Group Policy Administrative Templates not applying on Windows XP SP3 - Windows Server 2008 R2

I have a Windows 2008 R2 domain with windows 7, and Windows XP SP3 client workstations.
I have a group policy to deny all access to removable storage in policies/administrative templates/system in user configuration (actually its in the computer configuration as well)
The problem is the policy is having no effect on the Windows XP machines. It works perfectly on Windows 7 machines.
Group policy in general is working on the Windows XP machines, as I can successfully map drives, push out scheduled tasks, and push out printers. (All preferences I know and I have GP Preferences client side extensions installed).
Its almost like the windows XP machines can't "understand" the admin templates from Windows Server 2008 R2.
Do I need to install something on the windows XP machines? What could be the problem?

> Its almost like the windows XP machines can't "understand" the admin
> templates from Windows Server 2008 R2.
Simply read the "supported on" of these settings... Vista and above
required.
Martin
Mal ein
GUTES Buch über GPOs lesen?
NO THEY ARE NOT EVIL, if you know what you are doing:
Good or bad GPOs?
And if IT bothers me - coke bottle design refreshment :))

Similar Messages

The user '*' preference item in the 'User - 6th Form Students Policy {E03166E7-A848-48B5-AA93-97B848AA9C13}' Group Policy object did not apply because it failed with error code '0x80070003 The system cannot find the path specified.' This error was suppres

I am looking at an issue with users not getting specific group policies.
After searching a number of client computers I found that the following error
The user '*' preference item in the 'User - 6th Form Students Policy {E03166E7-A848-48B5-AA93-97B848AA9C13}' Group Policy object did not apply because it failed with error code '0x80070003 The system cannot find the path specified.' This error was suppressed.
I can find the folder in the Sysvol folder on all of the domain controllers.
The issue with end users seems to be that the proxy settings for internet explorer is not being applied.
Potential problems?
one folder in sysvol entry is empty
\\<server>\SYSVOL\<domain.name>\Policies\{E03166E7-A848-48B5-AA93-97B848AA9C13}\User\microsoft\IEAK\LOCK
or is this our issue
The old method of configuring proxy settings to Internet Explorer 9 has changed?
https://support2.microsoft.com/kb/2530309?wa=wsignin1.0
http://thommck.wordpress.com/2013/11/08/the-new-way-to-configure-internet-explorer-proxy-settings-with-group-policy/

Hi all
In administering this policy I am a little confused.
We have a policy that distributes proxy settings in the internet explorer maintenance settings section - however when opening this policy up in GPO editor the internet explorer maintenance section is not present.
I plan to apply the settings via User/preferences/control panel settings/ internet settings (or registry settings from article) however I am unable to edit the settings for internet explorer maintenance and these will persist. Ideas????

Group Policy for Desktop background applied but showing black desktop in the client end

Trying to set wallpaper in group policy but it's coming up blank.We have windows 2008 and 2012 server.most of the computer is windows 7.

Hi,
Does this issue occur to all computers?
Besides, can the users access the wallpaper?
If this issue just happens to Windows 7, we can try applying the hotfix in the following article.
The "Desktop Wallpaper" Group Policy setting is not applied in Windows 7 or in Windows Server 2008 R2
http://support.microsoft.com/kb/977944/en-us
If the issue persists, we can refer to the following thread to troubleshoot the problem.
Black Desktop wall paper after implementing group policy
http://social.technet.microsoft.com/Forums/windowsserver/en-US/0c36d7bf-4694-46e1-b408-d644111c0264/black-desktop-wall-paper-after-implementing-group-policy?forum=winserverGP
Best regards,
Frank Shen

Folder Redirection policy is not applied to a user, when the server target is changed, but works after resetting the windows profile.

