
    Const Object_GUID_OU                 = "{bf967aa5-0de6-11d0-a285-00aa003049e2}"
    Const Object_GUID_CONTACTS          =
    "{5CB41ED0-0E4C-11D0-A286-00AA003049E2}"
    Const Obejct_GUID_FtDfs                =
    "{8447f9f3-1027-11d0-a05f-00aa006c33ed}"
    Const Object_GUID_NTFRS_Replica_Set =
    "{5245803a-ca6a-11d0-afff-0000f80367c1}"
    Const Object_GUID_NTFRS_settings    =
    "{f780acc2-56f0-11d1-a9c6-0000f80367c1}"
    Const Object_GUID_NTFRS_Member      =
    "{2a132586-9373-11d1-aebc-0000f80367c1}"
    Const Object_GUID_NTDSConnection    =
    "{19195a60-6da0-11d0-afd3-00c04fd930c9}"
    Const Object_GUID_Server            =
    "{bf967a92-0de6-11d0-a285-00aa003049e2}"
    Const Object_GUID_Subnet            =
    "{b7b13124-b82e-11d0-afee-0000f80367c1}"
    Const Object_GUID_Site              =
    "{bf967ab3-0de6-11d0-a285-00aa003049e2}"
    Const Object_GUID_Sitelink          =
    "{d50c2cde-8951-11d1-aebc-0000f80367c1}"
    Const Object_GUID_ServersContainer  =
    "{f780acc0-56f0-11d1-a9c6-0000f80367c1}"
    Const Object_GUID_msWMIRule         =
    "{3c7e6f83-dd0e-481b-a0c2-74cd96ef2a66}"
    Const Object_GUID_msWMISom          =
    "{ab857078-0142-4406-945b-34c9b6b13372}"
    'Attribute GUIDs
    Const ATTRIBUTE_GUID_LOCKOUT_TIME   =
    "{28630EBF-41D5-11D1-A9C1-0000F80367C1}"
    Const ATTRIBUTE_GUID_PWD            =
    "{00299570-246d-11d0-a768-00aa006e0529}"
    Const GPOLinkProp                   =
    "{f30e3bbe-9ff0-11d1-b603-0000f80367c1}"
    Const GPOOptProp                    =
    "{f30e3bbf-9ff0-11d1-b603-0000f80367c1}"
    Const GPOGUID                       =
    "{f30e3bc2-9ff0-11d1-b603-0000f80367c1}"
    Const Generate_RSoP_Planning        =
    "{b7b1b3dd-ab09-4242-9e30-9980e5d322f7}"
    Const Generate_RSoP_Logging         =
    "{b7b1b3de-ab09-4242-9e30-9980e5d322f7}"
    Const USER_ACCOUNT_RESTRICTIONS     =
    "{4C164200-20C0-11D0-A768-00AA006E0529}"
    Const ATTRIBUTE_GUID_MEMBERS        =
    "{bf9679c0-0de6-11d0-a285-00aa003049e2)"
    Const Change_Schema_Master          =
    "{E12B56B6-0A95-11D1-ADBB-00C04FD8D5CD}"
    Const MemberProp                    =
    "{BF9679C0-0DE6-11D0-A285-00AA003049E2}"
    Const Given_Name                    =
    "{F0F8FF8E-1191-11D0-A060-00AA006C33ED}"
    Const Surname                       =
    "{BF967A41-0DE6-11D0-A285-00AA003049E2}"
    Const Telephone_Number              =
    "{BF967A49-0DE6-11D0-A285-00AA003049E2}"
    Const Phone_Mobile_Primary          =
    "{F0F8FFA3-1191-11D0-A060-00AA006C33ED}"
    Const Facsimile_Telephone_Number    =
    "{BF967974-0DE6-11D0-A285-00AA003049E2}"
    Const E_mail_Addresses              =
    "{BF967961-0DE6-11D0-A285-00AA003049E2}"
    Const SAM_Account_Name              =
    "{3E0ABFD0-126A-11D0-A060-00AA006C33ED}"
    Const User_Principal_Name           =
    "{28630EBB-41D5-11D1-A9C1-0000F80367C1}"
    Const Street_Address                =
    "{BF967A3A-0DE6-11D0-A285-00AA003049E2}"
    Const ATTRIBUTE_GroupMember         =
    "{Bf9679C0-0DE6-11D0-A285-00AA003049E2}"
    Const NTFRS_SubscriptionsProp       =
    "{2A132587-9373-11D1-AEBC-0000F80367C1}"
    Const description                   =
    "{bf967950-0de6-11d0-a285-00aa003049e2}"
    Const postalCode                    =
    "{bf9679fd-0de6-11d0-a285-00aa003049e2}"
    Const DS_Replication_Get_Changes    =
    "{1131f6aa-9c07-11d1-f79f-00c04fc2dcd2}"
    Const DS_Replication_Get_Changes_all=
    "{1131f6ad-9c07-11d1-f79f-00c04fc2dcd2}"
    Martin
    Mal ein
    GUTES Buch über GPOs lesen?
    NO THEY ARE NOT EVIL, if you know what you are doing:
    Good or bad GPOs?
    And if IT bothers me - coke bottle design refreshment :))

  • When using the camera downloader in Adobe Bridge CS6 with Nikon D5200 we are unable to see previews of the photos and it is very slow to download. The issue occurs under a the users rights, but not under admin level. This is a new issue

    When using the camera downloader in Adobe Bridge CS6 with Nikon D5200 we are unable to see previews of the photos and it is very slow to download. The issue occurs under a the users rights, but not under admin level. This is a new issue.

    Hi Jdentremont,
    Lync client gets user photos by first querying the Address Book Web Query (ABWQ) service on the server, which is exposed through the Distribution List Expansion web service. The client receives
    the image file and then copies it to the user's cache to avoid downloading the image each time it needs to be displayed. The attribute values returned from the query are also stored in the cached Address Book Service entry for the user. The Address Book Service
    deletes all cached images every 24 hours, which means that it can take up to 24 hours for new user images to be updated in the cache on the server.
    To troubleshoot your problem, please follow the steps below:
    1.  Navigate to
     “X:\share\1-WebServices-1\ABfiles\000000000\000000000” folder. (ABS file share)
    You should see some photo files in this folder as the following screenshot.
    2. Delete all the files in this folder.
    3. On test PC, delete local cache files.
    %userprofile%\AppData\Local\Microsoft\Office\15.0\Lync\[email protected]
    4. Sign-in Lync with the test account.
    5. Go back to the ABS file share, check if there is any Photo file in the folder.
    Best regards,
    Eric
    Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected]

  • How to restrict the user(Schema) from deleting the data from a table

    Hi All,
    I have scenario here.
    I want to know how to restrict a user(Schema) from deleting the values from a table created in the same schema.
    Below is the example.
    I have created a table employee in abc schema which has two values.
    EMPLOYEE
    ABC
    XYZ
    In the above scenario the abc user can only fire select query on the EMPLOYEE table.
    SELECT * FROM EMPLOYEE;
    He should not be able to use any other DML commands on that table.
    If he uses then Insufficient privileges error should be thrown.
    Can anyone please help me out on this.

    Hi,
    kumar0828 wrote:
    Hi Frank,
    Thanks for the reply.
    Can you please elaborate on how to add policies for a table for just firing a select DML statement on table.See the SQL Packages and Types manual first. It has examples. You can also search the web for examples. This is sometimes called "Virtual Private Database" or VPD.
    If you have problems, post a specific question here. Include CREATE TABLE and INSERT statements to create a table as it exists before the policies go into effect, the PL/SQL code to create the policies, and additonal DML statements that will be affected by the policies. Show what the table should contain after each of those DML statements.
    Always say which version of Oracle you're using. Confirm that you have Enterprise Edition.
    See the forum FAQ {message:id=9360002}
    The basic idea behind row-level security is that it generates a string that is automatically added to SELECT and/or DML statement WHERE clauses. For example, if user ABC is only allowed to query a table on Sunday, then you might write a function that returns the string
    USER  != 'ABC'
    OR      TO_CHAR (SYSDATE, 'DY', 'NLS_DATE_LANGUAGE=ENGLISH') = 'SUN'So whenever any user says
    SELECT  *
    FROM    table_x
    ;what actually runs is:
    SELECT  *
    FROM    table_x
    WHERE   USER  != 'ABC'
    OR      TO_CHAR (SYSDATE, 'DY', 'NLS_DATE_LANGUAGE=ENGLISH') = 'SUN'
    ;If you want to prevent any user from deleting rows, then the policy function can return just this string
    0 = 1Then, if somone says
    DELETE  employee
    ;what actually gets run is
    DELETE  employee
    WHERE   0 = 1
    ;No error will be raised, but no rows will be deleted.
    Once again, it would be simpler, more efficient, more robust and easier to maintain if you just created the table in a different schema, and not give DELETE privileges.
    Edited by: Frank Kulash on Nov 2, 2012 10:26 AM
    I just saw the previous response, which makes some additional good points (e.g., a user can always TRUNCATE his own tables). ALso, if user ABC applies a security policy to the table, then user ABC can also remove the policy, so if you really want to prevent user ABC from deleting rows, no matter how hard the user tries, then you need to create the policies in a different schema. If you're creating things in a different schema, then you might as well create the table in a different schema.

