Effects Do Not Apply

Hello,
I'm fairly new to FCE, but I feel like I have everything set up right and still can't get the effects to apply to a clip. I have followed the tutorial and manual's description on how to apply the effect, and the effect properties show up in the viewer, and I can edit the properties, but there is no visual change to the clip. I'm running unlimited RT and there are no colored lines suggesting that I need to render at all (I even tried Command+R and nothing changed).
I'm using a Canon HV30 camera, settings are to record at 1080i HDV30, and my Easy Setup settings are HDV 1080i60. FCE version 4.0.1
Thanks for the help!

I'll try to make this not be confusing, but no promises.
I re-installed, and it worked, but I don't know if that was the solution.
At first, I re-installed (and installed the 4.0.1 update) and it didn't work, I still had the same problems of the effect not working properly.
I then opened another project that I had from this summer, and tried applying the effect, it worked. I don't know if it would have worked before the reinstall, however, because I did not test it...who knows.
However, I go back into my original project and try again, and still, it doesn't work.
I open up a new project, drag the clips from the original (troubled) project, and voila! It worked.
So, either the re-install helped, or somehow that one project got corrupted, I don't know. But it works now. Thank ya very much!

Similar Messages

Adjustment layers effects not applying when flattening image or merging layers CS6

So about a week ago I noticed something changed with my adjustment layers. In an image I would make a selection and start using adjustment layers to edit that selection, and then once I was finished, I would merge the adjustment layers together so that I could erase outside areas where the effect was not intended. However, whenever I merged the layers, the effects would go away and the thumbnail preview by the layer title would become blank (gray and white transparent) as if there was not anything on the layer. I messed around and I reset Photoshop, and then I thought the layers were fixed. They were somewhat fixed, except I've started having trouble again. Now I'm having difficulty editing this one image i'm on. It's a portrait with a photoshop-created red mask going around eyes, and I used the dissolve layer effect on the original mask creation which was black at first. Then I selected that selection and made more layers editing the hue, saturation, brightness/contrast, and exposure.
I tried to save the image as a jpeg, and the effects were messed up. The hue and all other adjustment layers seemingly applied, except the dissolve effect does not show up at all. So I tried to fix it manually. I flattened the image first with intention to then save it as a jpeg, but as soon as I flattened the image, again the dissolve effect was not applied. Then I tried to merge the layers, and yet again, the dissolve effect was not showing up. It shows up fine in PSD form, something's wrong with the conversion process. Please don't be mean to me. I'm not great at photoshop, I'm not saying that I am or claiming to be a pro or anything I just want help from people who actually get it. I have CS6 and use a Macbook Pro.

I stopped even trying to read this append. For is seems very complex and overwhelmed my little mind. Please consider including some screen captures showing your Photoshop window with your document that your writing about open and the layer palette shows the structure of the document. For me examples and screen capture of the steps involves involved would be very helpful.

Blur effect not applied when exported to swf ?????

hello,
I have added a fast blur effect to a portion of my video project in AE, it looks great in AE.
but when I export it out to a swf, the blur effect is not applied, why??????
thank you

See "Render and export a composition as a SWF file" for a description of what is supported and what isn't for SWF export.
You can choose to either ignore or rasterize unsupported items. It seems that you probably have the Ignore setting selected.

After Effects - Multiprocessing not allowed even when a Proxy is used?

Hi everybody!
          I have a composition (Comp1) that uses an effect which doesn't allow multiprocessing (e.g., Lens Blur) -- this I understand.
          Comp1 is used inside of Comp2. When I pre-render Comp1 and use that render as a proxy for Comp1 inside of Comp2, I still can't use multiprocessing. This is the confusing bit. I'd think since the Lens Blur effect isn't actually being rendered, it shouldn't give me any guff.
          Alas, it does. Anyone else run into this? Is there a workaround, or is it a bug/oversight by our friends at Adobe?
          Thanks in advance as always -- this forum is a great resource!

