Group Policy Templates - Namespace Already Defined

Hi,
I've got 2 Citrix environments (versions 6.5 and 7.6). The older farm is currently using Citrix Profile Management GP template 4.1.1. I would like to use the newer template 5.2.0 for the new farm but I'm getting the "Namespace 'Citrix' is
already defined as the target namespace for another file in the store" error.
We're using a central store for GP. I would like to keep the status quo on the 6.5 farm but use the newer template for the 7.6 farm. Is it possible to use 2 different versions of a template that has the same namespace?
There's the option to upgrade the older farm to use the newer template but would like to avoid that as it'll be decommissioned once the 7.6 farm is online.
Thanks.

> possible to use 2 different versions of a template that has the same
> namespace?
No. If you require this, you cannot use a central store, but use 2
different workstations holding the appropriate ADMX files. Starting with
8.1 you can disable the central store for individual computers:
https://sdmsoftware.com/group-policy-blog/tips-tricks/override-the-group-policy-admx-central-store/
Greetings/Grüße,
Martin
Mal ein
gutes Buch über GPOs lesen?
Good or bad GPOs? - my blog…
And if IT bothers me -
coke bottle design refreshment (-:

Similar Messages

Using Office 2013 group policy template to define Trusted Locations and Template Locations doesn't work

User Configuration/Policies/Administrative Templates
- Using Office 2013 group policy template to define Trusted Locations and Template Locations doesn't work
Microsoft Word 2013/Word Options/Security/Trust Center/Trusted Locations
- Allow Trusted Locations on the network:
Enabled
- Trusted Location #1:
Enabled
Path: //server/sharedfoldername [Edit: Path:
\\server\sharedfoldername]
Date: June 10, 2013
Description: Trusted Location
Allow sub folders: Enabled
The policy appears to apply to the client correctly by adding the following registry key and values:
HKEY_CURRENT_USER\Software\Policies\Microsoft\office\15.0\word\security\trusted locations\location1
allowsubfolders: 1
date: June 10, 2013
Description: Trusted Location
Path: //server/sharedfoldername [Edit: Path:
\\server\sharedfoldername]
However, when you open Word Options/Trust Centre/Trust Centre Settings…/Trusted Locations
There are no trusted locations listed under ‘Policy Locations’
I have tried setting similar settings for setting the Shared Templates folder location and just like the trusted locations policy, the registry keys are created properly in HKEY_CURRENT_USER\Software\Policies however word doesn’t
seem to recognize these either.
This used to work flawlessly using the administrative templates for Word 2007 and 2010. Has anyone been able to get these policies to apply successfully, or know why office doesn’t recognize these settings from the Policies registry
Key?

This would have been an easy solution to the issue. Unfortunately it isn't the problem. This question was originally posted on another Microsoft site and
was transferred here and when it was transferred the path's changed from the original post:
\\server\sharedfodlername to //server/sharedfoldername. (I will edit the question to show up as it did in the original post) Not sure how that happened. This
is still an issue that I haven't been able to get working correctly.
As it turns out the 'New from Template' interface Word 2013 has developed is very bulky with large thumbnails and is not very customizable nor practical for an office
that has a large number of templates. Because I am unsatisfied with the display and performance of the 'New' template chooser I sought after a solution to change the way word creates a document from a template in another thread:
http://answers.microsoft.com/en-us/office/forum/office_2013_release-word/how-can-you-change-the-display-of-templates-in/d49194b9-a6b4-4768-8502-7d7b50e9dd65 working through this issue with Jay we were able to develop
some VB script with handles a very large number of templates in a list view and it works much faster than the built-in Word interface. The above thread is how I've worked around trying to define a shared template location and I am quite happy with it.

Group policy template for Novell Client for Windows 7

Does anyone know if there is a group policy template for the Novell Client for Windows 7? I find it really hard to believe that Novell has not yet released one, but I cannot find one anywhere. We use ZCM 11.2, and I really need to be able to send out settings for the client via a group policy.
By the way, I am also posting this on the Novell Client forum, but since this is also a ZCM thing, I am hoping I might get some feedback here.
Rick P

Two recent/new resources are available for the Novell Client 2 SP3 for Windows:
Cool Solutions AppNote: Novell Client 2 SP3 for Windows: Registry Settings
Novell Client 2 SP3 for Windows: Registry Settings | Novell User Communities
Cool Solutions Tool: Group Policy Administrative Template for Novell Client 2 SP3 for Windows
Group Policy Administrative Template for Novell Client 2 SP3 for Windows | Novell User Communities

