Group Policies for OS X users

Hey folks,
I'm trying to determine approprate GPO settings for some computer-based OS X accounts. I have a computer in the bedroom and one in the kitchen that both auto-login as special domain accounts. One is something like kuser (for kitchen) and the other is buser (for bedroom). They are domain users b/c they need access to my photo library and itunes library (both shares on a 2003 member server).
Since printing in a domain enviroment pretty much requires storing the user/pass in the SMB URL and that is stored in plain text, I want to make sure these users have VERY limited access in the domain. I want to prevent login to anything other than the two special computers. However the AD "log onto" setting doesnt seem to effect OS X.
So, are there GPOs that will have ANY effect? Obvisouly the windows specific settings will have no effect, but can anyone recomend what I need to do to secure the domain against someone trying to use these special users?
Thanks!
-N

I'm very confused by what you're trying to accomplish, but you don't necessarily need a GPO to grant or restrict access to resources. You'll use permisssions on computer objects in the Active Directory Users & Computers console.
For example, if you don't want a particular domain account to use a particular computer, you can simply deny access to that user in that computer object.
If I'm missing your point, can you please clarify what you're after?
bill
1 GHz Powerbook G4 Mac OS X (10.4.3)

Similar Messages

Questions in setting up Security group policies for Lync 2013 Users

Hi Team,
One of our customer looking for the below requirements:
ü
B>>> Being able to split users in to groups. Would like to be able to split in to Departmental groups, the groups will be Service Delivery, Finance, Business Development, Clinical Services, Radiologists,
SLA Team, Call Handlers.
ü
B>>> Being able to control which users are able to contact or see other users. For example Limit Radiologists to only be able to see Service Delivery and Call Handlers
We know that RBAC policies can be used by Administrator or Technicians who works remotely. However, a user sitting at a server running Lync Server is not restricted by RBAC.
Question:
Is there a way we can fulfill the above customer requirements in Lync 2013 environment?

Hi,
On Lync Server side, what you can do is to change the AD attribute msRTCSIP-GroupingID. You can set different value for different groups. Then each group will not able to search the users in other groups with user name. However, they can still search the
users in other groups with the sip address.
More details:
http://blogs.msdn.com/b/jcalev/archive/2012/06/07/partitioning-lync-address-book-using-msrtcsip-groupingid.aspx
Best Regards,
Eason Huang
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected]
Eason Huang
TechNet Community Support

Questions on MCX Policies for Laptop/Mobile Users:

Questions on MCX Policies for Laptop/Mobile Users:
I have several managed Macs running Leopard. Many of them are MacBook laptops. My main MCX policies involve mapping printers and mounting network volumes at login. These are simple computer and group policies to help make the users life a little easier when it comes to finding and using network resources such as file server volumes and network printers.
Since most of my users are laptops, they are expressing 2 major concerns involving their laptops when they are off the LAN (i.e.; on the road at a cafe, working at home, staying at a hotel or when they have no network at all)
1) When users are off our LAN, the Mac still tries to mount the network volumes in their OD/MCX login items when the user logs in (with cached mobile credentials). Can this be avoided? Windows PCs do not do this. If the PC laptop cant find an AD DC, they simply don't run the login scripts and thus dont try to mount/map network volumes. How can I make the Mac laptops only mount network volumes when they are on the LAN?
2) Most Mac users have a Cisco VPN client, and use it regularly to connect to the company's LAN from home, hotels etc. Of course when they log into the network via VPN, their network volumes are not mounted automatically. Is their a way to re-run the MCX managed login items script once they connect to the VPN and mount (i.e.; "map") their network drives? Sure, users can simple use the "Connect To Server" option in the FInder (or perhaps try and use the god-awful Leopard Finder side bar discovery browser thingy which I hate - never mind), but I need a consistent automated way to mount volumes quickly and easily for my mobile users. There must be a way to run (or re-run) the login items part of my MCX policies.

Ping!
I'm looking for this functionality too. Anyone have a solution to either of these? One that came to mind is to wrap the login items in a script which detects if the LAN is available.

Maximum number of connection profiles and group policies for Cisco ASA

Hi,
We have a Cisco ASA 5520 running 8.0(2) that we use only for Remote Access VPN.
Does anyone know how many connection profiles and group policies that are supported on the box? I have not been able to find this in the manual.
Thanks in advance for your help!
Best regards,
Harry

There is no limit for connection profiles or group policies that can be configured on ASA. However the numbers do depend upon the memory available in the device as the profiles are stored in memory during execution.

Managing group policies for our 119 locations

I wonder if it is possible to create the following in a eDir configuration.
AMS_USB-ON\
ROT_USB-ON----BENELUX_USB-ON
LUX_USB-ON/
AMS_USB-OFF\
ROT_USB-OFF---BENELUX_USB-OFF
LUX_USB-OFF/
I want to be able to assign the possibility/disability to use USB to BENELUX_USB-ON/OFF and via this way affect the underlying groups.
This way i wont have to push the policies to the 119 locations twice.
This sample is only talking about 2 policies for 119 locations, imagine the work done with 10 or more different policies.
I hope you can shine your lights on this.
Best regards Danny

Originally Posted by dchiara
Danny I don't quite follow, would you mind re-explaining what you are trying to accomplish? Do you want the BENELUX device allowed in some locations and off in others?
What im trying to accomplish is the following,
Like i say'd im having 119 locations world wide to manage in my eDir.
I have a separate OU from every location (AMS, ROT, LUX etc.).
Now I create 2 GROUPS, in all the location OU's, called [loc]_USB_ON and [loc]_USB_OFF (e.g. AMS_USB_ON).
I also have 1 GLOBAL OU which is where global stuff gets managed. (duh)
So in the GLOBAL OU i create 2 GROUPS, USB_ON and USB_OFF.
In these groups I want to add the [loc]_USB_ON/OFF groups, so you get a situation like this;
AMS_USB-ON\
ROT_USB-ON----USB-ON
LUX_USB-ON/
AMS_USB-OFF\
ROT_USB-OFF---USB-OFF
LUX_USB-OFF/
Now in ZESM I created a policy USB_ON and a policy USB_OFF, this policy i want to assign to the USB_ON/OFF groups in GLOBAL with the intention to let it tumble down the groups tree and end up in all the location groups.
I really hope this is do'able, otherwise it will be a real hell to manage all these locations when you think about all the other policies an Admin might want to push.
I know its a long story but i hope it cleares it up a little.... looking forward to your reply.
Regards Danny

Group Policy for Remote Desktop Users

Hi,
Currently my users use desktops and have user and computer GPOs applied (typical things like logon scripts etc.) at the OU level where they reside e.g. Finance Users, Sales Users etc.
I am planning a Remote Desktop 2012 environment.
I have read the following:
TechNet cc779327
So, my understanding is that I create a new OU for my Remote Desktop Server only (not users), and create a new security Group for my RD Users and a security group for my RD server.
Remote Desktop Servers OU
* RD User GPO (filter on RD User security Group and RD Computer Security Group)
* RD Computer GPO (filter on RD User security Group and RD Computer Security Group)
I then apply all computer settings to the RD Computer GPO (loopback processing, Windows installer, hide shortcuts etc.).
I then apply all user settings to the RD User GPO (app specific, templates etc.)
Why not consolidate the two GPOs into one?
If I set computer settings in the computer GPO, and apply it as above to filter to the RD Server group and RD Users Group will this apply to only users un the RD User Group...or ALL users since I added the server to the filter?
If a user currently gets a setting in their normal OU e.g. Finance logon script, will they still get it on the Remote Desktop? Or do I need to copy that GPO setting to my new RD User GPO also?
Am I right to add both RD Server and RD User groups to the filter on both RD User and RD Computer GPOs?
Loopback processing - merge or replace typically for Remote Desktop?

Hi,
Thank you for posting in Windows Server Forum.
Create OU for RDS Server in Active Directory. Create security group for users who will use Remote Desktop Host (i.e. RDS Users). Create GPO (i.e. RDS Server Lock Down). In Security Filtering delete Authenticated Users, add RDS Server Account, and the security
group created in previous step.
Please check beneath article might useful for better understanding.
Lock Down Remote Desktop Services Server 2012
How to secure your remote desktop server with GPO
Hope it helps!
Thanks,
Dharmesh

Windows 8.1 Group Policies For Internet Connection Sharing?

Are there any more detailed policies available other than simply allowing or blocking Internet Connection Sharing?
I need to find out if there are policies allow management of Internet Connection Sharing? For instance we would like to allow ICS, but control it so that it cannot be set up by the user in unsafe manner.
We would like to either set the PSK password in advance or at least disallow weak ICS WPA passwords. It would also be a good idea if we could set up ICS so that only domain joined computers from our domain could join the ICS session from another computer
on our domain or else disallow direct access and file sharing between the ICS host and the guests joining the ICS network.
Can these types of things be managed via group policy?

> Are there any more detailed policies available other than simply
> allowing or blocking Internet Connection Sharing?
No.
Greetings/Grüße,
Martin
Mal ein
gutes Buch über GPOs lesen?
Good or bad GPOs? - my blog…
And if IT bothers me -
coke bottle design refreshment (-:

Internet Explorer 10 / 11 breaks Microsoft's group policies for proxy exceptions?

At one of our larger sites we've started experiencing a major issue with one of our collaborative web servers in that piles of users whose systems have automatically updated to Internet Explorer 10 are not adding the sites we've deployed via group policy
to the proxy exceptions to their proxy exceptions (Internet Options | Connections | LAN settings | Advanced).
So basically we deploy a number of subnets and domain names to our proxy exceptions list and after our support center blew up with calls concerning random issues, I had the admins compile a list of affected and unaffected systems contrasting various items
and we noticed the one similarity was Internet Explorer 10. Thousands of unaffected systems have Internet Explorer 8 / 9 while all those affected have Internet Explorer 10.
Is there a new way to deploy proxy exceptions? We thought about forcing them down via registry keys but felt there must be a less obtrusive method and maybe something is wrong.