  • Access Denied while trying to delete document

    In SharePoint 2013, if the user ONLY has contribute access to a library, (user does not have access to the site) and if the user tries to delete a file, it throws an error message.
    Access Denied: You do not have permission to perform this action or access this resource.
    permission inheritance is broken on library level, Contribute Permission does have these options checked delete files, versions, and view application pages, but can not delete file.
    If read access is provided to the site level, then user can delete file, why is that ?
    using SharePoint 2013 Standard Edition. 

    Does the user get the error both from the ribbon and from the "...", "..." menu?
    If a user has the Delete Items permission, but not the Use Remote Interfaces permission then they can delete files from the ribbon, but when attempting to delete from the content dropdown (Edit Control Block) will get Access Denied.
    I'd like to try to duplicate your problem...
    Is versioning enabled? Major or major and minor versions?
    Is this consistent with all document types? .txt, pdf, docx, etc.
    Is the file in a Document Set?
    Is there a workflow running on the documents?
    Is the document assigned to a custom Content Type?
    Any other settings?
    Mike Smith TechTrainingNotes.blogspot.com
    Books:
    SharePoint 2007 2010 Customization for the Site Owner,
    SharePoint 2010 Security for the Site Owner

  • Group Policy - User Rights Assignments not taking effect on workstation`

    Novell 5.1 SP7. ZenWorks 3.2 sp3. Windows XP Pro workstations.
    In Group Policy, (Computer Configuration/Windows Settings/Security
    Settings/Local Policies/User Rights Assignment), I have added Power Users to
    the "Load and Unload device drivers" policy. However this setting is not
    taking effect on my Windows XP workstations. My DLU policy for users is
    configured to have the users members of the "Users" and "Power Users" groups
    on the local PC.
    Other parts of Group Policy (Computer Policy/Administrative Templates) are
    taking effect on the workstation, so I'm wondering if the problem I am
    having is related to Security Settings only.
    I enabled Group Policy logging on the Windows XP workstation and include it
    below:
    WMHelperInitialization (Mar 4 2004) called! Flags: 0x8001002. Event:
    0x1000. Impersonation: 0x2
    Created Mutex.
    Loaded userenv.dll
    Mapped function RefreshPolicy
    Mapped function RegisterGPNotification
    Mapped function UnregisterGPNotification
    Mapped function RefreshPolicyEx
    Exiting WMHelperInitialization. Returning flags: 0x204
    WMHelperSystemEntryEx called!
    Entered GPCleanupEntry
    Writing User Logged In to \HKLM\Software\Novell\Workstation Manager\Group
    Policies
    Wrote reg. value 0x0 to User Logged In in key Software\Novell\Workstation
    Manager\Group Policies
    Reading Group Policy User Flags from \HKLM\Software\Novell\Workstation
    Manager\Group Policies
    Read reg. value Group Policy User Flags: 0x80000070 in key
    Software\Novell\Workstation Manager\Group Policies
    Reading Persist Workstation settings from \HKLM\Software\Novell\Workstation
    Manager\Group Policies
    Reg key Software\Novell\Workstation Manager\Group Policies\Persist
    Workstation settings not found. Assuming 0
    Error 2 reading Persist Workstation settings
    Entered RestoreOriginalGP.
    Reading Group Policy Machine Flags from \HKLM\Software\Novell\Workstation
    Manager\Group Policies
    Reg key Software\Novell\Workstation Manager\Group Policies\Group Policy
    Machine Flags not found. Assuming 0
    Reading Group Policy User Flags from \HKLM\Software\Novell\Workstation
    Manager\Group Policies
    Read reg. value Group Policy User Flags: 0x80000070 in key
    Software\Novell\Workstation Manager\Group Policies
    Entered GPDel
    Deleting C:\WINDOWS\System32\GroupPolicy\User
    Deleting C:\WINDOWS\System32\GroupPolicy\Machine
    Exiting GPDel 0
    Restoring backup GP from C:\WINDOWS\System32\GroupPolicy.WMOriginal
    Entered GPCopy(C:\WINDOWS\System32\GroupPolicy.WMOriginal,
    C:\WINDOWS\System32\GroupPolicy, 0, handle, 0x80000070)
    Warning: C:\WINDOWS\System32\GroupPolicy.WMOriginal\GPT.ini does not exist
    Copied file
    C:\WINDOWS\System32\GroupPolicy.WMOriginal\Machine \Microsoft\Windows
    NT\SecEdit\IPS1.dat to
    C:\WINDOWS\System32\GroupPolicy\Machine\Microsoft\ Windows
    NT\SecEdit\IPS1.dat
    Copied file
    C:\WINDOWS\System32\GroupPolicy.WMOriginal\Machine \Microsoft\Windows
    NT\SecEdit\XPSec.dat to
    C:\WINDOWS\System32\GroupPolicy\Machine\Microsoft\ Windows
    NT\SecEdit\XPSec.dat
    GP_FLAG_APPLY_SECURITY_SETTINGS (0x40), not set, or security file already
    copied. Will not copy security file
    Exiting GPCopy 0x0
    Writing Group Policy Machine Status to \HKLM\Software\Novell\Workstation
    Manager\Group Policies
    Wrote reg. value 0x4000 to Group Policy Machine Status in key
    Software\Novell\Workstation Manager\Group Policies
    Exiting RestoreOriginalGP 0x0
    Entered AppendSecuritySettings
    Inf path: C:\WINDOWS\System32\GroupPolicy\Machine\Microsoft\ Windows
    NT\SecEdit\XPSec.dat
    Restoring GP settings
    Loading Account Policies...
    Loading Audit Policies...
    Loading user rights...
    Restoring security options...
    No data
    No data
    No data
    No data
    No data
    No data
    No data
    No data
    Renamed Administrator account: Administrator
    Local Administrator's user name = Administrator
    Administrator account names match, skipping.
    Renamed Guest account: Guest
    Local Guest's user name = Guest
    Guest account names match, skipping.
    LoadXPSecuritySettings returning 0
    LoadHive entered
    LoadHive exit : 0
    Exiting AppendSecuritySettings 0x0
    GPCleanupEntry releasing mutex.
    Exiting GPCleanupEntry: 0
    Exiting WMHelperSystemEntryEx ccode: 0x0
    Closing log file.
    WMHelperInitialization (Mar 4 2004) called! Flags: 0x0. Event: 0x0.
    Impersonation: 0x0
    Created Mutex.
    Loaded userenv.dll
    Mapped function RefreshPolicy
    Mapped function RegisterGPNotification
    Mapped function UnregisterGPNotification
    Mapped function RefreshPolicyEx
    Exiting WMHelperInitialization. Returning flags: 0x11
    Entering WMHelperInteractiveUserEntry!
    szFullDN = CN=wintest3.OU=Users.OU=Newcastle.O=OSG
    DN is Typed convert it to TYPELESS
    g_szUserDN = wintest3.Users.Newcastle.OSG
    GinaGetUsersSIDInTextualForm ENTERED
    Textual SID : S-1-5-21-1214440339-507921405-1708537768-1019
    GinaGetUsersSIDInTextualForm EXIT : 0
    Writing Don't reparse to \HKLM\Software\Novell\Workstation Manager\Group
    Policies
    Wrote reg. value 0x0 to Don't reparse in key Software\Novell\Workstation
    Manager\Group Policies
    Writing User Logged In to \HKLM\Software\Novell\Workstation Manager\Group
    Policies
    Wrote reg. value 0x1 to User Logged In in key Software\Novell\Workstation
    Manager\Group Policies
    Entered CheckForObsoleteWksCache .
    No workstation. Exiting CheckForObsoleteWksCache
    Applying user policies
    Reading Don't reparse from \HKLM\Software\Novell\Workstation Manager\Group