Folder Redirection policy is not applied to a user, when the server target is changed.
After server target is changed via group policy, when user login (roaming profile)first time, the the new server target has not been applied, instead it's pointing to the old folder redirection path.
But if we reset the windows profile (roaming ), the new folder redirection works, can you please specify a solutions that the new folder redirection works when the user login for the first time. so it reduce the time on resetting users profile.
it seems that we need to delete the old folder redirection path from the user profile (roaming user profile) via group policy or similar solutions..
Many Thanks

> But when the specific users login they all get the same error, it
Is the old server removed from the domain? Seems so - or some other
authentication related issue, hard to tell from here...
> seems that the roaming user profiles still keeps the old server details,
Yes - if you change redirection targets, FR moves content from old to
new, and only if this ends sucessfully, it will update the redirection
target.
Make the old redirection target accessible to the user and you'll be fine.
Martin
Mal ein
GUTES Buch über GPOs lesen?
NO THEY ARE NOT EVIL, if you know what you are doing:
Good or bad GPOs?
And if IT bothers me - coke bottle design refreshment :))

Windows 10 Group Policy (.ADMX) Templates now available for download

Windows 10 Group Policy (.ADMX) Templates now available for download Just to let you all know that we have released the Windows 10 Group Policy (.ADMX) templates on our download center as an MSI installer package. These .ADMX templates are released as a separate download package so you can manage group policy for Windows 10 clients more easily. This new package includes additional (.ADMX) templates which are not included in the RTM version of Windows 10. DeliveryOptimization.admxfileservervssagent.admxgamedvr.admxgrouppolicypreferences.admxgrouppolicy-server.admxmmcsnapins2.admxterminalserver-server.admxtextinput.admxuserdatabackup.admxwindowsserver.admxTo download the Windows 10 Group Policy (.ADMX) templates, please visit http://www.microsoft.com/en-us/download/details.aspx?id=48257 To review which settings are new in Windows 10,...
This topic first appeared in the Spiceworks Community

Rubicon Project is the operator of one of the advertising industry’s largest independent real-time trading platforms for digital advertising, and has engineered one of the largest real-time cloud and Big Data computing systems, processing trillions of transactions within milliseconds each month. The company’s pioneering technology created a new model for the advertising industry—similar to what NASDAQ did for stock trading. Rubicon Project’s automated advertising platform is used by more than 500 of the world’s premium publishers to transact with over 100,000 ad brands globally. To meet their expanding communications requirements, Rubicon Project selected 8x8 to provide 8x8 Virtual Office business VoIP, unified communications and mobile solutions to its nine international locations.8x8’s cloud-based telephony solutions enabled Rubicon...

Adobe Reader & Acrobat 6~9 Group Policy ADM file (only applied once?)

