Group Policy not populating Compatibility View List in IE 11

I am currently a domain admin in a large, multi domain controller environment. Our AD was much out of date (2000 mix mode) and we are currently updating it in steps (2003 Native at this point)
At the same time other technicians have started patch testing, moving us from IE10 to IE11. However, there seems to be one major catch so far. Users require access to a website that will only run properly in compatibility mode. This was true in IE10 and
is true in IE11.
As such, this website was set as a mandatory compatibility mode page in GPO (Administrative Tempaltes\Windows Components\Internet Explorer\Compatibility View\Use Policy List of Internet Explorer 7 sites). This has worked fine for 8, 9, 10 for this site and
others.
However, it was not showing in compatibility mode in IE 11 it is showing in normal mode and breaks. The policy is applying normally and the list is accurate in rsop.msc. If the site is added to compatibility mode locally inside IE11 it works fine.
Our patch testers are all seeing the same problem. However, I have been unable to establish if it is just this site or others are affected (mostly it's old billing and intranet sites I don't have access to).
I'm not sure what the disconnect is.

Hi,
There are also more modes. The detailed information is below:
•Via X-UA-compatible meta tag: The webpage developer used a meta tag to specify a legacy document mode.
•compatible HTTP header: The web server has requested a legacy document mode via an HTTP header.
•Via local compatibility view settings: The site was manually added to the Compatibility View settings.
•Via the compatibility view list: The site is on Microsoft's Compatibility View list.
•Via intranet compatibility settings: The "Display intranet sites in Compatibility View" box is checked in the Compatibility View settings.
please remove all website from "Use Policy List of Internet Explorer 7 sites" list.
Remember to run "gpupdate /force" command to apply the new group policy object.
Then open the websites, click F12 key, check their Document mode status.
Based on my test, this is also related with web itself. it will adjust status according to its design.
Karen Hu
TechNet Community Support

Similar Messages

Group Policy not populating IE11's compatibility sites.

We normally do not allow IE updates, but we got a pallet of new computers with IE11 preinstalled on them from Dell. I figured now is a good time to get this working in our environment.
The issue is that under our group policy settings are not putting the websites we need in compatibility mode. I have verified the group policy is applied to my computer using rsop.msc and I verified the settings in there. However when
I try to visit our loan application which runs at http://192.168.1.9 it shows a browser not supported message and says to use IE 5.5 or later. Well if one were to manually add the site in compatibility mode, then it would work. So we want to avoid
the calls to IT Support on how to add sites to compatibility mode and just control it from our end via Group Policy.
So under User Configuration > Policies > Administrative Templates > Windows Components > Internet Explorer > Compatibility View : we have these set:
Include updated Web site lists from Microsoft - Enabled
Use Policy List of Internet Explorer 7 sites - Enabled
Show:
http://192.168.1.9 (our lending application)
https://another website
http://192.168.1.15 (our lending application test site for new upcoming releases)

Hi,
The site list deployed using administrative template might not be visible in IE user interface. We could see the sites loading in the compatibility mode by opening the developer tool bar (press F12) and checking the browser mode.
Also, we can verify the setting in the client machine registry. The configuration is written to registry under HKCU(HKLM)\Software\[Wow6432Node]\Policies\Microsoft\Internet Explorer\BrowserEmulation\PolicyList. More information, please see
this blog:
How to add web site to Compatibility View List via GPO
In addition, we need to configure the "Turn on Internet Explorer Standards
mode for Local Intranet" policy and set it to disable.
For the “Use
Policy List of Internet Explorer 7 sites”
policy: We need to add Top level domain names in the
policy settings. Reference: Compatibility List FAQ
Some more information:
Missing the Compatibility View Button
Hope this helps
Best regards
Michael Shao
TechNet Community Support

Group Policy to clear down MRU lists and to clear or to prevent user login details for programs such as Remote Desktop from being recorded

Hi there,
Please can anyone instruct me on how to set up Group Policy to clear down MRU lists and to clear or to prevent user login details for programs such as Remote Desktop from being recorded. Your help would be much appreciated.
Kind regards,
RocknRollTim
P.S. I was redirected by a forum user off the Microsoft Community forum.

