Group Policy Shortcut Error
Hi All
I am trying to create a shortcut via GP to point to our print server, so people can connect to optional printers. we have the following settings set in the policy.
Action Create
Type: File System Object
Path: Desktop
Target: "\\server"
Icon Path: C:\Windows\System32\imageres.dll
Icon index: 48
Shortcut Key: none
Run: normal window
But this is not working and is throwing the following error in a gpresult: Result: Failure (Error Code: 0x80070002)
Does anyone have any ideas why this is happening?
Thanks,
Richard
Please edit the policy as a "Shell Object".
http://technet.microsoft.com/en-us/library/cc753580.aspx
Alper YAZGAN *
Similar Messages
-
Group Policy Shortcut Fails to Get Created
I get the following error in the Event Log.
Log Name: Application
Source: Group Policy Shortcuts
Date: 2/28/2014 4:55:55 PM
Event ID: 4098
Task Category: (2)
Level: Warning
Keywords: Classic
User: SYSTEM
Description:
The user 'Receiver' preference item in the 'Startup Items {48A48B27-F3CE-464F-AE8F-E303263707B9}' Group Policy object did not apply because it failed with error code '0x80070002 The system cannot find the file specified.' This error was suppressed.
I was trying to put "C:\Program Files (x86)\Citrix\SelfServicePlugin\SelfService.exe" into the startup folder for members of a specific group. That file exists, it's there, I've put the short cut to it manually into Startup and it works. This
makes no rational sense at all. The file is most certainly there, why doesn't it see the file?
All other shortcuts from GPP work fine. Here are the properties below:
Target type
File system object
Shortcut path
%StartUpDir%\Citrix Receiver
Target path
"C:\Program Files (x86)\Citrix\SelfServicePlugin\SelfService.exe"
Start in
"C:\Program Files (x86)\Citrix\SelfServicePlugin\"
Shortcut key
None
Run
Normal window
Arguments --showAppPicker
Options
Stop processing items on this extension if an error occurs on this item
No
Run in logged-on user's security context (user policy option)
Yes
Remove this item when it is no longer applied
YesHi,
Based on my knowledge, this event is most likely related to permissions. We need to make sure that users can access the shortcut file.
Besides, which startup folder do we use?
As stated in the following thread by Darien, Windows has two Startup folders:
Windows has two Startup folders.
One located in
c:\users\xxxx\appdata\roaming\microsoft\windows\start menu\programs\startup. This one is owned and controlled by the interactive user; therefore, he or she can write to this folder.
The other one is located at
c:\programdata\microsoft\windows\start menu\programs\startup. This folder is a system folder in which interactive users must provided elevated credentials.
Startup Folder
http://social.technet.microsoft.com/Forums/windows/en-US/76520783-6667-4f38-8ab9-cdefab3bd4aa/startup-folder?forum=w7itproui
Hope it helps.
Best regards,
Frank Shen -
Hi all,
Having an issue with the shortcuts Group Policy extension applying to our Windows 7 machines. It was working until last Wednesday and since then users get a Group Policy Client service error when logging in.
We have narrowed it down to the shortcuts extension, if the extension is disabled then a user can log in, if enabled and empty then the following error comes up. With all the investigation we have done so far it seems as though something on the client is
making this happen.
We have –
Copied the original policy
Exported and imported the policy
Deleted all the shortcuts
Deleted all the shortcuts and created a brand new shortcut
And the same thing happens. Only if you right click on the Shortcut Extension and select disable then the user can log in
When running Gpupdate /force we get the following error
The Group Policy Client Side Extension Group Policy Shortcuts may have caused the Group Policy Service to terminate unexpectedly. To prevent further failures inthe
Group Policy Service, this extension has been temporarily disabled until after the next system restart. Group Policy settings managed by this extension may no
longer be enforced until the system is restarted. The vendor of this extension should be contacted if this issue recurs.
The Group Policy Client Side Extension Group Policy Internet Settings may have caused the Group Polcy Service to terminate unexpectedly. To prevent further failures
in the Group Policy Service, this extension has been temporarily disabled until after the next system restart. Group Policy settings managed by this extension
may no longer be enforced until the system is restarted. The vendor of this extension should be contacted if this issue recurs.
Has anyone come across this before?
ThanksHi Dejul,
How is the issue going? Does this issue happen to all Windows 7 clients? I am not sure this can be helpful but we can give it a try to install the following hotfix.
Some Group Policy preferences are not applied successfully on computers that are running Windows Vista, Windows Server 2008, Windows 7 or Windows Server 2008 R2
http://support.microsoft.com/kb/979731
Besides, please make sure that our clients are patched or updated to the latest.