Hi,
Did you configure these original settings with IEM?
Any settings that you previously configured with IEM will no longer work on computers where Internet Explorer 10 or newer is installed, regardless of the Windows version it’s been installed on.
You can configure the proxy settings with “Internet Settings Group Policy Preferences” or on the
Proxy Settings page of IEAK 10.
Please refer to:
Replacements for Internet Explorer Maintenance
http://technet.microsoft.com/en-us/library/jj890998.aspx
Here is a new deployment guide for IE 10, would like to share with you:
Internet Explorer 10 Deployment Guide
http://technet.microsoft.com/en-us/library/jj822335.aspx
Regards,
Yolanda
Yolanda
TechNet Community Support

How to prevent Evaluate User Policies to run for Bulk loaded users?

Hi,
I have an OIM 11G R2 environment, where i did a bulk load of abount 200,000+ users, and all the users' accounts were created using target recon.
How do I prevent the evaluate user policies scheduler from running for these users?
Any ideas are welcome.
Thanks,
Aravind Suresh

Hi,
I do have roles and access policies.
But i do not want them to applied to them at this stage as they already got everything through target recon.
Only for new users or these users on update i want the evaluate user policies to run.
Otherwise running evaluate user policies for these many users could be a very time and resource consuming task.
Thanks,
Aravind Suresh

Office 365 Group Policies question

We initially deployed Office 365 with updates turned off so about half of our users have an old version of Office 365. We want to now manage the updates using the new group policies for O365. I read this statement ...In
order for these four new policy settings to work, you will need to have at least the April 2014 build of Office 2013 Click-to-Run (Build 15.0.4605.1003) and download the latest Administrative templates files (ADMX/ADML).
Does this mean that the version on the PC has to have at least the April 2014 build to use the policies? If that's true how would I go about updating the users who have automatic updates turned off. there are a couple of thousand users.

Does this mean that the version on the PC has to have at least the April 2014 build to use the policies? If that's true how would I go about updating the users who have automatic updates turned off. there are a couple of thousand users.
Yes.
Depending on how you deployed/deploy Office365ProPlus, and, the tools/techniques available to you in your environment, there are some options.
a) re-deploy Office365ProPlus to the computers. Use the latest build version.
b) check the relevant registry settings, and if correction is needed, deploy the correct registry settings.
These articles may help you to determine which of the multiple scenarios you have to deal with:
http://community.office365.com/en-us/f/156/t/220142.aspx
http://blogs.msdn.com/b/modonovan/archive/2014/04/09/office-365-pro-plus-fails-to-update-or-fails-with-error-code-30088-27.aspx
http://social.technet.microsoft.com/Forums/office/en-US/4369357e-5de9-4755-8f2c-33ae948b14fb/manually-triggering-updates-in-office-2013?forum=officeitpro
http://blogs.technet.com/b/office_resource_kit/archive/2013/06/17/automating-quick-repairs-in-office-365-proplus.aspx
http://blogs.technet.com/b/odsupport/archive/2014/03/03/the-new-update-now-feature-for-office-2013-click-to-run-for-office365-and-its-associated-command-line-and-switches.aspx
Don
(Please take a moment to "Vote as Helpful" and/or "Mark as Answer", where applicable.
This helps the community, keeps the forums tidy, and recognises useful contributions. Thanks!)

Group policies not working in one lab.

