Group Policy being lost after 2 -3 local logins

I have Netware 6 with Zen 3.2 and I have a GP that is deployed for setting
the machines to a SUS server. Both Windows 2k and XP work fine when on
the network, but what I've found is that if you take a laptop home and
reboot it a couple of times the policy does work and the windows update
section of the OS points at MS site instead of our work one.
Details
The netware client we are using is 4.83 sp3, 4.90 and 4.90 sp1a
Windows XP sp1 and windows 2k sp2,sp3,sp4
When it drops out the below is what happens
HKLM\software\Microsoft\Windows\CurrentVersion\Win dowsUpdate\AU ---- all
settings stay
HKLM\software\Microsoft\Windows\CurrentVersion\Win dowsUpdate\Auto Update
---- all settings stay
HKLM\software\Microsoft\Policies\Microsoft\Windows \WindowsUpdate ---
completely dis appears
If I open MMC and have a look at the current policy its all there ???
Is there a setting in the Netware client I'm missing or a Reg setting.
Also does anyone have a step by step guide to setting up GP on a
workstation via zen 3.2 and the settings needed on the client side.
Glenn

Does it re-appear when they return to work and the policy comes back on-line?
I've never tested, but I would not be surprised if Windows itself was detecting and fixing the "broken" values which did not work from home.
Automatic Reply wrote:
> Glenn,
>
> It appears that in the past few days you have not received a response to your posting. That concerns us, and has triggered this automated reply.
>
> Has your problem been resolved? If not, you might try one of the following options:
>
> - Do a search of our knowledgebase at http://support.novell.com/search/kb_index.jsp
> - Check all of the other support tools and options available at http://support.novell.com in both the "free product support" and "paid product support" drop down boxes.
> - You could also try posting your message again. Make sure it is posted in the correct newsgroup. (http://support.novell.com/forums)
>
> If this is a reply to a duplicate posting, please ignore and accept our apologies and rest assured we will issue a stern reprimand to our posting bot.
>
> Good luck!
>
> Your Novell Product Support Forums Team
> http://support.novell.com/forums/

Similar Messages

Group Policy not applying after logoff \ logon

We've noticed during testing an issue around Local Group Policy applied via ZCM...
- user A logs in, policy applies correctly (folder redirection, taskbar settings etc)
- user A logs off
- user B logs in, policy applies correctly
- user B logs off
- user A logs in again, policy does not apply
The only way to get policy to apply again for user A is to either reboot or delete the local profile for the user manually
A few other details...
- Windows 7 SP1 Enterprise x86
- DLU Policy applied (non volatile user)
- user does not have admin rights (in the Users+ group)

gshaw0,
It appears that in the past few days you have not received a response to your
posting. That concerns us, and has triggered this automated reply.
Has your problem been resolved? If not, you might try one of the following options:
- Visit http://support.novell.com and search the knowledgebase and/or check all
the other self support options and support programs available.
- You could also try posting your message again. Make sure it is posted in the
correct newsgroup. (http://forums.novell.com)
Be sure to read the forum FAQ about what to expect in the way of responses:
http://forums.novell.com/faq.php
If this is a reply to a duplicate posting, please ignore and accept our apologies
and rest assured we will issue a stern reprimand to our posting bot.
Good luck!
Your Novell Product Support Forums Team
http://forums.novell.com/

BBM 5.0 Group Admin abilities lost after OS update

Hi everyone,
Just like what I've stated in the subject, I'm longer the group Admin in my BBM Group after updating my OS. I've gone through the "recovery" process to recover my BBM group, but after it was recovered, I realized that I'm no longer the Group Administrator.
I've tried restoring my previous settings via Desktop Manager but that still didn't work either. What can I do to fix this? Thank you.

I have to say that I'm not a fan of the new BBM. I don't use the group feature so any benefits that others may see are lost on me. In fact, nothing that Shag points to outweighs the absolutely horrid way that pics are sent. Nothing against you Shag : ) . My wife sends me pictures all day of the kids. Use to be they would just appear and I could look at them when I got around to it. Now I have to accept and save each one at a time and the download is SLOW. What a PAIN!!
Not to mention that if I'm listening to Pandora when I go to view the picture, Pandora shuts off. AND, on top of that, if I'm listening to Pandora on my head phones and she sends me a message, the regulur speaker turns on as the message is being transmitted which annoys me and the other folks in my area.
Overall, this strikes me as the classic "It looks nicer so it MUST be better" kind of upgrade. I'll be downgrading as soon as I can.