Hi folks. I created the below ADM template last month based on some of the ones I have seen elsewhere. I import the ADM file to use with Group Policy and make the necessary settings (need to uncheck "Only show policy settings that can be fully managed" to see it in GPO Editor).
Anyway, when the user logs on it stamps them with the desired registry setting (bEnableJS value 0). Yay! But I notice that if a user re-enables JavaScript in Adobe Reader/Acrobat and then logs off and back on again (reboot or logoff/on) the registry setting does not get re-applied. All other pre-existing Group Policies get applied and doing a gpresult or rsop.msc has everything looking as though it did get applied.
I notice that if I manually do a "gpupdate /force" to a logged on system the setting appears to be reapplied (need to reconfirm this though). Has anyone expierienced similar with their ADM templates for this? Perhaps I am missing something? Appreciate any help/advice.
; Administrative Template to enable/disable Javascript of Adobe Acrobat/Reader 6.x~9.x
; Version 1.0
; 2010/1/22
CLASS USER
CATEGORY !!Adobe_Acrobat_Reader_6-9
    POLICY !!JavaScript_Reader_9.x
    EXPLAIN !!JavaScript_Reader_9.x_help
        KEYNAME "Software\Adobe\Acrobat Reader\9.0\JSPrefs"
        PART "Enable/Disable JavaScript:" DROPDOWNLIST
            VALUENAME "bEnableJS"
        ITEMLIST
            NAME !!JavaScript_Enabled VALUE NUMERIC 1
            NAME !!JavaScript_Disabled VALUE NUMERIC 0 DEFAULT
        END ITEMLIST
        REQUIRED
        END PART
    END POLICY
    POLICY !!JavaScript_Acrobat_9.x
    EXPLAIN !!JavaScript_Acrobat_9.x_help
        KEYNAME "Software\Adobe\Adobe Acrobat\9.0\JSPrefs"
        PART "Enable/Disable JavaScript:" DROPDOWNLIST
            VALUENAME "bEnableJS"
        ITEMLIST
            NAME !!JavaScript_Enabled VALUE NUMERIC 1
            NAME !!JavaScript_Disabled VALUE NUMERIC 0 DEFAULT
        END ITEMLIST
        REQUIRED
        END PART
    END POLICY
    POLICY !!JavaScript_Reader_8.x
    EXPLAIN !!JavaScript_Reader_8.x_help
        KEYNAME "Software\Adobe\Acrobat Reader\8.0\JSPrefs"
        PART "Enable/Disable JavaScript:" DROPDOWNLIST
            VALUENAME "bEnableJS"
        ITEMLIST
            NAME !!JavaScript_Enabled VALUE NUMERIC 1
            NAME !!JavaScript_Disabled VALUE NUMERIC 0 DEFAULT
        END ITEMLIST
        REQUIRED
        END PART
    END POLICY
    POLICY !!JavaScript_Acrobat_8.x
    EXPLAIN !!JavaScript_Acrobat_8.x_help
        KEYNAME "Software\Adobe\Adobe Acrobat\8.0\JSPrefs"
        PART "Enable/Disable JavaScript:" DROPDOWNLIST
            VALUENAME "bEnableJS"
        ITEMLIST
            NAME !!JavaScript_Enabled VALUE NUMERIC 1
            NAME !!JavaScript_Disabled VALUE NUMERIC 0 DEFAULT
        END ITEMLIST
        REQUIRED
        END PART
    END POLICY
    POLICY !!JavaScript_Reader_7.x
    EXPLAIN !!JavaScript_Reader_7.x_help
        KEYNAME "Software\Adobe\Acrobat Reader\7.0\JSPrefs"
        PART "Enable/Disable JavaScript:" DROPDOWNLIST
            VALUENAME "bEnableJS"
        ITEMLIST
            NAME !!JavaScript_Enabled VALUE NUMERIC 1
            NAME !!JavaScript_Disabled VALUE NUMERIC 0 DEFAULT
        END ITEMLIST
        REQUIRED
        END PART
    END POLICY
    POLICY !!JavaScript_Acrobat_7.x
    EXPLAIN !!JavaScript_Acrobat_7.x_help
        KEYNAME "Software\Adobe\Adobe Acrobat\7.0\JSPrefs"
        PART "Enable/Disable JavaScript:" DROPDOWNLIST
            VALUENAME "bEnableJS"
        ITEMLIST
            NAME !!JavaScript_Enabled VALUE NUMERIC 1
            NAME !!JavaScript_Disabled VALUE NUMERIC 0 DEFAULT
        END ITEMLIST
        REQUIRED
        END PART
    END POLICY
    POLICY !!JavaScript_Reader_6.x
    EXPLAIN !!JavaScript_Reader_6.x_help
        KEYNAME "Software\Adobe\Acrobat Reader\6.0\JSPrefs"
        PART "Enable/Disable JavaScript:" DROPDOWNLIST
            VALUENAME "bEnableJS"
        ITEMLIST
            NAME !!JavaScript_Enabled VALUE NUMERIC 1
            NAME !!JavaScript_Disabled VALUE NUMERIC 0 DEFAULT
        END ITEMLIST
        REQUIRED
        END PART
    END POLICY
    POLICY !!JavaScript_Acrobat_6.x
    EXPLAIN !!JavaScript_Acrobat_6.x_help
        KEYNAME "Software\Adobe\Adobe Acrobat\6.0\JSPrefs"
        PART "Enable/Disable JavaScript:" DROPDOWNLIST
            VALUENAME "bEnableJS"
        ITEMLIST
            NAME !!JavaScript_Enabled VALUE NUMERIC 1
            NAME !!JavaScript_Disabled VALUE NUMERIC 0 DEFAULT
        END ITEMLIST
        REQUIRED
        END PART
    END POLICY
END CATEGORY
[strings]
Adobe_Acrobat_Reader_6-9="Adobe Acrobat and Reader 6 to 9"
JavaScript_Reader_9.x="JavaScript Adobe Reader 9.x"
JavaScript_Reader_9.x_help="Enable/Disable JavaScript in Adobe Reader 9.x"
JavaScript_Acrobat_9.x="JavaScript Adobe Acrobat 9.x"
JavaScript_Acrobat_9.x_help="Enable/Disable JavaScript in Acrobat Acrobat 9.x"
JavaScript_Reader_8.x="JavaScript Adobe Reader 8.x"
JavaScript_Reader_8.x_help="Enable/Disable JavaScript in Adobe Reader 8.x"
JavaScript_Acrobat_8.x="JavaScript Adobe Acrobat 8.x"
JavaScript_Acrobat_8.x_help="Enable/Disable JavaScript in Acrobat Acrobat 8.x"
JavaScript_Reader_7.x="JavaScript Adobe Reader 7.x"
JavaScript_Reader_7.x_help="Enable/Disable JavaScript in Adobe Reader 7.x"
JavaScript_Acrobat_7.x="JavaScript Adobe Acrobat 7.x"
JavaScript_Acrobat_7.x_help="Enable/Disable JavaScript in Acrobat Acrobat 7.x"
JavaScript_Reader_6.x="JavaScript Adobe Reader 6.x"
JavaScript_Reader_6.x_help="Enable/Disable JavaScript in Adobe Reader 6.x"
JavaScript_Acrobat_6.x="JavaScript Adobe Acrobat 6.x"
JavaScript_Acrobat_6.x_help="Enable/Disable JavaScript in Acrobat Acrobat 6.x"
JavaScript_Enabled="JavaScript Enabled"
JavaScript_Disabled="JavaScript Disabled"