Hi RocknRollTim,
Agree with Jason. Using a script will be a better option.
Just addition, for history of RDP Connections, please open Registry Editor and follow the path:
HKEY_CURRENT_USER\Software\Microsoft\Terminal Server Client\Default. Please check if find MRU registry items where the name (or the IP address) of the terminal server is kept in.
Please also follow the path: HKEY_CURRENT_USER\Software\Microsoft\Terminal Server Client\Servers. It contains
the list of all RDC (remote desktop client) connections that have ever been established from this computer.
When expand Server folder and select a node, you will see the UsernameHint key that show the name of the user connected by rdp.
Please back up registry items to avoid unexpected issues before any operation.
If any update, please feel free to let us know.
Hope this helps.
Best regards,
Justin Gu
Thank you for responding back Justin Gu and I agree with both you and Jason Miller that a script can easily achieve this task. Thank you all for your help.
Many thanks,
RocknRollTim

Windows 2008 Group Policy not working in Windows 8.1

Hi ,
We found that the GPO settings created in Windows 2008 is not working in a Windows 8.1 machine.
One example is the proxy settings.
We confirmed from gpresult that the GPO is in the list but checking the actual proxy settings, it is not applied.
Regards,
Jhun

Hi,
How did we configure the proxy settings, using Internet Explorer Maintenance? If it is this case, just as Martin suggested, we can’t use IEM to manage
IE 10 and IE 11. However, we can configure the proxy setting via Group Policy Preferences (GPP).
Regarding this point, the following blog can be referred to for more information.
Configuring Internet Explorer 10′s
Proxy Via Group Policy
http://johnfail.wordpress.com/2013/06/15/configuring-internet-explorer-10s-proxy-via-group-policy/
In addition, when we use this GPP extension, pay attention to GPP F5-F8 keys.
Regarding this point, the following blog can be referred to for more information.
Group Policy Preferences F5 F6 F7 F8 “documentation”
http://msitpros.com/?p=1014
Please Note: Since the above two websites are not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy
of this information.
In addition, regarding the deprecation of IEM, the following article can be referred to for more information.
Appendix B: Replacements for Internet Explorer Maintenance
http://technet.microsoft.com/en-us/library/jj890998.aspx
Best regards,
Frank Shen

Group Policy not coming down on some machines

Environment:
Client 4.83SP1
Windows 2k SP4
Netware 5.1
eDir 8.7.3
Zen 3.2
Symptom:
After several agonizing days of going through the TIDs and turning on
debugging and checking all file dates on the workstation in question, a
working laptop and the public folders on the servers I've come up with the
following but I don't know the cause:
The workstation in question (and there are sporadic workstations with the
same problem) finds and uses the Container Policy (ZEN3 version) then reads
the User Package but will not execute the binding orders of the Group
Policy. As a matter of fact, I turned on Group Policy logging (TID
10058023) and a file is never created. Also, the Group Policies subkey in
the "HKLM/Software/Novell/Workstation Manager". I turned on ZenPOL32
logging and compared my laptop which is working to the workstation in
question. First, they are not applying the policies in the same order (DLU
is always first, but after that, the order is hap-hazard). But, I also see
some sections that make me wonder why the workstation is giving up. These
files are huges so I'd rather not post in this, but I'll put the pieces that
are raising my eyebrows:
Workstation in Question has the following piece about the Group Policy
Package:
ENTER ZENGetPolicyPackageDN -- tree = EPSD_TREE
ZENGetPolicyPackageDN -- policyDN = CN=Student User
Package:WinNT-2000-XP:Windows Group
Policy.OU=ZFD3.OU=Policies.OU=LMMS.OU=Middle.O=EPS D
Entering DSGetUserContext.
os version = 4
Preferred Tree = EPSD_TREE_______________________
Set Context to Tree = EPSD_TREE
CreateContext = 2
NWDSWhoAmI-2 returned (0) "CN=100341.OU=Students.OU=LMMS.OU=Middle.O=EPS D".
Verify TYPED (0) "CN=100341.OU=Students.OU=LMMS.OU=Middle.O=EPS D".
Preferred Tree = EPSD_TREE_______________________
Set Context to Tree = EPSD_TREE
CreateContext = 2
DSGetObjectAttrVal -- objectName -- CN=Student User
Package:WinNT-2000-XP:Windows Group
Policy.OU=ZFD3.OU=Policies.OU=LMMS.OU=Middle.O=EPS D
DSGetObjectAttrVal -- attrName -- zenpolAssociation
EXIT DSGetObjectAttrVal -- ccode -- 0
ZENGetPolicyPackageDN -- packageDN -- CN=Student User
Package.OU=ZFD3.OU=Policies.OU=LMMS.OU=Middle.O=EP SD
EXIT ZENGetPolicyPackageDN
The Laptop, in comparison for the same Group Policy Package has the
following:
PACKAGE FOUND = CN=Student User
Package.OU=ZFD3.OU=Policies.OU=LMMS.OU=Middle.O=EP SD
FindPolicy - objectName = CN=Student User
Package.OU=ZFD3.OU=Policies.OU=LMMS.OU=Middle.O=EP SD
FindPolicy - attrName = zenpolPolicy attrType = zenwmGroupPolicy
ZENGetObjectAttributes - attrName = zenpolPolicy objName = CN=Student User
Package.OU=ZFD3.OU=Policies.OU=LMMS.OU=Middle.O=EP SD
Enabled Policy = CN=Student User Package:WinNT-2000-XP:Windows Group
Policy.OU=ZFD3.OU=Policies.OU=LMMS.OU=Middle.O=EPS D
AddStringtoList -- Adding -- CN=Student User Package:WinNT-2000-XP:Windows
Group Policy.OU=ZFD3.OU=Policies.OU=LMMS.OU=Middle.O=EPS D
Enabled Policy(platformSpecific[4]) = CN=Student User
Package:WinNT-2000-XP:Windows Group
Policy.OU=ZFD3.OU=Policies.OU=LMMS.OU=Middle.O=EPS D
IsStringInList -- zenwmGroupPolicy -- is already in the list.
It appears that the workstation in question is having trouble resolving the
Effective policies. The laptop, on the other hand, has no such entries
anywhere in the log about effective policies.
If anyone has ideas I would love it. Uninstalling the 4.83sp1 client and
reisntalling did not help. I've DSREPAIR'd the tree several times with
Rebuild Operational Schema. WHen I uninstalled 4.83sp1 I checked the
registry and the Novell subkey was cleared out.
I'm burnt out on this one. If you want both log files, please post your
email address without the @ symbol and I'll fire them off to you.
Thanks in advance.
Bill Prehl
Network Manager
East Penn School District
prehlb at eastpennsd dot org