G'day
I've got a situation at my school where group policies are not having any
effect on the PCs - but only in one of the 3 computer labs.
I've run through the steps of most of the troubleshooting documents I could
find but they haven't really helped.
to summarise...
If I delete the group policy folders from the system32 folder, then log in,
new copies are brought down OK.
If I force an update by executing secedit /refreshpolicy user_policy
/enforce the changes (proxy restrictions mostly) take effect
The policy IS correctly associated with the users and shows in the
Workstation manager as having been executed.
I'm at a loss.
I was wondering if anyone could have a look at the debug log
file I generated and give me some idea what's happening.
Thanks.
Paul Pofandt
IT Manager
St James College
Brisbane
WMHelperInitialization (Sep 22 2003) called! Flags: 0x4002. Event: 0x4000.
Impersonation: 0x2
Opened Mutex.
Loaded userenv.dll
Mapped function RefreshPolicy
Mapped function RegisterGPNotification
Mapped function UnregisterGPNotification
Exiting WMHelperInitialization. Returning flags: 0x204
WMHelperSystemEntryEx called!
Computer Object : CN=00:0D:60:40:D8:B7.OU=WORKSTATIONS.O=STJ
User Object : CN=admin.O=STJ
Entry Flags : 0x4200
Event Flags : 0x4000
DN is Typed convert it to TYPELESS
No user logged in.
Writing User Logged In to \HKLM\Software\Novell\Workstation Manager\Group
Policies
Wrote reg. value 0x0 to User Logged In in key Software\Novell\Workstation
Manager\Group Policies
Reading User Logged In from \HKLM\Software\Novell\Workstation Manager\Group
Policies
Read reg. value User Logged In: 0x0 in key Software\Novell\Workstation
Manager\Group Policies
Detected user logout. Running GPCleanup.
Cleaning up user settings.
Entering GPCleanup
Reading Group Policy Machine Status from \HKLM\Software\Novell\Workstation
Manager\Group Policies
Reg key Software\Novell\Workstation Manager\Group Policies\Group Policy
Machine Status not found. Assuming 0
GPStatus reg key not found. Assuming 0
Reading Group Policy Machine Flags from \HKLM\Software\Novell\Workstation
Manager\Group Policies
Reg key Software\Novell\Workstation Manager\Group Policies\Group Policy
Machine Flags not found. Assuming 0
Reg key Group Policy Machine Flags not found. Assuming 0
Reading Group Policy User Status from \HKLM\Software\Novell\Workstation
Manager\Group Policies
Read reg. value Group Policy User Status: 0x3000 in key
Software\Novell\Workstation Manager\Group Policies
Read reg. key Group Policy User Status: 0x3000
Reading Group Policy User Flags from \HKLM\Software\Novell\Workstation
Manager\Group Policies
Read reg. value Group Policy User Flags: 0x80000060 in key
Software\Novell\Workstation Manager\Group Policies
Read reg. key Group Policy User Flags: 0x80000060
Writing Group Policy User Status to \HKLM\Software\Novell\Workstation
Manager\Group Policies
Wrote reg. value 0x1000 to Group Policy User Status in key
Software\Novell\Workstation Manager\Group Policies
Reading GPT Version from \HKLM\Software\Novell\Workstation Manager\Group
Policies
Read reg. value GPT Version: 0xc100c0 in key Software\Novell\Workstation
Manager\Group Policies
Entered GPDel
Deleting C:\WINNT\System32\GroupPolicy\User
Deleting C:\WINNT\System32\GroupPolicy\Machine
Exiting GPDel 0
Restoring original GP as base.
Entered GPCopy(C:\WINNT\System32\GroupPolicy.WMOriginal,
C:\WINNT\System32\GroupPolicy, 0, handle, 0x70)
Copied C:\WINNT\System32\GroupPolicy.WMOriginal\GPT.ini to
C:\WINNT\System32\GroupPolicy\GPT.ini
Copied file
C:\WINNT\System32\GroupPolicy.WMOriginal\Machine\M icrosoft\Windows
NT\SecEdit\GptTmpl.inf to
C:\WINNT\System32\GroupPolicy\Machine\Microsoft\Wi ndows
NT\SecEdit\GptTmpl.inf
Copied file
C:\WINNT\System32\GroupPolicy.WMOriginal\Machine\M icrosoft\Windows
NT\SecEdit\IPS1.dat to
C:\WINNT\System32\GroupPolicy\Machine\Microsoft\Wi ndows NT\SecEdit\IPS1.dat
GP_FLAG_APPLY_SECURITY_SETTINGS (0x40), not set, or security file already
copied. Will not copy security file
Exiting GPCopy 0x0
Entered AppendPolicy C:\WINNT\System32\GroupPolicy\Machine\Registry.pol
Error 0x2 opening file C:\WINNT\System32\GroupPolicy\Machine\Registry.pol
File does not exist. Nonfatal error.
Exiting AppendPolicy C:\WINNT\System32\GroupPolicy\Machine\Registry.pol 0x0
Entered AppendPolicy C:\WINNT\System32\GroupPolicy\User\Registry.pol
Error 0x2 opening file C:\WINNT\System32\GroupPolicy\User\Registry.pol
File does not exist. Nonfatal error.
Exiting AppendPolicy C:\WINNT\System32\GroupPolicy\User\Registry.pol 0x0
Error 3 calling
GetFileAttributes(C:\WINNT\System32\GroupPolicy.Wk sCache\Machine\Registry.po
l)
Error 3 calling
GetFileAttributes(C:\WINNT\System32\GroupPolicy.Wk sCache\User\Registry.pol)
No workstation cache. Skipping overlay of computer policies...
Entered writeData. File: C:\WINNT\System32\GroupPolicy\Machine\Registry.pol
No data.
Exiting writeData 0x0
Entered writeData. File: C:\WINNT\System32\GroupPolicy\User\Registry.pol
No data.
Exiting writeData 0x0
Entered AppendSecuritySettings
Inf path: C:\WINNT\System32\GroupPolicy\Machine\Microsoft\Wi ndows
NT\SecEdit\GptTmpl.inf
Dispatching SECEDIT.EXE /configure /DB ZENDB /CFG
"C:\WINNT\System32\GroupPolicy\Machine\Microsoft\W indows
NT\SecEdit\GptTmpl.inf" /log c:\GPSecApp.log.
LoadHive entered
LoadHive exit : 0
Exiting AppendSecuritySettings 0x0
LoadHive entered
LoadHive exit : 2
Error 2 loading ipsec settings 1.
Writing Group Policy User Status to \HKLM\Software\Novell\Workstation
Manager\Group Policies
Wrote reg. value 0x3000 to Group Policy User Status in key
Software\Novell\Workstation Manager\Group Policies
Signalling OS to refresh policies
RegQueryValueEx returned 2
Policies are set to apply asynchronously
Policies will be processed asynchronously
Entered SetGptVersion(0x0, TRUE).
Reading GPT Version from \HKLM\Software\Novell\Workstation Manager\Group
Policies
Read reg. value GPT Version: 0xc100c0 in key Software\Novell\Workstation
Manager\Group Policies
Read file C:\WINNT\System32\GroupPolicy\GPT.ini
Found version 0xb800b7 in gpt.ini
Using version: 0xc100c0
Saving GPT version: 0xc200c1
Writing GPT Version to \HKLM\Software\Novell\Workstation Manager\Group
Policies
Wrote reg. value 0xc200c1 to GPT Version in key Software\Novell\Workstation
Manager\Group Policies
Exiting SetGptVersion 0x0.
Applied Computer Policy.
Applied User Policy.
Exiting GPCleanup 0x0
Entered RemoveCleanup.
Loaded wmschapi.dll
Calling WMRemoveAction
Finished Calling WMRemoveAction(WMGRPPOL cleanup action, FALSE). Returned
0x0
Exiting RemoveCleanup 0x0
Apply computer policies releasing mutex.
Exiting WMHelperSystemEntryEx ccode: 0x0
Closing log file.
WMHelperInitialization (Sep 22 2003) called! Flags: 0x0. Event: 0x0.
Impersonation: 0x0
Opened Mutex.
Loaded userenv.dll
Mapped function RefreshPolicy
Mapped function RegisterGPNotification
Mapped function UnregisterGPNotification
Exiting WMHelperInitialization. Returning flags: 0x11
Entering WMHelperInteractiveUserEntry!
szFullDN = CN=test2006.OU=2006.OU=STUDENTS.O=STJ
DN is Typed convert it to TYPELESS
g_szUserDN = test2006.2006.STUDENTS.STJ
GinaGetUsersSIDInTextualForm ENTERED
Textual SID : S-1-5-21-1908370602-1493435055-278805897-1055
GinaGetUsersSIDInTextualForm EXIT : 0
Writing Don't reparse to \HKLM\Software\Novell\Workstation Manager\Group
Policies
Wrote reg. value 0x0 to Don't reparse in key Software\Novell\Workstation
Manager\Group Policies
Writing User Logged In to \HKLM\Software\Novell\Workstation Manager\Group
Policies
Wrote reg. value 0x1 to User Logged In in key Software\Novell\Workstation
Manager\Group Policies
Entered CheckForObsoleteWksCache .
No workstation. Exiting CheckForObsoleteWksCache
Applying user policies
Reading Don't reparse from \HKLM\Software\Novell\Workstation Manager\Group
Policies
Read reg. value Don't reparse: 0x0 in key Software\Novell\Workstation
Manager\Group Policies
Reading Group Policy User Status from \HKLM\Software\Novell\Workstation
Manager\Group Policies
Read reg. value Group Policy User Status: 0x3000 in key
Software\Novell\Workstation Manager\Group Policies
Read reg. key Group Policy User Status: 0x3000
Entering ApplyPolicies
Reading Group Policy User Flags from \HKLM\Software\Novell\Workstation
Manager\Group Policies
Read reg. value Group Policy User Flags: 0x80000060 in key
Software\Novell\Workstation Manager\Group Policies
Read reg. key Group Policy User Flags: 0x80000060
Reading Group Policy User Status from \HKLM\Software\Novell\Workstation
Manager\Group Policies
Read reg. value Group Policy User Status: 0x3000 in key
Software\Novell\Workstation Manager\Group Policies
Read reg. key Group Policy User Status: 0x3000
Writing Group Policy User Status to \HKLM\Software\Novell\Workstation
Manager\Group Policies
Wrote reg. value 0x1000 to Group Policy User Status in key
Software\Novell\Workstation Manager\Group Policies
Impersonating logged on user.
Context : OU=2006.OU=STUDENTS.O=STJ
Full Object DN CN=test2006.OU=2006.OU=STUDENTS.O=STJ
Calling WMGetAllAssociatedObjects(FALSE, MANGO, 1,
CN=test2006.OU=2006.OU=STUDENTS.O=STJ, WINNT Workstation Package,
zenwmGroupPolicy, 512, pBuffer)
Reverting to system impersonation.
Found DN CN=Student User Package:Windows Group Policy.O=STJ
WMCheckIfGroupPolicyObjectsChanged entered
Impersonating logged on user.
Reverting to system impersonation.
Group Policy object has changed!
Exiting WMCheckIfGroupPolicyObjectsChanged 0x0
Entered ScheduleCleanup.
Loaded wmschapi.dll
Calling WMScheduleAction
