Group Policy Editor problem

Hi
I updated Windows 7 SP1 Enterprise 64 bit
with the Windows Update.
Now, when I open the Group Policy
Editor, this window is displayed with the
following error message:
How come?
Thanks
Bye
Balubeto

Hi,
Apologize for the late reply.
The error message seems to be related with some updates that didn't update the Admx related files. The error was aften caused by mis-matched ADMX and ADML files.
See this similiar thread:
Error when selecting administrative template in any GPO
https://social.technet.microsoft.com/Forums/windowsserver/en-US/bac54114-54d7-472b-969d-9b08f28dbba9/error-when-selecting-administrative-template-in-any-gpo?forum=winserverGP
For the inetres.admx, line 1495 column 249, please follow the suggestions mentioned in the above thread. Unzipping the download (THIS ONE
http://www.microsoft.com/en-us/download/details.aspx?id=40905), then copy the related language\inetres.adml file to the c:\Windows\PolicyDefinitions\language directory, overwriting
the existing one in the destination.
Best regards
Michael Shao
TechNet Community Support
When I try to execute the copy commands via the command prompt with elevated privileges, the "Access Denied" error is displayed. How come?
Thanks
Bye
Balubeto

Similar Messages

  • ZENworks 6.5 SP1b And Group Policy Editor Problems

    I just installed ZENworks 6.5 SP1b on a brand new test server that I am
    running. I have no users or strain on the server. After I installed the
    service pack it started take about 20 to open the Group Policy Editor for
    a user policy and about a minute 20 to close it. I was using it before the
    upgrade and it only took like 10 seconds to close before. What's up? Can
    any one help?

    Yeah Sorry I clicked the wrong one
    > I presume someone will help in the Desktops forum, since this is for
    > server management...
    >
    > --
    >
    > Shaun Pond
    >
    >

  • Can't see ADMX files in Group Policy Editor

    I have a problem with ADMX files on my Server 2008 r2 group policy. I start by going to group policy editor. Then I browse to Computer Policy and then Administrative Templates. There is nothing in there... Which is weird... There has always been stuff there...
    So, then I go in to add templates back in... I find the ADMX files in C:\Windows\Policy Definitions and also \\domain\SYSVOL\domain\Policies\PolicyDefinitions and go to Add/Remove Templates. I click add and then browse to either directory (which has ADMX files
    in them!) and see nothing. ADM files I can see fine. But ADMX I can't see. So, I see these links:
    2008 R2 Server GP can't see admx files
    I can't see admx files
    Looking at them, they both say I should be able to see ADMX files in the central store...So I manually copy the ones in C:\Windows\Policy Definitions to the SYSVOL central store. Restart group policy editor... Nothing there when I browse the settings...
    Still not able to add templates.
    It looks like group policy editor doesn't know about ADMX files at all... Is there a registry setting or something that "enables" the ADMX files?
    Thanks,
    Scott

    In gpedit / gpmc, the menu item : "Action -> Add/Remove Templates", is only applicable/useful for the older/legacy ADM files - the menu item isn't relevant for ADMX/ADML files at all.
    The most common reason for an "empty" list of Administrative Templates settings, is an incorrect configuration of the Central Store.
    The usual guidance tells us to place ADMX files here, to setup a CS:
    \\domain\SYSVOL\domain\Policies\PolicyDefinitions\
    This folder/file structure has to mimic what you would see at: C:\Windows\PolicyDefinitions\
    If your domain is named contoso.com, you would need this:
    contoso.com\SYSVOL\contoso.com\Policies\PolicyDefinitions\
    In that folder, reside your ADMX files.
    You also need the relevant locale subfolder, and in there, you need the matching ADML files.
    The best way to establish that, is to go to  C:\Windows\PolicyDefinitions\ on your RSAT PC, or DC, and copy all the contents including subfolders and files, into the equivalent folder of your CS.
    Then exit GPMC (if you had it opened), and re-launch GPMC. No need to to anything else in GPMC, it will automatically, by default, look for a CS first, and, if no CS is found, will revert to the local policydefinitions folder structure.
    But, if the CS folder structure exists *AND* is incomplete or incorrect, you will get your symptom.
    Don
    (Please take a moment to "Vote as Helpful" and/or "Mark as Answer", where applicable.
    This helps the community, keeps the forums tidy, and recognises useful contributions. Thanks!)

