Group Policy not being pushed out

HI,
I have a problem with Group Policy updates. The domain controllers are Server 2008 R2 and the clients are all Windows 7 64bit. It looks like the clients are not updating their group policies. We've recently added a certificate for our new
corporate wifi. During testing we used gpupdate /force and the computers installed the certificates. It has been several weeks since the GP was published and we have announced the new wifi. Users are still being prompted to accept the certificate
even though they should have received it from the GP. If I try to do a RSOP, of a users computer, I get "The RPC Server is unavailable" Any ideas on how to fix this?
Thanks
Ron Soulliard
Ron Soulliard Systems Administrator Polaris Ventures

Group Policy is always retrieved by the clients. If a client sees a new GPO that is applicable to them, it will grab it and apply it.
In the GPMC, can you run a GPResult for a computer that hasn't gotten the GPO? You might also want to check out this list of common GP issues:
http://deployhappiness.com/top-10-ways-to-troubleshoot-group-policy/
If my answer helped you, check out my blog:
DeployHappiness. Subscribe by
RSS or
email.

Similar Messages

All plist files are not being pushed out

Current setup : 10.6 Server ( updated to 10.6.8 )
About 10 to 15 client machines ( 10 Desktops and 5 laptops )
These client machines are being managed in a group already for Software Updates from the server and hence already have the managed preferences folder on each machine.
I have just created a new com.apple.print.custompapers.plist file and have added it to the Preference Editor for that group and have set it to 'Often'. ( WorkGroup Manager -> Computer Group -> Preferences -> Details )
But after repeated attempts, I am still not able to push out this plist file to the client machines. I have tried the following already :
1. Deleting the Managed Preferences folder from each machine. Result : It recreates the folder again, but again with only the Software update plist file.
2. I have tried setting the plist to 'Always' from the 'Once, Often, Always' selection in the Preferences Editor. Result: Same result as above.
3. I have tried adding the file manually to Managed Preferences. Result : The file is removed at the next login, and cannot be used before that.
All clients are running on 10.6.8.
If you require any more information, please specify and I'll provide it. Thank you for looking over the problem and giving it thought.
Hope to hear from someone with a possible resolution soon.
Thanks.
Prat.

Have you tried setting another, pre-made preference in the computer group settings to see if it applies?
Have you run plutil /path/to/plist in the command line to see if it is OK (can't see why this would matter, this is a stab in the dark)?
P.S.
I have found that OpenDirectory can be quirky. I have found it become corrupt but still mostly functional quite quickly after setup. Since Apple has not well documented this software and offers no directory maintenance tools, every year I end up having to rebuild the server from scratch. I know this is not very helpful, but strange, unpredictable, and unbecoming behavior seems to be more frequent than I prefer. (Thankfully setting up an OS X Server is a veritable breeze compared to Microsoft Server Products).

Tuxera driver and tftp not being pushed out

Hi all: I have three ZCM 11.2.3a servers running on OES2 SP3, one primary and two satellites. The satellites each live in a branch office connected via P2P T1's. Last week I installed the tuxera NTFS driver and have successfully set it up. I also pushed it out to one of are satellite servers (along with sync'ing tftp to that same server), but I cannot push out the driver nor sync tftp to the second satellite.
Any suggestions on how to fix this? Thanks, Chris.

Let me ask.
Anders: Thanks for the reply. After some looking around and reading,
I discovered that content replication was not running on the satellite
server not receiving the tftp updates. I kicked replication off via
command "zac cdp replicate" and that solved the problem.
BUT, I also discovered the content replication is not working properly
on that same satellite server. "zac cds" shown no schedule or throttle
rate on that "broken" satellite server while on the satellite server
that did receive the tftp files correctly shows a schedule and throttle
rate. We define the schedule and throttle at the primary server level
(default) and the satellites are set to use the default, so I am not
sure what is broken.
Chris.
>>> Anders Gustafsson<[email protected]> 1/3/2014 7:08 AM
>>>
> but I cannot push out the driver nor sync tftp to the second
satellite.
What happens when you try?
Anders Gustafsson (NKP)
The Aaland Islands (N60 E20)
Have an idea for a product enhancement? Please visit:
http://www.novell.com/rms
Anders Gustafsson (NKP)
The Aaland Islands (N60 E20)
Have an idea for a product enhancement? Please visit:
http://www.novell.com/rms