An enterprise hotfix rollup is available for Windows 7 SP1 and Windows Server 2008 R2 SP1
http://support.microsoft.com/kb/2775511
TechNet Subscriber Support
If you are TechNet Subscription user and have any feedback on our support quality, please send your feedback here.
Best regards,
Frank Shen -
I am trying to use the Shortcuts extension in the Computer Configurations section to create some links, but any File System Object shortcuts fail with:
The computer '<Name> preference item in the '<Policy> {GUID}' Group Policy object did not apply because it failed with error code '0x80070002 The system cannot find the file specified.' This error was suppressed.
For troubleshooting, I tried the following:
Action: Update
Name: Explorer
Type: File System Object
Location: All Users Desktop
Target: %SystemRoot%\Explorer.exe
Args: <Blank>
Start In: %SystemDrive%
Shortcut: None
Run: Normal Window
Comment: <Blank>
Icon File: <Blank>
Icon Index: <Blank>
None of the "Common" items are configured, so I am not sure what file it is failing to find. Shortcuts fail to be processed on all Windows Servers 2008 RTM systems that the GPO applies to.Hi,
No, it should not be an expected behavior that system variables are not set by default. I have verified this on cleanly installed Windows Server 2008 computers.
So, could you let me know the following?
1. Is it a cleanly installed Windows Server 2008 system, or a
2. Did you check system variables immediately after the installation?
3. By the way, the echo command may not be accurate. So, do the shortcut policy settings (with "%WINDOWSDIR% and %SYSTEMDIR%" variables) still work there on your computers? -
Group Policy Shortcuts Fail: The system cannot find the path specified.
The executable I'm pointing to is under C:\Foldername\file.exe
I know it's there, I tested it, I pasted the very same path into the run dialog, it works. The path is correct, so why can't group policy find it?
I even tried putting the exe in the root of C:\ and pointing the shortcut there, it can't even see it there. Is it blind? I can see it. I'm looking right at it.I fixed it myself. Turns out Microsoft's error messages are obnoxiously non-helpful. The error was referring to the icon path not the target file path. I had to select programs from the drop down list and then set the path.
It would help if Microsoft would document this a lot better, and perhaps enhance their event log errors so that they don't send people on confusing wild goose chases that drive people insane. -
We are running Windows 8.1 Pro x86
I am really curious as to why the drive restriction group policy causes the error message to pop up:
"This operation has been cancelled due to restrictions in effect on this computer. Please contact your system administrator."
It does not prevent from actual saving so functionality is not lost but it really annoys our end users and we're getting a lot of complaints. We cannot use the workaround of hiding drives instead of restricting as this still presents security issues. This
is happens when saving (or clicking on a button like "Browse" that opens the 'Open' dialogue box) in all Office 2013 applications, Internet Explorer, Paint, Notepad, and probably most others. I've looked at many forums and no suggestions for workarounds
have succeeded for us to get rid of this error message and in fact, I read a post that stated that someone contacted Microsoft and they said this was by design and there is no workaround. I find this very unfortunate that we either have the choice of compromising
security or annoying our end users. It seems to me like the new dialogue box in Windows 8.1 (and maybe 8?) attempts to access the local drive under the logged in user's account before it actually opens up the dialogue box which conflicts with the group policy
that restricts access to the drive.
Has anyone at all had any luck getting this to go away without removing the restrictions? It seems like the answer is either buried in the Windows code or somewhere in the registry.
Thank you in advance for your time!Thank you for your time and response! Unfortunately, we have the machine locked down pretty tight (they are public use computers that require heavy restriction) and it is set to restrict all drives so access is limited to the local profile. We did try
testing your method, however, by adding the Desktop as an allowed location in the Office policy (which would not solve the issue for the other applications but was good for a test) using the path %userprofile%\desktop. When choosing that location, it does
not throw the error but unfortunately, it does not remember like it did for your with the E: drive so it still always throws the error when first loading the dialogue box no matter what I do. If you're able to confirm that this is simply by design and we're
just expected to inform our users to click through the errors, then I guess that's the accepted answer. Although, do you think that there might be a registry key value that is set after you save to the E: drive for the first time? Maybe we could set that value
to %userprofile%\desktop if it's doing the redirection after the first save through registry. Thanks again! -
We recently switched hardware and server software Win SBS 2008 to 2012R2 for a small network roughly 40 clients (Win7 Pro / Win 8.1 Pro) about 16 running concurrently at a given time and one network printer with the printer queue residing on the DC as well.
I read that a single server environment might not be ideal in particular no fail-over but that is an accepted risk in this particular network here.