  • No standard templates in Group Policy Editor on SBS 2008

    Hi, we have a SBS 2008. Problem is that we don't have any standard templates in Group Policy Editor anymore, just Office templates. If I do "Add/Remove Templates" the list is empty (please see Image below).
    Any ideas?
    Thanks in advance for your help
    Best regards, Thomas

    Hi Thomas,
    Would you please let me confirm whether change anything before this issue occurred? Did this issue just occurred
    recently?
    Would you please let me know if Administrative Templates files still store in the default location C:\Windows\PolicyDefinitions
    folder? Or have created the Central Store for Group Policy Administrative Template files? Please navigate to
    PolicyDefinitions folder and check if it is empty.
    If any update, please feel free to let me know.
    Hope this helps.
    Best regards,
    Justin Gu

  • How do I set firefox as the default browser in Windows Server 2012 Group Policy Editor?

    Hello, I am unable to set firefox as the default browser despite multiple different attempts to do so using group policy.
    I have:
    - Set a registry command (targeted at 32/64 via a WMI query) to reset the opening command as shown below:
    HKEY_CURRENT_USER\Software\Classes\http\shell\open\command
    "C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -osint -url "%1"
    - Set a powershell logon script to run (that does run):
    firefox.exe -silent -setDefaultBrowser
    Despite setting the above it seems the client computers browsers are not affected by the settings above. When the script runs or if I run the command above a UAC window pops up and requests that I accept the command (for the setDefaultBrowser) but even if I click yes as an administrator it does nothing.
    Since GPO in 2012 has changed perhaps there is something that I am missing? Do I need to somehow disable Windows Internet Explorer from achieving default browser status?
    Please do not reply if you will suggest that I use Internet Explorer Maintenance (since this function in GPO has been disabled since IE10)
    My DC is Server 2012, my client computers are Win7 32/64.

    The above reply does not take into account that I am trying to use GROUP POLICY EDITOR to make it the default browser.

  • Error when trying to open group policy editor

    When I try to open the Local Group Policy Editor I get error message:
    "Found duplicate definition of element string with name 'AppxRuntimeBlockFileElavationExplanation'.
    File c:\Windows\PolicyDefinitions\en-US\AppXRuntime.adml, line43, column 15"
    I'm running Win 10 Pro build 10041.
    Has anyone seen this?

    When I try to open the Local Group Policy Editor I get error message:
    "Found duplicate definition of element string with name 'AppxRuntimeBlockFileElavationExplanation'.
    File c:\Windows\PolicyDefinitions\en-US\AppXRuntime.adml, line43, column 15"
    Same here.
    Dave

  • Is there a way to give a local user permission to add a local user using the local group policy editor?

    I need to find a way to have the local administrator of a Windows Server 2012 system grant a local user (non-administrator) the ability to add a user for the machine using the local group policy editor. The machine is not part of any Active Directory environment,
    this is strictly on the one machine.  In my situation it is not an option to just make the user an administrator. The idea is to give someone the right to add a user and have no other such administrative rights. I need to accomplish this using the
    Local Group Policy editor or the Group Policy Management Console if it is possible to do this outside of an active directory environment. This is not an assignment to learn how to use these tools and I am not even sure if it would even be possible though I
    need to either find a way or find proof that it is not possible using these applications.

    Hi,
    Sorry for the delay reply.
    So did you want to non-admin user have the ability to add another user?
    As far as i know, we cannot add the user if we have no local admin permission, we will receive the error"Access denied".
    Regards.
    Vivian Wang

  • Unknown Error when starting the Group Policy Editor

    On Windows 8.1 Professional, I opened the "Edit group policy" from the control panel and also tried to start gpedit.msc from an elevated CMD prompt. In both cases I get the following error message:
    In English: Failed to open GPO. You may not have appropriate rights. Details: Unknown Error
    There it is again - this dreaded "Unknown Error" message - telling me absolutely nothing about the cause of the problem.
    In the past I have been able to launch the GPE on that machine without problems. I can absolutely not remember having messed around with the system files or registry settings. So there is no suspicious thing I could have done to break something. I had a
    look at all copies of the GPEDIT.MSC in an editor but none of them looked broken in any way.
    I startet C:\WINDOWS\SYSTEM32\MMC.EXE C:\WINDOWS\SYSTEM32\GPEDIT.MSC using the debugger of Visual Studio and paused execution after the error dialog had poped up. I got this call stack:
      gpedit.dll!ReportError(struct HWND__ *,unsigned long,unsigned int,...)    Unknown
      gpedit.dll!CComponentData::Load(struct IStream *)    Unknown
      mfc42u.dll!CWinApp::ProcessShellCommand(class CCommandLineInfo &)    Unknown
    I had configured the debugger to break on all exceptions but as you see yourself, MMC is an MFC 4.2 app that doesn't use exceptions.
    Since I get no access to the symbols of gpedit.dll, can anybody please tell me which conditions - i.e. problems - in Load() are handled by simply returning E_FAIL? What could be wrong with my machine?