Policy not being applied to users

I have a group policy that used to work, but now has decided it does not want to be applied to the workstations anymore. I don't know what may have happened to make is stop working.
It's a pretty restrictive policy for students. I have the exact same policy for two other groups of students that still work. All three policies were copied from the same set of files. In other words, I make a change to one, then copy the files to the other two because they reside on different servers. Yes, I do open each one in C1 to update the timestamp.
When I run wmsched, the policy is there in the list, but the settings are not applied. I can log in to the PC with one of the other student accounts and their policy is applied.
The login I'm using to test with has R rights to the policy location - the same rights that the other users have to their policies. I have also tried more rights with no different results.
The DLU part of the policy runs, and I have turned off the windows firewall. I have also created a brand new policy from scratch to rule out any corruption in the old policy and I get the same results.
Apparantly, my workstation policy for this group is not being applied either. The other two groups' policies apply like they are supposed to. So this means that neither policy assigned to this group of students/workstations is working.
Any ideas?
Thanks

FishEggStew,
It appears that in the past few days you have not received a response to your
posting. That concerns us, and has triggered this automated reply.
Has your problem been resolved? If not, you might try one of the following options:
- Visit http://support.novell.com and search the knowledgebase and/or check all
the other self support options and support programs available.
- You could also try posting your message again. Make sure it is posted in the
correct newsgroup. (http://forums.novell.com)
Be sure to read the forum FAQ about what to expect in the way of responses:
http://forums.novell.com/faq.php
If this is a reply to a duplicate posting, please ignore and accept our apologies
and rest assured we will issue a stern reprimand to our posting bot.
Good luck!
Your Novell Product Support Forums Team
http://forums.novell.com/

Where clause one query not being pushed down

I am having a problem where I cannot get a certain "optional" parameter to be pushed down to a query. The parameter gets applied in memory after the result set is returned but not pushed down to the DB. The function is as follows:
declare function getFoo($key as xs:string, $optinalInput as xs:string*) as element(b:bar)*
for $foo in f:getFoo()
where $key = $foo/key
where not(exists($optinalInput)) or $foo/optional = $optinalInput<- does not get pushed down to the query
return $foo
If I make optinalInput an xs:string instead of xs:string * and the optional parameter will get pushed to the query. The problem is for this optional parameter I could get anywhere from 0-50 in the sequence. Seems like when the parameter is a sequence it doesn't get applied to the query. Is there any way around this?

Mike,
I understand the difference between * and ? and I was one of the people working on the "string-length not getting pushed" problem so I am very familiar with it. I tried you solution that you mentioned below and it still did not push the where clause to the query. I know I could achieve this with an ad-hoc query but I wanted to do a pure xquery implementation of this component because of the benefits it could have when interacting with other components in our ODSI project...such as SQL joining and potentially pushing additional where clause down from components that call this component. The only way I did get this to kind of work is to do this:
return
for $o in $optinalInput
for $foo in f:getFoo()
where $key = $foo/key
where $o = $foo/optional
return
$foo
for $count in 1
where not(exists($optinalInput))
for $foo in f:getFoo()
where $key = $foo/key
return
$foo
By putting the optional parameter into a FOR statement above the table call it guarantees that at least one will exists and that's why the optional parameter gets pushed properly to the DB with a parameterized query. The problem with this is that even though a parameterized query gets pushed it will call the SQL statement multiple times!...not good.
Another solution that was suggested to me would be to create the number of sequences for each item in the sequence and treat each item as it's own. For example if you know that the schema limits the sequence from 0..50 then you could make 50 items and 50 where clauses....probably not an optimal solution either but it would achieve properly pushing the where clause tot he DB.
For now I am satisfied with this optional parameter not being pushed to the DB because the performance was still good but it would be nice if there was a maintainable pure xquery solution to this problem.
Thanks for the help it's always appreciated!
Mike

Preventing Domain Group Policy from being applied

How can a user prevent the domain group policy from being applied to his machine? And How can I stop users from doing that?