Hey, what you have described is normal behaviour for the way you have written your Custom ADM file.
Because you are not using Proper Windows Policies, i.e. Setting them in the policy location in the registry, then once you apply a setting, it will not get over written again ever unless you made a group policy change or do a gpupdate.
Normal group policies will get re-applied depending on the time frame set in the policy its self.

Policy within template not appearing in RSOP

Hi folks,
I have a policy within a template.
The Policy is:..
Administrative Templates
Control Panel/Display/Desktop
Themes
Policy
Setting
Load a specific visual style file or force Windows Classic
Disabled
When I link the template containing this entry, the setting is applied and appears in RSOP.
When I link another 2nd policy (which is link order 1, the above one link order 2), the above setting disappears from the RSOP when both policies are applied.
I can confirm, there is NO such entry in the other policy. In fact, there is no settings at all for Control Panel/Display/Desktop Themes category. Therefore, I would expect the above setting to still get applied, along with the other settings in the
other policy, but it is not.
Does anybody have any ideas? It looks like it is getting swallowed somehow. I thought the two policy templates would be merged, flattened and applied, and it looks like this is not the case.
How can I troubleshoot this. Again I have attempted to link the first template, and the setting is visible in RSOP. its only when I link the second one is when the setting disappears from RSOP.
thanks.

Hi,
You can also confirm the GPO settings applied using gpresult command.
Checkout the below link for blog on how GPO settings are applied,
http://blogs.technet.com/b/musings_of_a_technical_tam/archive/2012/02/15/understanding-the-structure-of-a-group-policy-object-part-2.aspx
Regards,
Gopi
www.jijitechnologies.com

Group Policy isn't entirely applied to desktop

I have 2 different configuration machine. The Group Policy is applied succesfully to the old machine. However it is not entirely applied for the new configuration machine. In this case the Internet Explorer Favorites and Personal are not directed to the user home folder.
The desktop is actually the same, Dell Optiplex 260. The old configuration is Windows XP SP2 with Novell Client 4.1 SP5 and Zenwork 7. The new configuration is using Windows XP SP3, Novell Client 4.1 SP5 and Zenwork 7 SP1. The new configuration machine is mainly fresh install of Windows XP with updated software.
The machine with 2 configuration will using the same Group Policy.
The problem when look at the Group Policy that is stored under SYS\Public\Zenwork\Policies, I can't find anything there to redirect the Favorites folder to user home directory or %USERPROFILE% point to Home Directory. ConsoleOne had been checked for hundreds time for User Package, Workstation Package.
Why the machine with the old configuration can redirect the Favorited folder to the user home directory after successful login, but not for the machine with the new configuration.
We don't set the redirection Favorites folder in the Registry key. We also don't tocuh the local Group Policy.
Am I missing something here?