    Policies
    Read reg. value Don't reparse: 0x0 in key Software\Novell\Workstation
    Manager\Group Policies
    Reading Group Policy User Status from \HKLM\Software\Novell\Workstation
    Manager\Group Policies
    Read reg. value Group Policy User Status: 0x3000 in key
    Software\Novell\Workstation Manager\Group Policies
    Read reg. key Group Policy User Status: 0x3000
    Entering ApplyPolicies
    Reading Group Policy User Flags from \HKLM\Software\Novell\Workstation
    Manager\Group Policies
    Read reg. value Group Policy User Flags: 0x80000070 in key
    Software\Novell\Workstation Manager\Group Policies
    Read reg. key Group Policy User Flags: 0x80000070
    Reading Group Policy User Status from \HKLM\Software\Novell\Workstation
    Manager\Group Policies
    Read reg. value Group Policy User Status: 0x3000 in key
    Software\Novell\Workstation Manager\Group Policies
    Read reg. key Group Policy User Status: 0x3000
    Writing Group Policy User Status to \HKLM\Software\Novell\Workstation
    Manager\Group Policies
    Wrote reg. value 0x1000 to Group Policy User Status in key
    Software\Novell\Workstation Manager\Group Policies
    Impersonating logged on user.
    Context : OU=Users.OU=Newcastle.O=OSG
    Full Object DN CN=wintest3.OU=Users.OU=Newcastle.O=OSG
    Calling WMGetAllAssociatedObjects(FALSE, MARITIME, 1,
    CN=wintest3.OU=Users.OU=Newcastle.O=OSG, WINNT Workstation Package,
    zenwmGroupPolicy, 512, pBuffer)
    Reverting to system impersonation.
    Found DN CN=XP User Package:WinNT-2000-XP:Windows Group Policy.OU=Policy
    Packages.OU=Newcastle.O=OSG
    WMCheckIfGroupPolicyObjectsChanged entered
    Impersonating logged on user.
    Reverting to system impersonation.
    Group Policy object has NOT changed!
    Exiting WMCheckIfGroupPolicyObjectsChanged 0x0
    Entered ScheduleCleanup.
    Loaded wmschapi.dll
    Calling WMScheduleAction
    Finished Calling WMScheduleAction. Returned 0x0
    Exiting ScheduleCleanup 0x0
    Entered BackupOriginalGP.
    No backup exists. Creating one: C:\WINDOWS\System32\GroupPolicy.WMOriginal
    Backing up original GP to C:\WINDOWS\System32\GroupPolicy.WMOriginal
    Copied file C:\WINDOWS\System32\GroupPolicy\Adm\admfiles.ini to
    C:\WINDOWS\System32\GroupPolicy.WMOriginal\Adm\adm files.ini
    Copied file C:\WINDOWS\System32\GroupPolicy\Adm\conf.adm to
    C:\WINDOWS\System32\GroupPolicy.WMOriginal\Adm\con f.adm
    Copied file C:\WINDOWS\System32\GroupPolicy\Adm\inetres.adm to
    C:\WINDOWS\System32\GroupPolicy.WMOriginal\Adm\ine tres.adm
    Copied file C:\WINDOWS\System32\GroupPolicy\Adm\system.adm to
    C:\WINDOWS\System32\GroupPolicy.WMOriginal\Adm\sys tem.adm
    Copied file C:\WINDOWS\System32\GroupPolicy\Adm\wmplayer.adm to
    C:\WINDOWS\System32\GroupPolicy.WMOriginal\Adm\wmp layer.adm
    Copied file C:\WINDOWS\System32\GroupPolicy\Adm\wuau.adm to
    C:\WINDOWS\System32\GroupPolicy.WMOriginal\Adm\wua u.adm
    Copied file C:\WINDOWS\System32\GroupPolicy\GPT.ini to
    C:\WINDOWS\System32\GroupPolicy.WMOriginal\GPT.ini
    Copied file C:\WINDOWS\System32\GroupPolicy\Machine\Microsoft\ Windows
    NT\SecEdit\IPS1.dat to
    C:\WINDOWS\System32\GroupPolicy.WMOriginal\Machine \Microsoft\Windows
    NT\SecEdit\IPS1.dat
    Copied file C:\WINDOWS\System32\GroupPolicy\Machine\Microsoft\ Windows
    NT\SecEdit\XPSec.dat to
    C:\WINDOWS\System32\GroupPolicy.WMOriginal\Machine \Microsoft\Windows
    NT\SecEdit\XPSec.dat
    Entered SaveSecuritySettings
    Inf path:
    C:\WINDOWS\System32\GroupPolicy.WMOriginal\Machine \Microsoft\Windows
    NT\SecEdit\
    Saving XP security settings
    Saving Account Policies...
    Saving Audit Policies...
    Saving user rights...
    Name: Administrator
    Comment: Built-in account for administering the computer/domain
    Full Name:
    No rights.
    Name: Guest
    Comment: Built-in account for guest access to the computer/domain
    Full Name:
    Right: SeInteractiveLogonRight
    Right: SeDenyInteractiveLogonRight
    Right: SeDenyNetworkLogonRight
    Name: HelpAssistant
    Comment: Account for Providing Remote Assistance
    Full Name: Remote Desktop Help Assistant Account
    No rights.
    Name: SUPPORT_388945a0
    Comment: This is a vendor's account for the Help and Support Service
    Full Name: CN=Microsoft Corporation,L=Redmond,S=Washington,C=US
    Right: SeBatchLogonRight
    Right: SeDenyInteractiveLogonRight
    Right: SeDenyNetworkLogonRight
    Name: vector
    Comment: Account created by Novell's Workstation Manager
    Full Name:
    No rights.
    Name: wintest3
    Comment: Account created by Novell's Workstation Manager
    Full Name:
    No rights.
    Name: None
    Comment: Ordinary users
    No rights.
    Name: Administrators
    Right: SeSecurityPrivilege
    Right: SeBackupPrivilege
    Right: SeRestorePrivilege
    Right: SeSystemtimePrivilege
    Right: SeShutdownPrivilege
    Right: SeRemoteShutdownPrivilege
    Right: SeTakeOwnershipPrivilege
    Right: SeDebugPrivilege
    Right: SeSystemEnvironmentPrivilege
    Right: SeSystemProfilePrivilege
    Right: SeProfileSingleProcessPrivilege
    Right: SeIncreaseBasePriorityPrivilege
    Right: SeLoadDriverPrivilege
    Right: SeCreatePagefilePrivilege
    Right: SeIncreaseQuotaPrivilege
    Right: SeChangeNotifyPrivilege
    Right: SeUndockPrivilege
    Right: SeManageVolumePrivilege
    Right: SeImpersonatePrivilege
    Right: SeCreateGlobalPrivilege
    Right: SeInteractiveLogonRight
    Right: SeNetworkLogonRight
    Right: SeRemoteInteractiveLogonRight
    Name: Users
    Right: SeShutdownPrivilege
    Right: SeChangeNotifyPrivilege
    Right: SeUndockPrivilege
    Right: SeInteractiveLogonRight
    Right: SeNetworkLogonRight
    Name: Guests
    No rights.
    Name: Power Users
    Right: SeSystemtimePrivilege
    Right: SeShutdownPrivilege
    Right: SeProfileSingleProcessPrivilege
    Right: SeChangeNotifyPrivilege
    Right: SeUndockPrivilege
    Right: SeInteractiveLogonRight
    Right: SeNetworkLogonRight
    Name: Account operators
    No rights.
    Name: System operators
    No rights.
    Name: Printer operators
    No rights.
    Name: Backup operators
    Right: SeBackupPrivilege
    Right: SeRestorePrivilege
    Right: SeShutdownPrivilege
    Right: SeChangeNotifyPrivilege
    Right: SeInteractiveLogonRight
    Right: SeNetworkLogonRight
    Name: Replicators
    No rights.
    Name: RAS servers
    No rights.
    Name: Pre2000 compatible access
    No rights.
    Exiting SaveUserRights (0)
    Saving Security Options
    Found: MACHINE/Software/Microsoft/Driver Signing/Policy
    Data type is 3
    Found: MACHINE/Software/Microsoft/Windows
    NT/CurrentVersion/Setup/RecoveryConsole/SecurityLevel
    Data type is 4
    Found: MACHINE/Software/Microsoft/Windows
    NT/CurrentVersion/Setup/RecoveryConsole/SetCommand
    Data type is 4
    Found: MACHINE/Software/Microsoft/Windows
    NT/CurrentVersion/Winlogon/AllocateCDRoms
    Data type is 1
    Found: MACHINE/Software/Microsoft/Windows
    NT/CurrentVersion/Winlogon/AllocateDASD
    Data type is 1
    Found: MACHINE/Software/Microsoft/Windows
    NT/CurrentVersion/Winlogon/AllocateFloppies
    Data type is 1
    Found: MACHINE/Software/Microsoft/Windows
    NT/CurrentVersion/Winlogon/CachedLogonsCount