Server 2012 Group Policy Templates installed on Server 2008 R2

Setup: 2 x Domain Controllers running Server 2K8 R2 SP1
We are currently running our environment with IE9 and want to upgrade to IE11. However 2K8 R2 group policy doesnt support IE11 unless you upgrade your DC's to this version of IE. We are not going to deploy IE11 all at once but instead as we reimage or replace
PC's.
My question is can install http://www.microsoft.com/en-us/download/details.aspx?id=36991 Server 2012 templates on 2008 R2 and have the ability to apply GP objects to both versions of the browser? Will it's possibly make some of the current GP's ineffective
by erasing some settings?
Maybe there is a better was for me to do this? Any help on this would be appreciated! Thanks in advance.
I will monitor this thread very closely and reply to any questions as soon as I can. Thanks!
BCU

Yes this can be done and its advisable to install the latest and greatest admx templates, please be aware that from IE10 upwards IE maintenance is deprecated and applied via a GPP, id advise you create a central store for your Admx and adml files if not
already done so
http://support.microsoft.com/kb/929841
http://support.microsoft.com/kb/929841

EMET v5.1 ADMX Group Policy Template Issue - Default protection settings can't be disabled

I am configuring EMET v5.1 (from 11/18/14) settings via GPO using the custom EMET admx template provided by Microsoft. I am able to enable all the EMET settings via GPMC and disable most of them, but I am not able to disable these 3 EMET setting via
GPMC in a GPO:
Default Protections for Internet Explorer
Default Protections for Popular Software
Default Protections for Recommended Software
When configuring any of these 3 EMET GPO settings to disabled and pressing apply or OK, GPMC keeps it at Not Configured, it does not change to disabled as it normally would. I have never before seen this in GPMC, where you try to disable a setting and it
doesn't change to disabled.
Unless this is somehow intended by Microsoft for these 3 EMET GPO settings, I think that this is a glitch/bug in the EMET GPO Template or the way that it works in GPMC.
Looking for some Guidance from a MS Rep to replicate this issue or anyone else who can confirm if they also see this issue. I have tested on multiple Windows 8.1 Enterprise x64 Update 2 Workstations, with GPMC loaded and the latest EMET ADMX file loaded
from the EMET client on 11/18/14. I have tested this in 2 separate domains, Note that we do not have Central ADMX Stores in either domain.

I had a similar requirement as yours and found that we were able to get around in a simpler method then what was listed here. What we did was set GPO Preferences Registry changes which would then override the previously set EMET ADMX settings set from
another global GPO.
To be specific we had some thirds applications which were add-ons to Microsoft Excel, and the EMET was preventing the application from talking to Excel. So for the users that use this application we have a GPO which Does the following in the Preferences
section:
Action: Replace
HIVE: HKEY_LOCAL_MACHINE
Key path: SOFTWARE\Policies\Microsoft\EMET\Defaults
Value name: Excel
Value type: REG_SZ
Value data: *\OFFICE1*\EXCEL.EXE -Caller -MandatoryASLR

Enforce template via group policy

HI,
I have deployed the Office2013 template and I could see the settings for Office2013 applications are available for users to select
Is there a way to enforce to virtualize the Office2013 applications setting? V 2.0 only includes the policies for Office2010
thanks
Andy

There is currently no Group Policy template for Office 2013 as the Office 2013 template was released after the UE-V 2.0 Template Release. The Group Policy templates will be refreshed with the upcoming
release of UE-V 2.1.
Brandon
MDOP on the Springboard Series on TechNet

Group Policy Preferences possible in ZCM11?

Hi,
i created a thread (http://forums.novell.com/novell/nove...esnt-work.html) because some GPOs are not working with ZCM11SP2. Now i figured out, that the Problem is the GPPs (Group Policy Preferences).
THey are available since Windows Server 2008 or 2008R2, i'm not sure.
With this GPPs you can map drives, set printers, change the registry, power management ...
Is it possible to use this GPPs with ZCM Policies?
Cheers

Here is a bit of a primer:
http://technet.microsoft.com/en-us/m...01.layout.aspx
Note: You will need to use ADM and not ADMX if I recall.
The key will be knowing what registry keys to set.
For PowerSettings, there are some ADM files floating about the internet
already.
On 6/25/2012 12:46 PM, drops wrote:
>
> Hi Steffen,
>
> for folder redirection look here:
> 'Cool Solutions: Local Group Policy Folder Redirection (HKCU User
> Shell)' (http://www.novell.com/coolsolutions/tools/14324.html)
>
> it works with windows 7.
>
> For a lot of configuration settings i prefer bundles. e.g. registry
> changes to HKLM.
>
> Power management: use powercfg.exe -IMPORT
>
> Printer: we use iprint policies. for local printers look at rundll32
> PrintUI.dll, PrintUIEntry /?
>
>
> With software simply use the Bundle - see your foxitreader example and
> recommendation from Shaun.
>
> best regards
>
> Markus
>
>
>
> SteffenMuch;2203349 Wrote:
>> Hi Craig,
>> do you know a good "how to" for this? I didnt create a group policy
>> template until now.
>>
>> Cheers,
>> Steffen
>>
>>
>> @Shaun:
>> Thanks, i will look at this solution.
>
>
Craig Wilson - MCNE, MCSE, CCNA
Novell Knowledge Partner
Novell does not officially monitor these forums.
Suggestions/Opinions/Statements made by me are solely my own.
These thoughts may not be shared by either Novell or any rational human.