    Hi,
    Consider the corrupted local policy files and system files, please try these steps:
    Step 1: clear local GP by running these commands:
    RD /S /Q "%WinDir%\System32\GroupPolicyUsers"
    RD /S /Q "%WinDir%\System32\GroupPolicy"
    gpupdate /force
    Step 2: To scan system files by running this command as admin:
    SFC /SCANNOW
    Andy error, please post back the CBS.log
    Then, restart the computer to check the results.
    Also, the event log (Open local event viewer) will show something related to this issue, please check event under
    Windows log\Application and Applications and services log\Microsoft\Windows\Grouppolicy, post back if you find any error about this issue.
    Kate Li
    TechNet Community Support

  • Windows 8.1 mandatory profile Group Policy printer problems

    We're a school district that is using mandatory profiles for the students. We use both Win 7 and Win 8.1 on the workstations. We're having a problem with group policy printer deployment on just the Windows 8 Workstations. I've tried using both the deployment
    method in policies and the Preferences with Item level targeting and on the windows 8 ones its always intermittent. Sometimes you login and get the printers or some of them and sometimes not. Other times if you log out and back on etc. I've been troubleshooting
    this for a week and have found with Win 7 it seems to always work but on our Win 8.1 ones about 50/50. The error in the Event log for that printer is this.
    Group Policy Object did not apply because it failed with error code '0x80070057 The parameter is incorrect.' This error was suppressed.
    What I've found that if I create a test account that does not use the mandatory profile the printers always map. Even on Windows 8.1. So far thats the only commonality. Can anyone tel me what I can look at with this. If they never worked that would be an
    easier problem but its not consistent.
    Thanks
    Jason

    Hi Jason, Did you ever find a fix for this as we are having exactly the same problem only with windows 8.1 computers using mandatory profiles and it's driving me mad. Any help would be much appreciated Thanks Dan

  • Event ID 5002/5014 Group Policy DFSR problem

    I have 4 domain controllers all are running on windows server 2012. RPC always disconnects/fails having error event Ids 5002 and 5014. AD objects are replicated across DCs but on Group policy DCs are either inaccessible or differ in GPO Version.
    thanks for the help.

    Good.  Okay, then it's just the 5014's & 5002's. 
    Here's a wiki on 5002:
    http://social.technet.microsoft.com/wiki/contents/articles/1207.dfsr-event-5002-dfs-replication.aspx
    On the 5014, there should be a corresponding error number. Can you please respond with that and the specific error messaged (edited for privacy, of course.)?

  • Group Policy Preference: Problem Adding Network Locations

    Group Policy Preferences (GPP) do not currently support correctly creating shortcuts in Network Locations/My Network Places the way Windows produces them when you go through the "Add a network location" wizard. Unfortunately, the GPP simply creates a standard shortcut instead of creating a folder that contains target.lnk and desktop.ini (the way the "Add a network location" wizard does).
    I was curious to know when the GPP engine will be updated to correctly add Network Locations the way the "Add a network location" wizard does?
    Thanks.

    Talfr77,
    I would like to know what environment you tried this under.  I made policy like you described on a 2012 domain controller and the resulting shortcut worked fine on windows 8 clients and on the 2012 servers.
     However, the 2008 servers and windows 7 clients didn't work.  They simply got a folder with two files.   It would appear that the format of the target.lnk file may be different between versions of windows.  I took a target.lnk from a
    working shortcut made on a 2008 server and put in on a 2012 server and the result was it not recognizing the shortcut.
    It is also worth noting for anyone who wants to try this method, that in step 2 of Talfr77's directions he says to copy the desktop.ini file using the GPP file copy function to the subfolder with the target.lnk file.  He didn't mention how to accomplish
    that.   You can store the desktop.ini file anywhere on your network as long as the UNC path to it is accessible to the user.  I suggest you store it right in a subfolder of the GPO in the sysvol to keep things tidy.  So that UNC would be the
    source path. (example would be \\domain.local\SYSVOL\domain.LOCAL\Policies\{020DBAF4-2631-4246-8811-DE02F7613959}\desktop.ini) The destination path will be %appdata%\Microsoft\Windows\Network Shortcuts\<Subfolder name>\desktop.ini
    The same goes for his step 3 where you edit the folder attributes.  The folder you want to edit is %appdata%\Microsoft\Windows\Network Shortcuts\<Subfolder name>
    Karl

  • Office 2013 ADMX files not being read by group policy editor?

    Okay so I'm having a real problem with the ADMX files for Office 2013. First of all we have a mix of 2012 R2 DCs with one 2008 R2 DC. The 2008 R2 is currently the primary DC. Here's what I've done so far:
    Downloaded the ADMX files both 32 and 64bit.
    Copied from my machine (Win7) to 2012R2 DC.
    Downloaded and copied directly to the 2012R2DC policy definitions location
    According to the research I've done, the Office 2013 template is supposed to appear under User Configuration\Policies\Administrative Templates. However it doesn't show up no matter what I do.
    I consider myself fairly knowledgeable with GPOs but I'm stumped on this one. Can someone tell me what I'm missing here?