Errors:
Error 1043: Timeout during name resolution request
Error 1129: Group policy updates could not be processed due to DC not available
Error 5719: Could not establish secure connection to DC, DC not available
Occasionally but disappears after a while
Error 134: As a result of a DNS resolution timeout could not reach time server
Symptoms
On Win 7 Clients
Network shares added through Group Policy will not show sometimes
Network shares disconnect (red X) and when accessed return access authorization error after one or two clicks on the share finally grant access again
When the issue with accessing network shares occurs, it usually also affects Internet access meaning a 'server not responding' error appears in the browser windows when trying to open just any web page
nslookup during the incident returns cannot resolve error
ipconfig on client shows correct default router (VDSL Router) and DHCP / DNS Domain Controller
Also, the Win system log shows the above errors during these incidents, however, the nuimber of incidents vary from 20-30
On Win 8.1 Clients
Same as above with the slight variation for network shares apparently due to Server 2012 and Win 8.1 clients managing drive shares differently. However, network share refresh does not work with this clients. In most cases only a gpupdate /force returns
drive shares but usually only for the active session. After logoff / logon the shares are gone again.
The issue does appear to be load related since it occurs even if there are only one or two workstations active.
Server Configuration
Dell R320 PowerEdge 16GB / 4TB 7200RPM RAID10 / GBitEthernet
Zyxel 1910-48 Port Switch
VDSL 50Mbps Down / 20Mbps Up
Since the DC is the only local DNS and there are no plans to add another one or move DNS to another server, the DNS server is configured with this own address as preferred DNS with three DNS forwarders 1) VDSL Router 2) ISP DNS1 3) ISP DNS2
Currently only one Network card is active for problem determination reasons.
There appears to be no consensus concerning IPV6 enabled or disabled, I tried both with no apparent effect
I have set all network cards server and client to Full Duplex and the same speed, also disabled Offload functions within the adapter settings. Some but no consistent improvements.
Best Practice Analyzer Results
DNS server scavening not enabled
Root hint server XYZ must respond to NS queries for the root zone
More than one forwarding server should be configured (although 3 are configured)
NIC1 should be configured to use both a preferred and alternate DNS (there is only one DNS in this network)
I have found some instructions to apply changes to the clients through a host file but I would rather like to understand whether this DNS response time issue can be resolved on the server for example timing setting perhaps. Currently the DNS forwarders are
set to 3 second.
Since a few people have reported issues with DNS but most are working with multi DNS, DC environment I could not really apply any suggestions made there. perhaps there is anyone like me who is running a single server who has overcome or experience the same
issues. Any help would be appreciatedHello Milos thx for your reply.. my comments below
1. What does it "switched"? You may mean migration or new installation. We do not know...
>> Switched is probably the incorrect term, replaced would be the appropriate wording. Before, there was a HP Proliant Server with SBS 2008 with distinct domain and now there is a Dell Server with MS 2012 R2 with a distinct domain. Client were
removed from one (SBS) domain and added to the new Server 2012 domain. Other components did not change for example same Network Switch or VDSL Router, Workstations and Printer
2. Two DCs are better alternative. Or backup very frequently. There are two groups of administrators. Those who have lost DC and those who will experience this disaster in near future.
>> Correct, and I am aware of that
3. NIC settings in W 7 and W 8.1, namely DNS points to DC (...and NOTHING else. No public IP or that of router DNS.))
>> Correct, this is how it's currently implemented. Clients point to DC for DHCP and DNS and Default Router, no public IP or DNS. The only references to ISP DNS exist on the VDSL Router itself as provided through ISP when establishing VDSL
Link and the list of Forwarders in the DNS Server configuration. However, I have just recently added the ISPs DNS as forwarders for test purposes and will probably learn tomorrow morning whether this had any effect for better or worse.
4. Do nslookup to RR on clients. RR branch is saying client basic info on LDAP parameters of AD.
>> Will post as soon as available
5. I do not use forwarders and the system works
>> Ok, does this mean it works for you in a similar or the same infrastructure setup or are you saying it is not required at all and I can remove any forwarder in a scenario like mine? If not required can you explain a bit more why it is not
required apart from that it does work for you that way?
6. DHCP should sit on DC (DHCP on router is disabled)
>> Correct, no other device is configured to provide DHCP service other than DC and DHCP is currently running on DC
7. NIC settings in DC points to itself (loopback address 127.0.0.1)
>> Are you sure this is still correct and does apply to Server 2012? I am reading articles stating that it should be the servers own IP but local loop or should this be added as alternate DNS in addition to the servers own IP?