Finished Calling WMScheduleAction. Returned 0x0
Exiting ScheduleCleanup 0x0
Entered BackupOriginalGP.
Exiting BackupOriginalGP 0x0
Entering ApplyGroupPolicy.
Entered GPDel
Deleting C:\WINNT\System32\GroupPolicy.UserCache\User
Deleting C:\WINNT\System32\GroupPolicy.UserCache\Machine
Exiting GPDel 0
Entered GPCopy(C:\WINNT\System32\GroupPolicy.WMOriginal,
C:\WINNT\System32\GroupPolicy.UserCache, 0, handle, 0x70)
Copied C:\WINNT\System32\GroupPolicy.WMOriginal\GPT.ini to
C:\WINNT\System32\GroupPolicy.UserCache\GPT.ini
Copied file
C:\WINNT\System32\GroupPolicy.WMOriginal\Machine\M icrosoft\Windows
NT\SecEdit\GptTmpl.inf to
C:\WINNT\System32\GroupPolicy.UserCache\Machine\Mi crosoft\Windows
NT\SecEdit\GptTmpl.inf
Copied file
C:\WINNT\System32\GroupPolicy.WMOriginal\Machine\M icrosoft\Windows
NT\SecEdit\IPS1.dat to
C:\WINNT\System32\GroupPolicy.UserCache\Machine\Mi crosoft\Windows
NT\SecEdit\IPS1.dat
GP_FLAG_APPLY_SECURITY_SETTINGS (0x40), not set, or security file already
copied. Will not copy security file
Exiting GPCopy 0x0
Entered AppendPolicy
C:\WINNT\System32\GroupPolicy.UserCache\Machine\Re gistry.pol
Error 0x2 opening file
C:\WINNT\System32\GroupPolicy.UserCache\Machine\Re gistry.pol
File does not exist. Nonfatal error.
Exiting AppendPolicy
C:\WINNT\System32\GroupPolicy.UserCache\Machine\Re gistry.pol 0x0
Entered AppendPolicy
C:\WINNT\System32\GroupPolicy.UserCache\User\Regis try.pol
Error 0x2 opening file
C:\WINNT\System32\GroupPolicy.UserCache\User\Regis try.pol
File does not exist. Nonfatal error.
Exiting AppendPolicy
C:\WINNT\System32\GroupPolicy.UserCache\User\Regis try.pol 0x0
Entered MergeGptFile(C:\WINNT\System32\GroupPolicy.UserCac he, 0x30)
g_dwVersion: 0x0.
Reading GPT Version from \HKLM\Software\Novell\Workstation Manager\Group
Policies
Read reg. value GPT Version: 0xc200c1 in key Software\Novell\Workstation
Manager\Group Policies
Found user extensions...
Exiting MergeGptFile 0x0
Processing CN=Student User Package:Windows Group Policy.O=STJ
Impersonating logged on user.
Flags: 0x80000060
Check for old settings: 0x60
Reverting to system.
Writing Group Policy User Flags to \HKLM\Software\Novell\Workstation
Manager\Group Policies
Wrote reg. value 0x80000060 to Group Policy User Flags in key
Software\Novell\Workstation Manager\Group Policies
Entered GPCopy(\\THOR\sys\public\Policies_stu,
C:\WINNT\System32\GroupPolicy.UserCache, 1, handle, 0x80000060)
Granted temp acess to C:\WINNT\System32\GroupPolicy.UserCache\GPT.ini
Copied \\THOR\sys\public\Policies_stu\GPT.ini to
C:\WINNT\System32\GroupPolicy.UserCache\GPT.ini
Reverting to system.
Restored security on C:\WINNT\System32\GroupPolicy.UserCache\GPT.ini
Granted temp acess to C:\WINNT\System32\GroupPolicy.UserCache\User
Copied file \\THOR\sys\public\Policies_stu\User\Registry.pol to
C:\WINNT\System32\GroupPolicy.UserCache\User\Regis try.pol
Granted temp acess to C:\WINNT\System32\GroupPolicy.UserCache\User\MICRO SOFT
Granted temp acess to
C:\WINNT\System32\GroupPolicy.UserCache\User\MICRO SOFT\IEAK
Copied file \\THOR\sys\public\Policies_stu\User\MICROSOFT\IEAK \install.ins
to C:\WINNT\System32\GroupPolicy.UserCache\User\MICRO SOFT\IEAK\install.ins
Granted temp acess to
C:\WINNT\System32\GroupPolicy.UserCache\User\MICRO SOFT\IEAK\BRANDING
Granted temp acess to
C:\WINNT\System32\GroupPolicy.UserCache\User\MICRO SOFT\IEAK\BRANDING\favs
Restored security on
C:\WINNT\System32\GroupPolicy.UserCache\User\MICRO SOFT\IEAK\BRANDING\favs
Restored security on
C:\WINNT\System32\GroupPolicy.UserCache\User\MICRO SOFT\IEAK\BRANDING
Granted temp acess to
C:\WINNT\System32\GroupPolicy.UserCache\User\MICRO SOFT\IEAK\LOCK
Restored security on
C:\WINNT\System32\GroupPolicy.UserCache\User\MICRO SOFT\IEAK\LOCK
Restored security on
C:\WINNT\System32\GroupPolicy.UserCache\User\MICRO SOFT\IEAK
Restored security on C:\WINNT\System32\GroupPolicy.UserCache\User\MICRO SOFT
Granted temp acess to C:\WINNT\System32\GroupPolicy.UserCache\User\Scrip ts
Granted temp acess to
C:\WINNT\System32\GroupPolicy.UserCache\User\Scrip ts\Logoff
Restored security on
C:\WINNT\System32\GroupPolicy.UserCache\User\Scrip ts\Logoff
Granted temp acess to
C:\WINNT\System32\GroupPolicy.UserCache\User\Scrip ts\Logon
Restored security on
C:\WINNT\System32\GroupPolicy.UserCache\User\Scrip ts\Logon
Restored security on C:\WINNT\System32\GroupPolicy.UserCache\User\Scrip ts
Restored security on C:\WINNT\System32\GroupPolicy.UserCache\User
GP_FLAG_APPLY_COMP_SETTINGS (0x10), not set. Will not copy machine folder
Copying security file
Granted temp acess to
C:\WINNT\System32\GroupPolicy.UserCache\Machine\Mi crosoft\Windows NT\SecEdit
Copied file \\THOR\sys\public\Policies_stu\Machine\Microsoft\W indows
NT\SecEdit\GptTmpl.inf to
C:\WINNT\System32\GroupPolicy.UserCache\Machine\Mi crosoft\Windows
NT\SecEdit\GptTmpl.inf
Copied file \\THOR\sys\public\Policies_stu\Machine\Microsoft\W indows
NT\SecEdit\IPS1.dat to
C:\WINNT\System32\GroupPolicy.UserCache\Machine\Mi crosoft\Windows
NT\SecEdit\IPS1.dat
Copied file \\THOR\sys\public\Policies_stu\Machine\Microsoft\W indows
NT\SecEdit\IPS2.dat to
C:\WINNT\System32\GroupPolicy.UserCache\Machine\Mi crosoft\Windows
NT\SecEdit\IPS2.dat
Copied file \\THOR\sys\public\Policies_stu\Machine\Microsoft\W indows
NT\SecEdit\IPS3.dat to
C:\WINNT\System32\GroupPolicy.UserCache\Machine\Mi crosoft\Windows
NT\SecEdit\IPS3.dat
Restored security on
C:\WINNT\System32\GroupPolicy.UserCache\Machine\Mi crosoft\Windows NT\SecEdit
Exiting GPCopy 0x0
Entered MergeGptFile(C:\WINNT\System32\GroupPolicy.UserCac he, 0x80000060)
g_dwVersion: 0xc200c1.
Found user extensions...
Exiting MergeGptFile 0x0
Applying user settings.
Entered AppendPolicy
C:\WINNT\System32\GroupPolicy.UserCache\User\Regis try.pol
Entered parseRegFile
Val: 'NoChangingWallPaper'
Added:
Software\Microsoft\Windows\CurrentVersion\Policies \ActiveDesktop\NoChangingW
allPaper
Val: 'NoHardwareTab'
Added:
Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\NoHardwareTab
Val: 'NoWindowsUpdate'
Added:
Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\NoWindowsUpdate
Val: 'NoNetworkConnections'
Added:
Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\NoNetworkConnect
ions
Val: 'ForceStartMenuLogOff'
Added:
Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\ForceStartMenuLo
gOff
Val: 'ClearRecentDocsOnExit'
Added:
Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\ClearRecentDocsO
nExit
Val: 'Intellimenus'
Added:
Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\Intellimenus
Val: 'NoSaveSettings'
Added:
Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\NoSaveSettings
Val: 'NoMovingBands'
Added:
Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\NoMovingBands
Val: 'NoRecentDocsNetHood'
Added:
Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\NoRecentDocsNetH
ood
Val: 'NoCloseDragDropBands'
Added:
Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\NoCloseDragDropB
ands
Val: 'NoActiveDesktop'
Added:
Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\NoActiveDesktop
Val: 'NoControlPanel'
Added:
Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\NoControlPanel
Val: 'NoDeletePrinter'
Added:
Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\NoDeletePrinter
Val: '**del.NoAddPrinter'
Trying to delete key:
Software\Microsoft\Windows\CurrentVersion\Policies \Explorer, val:
NoAddPrinter
Added:
Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\**del.NoAddPrint
er
Val: '**del.DisablePersonalDirChange'
Trying to delete key:
Software\Microsoft\Windows\CurrentVersion\Policies \Explorer, val:
DisablePersonalDirChange
Added:
Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\**del.DisablePer
sonalDirChange
Val: 'DisallowRun'
Added:
Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\DisallowRun
Val: '**delvals.'
Trying to delete values under key:
Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\DisallowRun
Added:
Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\DisallowRun\**de
lvals.
Val: '1'
Added:
Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\DisallowRun\1
Val: '2'
Added:
Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\DisallowRun\2
Val: '3'
Added:
Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\DisallowRun\3
Val: '4'
Added:
Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\DisallowRun\4
Val: '5'
Added:
Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\DisallowRun\5
Val: '6'
Added:
Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\DisallowRun\6
Val: '7'
Added:
Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\DisallowRun\7
Val: '8'
Added:
Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\DisallowRun\8
Val: 'DisableRegistryTools'
Added:
Software\Microsoft\Windows\CurrentVersion\Policies \System\DisableRegistryToo
ls
Val: 'DisableTaskMgr'
Added:
Software\Microsoft\Windows\CurrentVersion\Policies \System\DisableTaskMgr
Val: '**del.DisableLockWorkstation'
Trying to delete key:
Software\Microsoft\Windows\CurrentVersion\Policies \System, val:
DisableLockWorkstation
Added:
Software\Microsoft\Windows\CurrentVersion\Policies \System\**del.DisableLockW
orkstation
Val: 'NoAddRemovePrograms'
Added:
Software\Microsoft\Windows\CurrentVersion\Policies \Uninstall\NoAddRemoveProg
rams
Val: 'NoRemovePage'
Added:
Software\Microsoft\Windows\CurrentVersion\Policies \Uninstall\NoRemovePage
Val: 'NoAddPage'
Added:
Software\Microsoft\Windows\CurrentVersion\Policies \Uninstall\NoAddPage
Val: 'NoWindowsSetupPage'
Added:
Software\Microsoft\Windows\CurrentVersion\Policies \Uninstall\NoWindowsSetupP