    Hi, 
    Have you copied the ADML files to the language folder in the PolicyDefinitions folder?
    Checkout the below thread on similar discussion,
    office 2013 admx templates
    Regards,
    Gopi
    www.jijitechnologies.com

  • AGPM group policy ownership problem

    Im trying to move uncontrolled policies to controlled but I get [GPMC Error] Could not take ownership of the production GPO. Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED)) on all of them.  Per the docs, my service account
    is a member of the "GPO Creator Owners" group and "Backup Operators" group.  I have also given full control of the container the policies are in to the service account.  I am able to create new controlled policies and deploy them, I just cant
    seem to take control of production GPOs even though it looks like the rights are there.
    Anyone have any ides?

    Hi Dave,
    you also need to get the service account full controller over the existing GPOs:
    Full Access to existing GPOs
    http://blogs.technet.com/askds/archive/2008/12/16/agpm-least-privilege-scenario.aspx
    AGPM ensures that it has proper ownership and permissions to all controlled GPOs. However, GPOs created before implementing AGPM will not provided adequate permissions to the AGPM Service. For this reason, you'll want give the AGPM Service
    Full Control to all GPOs that exists prior to implementing AGPM.
    That should fix it.
    Gunter

  • November updates cause error in IE group policy files

    Hi,
    I reinstalled Windows 8.1 with Update today and noticed an error after installing either the IE 11 cumulative update or the optional November rollup update package. The error pops up only if either or both are installed. If they are uninstalled, the error
    no longer appears.
    The error pop up displays when group policy editor is opened,
    "Resource '$(string.VerMgmtAuditModeEnable)' referenced in attribute displayName could not be found. File C:\windows\PolicyDefinitions\inetres.admx, line 1495, column 249."

    Hi Sahil,
    This issue is related with the ADMX files of Internet Explorer. The error was often caused by mis-matched ADMX and ADML files.
    Here is a similar thread for reference: Group Policy Editor problem
    The fix:
    Unzipping the download (THIS ONE
    http://www.microsoft.com/en-us/download/details.aspx?id=40905), then copy the related language\inetres.adml file to the c:\Windows\PolicyDefinitions\language directory, overwriting the existing one in the destination.
    Best regards
    Michael Shao
    TechNet Community Support

  • Can't get Aero theme forced (via Group Policy)

    Well I'm at a loss.  I have a bunch of users.  They're all crazy, and I think I'm getting there too.  It all started with this three-armed monkey that got loose in the lab....
    Ok seriously.  I'm having no luck getting the Aero theme forced to any user.  2008 R2 and Win 7 Pro and Enterprise systems.  Any user can easily manually set their own Aero theme and it saves after they log off, but for a user that hasn't
    done this I cannot get GPO's to get the job done. 
    I've been all over the web, some people say use the option to "Load a specific theme" which most people agree only affects a user's login for the first time.  After they've logged in once, that setting never applies to them again. 
    And the other one is that if I want to force the theme each time someone logs on, to set the msstyles file under "force a specific visual style file or force Windows Classic".  I don't have a company-specific file to share over a network folder
    so I just use the default %windir%\resources\Themes\Aero\aero.msstyles path. 
    Both of these GPO entries are found under User config > Policies > Admin Templates > Control Panel > Personalization. 
    Some forum posts say not to enable these two items together, others say you need to.  For me it doesn't work in any combination - plenty of machine reboots in between to ensure updated GP's get applied.  . 
    Also the Desktop Window Manager Session Manager service is running and set to automatic, and I've tested on more than one system so I am confident the computers are not the problem (some are brand new installs). 
    Event logs show no errors at all, and also do show successful applies of "4 group policy objects".  I suppose I should count how many are supposed to apply to a computer but let's say for argument's sake that there are no errors on this. 
    Is there something I'm missing? 

    I've been all over the web, some people say use the option to "Load a specific theme" which most people agree only affects a user's login for the first time.  After they've logged in once, that setting never applies to them again. 
    And the other one is that if I want to force the theme each time someone logs on, to set the msstyles file under "force a specific visual style file or force Windows Classic".  I don't have a company-specific file to share over a network folder
    so I just use the default %windir%\resources\Themes\Aero\aero.msstyles path. 
    For the "Load a specific theme" policy, you can find the description of the policy in group policy editor, it is only applied when a new user logs in for the first time and it doesn't prevent user from changing the theme
    I made a test in my environment, if I applied "force a specific visual style file or force Windows Classic". it works as I want (I use some default visual style file because I don't have customized file ), after that, I can change the
    theme, and the aero.msstyles I set via GP remain take effects.
    Regards
    Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected]

Maybe you are looking for