Group Policy IE Maintenance settings not applied locally

Users with cached Group Policies, logging in "workstation only", are not receiving all of the settings specified.
I have followed the steps in TID 3655065, but security tab settings, and homepage are still incorrect.
Windows XP SP2
Zenworks 7
ZDM 7 SP1 IR4 HP4 applied
Workstation policy package GPO:
Computer and Security checked - with persist
User policy package GPO
User checked - with Cache set
When logging in to Novell client on network, the policies work fine.
Logging in workstation only is when the problem exists.
Two errors show -
Error 2 reading Cache User Settings
Error 0x2 refreshing User policy.
Attached is the WMGrpPolUser.log

mdavidso,
It appears that in the past few days you have not received a response to your
posting. That concerns us, and has triggered this automated reply.
Has your problem been resolved? If not, you might try one of the following options:
- Visit http://support.novell.com and search the knowledgebase and/or check all
the other self support options and support programs available.
- You could also try posting your message again. Make sure it is posted in the
correct newsgroup. (http://forums.novell.com)
Be sure to read the forum FAQ about what to expect in the way of responses:
http://forums.novell.com/faq.php
If this is a reply to a duplicate posting, please ignore and accept our apologies
and rest assured we will issue a stern reprimand to our posting bot.
Good luck!
Your Novell Product Support Forums Team
http://support.novell.com/forums/

Variable being lost after CONNECT BY...PRIOR query

Im having an issue with the following code (snippet posted):
SELECT ewpm_project_id INTO pro_id FROM ewpm_work_package WHERE
ewpm_work_package_id = wp_id;
--can return pro_id here
SELECT ewpm_work_package_prefix, LEVEL INTO parent_prefix,
parent_level
FROM ewpm_work_package
WHERE ewpm_project_id = temp_pro_id
AND ewpm_work_package_id = wp_id
START WITH ewpm_work_package_id = pack_id
CONNECT BY PRIOR ewpm_work_package_id = ewpm_work_package_parent_id;
RETURN pro_id;
The pro_id value is correctly set during the first select statement, I
can return the pro_id in the commented position. However, I can not
return the value after the second select statement. All I am getting
back is a null value. If I remove the START WITH.. CONNECT BY
clauses in the second query, the pro_id value is returned correcly.
Has anyone experienced this before, or know what could be causing it?

However, I can not
return the value after the second select statement. All I am getting
back is a null value. If I remove the START WITH.. CONNECT BY
clauses in the second query, the pro_id value is returned correcly.How do you use this function ? If you use it in SQL query then any
SQL statement raising NO_DATA_FOUND exception leads to NULL returning
as a result (like the subquery in a selection list which returns no one row):
SQL> create function get_number
2 return number
3 is
4   ret_val number;
5 begin
6
7   select 1 into ret_val from dual;
8   return ret_val;
9 end;
10 /
Function created.
SQL> select get_number from dual;
GET_NUMBER
         1
SQL> create or replace function get_number
2 return number
3 is
4   ret_val number;
5   p number;
6 begin
7
8   select 1 into ret_val from dual;
9
10   --This statement raises NO_DATA_FOUND
11   select 1 into p from dual where rownum = 0;
12
13   return ret_val;
14 end;
15 /
Function created.
SQL> select get_number from dual;
GET_NUMBER
----------Check does
SELECT ewpm_work_package_prefix, LEVEL
FROM ewpm_work_package
WHERE ewpm_project_id = temp_pro_id
AND ewpm_work_package_id = wp_id
START WITH ewpm_work_package_id = pack_id
CONNECT BY PRIOR ewpm_work_package_id = ewpm_work_package_parent_id
query return anything ?
Rgds.

Since the day i've upgraded my iphone 3GS to IOS 5, i've encountered a major problem of my sim and wifi signals being lost after same time.. Whenever i try to use location services, signals are lost..please help me with this problem

Please help me

I am having a really wierd issue as well that is probally related. I dont see 95% of the album artwork associated with my music. Also, it seems as if this has gotten worse since I started using that match feature

Local User Rights Assignments overwritten by AD DS User Rights Assignments Group Policy

Hello,
I have a AD DS Group Policy being pushed out to all machine on my domain to for privileged domain service account (Deny log on locally & Log on as a service). I also have a couple machines in the domain that have a local service account which also needs
the same rights/restrictions.
We attempted to add the local service account into the AD DS Group Policy. This works but it generates errors on all machines which do not have the local service account on them.
We attempted to set this in the local Group Policy editor on the machines with the local service account but the AD DS Group Policy will overwrite it.
Does anyone know of a solution to merge User Rights Assignments rather than overwrite them?