Well, maybe something in the old image itself was doing the redirection if
you don't see redirection defined in the GPO.
Have you tried adding the Redirection settings into the GPO?
Craig Wilson - MCNE, MCSE, CCNA
Novell Support Forums Volunteer Sysop
Novell does not officially monitor these forums.
Suggestions/Opinions/Statements made by me are solely my own.
These thoughts may not be shared by either Novell or any rational human.
"arsyl" <[email protected]> wrote in message
news:[email protected]...
>
> I have 2 different configuration machine. The Group Policy is applied
> succesfully to the old machine. However it is not entirely applied for
> the new configuration machine. In this case the Internet Explorer
> Favorites and Personal are not directed to the user home folder.
>
> The desktop is actually the same, Dell Optiplex 260. The old
> configuration is Windows XP SP2 with Novell Client 4.1 SP5 and Zenwork
> 7. The new configuration is using Windows XP SP3, Novell Client 4.1 SP5
> and Zenwork 7 SP1. The new configuration machine is mainly fresh install
> of Windows XP with updated software.
>
> The machine with 2 configuration will using the same Group Policy.
>
> The problem when look at the Group Policy that is stored under
> SYS\Public\Zenwork\Policies, I can't find anything there to redirect the
> Favorites folder to user home directory or %USERPROFILE% point to Home
> Directory. ConsoleOne had been checked for hundreds time for User
> Package, Workstation Package.
>
> Why the machine with the old configuration can redirect the Favorited
> folder to the user home directory after successful login, but not for
> the machine with the new configuration.
>
> We don't set the redirection Favorites folder in the Registry key. We
> also don't tocuh the local Group Policy.
>
> Am I missing something here?
>
>
> --
> arsyl
> ------------------------------------------------------------------------
> arsyl's Profile: http://forums.novell.com/member.php?userid=42224
> View this thread: http://forums.novell.com/showthread.php?t=383528
>

Group Policy - Security Templates?

Evening all,
I hope someone would be able to give me some advice on the best way of setting this group policy up for a production system.
1. I have a group called 'Team Users' - this group is a global security group and the members of this group are in the companys HR department.
2. We have just set some brand new servers up with Windows Servers 2012 R2 installed and the application has been installed correctly on to the D:. - We like to keep it so that the C: is strictly Operating System only.
3. On the D: we have the following folder structure:
- Install
- Application
- Program Files
What I want to do is set it up so that this group 'Team Users' can log on to the server but only be able to modify anything in the Application folder. We don't want them to have any modify access to any other folders on the D:
This team have a previous history of having access to the C: and dragging and dropping files / folders on to the C: in certain locations. I don't want this to happen again. What is the best way of stopping the users from doing this without stopping the drive
from working or affecting the Application?
Are there any Microsoft guides or recommendations in regards to giving end users access to log on to servers etc?

this doesn't seem to be a GP specific question, in that you seem to want to restrict the user-level access to volumes/folders/files, either by access permissions or by quota ? (neither of which are really possible using GP)
you might use GP to perform folder redirection, i.e. to redirect the users "my documents" etc away from storing on C:, and instead store them on D:, perhaps D:\userdata ?
by default, user account would not be added into the Administrators group of the server, which will natively restrict those accounts from placing files into System folders.
you would also take steps to ensure that these users are not granted nor would they inherit permissions to create folders/files on D:\ (except for the explicit folders you mentioned above.
if you grant these users read/write/modify permissions to D:\Application, that won't stop those users from filling up D: with content in the D:\Application folder, so you might want to consider quotas.
The FSRM feature might be useful to you for that.
Don
(Please take a moment to "Vote as Helpful" and/or "Mark as Answer", where applicable.
This helps the community, keeps the forums tidy, and recognises useful contributions. Thanks!)

Email Address Policy (EAP) - "Do Not Apply" characteristics

I'll be updating an existing email address policy and to manage the impact of making this change i will be selecting "Do Not Apply" on the scheduling page.   I understand that this configuration will enable the updated policy
to be applied to newly created recipients and existing recipients that have one or more attributes changed.   I have been searching the web but have been unable to identity what attribute change(s) would result in the reasssessment of a recipients'
email address policy.   Can you direct me to some microsoft documentation which identifies what exactly triggers this reassessment for an individual recipient?