Set inactivity time via group policy or registry

Hi,
I have been asked to enable the "Show me as away when I've been inactive for X minutes" option within Skype's general settings for everybody in the company and also set the time option to 5 minutes.
I so far can't find a Group Policy template that allows this however I was wondering if there was a simple registry setting that would enable this? That way I could just push out the registry setting company wide.
Would anybody be able to point me in the right direction for this?
Thanks
David

Hi,
No, I think there is no change from old “Win32_TSPermissionsSetting”. You can use the same class for remote control.
You may use WMI to change the listener's security descriptor. For example, you may use the AddAccount method to add a group to the default RDP-Tcp listener and grant it Full Control (below is using wmic logged in locally):
wmic /namespace:\\root\CIMV2\TerminalServices PATH Win32_TSPermissionsSetting WHERE(TerminalName="RDP-Tcp") CALL AddAccount "DOMAIN\group",2
After making a permission change you should log off any users that will be the target of a log off so that the change will take effect (quoted from
this thread).
Apart you can also try below policy setting.
Computer Configuration\Policies\Administrative Templates\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Connections
User Configuration\Policies\Administrative Templates\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Connections
Set rules for remote control of Remote Desktop Session Host server user sessions: Enable
Hope it helps!
Thanks.
Dharmesh Solanki
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

Windows 7 Group Policy Processing - EventID 1058

I am having an issue with Windows 7 clients refreshing group policy. When I run gpupdate the user policy refreshes and the moves on to the computer policies but fails displaying the error below. Replication topology checks out, dcdiag returns
no errors and sysvol permissions look ok too. Curiously the same policies apply just fine on windows xp pro systems. The Domain Controller is running Server 2008 Enterprise Edt R2 SP1, I see no 1030 eventid's on the domain controllers as others
frequently report with this error. The domain is running at Windows Server 2003 functional level but I have creaded a PolicyDefinitions folder in the sysvol for admx files etc. Where to go from here? Does anyone have any suggestions/insight
as to what the issue may be?
The sysvol and the gpt.ini file is accessible from the Windows 7 client using UNC path.
Thanks in advance for any assistance given.
The error code listed is 0 which is not mentioned in this article
http://social.technet.microsoft.com/wiki/contents/articles/1456.aspx
## Error details
Log Name:      System
Source:        Microsoft-Windows-GroupPolicy
Date:          2/8/2012 2:38:09 PM
Event ID:      1058
Task Category: None
Level:         Error
Keywords:
User:          SYSTEM
Computer:      win7box.abc123.net
Description:
The processing of Group Policy failed. Windows attempted to read the file
\\abc123.net\SysVol\abc123.net\Policies\{EB062BE8-CAF6-47B4-9B8B-27A19268C520}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused
by one or more of the following:
a) Name Resolution/Network Connectivity to the current domain controller.
b) File Replication Service Latency (a file created on another domain controller has not replicated to the current domain controller).
c) The Distributed File System (DFS) client has been disabled.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
    <Provider Name="Microsoft-Windows-GroupPolicy" Guid="{AEA1B4FA-97D1-45F2-A64C-4D69FFFD92C9}" />
    <EventID>1058</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>1</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2012-02-08T20:38:09.770740300Z" />
    <EventRecordID>3972</EventRecordID>
    <Correlation ActivityID="{24F60AA4-DC8D-4F6D-8787-9535072F03C0}" />
    <Execution ProcessID="996" ThreadID="1148" />
    <Channel>System</Channel>
    <Computer>win7box.abc123.net</Computer>
    <Security UserID="S-1-5-18" />
</System>
<EventData>
    <Data Name="SupportInfo1">4</Data>
    <Data Name="SupportInfo2">816</Data>
    <Data Name="ProcessingMode">0</Data>