Here's the skinny on our situation.
1) We do not let the users update MS patches in our district. We do them
manually (still).
2) We are running the 4.83sp1 client on Win2k (have not got around to
upgrading to 4.90sp2). Our A/V had broke on 4.90 and we had to back it down
last year. So, XP machines are at 4.90sp2.
Win2k machine last had MS patches applied on 7/11/05 - this is a critical
point.
First, I discovered that the Policy Object in the tree was "corrupt" for
some of the 4.83sp1 clients. I'm betting all of them. Because the
zenpol32.dll was "seeing" the group policy objects but it was looking for a
zenpackage = effective in the log file. It was never initiating the
wmgrppol.dll to bring down and implement the group policies. Recreated the
policy object in the tree (not the Group Policies - reused the same folder)
and now the zenpol32.dll was operating properly but, still not getting the
NAL as the desktop. But, now the windows desktop was locking down but late,
very late. I would get the desktop and click on START and see the entire
start menu. Wait 10 seconds and secedit kicked in and now I had a
locked-down START menu.
Second, secedit appeared to be very delayed or wmgrppol.dll was having
trouble. I noticed this machine required 7 critical patches (one is the
genuine tool so really six patches). The last time patches were applied was
on 7/11/05. I noticed also that when I wanted to turn on secedit logging
(gpextensions registry keys) that even after a reboot there was no log file.
Apply the critical patches and now the NAL immediately works as the desktop
shell.
I worked on this problem for and entire work week plus some after hours
work.
Side note: Our XP machines with the 4.90sp2 client did not have a problem
seeing the Group Policy package in the tree. Only the 4.83sp1 client. So,
recreating the policy in the tree only helped the 4.83sp1 clients. Also, I
don't believe MS broke secedit in XP because they changed it to gpupdate.exe
so I'm betting it's a different configuration and the patches that broke
Win2k did not get applied to XP.
There is nothing on MS site that I could find about this nor does Novell
seem aware (or even care since it's 4.83sp1 and Zen3.2sp1). Maybe this post
will save somebody a lot of headache. If they keep MS patches up to date
they probably will never notice this problem unless they hit it over the
summer after MS released the secedit patch that broke it.
Cheers.
Bill Prehl
"Bill Prehl" <[email protected]> wrote in message
news:[email protected]...
> Environment:
> Client 4.83SP1
> Windows 2k SP4
> Netware 5.1
> eDir 8.7.3
> Zen 3.2
>
> Symptom:
> After several agonizing days of going through the TIDs and turning on
> debugging and checking all file dates on the workstation in question, a
> working laptop and the public folders on the servers I've come up with the
> following but I don't know the cause:
>
> The workstation in question (and there are sporadic workstations with the
> same problem) finds and uses the Container Policy (ZEN3 version) then
reads
> the User Package but will not execute the binding orders of the Group
> Policy. As a matter of fact, I turned on Group Policy logging (TID
> 10058023) and a file is never created. Also, the Group Policies subkey in