    Data type is 1
    Found: MACHINE/Software/Microsoft/Windows
    NT/CurrentVersion/Winlogon/ForceUnlockLogon
    Data type is 4
    Found: MACHINE/Software/Microsoft/Windows
    NT/CurrentVersion/Winlogon/PasswordExpiryWarning
    Data type is 4
    Found: MACHINE/Software/Microsoft/Windows
    NT/CurrentVersion/Winlogon/ScRemoveOption
    Data type is 1
    Found:
    MACHINE/Software/Microsoft/Windows/CurrentVersion/Policies/System/DisableCAD
    Data type is 4
    Found:
    MACHINE/Software/Microsoft/Windows/CurrentVersion/Policies/System/DontDisplayLastUserName
    Data type is 4
    Found:
    MACHINE/Software/Microsoft/Windows/CurrentVersion/Policies/System/LegalNoticeCaption
    Data type is 1
    Found:
    MACHINE/Software/Microsoft/Windows/CurrentVersion/Policies/System/LegalNoticeText
    Data type is 7
    Found:
    MACHINE/Software/Microsoft/Windows/CurrentVersion/Policies/System/ScForceOption
    Data type is 4
    Found:
    MACHINE/Software/Microsoft/Windows/CurrentVersion/Policies/System/ShutdownWithoutLogon
    Data type is 4
    Found:
    MACHINE/Software/Microsoft/Windows/CurrentVersion/Policies/System/UndockWithoutLogon
    Data type is 4
    Found: MACHINE/SOFTWARE/policies/Microsoft/windows
    NT/DCOM/MachineAccessRestriction
    Data type is 1
    Found: MACHINE/SOFTWARE/policies/Microsoft/windows
    NT/DCOM/MachineLaunchRestriction
    Data type is 1
    Found: MACHINE/System/CurrentControlSet/Control/Lsa/AuditBaseObjects
    Data type is 4
    Found: MACHINE/System/CurrentControlSet/Control/Lsa/CrashOnAuditFail
    Data type is 4
    Found: MACHINE/System/CurrentControlSet/Control/Lsa/DisableDomainCreds
    Data type is 4
    Found:
    MACHINE/System/CurrentControlSet/Control/Lsa/EveryoneIncludesAnonymous
    Data type is 4
    Found: MACHINE/System/CurrentControlSet/Control/Lsa/FIPSAlgorithmPolicy
    Data type is 4
    Found: MACHINE/System/CurrentControlSet/Control/Lsa/ForceGuest
    Data type is 4
    Found: MACHINE/System/CurrentControlSet/Control/Lsa/FullPrivilegeAuditing
    Data type is 3
    Found: MACHINE/System/CurrentControlSet/Control/Lsa/LimitBlankPasswordUse
    Data type is 4
    Found: MACHINE/System/CurrentControlSet/Control/Lsa/LmCompatibilityLevel
    Data type is 4
    Found: MACHINE/System/CurrentControlSet/Control/Lsa/MSV1_0/NTLMMinClientSec
    Data type is 4
    Found: MACHINE/System/CurrentControlSet/Control/Lsa/MSV1_0/NTLMMinServerSec
    Data type is 4
    Found: MACHINE/System/CurrentControlSet/Control/Lsa/NoDefaultAdminOwner
    Data type is 4
    Found: MACHINE/System/CurrentControlSet/Control/Lsa/NoLMHash
    Data type is 4
    Found: MACHINE/System/CurrentControlSet/Control/Lsa/RestrictAnonymous
    Data type is 4
    Found: MACHINE/System/CurrentControlSet/Control/Lsa/RestrictAnonymousSAM
    Data type is 4
    Found: MACHINE/System/CurrentControlSet/Control/Lsa/SubmitControl
    Data type is 4
    Found: MACHINE/System/CurrentControlSet/Control/Print/Providers/LanMan Print
    Services/Servers/AddPrinterDrivers
    Data type is 4
    Found:
    MACHINE/System/CurrentControlSet/Control/SecurePipeServers/Winreg/AllowedPaths/Machine
    Data type is 7
    Found: MACHINE/System/CurrentControlSet/Control/Session
    Manager/Kernel/ObCaseInsensitive
    Data type is 4
    Found: MACHINE/System/CurrentControlSet/Control/Session Manager/Memory
    Management/ClearPageFileAtShutdown
    Data type is 4
    Found: MACHINE/System/CurrentControlSet/Control/Session
    Manager/ProtectionMode
    Data type is 4
    Found:
    MACHINE/System/CurrentControlSet/Services/LanManServer/Parameters/AutoDisconnect
    Data type is 4
    Found:
    MACHINE/System/CurrentControlSet/Services/LanManServer/Parameters/EnableForcedLogOff
    Data type is 4
    Found:
    MACHINE/System/CurrentControlSet/Services/LanManServer/Parameters/EnableSecuritySignature
    Data type is 4
    Found:
    MACHINE/System/CurrentControlSet/Services/LanManServer/Parameters/NullSessionPipes
    Data type is 7
    Found:
    MACHINE/System/CurrentControlSet/Services/LanManServer/Parameters/NullSessionShares
    Data type is 7
    Found:
    MACHINE/System/CurrentControlSet/Services/LanManServer/Parameters/RequireSecuritySignature
    Data type is 4
    Found:
    MACHINE/System/CurrentControlSet/Services/LanmanWorkstation/Parameters/EnablePlainTextPassword
    Data type is 4
    Found:
    MACHINE/System/CurrentControlSet/Services/LanmanWorkstation/Parameters/EnableSecuritySignature
    Data type is 4
    Found:
    MACHINE/System/CurrentControlSet/Services/LanmanWorkstation/Parameters/RequireSecuritySignature
    Data type is 4
    Found: MACHINE/System/CurrentControlSet/Services/LDAP/LDAPClientIntegrity
    Data type is 4
    Found:
    MACHINE/System/CurrentControlSet/Services/Netlogon/Parameters/DisablePasswordChange
    Data type is 4
    Found:
    MACHINE/System/CurrentControlSet/Services/Netlogon/Parameters/MaximumPasswordAge
    Data type is 4
    Found:
    MACHINE/System/CurrentControlSet/Services/Netlogon/Parameters/RefusePasswordChange
    Data type is 4
    Found:
    MACHINE/System/CurrentControlSet/Services/Netlogon/Parameters/RequireSignOrSeal
    Data type is 4
    Found:
    MACHINE/System/CurrentControlSet/Services/Netlogon/Parameters/RequireStrongKey
    Data type is 4
    Found:
    MACHINE/System/CurrentControlSet/Services/Netlogon/Parameters/SealSecureChannel
    Data type is 4
    Found:
    MACHINE/System/CurrentControlSet/Services/Netlogon/Parameters/SignSecureChannel
    Data type is 4
    Found:
    MACHINE/System/CurrentControlSet/Services/NTDS/Parameters/LDAPServerIntegrity
    Data type is 4
    Administrator's user name = Administrator
    Guest's user name = Guest
    SaveHive entered
    SaveHive exit : 0
    Exiting SaveSecuritySettings 0x0
    Backup path: C:\WINDOWS\System32\GroupPolicy.WMOriginal
    Exiting BackupOriginalGP 0x0
    Entered RestoreCachedGP.
    Reading Group Policy User Flags from \HKLM\Software\Novell\Workstation
    Manager\Group Policies
    Read reg. value Group Policy User Flags: 0x80000070 in key
    Software\Novell\Workstation Manager\Group Policies
    Reading Group Policy Machine Flags from \HKLM\Software\Novell\Workstation
    Manager\Group Policies
    Reg key Software\Novell\Workstation Manager\Group Policies\Group Policy
    Machine Flags not found. Assuming 0
    No gpt.ini detected, aborting RestoreCachedGP.
    Checking whether OriginalGP exists
    Entered GPDel
    Deleting C:\WINDOWS\System32\GroupPolicy\User
    Deleting C:\WINDOWS\System32\GroupPolicy\Machine
    Exiting GPDel 0
    Restoring original GP.
    Entered RestoreOriginalGP.
    Reading Group Policy Machine Flags from \HKLM\Software\Novell\Workstation
    Manager\Group Policies
    Reg key Software\Novell\Workstation Manager\Group Policies\Group Policy
    Machine Flags not found. Assuming 0
    Reading Group Policy User Flags from \HKLM\Software\Novell\Workstation
    Manager\Group Policies
    Read reg. value Group Policy User Flags: 0x80000070 in key
    Software\Novell\Workstation Manager\Group Policies
    Entered GPDel
    Deleting C:\WINDOWS\System32\GroupPolicy\User
    Deleting C:\WINDOWS\System32\GroupPolicy\Machine
    Exiting GPDel 0
    Restoring backup GP from C:\WINDOWS\System32\GroupPolicy.WMOriginal