Hello,
I have a AD DS Group Policy being pushed out to all machine on my domain to for privileged domain service account (Deny log on locally & Log on as a service). I also have a couple machines in the domain that have a local service account which also needs
the same rights/restrictions.
We attempted to add the local service account into the AD DS Group Policy. This works but it generates errors on all machines which do not have the local service account on them.
We attempted to set this in the local Group Policy editor on the machines with the local service account but the AD DS Group Policy will overwrite it.
Does anyone know of a solution to merge User Rights Assignments rather than overwrite them?
The way I got around this is you make another OU for that computer/server.
In the GPO section you want to remove inheritance of policies applied. Then link the policies all but the one that is causing the overwrite. Place the computers in that OU and it will not over write.
If you need other things from that policy then you may make another policy just for that OU that has all you need minus the one that cause issues and want to type in manually. When a PC is placed in that OU and you do a gpupdate /force it will not get the
locked down one and you can change those settings manually. If you move it out of that OU back to the main OU then it will get the policy and overwrite the local. This is what we had to do per our Domain.
Hope this helps you out.
Darkplate ^^

Renamed Domain - Clients Still "joined" to old domain, can't open Group Policy Management on Server

Performed a Domain Rename as per the following instructions:
http://www.bauer-power.net/2011/05/renaming-windows-domain-with-rendom.html#.U4OZRPmSyTM
and then after these issues I have gone through the related technet articles starting here:
http://technet.microsoft.com/en-us/library/cc794793(v=ws.10).aspx
specifically the Fix Group Policy Objects and Links.
But still I have the following issues:
At least for group policy clients believe they are on the old domain - despite even having renamed the computers with the new domain name.
When I perform a gpresult the output file shows as being connected to the old Domain - despite manually going into computer properties and renaming the computer with the new domain name...
CN=Allister Wade,OU=Users,OU=Home,DC=NEWDOMAIN,DC=local
Last time Group Policy was applied: 27/05/2014 at 5:36:31 AM
Group Policy was applied from: finch.newdomain.local
Group Policy slow link threshold: 500 kbps
Domain Name: OLDDOMAIN
Domain Type: WindowsNT 4
On the server I cannot open Group Policy Management on the single Domain Controller as it is looking for a DC on the old Domain:
Even though it has listed the new domain in the root of the management console when I attempt to expand it out I am prompted:
"The specified domain controller could not be contacted. This affects the following domain in the console.
Domain: olddomain.local
The error was:
The specified domain either does not exist or could not be contacted."
I can select to remove the domain from the console but this does nothing - as said it already shows the new domain in the console.
Far as I am aware the clients should not even of needing renaming or changing the domain, but were having authentication issues before I did this. Not sure what I have done wrong here..?

Client's NSLookup shows "UnKnown" as DNS Server so thought to check DNS out.
This is result of dcdiag /test:DNS.
Directory Server Diagnosis
Performing initial setup:
Trying to find home server...
Home Server = finch
* Identified AD Forest.
Done gathering initial info.
Doing initial required tests
Testing server: Default-First-Site-Name\FINCH
Starting test: Connectivity
......................... FINCH passed test Connectivity
Doing primary tests
Testing server: Default-First-Site-Name\FINCH
Starting test: DNS
DNS Tests are running and not hung. Please wait a few minutes...
......................... FINCH passed test DNS
Running partition tests on : ForestDnsZones
Running partition tests on : DomainDnsZones
Running partition tests on : Schema
Running partition tests on : Configuration
Running partition tests on : NEWDOMAIN
Running enterprise tests on : NEWDOMAIN.local
Starting test: DNS
Test results for domain controllers:
DC: finch.NEWDOMAIN.local
Domain: NEWDOMAIN.local
TEST: Delegations (Del)
Error: DNS server: finch.olddomain.local. IP:<Unavailable>
[Missing glue A record]
Summary of test results for DNS servers used by the above domain
controllers:
DNS server: 203.12.160.35 (<name unavailable>)
1 test failure on this DNS server
PTR record query for the 1.0.0.127.in-addr.arpa. failed on the DNS server 203.12.160.35
Summary of DNS test results:
Auth Basc Forw Del Dyn RReg Ext
Domain: NEWDOMAIN.local
finch PASS PASS PASS FAIL PASS PASS n/a
......................... NEWDOMAIN.local failed test DNS

Group Policy Preferences Printer Delete Behavior

I just had a maddening time trying to get Group Policy Preferences to delete printers. I'm sharing what I found out so that you might have a better experience.
1. Even though the field is grayed out, if you have something in the "Local Name" field, the printer will only be deleted if the name matches what you have here.
2. If the "Local Name" field is empty, one printer with a matching IP address will be deleted. If there are multiple printers with the same IP address, the policy will delete them one by one each time a refresh occurs unless you've got the "Apply
Once" option active.
The client I tested with was Windows 7 with version 6.1.7601.22249 of group policy preferences installed.

After more testing, it turns out that all of my observations were correct:
1. Even though the field is grayed out, if you have something in the "Local Name" field, the printer will only be deleted if the name matches what you have here.
2. If the "Local Name" field is empty, one printer with a matching IP address will be deleted. If there are multiple printers with the same IP address, the policy will delete them one by one each time a refresh occurs unless you've got the "Apply Once"
option active.
3. If the "Local Name" field is empty, a warning '0x80070709 The printer name is invalid.' will be logged in the Application log. If a printer exists, it will still be deleted. If the "Apply once and do not reapply" option is checked, the
warning will still be logged every time group policy refreshes. This warning can be prevented by configuring "Configure Printers preference logging and tracing" to only log errors, but then you potentially miss out on warnings about actual problems.