> the "HKLM/Software/Novell/Workstation Manager". I turned on ZenPOL32
> logging and compared my laptop which is working to the workstation in
> question. First, they are not applying the policies in the same order
(DLU
> is always first, but after that, the order is hap-hazard). But, I also
see
> some sections that make me wonder why the workstation is giving up. These
> files are huges so I'd rather not post in this, but I'll put the pieces
that
> are raising my eyebrows:
>
> Workstation in Question has the following piece about the Group Policy
> Package:
>
> *********
> ENTER ZENGetPolicyPackageDN -- tree = EPSD_TREE
> ZENGetPolicyPackageDN -- policyDN = CN=Student User
> Package:WinNT-2000-XP:Windows Group
> Policy.OU=ZFD3.OU=Policies.OU=LMMS.OU=Middle.O=EPS D
> Entering DSGetUserContext.
> os version = 4
> Preferred Tree = EPSD_TREE_______________________
> Set Context to Tree = EPSD_TREE
> CreateContext = 2
> NWDSWhoAmI-2 returned (0)
"CN=100341.OU=Students.OU=LMMS.OU=Middle.O=EPS D".
> Verify TYPED (0) "CN=100341.OU=Students.OU=LMMS.OU=Middle.O=EPS D".
> Preferred Tree = EPSD_TREE_______________________
> Set Context to Tree = EPSD_TREE
> CreateContext = 2
> DSGetObjectAttrVal -- objectName -- CN=Student User
> Package:WinNT-2000-XP:Windows Group
> Policy.OU=ZFD3.OU=Policies.OU=LMMS.OU=Middle.O=EPS D
> DSGetObjectAttrVal -- attrName -- zenpolAssociation
> EXIT DSGetObjectAttrVal -- ccode -- 0
> ZENGetPolicyPackageDN -- packageDN -- CN=Student User
> Package.OU=ZFD3.OU=Policies.OU=LMMS.OU=Middle.O=EP SD
> EXIT ZENGetPolicyPackageDN
>
> *********
>
> The Laptop, in comparison for the same Group Policy Package has the
> following:
>
> *********
> PACKAGE FOUND = CN=Student User
> Package.OU=ZFD3.OU=Policies.OU=LMMS.OU=Middle.O=EP SD
> FindPolicy - objectName = CN=Student User
> Package.OU=ZFD3.OU=Policies.OU=LMMS.OU=Middle.O=EP SD
> FindPolicy - attrName = zenpolPolicy attrType = zenwmGroupPolicy
> ZENGetObjectAttributes - attrName = zenpolPolicy objName = CN=Student User
> Package.OU=ZFD3.OU=Policies.OU=LMMS.OU=Middle.O=EP SD
> Enabled Policy = CN=Student User Package:WinNT-2000-XP:Windows Group
> Policy.OU=ZFD3.OU=Policies.OU=LMMS.OU=Middle.O=EPS D
> AddStringtoList -- Adding -- CN=Student User Package:WinNT-2000-XP:Windows
> Group Policy.OU=ZFD3.OU=Policies.OU=LMMS.OU=Middle.O=EPS D
> Enabled Policy(platformSpecific[4]) = CN=Student User
> Package:WinNT-2000-XP:Windows Group
> Policy.OU=ZFD3.OU=Policies.OU=LMMS.OU=Middle.O=EPS D
> IsStringInList -- zenwmGroupPolicy -- is already in the list.
>
> *********
>
> It appears that the workstation in question is having trouble resolving
the
> Effective policies. The laptop, on the other hand, has no such entries
> anywhere in the log about effective policies.
>
> If anyone has ideas I would love it. Uninstalling the 4.83sp1 client and
> reisntalling did not help. I've DSREPAIR'd the tree several times with
> Rebuild Operational Schema. WHen I uninstalled 4.83sp1 I checked the
> registry and the Novell subkey was cleared out.
>
> I'm burnt out on this one. If you want both log files, please post your
> email address without the @ symbol and I'll fire them off to you.
>
> Thanks in advance.
>
> Bill Prehl
> Network Manager
> East Penn School District
> prehlb at eastpennsd dot org
>
>