Hi,
No, group policy is processed by order, that is, local GPO is processed first, and then domain policy is processed by order, which would overwrite settings in the earlier GPOs if there are conflict.
If you don’t want to apply the domain policy, apply a higher precedence policy or disjoin the domain.
Group Policy processing and precedence
http://technet.microsoft.com/en-us/library/cc785665(v=ws.10).aspx
Alex Zhao
TechNet Community Support

E-mail not being pushed

I see this topic has been addressed with other phones, but since converting to the cloud my e-mail is either not being pushed or is severly delayed. I am using mobile me, with iphone 4 and i cloud. Was having no issues prior to using "the cloud". Any ideas ? thanks in advance

Push mail does'nt work since 2012/05/24 7.00 PM HAEC in France for me. I've 3 accounts and I'm an original MobileMe user.
I tried all the solutions on this bord. Nothing happen.
I called Apple support, for us iCloud is functional.
Push mail on iCloud is only functional if you're a new member not an older MobileMe.
You can test this by creating a new iCloud account, push mail is functional.
The problem comes from Apple.
Apple must solve this problem quickly.

Emails not being pushed to Mac Book Pro

Emails are not being pushed to my Macbook Pro despite coming to my other i devices. If I close and reopen mail it seems to encourage some but not all to arrive. Any suggestions for a fix please?
Thanks
Duncan

Hi duncal,
If you are having issues receiving emails in Mail on your MacBook Pro, you may find the troubleshooting steps outlined in the following article helpful:
OS X Mail: Troubleshooting sending and receiving email messages - Apple Support
Regards,
- Brenden

Win7 Computer Config group policy not applying

Hi all: I am having a bit of trouble getting a Computer Configuration group policy to apply in Windows 7 using ZCM 11.2.3. I have two group policies, one for User Configuration settings and the other for Computer Configuration settings. User Config GP is associated with users and Computer Config GP is associated with Workstations. ZCM shows both policies as being successfully applied. Yet, if I run rsop.msc to generate a resultant GP set, all Computer Config settings show up as undefined.
I have used this same technique in XP for many years without issue. I suspect the User Config GP is overwriting all GP settings as it is the last to be applied, but since that policy is ONLY for User Config settings I do not see how. Can someone show me the "errors of my ways"?
Thanks a bunch, Chris.

I have an identical policy setup - a policy wherein "Computer configuration" is checked and configured (I don't even touch the User related settings) and is applied to workstations as well as a second policy with "User configuration" checked and configured (as with the computer policy, I don't touch the Computer related policy in this User policy) and applied to users. I set it up that way because I want general settings specific to our environment to exist and be effective for all users including IT staff in the Computer policy. I then want to restrict users within the User Policy. I have no Active Directory.
The computer settings apply intermittently with no rhyme or reason, which makes it difficult to troubleshoot. I have Internet Zone Assignments configured in the Computer policy, so specific users have problems when this policy is not effective which is how I became aware of the problem. I found that I can run "gpudate /force" as the user and the computer policy becomes effective, which is what I do most of the time since it's a quick fix and I can move on to other things. I've tried changing the order the policies are applied. I am considering creating a single policy with both computer and user settings and associating it with users in hopes that it will always apply, but thought I'd check out the forum before doing so. ZCM 11.2.3 and Windows 7.

I can't determine how a group policy is being applied. Please help. Thank you.

Hi,
I'm having a problem trying to find how a particular policy is being applied on my domain (I've inherited this domain). When ever a user logs into a domain, the computer get's a new local group policy. One particular attribute is that the local
admin account get's renamed:
I can't figure out where it's coming from. I've run gpresult, and I'm assuming it's the default domain policy.
But when I go to the domain controller and look at the default domain policy, the entry is empty:
I'm really at a loss. However, I really don't think it's the default domain policy, but I can't figure out what else it could be?
Any help would be greatly appreciated. Thanks!!! -Tim