    <Data Name="ProcessingTimeInMilliseconds">3354</Data>
    <Data Name="ErrorCode">0</Data>
    <Data Name="ErrorDescription">The operation completed successfully. </Data>
    <Data Name="DCName">DC.abc123.net</Data>
    <Data Name="GPOCNName">CN={EB062BE8-CAF6-47B4-9B8B-27A19268C520},CN=Policies,CN=System,DC=abc123,DC=net</Data>
    <Data Name="FilePath">\\abc123.net\SysVol\abc123.net\Policies\{EB062BE8-CAF6-47B4-9B8B-27A19268C520}\gpt.ini</Data>
</EventData>
</Event>
## DCDiag Results (No RODC's hence NCSecDesc error )
Directory Server Diagnosis
Performing initial setup:
   Trying to find home server...
   Home Server = DC
   * Identified AD Forest.
   Done gathering initial info.
Doing initial required tests
   Testing server: North\DC
      Starting test: Connectivity
         ......................... DC passed test Connectivity
Doing primary tests
   Testing server: North\DC
      Starting test: Advertising
         ......................... DC passed test Advertising
      Starting test: FrsEvent
         ......................... DC passed test FrsEvent
      Starting test: DFSREvent
         ......................... DC passed test DFSREvent
      Starting test: SysVolCheck
         ......................... DC passed test SysVolCheck
      Starting test: KccEvent
         ......................... DC passed test KccEvent
      Starting test: KnowsOfRoleHolders
         ......................... DC passed test KnowsOfRoleHolders
      Starting test: MachineAccount
         ......................... DC passed test MachineAccount
      Starting test: NCSecDesc
         Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have
            Replicating Directory Changes In Filtered Set
         access rights for the naming context:
         DC=ForestDnsZones,DC=abc123,DC=net
         Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have
            Replicating Directory Changes In Filtered Set
         access rights for the naming context:
         DC=DomainDnsZones,DC=abc123,DC=net
         ......................... DC failed test NCSecDesc
      Starting test: NetLogons
         ......................... DC passed test NetLogons
      Starting test: ObjectsReplicated
         ......................... DC passed test ObjectsReplicated
      Starting test: Replications
         ......................... DC passed test Replications
      Starting test: RidManager
         ......................... DC passed test RidManager
      Starting test: Services
         ......................... DC passed test Services
      Starting test: SystemLog
         ......................... DC passed test SystemLog
      Starting test: VerifyReferences
         ......................... DC passed test VerifyReferences
   Running partition tests on : ForestDnsZones
      Starting test: CheckSDRefDom
         ......................... ForestDnsZones passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... ForestDnsZones passed test
         CrossRefValidation
   Running partition tests on : DomainDnsZones
      Starting test: CheckSDRefDom
         ......................... DomainDnsZones passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... DomainDnsZones passed test
         CrossRefValidation
   Running partition tests on : Schema
      Starting test: CheckSDRefDom
         ......................... Schema passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... Schema passed test CrossRefValidation
   Running partition tests on : Configuration
      Starting test: CheckSDRefDom
         ......................... Configuration passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... Configuration passed test CrossRefValidation
   Running partition tests on : abc123
      Starting test: CheckSDRefDom
         ......................... abc123 passed test CheckSDRefDom
      Starting test: CrossRefValidation
         ......................... abc123 passed test CrossRefValidation
   Running enterprise tests on : abc123.net
      Starting test: LocatorCheck
         ......................... abc123.net passed test LocatorCheck
      Starting test: Intersite
         ......................... abc123.net passed test Intersite