I get a Group Policy Disk Quota failure at every system start

This is very long, my apologies
I asked this question about a month ago and then had some medical problems so I'm starting over again.
Whenever I start my system I get a message on the screen that the system is trying to run Group Policy for Disk Quotas. To my knowledge I've never set a disk quota policy and I can't find any indication that one is currently set. I freely admit
that I could be responsible for this. I might have done something in the early days of the system because it wasn't happening for the first month or two.
This time I did more reading and found a procedure on TechNet at:
"http://technet.microsoft.com/en-us/library/cc749336(WS.10).aspx" which led me step by step through the procedure, although I still can't make sense of the results.
So far I've verified that there are no policies set and that all the hard drives (3) have the Disk Quota bit 'disabled'. I did this as 'Administrator'.
The results from the TechNet procedure turned out to be quite long but I'm listing it here in hope that someone in the community will be familiar with this problem and be able to use the information to figure out the problem.
Here are the results:
From: TechNet Group Policy Testing
( "http://technet.microsoft.com/en-us/library/cc749336(WS.10).aspx" )
1 - Troubleshooting using the Group Policy operational log
   a - Determine the instance of Group Policy processing
   (Before you view the Group Policy operational log, you must first determine
   the instance of Group Policy processing that failed.)
My ActivityID from the Group Policy operational log = C87E5BC2-FD21-4794-B678-787AB587D8D5
2 - Create a custom view, via a query, of the Group Policy instance
My resultant query:
<QueryList><Query Id="0" Path="Application"><Select Path="Microsoft-Windows-GroupPolicy/Operational">*[System/Correlation/@ActivityID='{C87E5BC2-FD21-4794-B678-787AB587D8D5}']</Select></Query></QueryList>
3 - Results of running the query from step 2 are listed below, in chronological order, including the complete 'detail' sections from each event.
event 4000
Event Description(s) = Computer startup
BEGIN DETAIL SECTION-----------------------------------------------------------------------------
- System
  - Provider
   [ Name] Microsoft-Windows-GroupPolicy
   [ Guid] {AEA1B4FA-97D1-45F2-A64C-4D69FFFD92C9}
   EventID 4000
   Version 1
   Level 4
   Task 0
   Opcode 1
   Keywords 0x4000000000000000
   - TimeCreated
   [ SystemTime] 2010-05-15T13:29:33.598400000Z
   EventRecordID 22707
   - Correlation
   [ ActivityID] {C87E5BC2-FD21-4794-B678-787AB587D8D5}
   - Execution
   [ ProcessID] 1280
   [ ThreadID] 1784
   Channel Microsoft-Windows-GroupPolicy/Operational
   Computer GROK
   - Security
   [ UserID] S-1-5-18
- EventData
  PolicyActivityId {C87E5BC2-FD21-4794-B678-787AB587D8D5}
  PrincipalSamName WORKGROUP\GROK$
  IsMachine 1
  IsDomainJoined false
  IsBackgroundProcessing false
  IsAsyncProcessing false
  IsServiceRestart false
  ReasonForSyncProcessing 2
END DETAIL SECTION-------------------------------------------------------------------------------
event 5320
Event Description(s) = Checking for Group Policy client extensions that are not part of the system.
Event Description(s) = Service configuration update to standalone is not required and will be skipped.
BEGIN DETAIL SECTION------------------------------------------------------------------------------
- System
  - Provider
   [ Name] Microsoft-Windows-GroupPolicy
   [ Guid] {AEA1B4FA-97D1-45F2-A64C-4D69FFFD92C9}
   EventID 5320
   Version 0
   Level 4
   Task 0
   Opcode 0
   Keywords 0x4000000000000000
   - TimeCreated
   [ SystemTime] 2010-05-15T13:29:33.614000000Z
   EventRecordID 22711
   - Correlation
   [ ActivityID] {C87E5BC2-FD21-4794-B678-787AB587D8D5}
   - Execution
   [ ProcessID] 1280
   [ ThreadID] 1784
   Channel Microsoft-Windows-GroupPolicy/Operational
   Computer GROK
   - Security
   [ UserID] S-1-5-18
- EventData
  InfoDescription %%4161
END DETAIL SECTION-------------------------------------------------------------------------------
event 5313
Event Description(s) = The following Group Policy objects were not applicable because they were filtered out :
BEGIN DETAIL SECTION------------------------------------------------------------------------------
- System
  - Provider
   [ Name] Microsoft-Windows-GroupPolicy
   [ Guid] {AEA1B4FA-97D1-45F2-A64C-4D69FFFD92C9}
   EventID 5313
   Version 0
   Level 4
   Task 0
   Opcode 0
   Keywords 0x4000000000000000
   - TimeCreated
   [ SystemTime] 2010-05-15T13:29:33.614000000Z
   EventRecordID 22710
   - Correlation