Does this help
C:\Users\***>gpresult /z
Microsoft (R) Windows (R) Operating System Group Policy Result tool v2.0
Copyright (C) Microsoft Corp. 1981-2001
Created On 2/12/2015 at 1:57:06 PM
RSOP data for ****\*** on H9MHD12 : Logging Mode
OS Configuration:            Member Workstation
OS Version:                  6.1.7601
Site Name:                   Default-First-Site-Name
Roaming Profile:             N/A
Local Profile:               C:\Users\***
Connected over a slow link?: No
COMPUTER SETTINGS
    CN=H9MHD12,CN=Computers,DC=***,DC=com
    Last time Group Policy was applied: 2/12/2015 at 1:03:12 PM
    Group Policy was applied from:      ***.***.Com
    Group Policy slow link threshold:   500 kbps
    Domain Name:                        ****
    Domain Type:                        Windows 2000
    Applied Group Policy Objects
        Default Domain Policy
        Local Group Policy
    The computer is a part of the following security groups
        BUILTIN\Administrators
        Everyone
        BUILTIN\Users
        NT AUTHORITY\NETWORK
        NT AUTHORITY\Authenticated Users
        This Organization
        H9MHD12$
        Domain Computers
        System Mandatory Level
    Resultant Set Of Policies for Computer
        Software Installations
            N/A
        Startup Scripts
            N/A
        Shutdown Scripts
            N/A
        Account Policies
            GPO: Default Domain Policy
                Policy:            MaximumPasswordAge
                Computer Setting: 42
            GPO: Default Domain Policy
                Policy:            MinimumPasswordAge
                Computer Setting: N/A
            GPO: Default Domain Policy
                Policy:            LockoutBadCount
                Computer Setting: N/A
            GPO: Default Domain Policy
                Policy:            PasswordHistorySize
                Computer Setting: 1
            GPO: Default Domain Policy
                Policy:            MinimumPasswordLength
                Computer Setting: N/A
        Audit Policy
            N/A
        User Rights
            N/A
        Security Options
            GPO: Default Domain Policy
                Policy:            PasswordComplexity
                Computer Setting: Not Enabled
            GPO: Default Domain Policy
                Policy:            ClearTextPassword
                Computer Setting: Not Enabled
            GPO: Default Domain Policy
                Policy:            ForceLogoffWhenHourExpire
                Computer Setting: Not Enabled
            GPO: Default Domain Policy
                Policy:            RequireLogonToChangePassword
                Computer Setting: Not Enabled
            GPO: Default Domain Policy
                Policy:            NewAdministratorName
                Computer Setting: Enabled
            N/A
        Event Log Settings
            N/A
        Restricted Groups
            N/A
        System Services
            N/A
        Registry Settings
            N/A
        File System Settings
            N/A
        Public Key Policies
            N/A
        Administrative Templates
            GPO: Local Group Policy
                KeyName:     Software\Policies\Microsoft\Windows\ScPnp\EnableScP
nP
                Value:       0, 0, 0, 0
                State:       Enabled
USER SETTINGS
    CN=*******,OU=Users,OU=Corporate,OU=***,DC=***,DC=com
    Last time Group Policy was applied: 2/12/2015 at 1:33:14 PM
    Group Policy was applied from:      ***.***.Com
    Group Policy slow link threshold:   500 kbps
    Domain Name:                        ***
    Domain Type:                        Windows 2000
    Applied Group Policy Objects
        Default Domain Policy
    The following GPOs were not applied because they were filtered out
        Local Group Policy
            Filtering: Not Applied (Empty)
    The user is a part of the following security groups
        Domain Users
        Everyone
        BUILTIN\Administrators
        BUILTIN\Users
        NT AUTHORITY\INTERACTIVE
        CONSOLE LOGON
        NT AUTHORITY\Authenticated Users
        This Organization
        LOCAL
    The user has the following security privileges
        Bypass traverse checking
        Manage auditing and security log
        Back up files and directories
        Restore files and directories
        Change the system time
        Shut down the system
        Force shutdown from a remote system
        Take ownership of files or other objects
        Debug programs
        Modify firmware environment values
        Profile system performance
        Profile single process
        Increase scheduling priority
        Load and unload device drivers
        Create a pagefile
        Adjust memory quotas for a process
        Remove computer from docking station
        Perform volume maintenance tasks
        Impersonate a client after authentication
        Create global objects
        Change the time zone
        Create symbolic links
        Increase a process working set
    Resultant Set Of Policies for User
        Software Installations
            N/A
        Logon Scripts
            N/A
        Logoff Scripts
            N/A
        Public Key Policies
            N/A
        Administrative Templates
            N/A
        Folder Redirection
            N/A
        Internet Explorer Browser User Interface
            N/A
        Internet Explorer Connection
            N/A
        Internet Explorer URLs
            N/A
        Internet Explorer Security
            N/A
        Internet Explorer Programs
            N/A