I shortened this down a good bit but here is the gist of it, my question is which context/user/account is being denied access to the .ini files?  I have never used the streams utility but I'll give it a whirl and report back what I get. Most of
the cannot be accessed are probably just policies that are not applicable to the machine but the gpt.ini errors are baffling me.
New GPO - it appears that new GPOs are fine
GPSVC(3e4.80c) 12:43:27:510 ProcessGPO: Searching <cn={5D0EF3CD-7942-4A89-A879-4F9FDB3064BF},cn=policies,cn=system,DC=abc123,DC=net>
GPSVC(3e4.80c) 12:43:27:510 ProcessGPO: Machine has access to this GPO.
GPSVC(3e4.80c) 12:43:27:510 ProcessGPO: GPO passes the filter check.
GPSVC(3e4.80c) 12:43:27:510 ProcessGPO: Found functionality version of: 2
GPSVC(3e4.80c) 12:43:27:510 ProcessGPO: Found file system path of: <\\abc123.net\SysVol\abc123.net\Policies\{5D0EF3CD-7942-4A89-A879-4F9FDB3064BF}>
GPSVC(3e4.80c) 12:43:27:510 ProcessGPO: Found common name of: <{5D0EF3CD-7942-4A89-A879-4F9FDB3064BF}>
GPSVC(3e4.80c) 12:43:27:510 ProcessGPO: Found display name of: <gpoC-Win7Test>
GPSVC(3e4.80c) 12:43:27:510 ProcessGPO: Found machine version of: GPC is 0, GPT is 0
GPSVC(3e4.80c) 12:43:27:510 ProcessGPO: Found flags of: 0
GPSVC(3e4.80c) 12:43:27:510 ProcessGPO: No client-side extensions for this object.
GPSVC(3e4.80c) 12:43:27:510 ProcessGPO: GPO gpoC-Win7Test doesn't contain any data since the version number is 0. It will be skipped.
Older GPO's - not so fine
GPSVC(3e4.80c) 12:43:27:541 EvalList: Object <CN={B34A8F23-269C-43D8-A097-2307729FBFF6},CN=Policies,CN=System,DC=abc123,DC=net> cannot be accessed
GPSVC(3e4.80c) 12:43:27:541 ProcessGPO: ==============================
GPSVC(3e4.80c) 12:43:27:541 ProcessGPO: Searching <CN={55338992-95C9-4FA2-80E4-0ED4A623EE09},CN=Policies,CN=System,DC=abc123,DC=net>
GPSVC(3e4.80c) 12:43:27:541 ProcessGPO: Machine has access to this GPO.
GPSVC(3e4.80c) 12:43:27:541 ProcessGPO: GPO passes the filter check.
GPSVC(3e4.80c) 12:43:27:541 ProcessGPO: Found functionality version of: 2
GPSVC(3e4.80c) 12:43:27:541 ProcessGPO: Found file system path of: <\\abc123.net\SysVol\abc123.net\Policies\{55338992-95C9-4FA2-80E4-0ED4A623EE09}>
GPSVC(3e4.80c) 12:43:27:541 ProcessGPO: Found common name of: <{55338992-95C9-4FA2-80E4-0ED4A623EE09}>
GPSVC(3e4.80c) 12:43:27:541 ProcessGPO: Found display name of: <gpoS-RealPlayerEnt6 - Security>
GPSVC(3e4.80c) 12:43:27:541 ProcessGPO: Found machine version of: GPC is 0, GPT is 0
GPSVC(3e4.80c) 12:43:27:541 ProcessGPO: Found flags of: 0
GPSVC(3e4.80c) 12:43:27:541 ProcessGPO: No client-side extensions for this object.
GPSVC(3e4.80c) 12:43:27:541 ProcessGPO: GPO gpoS-RealPlayerEnt6 - Security doesn't contain any data since the version number is 0. It will be skipped.
GPSVC(3e4.80c) 12:43:27:541 ProcessGPO: ==============================
GPSVC(3e4.80c) 12:43:27:541 EvalList: Object <CN={C92FD413-E891-47E0-B554-BD7F9209D036},CN=Policies,CN=System,DC=abc123,DC=net> cannot be accessed
GPSVC(3e4.80c) 12:43:27:541 EvalList: Object <CN={FEF33797-46D0-452A-B3D7-0BEEC2330592},CN=Policies,CN=System,DC=abc123,DC=net> cannot be accessed
GPSVC(3e4.80c) 12:43:27:541 EvalList: Object <CN={CCBFECA5-2FF8-4512-8CE4-108C4092D009},CN=Policies,CN=System,DC=abc123,DC=net> cannot be accessed
GPSVC(3e4.80c) 12:43:27:541 EvalList: Object <CN={767959D5-7AB6-4D55-A02E-3F54439CC7DA},CN=Policies,CN=System,DC=abc123,DC=net> cannot be accessed
GPSVC(3e4.80c) 12:43:27:541 EvalList: Object <CN={10DCAC5E-9904-41FF-B678-E8514F481E56},CN=Policies,CN=System,DC=abc123,DC=net> cannot be accessed
GPSVC(3e4.80c) 12:43:27:541 EvalList: Object <CN={3229FD3D-868A-4406-AFAF-6449ADBB4749},CN=Policies,CN=System,DC=abc123,DC=net> cannot be accessed