Group Policy not being pushed out

HI,
I have a problem with Group Policy updates. The domain controllers are Server 2008 R2 and the clients are all Windows 7 64bit. It looks like the clients are not updating their group policies. We've recently added a certificate for our new
corporate wifi. During testing we used gpupdate /force and the computers installed the certificates. It has been several weeks since the GP was published and we have announced the new wifi. Users are still being prompted to accept the certificate
even though they should have received it from the GP. If I try to do a RSOP, of a users computer, I get "The RPC Server is unavailable" Any ideas on how to fix this?
Thanks
Ron Soulliard
Ron Soulliard Systems Administrator Polaris Ventures

Group Policy is always retrieved by the clients. If a client sees a new GPO that is applicable to them, it will grab it and apply it.
In the GPMC, can you run a GPResult for a computer that hasn't gotten the GPO? You might also want to check out this list of common GP issues:
http://deployhappiness.com/top-10-ways-to-troubleshoot-group-policy/
If my answer helped you, check out my blog:
DeployHappiness. Subscribe by
RSS or
email.

Group Policy not work in some client machine.

Hello All,
Existing environment is AD 2012. gpupdate /force command does not working in some client machine. And it's occur randomly. Error shown about 15-20% of client machine. Please suggest. Hopefully this time get reply from community.
The Error:
User policy could not be updated successfully. The following errors were encount
ered:
The processing of Group Policy failed. Windows attempted to read the file \\example.net\sysvol\example.net\Policies\{31B2F340-016D-11D2-945F-00C04FB
984F9}\gpt.ini from a domain controller and was not successful. Group Policy set
tings may not be applied until this event is resolved. This issue may be transie
nt and could be caused by one or more of the following:
a) Name Resolution/Network Connectivity to the current domain controller.
b) File Replication Service Latency (a file created on another domain controller
has not replicated to the current domain controller).
c) The Distributed File System (DFS) client has been disabled.
Computer policy could not be updated successfully. The following errors were enc
ountered:
The processing of Group Policy failed. Windows attempted to read the file \\example.net\sysvol\example.net\Policies\{31B2F340-016D-11D2-945F-00C04FB
984F9}\gpt.ini from a domain controller and was not successful. Group Policy set
tings may not be applied until this event is resolved. This issue may be transie
nt and could be caused by one or more of the following:
a) Name Resolution/Network Connectivity to the current domain controller.

Thanks for your reply. basically this error occurs with in same location as well as branch location. i have check event log in AD but not got any specific error. AD health status is ok. AD to AD synchronization also working well. All the client machine running
on windows 7 64 bit and few of them are windows 8.
Please suggest. if you need any event log for analysis i can send you.
Thanks
I recommend you examine the event logs upon an affected client machine. Specifically, look for the surrounding events on that machine (both System, and Application logs), for the hours previous and the hour after.
The time period may vary according to your environment (e.g. what is expected/normal for your environment, your configured GP refresh cycle-time).
e.g., are there network drops, or power drops, or system crashes, restarts at the similar time.
if it's a laptop, is it wireless? Was there a transition from wireless to wired operation?
Is there VPN in use?
If you are able to compare with another machine (I would encourage that), to understand what "normal" looks like in the logs, so that you have some kind of baseline data for comparison.
Other checks, maybe confirm that the machines are updating as required (have the relevant WindowsUpdates etc), and consider if some security/protection/firewall software might be interfering with normal Windows operations.
Also the potential for malware or virus, which can disturb many basic services (ensure a scan is performed and returns clean).
If you have the opportunity for an affected user to contact you urgently when the symptom occurs, check that the gpt.ini file is accessible from their PC.
e.g.: \\example.net\sysvol\example.net\Policies\{31B2F340-016D-11D2-945F-00C04FB
984F9}\gpt.ini
This file is hosted within the replicated SYSVOL share on your DC's, so check that it is accessible.
You might also validate the particular GPO this refers to, and check each of your DC's holds the correct copy of the files for that GPO GUID.
If you open that GPO, and perform a minor change to it (e.g. add a comment), then click Apply, OK, this should cause the GPO contents to replicate an updated version (be cautious, depending upon the nature of that GPO !!!)
Don
(Please take a moment to "Vote as Helpful" and/or "Mark as Answer", where applicable.
This helps the community, keeps the forums tidy, and recognises useful contributions. Thanks!)