   [ ActivityID] {C87E5BC2-FD21-4794-B678-787AB587D8D5}
   - Execution
   [ ProcessID] 1280
   [ ThreadID] 1784
   Channel Microsoft-Windows-GroupPolicy/Operational
   Computer GROK
   - Security
   [ UserID] S-1-5-18
- EventData
  DescriptionString None
  GPOInfoList
END DETAIL SECTION-------------------------------------------------------------------------------
event 5311
Event Description(s) = The loopback policy processing mode is "No loopback mode".
BEGIN DETAIL SECTION------------------------------------------------------------------------------
- System
  - Provider
   [ Name] Microsoft-Windows-GroupPolicy
   [ Guid] {AEA1B4FA-97D1-45F2-A64C-4D69FFFD92C9}
   EventID 5311
   Version 0
   Level 4
   Task 0
   Opcode 0
   Keywords 0x4000000000000000
   - TimeCreated
   [ SystemTime] 2010-05-15T13:29:33.614000000Z
   EventRecordID 22708
   - Correlation
   [ ActivityID] {C87E5BC2-FD21-4794-B678-787AB587D8D5}
   - Execution
   [ ProcessID] 1280
   [ ThreadID] 1784
   Channel Microsoft-Windows-GroupPolicy/Operational
   Computer GROK
   - Security
   [ UserID] S-1-5-18
- EventData
  PolicyProcessingMode 0
END DETAIL SECTION-------------------------------------------------------------------------------
event 5312
Event Description(s) = List of applicable Group Policy objects:
Event Description(s) = Local Group Policy
BEGIN DETAIL SECTION------------------------------------------------------------------------------
- System
  - Provider
   [ Name] Microsoft-Windows-GroupPolicy
   [ Guid] {AEA1B4FA-97D1-45F2-A64C-4D69FFFD92C9}
   EventID 5312
   Version 0
   Level 4
   Task 0
   Opcode 0
   Keywords 0x4000000000000000
   - TimeCreated
   [ SystemTime] 2010-05-15T13:29:33.614000000Z
   EventRecordID 22709
   - Correlation
   [ ActivityID] {C87E5BC2-FD21-4794-B678-787AB587D8D5}
   - Execution
   [ ProcessID] 1280
   [ ThreadID] 1784
   Channel Microsoft-Windows-GroupPolicy/Operational
   Computer GROK
   - Security
   [ UserID] S-1-5-18
- EventData
  DescriptionString Local Group Policy
  GPOInfoList <GPO ID="Local Group Policy"><Name>Local Group Policy</Name><Version>524296</Version><SOM>Local</SOM><FSPath>C:\Windows\System32\GroupPolicy\Machine</FSPath><Extensions>[{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{D02B1F72-3407-48AE-BA88-E8213C6761F1}][{3610EDA5-77EF-11D2-8DC5-00C04FA31A66}{D02B1F72-3407-48AE-BA88-E8213C6761F1}][{F3CCC681-B74C-4060-9F26-CD84525DCA2A}{0F3F3735-573D-9804-99E4-AB2A69BA5FD4}]</Extensions></GPO>
END DETAIL SECTION-------------------------------------------------------------------------------
event 4016
Event Description(s) = Starting Microsoft Disk Quota Extension Processing.
Event Description(s) = List of applicable Group Policy objects: (Changes were detected.)
Event Description(s) = Local Group Policy
BEGIN DETAIL SECTION------------------------------------------------------------------------------
- System
  - Provider
   [ Name] Microsoft-Windows-GroupPolicy
   [ Guid] {AEA1B4FA-97D1-45F2-A64C-4D69FFFD92C9}
   EventID 4016
   Version 0
   Level 4
   Task 0
   Opcode 1
   Keywords 0x4000000000000000
   - TimeCreated
   [ SystemTime] 2010-05-15T13:29:33.614000000Z
   EventRecordID 22714
   - Correlation
   [ ActivityID] {C87E5BC2-FD21-4794-B678-787AB587D8D5}
   - Execution
   [ ProcessID] 1280
   [ ThreadID] 1784
   Channel Microsoft-Windows-GroupPolicy/Operational
   Computer GROK
   - Security
   [ UserID] S-1-5-18
- EventData
  CSEExtensionId {3610EDA5-77EF-11D2-8DC5-00C04FA31A66}
  CSEExtensionName Microsoft Disk Quota
  IsExtensionAsyncProcessing false
  IsGPOListChanged true
  GPOListStatusString %%4102
  DescriptionString Local Group Policy
  ApplicableGPOList <GPO ID="Local Group Policy"><Name>Local Group Policy</Name></GPO>
END DETAIL SECTION-------------------------------------------------------------------------------
event 5320
Event Description(s) = Finished checking for non-system extensions.
BEGIN DETAIL SECTION------------------------------------------------------------------------------
- System
  - Provider
   [ Name] Microsoft-Windows-GroupPolicy
   [ Guid] {AEA1B4FA-97D1-45F2-A64C-4D69FFFD92C9}
   EventID 5320
   Version 0
   Level 4
   Task 0
   Opcode 0
   Keywords 0x4000000000000000
   - TimeCreated
   [ SystemTime] 2010-05-15T13:29:33.614000000Z
   EventRecordID 22713
   - Correlation
   [ ActivityID] {C87E5BC2-FD21-4794-B678-787AB587D8D5}
   - Execution
   [ ProcessID] 1280
   [ ThreadID] 1784
   Channel Microsoft-Windows-GroupPolicy/Operational
   Computer GROK
  - Security
   [ UserID] S-1-5-18
- EventData
  InfoDescription %%4165
END DETAIL SECTION-------------------------------------------------------------------------------