8. Use IPCONFIG /FLUSHDNS whenever you change DNS settings.
>> OK, that was not done every time I changed some settings but I can do that next week. Reboot alone would not suffice, correct?
9. Test your system with dcdiag.
>> See result below
10. Share your findings.
Regards
Milos
Directory Server Diagnosis
Performing initial setup:
Trying to find home server...
Home Server = GSERVER2
* Identified AD Forest.
Done gathering initial info.
Doing initial required tests
Testing server: Default-First-Site-Name\GSERVER2
Starting test: Connectivity
......................... GSERVER2 passed test Connectivity
Doing primary tests
Testing server: Default-First-Site-Name\GSERVER2
Starting test: Advertising
......................... GSERVER2 passed test Advertising
Starting test: FrsEvent
......................... GSERVER2 passed test FrsEvent
Starting test: DFSREvent
......................... GSERVER2 passed test DFSREvent
Starting test: SysVolCheck
......................... GSERVER2 passed test SysVolCheck
Starting test: KccEvent
......................... GSERVER2 passed test KccEvent
Starting test: KnowsOfRoleHolders
......................... GSERVER2 passed test
KnowsOfRoleHolders
Starting test: MachineAccount
......................... GSERVER2 passed test MachineAccount
Starting test: NCSecDesc
......................... GSERVER2 passed test NCSecDesc
Starting test: NetLogons
......................... GSERVER2 passed test NetLogons
Starting test: ObjectsReplicated
......................... GSERVER2 passed test
ObjectsReplicated
Starting test: Replications
......................... GSERVER2 passed test Replications
Starting test: RidManager
......................... GSERVER2 passed test RidManager
Starting test: Services
......................... GSERVER2 passed test Services
Starting test: SystemLog
......................... GSERVER2 passed test SystemLog
Starting test: VerifyReferences
......................... GSERVER2 passed test VerifyReferences
Running partition tests on : ForestDnsZones
Starting test: CheckSDRefDom
......................... ForestDnsZones passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... ForestDnsZones passed test
CrossRefValidation
Running partition tests on : DomainDnsZones
Starting test: CheckSDRefDom
......................... DomainDnsZones passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... DomainDnsZones passed test
CrossRefValidation
Running partition tests on : Schema
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Running partition tests on : Configuration
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... Configuration passed test CrossRefValidation
Running partition tests on : GS2
Starting test: CheckSDRefDom
......................... GS2 passed test CheckSDRefDom
Starting test: CrossRefValidation
......................... GS2 passed test CrossRefValidation
Running enterprise tests on : GS2.intra
Starting test: LocatorCheck
......................... GS2.intra passed test LocatorCheck
Starting test: Intersite
......................... GS2.intra passed test Intersite
Server: gserver2.g2.intra
Address: 192.168.240.6
*** gserver2.g2.intra can't find g2: Non-existent domain
> gserver2
Server: gserver2.g2.intra
Address: 192.168.240.6
g2.intra
primary name server = gserver2.g2.intra
responsible mail addr = hostmaster.g2.intra
serial = 443
refresh = 900 (15 mins)
retry = 600 (10 mins)
expire = 86400 (1 day)
default TTL = 3600 (1 hour)
> wikipedia.org
Server: gserver2.g2.intra
Address: 192.168.240.6
Non-authoritative answer:
wikipedia.org MX preference = 10, mail exchanger = polonium.wikimedia.org
wikipedia.org MX preference = 50, mail exchanger = lead.wikimedia.org
polonium.wikimedia.org internet address = 208.80.154.90
polonium.wikimedia.org AAAA IPv6 address = 2620:0:861:3:208:80:154:90
lead.wikimedia.org internet address = 208.80.154.89
lead.wikimedia.org AAAA IPv6 address = 2620:0:861:3:208:80:154:89
Final benchmark results, sorted by nameserver performance:
(average cached name retrieval speed, fastest to slowest)
192.168.240. 6 | Min | Avg | Max |Std.Dev|Reliab%|
----------------+-------+-------+-------+-------+-------+
+ Cached Name | 0,001 | 0,002 | 0,003 | 0,001 | 100,0 |
+ Uncached Name | 0,027 | 0,076 | 0,298 | 0,069 | 100,0 |
+ DotCom Lookup | 0,041 | 0,048 | 0,079 | 0,009 | 100,0 |
---<-------->---+-------+-------+-------+-------+-------+
gserver2.g2.intra
Local Network Nameserver
195.186. 4.162 | Min | Avg | Max |Std.Dev|Reliab%|
----------------+-------+-------+-------+-------+-------+
- Cached Name | 0,022 | 0,023 | 0,025 | 0,000 | 100,0 |
- Uncached Name | 0,025 | 0,071 | 0,274 | 0,065 | 100,0 |
- DotCom Lookup | 0,039 | 0,040 | 0,043 | 0,001 | 100,0 |
---<-------->---+-------+-------+-------+-------+-------+
cns8.bluewin.ch
BLUEWIN-AS Swisscom (Schweiz) AG,CH
195.186. 1.162 | Min | Avg | Max |Std.Dev|Reliab%|
----------------+-------+-------+-------+-------+-------+
- Cached Name | 0,022 | 0,023 | 0,026 | 0,001 | 100,0 |
- Uncached Name | 0,025 | 0,072 | 0,299 | 0,066 | 100,0 |
- DotCom Lookup | 0,039 | 0,042 | 0,049 | 0,003 | 100,0 |
---<-------->---+-------+-------+-------+-------+-------+
cns7.bluewin.ch
BLUEWIN-AS Swisscom (Schweiz) AG,CH
8. 8. 8. 8 | Min | Avg | Max |Std.Dev|Reliab%|
----------------+-------+-------+-------+-------+-------+
- Cached Name | 0,033 | 0,040 | 0,079 | 0,011 | 100,0 |
- Uncached Name | 0,042 | 0,113 | 0,482 | 0,097 | 100,0 |
- DotCom Lookup | 0,049 | 0,079 | 0,192 | 0,039 | 100,0 |
---<-------->---+-------+-------+-------+-------+-------+
google-public-dns-a.google.com
GOOGLE - Google Inc.,US
UTC: 2014-11-03, from 14:33:12 to 14:33:29, for 00:17,648
15: 40
192.168.240. 6 | Min | Avg | Max |Std.Dev|Reliab%|
----------------+-------+-------+-------+-------+-------+
+ Cached Name | 0,001 | 0,002 | 0,004 | 0,000 | 100,0 |
+ Uncached Name | 0,025 | 0,074 | 0,266 | 0,063 | 100,0 |
+ DotCom Lookup | 0,042 | 0,048 | 0,075 | 0,007 | 100,0 |
---<-------->---+-------+-------+-------+-------+-------+
gserver2.g2.intra
Local Network Nameserver
195.186. 1.162 | Min | Avg | Max |Std.Dev|Reliab%|
----------------+-------+-------+-------+-------+-------+
- Cached Name | 0,022 | 0,024 | 0,029 | 0,001 | 100,0 |
- Uncached Name | 0,024 | 0,073 | 0,289 | 0,067 | 100,0 |
- DotCom Lookup | 0,039 | 0,041 | 0,043 | 0,001 | 100,0 |
---<-------->---+-------+-------+-------+-------+-------+
cns7.bluewin.ch
BLUEWIN-AS Swisscom (Schweiz) AG,CH
195.186. 4.162 | Min | Avg | Max |Std.Dev|Reliab%|
----------------+-------+-------+-------+-------+-------+
- Cached Name | 0,022 | 0,024 | 0,029 | 0,001 | 100,0 |
- Uncached Name | 0,025 | 0,073 | 0,286 | 0,065 | 100,0 |
- DotCom Lookup | 0,041 | 0,066 | 0,180 | 0,037 | 100,0 |
---<-------->---+-------+-------+-------+-------+-------+
cns8.bluewin.ch
BLUEWIN-AS Swisscom (Schweiz) AG,CH
8. 8. 8. 8 | Min | Avg | Max |Std.Dev|Reliab%|
----------------+-------+-------+-------+-------+-------+
- Cached Name | 0,033 | 0,038 | 0,077 | 0,009 | 100,0 |
- Uncached Name | 0,042 | 0,105 | 0,398 | 0,091 | 100,0 |
- DotCom Lookup | 0,049 | 0,066 | 0,141 | 0,025 | 100,0 |
---<-------->---+-------+-------+-------+-------+-------+
google-public-dns-a.google.com
GOOGLE - Google Inc.,US
UTC: 2014-11-03, from 14:39:59 to 14:40:12, for 00:13,363 -
I am getting the following warning in my Application Log:
Code Snippet
The user '<Printer Name>' preference item in the 'Default Domain Policy {31B2F340-016D-11D2-945F-00C04FB984F9}' Group Policy object did not apply because it failed with error code '0x8007007b The filename, directory name, or volume label syntax is incorrect.' This error was suppressed.
This fires off about every 1.5 hours. Is there a way to root out and stop this warning?
Thanks!It is being reapplied through background refresh, which happens about every 90 minutes. Remove the printer mapping from your Default Domain Policy and you'll stop getting the error message.