New Group Policy not working on 2008 RDS in 2012 Domain - Security Filtering problem?

We have a Windows 2008 R2 RDS in a Windows 2012R2 Domain. We want to lockdown the 2008 RDS for Domain users that we have added to a new security Group--named "Data Collection Users". These users are "Domain Users" and login to the
2008 RDS using Windows XP SP3 machines to run a specific application -they do not use their local desktops for anything. WE added this group to the local RDU group on the RDS. We do not have any other users that login to the RDS through terminal,
including any Domain Admins.
So far we have done these steps:
On the DC, created new OU (called Terminal Servers) and moved the RDS into it.
Opened Group Policy on the DC, and under GP Objects, created a new policy called "TS Users Lockdown".
Linked the Policy to the OU.
Under Security Filtering we removed the Authenticated Users, added the RDS computer account (called QS2), added the "Data Collection Users" and chose Allow for "Read" and "Apply Policy"
Under Security Filtering, for Domain Admins, we chose Deny for "Apply Group Policy"
We edited the Policy (under Computer Configuration>AT>SYS>GP) to Enable Loopback processing - Replace mode.
We first tested the policy by trying to remove the "Run" from startup menu and "prohibit access to Control Panel".
We ran the Group Policy force update from within GP Management - ran successfully.
We did not reboot the RDS.
Neither of the settings we tried in Step 7 worked. Why Not?
Here are images from the Security Filtering:

Ok--Do I reboot the RDS or the DC? or both?
Does it look like my Security Filtering is correct? I have seen posts where you should not remove the "Authenticated users"?

Process scheduler server list is not populating in SERVER LIST page.

Need urgent help.
We have PeopleSoft Campus Solution 8.52,9.0 application. We had two Process Scheduler server one in Linux and one in NT. There was one issue that all the jobs which processed were getting into success and reports were also posted,however it was not updating the database with data. In order to solve it I created a new Process Scheduler server at onther NT machine. This time when I navigated to Process Monitor --> Server List pages it has no data there. I ran COBOL job but it went to successful and report posetd but nothing was updated into the database.
Please help me out of this situation.
Thanks
Vikrant

Thanks a lot RCC for your response.
There is actually three issues
1)Process Monitor Server List page has no data.
2)As I go to run a process in the system process request I see that the Server Name,Reccurence,Type and Format are not workin or they are disabled.
3)Cobol jobs which I am running through PSNT is not updating database,however the Process is getting successful and reports are having posted status,but when I go to see Reports it is not having any output file its blank.I tried to check the reports at webserver,there were also no reports were published,However it works properly for all other Process.
For the first problem it has got resolved the solution is in this "Process Monitor Server List Not Populating With Data (Doc ID 615323.1)"( for those who face this problem in future :)).
For your query RCC, I have named same name of PSNT which was earlier in the different machine.
Please help
Thanks
Vikrant.

Win7 Computer Config group policy not applying

Hi all: I am having a bit of trouble getting a Computer Configuration group policy to apply in Windows 7 using ZCM 11.2.3. I have two group policies, one for User Configuration settings and the other for Computer Configuration settings. User Config GP is associated with users and Computer Config GP is associated with Workstations. ZCM shows both policies as being successfully applied. Yet, if I run rsop.msc to generate a resultant GP set, all Computer Config settings show up as undefined.
I have used this same technique in XP for many years without issue. I suspect the User Config GP is overwriting all GP settings as it is the last to be applied, but since that policy is ONLY for User Config settings I do not see how. Can someone show me the "errors of my ways"?
Thanks a bunch, Chris.