Albert your post is very helpful. After reading your post and both articles a few things are clarified...
1. EAP is reapplied if either Exchange Management Shell or Exchange Management Console are used to initiate a change to recipient(s). (From Blog)
2. When an email address policy is modified and saved, all associated recipients are updated with the change. (From Technet)
With this information the following should be true when an EAP is updated and "Do Not Apply" is selected.
An existing recipient will not have their EAP reevaluated unless EMC or EMS is used to update that recipient, or if an administrator manually forces a reevaluation for all users.
New recipients will evaluate EAPs and have the appropriate EAP applied during provisioning.
Modifying attributes using tools other than the two mentioned above will not trigger an reevaluation and subsequent association of a policy with a recipient.
Using EMS and EMC to modify recipients triggers some process that results in a reevaluation and enforcement of EAPs associated with the modified recipient.
The gist of these finding for me is that I can use non Exchange tools to update AD and EAP reevaluation will not be triggered. I'll do some testing to confirm, but i think that this heads me in the right direction.
Thank you!

Group Policy Helper tool not working properly

Hello,
I`m using IE 9 on a x64 Win 7 enterprise PC with ZCM 10.3.4.
When Im logging into ZCC and start to configure a "windows group policy" the group policy helper tool starts and begins to download the policy.
Then the gpedit.msc appears i get the popup "group policy settings imported successfully" immediately. This popup should certainly come up, when i close the gpedit.msc to import the changed policy setting.
But so i always get an empty policy for upload.
Any hints what`s wrong with it?!

Originally Posted by andreas_karl
Hello,
I`m using IE 9 on a x64 Win 7 enterprise PC with ZCM 10.3.4.
When Im logging into ZCC and start to configure a "windows group policy" the group policy helper tool starts and begins to download the policy.
Then the gpedit.msc appears i get the popup "group policy settings imported successfully" immediately. This popup should certainly come up, when i close the gpedit.msc to import the changed policy setting.
But so i always get an empty policy for upload.
Any hints what`s wrong with it?!
IE 9 is not supported, you need to stay on IE8 until 11.2 is released (15 march).
Thomas

"Group Policy Service & Permission Problems" I Will Never Buy Microsoft Windows Computers Again..

I am trying to get some last bit of use out of my Worthless Microsoft Windows Software.. I have spent more time attempting to make this worthless junk work, than I ever get using the computer for what it is designed for.. Both My Windows 7 Pro,
and my Windows 8.1 are the worst products Microsoft has come out with ever.. I started out using Punch Card Machines, in the 70's that worked better than the junk Microsoft is selling us today.. The last 13 computers I have purchased with Windows software
are all in the dumpster. Their tech support is worthless, and half the time you get sent from one phone number to another, and no one knows anything.. I have purchased two sets of software from Microsoft store that have turned out to be Non-Genuine, I paid
full price for, have receipts of sales, dates, validation key numbers, and still spend three days in a row trying to explain to the other end that my software they sold me is shit, and no one understands.. And on top of that will not give me a e-mail address
to send them a copy of the proof of purchase to them for my file, and to prove to them they are selling shit, and they will not give me a address to send them their problems plagued software.. I have three sets of software that i downloaded,
and had disk sent as backups that have bad validation keys, and Microsoft will not honer their sales, and will not give me keys that work..
If it dose finally work, I can not get the "Diagnostic Policy Service" to start, this online troubleshooting will not work, never has worked on windows 8, nor have I ever had any sound on the same computer, nor has my Windows Media
Player ever worked either.. Both Win 7 Pro, and Win 8.1 Group Policy will not let me download anything on the C-drive that can possibly repair what is wrong with the Crap at hand, Their my computers, but I have no permission to do a goddamn thing to repair
what is wrong with it,,I do not want to read another fucking article on tech shit, I want to know how to delete "Group Policy" from every machine I have, because its only purpose I see it to keep me from using my machine , and forcing me to have
to sit on hold and listen to those idiots on the other end just say its another 99 bucks to fix something that I have already given them 99 bucks several times before to fix nothing.. WTF, I was never a fan of Bill Gates, but today he looks like a genius compared
to who/what is working there today.. Dose this happen to everyone, or am I just jinxed? Can someone give me a patch or something besides another article to make this shit work.. Thanks, Barnstormer2790

Wouldn't think anyone wants to help you at all with that attitude - Microsoft products work just great for me.
perhaps you should look closer to home for the issues you have!! Im Out!!!!