age
Val: 'NoAddFromCDorFloppy'
Added:
Software\Microsoft\Windows\CurrentVersion\Policies \Uninstall\NoAddFromCDorFl
oppy
Val: 'NoAddFromInternet'
Added:
Software\Microsoft\Windows\CurrentVersion\Policies \Uninstall\NoAddFromIntern
et
Val: 'NoAddFromNetwork'
Added:
Software\Microsoft\Windows\CurrentVersion\Policies \Uninstall\NoAddFromNetwor
k
Val: 'DisableWindowsUpdateAccess'
Added:
Software\Microsoft\Windows\CurrentVersion\Policies \WindowsUpdate\DisableWind
owsUpdateAccess
Val: 'NoChat'
Added: Software\Policies\Microsoft\Conferencing\NoChat
Val: 'NoSharing'
Added: Software\Policies\Microsoft\Conferencing\NoSharing
Val: 'NoSharingDesktop'
Added: Software\Policies\Microsoft\Conferencing\NoSharing Desktop
Val: 'NoSharingDosWindows'
Added: Software\Policies\Microsoft\Conferencing\NoSharing DosWindows
Val: 'NoSharingExplorer'
Added: Software\Policies\Microsoft\Conferencing\NoSharing Explorer
Val: 'NoAllowControl'
Added: Software\Policies\Microsoft\Conferencing\NoAllowCo ntrol
Val: 'NoTrueColorSharing'
Added: Software\Policies\Microsoft\Conferencing\NoTrueCol orSharing
Val: 'NoAppSharing'
Added: Software\Policies\Microsoft\Conferencing\NoAppShar ing
Val: 'NoGeneralPage'
Added: Software\Policies\Microsoft\Conferencing\NoGeneral Page
Val: 'NoAdvancedCalling'
Added: Software\Policies\Microsoft\Conferencing\NoAdvance dCalling
Val: 'NoSecurityPage'
Added: Software\Policies\Microsoft\Conferencing\NoSecurit yPage
Val: 'NoAudioPage'
Added: Software\Policies\Microsoft\Conferencing\NoAudioPa ge
Val: 'NoVideoPage'
Added: Software\Policies\Microsoft\Conferencing\NoVideoPa ge
Val: 'Advanced'
Added: Software\Policies\Microsoft\Internet Explorer\Control Panel\Advanced
Val: 'HomePage'
Added: Software\Policies\Microsoft\Internet Explorer\Control Panel\HomePage
Val: 'Cache'
Added: Software\Policies\Microsoft\Internet Explorer\Control Panel\Cache
Val: 'Connwiz Admin Lock'
Added: Software\Policies\Microsoft\Internet Explorer\Control Panel\Connwiz
Admin Lock
Val: 'Connection Settings'
Added: Software\Policies\Microsoft\Internet Explorer\Control
Panel\Connection Settings
Val: 'Proxy'
Added: Software\Policies\Microsoft\Internet Explorer\Control Panel\Proxy
Val: 'Autoconfig'
Added: Software\Policies\Microsoft\Internet Explorer\Control
Panel\Autoconfig
Val: 'Profiles'
Added: Software\Policies\Microsoft\Internet Explorer\Control Panel\Profiles
Val: 'Certificates'
Added: Software\Policies\Microsoft\Internet Explorer\Control
Panel\Certificates
Val: 'Ratings'
Added: Software\Policies\Microsoft\Internet Explorer\Control Panel\Ratings
Val: 'FormSuggest Passwords'
Added: Software\Policies\Microsoft\Internet Explorer\Control
Panel\FormSuggest Passwords
Val: 'Messaging'
Added: Software\Policies\Microsoft\Internet Explorer\Control Panel\Messaging
Val: 'CalendarContact'
Added: Software\Policies\Microsoft\Internet Explorer\Control
Panel\CalendarContact
Val: 'ContentTab'
Added: Software\Policies\Microsoft\Internet Explorer\Control
Panel\ContentTab
Val: 'ConnectionsTab'
Added: Software\Policies\Microsoft\Internet Explorer\Control
Panel\ConnectionsTab
Val: 'ProgramsTab'
Added: Software\Policies\Microsoft\Internet Explorer\Control
Panel\ProgramsTab
Val: 'AdvancedTab'
Added: Software\Policies\Microsoft\Internet Explorer\Control
Panel\AdvancedTab
Val: 'RestrictAuthorMode'
Added: Software\Policies\Microsoft\MMC\RestrictAuthorMode
Val: 'Restrict_Run'
Added:
Software\Policies\Microsoft\MMC\{011BE22D-E453-11D1-945A-00C04FB984F9}\Restr
ict_Run
Val: 'Restrict_Run'
Added:
Software\Policies\Microsoft\MMC\{1AA7F839-C7F5-11D0-A376-00C04FC9DA04}\Restr
ict_Run
Val: 'Restrict_Run'
Added:
Software\Policies\Microsoft\MMC\{3CB6973D-3E6F-11D0-95DB-00A024D77700}\Restr
ict_Run
Val: 'Restrict_Run'
Added:
Software\Policies\Microsoft\MMC\{53D6AB1D-2488-11D1-A28C-00C04FB94F17}\Restr
ict_Run
Val: 'Restrict_Run'
Added:
Software\Policies\Microsoft\MMC\{58221C65-EA27-11CF-ADCF-00AA00A80033}\Restr
ict_Run
Val: 'Restrict_Run'
Added:
Software\Policies\Microsoft\MMC\{58221C66-EA27-11CF-ADCF-00AA00A80033}\Restr
ict_Run
Val: 'Restrict_Run'
Added:
Software\Policies\Microsoft\MMC\{58221C67-EA27-11CF-ADCF-00AA00A80033}\Restr
ict_Run
Val: 'Restrict_Run'
Added:
Software\Policies\Microsoft\MMC\{5ADF5BF6-E452-11D1-945A-00C04FB984F9}\Restr
ict_Run
Val: 'Restrict_Run'
Added:
Software\Policies\Microsoft\MMC\{5C659257-E236-11D2-8899-00104B2AFB46}\Restr
ict_Run
Val: 'Restrict_Run'
Added:
Software\Policies\Microsoft\MMC\{5D6179C8-17EC-11D1-9AA9-00C04FD8FE93}\Restr
ict_Run
Val: 'Restrict_Run'
Added:
Software\Policies\Microsoft\MMC\{677A2D94-28D9-11D1-A95B-008048918FB1}\Restr
ict_Run
Val: 'Restrict_Run'
Added:
Software\Policies\Microsoft\MMC\{7478EF61-8C46-11d1-8D99-00A0C913CAD4}\Restr
ict_Run
Val: 'Restrict_Run'
Added:
Software\Policies\Microsoft\MMC\{753EDB4D-2E1B-11D1-9064-00A0C90AB504}\Restr
ict_Run
Val: 'Restrict_Run'
Added:
Software\Policies\Microsoft\MMC\{8EAD3A12-B2C1-11d0-83AA-00A0C92C9D5D}\Restr
ict_Run
Val: 'Restrict_Run'
Added:
Software\Policies\Microsoft\MMC\{8F8F8DC0-5713-11D1-9551-0060B0576642}\Restr
ict_Run
Val: 'Restrict_Run'
Added:
Software\Policies\Microsoft\MMC\{90087284-d6d6-11d0-8353-00a0c90640bf}\Restr
ict_Run
Val: 'Restrict_Run'
Added:
Software\Policies\Microsoft\MMC\{95AD72F0-44CE-11D0-AE29-00AA004B9986}\Restr
ict_Run
Val: 'Restrict_Run'
Added:
Software\Policies\Microsoft\MMC\{A841B6C2-7577-11D0-BB1F-00A0C922E79C}\Restr
ict_Run
Val: 'Restrict_Run'
Added:
Software\Policies\Microsoft\MMC\{B91B6008-32D2-11D2-9888-00A0C925F917}\Restr
ict_Run
Val: 'Restrict_Run'
Added:
Software\Policies\Microsoft\MMC\{C9BC92DF-5B9A-11D1-8F00-00C04FC2C17B}\Restr
ict_Run
Val: 'Restrict_Run'
Added:
Software\Policies\Microsoft\MMC\{D967F824-9968-11D0-B936-00C04FD8D5B0}\Restr
ict_Run
Val: 'Restrict_Run'
Added:
Software\Policies\Microsoft\MMC\{DEA8AFA0-CC85-11d0-9CE2-0080C7221EBD}\Restr
ict_Run
Val: 'Restrict_Run'
Added:
Software\Policies\Microsoft\MMC\{E26D02A0-4C1F-11D1-9AA1-00C04FC3357A}\Restr
ict_Run
Val: 'Restrict_Run'
Added:
Software\Policies\Microsoft\MMC\{E355E538-1C2E-11D0-8C37-00C04FD8FE93}\Restr
ict_Run
Val: 'Restrict_Run'
Added:
Software\Policies\Microsoft\MMC\{EBC53A38-A23F-11D0-B09B-00C04FD8DCA6}\Restr
ict_Run
Val: 'Restrict_Run'
Added:
Software\Policies\Microsoft\MMC\{FD57D297-4FD9-11D1-854E-00C04FC31FD3}\Restr
ict_Run
Val: '{D6526FE0-E651-11CF-99CB-00C04FD64497}'
Added: Software\Policies\Microsoft\Windows\CurrentVersion \Internet
Settings\AllowedControls\{D6526FE0-E651-11CF-99CB-00C04FD64497}
Val: 'NoConfigCache'
Added: Software\Policies\Microsoft\Windows\NetCache\NoCon figCache
Val: 'NoMakeAvailableOffline'
Added: Software\Policies\Microsoft\Windows\NetCache\NoMak eAvailableOffline
Val: 'NoCacheViewer'
Added: Software\Policies\Microsoft\Windows\NetCache\NoCac heViewer
Val: 'NC_RasConnect'
Added: Software\Policies\Microsoft\Windows\Network Connections\NC_RasConnect
Val: 'NC_LanConnect'
Added: Software\Policies\Microsoft\Windows\Network Connections\NC_LanConnect
Val: 'NC_LanProperties'
Added: Software\Policies\Microsoft\Windows\Network
Connections\NC_LanProperties
Val: 'NC_RasMyProperties'
Added: Software\Policies\Microsoft\Windows\Network
Connections\NC_RasMyProperties
Val: 'NC_RasAllUserProperties'
Added: Software\Policies\Microsoft\Windows\Network
Connections\NC_RasAllUserProperties
Val: 'NC_RenameConnection'
Added: Software\Policies\Microsoft\Windows\Network
Connections\NC_RenameConnection
Val: 'NC_RenameMyRasConnection'
Added: Software\Policies\Microsoft\Windows\Network
Connections\NC_RenameMyRasConnection
Val: 'NC_AddRemoveComponents'
Added: Software\Policies\Microsoft\Windows\Network
Connections\NC_AddRemoveComponents
Val: 'NC_ChangeBindState'
Added: Software\Policies\Microsoft\Windows\Network
Connections\NC_ChangeBindState
Val: 'NC_LanChangeProperties'
Added: Software\Policies\Microsoft\Windows\Network
Connections\NC_LanChangeProperties
Val: 'NC_RasChangeProperties'
Added: Software\Policies\Microsoft\Windows\Network
Connections\NC_RasChangeProperties
Val: 'NC_NewConnectionWizard'
Added: Software\Policies\Microsoft\Windows\Network
Connections\NC_NewConnectionWizard
Val: 'NC_DialupPrefs'
Added: Software\Policies\Microsoft\Windows\Network
Connections\NC_DialupPrefs
Val: 'NC_AdvancedSettings'
Added: Software\Policies\Microsoft\Windows\Network
Connections\NC_AdvancedSettings
Val: 'NC_ShowSharedAccessUI'
Added: Software\Policies\Microsoft\Windows\Network
Connections\NC_ShowSharedAccessUI
Val: 'NC_AllowAdvancedTCPIPConfig'
Added: Software\Policies\Microsoft\Windows\Network
Connections\NC_AllowAdvancedTCPIPConfig
Val: 'DisableCMD'
Added: Software\Policies\Microsoft\Windows\System\Disable CMD
Exiting parseRegFile
Exiting AppendPolicy
C:\WINNT\System32\GroupPolicy.UserCache\User\Regis try.pol 0x0
Reverting to system impersonation.
Entered writeData. File:
C:\WINNT\System32\GroupPolicy.UserCache\User\Regis try.pol
Exiting writeData 0x0
Entered writeData. File:
C:\WINNT\System32\GroupPolicy.UserCache\Machine\Re gistry.pol
No data.
Exiting writeData 0x0
Entered GenerateGptFile(C:\WINNT\System32\GroupPolicy.User Cache)
g_dwVersion: 0xc200c1.
Writing GPT Version to \HKLM\Software\Novell\Workstation Manager\Group
Policies
Wrote reg. value 0xc200c1 to GPT Version in key Software\Novell\Workstation
Manager\Group Policies
Exiting GenerateGptFile 0x0
Reading workstation cache
Entered MergeGptFile(C:\WINNT\System32\GroupPolicy.WksCach e, 0x30)
g_dwVersion: 0xc200c1.
Exiting MergeGptFile 0x0
Entered AppendPolicy
C:\WINNT\System32\GroupPolicy.WksCache\User\Regist ry.pol