    Entered GPCopy(C:\WINDOWS\System32\GroupPolicy.WMOriginal,
    C:\WINDOWS\System32\GroupPolicy, 0, handle, 0x80000070)
    Copied C:\WINDOWS\System32\GroupPolicy.WMOriginal\GPT.ini to
    C:\WINDOWS\System32\GroupPolicy\GPT.ini
    Copied file
    C:\WINDOWS\System32\GroupPolicy.WMOriginal\Machine \Microsoft\Windows
    NT\SecEdit\IPS1.dat to
    C:\WINDOWS\System32\GroupPolicy\Machine\Microsoft\ Windows
    NT\SecEdit\IPS1.dat
    Copied file
    C:\WINDOWS\System32\GroupPolicy.WMOriginal\Machine \Microsoft\Windows
    NT\SecEdit\XPSec.dat to
    C:\WINDOWS\System32\GroupPolicy\Machine\Microsoft\ Windows
    NT\SecEdit\XPSec.dat
    GP_FLAG_APPLY_SECURITY_SETTINGS (0x40), not set, or security file already
    copied. Will not copy security file
    Exiting GPCopy 0x0
    Writing Group Policy User Status to \HKLM\Software\Novell\Workstation
    Manager\Group Policies
    Wrote reg. value 0x4000 to Group Policy User Status in key
    Software\Novell\Workstation Manager\Group Policies
    Exiting RestoreOriginalGP 0x0
    Writing Group Policy User Status to \HKLM\Software\Novell\Workstation
    Manager\Group Policies
    Wrote reg. value 0x4000 to Group Policy User Status in key
    Software\Novell\Workstation Manager\Group Policies
    Entered GPCopy(C:\WINDOWS\System32\GroupPolicy.UserCache,
    C:\WINDOWS\System32\GroupPolicy, 0, handle, 0x80000070)
    Copied C:\WINDOWS\System32\GroupPolicy.UserCache\GPT.ini to
    C:\WINDOWS\System32\GroupPolicy\GPT.ini
    Copied file
    C:\WINDOWS\System32\GroupPolicy.UserCache\User\MIC ROSOFT\IEAK\install.ins to
    C:\WINDOWS\System32\GroupPolicy\User\MICROSOFT\IEA K\install.ins
    Copied file C:\WINDOWS\System32\GroupPolicy.UserCache\User\Reg istry.pol to
    C:\WINDOWS\System32\GroupPolicy\User\Registry.pol
    Copied file
    C:\WINDOWS\System32\GroupPolicy.UserCache\Machine\ Microsoft\Windows
    NT\SecEdit\IPS1.dat to
    C:\WINDOWS\System32\GroupPolicy\Machine\Microsoft\ Windows
    NT\SecEdit\IPS1.dat
    Copied file
    C:\WINDOWS\System32\GroupPolicy.UserCache\Machine\ Microsoft\Windows
    NT\SecEdit\IPS2.dat to
    C:\WINDOWS\System32\GroupPolicy\Machine\Microsoft\ Windows
    NT\SecEdit\IPS2.dat
    Copied file
    C:\WINDOWS\System32\GroupPolicy.UserCache\Machine\ Microsoft\Windows
    NT\SecEdit\IPS3.dat to
    C:\WINDOWS\System32\GroupPolicy\Machine\Microsoft\ Windows
    NT\SecEdit\IPS3.dat
    Copied file
    C:\WINDOWS\System32\GroupPolicy.UserCache\Machine\ Microsoft\Windows
    NT\SecEdit\XPSec.dat to
    C:\WINDOWS\System32\GroupPolicy\Machine\Microsoft\ Windows
    NT\SecEdit\XPSec.dat
    Copied file C:\WINDOWS\System32\GroupPolicy.UserCache\Machine\ Registry.pol
    to C:\WINDOWS\System32\GroupPolicy\Machine\Registry.p ol
    GP_FLAG_APPLY_SECURITY_SETTINGS (0x40), not set, or security file already
    copied. Will not copy security file
    Exiting GPCopy 0x0
    Writing Group Policy User Status to \HKLM\Software\Novell\Workstation
    Manager\Group Policies
    Wrote reg. value 0x3000 to Group Policy User Status in key
    Software\Novell\Workstation Manager\Group Policies
    Entered MergeGptFile(C:\WINDOWS\System32\GroupPolicy.UserC ache, 0x80000070)
    g_dwVersion: 0x0.
    Reading GPT Version from \HKLM\Software\Novell\Workstation Manager\Group
    Policies
    Read reg. value GPT Version: 0x70007 in key Software\Novell\Workstation
    Manager\Group Policies
    Found machine extensions...
    Found user extensions...
    Exiting MergeGptFile 0x0
    Reading user's user settings.
    Entered AppendPolicy
    C:\WINDOWS\System32\GroupPolicy.UserCache\User\Reg istry.pol
    Entered parseRegFile
    Val: 'BlockExeAttachments'
    Added: Software\Microsoft\Outlook Express\BlockExeAttachments
    Val: 'NoHTMLWallPaper'
    Added:
    Software\Microsoft\Windows\CurrentVersion\Policies \ActiveDesktop\NoHTMLWallPaper
    Val: '**del.NoChangingWallPaper'
    Trying to delete key:
    Software\Microsoft\Windows\CurrentVersion\Policies \ActiveDesktop, val:
    NoChangingWallPaper
    Added:
    Software\Microsoft\Windows\CurrentVersion\Policies \ActiveDesktop\**del.NoChangingWallPaper
    Val: 'ForceClassicControlPanel'
    Added:
    Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\ForceClassicControlPanel
    Val: 'NoSMMyPictures'
    Added:
    Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\NoSMMyPictures
    Val: 'NoStartMenuMyMusic'
    Added:
    Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\NoStartMenuMyMusic
    Val: 'NoDesktopCleanupWizard'
    Added:
    Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\NoDesktopCleanupWizard
    Val: 'NoWelcomeScreen'
    Added:
    Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\NoWelcomeScreen
    Val: 'NoActiveDesktop'
    Added:
    Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\NoActiveDesktop
    Val: '**del.NoInternetIcon'
    Trying to delete key:
    Software\Microsoft\Windows\CurrentVersion\Policies \Explorer, val:
    NoInternetIcon
    Added:
    Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\**del.NoInternetIcon
    Val: '**del.NoNetHood'
    Trying to delete key:
    Software\Microsoft\Windows\CurrentVersion\Policies \Explorer, val: NoNetHood
    Added:
    Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\**del.NoNetHood
    Val: 'NoAutoUpdate'
    Added:
    Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\NoAutoUpdate
    Val: 'NoSMBalloonTip'
    Added:
    Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\NoSMBalloonTip
    Val: 'NoSMConfigurePrograms'
    Added:
    Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\NoSMConfigurePrograms
    Val: 'NoComputersNearMe'
    Added:
    Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\NoComputersNearMe
    Val: 'MaxRecentDocs'
    Added:
    Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\MaxRecentDocs
    Val: 'NoSharedDocuments'
    Added:
    Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\NoSharedDocuments
    Val: '**del.NoStartMenuEjectPC'
    Trying to delete key:
    Software\Microsoft\Windows\CurrentVersion\Policies \Explorer, val:
    NoStartMenuEjectPC
    Added:
    Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\**del.NoStartMenuEjectPC
    Val: 'NoActiveDesktopChanges'
    Added:
    Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\NoActiveDesktopChanges
    Val: '**del.NoAddPrinter'
    Trying to delete key:
    Software\Microsoft\Windows\CurrentVersion\Policies \Explorer, val:
    NoAddPrinter
    Added:
    Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\**del.NoAddPrinter
    Val: '**del.NoDeletePrinter'
    Trying to delete key:
    Software\Microsoft\Windows\CurrentVersion\Policies \Explorer, val:
    NoDeletePrinter
    Added:
    Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\**del.NoDeletePrinter
    Val: '**del.NoToolbarsOnTaskbar'
    Trying to delete key:
    Software\Microsoft\Windows\CurrentVersion\Policies \Explorer, val:
    NoToolbarsOnTaskbar
    Added:
    Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\**del.NoToolbarsOnTaskbar
    Val: '**del.NoSetTaskbar'
    Trying to delete key:
    Software\Microsoft\Windows\CurrentVersion\Policies \Explorer, val:
    NoSetTaskbar
    Added:
    Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\**del.NoSetTaskbar