Group Policy not Applying

Currently we are running ZfD 7 and Netware 6.5 and have recently upgraded all our workstations to Windows XP Service Pack 2. Our tree structure consists of an OU for each school level, elementary, middle, and high, and an OU for each school in that respective level. Example:
Elementary
West Main
South Main
Middle
Brown Middle
The current contents in each School OU have users, groups, policies, ect. Previously policy was applied by a workstation policy package that distributed all policies: user, machine, and security which were associated with the School OU. Now we split the policy into workstation packages and a user packages. The goal was to have the workstation apply the machine and security policy and the user policy to apply user settings and create dynamic the local user account.
The workstation policy remains persistent on the workstation while the user policy creates a local user (non-volatile) and applies the user policy from a server path depending on group membership. We have four different user policy packages: Student, Teacher, Specialist and Technology. Each with there own group policy user configuration. Everyone in our Tree has the appropriate permissions to access the policies. We configure the user policy package as follows:
Policies  Windows XP
Enabled Dynamic Local User
Enabled Windows Group Policy
Workstation Manager
Network Location
\\serverpath
Checked User Configuration
Policy Schedule
User Desktop is active
Advanced Schedule
Impersonation
Interactive User
Associations
Groups (Teachers, Students)
I can get the workstation policy to apply with no problem. The problem comes when a users logs on. It doesnt matter if a new user is being created or if they are simply just switching users. User group policy doesnt apply randomly. The strange thing is it does copy down to the machine. If I connect to the admin share on a newly imaged workstation (with no policy applied) and open c:\windows\system32\ you see the creation of GroupPolicy.Usercache Folder and it copies to the GroupPolicy Folder which is were it applies policy from. Also you can see policy dynamically changing if different users logs on. The Registry.pol updates in the c:\windows\system32\ GroupPolicy.Usercache\User folder and c:\windows\system32\ GroupPolicy \User Sometimes group policy applies and sometimes it does not. When a user logs on you see the policy that was copied down apply. For example the run option is taken away from the start menu. During the log on process this remains in effect but when the process completes its almost like policy is take away. When this occurs I can run WMSCHED.Exe and reapply the user policy and it will apply sometimes. I tried applying group policy through both groups and organizational units. Both with the same results. I was wondering if anyone has had issues with applying group policy with ZEN or if I am doing this incorrectly. Any help would be much appreciated. Thanks.

rscurr,
It appears that in the past few days you have not received a response to your
posting. That concerns us, and has triggered this automated reply.
Has your problem been resolved? If not, you might try one of the following options:
- Visit http://support.novell.com and search the knowledgebase and/or check all
the other self support options and support programs available.
- You could also try posting your message again. Make sure it is posted in the
correct newsgroup. (http://forums.novell.com)
Be sure to read the forum FAQ about what to expect in the way of responses:
http://forums.novell.com/faq.php
If this is a reply to a duplicate posting, please ignore and accept our apologies
and rest assured we will issue a stern reprimand to our posting bot.
Good luck!
Your Novell Product Support Forums Team
http://support.novell.com/forums/