Error 0x3 opening file
C:\WINNT\System32\GroupPolicy.WksCache\User\Regist ry.pol
File does not exist. Nonfatal error.
Exiting AppendPolicy
C:\WINNT\System32\GroupPolicy.WksCache\User\Regist ry.pol 0x0
Entered AppendPolicy
C:\WINNT\System32\GroupPolicy.WksCache\Machine\Reg istry.pol
Error 0x3 opening file
C:\WINNT\System32\GroupPolicy.WksCache\Machine\Reg istry.pol
File does not exist. Nonfatal error.
Exiting AppendPolicy
C:\WINNT\System32\GroupPolicy.WksCache\Machine\Reg istry.pol 0x0
Reading Group Policy Machine Flags from \HKLM\Software\Novell\Workstation
Manager\Group Policies
Reg key Software\Novell\Workstation Manager\Group Policies\Group Policy
Machine Flags not found. Assuming 0
Workstation flags: 0x0
Entered MergeAndSavePolicies(0x0, C:\WINNT\System32\GroupPolicy.UserCache)
Applying workstation, then user policies
Entered MemAppendPolicy
Added:
Software\Microsoft\Windows\CurrentVersion\Policies \ActiveDesktop\NoChangingW
allPaper
Added:
Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\NoHardwareTab
Added:
Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\NoWindowsUpdate
Added:
Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\NoNetworkConnect
ions
Added:
Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\ForceStartMenuLo
gOff
Added:
Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\ClearRecentDocsO
nExit
Added:
Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\Intellimenus
Added:
Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\NoSaveSettings
Added:
Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\NoMovingBands
Added:
Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\NoRecentDocsNetH
ood
Added:
Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\NoCloseDragDropB
ands
Added:
Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\NoActiveDesktop
Added:
Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\NoControlPanel
Added:
Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\NoDeletePrinter
Trying to delete key:
Software\Microsoft\Windows\CurrentVersion\Policies \Explorer, val:
NoAddPrinter
Added:
Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\**del.NoAddPrint
er
Trying to delete key:
Software\Microsoft\Windows\CurrentVersion\Policies \Explorer, val:
DisablePersonalDirChange
Added:
Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\**del.DisablePer
sonalDirChange
Added:
Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\DisallowRun
Trying to delete values under key:
Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\DisallowRun
Added:
Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\DisallowRun\**de
lvals.
Added:
Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\DisallowRun\1
Added:
Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\DisallowRun\2
Added:
Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\DisallowRun\3
Added:
Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\DisallowRun\4
Added:
Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\DisallowRun\5
Added:
Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\DisallowRun\6
Added:
Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\DisallowRun\7
Added:
Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\DisallowRun\8
Added:
Software\Microsoft\Windows\CurrentVersion\Policies \System\DisableRegistryToo
ls
Added:
Software\Microsoft\Windows\CurrentVersion\Policies \System\DisableTaskMgr
Trying to delete key:
Software\Microsoft\Windows\CurrentVersion\Policies \System, val:
DisableLockWorkstation
Added:
Software\Microsoft\Windows\CurrentVersion\Policies \System\**del.DisableLockW
orkstation
Added:
Software\Microsoft\Windows\CurrentVersion\Policies \Uninstall\NoAddRemoveProg
rams
Added:
Software\Microsoft\Windows\CurrentVersion\Policies \Uninstall\NoRemovePage
Added:
Software\Microsoft\Windows\CurrentVersion\Policies \Uninstall\NoAddPage
Added:
Software\Microsoft\Windows\CurrentVersion\Policies \Uninstall\NoWindowsSetupP
age
Added:
Software\Microsoft\Windows\CurrentVersion\Policies \Uninstall\NoAddFromCDorFl
oppy
Added:
Software\Microsoft\Windows\CurrentVersion\Policies \Uninstall\NoAddFromIntern
et
Added:
Software\Microsoft\Windows\CurrentVersion\Policies \Uninstall\NoAddFromNetwor
k
Added:
Software\Microsoft\Windows\CurrentVersion\Policies \WindowsUpdate\DisableWind
owsUpdateAccess
Added: Software\Policies\Microsoft\Conferencing\NoChat
Added: Software\Policies\Microsoft\Conferencing\NoSharing
Added: Software\Policies\Microsoft\Conferencing\NoSharing Desktop
Added: Software\Policies\Microsoft\Conferencing\NoSharing DosWindows
Added: Software\Policies\Microsoft\Conferencing\NoSharing Explorer
Added: Software\Policies\Microsoft\Conferencing\NoAllowCo ntrol
Added: Software\Policies\Microsoft\Conferencing\NoTrueCol orSharing
Added: Software\Policies\Microsoft\Conferencing\NoAppShar ing
Added: Software\Policies\Microsoft\Conferencing\NoGeneral Page
Added: Software\Policies\Microsoft\Conferencing\NoAdvance dCalling
Added: Software\Policies\Microsoft\Conferencing\NoSecurit yPage
Added: Software\Policies\Microsoft\Conferencing\NoAudioPa ge
Added: Software\Policies\Microsoft\Conferencing\NoVideoPa ge
Added: Software\Policies\Microsoft\Internet Explorer\Control Panel\Advanced
Added: Software\Policies\Microsoft\Internet Explorer\Control Panel\HomePage
Added: Software\Policies\Microsoft\Internet Explorer\Control Panel\Cache
Added: Software\Policies\Microsoft\Internet Explorer\Control Panel\Connwiz
Admin Lock
Added: Software\Policies\Microsoft\Internet Explorer\Control
Panel\Connection Settings
Added: Software\Policies\Microsoft\Internet Explorer\Control Panel\Proxy
Added: Software\Policies\Microsoft\Internet Explorer\Control
Panel\Autoconfig
Added: Software\Policies\Microsoft\Internet Explorer\Control Panel\Profiles
Added: Software\Policies\Microsoft\Internet Explorer\Control
Panel\Certificates
Added: Software\Policies\Microsoft\Internet Explorer\Control Panel\Ratings
Added: Software\Policies\Microsoft\Internet Explorer\Control
Panel\FormSuggest Passwords
Added: Software\Policies\Microsoft\Internet Explorer\Control Panel\Messaging
Added: Software\Policies\Microsoft\Internet Explorer\Control
Panel\CalendarContact
Added: Software\Policies\Microsoft\Internet Explorer\Control
Panel\ContentTab
Added: Software\Policies\Microsoft\Internet Explorer\Control
Panel\ConnectionsTab
Added: Software\Policies\Microsoft\Internet Explorer\Control
Panel\ProgramsTab
Added: Software\Policies\Microsoft\Internet Explorer\Control
Panel\AdvancedTab
Added: Software\Policies\Microsoft\MMC\RestrictAuthorMode
Added:
Software\Policies\Microsoft\MMC\{011BE22D-E453-11D1-945A-00C04FB984F9}\Restr
ict_Run
Added:
Software\Policies\Microsoft\MMC\{1AA7F839-C7F5-11D0-A376-00C04FC9DA04}\Restr
ict_Run
Added:
Software\Policies\Microsoft\MMC\{3CB6973D-3E6F-11D0-95DB-00A024D77700}\Restr
ict_Run
Added:
Software\Policies\Microsoft\MMC\{53D6AB1D-2488-11D1-A28C-00C04FB94F17}\Restr
ict_Run
Added:
Software\Policies\Microsoft\MMC\{58221C65-EA27-11CF-ADCF-00AA00A80033}\Restr
ict_Run
Added:
Software\Policies\Microsoft\MMC\{58221C66-EA27-11CF-ADCF-00AA00A80033}\Restr
ict_Run
Added:
Software\Policies\Microsoft\MMC\{58221C67-EA27-11CF-ADCF-00AA00A80033}\Restr
ict_Run
Added:
Software\Policies\Microsoft\MMC\{5ADF5BF6-E452-11D1-945A-00C04FB984F9}\Restr
ict_Run
Added:
Software\Policies\Microsoft\MMC\{5C659257-E236-11D2-8899-00104B2AFB46}\Restr
ict_Run
Added:
Software\Policies\Microsoft\MMC\{5D6179C8-17EC-11D1-9AA9-00C04FD8FE93}\Restr
ict_Run
Added:
Software\Policies\Microsoft\MMC\{677A2D94-28D9-11D1-A95B-008048918FB1}\Restr
ict_Run
Added:
Software\Policies\Microsoft\MMC\{7478EF61-8C46-11d1-8D99-00A0C913CAD4}\Restr
ict_Run
Added:
Software\Policies\Microsoft\MMC\{753EDB4D-2E1B-11D1-9064-00A0C90AB504}\Restr
ict_Run
Added:
Software\Policies\Microsoft\MMC\{8EAD3A12-B2C1-11d0-83AA-00A0C92C9D5D}\Restr
ict_Run
Added:
Software\Policies\Microsoft\MMC\{8F8F8DC0-5713-11D1-9551-0060B0576642}\Restr
ict_Run
Added:
Software\Policies\Microsoft\MMC\{90087284-d6d6-11d0-8353-00a0c90640bf}\Restr
ict_Run
Added:
Software\Policies\Microsoft\MMC\{95AD72F0-44CE-11D0-AE29-00AA004B9986}\Restr
ict_Run
Added:
Software\Policies\Microsoft\MMC\{A841B6C2-7577-11D0-BB1F-00A0C922E79C}\Restr
ict_Run
Added:
Software\Policies\Microsoft\MMC\{B91B6008-32D2-11D2-9888-00A0C925F917}\Restr
ict_Run
Added:
Software\Policies\Microsoft\MMC\{C9BC92DF-5B9A-11D1-8F00-00C04FC2C17B}\Restr
ict_Run
Added:
Software\Policies\Microsoft\MMC\{D967F824-9968-11D0-B936-00C04FD8D5B0}\Restr
ict_Run
Added:
Software\Policies\Microsoft\MMC\{DEA8AFA0-CC85-11d0-9CE2-0080C7221EBD}\Restr
ict_Run
Added:
Software\Policies\Microsoft\MMC\{E26D02A0-4C1F-11D1-9AA1-00C04FC3357A}\Restr
ict_Run
Added:
Software\Policies\Microsoft\MMC\{E355E538-1C2E-11D0-8C37-00C04FD8FE93}\Restr
ict_Run
Added:
Software\Policies\Microsoft\MMC\{EBC53A38-A23F-11D0-B09B-00C04FD8DCA6}\Restr
ict_Run
Added:
Software\Policies\Microsoft\MMC\{FD57D297-4FD9-11D1-854E-00C04FC31FD3}\Restr
ict_Run
Added: Software\Policies\Microsoft\Windows\CurrentVersion \Internet
Settings\AllowedControls\{D6526FE0-E651-11CF-99CB-00C04FD64497}
Added: Software\Policies\Microsoft\Windows\NetCache\NoCon figCache
Added: Software\Policies\Microsoft\Windows\NetCache\NoMak eAvailableOffline
Added: Software\Policies\Microsoft\Windows\NetCache\NoCac heViewer
Added: Software\Policies\Microsoft\Windows\Network Connections\NC_RasConnect
Added: Software\Policies\Microsoft\Windows\Network Connections\NC_LanConnect
Added: Software\Policies\Microsoft\Windows\Network