Hi Dave,
I appreciate your help, but I think I'm still missing something. When I set a proxy movie for my Comp1, come render time, it should never look inside Comp1 at all — it should just use the proxy movie. The LensBlur effect is not applied to Comp1 itself, it's used INSIDE Comp1.
To what end would AE look inside the real Comp1 when it's been assigned a proxy movie?
--Rob
Rob LaRose systems administrator
imaginary forces | 530 west 25th st | new york city | p 646.486.6868 | f 646.486.4700 | www.imaginaryforces.com
From: Dave LaRonde <[email protected]<mailto:[email protected]>>
Reply-To: "[email protected]<mailto:[email protected]>" <[email protected]<mailto:[email protected]>>
Date: Wed, 4 May 2011 16:20:44 -0400
To: Rob LaRose <[email protected]<mailto:[email protected]>>
Subject: After Effects - Multiprocessing not allowed even when a Proxy is used?
Typically, a proxy is a low-resolution substitute for the real image to make AE work a little faster, right? When AE renders, it doesn't render the proxy, it uses the high-resolution real image, right? The same thing is happening in your project.
If it doesn't impact your work to use a lower-resolution substitute for your comp 1, I'd suggest not using the substitute as a proxy.
If full resolution matters, make a full-resolution prerender.

Exporting Interlaced Wrong, or Smoothcam Not Applied

Based upon the conclusions of this conversation:
http://discussions.apple.com/thread.jspa?messageID=10730602#10730602
I'm exporting SmoothCammed clips as QT movies, and re-importing them.
However, I'm having a hard time finding any export settings that don't result in it:
* Being interlaced backward, or
* The SmoothCam effect being left out in the exported video,
or both.
For example, exporting it under "Current Settings," the video is SmoothCammed, but it's interlaced backward. Switching it to "DVCPRO HD 1080i|60" it is interlaced correctly, but the SmoothCam effect is not applied. There was one setting where I was able to choose Odd- vs. Even-field vs. None ... "precedence" or some such thing. They all came out the same: Interlaced backward.
In these cases, I'm doing the export by right-clicking the SmoothCammed clip in the Browser window, and choosing Export.
Anybody have any suggestions?
Thanks, everybody!

I'll mark this as answered too, since I've done a few upgrades since then, and, for all I know, it may be fixed now.

Lighting effects not working, 'Could not apply the workspace because there is not enough memory (RAM)' with 4GB RAM?

Tried to use 'render/lighting effects' on 5 more or less new different laptops now. All kind of Window versions.
They all have at least 4GB RAM. The Graphic Card is compatible.
Layer to work on is RGB-Type.
It's all about Photoshop CC 2014, trial version.
When I go to 'Lighting effects' it says first:
'The 3D features require that 'Use Graphics Processor' is enabled in the Performance preferences. Your video card must meet the minimum requirements and you may need to check that your driver is working correctly.'
- I switched the 'Use Graphics Processor' on and off and restarted new - nothing happens.
- Video card is compatible.
Second it says:
''Could not apply the workspace because there is not enough memory (RAM)'
- RAM on all the computers I tested it with is at least 4GB
Please help!

We would need to know the amount of Video ram you have. If it is above 512 MB, then check for driver updates.
Windows OS
Click Start.
On the Start menu, click Run.
In the Open box, type "dxdiag" (without the quotation marks), and then click OK.
The DirectX Diagnostic Tool opens. Click the Display tab.
On the Display tab, information about your graphics card is shown in the Device section. You can see the name of your card, as well as how much video memory it has.
Once you know the kind of graphics card you have, visit the manufacturer's website to download the latest driver. Here are links for downloading drivers from the most common graphics card manufacturers:
NVIDIA: http://www.nvidia.com/content/drivers/drivers.asp
AMD: http://support.amd.com/en-us/download
Intel: http://support.intel.com/support/graphics/

Imovie video effects not applying

Does anyon have any idea why some of my effects in iMovie have stopped applying. When I try to apply for example, "color posterize" the red bar at the bottom looks like it's applying the effect, but then when it's done, and I play the clip, either the effect hasn't applied, or there is just a black screen or the clip just won't play.
Any help would be greatly appreciated.
MJ

It can help if you Toggle Track Output to ON. The visibility icon on the left side on each track.