    Val: 'ForceStartMenuLogOff'
    Added:
    Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\ForceStartMenuLogOff
    Val: '{20D04FE0-3AEA-1069-A2D8-08002B30309D}'
    Added:
    Software\Microsoft\Windows\CurrentVersion\Policies \NonEnum\{20D04FE0-3AEA-1069-A2D8-08002B30309D}
    Val: '**del.{450D8FBA-AD25-11D0-98A8-0800361B1103}'
    Trying to delete key:
    Software\Microsoft\Windows\CurrentVersion\Policies \NonEnum, val:
    {450D8FBA-AD25-11D0-98A8-0800361B1103}
    Added:
    Software\Microsoft\Windows\CurrentVersion\Policies \NonEnum\**del.{450D8FBA-AD25-11D0-98A8-0800361B1103}
    Val: '**del.{645FF040-5081-101B-9F08-00AA002F954E}'
    Trying to delete key:
    Software\Microsoft\Windows\CurrentVersion\Policies \NonEnum, val:
    {645FF040-5081-101B-9F08-00AA002F954E}
    Added:
    Software\Microsoft\Windows\CurrentVersion\Policies \NonEnum\**del.{645FF040-5081-101B-9F08-00AA002F954E}
    Val: '**del.Wallpaper'
    Trying to delete key:
    Software\Microsoft\Windows\CurrentVersion\Policies \System, val: Wallpaper
    Added:
    Software\Microsoft\Windows\CurrentVersion\Policies \System\**del.Wallpaper
    Val: '**del.WallpaperStyle'
    Trying to delete key:
    Software\Microsoft\Windows\CurrentVersion\Policies \System, val:
    WallpaperStyle
    Added:
    Software\Microsoft\Windows\CurrentVersion\Policies \System\**del.WallpaperStyle
    Val: 'NoDispScrSavPage'
    Added:
    Software\Microsoft\Windows\CurrentVersion\Policies \System\NoDispScrSavPage
    Val: 'NoAddFromNetwork'
    Added:
    Software\Microsoft\Windows\CurrentVersion\Policies \Uninstall\NoAddFromNetwork
    Val: '**del.NoAddRemovePrograms'
    Trying to delete key:
    Software\Microsoft\Windows\CurrentVersion\Policies \Uninstall, val:
    NoAddRemovePrograms
    Added:
    Software\Microsoft\Windows\CurrentVersion\Policies \Uninstall\**del.NoAddRemovePrograms
    Val: 'ListBox_Support_Allow'
    Added: Software\Policies\Microsoft\Internet Explorer\New
    Windows\ListBox_Support_Allow
    Val: '*.fleetviewonline.com'
    Added: Software\Policies\Microsoft\Internet Explorer\New
    Windows\Allow\*.fleetviewonline.com
    Val: '*.osg.com'
    Added: Software\Policies\Microsoft\Internet Explorer\New
    Windows\Allow\*.osg.com
    Val: 'NoHelpItemTutorial'
    Added: Software\Policies\Microsoft\Internet
    Explorer\Restrictions\NoHelpItemTutorial
    Val: 'NoHelpItemNetscapeHelp'
    Added: Software\Policies\Microsoft\Internet
    Explorer\Restrictions\NoHelpItemNetscapeHelp
    Val: 'NoHelpItemSendFeedback'
    Added: Software\Policies\Microsoft\Internet
    Explorer\Restrictions\NoHelpItemSendFeedback
    Val: 'PreventAutoRun'
    Added: Software\Policies\Microsoft\Messenger\Client\Preve ntAutoRun
    Val: ''
    Added: Software\Policies\Microsoft\SystemCertificates\Tru st\Certificates\
    Val: ''
    Added: Software\Policies\Microsoft\SystemCertificates\Tru st\CRLs\
    Val: ''
    Added: Software\Policies\Microsoft\SystemCertificates\Tru st\CTLs\
    Val: 'ScreenSaverIsSecure'
    Added: Software\Policies\Microsoft\Windows\Control
    Panel\Desktop\ScreenSaverIsSecure
    Val: 'ScreenSaveActive'
    Added: Software\Policies\Microsoft\Windows\Control
    Panel\Desktop\ScreenSaveActive
    Val: 'ScreenSaveTimeOut'
    Added: Software\Policies\Microsoft\Windows\Control
    Panel\Desktop\ScreenSaveTimeOut
    Val: 'SCRNSAVE.EXE'
    Added: Software\Policies\Microsoft\Windows\Control
    Panel\Desktop\SCRNSAVE.EXE
    Val: 'ListBox_Support_ZoneMapKey'
    Added: Software\Policies\Microsoft\Windows\CurrentVersion \Internet
    Settings\ListBox_Support_ZoneMapKey
    Val: '*.osg.com'
    Added: Software\Policies\Microsoft\Windows\CurrentVersion \Internet
    Settings\ZoneMapKey\*.osg.com
    Val: 'osgintranet'
    Added: Software\Policies\Microsoft\Windows\CurrentVersion \Internet
    Settings\ZoneMapKey\osgintranet
    Val: '1A00'
    Added: Software\Policies\Microsoft\Windows\CurrentVersion \Internet
    Settings\Zones\1\1A00
    Val: '1809'
    Added: Software\Policies\Microsoft\Windows\CurrentVersion \Internet
    Settings\Zones\1\1809
    Val: '1803'
    Added: Software\Policies\Microsoft\Windows\CurrentVersion \Internet
    Settings\Zones\1\1803
    Val: 'DontPromptForWindowsUpdate'
    Added:
    Software\Policies\Microsoft\Windows\DriverSearchin g\DontPromptForWindowsUpdate
    Val: 'NC_RenameLanConnection'
    Added: Software\Policies\Microsoft\Windows\Network
    Connections\NC_RenameLanConnection
    Val: 'PromptPasswordOnResume'
    Added:
    Software\Policies\Microsoft\Windows\System\Power\P romptPasswordOnResume
    Val: 'NoAUAsDefaultShutdownOption'
    Added:
    Software\Policies\Microsoft\Windows\WindowsUpdate\ AU\NoAUAsDefaultShutdownOption
    Val: 'NoAUShutdownOption'
    Added:
    Software\Policies\Microsoft\Windows\WindowsUpdate\ AU\NoAUShutdownOption
    Val: 'BehaviorOnFailedVerify'
    Added: Software\Policies\Microsoft\Windows NT\Driver
    Signing\BehaviorOnFailedVerify
    Val: 'MovieMaker'
    Added: Software\Policies\Microsoft\WindowsMovieMaker\Movi eMaker
    Exiting parseRegFile
    Exiting AppendPolicy
    C:\WINDOWS\System32\GroupPolicy.UserCache\User\Reg istry.pol 0x0
    Reading user's computer settings.
    Entered AppendPolicy
    C:\WINDOWS\System32\GroupPolicy.UserCache\Machine\ Registry.pol
    Entered parseRegFile
    Val: 'NoUpdateCheck'
    Added: Software\Policies\Microsoft\Internet
    Explorer\Infodelivery\Restrictions\NoUpdateCheck
    Val: 'NoSplash'
    Added: Software\Policies\Microsoft\Internet
    Explorer\Infodelivery\Restrictions\NoSplash
    Val: 'PreventAutoRun'
    Added: Software\Policies\Microsoft\Messenger\Client\Preve ntAutoRun
    Val: 'NV PrimaryDnsSuffix'
    Added: Software\Policies\Microsoft\System\DNSClient\NV PrimaryDnsSuffix
    Val: ''
    Added: Software\Policies\Microsoft\Windows\Safer\
    Val: 'WUServer'
    Added: Software\Policies\Microsoft\Windows\WindowsUpdate\ WUServer
    Val: 'WUStatusServer'
    Added: Software\Policies\Microsoft\Windows\WindowsUpdate\ WUStatusServer
    Val: 'NoAutoRebootWithLoggedOnUsers'
    Added:
    Software\Policies\Microsoft\Windows\WindowsUpdate\ AU\NoAutoRebootWithLoggedOnUsers
    Val: 'AutoInstallMinorUpdates'
    Added:
    Software\Policies\Microsoft\Windows\WindowsUpdate\ AU\AutoInstallMinorUpdates
    Val: 'DetectionFrequencyEnabled'
    Added:
    Software\Policies\Microsoft\Windows\WindowsUpdate\ AU\DetectionFrequencyEnabled
    Val: 'DetectionFrequency'
    Added:
    Software\Policies\Microsoft\Windows\WindowsUpdate\ AU\DetectionFrequency
    Val: 'UseWUServer'
    Added: Software\Policies\Microsoft\Windows\WindowsUpdate\ AU\UseWUServer
    Val: 'RescheduleWaitTimeEnabled'
    Added:
    Software\Policies\Microsoft\Windows\WindowsUpdate\ AU\RescheduleWaitTimeEnabled
    Val: 'RescheduleWaitTime'
    Added:
    Software\Policies\Microsoft\Windows\WindowsUpdate\ AU\RescheduleWaitTime
    Val: 'NoAutoUpdate'
    Added: Software\Policies\Microsoft\Windows\WindowsUpdate\ AU\NoAutoUpdate
    Val: 'AUOptions'
    Added: Software\Policies\Microsoft\Windows\WindowsUpdate\ AU\AUOptions
    Val: 'ScheduledInstallDay'
    Added:
    Software\Policies\Microsoft\Windows\WindowsUpdate\ AU\ScheduledInstallDay
    Val: 'ScheduledInstallTime'