I have an identical policy setup - a policy wherein "Computer configuration" is checked and configured (I don't even touch the User related settings) and is applied to workstations as well as a second policy with "User configuration" checked and configured (as with the computer policy, I don't touch the Computer related policy in this User policy) and applied to users. I set it up that way because I want general settings specific to our environment to exist and be effective for all users including IT staff in the Computer policy. I then want to restrict users within the User Policy. I have no Active Directory.
The computer settings apply intermittently with no rhyme or reason, which makes it difficult to troubleshoot. I have Internet Zone Assignments configured in the Computer policy, so specific users have problems when this policy is not effective which is how I became aware of the problem. I found that I can run "gpudate /force" as the user and the computer policy becomes effective, which is what I do most of the time since it's a quick fix and I can move on to other things. I've tried changing the order the policies are applied. I am considering creating a single policy with both computer and user settings and associating it with users in hopes that it will always apply, but thought I'd check out the forum before doing so. ZCM 11.2.3 and Windows 7.

Group Policy not getting read on new laptops

I have a batch of new Dell Latitude E5500 laptops.. Using Zen 7 on
netware 6.5.. downloaded the latest agent as a troubleshooting plan.
The agent read enough of the assigned policy to create a DLU but does
not read enough of it to apply the group policy and does not read the
profile or re-save the profile to the users home folder.. the same
policy works just fine on the other 1200 computers in the school
district.. any ideas ??
Thanks in advance
Doug

Doug,
It appears that in the past few days you have not received a response to your
posting. That concerns us, and has triggered this automated reply.
Has your problem been resolved? If not, you might try one of the following options:
- Visit http://support.novell.com and search the knowledgebase and/or check all
the other self support options and support programs available.
- You could also try posting your message again. Make sure it is posted in the
correct newsgroup. (http://forums.novell.com)
Be sure to read the forum FAQ about what to expect in the way of responses:
http://forums.novell.com/faq.php
If this is a reply to a duplicate posting, please ignore and accept our apologies
and rest assured we will issue a stern reprimand to our posting bot.
Good luck!
Your Novell Product Support Forums Team
http://support.novell.com/forums/

Group Policy not Applying

Currently we are running ZfD 7 and Netware 6.5 and have recently upgraded all our workstations to Windows XP Service Pack 2. Our tree structure consists of an OU for each school level, elementary, middle, and high, and an OU for each school in that respective level. Example:
Elementary
West Main
South Main
Middle
Brown Middle
The current contents in each School OU have users, groups, policies, ect. Previously policy was applied by a workstation policy package that distributed all policies: user, machine, and security which were associated with the School OU. Now we split the policy into workstation packages and a user packages. The goal was to have the workstation apply the machine and security policy and the user policy to apply user settings and create dynamic the local user account.
The workstation policy remains persistent on the workstation while the user policy creates a local user (non-volatile) and applies the user policy from a server path depending on group membership. We have four different user policy packages: Student, Teacher, Specialist and Technology. Each with there own group policy user configuration. Everyone in our Tree has the appropriate permissions to access the policies. We configure the user policy package as follows:
Policies  Windows XP
Enabled Dynamic Local User
Enabled Windows Group Policy
Workstation Manager
Network Location
\\serverpath
Checked User Configuration
Policy Schedule
User Desktop is active
Advanced Schedule
Impersonation
Interactive User
Associations
Groups (Teachers, Students)
I can get the workstation policy to apply with no problem. The problem comes when a users logs on. It doesnt matter if a new user is being created or if they are simply just switching users. User group policy doesnt apply randomly. The strange thing is it does copy down to the machine. If I connect to the admin share on a newly imaged workstation (with no policy applied) and open c:\windows\system32\ you see the creation of GroupPolicy.Usercache Folder and it copies to the GroupPolicy Folder which is were it applies policy from. Also you can see policy dynamically changing if different users logs on. The Registry.pol updates in the c:\windows\system32\ GroupPolicy.Usercache\User folder and c:\windows\system32\ GroupPolicy \User Sometimes group policy applies and sometimes it does not. When a user logs on you see the policy that was copied down apply. For example the run option is taken away from the start menu. During the log on process this remains in effect but when the process completes its almost like policy is take away. When this occurs I can run WMSCHED.Exe and reapply the user policy and it will apply sometimes. I tried applying group policy through both groups and organizational units. Both with the same results. I was wondering if anyone has had issues with applying group policy with ZEN or if I am doing this incorrectly. Any help would be much appreciated. Thanks.