ZCM 11 Group Policies not applying to satellite servers

Hi there
We are running 2 Windows 2012 Primary Servers and a SQL 2012 Database server at our main site, all remote sites have SLES11 SP2/OES11 SP1 as satellite servers. We upgraded all servers last weekend to 11.3.1 and now have an issue with Group Policies applying to the satellites. The satellites are all set up the same with Authentication, Collection, Content and Imaging roles.
Since we upgraded Group Policies are (99% of the time) not applying on satellite sites. I have tried manually replicating content (I assume policies will come from content replication?) to the satellites - I've done this with a zac cdp replicate and zac cvc and everything seems to replicate over however I tried highlighting a satellite server and clicking on Action, Specify Content - select the Policy that is not applying and move it into the selected Content to update column and when I click finish I get the error "The Wizard cannot continue for the following reason(s): Unable to complete your request for the following reason: Error updating content"
On a managed device at the satellite site if you look at the properties of the Zenworks agent and click on Policies it has applied 4 device assigned policies successfully - Remote Management, Power Management, Application Launcher Config and Application Control Policy, also has successfully applied 3 out of the 4 User Assigned Policies - Mandatory Profile, Dynamic Local User, Application Control - but not the Windows Group Policy.
Our PCs are on Windows 8.1 and all policies were applying fine before the weekend upgrade......
Has anyone else had any experience of Group Policies not applying that could point me where to look? I have logged an SR with Novell through our reseller but as yet I am getting no response back at all, not even asking me for more information.
Many thanks
Sharon

Sounds like you have a content replication issue more than a GPO issue.
Especially if the GPO works for locations that point to the Primaries
for Content.
Do you have throttling configured anywhere in any fashion?
You may need to increase the Replication Timeout to make sure content is
getting over to the Sats. Often increasing from 60 to 240 helps, but
watch out for throttling preventing content replication.
It is possible things are backing up.
On 7/31/2014 8:26 AM, shazzypoos wrote:
>
> I should add that when you looked at the "Click for Details" to the
> right of the Effective "Failed" status the message is "Policy
> Enforcement Failed : The action (0) threw an exception. Message (1).
> Exception (2) (grouppolicy, "None of the source locations could be
> found"
>
> Hmmmm! Currently in closest server rules there is only the server for
> the site it's on set - we do not want it to come back to the Primary for
> policies. As I say, this was working before the weekend upgrade. Thanks!
>
>
Craig Wilson - MCNE, MCSE, CCNA
Novell Technical Support Engineer
Novell does not officially monitor these forums.
Suggestions/Opinions/Statements made by me are solely my own.
These thoughts may not be shared by either Novell or any rational human.

Acrobat Pro 10 Actions Not Applying Fast Web View

Acrobat Pro 10 actions are pretty useful overall, however they are not applying Fast Web View all the time. In my opinion, all PDFs generated today should be Fast Web View by default, but among the many applications which allow for PDF creation, not all apply Fast Web View for some reason.
I did see http://forums.adobe.com/message/3335827for a potential band-aid fix. Unfortunately, it did not work for me.
Here is the text from my Action sequence file:
<</Commands [/c << /0 [/c << /Config [/c <<   /UIPolicy [/i 3]
>>]
/HandlerName [/a /FlattenOCGs]
/Params [/c <<>>]
/Title [/t ()]
>>]
/1 [/c << /Config [/c <<   /UIPolicy [/i 3]
>>]
/HandlerName [/a /ReduceFileSize]
/Params [/c <<   /RFSCompatibility [/i 6]
>>]
/Title [/t (Reduce File Size)]
>>]
/2 [/c << /Config [/c <<   /UIPolicy [/i 3]
>>]
/HandlerName [/a /ExamineDocCmd]
/Params [/c <<   /RmAnnots [/b false]
   /RmAttachments [/b false]
   /RmBookmarks [/b false]
   /RmDeletedContent [/b true]
   /RmFormFields [/b true]
   /RmHiddenLayers [/b true]
   /RmHiddenText [/b false]
   /RmLinksActionsJS [/b false]
   /RmMetadata [/b false]
   /RmOverlappingObjects [/b false]
   /RmSearchIndex [/b false]
>>]
/Title [/t (Remove Hidden Information)]
>>]
>>]
/Input [/c << /FileVariation [/i 3]
>>]
/Output [/c << /AddToBaseName [/b false]
/DontOverwrite [/b false]
/EmbedIndex [/b false]
/FileVariation [/i 2]
/HandleOutput [/b true]
/NumbericNaming [/b false]
/OptimizePDF [/b true]
/PresetName [/t (test2)]
/RunPDFOptimizer [/b true]
>>]
>>
As you can see, the "/OptimizePDF [/b true]" is set per the instructions in the aforementioned link. It still does not set Fast Web View all the time. I ran a test of the action on a batch of 10 PDFs, some were set to Fast Web View and some were not. While one of the PDFs that was not set to Fast Web View was open in Acrobat, I ran the same Action again and it did apply Fast Web View! I even installed the latest patch hoping that would fix it, but unfortunately it did not. Distiller does in fact set Fast Web View, but it won't work on PDFs. The only way I can find to guarantee the establishment of Fast Web View is to manually do a Save As on every file which I think is asking a bit much when you deal with hundreds of PDFs on any given day. Also that would effectively defeat the purpose of running an Action on hundreds of PDFs in the first place.
Any ideas?