    Added:
    Software\Policies\Microsoft\Windows\WindowsUpdate\ AU\ScheduledInstallTime
    Val: 'RegistrationOverwritesInConflict'
    Added: Software\Policies\Microsoft\Windows
    NT\DNSClient\RegistrationOverwritesInConflict
    Val: 'SearchList'
    Added: Software\Policies\Microsoft\Windows NT\DNSClient\SearchList
    Val: 'PreventIISInstall'
    Added: Software\Policies\Microsoft\Windows NT\IIS\PreventIISInstall
    Val: 'SecurityCenterInDomain'
    Added: Software\Policies\Microsoft\Windows NT\Security
    Center\SecurityCenterInDomain
    Exiting parseRegFile
    Exiting AppendPolicy
    C:\WINDOWS\System32\GroupPolicy.UserCache\Machine\ Registry.pol 0x0
    Entered GenerateGptFile(C:\WINDOWS\System32\GroupPolicy)
    g_dwVersion: 0x70007.
    Writing GPT Version to \HKLM\Software\Novell\Workstation Manager\Group
    Policies
    Wrote reg. value 0x70007 to GPT Version in key Software\Novell\Workstation
    Manager\Group Policies
    Exiting GenerateGptFile 0x0
    Exiting RestoreCachedGP 0x0
    Writing Group Policy User Status to \HKLM\Software\Novell\Workstation
    Manager\Group Policies
    Wrote reg. value 0x3000 to Group Policy User Status in key
    Software\Novell\Workstation Manager\Group Policies
    Bumping GPT version...
    Entered SetGptVersion(0x0, TRUE).
    Reading GPT Version from \HKLM\Software\Novell\Workstation Manager\Group
    Policies
    Read reg. value GPT Version: 0x70007 in key Software\Novell\Workstation
    Manager\Group Policies
    Read file C:\WINDOWS\System32\GroupPolicy\GPT.ini
    Found version 0x70007 in gpt.ini
    Using version: 0x70007
    Saving GPT version: 0x80008
    Writing GPT Version to \HKLM\Software\Novell\Workstation Manager\Group
    Policies
    Wrote reg. value 0x80008 to GPT Version in key Software\Novell\Workstation
    Manager\Group Policies
    Exiting SetGptVersion 0x0.
    Entered AppendSecuritySettings
    Inf path: C:\WINDOWS\System32\GroupPolicy\Machine\Microsoft\ Windows
    NT\SecEdit\XPSec.dat
    Restoring GP settings
    Loading Account Policies...
    Loading Audit Policies...
    Loading user rights...
    Restoring security options...
    No data
    No data
    No data
    No data
    No data
    No data
    No data
    No data
    No data for Administrator account name.
    LoadXPSecuritySettings returning 0
    LoadHive entered
    LoadHive exit : 0
    Exiting AppendSecuritySettings 0x0
    Signalling OS to refresh policies
    RegQueryValueEx returned 2
    Policies are set to apply asynchronously
    Policies will be processed asynchronously
    Entered SetGptVersion(0x0, TRUE).
    Reading GPT Version from \HKLM\Software\Novell\Workstation Manager\Group
    Policies
    Read reg. value GPT Version: 0x80008 in key Software\Novell\Workstation
    Manager\Group Policies
    Read file C:\WINDOWS\System32\GroupPolicy\GPT.ini
    Found version 0x80008 in gpt.ini
    Using version: 0x80008
    Saving GPT version: 0x90009
    Writing GPT Version to \HKLM\Software\Novell\Workstation Manager\Group
    Policies
    Wrote reg. value 0x90009 to GPT Version in key Software\Novell\Workstation
    Manager\Group Policies
    Exiting SetGptVersion 0x0.
    Entering RunGPUpdate
    Exiting RunGPUpdate 0
    Exiting ApplyPolicies 0x0
    Writing Last Run Time High to \HKLM\Software\Novell\Workstation
    Manager\Group Policies
    Wrote reg. value 0x1c58076 to Last Run Time High in key
    Software\Novell\Workstation Manager\Group Policies
    Writing Last Run Time Low to \HKLM\Software\Novell\Workstation Manager\Group
    Policies
    Wrote reg. value 0x34349ce0 to Last Run Time Low in key
    Software\Novell\Workstation Manager\Group Policies
    Apply user policies releasing mutex.
    Exiting WMHelperInteractiveUserEntry ccode: 0x0
    Closing log file.
    WMHelperInitialization (Mar 4 2004) called! Flags: 0x2001. Event: 0x2000.
    Impersonation: 0x1
    Opened Mutex.
    Loaded userenv.dll
    Mapped function RefreshPolicy
    Mapped function RegisterGPNotification
    Mapped function UnregisterGPNotification
    Mapped function RefreshPolicyEx
    Exiting WMHelperInitialization. Returning flags: 0x11
    Entering WMHelperInteractiveUserEntry!
    szFullDN = CN=wintest3.OU=Users.OU=Newcastle.O=OSG
    DN is Typed convert it to TYPELESS
    g_szUserDN = wintest3.Users.Newcastle.OSG
    GinaGetUsersSIDInTextualForm ENTERED
    Textual SID : S-1-5-21-1214440339-507921405-1708537768-1019
    GinaGetUsersSIDInTextualForm EXIT : 0
    Writing Don't reparse to \HKLM\Software\Novell\Workstation Manager\Group
    Policies
    Wrote reg. value 0x0 to Don't reparse in key Software\Novell\Workstation
    Manager\Group Policies
    Current time high: 0x1c58076
    Reading Last Run Time High from \HKLM\Software\Novell\Workstation
    Manager\Group Policies
    Read reg. value Last Run Time High: 0x1c58076 in key
    Software\Novell\Workstation Manager\Group Policies
    Previous time high: 0x1c58076
    Writing Don't reparse to \HKLM\Software\Novell\Workstation Manager\Group
    Policies
    Wrote reg. value 0x1 to Don't reparse in key Software\Novell\Workstation
    Manager\Group Policies
    Writing User Logged In to \HKLM\Software\Novell\Workstation Manager\Group
    Policies
    Wrote reg. value 0x1 to User Logged In in key Software\Novell\Workstation
    Manager\Group Policies
    Entered CheckForObsoleteWksCache
    CN=LT_VECTOR.OU=Workstations.OU=Newcastle.O=OSG.
    Full Object DN
    CN=LT_VECTOR.OU=Workstations.OU=Newcastle.O=OSG.OU =Users.OU=Newcastle.O=OSG
    Calling WMGetAllAssociatedObjects(FALSE, MARITIME, 1,
    CN=LT_VECTOR.OU=Workstations.OU=Newcastle.O=OSG.OU =Users.OU=Newcastle.O=OSG,
    WINNT Workstation Package, zenwmGroupPolicy, 512, pBuffer)
    WMGetAllAssociatedObject returned 2
    No associated workstation policies. Deleting
    C:\WINDOWS\System32\GroupPolicy.WksCache.
    DeleteGPRegVal: Error 0x2 deleting Group Policy Machine Flags
    Exiting CheckForObsoleteWksCache 2
    Applying user policies
    Reading Don't reparse from \HKLM\Software\Novell\Workstation Manager\Group
    Policies
    Read reg. value Don't reparse: 0x1 in key Software\Novell\Workstation
    Manager\Group Policies
    Reading Group Policy User Status from \HKLM\Software\Novell\Workstation
    Manager\Group Policies
    Read reg. value Group Policy User Status: 0x3000 in key
    Software\Novell\Workstation Manager\Group Policies
    Read reg. key Group Policy User Status: 0x3000
    Policy applied at predesktop. Skipping reapplication at user login.
    Writing Don't reparse to \HKLM\Software\Novell\Workstation Manager\Group
    Policies
    Wrote reg. value 0x0 to Don't reparse in key Software\Novell\Workstation
    Manager\Group Policies
    Writing Last Run Time High to \HKLM\Software\Novell\Workstation
    Manager\Group Policies
    Wrote reg. value 0x1c58076 to Last Run Time High in key
    Software\Novell\Workstation Manager\Group Policies
    Writing Last Run Time Low to \HKLM\Software\Novell\Workstation Manager\Group
    Policies
    Wrote reg. value 0x38844da0 to Last Run Time Low in key
    Software\Novell\Workstation Manager\Group Policies
    Apply user policies releasing mutex.
    Exiting WMHelperInteractiveUserEntry ccode: 0x0
    Closing log file.
    Thanks in advance
    Ali