rscurr,
It appears that in the past few days you have not received a response to your
posting. That concerns us, and has triggered this automated reply.
Has your problem been resolved? If not, you might try one of the following options:
- Visit http://support.novell.com and search the knowledgebase and/or check all
the other self support options and support programs available.
- You could also try posting your message again. Make sure it is posted in the
correct newsgroup. (http://forums.novell.com)
Be sure to read the forum FAQ about what to expect in the way of responses:
http://forums.novell.com/faq.php
If this is a reply to a duplicate posting, please ignore and accept our apologies
and rest assured we will issue a stern reprimand to our posting bot.
Good luck!
Your Novell Product Support Forums Team
http://support.novell.com/forums/

Windows 2008 R2 group policy not applied on some of the computers

Dear All,
I have windows 2008 r2 as domain controller and configured group policy. when I am changing existing group policy most of the computers not affecting with update policy.
is there any server or any other method required to configure?
every time i need to update group policy manually on computers.
pls help
SUNIL PATEL SYSTEM ADMINISTRATOR

You have an issue with AD DS replication.Ensure all domain controllers are in sync

Windows 2008 R2 group policy not applied to windows 8 Workstations, but applied to XP and Win 7

I have a Windows 2008 R2 Domain Controllers and have a Policy to put a specify wallpaper, eventuality i have to change the Wallpaper, this setting applied sucesfully in Windows xp and Windows 7 workstations, but not applied in Windows 8 workstations even
if i run gpupdate /forcé,
Best Regards,
Thank you

Hi,
Thanks for posting in the forum.
Before going further, would you please let me know how did you configure the Group Policy setting to deploy the wallpaper? Have you configured some settings to limit the scope the GPO applying?
If all Windows 8 machines failed to receive the GPO settings? In order to narrow down the cause of the issue, I suggest we could try to collect the following information for troubleshooting.
GPMC.log
==================
a. On domain controller, click Start ->Run, type GPMC.MSC, it will load the GPMC console.
b. Right click on "Group Policy Result" and choose wizard to generate a report for the problematic computer and user account (please place appropriately). (Choose computer and select the proper
user in the wizard)
c. Right click
the resulting group policy result and click the "Save Report…" => save report to save the report to a HTML file.
Once we get the report, please check if the settings have been applied to the target correctly.
In addition, would you please let me know whether you have imported the latest Windows 8 Administrative Templates to the Windows Server 2008 DC? If not, please try to download and import it.
Then try to configure the wallpaper GPO settings again to see if it could help.
For details, please refer to the following articles.
Administrative Templates (.admx) for Windows 8 and Windows Server 2012
http://www.microsoft.com/en-us/download/details.aspx?id=36991
Set Desktop Background via Group Policy in Windows 7, Windows 8 in a Server 2008 or Server 2012 Domain
http://dizzyit.com/2013/04/14/set-desktop-background-group-policy-windows-7-windows-8-server-2008-server-2012-domain/
Hope this helps.
Best Regards,
Andy Qi
TechNet Subscriber Support
If you are
TechNet Subscription user and have any feedback on our support quality, please send your feedback
here.
Andy Qi
TechNet Community Support

Group Policy not applying after logoff \ logon

We've noticed during testing an issue around Local Group Policy applied via ZCM...
- user A logs in, policy applies correctly (folder redirection, taskbar settings etc)
- user A logs off
- user B logs in, policy applies correctly
- user B logs off
- user A logs in again, policy does not apply
The only way to get policy to apply again for user A is to either reboot or delete the local profile for the user manually
A few other details...
- Windows 7 SP1 Enterprise x86
- DLU Policy applied (non volatile user)
- user does not have admin rights (in the Users+ group)

gshaw0,
It appears that in the past few days you have not received a response to your
posting. That concerns us, and has triggered this automated reply.
Has your problem been resolved? If not, you might try one of the following options:
- Visit http://support.novell.com and search the knowledgebase and/or check all
the other self support options and support programs available.
- You could also try posting your message again. Make sure it is posted in the
correct newsgroup. (http://forums.novell.com)
Be sure to read the forum FAQ about what to expect in the way of responses:
http://forums.novell.com/faq.php
If this is a reply to a duplicate posting, please ignore and accept our apologies
and rest assured we will issue a stern reprimand to our posting bot.
Good luck!
Your Novell Product Support Forums Team
http://forums.novell.com/

Group Policy not populating Compatibility View List in IE 11

Similar Messages

Maybe you are looking for