There is a bug because of which fast web view is always disabled. While that is fixed, here the workaround. Save the action and open the .sequ file in Notepad. Change:
                /OptimizePDF [/b false]
to
                /OptimizePDF [/b true]

OBIEE not applying outer join syntax to filters

(Note: I've already thoroughly searched the forums before posting this. Thanks)
My problem is the following:
I'm trying to build a report that is a count from my fact table, grouped by month from my date dimension for a given year, resulting in 12 data points. The problem is that not all months have actual data, but I still need those months to show on the report with a count of zero. Typical simple reporting requirement.
I have already done the obvious and within my business layer made the join between my fact table and my date dimension an outer join on the fact side, just like you'd do if writing the query by hand. And when tested by hand this includes all dates for the year anyway, and when coupled with the appropriate null test on the count measure I'd get my 12 data points with zeros were appropriate.
The problem is that there are additional filters I need to apply on the fact data (there are a couple text-based code values that didn't warrant full tables themselves so are just degenerate dimensions directly on the fact table.)
When these filters are applied at the Answer level, I'm only getting back the months that actually have data, and lose the months where the count should be zero. A check of the session log for the query that was generated shows the problem. While OBI properly generates the outer-join syntax for the join itself between the two tables (my date dim and fact table) it does NOT apply the outer-syntax to the constant-based filter against the fact, effectively negating the outer join.
Actual query from the log (I simply changed the table aliases from the ugly T##### stuff OBI generates to something more readable for posting here):
select D.DT_MONTH_NAME as c1,
D.DT_MONTH_NUM as c2,
I.INC_TYPE as c3,
I.INC_EMP_GROUP as c4,
sum(case when I.INC_KEY is null then 0 else 1 end ) as c5
from DATE_DIM D, INCIDENT_F I
where ( D.DATE_KEY = I.DATE_KEY (+) ) and ( D.DT_YEAR = 2010 and I.INC_EMP_GROUP = 'CONTRACTOR' )
group by D.DT_MONTH_NUM, D.DT_MONTH_NAME, I.INC_TYPE, I.INC_EMP_GROUP
order by c2
You can see that the outer syntax (+) is applied to the join, but not to the filter on I.INC_EMP_GROUP. If I take this query and drop it in something like SQL Developer, it only returns the months with data. If I throw the (+) after I.INC_EMP_GROUP like I'd do if writing this by hand, the desired zero-months results pop back in.
I have already searched the forums and while lots of people seem to have asked this question, the only solutions involve things like trickery in the business layer using dummy fact tables followed by manipulations at the report level etc. Unfortunately I can't rely on these as the system is eventually to be turned over to users who can't be expected to apply various hacks to write reports.
Anyone ever get to the bottom of getting OBI to apply outer join logic in filters as well, when the filtered table is meant to be outer-joined to?
Any comments are appreciated.
John

I know that this thread is a bit old thought it might be helpful to some one...
The Issue is, when using Degener@teDimen$ion ( this is !nner joned to FACT tables in BMM) and if any of the dimensions {other than theDegener@teDimen$ion (Let us say Dim X) } have an ()uter join to any of the fact tables, and you were doing your analysis using Degener@teDimen$ion, Dim X, Measure value you will face the following issues.
when filtering the analysis on the ()uter join dimension ( Dim X), the IN filter will not work. Reason is that the filter is getting applied to both the Dimension and FACT tables and the values that exist in Dimension Dim X but not in FACT table wont show up.
The above issue can be fixed by changing the join between the fact and Degener@teDimen$ion from inner to outer. I think this is a bug.. because it is supposed to filter the fact table after the entire outer joined result is obtained but not filter the fact table for the Dim X values and do a outer join. I think the BI should be intelligent enough.