-
Event ID 1058 Group Policy Preprocessing Error Code 3
You will see this in the event logs, the processing of group policy failed. It is trying to process a policy that doesn't exist. After reading http://technet.microsoft.c the
first resolution Error code 3 (The system cannot find the path specified) lead me to this --> http://support.microsoft.c
4. In the right details pane, double-click DisableDFS.
This entry doesn't exist but if I add it, it works. Problem is solved on machine 1.
Machine 2. This is a brand new Windows 7 setup to investigate this problem because it appears on a lot of the workstations and I have no idea why. Applying this fix did NOT solve the problem. I am a bit stuck. I have new GPs to roll out but they
won't apply with this error in place.
I can ping the logon server just fine and I can get to \\FQDN\sysvol as well. gpupdate /force shows the same error in the event log.Hi,
Have you tried all steps in the link:
http://support.microsoft.com/kb/314494?
Verify you can read gpt.ini using the full network path, full network path to the gpt.ini as \\<dcName>\SYSVOL\<domain>\Policies\<guid>\gpt.ini where <dcName> is the name of the domain controller,
<domain> is the name of the domain, and <guid> is the GUID of the policy folder.
Please post the full event message for further analysis. In addition, we need to know that what policy did you set that could not be applied.
Regards,
Yan Li
Regards, Yan Li -
Hello
When i want to get Group policy Results for one Computer in Domain came out this error: (Environment win2k8 and win7)Hi Amir,
>>When i want to get Group policy Results for one Computer in Domain came out this error
Before going further, we can try to run command gpresult/h gpreport.html
with admin privileges on the computer to see if we can successfully collect group policy result.
Best regards,
Frank Shen -
Eventlog 1030 group policy update error on Windows 2012 member server
group policy update is failing with event ID 1030
Computer policy is getting applied but User policy Failes. Other windows 2012 servers are successfully updating.
gpupdate /force
Updating policy...
Computer Policy update has completed successfully.
User Policy could not be updated successfully. The following errors were encount
ered:
The processing of Group Policy failed. Windows attempted to retrieve new Group P
olicy settings for this user or computer. Look in the details tab for error code
and description. Windows will automatically retry this operation at the next re
fresh cycle. Computers joined to the domain must have proper name resolution and
network connectivity to a domain controller for discovery of new Group Policy o
bjects and settings. An event will be logged when Group Policy is successful.
To diagnose the failure, review the event log or run GPRESULT /H GPReport.html f
rom the command line to access information about Group Policy results.Hi,
Before going further, I assume that the user account we were using is a domain account. As a result, we can use this account to log onto other domain computers to see if its
user policy settings can be updated successfully.
Besides, for troubleshooting this issue, we can try to retrieve Gpsvc.log to check this issue.
Regarding how to enable logging in the Gpsvc.log file, the following blog can be referred to for more information.
How to enable GPO logging on windows 7 /2008 r2 ?
http://blogs.technet.com/b/csstwplatform/archive/2010/11/09/how-to-enable-gpo-logging-on-windows-7-2008-r2.aspx
Best regards,
Frank Shen -
Hello everybody,
We have a problem since few weeks with printers deployment.
Intermittently, they are not deployed and we have errors 4098 in Event ID with codes :
- '0x8007000a The environment is incorrect'
- '0x8007007a The data area passed to a system call is too small'
- '0x80070005 Access denied'
Our server is a Windows 2008 R2 and clients are Windows7.
We have already read these topics :
http://social.technet.microsoft.com/Forums/windowsserver/en-US/24dfd6c0-b460-40a7-ad18-13e404b361e7/group-policy-printers-dissapearing-from-client-machines-intermittently
It was already enabled (Computer Configuration\Administrative Templates\System\Group Policy\Printers Policy Processing ->
Do not apply during periodic background processing)
http://www.experts-exchange.com/Software/Server_Software/Active_Directory/Q_26220975.html
We have tried to delete printers at logoff but nothing changed.
http://social.technet.microsoft.com/Forums/windowsserver/en-US/7d3809c4-9f36-4412-9c9f-d82614ba3eb9/printers-not-applied-error-4098-0x80070005-access-is-denied
By default we have everybody can print. To be sure, we have added "Domain Computers" but same result.
We have tried to create :
- New GPO to deploy old printers queues => no changes.
- New printers queues and deploy with old GPO => no changes.
- New GPO to deploy new printers queue => no changes.