Having problem with svchost.exe/ntdll.dll errors causing GPSVC (Group Policy Client) to crash preventing users from logging into the server.

Recently (within the past 2 weeks) I have noticed a few of our servers will have problems with the svchost.exe application causing the GPSVC (Group Policy Client) to crash. The only fix at that point is to reboot the server since the GPSVC service is tied
to svchost.exe and therefore is protected from being manually restarted.
I noticed the following errors when this occurs:
Log Name: Application
Source: Application Error
Date: 7/23/2013 4:35:26 AM
Event ID: 1000
Task Category: (100)
Level: Error
Keywords: Classic
User: N/A
Computer: Server1.xxx.xxx.net
Description:
Faulting application name: svchost.exe, version: 6.1.7600.16385, time stamp: 0x4a5bc3c1
Faulting module name: ntdll.dll, version: 6.1.7601.17725, time stamp: 0x4ec4aa8e
Exception code: 0xc0000024
Fault offset: 0x00000000000cd7d8
Faulting process id: 0x46c
Faulting application start time: 0x01ce877f9476ac07
Faulting application path: C:\Windows\system32\svchost.exe
Faulting module path: C:\Windows\SYSTEM32\ntdll.dll
Report Id: d252d26d-f372-11e2-8ad4-005056ac00e8
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Application Error" />
<EventID Qualifiers="0">1000</EventID>
<Level>2</Level>
<Task>100</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2013-07-23T08:35:26.000000000Z" />
<EventRecordID>158950</EventRecordID>
<Channel>Application</Channel>
<Computer>AAW19XM2.agency.nwie.net</Computer>
<Security />
</System>
<EventData>
<Data>svchost.exe</Data>
<Data>6.1.7600.16385</Data>
<Data>4a5bc3c1</Data>
<Data>ntdll.dll</Data>
<Data>6.1.7601.17725</Data>
<Data>4ec4aa8e</Data>
<Data>c0000024</Data>
<Data>00000000000cd7d8</Data>
<Data>46c</Data>
<Data>01ce877f9476ac07</Data>
<Data>C:\Windows\system32\svchost.exe</Data>
<Data>C:\Windows\SYSTEM32\ntdll.dll</Data>
<Data>d252d26d-f372-11e2-8ad4-005056ac00e8</Data>
</EventData>
</Event>
All of our servers are running Server 2008 R2 Enterprise where we use Citrix to deliver desktop sessions to our users, but some are virtual and some are physical. This seemingly impacts our virtual machines more, and our VMs are hosted through VMWare, however,
about 5 months ago a similar error fired on a non-virtual machine:
Log Name: Application
Source: Application Error
Date: 2/27/2013 6:57:58 AM
Event ID: 1000
Task Category: (100)
Level: Error
Keywords: Classic
User: N/A
Computer: AAW29033
Description:
Faulting application name: svchost.exe_gpsvc, version: 6.1.7600.16385, time stamp: 0x4a5bc3c1
Faulting module name: ntdll.dll, version: 6.1.7601.17725, time stamp: 0x4ec4aa8e
Exception code: 0xc0000024
Fault offset: 0x00000000000cd7d8
Faulting process id: 0x6c0
Faulting application start time: 0x01ce14e1af313fd9
Faulting application path: C:\Windows\system32\svchost.exe
Faulting module path: C:\Windows\SYSTEM32\ntdll.dll
Report Id: ed3d01c4-80d4-11e2-9128-b499baa9e5e8
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Application Error" />
<EventID Qualifiers="0">1000</EventID>
<Level>2</Level>
<Task>100</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2013-02-27T11:57:58.000000000Z" />
<EventRecordID>286291</EventRecordID>
<Channel>Application</Channel>
<Computer>AAW29033</Computer>
<Security />
</System>
<EventData>
<Data>svchost.exe_gpsvc</Data>
<Data>6.1.7600.16385</Data>
<Data>4a5bc3c1</Data>
<Data>ntdll.dll</Data>
<Data>6.1.7601.17725</Data>
<Data>4ec4aa8e</Data>
<Data>c0000024</Data>
<Data>00000000000cd7d8</Data>
<Data>6c0</Data>
<Data>01ce14e1af313fd9</Data>
<Data>C:\Windows\system32\svchost.exe</Data>
<Data>C:\Windows\SYSTEM32\ntdll.dll</Data>
<Data>ed3d01c4-80d4-11e2-9128-b499baa9e5e8</Data>
</EventData>
</Event>
I've searched and cannot seem to find any information as to what may be causing this, or even really where to start. Would someone be able to help me identify what might be causing this event, specific with the Exception code: 0xc0000024, which causes
the Group Policy Client service to stop?