Text Effect Does Not Appear

I have never encountered this problem before. I wanted to make my copyright watermark more striking, so I created a variation on the relatively well-known "glass" text effect, but the effect will not print, nor will it show up when the file is saved as anything other than a psd. I have tried to rasterize the text, rasterize the layer, and convert it into a smart object; I get nothing. I have exported it to Illustrator, and I get nothing. I have just opened the psd in other programs that read the psd format, and I get nothing: it always just turns out as flat, unaltered text. Even Photoshop won't print anything but the flat text. Save it as something like a jpg, and the result is an image with flat text. I don't have this happen when I do simpler effects: my current watermark is a bevel and emboss with contour and a drop shadow, and it looks perfect; but when I do the more complicated layering to make the glass effect, the result is as if I had done nothing but put text color on it. In fact, the only way I can even show the effect here is via a screen capture from Photoshop CS5, which looks like this:
It's not a very good rendering of what it looks like in Photoshop, but the screen capture is the only thing I've got.
The layer effects that were enabled for the image you see are inner shadow, outer glow, and bevel and emboss. Several other effects I had already turned off.
Is it the case that some text effects just won't show up? I can't imagine that's the case, since the sites where creating such effects are demonstrated certainly must be exporting the imagery to show it on their sites.
One last curiosity is that, once I've put in all the layers, I can turn them off one by one, and I get no effect, even when I've turned off effects to the point where I basically have my original watermark style, which looks just fine in print and jpg.
Does anyone have an explanation for why this is happening. Is it something I'm doing, or is it really that I can't print or present as jpg images some text effects?
On a techical note, I'm using Photoshop CS5 64-bit in Windows 7 on a very good computer, and my main monitor is not IPS, but it is VA, and is calibrated every two weeks.
Any help in solving my rather frustrating mystery would be most appreciated.

I shall herewith provide as much visual information as possible to help you see the work product and its components.
This is a screen capture of a photograph in which I used the glass effect:
Next is a capture to show the effect more clearly (a published print would have the opacity of the text layer reduced considerably since it looks rather strong at 100%):
Next is what happens to the effect when the psd file is converted to JPG. This is also what it looks like as a print straight-away from Photoshop, and it even looks like this in the Print Preview window of Photoshop:
And finally, below are screen captures of each effect applied to the text layer, followed at the end by the Character set-up:
I do apologize for the extensive graphics in this post, but I am hopeful that this evidence will be sufficient to provide the answer to my inquiry about why the glass text effect declines every effort to show outside of the Photoshop screen.

Motion tracking effect mask not working

I've no trouble with normal motion tracking, adding clip art to it and having the clip art track, etc. But according to the help in PE8, effects masks are also supposed to be able to be used. According to help:
You can also apply Effects Mask in the Motion Tracking mode.
1. Select a clip in the Timeline or Sceneline.
2. Select the clip, and click to enable the Motion Tracking mode.
3. Select any one of the tracked objects (shown by a yellow frame).
4. Select Edit > Effects.
5. Drag the effect you want to apply onto the tracked object on the Monitor panel.
The Effects Mask is applied automatically and the mask moves with the moving object. If you apply multiple effects to the clip, all the effects use the same mask.
I've done that and I get a mask but it does not move with the tracked object. Any hints?

I've no trouble with normal motion tracking, adding clip art to it and having the clip art track, etc. But according to the help in PE8, effects masks are also supposed to be able to be used. According to help:
You can also apply Effects Mask in the Motion Tracking mode.
1. Select a clip in the Timeline or Sceneline.
2. Select the clip, and click to enable the Motion Tracking mode.
3. Select any one of the tracked objects (shown by a yellow frame).
4. Select Edit > Effects.
5. Drag the effect you want to apply onto the tracked object on the Monitor panel.
The Effects Mask is applied automatically and the mask moves with the moving object. If you apply multiple effects to the clip, all the effects use the same mask.
I've done that and I get a mask but it does not move with the tracked object. Any hints?