    DUPLICATE
    Answered in
    novell.support.zenworks.desktops.3x.workstation-manager
    Regards
    Rolf Lidvall
    Swedish Radio (Ltd)
    NSC SysOp

  • Query to find out the list of user who have delete access

    Hi,
    I need a query to find out the list of users who have delete access on perticular folder/universe/ reports  in infoview.
    Please advice.
    Regards,
    Neo.

    orton607 wrote:
    thanks for replying guys. But the thing is i am using dynamic sql execute immediate in my package, so i want those tables also and the schema name.
    thanks,
    ortonThis is not possible. The best you could do is to have a good guess.
    Or how would you parse some dynamic statement as this:
       v_suffix := 'loyees';
       v_sql := 'Select count(*) from (select ''nonsense'' col1 from emp'||v_suffix||') where col1 = ''Y'''';
       execute_immediate(v_sql);
    ...What is the table name? How do you want to parse that?
    Better rewrite all dynamic SQL statements into non dynamic ones. Or do the source control logic for those dynamic parts in an extra module. For example implement your own dependency table and force every developer to add there all dynamic parts.

  • Extended user rights and 500 users limits on a PDF Form

    Hello,
    I read that there's 500 users limits for using extended user rights on Acrobat Pro 9.
    Here's my situation:
    - I built an application PDF form with extended user rights for Adobe Reader users to save the form. And I'm going to be hosting it on the web for users to download the PDF form to their local hard drive.
    - The form will have a button to submit to a web page with a script for processing FDF, XFDF, XML, or HTP form export.
    My question is:
    1. Would it be violating the 500 users limits if more than 500 users download the form and save the PDF after filling out fields, but not submit the data back to the server?
    2. What would happen if more than 500 responses are received through above method? Would new visitors still be able to save the PDF form for their archive purpose after downloading it from our web site?
    Thanks.

    Can Adobe's licensing department define "extract"?  I know there is a lot of confusion here and I'm trying to understand.
    Here is our scenario:  We have developed an Adobe fillable form which we will be sending to 1000 customers.  Customers can open the form (in Reader v9.5 and greater) and fill out the form, validate it and then print it.  The customers are not sending the PDF files back to us and the PDF data is not being collected so there is no data we can extract from Adobe files (we are not that advanced yet).  Customers will just print the information, then fax or send back to us by U.S. Mail. 
    When we receive the completed information (via fax/mail, not PDF), we read information off our form.  Does Adobe consider reading our information “extracting” with our eyes?  I’m not sure how they can consider that extracting?  I would think Adobe owns the mechanism (aka PDF file) for validating our content, but they wouldn’t own the content on our form if we want to physically read it, right?
    Adobe needs to clarify this more clearly and I’ve ready their interpretation of the Policy, but it doesn’t address this scenario.  http://www.adobe.com/products/eulas/pdfs/Reader_Extension_Policy_A10-5-31-2011.pdf
    George, I don't think you are an Adobe Employee.  I see you are a MVP, but you are not officiall speaking for Adobe are you?
    ---Thanks.

  • Archive directory user rights?

    Hi all: I recently migrated our GW2014 SP1 server over to new hardware. The migration went smooth and our domain and postoffice seem happy. My users are reporting an 8201 error when starting up their client and I have traced it to a user rights issue with our archive folder on the server. I have given full rights to everyone as a temp measure, but I want to get the proper rights set up. BTW, the archive directory is on an NSS volume.
    So, what are the proper user rights to the archive directory? Thanks much, Chris.

    Hi Chris,
    They need Read, Write, File Scan, Create, Erase, Modify, Delete - all except Access Control and Supervisor.
    Hope that helps.
    Cheers,

  • Advanced user rights and 500 users of my PDF Form

    I am owner of Acrobat Pro & Livecycle Designer ES. I have done interactive pdf form and i would like to sell it to my client. My client would like to put it in intertet for his customer. I suppose that would be more than 500 answers in a year. They will collect data and post by e-mail or post to him.
    What should i do to do it legally (i would like to save it locally)?

    LiveCycle Reader Extensions is (was) part of the ADEP enterprise portfolio. There are no price lists as each package is tailor-made for a customer - to discuss pricing and installation options you must speak directly to Adobe Customer Support.
    martinbartosh wrote:
    @Bernd. OK i understand your point of view. So please tell me how is it with that server product. May i rent this product from hosting company or only i can buy it for heavy cash and put it on my own server? Is it allow to resell? Where is price list? Why i can`t find any reseller to rent me that server for small company. Is that only allowed for enterprise who has thousands of servers and did not resell it to small people. Please give me opportunity for cash (which small firm can pay) to save it localy without changing advanced user rights. If i had opportunity i would like to buy it but i fell that i can`t. Maybe i am wrong. So please tell me what should i buy to do that. Please tell me also how much it cost and where is any price list to that. I represent few persons company and i can afford normal price software as Creative Suite and not afford buying server for 50K or something like that.

  • User Profile getting deleted

    What happens when a user profile gets deleted? Does it prevent that user from accessing the sharepoint site or any site he has access to?
    One of our users have been moved from one OU to the other and manager got an email about his mysite getting deleted within 14days. I don't care if his mysite gets deleted until he has access to the main site.

    No, User Profiles do not impact permissions.
    Trevor Seward
    Follow or contact me at...
    &nbsp&nbsp
    This post is my own opinion and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

Maybe you are looking for

  • A new Account

    Hello, I have a problem with Itunes 7,02. I created a Apple ID and would creat me a Account for buying music in the itunesstore. I have write full the option of account but if i will used "click and buy" as terms of payment then the creat button go n

  • Icondom or invisble shield  Which one do you prefer?

    Hi, it will be nice if those who try both, could give their opinion here, thanks peter

  • Adjustment brush works at first but can't be adjusted (LR3)

    I can use the adjustment brush to make an additional adjustment (e.g. reduce exposure) -- I can see that the effect works. However, I can't then edit that effect. So if I move the exposure slider, the exposure of the selected area just doesn't change

  • RZ20: how to create status attribute for monitoring object ?

    Hello, I am brand new into RZ20 maintenance and my question may be silly. Anyway, SAP supplies monitoring objects customized with performance attribute (such as MTE class SAPconnect Error). Instead of having such performance attribute, I would prefer

  • Cropping vs Clipping Masks etc.

    I'm a graphic designer more familiar with photoshop but I'm starting to familiarize myself a lot more with illlustrator lately.  I just been having trouble with the correct way to crop things in illustrator using pathfinder or a clipping mask.   I ha