Group Policy not coming down on some machines

Environment:
Client 4.83SP1
Windows 2k SP4
Netware 5.1
eDir 8.7.3
Zen 3.2
Symptom:
After several agonizing days of going through the TIDs and turning on
debugging and checking all file dates on the workstation in question, a
working laptop and the public folders on the servers I've come up with the
following but I don't know the cause:
The workstation in question (and there are sporadic workstations with the
same problem) finds and uses the Container Policy (ZEN3 version) then reads
the User Package but will not execute the binding orders of the Group
Policy. As a matter of fact, I turned on Group Policy logging (TID
10058023) and a file is never created. Also, the Group Policies subkey in
the "HKLM/Software/Novell/Workstation Manager". I turned on ZenPOL32
logging and compared my laptop which is working to the workstation in
question. First, they are not applying the policies in the same order (DLU
is always first, but after that, the order is hap-hazard). But, I also see
some sections that make me wonder why the workstation is giving up. These
files are huges so I'd rather not post in this, but I'll put the pieces that
are raising my eyebrows:
Workstation in Question has the following piece about the Group Policy
Package:
ENTER ZENGetPolicyPackageDN -- tree = EPSD_TREE
ZENGetPolicyPackageDN -- policyDN = CN=Student User
Package:WinNT-2000-XP:Windows Group
Policy.OU=ZFD3.OU=Policies.OU=LMMS.OU=Middle.O=EPS D
Entering DSGetUserContext.
os version = 4
Preferred Tree = EPSD_TREE_______________________
Set Context to Tree = EPSD_TREE
CreateContext = 2
NWDSWhoAmI-2 returned (0) "CN=100341.OU=Students.OU=LMMS.OU=Middle.O=EPS D".
Verify TYPED (0) "CN=100341.OU=Students.OU=LMMS.OU=Middle.O=EPS D".
Preferred Tree = EPSD_TREE_______________________
Set Context to Tree = EPSD_TREE
CreateContext = 2
DSGetObjectAttrVal -- objectName -- CN=Student User
Package:WinNT-2000-XP:Windows Group
Policy.OU=ZFD3.OU=Policies.OU=LMMS.OU=Middle.O=EPS D
DSGetObjectAttrVal -- attrName -- zenpolAssociation
EXIT DSGetObjectAttrVal -- ccode -- 0
ZENGetPolicyPackageDN -- packageDN -- CN=Student User
Package.OU=ZFD3.OU=Policies.OU=LMMS.OU=Middle.O=EP SD
EXIT ZENGetPolicyPackageDN
The Laptop, in comparison for the same Group Policy Package has the
following:
PACKAGE FOUND = CN=Student User
Package.OU=ZFD3.OU=Policies.OU=LMMS.OU=Middle.O=EP SD
FindPolicy - objectName = CN=Student User
Package.OU=ZFD3.OU=Policies.OU=LMMS.OU=Middle.O=EP SD
FindPolicy - attrName = zenpolPolicy attrType = zenwmGroupPolicy
ZENGetObjectAttributes - attrName = zenpolPolicy objName = CN=Student User
Package.OU=ZFD3.OU=Policies.OU=LMMS.OU=Middle.O=EP SD
Enabled Policy = CN=Student User Package:WinNT-2000-XP:Windows Group
Policy.OU=ZFD3.OU=Policies.OU=LMMS.OU=Middle.O=EPS D
AddStringtoList -- Adding -- CN=Student User Package:WinNT-2000-XP:Windows
Group Policy.OU=ZFD3.OU=Policies.OU=LMMS.OU=Middle.O=EPS D
Enabled Policy(platformSpecific[4]) = CN=Student User
Package:WinNT-2000-XP:Windows Group
Policy.OU=ZFD3.OU=Policies.OU=LMMS.OU=Middle.O=EPS D
IsStringInList -- zenwmGroupPolicy -- is already in the list.
It appears that the workstation in question is having trouble resolving the
Effective policies. The laptop, on the other hand, has no such entries
anywhere in the log about effective policies.
If anyone has ideas I would love it. Uninstalling the 4.83sp1 client and
reisntalling did not help. I've DSREPAIR'd the tree several times with
Rebuild Operational Schema. WHen I uninstalled 4.83sp1 I checked the
registry and the Novell subkey was cleared out.
I'm burnt out on this one. If you want both log files, please post your
email address without the @ symbol and I'll fire them off to you.
Thanks in advance.
Bill Prehl
Network Manager
East Penn School District
prehlb at eastpennsd dot org