Edit in Photoshop TIFF Compression Not Applied

I'm running LR4.1 on Windows 7 and have my LR 'External Editing' preferences set to 'ZIP' compression. When I 'Save' an 'Edit In' file from inside PS CS6 it does not apply ZIP compression. I verified this by checking the file size, then resaving using 'Save As' and selecting 'ZIP' compression in the save file options. The file size was reduced as expected, so LR is creating a TIFF file that does not respect my preferences setting for 'ZIP' compression.
In addition the TIFF file created by LR4.1 'Edit In' defaults to Macintosh 'Byte Order:
There is no LR 'Preferences' setting to change the 'Byte Order' to IBM PC, yet many agencies specifically want TIFF files with Intel/PC byte order. I will now have to go back and manually change these settings on any images sent to these agencies. In addition I will have to manually do a 'Save As' and reset these TIFF options for all future LR 'Edit In' Photoshop images.
Does anyone else have the same issue and/or have a more suitable solution?
Message was edited by: trshaner I forgot to add that once you 'Save' a LR 'Edit In' image in PS, the TIFF save dialouge toggles to Macintosh 'Byte Order. This means you have to manually change it in PS the next time ANY TIFF file is opened and resaved inside, to re-toggle it back to the preferred settings.

That's a very good question. Go to this post with last comment from one year ago:
Lightroom/Photoshop: TIFF compression settings have no effect when Lightroom sends image to Photoshop for editing
Scroll down to this post and click on 'view 2 more comments.'
You can use Image Processor Pro to apply compression to multiple TIFFs already processed, but there's no option in it for also adding ZIP layer compression.

ZCM DLU Policy Not Applying To Win7 Computer

I am running ZCM v10.3 and am preparing to migrate over to Active Directory. When I first setup ZCM, I created a DLU policy for my Windows 7 computers and its been working fine. However, its time to join my Windows 7 computers (running ZCM v10.3) to the AD Domain and I need to disable the DLU for the machines prior to joining the domain.
To do this I tried to exclude my test workstations from the DLU by adding the workstations to the exclusion list for the DLU Policy. My DLU policy is assigned to my Users so I used the "Excluded Workstation List" to attempt to prevent the DLU from applying to the workstation. This didn't work. I also tried the reverse by applying the DLU to the test workstation and adding users to the Exclusion list, but that didn't work either. I updated the version, ran "zac cc" and ran "zac ref bypasscache" but it didnt work.
I reassigned the DLU to all my Users and tried to use the registry to check for the existence and value of hklm\software\novell\zcm\zenlgn\domainlogin=1, but that didnt work either. I updated the version, ran "zac cc" and ran "zac ref bypasscache" but it didnt work.
Actually, the registry keys (DomainLogin and eDIRLogin) didn't exist so i had to manually add it using an AD GPO. I added DomainLogin and eDIRLogin and assign hexadecimal value of 1 to each DWORD via GPO (FYI). At this point I'm not even sure if the values of these keys are supposed to be set automatically upon login or if the admins manually control the values. Its not clear to me from the documentation on the Novell site. (http://www.novell.com/documentation/...stem_admin.pdf, pg 274)
(DLU Policy Filters not working)
I turned on debug by issuing the command: "zac log level debug", and would've attached the log here, but I don't know how. If anyone needs to see the log, please send me a link on how to attach a log and I'll do so.
I've tried so many different settings and combinations but i'm still unable to get consistent results. At some point I was able to get the DLU Policy to show up in the ZCM Agent properties with the status of "Not Applied" or "Not Effective" or something to that effect. That was the first time I was able to log in without the DLU applying. However it wasn't consistent among other machines so i kept testing. As it stands now, I have removed any filters and exclusions and now my test machine is not receiving any DLU policy and it should because I assigned the DLU Policy to my entire user base. I am totally lost.
Any help is appreciated.

wanman,
It appears that in the past few days you have not received a response to your
posting. That concerns us, and has triggered this automated reply.
Has your problem been resolved? If not, you might try one of the following options:
- Visit http://support.novell.com and search the knowledgebase and/or check all
the other self support options and support programs available.
- You could also try posting your message again. Make sure it is posted in the
correct newsgroup. (http://forums.novell.com)
Be sure to read the forum FAQ about what to expect in the way of responses:
http://forums.novell.com/faq.php
If this is a reply to a duplicate posting, please ignore and accept our apologies
and rest assured we will issue a stern reprimand to our posting bot.
Good luck!
Your Novell Product Support Forums Team
http://forums.novell.com/