GPSVC(3e4.80c) 12:43:27:541 EvalList: Object <CN={1DD39B5C-B930-4750-8EC3-42D0FB89A3B9},CN=Policies,CN=System,DC=abc123,DC=net> cannot be accessed
GPSVC(3e4.80c) 12:43:27:541 EvalList: Object <CN={E10350D2-F632-4D5E-9668-4151596B1D77},CN=Policies,CN=System,DC=abc123,DC=net> cannot be accessed
GPSVC(3e4.80c) 12:43:27:541 EvalList: Object <CN={86C864C5-C861-42FC-B728-BAEE81C9A091},CN=Policies,CN=System,DC=abc123,DC=net> cannot be accessed
GPSVC(3e4.80c) 12:43:27:541 EvalList: Object <CN={FE1162BF-9FE2-4F04-A514-80A8E6D5F7CD},CN=Policies,CN=System,DC=abc123,DC=net> cannot be accessed
GPSVC(3e4.80c) 12:43:27:541 EvalList: Object <CN={F68214D3-33F3-4F76-BE26-306D0237A048},CN=Policies,CN=System,DC=abc123,DC=net> cannot be accessed
GPSVC(3e4.80c) 12:43:27:541 EvalList: Object <CN={CA6B06CE-C546-41F1-87FB-9013701AEF00},CN=Policies,CN=System,DC=abc123,DC=net> cannot be accessed
GPSVC(3e4.80c) 12:43:27:541 EvalList: Object <CN={C8C9EFA2-90AA-4162-9051-23FD83B5CF62},CN=Policies,CN=System,DC=abc123,DC=net> cannot be accessed
GPSVC(3e4.80c) 12:43:27:541 EvalList: Object <CN={DE445C4F-9A0F-488F-8769-C041CF2184AA},CN=Policies,CN=System,DC=abc123,DC=net> cannot be accessed
GPSVC(3e4.80c) 12:43:27:541 EvalList: Object <CN={7CDB465C-55AC-4CBC-9C18-F3ADACDFEB46},CN=Policies,CN=System,DC=abc123,DC=net> cannot be accessed
GPSVC(3e4.80c) 12:43:27:541 EvalList: Object <CN={F4E0F78E-BE36-4793-A8B1-83B2D67083F1},CN=Policies,CN=System,DC=abc123,DC=net> cannot be accessed
GPSVC(3e4.80c) 12:43:27:541 EvalList: Object <CN={53359F0A-8C9B-4831-936F-3D47C4CC2694},CN=Policies,CN=System,DC=abc123,DC=net> cannot be accessed
GPSVC(3e4.80c) 12:43:27:541 EvalList: Object <CN={6793DBEE-47B0-458D-8F1C-D92EB7015733},CN=Policies,CN=System,DC=abc123,DC=net> cannot be accessed
GPSVC(3e4.80c) 12:43:27:541 EvalList: Object <CN={93919120-7113-47C0-AA38-0561EAB18E42},CN=Policies,CN=System,DC=abc123,DC=net> cannot be accessed
GPSVC(3e4.80c) 12:43:27:541 EvalList: Object <CN={5ABD1D9E-07E4-4A53-B854-A2FFC3B257CB},CN=Policies,CN=System,DC=abc123,DC=net> cannot be accessed
GPSVC(3e4.80c) 12:43:27:541 EvalList: Object <CN={71E2B86C-A4A0-47C0-9D7F-BDD6220B9FA4},CN=Policies,CN=System,DC=abc123,DC=net> cannot be accessed
GPSVC(3e4.80c) 12:43:27:541 EvalList: Object <CN={4401CF1C-7839-4496-BB87-304A8AB917FC},CN=Policies,CN=System,DC=abc123,DC=net> cannot be accessed
GPSVC(3e4.80c) 12:43:27:541 EvalList: Object <CN={1244CA5A-D654-4ED6-9374-148F1F3DA8ED},CN=Policies,CN=System,DC=abc123,DC=net> cannot be accessed
GPSVC(3e4.80c) 12:43:27:541 EvalList: Object <CN={42875CF2-B9E9-4EFA-90C2-7ACA8882F1B7},CN=Policies,CN=System,DC=abc123,DC=net> cannot be accessed
GPSVC(3e4.80c) 12:43:27:541 EvalList: Object <CN={6DD428B6-6B19-4A53-B172-57DB3E15A38E},CN=Policies,CN=System,DC=abc123,DC=net> cannot be accessed
GPSVC(3e4.80c) 12:43:27:541 EvalList: Object <CN={983BFDAD-65F0-42B4-807A-E78DF275C352},CN=Policies,CN=System,DC=abc123,DC=net> cannot be accessed
GPSVC(3e4.80c) 12:43:27:541 EvalList: Object <CN={AFA31A2D-07D8-4CB4-BE86-067A9624E324},CN=Policies,CN=System,DC=abc123,DC=net> cannot be accessed
GPSVC(3e4.80c) 12:43:27:541 EvalList: Object <CN={77C9CA17-6359-4355-9FDF-F605F0441245},CN=Policies,CN=System,DC=abc123,DC=net> cannot be accessed
GPSVC(3e4.80c) 12:43:27:541 EvalList: Object <CN={75D43291-6FA2-4B98-8422-228DDB45571B},CN=Policies,CN=System,DC=abc123,DC=net> cannot be accessed
GPSVC(3e4.80c) 12:43:27:541 EvalList: Object <CN={870C6FB3-74CD-46E8-9D4D-E6E6C0A2B52D},CN=Policies,CN=System,DC=abc123,DC=net> cannot be accessed
GPSVC(3e4.80c) 12:43:27:541 EvalList: Object <CN={2144E4CF-01C1-4C5B-984B-E9BD4461406F},CN=Policies,CN=System,DC=abc123,DC=net> cannot be accessed