Here's the skinny on our situation.
1) We do not let the users update MS patches in our district. We do them
manually (still).
2) We are running the 4.83sp1 client on Win2k (have not got around to
upgrading to 4.90sp2). Our A/V had broke on 4.90 and we had to back it down
last year. So, XP machines are at 4.90sp2.
Win2k machine last had MS patches applied on 7/11/05 - this is a critical
point.
First, I discovered that the Policy Object in the tree was "corrupt" for
some of the 4.83sp1 clients. I'm betting all of them. Because the
zenpol32.dll was "seeing" the group policy objects but it was looking for a
zenpackage = effective in the log file. It was never initiating the
wmgrppol.dll to bring down and implement the group policies. Recreated the
policy object in the tree (not the Group Policies - reused the same folder)
and now the zenpol32.dll was operating properly but, still not getting the
NAL as the desktop. But, now the windows desktop was locking down but late,
very late. I would get the desktop and click on START and see the entire
start menu. Wait 10 seconds and secedit kicked in and now I had a
locked-down START menu.
Second, secedit appeared to be very delayed or wmgrppol.dll was having
trouble. I noticed this machine required 7 critical patches (one is the
genuine tool so really six patches). The last time patches were applied was
on 7/11/05. I noticed also that when I wanted to turn on secedit logging
(gpextensions registry keys) that even after a reboot there was no log file.
Apply the critical patches and now the NAL immediately works as the desktop
shell.
I worked on this problem for and entire work week plus some after hours
work.
Side note: Our XP machines with the 4.90sp2 client did not have a problem
seeing the Group Policy package in the tree. Only the 4.83sp1 client. So,
recreating the policy in the tree only helped the 4.83sp1 clients. Also, I
don't believe MS broke secedit in XP because they changed it to gpupdate.exe
so I'm betting it's a different configuration and the patches that broke
Win2k did not get applied to XP.
There is nothing on MS site that I could find about this nor does Novell
seem aware (or even care since it's 4.83sp1 and Zen3.2sp1). Maybe this post
will save somebody a lot of headache. If they keep MS patches up to date
they probably will never notice this problem unless they hit it over the
summer after MS released the secedit patch that broke it.
Cheers.
Bill Prehl
"Bill Prehl" <[email protected]> wrote in message
news:[email protected]...
> Environment:
> Client 4.83SP1
> Windows 2k SP4
> Netware 5.1
> eDir 8.7.3
> Zen 3.2
>
> Symptom:
> After several agonizing days of going through the TIDs and turning on
> debugging and checking all file dates on the workstation in question, a
> working laptop and the public folders on the servers I've come up with the
> following but I don't know the cause:
>
> The workstation in question (and there are sporadic workstations with the
> same problem) finds and uses the Container Policy (ZEN3 version) then
reads
> the User Package but will not execute the binding orders of the Group
> Policy. As a matter of fact, I turned on Group Policy logging (TID
> 10058023) and a file is never created. Also, the Group Policies subkey in
> the "HKLM/Software/Novell/Workstation Manager". I turned on ZenPOL32
> logging and compared my laptop which is working to the workstation in
> question. First, they are not applying the policies in the same order
(DLU
> is always first, but after that, the order is hap-hazard). But, I also
see
> some sections that make me wonder why the workstation is giving up. These
> files are huges so I'd rather not post in this, but I'll put the pieces
that
> are raising my eyebrows:
>
> Workstation in Question has the following piece about the Group Policy
> Package:
>
> *********
> ENTER ZENGetPolicyPackageDN -- tree = EPSD_TREE
> ZENGetPolicyPackageDN -- policyDN = CN=Student User
> Package:WinNT-2000-XP:Windows Group
> Policy.OU=ZFD3.OU=Policies.OU=LMMS.OU=Middle.O=EPS D
> Entering DSGetUserContext.
> os version = 4
> Preferred Tree = EPSD_TREE_______________________
> Set Context to Tree = EPSD_TREE
> CreateContext = 2
> NWDSWhoAmI-2 returned (0)
"CN=100341.OU=Students.OU=LMMS.OU=Middle.O=EPS D".
> Verify TYPED (0) "CN=100341.OU=Students.OU=LMMS.OU=Middle.O=EPS D".
> Preferred Tree = EPSD_TREE_______________________
> Set Context to Tree = EPSD_TREE
> CreateContext = 2
> DSGetObjectAttrVal -- objectName -- CN=Student User
> Package:WinNT-2000-XP:Windows Group
> Policy.OU=ZFD3.OU=Policies.OU=LMMS.OU=Middle.O=EPS D
> DSGetObjectAttrVal -- attrName -- zenpolAssociation
> EXIT DSGetObjectAttrVal -- ccode -- 0
> ZENGetPolicyPackageDN -- packageDN -- CN=Student User
> Package.OU=ZFD3.OU=Policies.OU=LMMS.OU=Middle.O=EP SD
> EXIT ZENGetPolicyPackageDN
>
> *********
>
> The Laptop, in comparison for the same Group Policy Package has the
> following:
>
> *********
> PACKAGE FOUND = CN=Student User
> Package.OU=ZFD3.OU=Policies.OU=LMMS.OU=Middle.O=EP SD
> FindPolicy - objectName = CN=Student User
> Package.OU=ZFD3.OU=Policies.OU=LMMS.OU=Middle.O=EP SD
> FindPolicy - attrName = zenpolPolicy attrType = zenwmGroupPolicy
> ZENGetObjectAttributes - attrName = zenpolPolicy objName = CN=Student User
> Package.OU=ZFD3.OU=Policies.OU=LMMS.OU=Middle.O=EP SD
> Enabled Policy = CN=Student User Package:WinNT-2000-XP:Windows Group
> Policy.OU=ZFD3.OU=Policies.OU=LMMS.OU=Middle.O=EPS D
> AddStringtoList -- Adding -- CN=Student User Package:WinNT-2000-XP:Windows
> Group Policy.OU=ZFD3.OU=Policies.OU=LMMS.OU=Middle.O=EPS D
> Enabled Policy(platformSpecific[4]) = CN=Student User
> Package:WinNT-2000-XP:Windows Group
> Policy.OU=ZFD3.OU=Policies.OU=LMMS.OU=Middle.O=EPS D
> IsStringInList -- zenwmGroupPolicy -- is already in the list.
>
> *********
>
> It appears that the workstation in question is having trouble resolving
the
> Effective policies. The laptop, on the other hand, has no such entries
> anywhere in the log about effective policies.
>
> If anyone has ideas I would love it. Uninstalling the 4.83sp1 client and
> reisntalling did not help. I've DSREPAIR'd the tree several times with
> Rebuild Operational Schema. WHen I uninstalled 4.83sp1 I checked the
> registry and the Novell subkey was cleared out.
>
> I'm burnt out on this one. If you want both log files, please post your
> email address without the @ symbol and I'll fire them off to you.
>
> Thanks in advance.
>
> Bill Prehl
> Network Manager
> East Penn School District
> prehlb at eastpennsd dot org
>
>