Connections\NC_LanProperties
Added: Software\Policies\Microsoft\Windows\Network
Connections\NC_RasMyProperties
Added: Software\Policies\Microsoft\Windows\Network
Connections\NC_RasAllUserProperties
Added: Software\Policies\Microsoft\Windows\Network
Connections\NC_RenameConnection
Added: Software\Policies\Microsoft\Windows\Network
Connections\NC_RenameMyRasConnection
Added: Software\Policies\Microsoft\Windows\Network
Connections\NC_AddRemoveComponents
Added: Software\Policies\Microsoft\Windows\Network
Connections\NC_ChangeBindState
Added: Software\Policies\Microsoft\Windows\Network
Connections\NC_LanChangeProperties
Added: Software\Policies\Microsoft\Windows\Network
Connections\NC_RasChangeProperties
Added: Software\Policies\Microsoft\Windows\Network
Connections\NC_NewConnectionWizard
Added: Software\Policies\Microsoft\Windows\Network
Connections\NC_DialupPrefs
Added: Software\Policies\Microsoft\Windows\Network
Connections\NC_AdvancedSettings
Added: Software\Policies\Microsoft\Windows\Network
Connections\NC_ShowSharedAccessUI
Added: Software\Policies\Microsoft\Windows\Network
Connections\NC_AllowAdvancedTCPIPConfig
Added: Software\Policies\Microsoft\Windows\System\Disable CMD
Exiting MemAppendPolicy
Entered MemAppendPolicy
Nothing to append.
Reading Group Policy Machine Flags from \HKLM\Software\Novell\Workstation
Manager\Group Policies
Reg key Software\Novell\Workstation Manager\Group Policies\Group Policy
Machine Flags not found. Assuming 0
Entered GPCopy(C:\WINNT\System32\GroupPolicy.WksCache,
C:\WINNT\System32\GroupPolicy, 0, handle, 0x0)
Error 3 copying C:\WINNT\System32\GroupPolicy.WksCache\GPT.ini to
C:\WINNT\System32\GroupPolicy\GPT.ini
GP_FLAG_APPLY_USER_SETTINGS (0x20), not set. Will not copy user folder
GP_FLAG_APPLY_COMP_SETTINGS (0x10), not set. Will not copy machine folder
GP_FLAG_APPLY_SECURITY_SETTINGS (0x40), not set, or security file already
copied. Will not copy security file
Error: no files copied.
Exiting GPCopy 0x2
Reading Group Policy User Flags from \HKLM\Software\Novell\Workstation
Manager\Group Policies
Read reg. value Group Policy User Flags: 0x80000060 in key
Software\Novell\Workstation Manager\Group Policies
Entered GPCopy(C:\WINNT\System32\GroupPolicy.UserCache,
C:\WINNT\System32\GroupPolicy, 0, handle, 0x80000060)
Copied C:\WINNT\System32\GroupPolicy.UserCache\GPT.ini to
C:\WINNT\System32\GroupPolicy\GPT.ini
Copied file
C:\WINNT\System32\GroupPolicy.UserCache\User\MICRO SOFT\IEAK\install.ins to
C:\WINNT\System32\GroupPolicy\User\MICROSOFT\IEAK\ install.ins
Copied file C:\WINNT\System32\GroupPolicy.UserCache\User\Regis try.pol to
C:\WINNT\System32\GroupPolicy\User\Registry.pol
GP_FLAG_APPLY_COMP_SETTINGS (0x10), not set. Will not copy machine folder
Copying security file
Copied file
C:\WINNT\System32\GroupPolicy.UserCache\Machine\Mi crosoft\Windows
NT\SecEdit\GptTmpl.inf to
C:\WINNT\System32\GroupPolicy\Machine\Microsoft\Wi ndows
NT\SecEdit\GptTmpl.inf
Copied file
C:\WINNT\System32\GroupPolicy.UserCache\Machine\Mi crosoft\Windows
NT\SecEdit\IPS1.dat to
C:\WINNT\System32\GroupPolicy\Machine\Microsoft\Wi ndows NT\SecEdit\IPS1.dat
Copied file
C:\WINNT\System32\GroupPolicy.UserCache\Machine\Mi crosoft\Windows
NT\SecEdit\IPS2.dat to
C:\WINNT\System32\GroupPolicy\Machine\Microsoft\Wi ndows NT\SecEdit\IPS2.dat
Copied file
C:\WINNT\System32\GroupPolicy.UserCache\Machine\Mi crosoft\Windows
NT\SecEdit\IPS3.dat to
C:\WINNT\System32\GroupPolicy\Machine\Microsoft\Wi ndows NT\SecEdit\IPS3.dat
Exiting GPCopy 0x0
Entered writeData. File: C:\WINNT\System32\GroupPolicy\User\Registry.pol
Exiting writeData 0x0
Entered writeData. File: C:\WINNT\System32\GroupPolicy\Machine\Registry.pol
No data.
Exiting writeData 0x0
Exiting MergeAndSavePolicies 0x0
Entered GenerateGptFile(C:\WINNT\System32\GroupPolicy)
g_dwVersion: 0xc200c1.
Writing GPT Version to \HKLM\Software\Novell\Workstation Manager\Group
Policies
Wrote reg. value 0xc200c1 to GPT Version in key Software\Novell\Workstation
Manager\Group Policies
Exiting GenerateGptFile 0x0
Exiting ApplyGroupPolicy 0x0
Writing Group Policy User Status to \HKLM\Software\Novell\Workstation
Manager\Group Policies
Wrote reg. value 0x2000 to Group Policy User Status in key
Software\Novell\Workstation Manager\Group Policies
Writing Group Policy User Flags to \HKLM\Software\Novell\Workstation
Manager\Group Policies
Wrote reg. value 0x80000060 to Group Policy User Flags in key
Software\Novell\Workstation Manager\Group Policies
Writing Group Policy User Status to \HKLM\Software\Novell\Workstation
Manager\Group Policies
Wrote reg. value 0x3000 to Group Policy User Status in key
Software\Novell\Workstation Manager\Group Policies
Entered AppendSecuritySettings
Inf path: C:\WINNT\System32\GroupPolicy\Machine\Microsoft\Wi ndows
NT\SecEdit\GptTmpl.inf
Dispatching SECEDIT.EXE /configure /DB ZENDB /CFG
"C:\WINNT\System32\GroupPolicy\Machine\Microsoft\W indows
NT\SecEdit\GptTmpl.inf" /log c:\GPSecApp.log.
LoadHive entered
LoadHive exit : 0
Exiting AppendSecuritySettings 0x0
Signalling OS to refresh policies
RegQueryValueEx returned 2
Policies are set to apply asynchronously
Policies will be processed asynchronously
Entered SetGptVersion(0x0, TRUE).
Reading GPT Version from \HKLM\Software\Novell\Workstation Manager\Group
Policies
Read reg. value GPT Version: 0xc200c1 in key Software\Novell\Workstation
Manager\Group Policies
Read file C:\WINNT\System32\GroupPolicy\GPT.ini
Found version 0xc200c1 in gpt.ini
Using version: 0xc200c1
Saving GPT version: 0xc300c2
Writing GPT Version to \HKLM\Software\Novell\Workstation Manager\Group
Policies
Wrote reg. value 0xc300c2 to GPT Version in key Software\Novell\Workstation
Manager\Group Policies
Exiting SetGptVersion 0x0.
Applied Computer Policy.
Applied User Policy.
Exiting ApplyPolicies 0x0
Writing Last Run Time High to \HKLM\Software\Novell\Workstation
Manager\Group Policies
Wrote reg. value 0x1c4c14a to Last Run Time High in key
Software\Novell\Workstation Manager\Group Policies
Writing Last Run Time Low to \HKLM\Software\Novell\Workstation Manager\Group
Policies
Wrote reg. value 0xdd4dad14 to Last Run Time Low in key
Software\Novell\Workstation Manager\Group Policies
Apply user policies releasing mutex.
Exiting WMHelperInteractiveUserEntry ccode: 0x0
Closing log file.
WMHelperInitialization (Sep 22 2003) called! Flags: 0x2001. Event: 0x2000.
Impersonation: 0x1
Opened Mutex.
Loaded userenv.dll
Mapped function RefreshPolicy
Mapped function RegisterGPNotification
Mapped function UnregisterGPNotification
Exiting WMHelperInitialization. Returning flags: 0x11
Entering WMHelperInteractiveUserEntry!
szFullDN = CN=test2006.OU=2006.OU=STUDENTS.O=STJ
DN is Typed convert it to TYPELESS
g_szUserDN = test2006.2006.STUDENTS.STJ
GinaGetUsersSIDInTextualForm ENTERED
Textual SID : S-1-5-21-1908370602-1493435055-278805897-1055
GinaGetUsersSIDInTextualForm EXIT : 0
Writing Don't reparse to \HKLM\Software\Novell\Workstation Manager\Group
Policies
Wrote reg. value 0x0 to Don't reparse in key Software\Novell\Workstation
Manager\Group Policies
Current time high: 0x1c4c14a
Reading Last Run Time High from \HKLM\Software\Novell\Workstation
Manager\Group Policies
Read reg. value Last Run Time High: 0x1c4c14a in key
Software\Novell\Workstation Manager\Group Policies
Previous time high: 0x1c4c14a
Writing Don't reparse to \HKLM\Software\Novell\Workstation Manager\Group
Policies
Wrote reg. value 0x1 to Don't reparse in key Software\Novell\Workstation
Manager\Group Policies
Writing User Logged In to \HKLM\Software\Novell\Workstation Manager\Group
Policies
Wrote reg. value 0x1 to User Logged In in key Software\Novell\Workstation
Manager\Group Policies
Entered CheckForObsoleteWksCache CN=00:0D:60:40:D8:B7.OU=WORKSTATIONS.O=STJ.
Full Object DN
CN=00:0D:60:40:D8:B7.OU=WORKSTATIONS.O=STJ.OU=2006 .OU=STUDENTS.O=STJ
Calling WMGetAllAssociatedObjects(FALSE, MANGO, 1,
CN=00:0D:60:40:D8:B7.OU=WORKSTATIONS.O=STJ.OU=2006 .OU=STUDENTS.O=STJ, WINNT
Workstation Package, zenwmGroupPolicy, 512, pBuffer)
WMGetAllAssociatedObject returned 103
No associated workstation policies. Deleting
C:\WINNT\System32\GroupPolicy.WksCache.
DeleteGPRegVal: Error 0x2 deleting Group Policy Machine Flags
DeleteGPRegVal: Error 0x2 deleting Group Policy Machine Status
Exiting CheckForObsoleteWksCache 103
Applying user policies
Reading Don't reparse from \HKLM\Software\Novell\Workstation Manager\Group
Policies
Read reg. value Don't reparse: 0x1 in key Software\Novell\Workstation
Manager\Group Policies
Reading Group Policy User Status from \HKLM\Software\Novell\Workstation
Manager\Group Policies
Read reg. value Group Policy User Status: 0x3000 in key
Software\Novell\Workstation Manager\Group Policies
Read reg. key Group Policy User Status: 0x3000
Policy applied at predesktop. Skipping reapplication at user login.
Writing Don't reparse to \HKLM\Software\Novell\Workstation Manager\Group
Policies
Wrote reg. value 0x0 to Don't reparse in key Software\Novell\Workstation
Manager\Group Policies
Writing Last Run Time High to \HKLM\Software\Novell\Workstation
Manager\Group Policies
Wrote reg. value 0x1c4c14a to Last Run Time High in key
Software\Novell\Workstation Manager\Group Policies
Writing Last Run Time Low to \HKLM\Software\Novell\Workstation Manager\Group
Policies
Wrote reg. value 0xe0da0d06 to Last Run Time Low in key
Software\Novell\Workstation Manager\Group Policies
Apply user policies releasing mutex.
Exiting WMHelperInteractiveUserEntry ccode: 0x0
Closing log file.