GPSVC(3e4.80c) 12:43:27:541 EvalList: Object <CN={7D9DB917-1245-46BD-AEBF-163A2F0FCD06},CN=Policies,CN=System,DC=abc123,DC=net> cannot be accessed
GPSVC(3e4.80c) 12:43:27:541 EvalList: Object <CN={B7431941-5DAA-4DD2-A569-35C31B92B677},CN=Policies,CN=System,DC=abc123,DC=net> cannot be accessed
GPSVC(3e4.80c) 12:43:27:541 EvalList: Object <CN={D01BF1D1-33C8-4FC3-95C3-5948A1EE1647},CN=Policies,CN=System,DC=abc123,DC=net> cannot be accessed
GPSVC(3e4.80c) 12:43:27:541 EvalList: Object <CN={57D4AD83-3BBF-43C2-9A3B-F71F3E52C2A6},CN=Policies,CN=System,DC=abc123,DC=net> cannot be accessed
GPSVC(3e4.80c) 12:43:27:541 EvalList: Object <CN={A8DB7DAC-42F0-43FC-99E1-F1AC15006101},CN=Policies,CN=System,DC=abc123,DC=net> cannot be accessed
GPSVC(3e4.80c) 12:43:27:541 EvalList: Object <CN={56574927-6DC5-48A7-82F9-A00E820335F6},CN=Policies,CN=System,DC=abc123,DC=net> cannot be accessed
GPSVC(3e4.80c) 12:43:27:541 EvalList: Object <CN={2FB6858E-8B1C-4C89-83B2-0EEE97D9A72B},CN=Policies,CN=System,DC=abc123,DC=net> cannot be accessed
GPSVC(3e4.80c) 12:43:27:541 EvalList: Object <CN={93C56E3F-5334-4325-A328-0CCAFED0828B},CN=Policies,CN=System,DC=abc123,DC=net> cannot be accessed
GPSVC(3e4.80c) 12:43:27:541 EvalList: Object <CN={1B64E00F-D3B6-49B6-B6C8-7AD0A8C9AEFA},CN=Policies,CN=System,DC=abc123,DC=net> cannot be accessed
GPSVC(3e4.80c) 12:43:27:541 EvalList: Object <CN={81B4E46C-8249-4547-BC75-9A1FB395E282},CN=Policies,CN=System,DC=abc123,DC=net> cannot be accessed
GPSVC(3e4.80c) 12:43:27:541 EvalList: Object <CN={43D5184A-73C8-4BFD-9B09-33C70B8BC3C2},CN=Policies,CN=System,DC=abc123,DC=net> cannot be accessed
GPSVC(3e4.80c) 12:43:27:541 ProcessGPO: ==============================
GPSVC(3e4.80c) 12:43:27:541 ProcessGPO: Searching <CN={0ABE0BCF-0BC5-481E-AC86-5768D00901D5},CN=Policies,CN=System,DC=abc123,DC=net>
GPSVC(3e4.80c) 12:43:27:541 ProcessGPO: Machine has access to this GPO.
GPSVC(3e4.80c) 12:43:27:541 ProcessGPO: GPO passes the filter check.
GPSVC(3e4.80c) 12:43:27:541 ProcessGPO: Found functionality version of: 2
GPSVC(3e4.80c) 12:43:27:541 ProcessGPO: Found file system path of: <\\abc123.net\SysVol\abc123.net\Policies\{0ABE0BCF-0BC5-481E-AC86-5768D00901D5}>
GPSVC(3e4.80c) 12:43:27:541 ProcessGPO: Couldn't find the group policy template file <\\abc123.net\SysVol\abc123.net\Policies\{0ABE0BCF-0BC5-481E-AC86-5768D00901D5}\gpt.ini>,
error = 0x0. DC: DC2.abc123.net
GPSVC(3e4.80c) 12:43:27:541 ProcessGPO: ==============================
GPSVC(3e4.80c) 12:43:27:541 EvalList: ProcessGPO failed
GPSVC(3e4.80c) 12:43:27:541 GetGPOInfo: EvaluateDeferredGPOs failed. Exiting
GPSVC(3e4.80c) 12:43:27:541 GetGPOInfo: Leaving with 0
GPSVC(3e4.80c) 12:43:27:541 GetGPOInfo: ********************************
GPSVC(3e4.80c) 12:43:27:541 ProcessGPOs: GetGPOInfo failed.
GPSVC(3e4.80c) 12:43:27:541 ProcessGPOs: No WMI logging done in this policy cycle.
GPSVC(3e4.80c) 12:43:27:541 ProcessGPOs: Processing failed with error 87.
GPSVC(3e4.80c) 12:43:27:557 Application complete with bConnectivityFailure = 0.
GPSVC(3e4.80c) 12:43:27:557 Signalling 1 Refresh Policy callers
GPSVC(f84.df4) 12:43:27:557 Exiting RefreshPolicyForPrincipal with status = 0
GPSVC(3e4.80c) 12:43:27:557 GPLockPolicySection: Sid = (null), dwTimeout = 600000, dwFlags = 0
GPSVC(3e4.80c) 12:43:27:557 LockPolicySection called for user <Machine>
GPSVC(3e4.80c) 12:43:27:557 Sync Lock Called
GPSVC(3e4.80c) 12:43:27:557 Writer Lock got immediately.
GPSVC(3e4.80c) 12:43:27:557 Lock taken successfully
GPSVC(3e4.80c) 12:43:27:557 UnLockPolicySection called for user <Machine>
GPSVC(3e4.80c) 12:43:27:557 UnLocked successfully