event 4016
Event Description(s) = Starting Audit Policy Configuration Extension Processing.
Event Description(s) = List of applicable Group Policy objects: (No changes were detected.)
Event Description(s) = Local Group Policy
BEGIN DETAIL SECTION------------------------------------------------------------------------------
- System
  - Provider
   [ Name] Microsoft-Windows-GroupPolicy
   [ Guid] {AEA1B4FA-97D1-45F2-A64C-4D69FFFD92C9}
   EventID 4016
   Version 0
   Level 4
   Task 0
   Opcode 1
   Keywords 0x4000000000000000
   - TimeCreated
   [ SystemTime] 2010-05-15T13:31:21.987200000Z
   EventRecordID 22718
   - Correlation
   [ ActivityID] {C87E5BC2-FD21-4794-B678-787AB587D8D5}
   - Execution
   [ ProcessID] 1280
   [ ThreadID] 1784
   Channel Microsoft-Windows-GroupPolicy/Operational
   Computer GROK
   - Security
   [ UserID] S-1-5-18
- EventData
  CSEExtensionId {F3CCC681-B74C-4060-9F26-CD84525DCA2A}
  CSEExtensionName Audit Policy Configuration
  IsExtensionAsyncProcessing true
  IsGPOListChanged false
  GPOListStatusString %%4101
  DescriptionString Local Group Policy
  ApplicableGPOList <GPO ID="Local Group Policy"><Name>Local Group Policy</Name></GPO>
END DETAIL SECTION-------------------------------------------------------------------------------
event 7016
Event Description(s) = Completed Microsoft Disk Quota Extension Processing in 108374 milliseconds.
BEGIN DETAIL SECTION-------------------------------------------------------------------------------------
- System
  - Provider
   [ Name] Microsoft-Windows-GroupPolicy
   [ Guid] {AEA1B4FA-97D1-45F2-A64C-4D69FFFD92C9}
   EventID 7016
   Version 0
   Level 2
   Task 0
   Opcode 2
   Keywords 0x4000000000000000
   - TimeCreated
   [ SystemTime] 2010-05-15T13:31:21.987200000Z
   EventRecordID 22717
   - Correlation
   [ ActivityID] {C87E5BC2-FD21-4794-B678-787AB587D8D5}
   - Execution
   [ ProcessID] 1280
   [ ThreadID] 1784
   Channel Microsoft-Windows-GroupPolicy/Operational
   Computer GROK
   - Security
   [ UserID] S-1-5-18
- EventData
  CSEElaspedTimeInMilliSeconds 108374
  ErrorCode 2147942402
  CSEExtensionName Microsoft Disk Quota
  CSEExtensionId {3610EDA5-77EF-11D2-8DC5-00C04FA31A66}
END DETAIL SECTION-----------------------------------------------------------------------------------------
event 5016
Event Description(s) = Completed Microsoft Disk Quota Extension Processing in 108374 milliseconds.
BEGIN DETAIL SECTION----------------------------------------------------------------------------------------
- System
  - Provider
   [ Name] Microsoft-Windows-GroupPolicy
   [ Guid] {AEA1B4FA-97D1-45F2-A64C-4D69FFFD92C9}
   EventID 5016
   Version 0
   Level 4
   Task 0
   Opcode 2
   Keywords 0x4000000000000000
   - TimeCreated
   [ SystemTime] 2010-05-15T13:31:22.314800000Z
   EventRecordID 22720
   - Correlation
   [ ActivityID] {C87E5BC2-FD21-4794-B678-787AB587D8D5}
   - Execution
   [ ProcessID] 1280
   [ ThreadID] 1784
   Channel Microsoft-Windows-GroupPolicy/Operational
   Computer GROK
   - Security
   [ UserID] S-1-5-18
- EventData
  CSEElaspedTimeInMilliSeconds 312
  ErrorCode 2147483658
  CSEExtensionName Audit Policy Configuration
  CSEExtensionId {F3CCC681-B74C-4060-9F26-CD84525DCA2A}
END DETAIL SECTION-----------------------------------------------------------------------------------------
Event 8000
Event Description(s) = Completed computer boot policy processing for WORKGROUP\GROK$ in 108 seconds.
BEGIN DETAIL SECTION----------------------------------------------------------------------------------------
- System
  - Provider
   [ Name] Microsoft-Windows-GroupPolicy
   [ Guid] {AEA1B4FA-97D1-45F2-A64C-4D69FFFD92C9}
   EventID 8000
   Version 1
   Level 4
   Task 0
   Opcode 2
   Keywords 0x4000000000000000
   - TimeCreated
   [ SystemTime] 2010-05-15T13:31:22.330400000Z
   EventRecordID 22721
   - Correlation
   [ ActivityID] {C87E5BC2-FD21-4794-B678-787AB587D8D5}
   - Execution
   [ ProcessID] 1280
   [ ThreadID] 1784
   Channel Microsoft-Windows-GroupPolicy/Operational
   Computer GROK
   - Security
   [ UserID] S-1-5-18
- EventData
  PolicyElaspedTimeInSeconds 108
  ErrorCode 0
  PrincipalSamName WORKGROUP\GROK$
  IsMachine 1
  IsConnectivityFailure false
END DETAIL SECTION-----------------------------------------------------------------------------------------
End of results.
Thanks to all,
wegrok
Win7 Ultimate x64, 8 GB ram, AMD Phenom 9950 Quad-proc @2.6Ghz, HD = 1TB ASUS M4N72-E mobo, Video = NVIDIA GeForce 8800 GT w/ Dell 2407 Digital Monitor -------------------------------------------------------------------------------------------------------