Group Policy not populating Compatibility View List in IE 11

I am currently a domain admin in a large, multi domain controller environment. Our AD was much out of date (2000 mix mode) and we are currently updating it in steps (2003 Native at this point)
At the same time other technicians have started patch testing, moving us from IE10 to IE11. However, there seems to be one major catch so far. Users require access to a website that will only run properly in compatibility mode. This was true in IE10 and
is true in IE11.
As such, this website was set as a mandatory compatibility mode page in GPO (Administrative Tempaltes\Windows Components\Internet Explorer\Compatibility View\Use Policy List of Internet Explorer 7 sites). This has worked fine for 8, 9, 10 for this site and
others.
However, it was not showing in compatibility mode in IE 11 it is showing in normal mode and breaks. The policy is applying normally and the list is accurate in rsop.msc. If the site is added to compatibility mode locally inside IE11 it works fine.
Our patch testers are all seeing the same problem. However, I have been unable to establish if it is just this site or others are affected (mostly it's old billing and intranet sites I don't have access to).
I'm not sure what the disconnect is.

Hi,
There are also more modes. The detailed information is below:
•Via X-UA-compatible meta tag: The webpage developer used a meta tag to specify a legacy document mode.
•compatible HTTP header: The web server has requested a legacy document mode via an HTTP header.
•Via local compatibility view settings: The site was manually added to the Compatibility View settings.
•Via the compatibility view list: The site is on Microsoft's Compatibility View list.
•Via intranet compatibility settings: The "Display intranet sites in Compatibility View" box is checked in the Compatibility View settings.
please remove all website from "Use Policy List of Internet Explorer 7 sites" list.
Remember to run "gpupdate /force" command to apply the new group policy object.
Then open the websites, click F12 key, check their Document mode status.
Based on my test, this is also related with web itself. it will adjust status according to its design.
Karen Hu
TechNet Community Support

Emails not being pushed following update 5.1

I realise that there are several threads about this, but nothing seems to be getting done, so figured the more people that complain about this issue the better!!
Have tried deleting and reinstalling the cloud on my iPhone 4s, but this has failed to work, emails are still not getting pushed to my phone.
One of the problmes also that I have noticed is that my password is not being stored on my phone properly.
I have entered it so many times now, only for it to be verified and then my phone decides not to keep the last 2 digits of my password, which means that iCloud on my phone will not work.
Also have an ipad, which will not be updated until this issue is sorted out.

Hello there, Gumblejack.
The following Knowledge Base article offers up some great steps for troubleshooting your issue:
iPod not recognized in My Computer and in iTunes for Windows
http://support.apple.com/kb/ts1369
Thanks for reaching out to Apple Support Communities.
Cheers,
Pedro.

2.2.1 (?) being pushed out today

I just got off the phone with Verizon and I was told a second Froyo update will be pushed out today. Supposedly this update will correct the battery and incoming calls not ringing issues among others. WIll have to wait and see.

It is being reported on another forum that the upgrade is ED03. Current is ED01. I haven't seen anything official yet from VZW.

Group Policy not being pushed out

Similar Messages

Maybe you are looking for