Our GPO is set like this :
- [Computer configuration/Policies/Administrative Templates/System/Group Policy]
○ Configure printers preference extension policy processing => all enabled
○ Configure user Group Policy loopback processing mode => Merge
- [User configuration/Preferences/Control Panel Settings/Printers/Shared Printer/printername]
○ General => Sharepath
\\server\printername
○ Common => Remove this item when it is no longer applied
In a desperate hope we have reinstall completely some clients but we still have sometimes "Environment is incorrect".
We don't know anymore what to do…
Can you help us please ?Hello,
Do you have installed the latest Microsoft hotfixes on your server / client
KB2537549 - Cannot deploy a printer by using a GPO if read-only domain controllers
are exclusively used in the domain environment in Windows 7 or in Windows Server 2008 R2. This hotfix contains the most current version of PRINTER Group Policy Preferences for Windows 7/2008 Post SP1.
KB2647753 - Update rollup for the printing core components in Windows 7 and
Windows Server 2008 R2.
KB2526028 - Printing performance decreases in Windows 7 or in Windows Server
2008 R2.
KB2618574 - Print Spooler service saves the NetBIOS name of the print server
in Windows 7 or in Windows Server 2008 R2
A list of other post-SP1 hotfixes can be found here...
Links to post
SP1 hotfixes for Windows 7 Service Pack 1
Links
to post SP1 hotfixes for Windows Server 2008 R2 Service Pack 1
List of performance
hotfixes post SP1 for Windows 7 SP1
Jan -
Group Policy Printer Error (0x80070005 Access Denied)
I am trying the deploy two network printers via group policy using Server 2008 R2 SP1. I created the GPO and added the printers from our print server under computer configuration so that it will apply to the computers, not just the users. After a computer in
the correct OU Gpupdates I recieve the following error in it's application event log:
WARNING: GROUP POLICY PRINTERS
Group Policy object did not apply because it failed with error code 0x80070005 Access is Denied. This error was suppresed.
Any suggestions or thoughts are appreciated. I have been dealing with this error and trying the figure it out for awhile now.Hi,
This issue mostly can be caused due to the incorrect permission settings.
Please try to perform the troubleshooting steps the following Microsoft TechNet blog provides.
Group Policies and Access Denied
http://blogs.technet.com/b/matthewms/archive/2005/10/29/413275.aspx
Regards,
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread. -
Group Policy Preferences Shortcut issues ( event ID 1085 )
I am hoping someone will be able to help me with a problem that is causing our users a headache
We have a Windows 2008 SP2 terminal server farm ( 1 gateway, 2 Terminal servers TS1 and TS2 ), we also use Group Policy Preferences to deliver app shortcuts to different AD user groups.
TS1 and TS2 were built from the same image. On TS1 users logon and get all the icons they are entitled to, on TS2 it is random to whether they get their shortcuts or not.
Both TS are rebooted daily and I have scripted removing any local profiles incase it was something left behind.
Checking the event Logs on TS2 I see several errors that appear to relate to Group Policy and correspond to when users have connected in.
any help with this issue would be appreciated.
Here is the information from the System log:
Log Name: System
Source: Microsoft-Windows-GroupPolicy
Date: 05/12/2014 15:32:26
Event ID: 1085
Task Category: None
Level: Warning
Keywords:
User: Username
Computer: TerminalServer
Description:
Windows failed to apply the Group Policy Shortcuts settings. Group Policy Shortcuts settings might have its own log file. Please click on the "More information" link.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-GroupPolicy" Guid="{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}" />
<EventID>1085</EventID>
<Version>0</Version>
<Level>3</Level>
<Task>0</Task>
<Opcode>1</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2014-12-05T15:32:26.450Z" />
<EventRecordID>478778</EventRecordID>
<Correlation ActivityID="{CCB45268-E6F8-4127-97C8-A8544829F2DE}" />
<Execution ProcessID="344" ThreadID="11212" />
<Channel>System</Channel>
<Computer>TerminalServer</Computer>
<Security UserID="S-1-5-21" />
</System>
<EventData>
<Data Name="SupportInfo1">1</Data>
<Data Name="SupportInfo2">3892</Data>
<Data Name="ProcessingMode">1</Data>
<Data Name="ProcessingTimeInMilliseconds">6047</Data>
<Data Name="ErrorCode">2147942413</Data>
<Data Name="ErrorDescription">The data is invalid. </Data>
<Data Name="DCName”>\\OurDomain</Data>
<Data Name="ExtensionName">Group Policy Shortcuts</Data>
<Data Name="ExtensionId">{C418DD9D-0D14-4efb-8FBF-CFE535C8FAC7}</Data>
</EventData>
</Event>> <Data Name="ErrorDescription">The data is invalid. </Data>
Delete the history XML.