Did you ever have luck tracking this down? Im getting this error and have no clue where it is coming from. I have not enabled gp disk quotas, but I do have a network share on a domain member server that has quotas attached to each users folder.
I removed the quotas and still get this error when I manually perform a gpupdate.

Group Policy won't apply, No mapping between account names and security IDs was done.

I am using Group Policy Preferences to remove users from the local admin group and add a local admin account. This GPO is working on 90% of the Win7 machines on the network, but three laptops are not accepting the GPO. I get the following error:
Log Name:      Application
Source:        Group Policy Local Users and Groups
Date:          6/24/2014 8:49:28 AM
Event ID:      4098
Task Category: (2)
Level:         Warning
Keywords:      Classic
User:          SYSTEM
Computer:      laptop1.internal.com
Description:
The user 'Administrators' preference item in the 'Local Admin Policy - Remove Permissions {593ACD77-3663-4023-BEB8-938D83F7862E}' Group Policy object did not apply because it failed with error code '0x80070534 No mapping between account names and security
IDs was done.' This error was suppressed.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
    <Provider Name="Group Policy Local Users and Groups" />
    <EventID Qualifiers="34305">4098</EventID>
    <Level>3</Level>
    <Task>2</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2014-06-24T13:49:28.000000000Z" />
    <EventRecordID>68771</EventRecordID>
    <Channel>Application</Channel>
    <Computer>laptop1.internal.com</Computer>
    <Security UserID="S-1-5-18" />
</System>
<EventData>
    <Data>user</Data>
    <Data>Administrators</Data>
    <Data>Local Admin Policy - Remove Permissions {593ACD77-3663-4023-BEB8-938D83F7862E}</Data>
    <Data>0x80070534 No mapping between account names and security IDs was done.</Data>
</EventData>
</Event>
I've searched high and low for an answer and nothing I find on-line seems to apply. I also notice that the option to 'Run as Administrator' does not work. If I right-click on cmd.exe and select 'run as administrator', the command box opens but
I am not prompted for credentials and the command box does not have admin rights. Not sure if this is related or not.
Any help on this would be greatly appreciated.
Thanks,
Joe

Hi,
Delete your remove action from the GPP and push it again, does this issue still occur?
If it still exists, let’s collect the GPP log for analysis:
Group policy Preference debug logging policy settings are located under:
Computer Configuration\Administrative Templates\System\Group Policy
Click Logging and tracing, select local users and group preference logging and trace.
Meanwhile, just a similar issue, but it is worth trying:
A user is added to the wrong group on a client computer that is running Windows 7 or Windows Server 2008 R2
http://support.microsoft.com/kb/2280515
If you have any feedback on our support, please click
here
Alex Zhao
TechNet Community Support