You still out there looking at things? If so I have an update. The issue hasn't stopped, even though it did seemingly die down for awhile, however, it is now back with a vengeance.
I am able to force it to happen by killing the svchost process that is hosting GPSVC. If I run gpupdate /force, then logout/login it does get GPSVC running again. Furthermore, if I simply start svchost again via the Task Manager GPSVC starts running again.
When I access the server remotely with KVM it acts just like it does as if I'm logging into it via Citrix/RDP which for Admin IDs gives an error saying "Failed to connect to a windows service. Windows could not connect to the Group Policy Client service...",
however, normal user accounts just get a message when logging into the server "The Group Policy Client Service Failed the Logon. Access is denied."
I haven't opened a case with Microsoft yet, but we about ready to because of the increase in these errors.
If you have any further suggestions that would be great, otherwise I'll provide an update once I get word back from Microsoft.
**EDIT -- apparently I mistook the the server's SCM's actions as my own. I was able to successfully crash the GPSVC service by killing the hosting svchost process, however, after I crashed it and let it sit crashed for awhile when I attempted
to restart either by starting a svchost task, or running gpupdate /force it failed. Either that, or there is a timing issue where if we don't restart the svchost process, or run gpupdate /force quickly enough it won't be able to recover without a reboot.

Error 18452 "Login failed. The login is from an untrusted domain and cannot be used with Windows authentication" on SQL Server 2008 R2 Enterprise Edition 64-bit SP2 clustered instance

Hi there,
I have a Windows 2008 R2 Enterprise x64 SP2 cluster which has 2 SQL Server 2008 R2 Enterprise Edition x64 SP2
instances.
A domain account "Domain\Login" is administrator on both physcial nodes and "sysadmin" on both SQL Server instances.
Currently both instances are running on same node.
While logging on to SQL Server instance 2 thru "Domain\Login" using "IP2,port2", I get error 18452 "Login failed. The login is from an untrusted domain and cannot be used with Windows authentication". This happened in the past
as well but issue resolved post insatllation of SQL Server 2008R2 SP2. This has re-occurred now. But it connects using 'SQLVirtual2\Instance2' without issue.
Same login with same rights is able to access Instance 1 on both 'SQLVirtual1\Instance1' and "IP1,port1" without any issue.
Please help resolve the issue.
Thanks,
AY

Hello,
I Confirm that I encountred the same problem when the first domain controller was dow !!
During a restarting of the first domain controller, i tried to failover my SQL Server instance to a second node, after that I will be able to authenticate SQL Server Login but Windows Login returns Error 18452 !
When the firts DC restart finishied restarting every thing was Ok !
The Question here : Why the cluster instance does'nt used the second DC ???
Best Regards
J.K

Package 'Microsoft SQL Management Studio Package' failed to load in Windows 7 OS/Sql Server 2008 R2

I encountered this error while setting up a new machine. I have VS 2008 with SP1, VS2010 installed. I tried to re-install Sql Maangement Studio 2008 R2 and Sql Server 2008 R2 but to no avail. However, I were able to isolate this to missing dlls.
It is looking for this dll. I don't see it installed on the system. Anyone can tell me why?
microsoft.sqlserver.management.multiservermgmtui, Version=10.0.0.0, Culture=neutral, PublicKeyToken=89845dcd8080cc91
Thanks, Scott Ma. Schlumberger IT & Software Community Leader/MS SME for Entity Framework and Windows Azure Platform.

Hello,
Please try to repair the SQL Server 2008 R2 installation:
http://msdn.microsoft.com/en-us/library/cc646006.aspx
Hope this helps.
Regards,
Alberto Morillo
SQLCoffee.com

Group Policy Administrative Templates not applying on Windows XP SP3 - Windows Server 2008 R2

Similar Messages

Maybe you are looking for