Martin
Mal ein
GUTES Buch über GPOs lesen?
NO THEY ARE NOT EVIL, if you know what you are doing:
Good or bad GPOs?
And if IT bothers me - coke bottle design refreshment :)) -
New to Windows Server 2008 R2 Administration.
I setup this Windows 2008 R2 Server on a Dell 2950 Poweredge server and have been migrating users off of an old NT style domain running on Samba 3.6 on CentOS.
I have the domain setup (nicholas.sacredheartsaratoga.org), added users, and have moved users / computers over to the new domain and working.
When attempting to setup Group Policy Objects, I continually get the "Failed to Open Group Policy Object" Error. This is driving me nuts and seems to be a 49 error.. which I have done a ton of research on but none of the suggested fixes seem
to be working.
I've been working at this for a couple of weeks and really need this fixed to be able to set GPO's correctly.
Here is my IPCONFIG /ALL
C:\Users\Administrator.NICHOLAS.000>ipconfig /all
Windows IP Configuration
Host Name . . . . . . . . . . . . : NICHOLAS
Primary Dns Suffix . . . . . . . : sacredheartsaratoga.org
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : nicholas.sacredheartsaratoga.org
Ethernet adapter Local Area Connection 2:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Broadcom BCM5708C NetXtreme II GigE (NDIS
VBD Client) #2
Physical Address. . . . . . . . . : 00-1D-09-27-F1-63
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
Link-local IPv6 Address . . . . . : fe80::542:43f2:2aaf:d903%13(Preferred)
IPv4 Address. . . . . . . . . . . : 10.10.20.21(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 10.10.20.3
DHCPv6 IAID . . . . . . . . . . . : 301997321
DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-19-7D-DC-B6-00-1D-09-27-F1-61
DNS Servers . . . . . . . . . . . : 10.10.20.21
NetBIOS over Tcpip. . . . . . . . : Enabled
Tunnel adapter isatap.{41653A38-9372-4740-BB03-41950A9C9BC0}:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Microsoft ISATAP Adapter
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
Tunnel adapter Local Area Connection* 9:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : YesWill post the entire contents of my gpreport as soon as my account is verified... but this is the jist of the error being reported:
Component Status<v:group alt="Error" class="vmlimage" coordsize="100,100" style="width:15px;height:15px;vertical-align:middle;"><v:oval class="vmlimage" fillcolor="red" strokecolor="red" style="width:100px;height:100px;"></v:oval><v:line
class="vmlimage" from="25,25" strokecolor="white" strokeweight="3px" style="" to="75,75"></v:line><v:line class="vmlimage" from="75,25" strokecolor="white" strokeweight="3px" style="" to="25,75"></v:line></v:group>
Component Name
Status
Last Process Time
Group Policy Infrastructure
Failed
2/17/2014 2:50:06 PM
Group Policy Infrastructure failed due to the error listed below.
Logon failure: unknown user name or bad password.
Note: Due to the GP Core failure, none of the other Group Policy components processed their policy. Consequently, status information for the other components is not available.
Additional information may have been logged. Review the Policy Events tab in the console or the application event log for events between 2/17/2014 2:50:05 PM and 2/17/2014 2:50:06 PM.
Registry
(N/A)
1/4/2014 1:45:29 PM
Security
(N/A)
1/4/2014 1:45:35 PM
User Configuration Summary
Maybe you are looking for
-
Update kernel and recieved a "Machine check error"
I was on Vacation this last weekend but was finally able to update today. Upgrade seemd fine, issued reboot command and instead of my normal reboot I was greeted with "machine check error" flashing in my upper left hand corner. Syslinux never came up
-
I am trying to download my paid for Elements 13 upgrade. When I click on the "download" button, I receive this message: 413 Header Length too Large. Help?
-
ITunes asking for reinstall and still won't work with win 7?
Just installed Windows 7 Ultimate on new unwritten hard drive, when I try and open iTunes I get the message that some registry files are not available, the ones that itunes uses for CD burning/playing, please reinstall iTunes. I have done this over a
-
hai all, I have to develop a report using utl file. Like when the report is given a parameter some four columns are displayed, at the same time i want to write the data in a text file in the server path /usr/tmp. used formula column for utl file open
-
Bug? Picture Ring proprty String and Values" returns error 1054 in LV 8.5
Should that propert exist for a Picture Ring? Ben Message Edited by Ben on 09-01-2008 07:47 AM Ben Rayner I am currently active on.. MainStream Preppers Rayner's Ridge is under construction Solved! Go to Solution. Attachments: Error_1054.PNG 27 KB