Paul,
It appears that in the past few days you have not received a response to your posting. That concerns us, and has triggered this automated reply.
Has your problem been resolved? If not, you might try one of the following options:
- Do a search of our knowledgebase at http://support.novell.com/search/kb_index.jsp
- Check all of the other support tools and options available at http://support.novell.com in both the "free product support" and "paid product support" drop down boxes.
- You could also try posting your message again. Make sure it is posted in the correct newsgroup. (http://support.novell.com/forums)
If this is a reply to a duplicate posting, please ignore and accept our apologies and rest assured we will issue a stern reprimand to our posting bot.
Good luck!
Your Novell Product Support Forums Team
http://support.novell.com/forums/

Group Policies on WinXP

Hi everyone,
Im having an issue where group policies stop working on XP machines.
They stop working all together after a certain time. Below is a debug
log for the group policy update.
I've ran through TID
http://support.novell.com/cgi-bin/se...?/10073744.htm
and still no luck.
---------BEGIN DEBUG FILE------------------
WMHelperInitialization (Sep 22 2003) called! Flags: 0x2. Event: 0x0.
Impersonation: 0x2
Opened Mutex.
Loaded userenv.dll
Mapped function RefreshPolicy
Mapped function RegisterGPNotification
Mapped function UnregisterGPNotification
Mapped function RefreshPolicyEx
Exiting WMHelperInitialization. Returning flags: 0x204
WMHelperSystemEntryEx called!
Computer Object : CN=ALyle220_30_3_114.OU=Management.OU=MEL.O=KFA
User Object : CN=ALyle.OU=MEL.O=KFA
Entry Flags : 0x200
Event Flags : 0x0
DN is Typed convert it to TYPELESS
User logged in.
Writing User Logged In to \HKLM\Software\Novell\Workstation
Manager\Group Policies
Wrote reg. value 0x1 to User Logged In in key
Software\Novell\Workstation Manager\Group Policies
Reading User Logged In from \HKLM\Software\Novell\Workstation
Manager\Group Policies
Read reg. value User Logged In: 0x1 in key Software\Novell\Workstation
Manager\Group Policies
Applying computer policies.
Entering ApplyPolicies
Reading Group Policy Machine Flags from
\HKLM\Software\Novell\Workstation Manager\Group Policies
Reg key Software\Novell\Workstation Manager\Group Policies\Group Policy
Machine Flags not found. Assuming 0
Reg key Group Policy Machine Flags not found. Assuming 0
Reading Group Policy Machine Status from
\HKLM\Software\Novell\Workstation Manager\Group Policies
Read reg. value Group Policy Machine Status: 0x1000 in key
Software\Novell\Workstation Manager\Group Policies
Read reg. key Group Policy Machine Status: 0x1000
Writing Group Policy Machine Status to
\HKLM\Software\Novell\Workstation Manager\Group Policies
Wrote reg. value 0x1000 to Group Policy Machine Status in key
Software\Novell\Workstation Manager\Group Policies
Context : OU=Management.OU=MEL.O=KFA
Full Object DN
CN=ALyle220_30_3_114.OU=Management.OU=MEL.O=KFA.OU =Management.OU=MEL.O=KFA
Calling WMGetAllAssociatedObjects(FALSE, KNIGHT-FRANK, 2,
CN=ALyle220_30_3_114.OU=Management.OU=MEL.O=KFA.OU =Management.OU=MEL.O=KFA,
WINNT Workstation Package, zenwmGroupPolicy, 512, pBuffer)
Error 0x 67 calling WMGetAllAssociatedObjects.
Exiting ApplyPolicies 0x67
Apply computer policies releasing mutex.
Exiting WMHelperSystemEntryEx ccode: 0x67
Closing log file.
----------------- END DEBUG FILE ----------------
Any help would be appreciated. I'm racking my brain here.
Thanks
Russell

> Any help would be appreciated. I'm racking my brain here.
The only issue I know of if this is WinXP *SP2*.
If it's not, you can stop read here, because
then I'm lost :-(
*If* it's WinXP SP2, it's not supported at
all with ZENworks 3.x:
http://support.novell.com/cgi-bin/se...?/10092958.htm
"Novell ZENworks for Desktops 3.2 is not supported on XP SP2."
Furthermore, with other versions of ZEN there is a particular
issue with Group Policies when upgrading from WinXP SP1:
http://support.novell.com/cgi-bin/se...?/10095342.htm
Regards
Rolf Lidvall
Swedish Radio (Ltd)
NSC SysOp

Using Win2000 Group Policies to distribute runtime engine

I have a Win2000 domain and would like to distribute the 7.1 runtime engine using Group Policies for a group of computers in the domain. I created the policy called LVRuntime and tried to add the 7.1 runtime MSI file to the policy under ComputerConfiguration\SoftwareSettings\SoftwareInstallation however I get the error message:
"Add Operation Failed. Unable to extract the deployment information from the package. Run validation on the package to ensure the package is correct."
MS has an article on this if the package is already installed on the system or if you are using a GPO of a different version, but neither are the case. I am creating the policy right on the Domain Controller just as I have many other policies like it.

Hi Jordan,
The MSI deployment through group policies is not supported for LabVIEW RTE. Although MSI is used as the outer layer, we use our own technology inside.
Regards,
Ankita A.
National Instruments

How to configure group policy for emet via a command line

I have been tasked with installing emet on 50 servers that I only have access to with our patching server (so I can't remote in and open the gpedit gui). I can get it to install, but now the problem that I'm facing is I need to enable 6 of the group policies
for emet. Is there a way to do this while installing it? or a way to do it after the install?

cmd line you need to deal with is in the C:\Program Files (x86)\EMET 4.1 folder
specifically emet_conf --refresh would tell the systems to pull in the settings from a GPO they have already applied.
In a non - SCCM environment I would probably recommend using group policy preferences and create a task scheduler item on your servers that runs emet_conf --import
\\fileserver\settingsfile.xml on some sort of automated basis. Then you can just configure a client like you need and run the emet_conf --export
\\fileserver\settingsfile.xml whenever you need to change a mitigation etc and the clients will pick up on the change on their next run of the task scheduler item.
In general installing on servers isn't a great idea and is not the intended use case for emet however if you are DoD/Gov then DISA has mandated it so won't argue there. There's also the people that still have Internet access from servers so then it
would make sense in that environment as well.
CSS Security Support Engineer (FCS/MBSA/WUA/Incident Response/FOPE) Check out my blog http://blogs.technet.com/kfalde or better yet check out http://technet.com/wiki and start contributing :)

How can I configure FireFox security setting globally for all users on a PC? Is there something I can do in group policies or throught the registry to insure all users have the same settings?

Our Bank's core processor has rewritten their product to run in a web browser. Their browser of choice is Firefox 3.6. The specifications from our core processor specify specific security and settings parameters that must be adhered to by all users for their product to run properly. Is there a way to globally configure these settings via the registry or group policies to insure everyone who logs in to a given workstation opens Firefox with the same settings? Thank you for any assistance you can provide - Steve Gish, First Bank Kansas.
== User Agent ==
Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)

You can try:
*http://kb.mozillazine.org/Locking_preferences

Group Policies for OS X users

Similar Messages

Maybe you are looking for