Default Domain Policy Not Applying Settings to Servers or Clients

I have 2008 R2 DC's with a functioning level of 2003. Our domain servers are a mix of 2003, 2008, 2008 R2, and 2012 and our clients are a mix of Windows 7 Pro and Windows 8.1 Pro.
I recently made a change to the Default Domain Policy located at Computer Configuration -> Policies -> Windows Settings -> Security Settings -> Local Policies -> Security Options
For the Security Policy setting called: Network security: Configure encryption types allowed for Kerberos
The change was to enable DES because of a specific need that I have with an application that I work with but enabling DES and leaving the other options such AES unselected caused other applications to not work right. I decided to revert the changes
back to "Not Defined" but those changes did not reflect on the servers even after running the gpupdate /force command.
In order to keep the application working that broke, we enabled all of the encryption levels such as DES, AES, etc. on the server that's running the application via it's Local Security Policy as a temporary fix.
Now, I want to make sure all servers receive the settings from the Default Domain Policy and have their Local Security Policies reflect the "Not Defined" setting but it's not applying. It seems like they worked when I first applied them but
when I try to remove them it does not work.
If I change the setting directly on the Local Security Policy on the server or clients it shows "No minimum" instead of "Not Defined" which I've heard can be fixed by identifying the registry entry for that setting and deleting it...so
help with the location and how to identify that key would also be helpful.
My goal is not to manually have to change servers and clients to revert back to their default settings...I want the Domain policy to apply and override the servers and client's Local Security Policy.
Any help with this would be greatly appreciated and thank you in advance.

I have 2008 R2 DC's with a functioning level of 2003. Our domain servers are a mix of 2003, 2008, 2008 R2, and 2012 and our clients are a mix of Windows 7 Pro and Windows 8.1 Pro.
I recently made a change to the Default Domain Policy located at Computer Configuration -> Policies -> Windows Settings -> Security Settings -> Local Policies -> Security Options
For the Security Policy setting called: Network security: Configure encryption types allowed for Kerberos
refer:
http://technet.microsoft.com/en-us/library/jj852180(v=ws.10).aspx
We needed to implement a similar scenario a few years ago (when we introduced Windows7 into our estate).
We had an SAP/NetWeaver implementation which always worked on WinXP, but failed on Win7.
We had to enable the DES ciphers, since those were disabled by default in Win7. We discovered that we also needed to enable all the other ciphers (those which are enabled by default[not configured]).
i.e., when we changed the setting from "Not Configured", enabled DES, and left the RC4/AES stuff untouched by us, the RC4/AES stuff attracted a status of disabled.
So, we had to set the DES ciphers to Enabled, and, also set the RC4/AES ciphers to Enabled - this gave us the "resultant" enablement of the default stuff and the needed change/addition of DES.
When you set a GP setting "back to Not Configured", depending upon the setting *AND* the individual Windows feature itself - one of two things will happen:
a) the feature will "revert" to default behaviour
b) the feature will retain the current configured behaviour but becomes un-managed
In classic Group Policy terms, condition (b) above is often referred to as "tattooing", i.e., the last GP setting remains in effect even though GPMC/RSOP/etc does not reveal that to be the case.
(This is also a really good example of not doing this sort of stuff in the DDP. It could have borked your whole domain :)
What I'd suggest, is that you re-enable your ciphers for KRB settings again - this time, enable all the ciphers that would normally be "default", let that replicate around, and allow time for domain members to action it.
Then, set the setting back to Not Configured. This way, the "last" settings issued by GP will be those you want to remain as the "legacy".
Note: the GP settings reference s/sheet, has this to say:
Network security: Configure encryption types allowed for Kerberos
This policy setting allows you to set the encryption types that Kerberos is allowed to use.
If not selected, the encryption type will not be allowed. This setting may affect compatibility with client computers or services and applications. Multiple selections are permitted.
This policy is supported on at least Windows 7 or Windows Server 2008 R2.
Don
(Please take a moment to "Vote as Helpful" and/or "Mark as Answer", where applicable.
This helps the community, keeps the forums tidy, and recognises useful contributions. Thanks!)

Effects Do Not Apply

Similar Messages

Maybe you are looking for