User Settings lost after session is released

I am having a problem with the User settings being lost after the user logs off the system.
menu settings, fields displayed in Marketing Documents, displayed User Defined fields and the
sequence of User defined fields get lost after the session ends. This does not happen to all users,
just some users. The users that keep losing their settings keep losing their settings, the ones that do not have a
problem seem never to have a problem.
has anyone else experienced this problem and if so, how has it been resolved?
Thanks in Advance!!!
Dana

Dana,
You may check these threads first:
change in form settings
Re: Settings don't seem to "stick" after being added from the Form Setttings
Re: 2007A PL42 and Windows Roaming Profiles
Form settings not saving
Thanks,
Gordon

CVS keyboard accelerators lost after restart

Hi
I set up accelerator keys for CVS edit (F10) and CVS commit (F11). Whilst JDeveloper is running, these keys work fine and I am able to edit and commit with these shortcut keys.
However, when I restart JDeveloper, the settings are lost and I have to set the keys again - (I have to do this each time I restart JDeveloper).
When I set keys F10 and F11 to other accelerator shortcuts such as make selected or run selected these work fine, even after restarting JDeveloper. The problem only seems to be with the CVS commands.
Do I have to some additional configuration for the CVS accelerators?
I am using JDeveloper 9.0.3.1 and the problem occurs on both Windows XP and SUSE Linux 8.1.
Thanks
Usman

I'm seeing this problem with set accelerators being lost after restart with JDeveloper Preview 10.1.3.0.2.
I set an accelerator to an external tool (Tomcat Startup and Tomcat Shutdown) and the accelerator is gone after I restart JDeveloper.
I apologize if this is a known bug in Preview... I did a cursory search through the forums and only found this one.
Thanks,
Chris

Outlook 2013 Programmatic Security Settings via Group Policy

I am in a domain environment and have deployed Office E3 via Shared Computer Activation on an RDS.
Outlook functions correctly in online mode.
When 3rd party software (such as ZetaDocs) attempts to access any Outlook feature (such as sending or address books) a prompt message is displayed - "A program is trying to access e-mail address information stored in Outlook...Allow access
for...".
I am able to change the Programmatic security settings to disable the prompt in Outlook by starting it as an Administrator.
I have tried to do this the 'correct' way using the Office 2013 ADMX GPO templates. The created policy is linked to the OU containing the RDS server.
gpresult and rsop shows no sign of the policy being implemented after a gpupdate /force.
Any ideas as to what is going wrong?

Make sure you have the correct adm:
http://support.microsoft.com/kb/2426686
The feature you probably want to disable is the
RPC/HTTP Connection Flags and set to None or 0. You'll have to test that out.
Twitter!: Please Note: My Posts are provided “AS IS” without warranty of any kind, either expressed or implied.

MSI Package Software Installations and uninstallations by group policy and sccm

Hi,
            I have a domain comprising approx. 30 ADCs, 5000 clients and 50 OUs. Our developers have created a c# Program for fetching some information from client machines and displaying them on their
screen on bootup (presence of 2 particular softwares, antivirus presence and its update date, OS patches updation etc... ). This program(.msi) and .net framework 4.0 is required to be pushed to all client machines. We have SCCM server through which we can
push software to be installed on clients. There are no. of ADCs for controlling different sites and OUs. Now I need to push this msi and .net framework to all clients. Dotnet framework I pushed from SCCM & it is successful.
Till today I have pushed this .MSI package using Group policy software installation settings using a local sharepath & sysvol.
In Local Share path , MSI source is availbale at only one ADC and all clients contact this adc only to install software and its taking very long time to boot.
Using Sysvol share path , MSI Source is available at All ADC and All Clients Contact their Site's ADC to install software.Only Win 7, win 8 machines are getting install and software is not able to install on XP and vista machine. What might be the
problem for xp machine getting it from sysvol path?
The error for XP machines is that Sysvol path is not accessible/ source is not available.
   Now I need to have some other fullproof method to apply it. How I need to push this .MSI packages to all sites (ADCs) in my child domain from my PDC.
   I want to know the steps & methods for installing & uninstalling this .MSI package using Group policy and SCCM as well.
   Thanks for replying...

Hi,
Based on your description, I want to confirm whether we have more than one domain. If we have more than domain, it is suggested that we can push the
MSI package from each domain.
Regarding how to use Group Policy to remotely install software, the following article can be referred to for more information.
How to use Group Policy to remotely install software in Windows Server 2008 and in Windows Server 2003
http://support.microsoft.com/kb/816102/en-us#method1
In addition, you also mentioned how to use SCCM to do this, in order to get better assistance, we can ask help in the following SCCM forum.
System Center Configuration Manager
http://social.technet.microsoft.com/Forums/systemcenter/en-US/home
Best regards,
Frank Shen

Group Policy being lost after 2 -3 local logins

Similar Messages

Maybe you are looking for