MBAM Group Policy Problems

I am trying to install and configure MBAM 2.0. I have installed all of the components on two separate servers. Server 1 has sccm 2012
integration and gpo policy templates. Server two has the rest. When I load Group Policy Management the templates do not appear. I have manually extracted and copied the templates in the local policy definitions and still nothing. Any ideas?

By default the Group Policy Management console will look for templates at a central SYSVOL location (a so called central store). Likely you have a PolicyDefinitions folder in
\\domain.com\sysvol\domain.com\Policies and then you need to add the MBAM ADMX and ADML files to that location to be able to see those settings when managing group policies. The reason for this is
that the central store has precedence over local group policy templates.
Blogging about Windows for IT pros at
www.theexperienceblog.com

Remote Desktop connection - Set URL by group policy

on our 2008 R2 DC we do not have a "RemoteApp and Desktop Connections" entry and so i cant
set the Default URL of the RDS web , how i can have an admx for this policy or any work around in order to set the URL by group policy, by the way i have an rds 2012 R2 and DC 2008 R2 and all clients are using thin clients with windows 8 embedded.

Hi,
You can download and install the latest group policy templates on your DC:
Administrative Templates (.admx) for Windows 8.1 and Windows Server 2012 R2
http://www.microsoft.com/en-us/download/details.aspx?id=41193
Another option would be to edit your group policies from your Server 2012 R2 server. For this you need to install Group Policy Management via Server Manager Add Roles and Features Wizard.
-TP

Can I prevent a user from Deleting the Group Policy deployed power plan?

I have Power Manager version 3.20 installed and am using the Group Policy template to deploy a customized power plan. I do not want my users to have the ability to delete this custom plan, but I cannot find the option in the Group Policy to change the setting that would grey-out the Delete button in Power Manager.
I have located the registry value that changes the function of Power Manager, it is: HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Lenovo\PWRMGRV\PowerSchemes\42617646-BC99-48E2-B3AF-C562C25F4098\ProhibitModification. If the value is 0, then the delete button is available. If the value is 5, then the delete button is greyed-out.
The problems is that the Power Plan ID number (the 42617646-BC99... part in the reg key above) changes from computer to computer. That ID string seems to be tied somehow to the specific computer. So, I cannot just create a Group Policy Preference to change that value in the registry, because that value is always going to have a different name.
The computers are all ThinkPad T400 model and are running Windows 7 Enterprise 64-bit.
Can anyone suggest a different method to change this setting? If not, is there any chance that the Power Manager application can be upgraded to include this control?
Thank you!

welcome to the forum!
to add to what gan said, page 6 of the power manager deployment guide covers this policy over active directory.
http://www-307.ibm.com/pc/support/site.wss/document.do?lndocid=TVAN-ADMIN#pmat
http://www-307.ibm.com/pc/support/site.wss/document.do?lndocid=MIGR-70419
ThinkStation C20
ThinkPad X1C · X220 · X60T · s30 · 600

Group Policy Request

Group Policy is very individualized. However, I have discovered the following tips that have helped me well over the years:Never, Never edit the Default Domain and Default Domain Controller policies - this provides a way to fall back to the defaults.If you deploy software via GPO, put any firewall rules needed for that software in the same policy. This allows you to close the firewall rules if you retire the software from your environment or move a PC to a different OU that doesn't use this software.Group Policy is OU based.Security Groups can cross OUs, making Group Policy and Security Groups orthogonal to each other. The two work together - use GPOs to set the base rules and Security Groups to provide access. Also, because it is OU based, do not put anything into the default Users and Computers containers. You cannot apply Group...

Hi Spiceheads,
I'm new in Group Policy but I need to setup our Group Policy in the domain can anyone with good heart provide me some standard group policy configuration or working group policy you have or group policy templates then I will check and explore the uses of it so I can setup our group policy correctly.
Sorry If a new like me ask this kind of request.
This topic first appeared in the Spiceworks Community

Use Group Policy to add website to Popup Blocker Exception List

I have downloaded the Firefox.adm Template and have added it to my local security settings for testing. I do not see how to add website(s) to the Popup Blocker Exception List. I have been able to do this for IE and Chrome (using the Chrome Group Policy Template) and need to do the same for Firefox.

hello MorehouseSteve, firefox doesn't support any group policy settings per default - you might have to contact the developers or support resources of the plugin or extension you're using to get further help on this issue...

Problem fixing XJC Errors ("already defined" in groups)

Hello,
I am using JAXB to generate code for some schemas created by a different group in my project, but I get an error that I kind of understand but don't know exactly how to resolve.
This is a pared-down version of the schema holding only the offending pieces:
MainSchema.xsd
<?xml version="1.0" encoding="utf-8"?>
<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
           xmlns:ns_a="DATASET_A"
           xmlns:ns_b="DATASET_B"
           xmlns:ns_c="DATASET_C"
           xmlns:ns_d="DATASET_D"
           xmlns:ns_e="DATASET_E"
           xmlns:ns_f="DATASET_F">
   <xs:include schemaLocation="BASIC_TYPES.XSD" />
   
   <xs:import namespace="DATASET_A" schemaLocation="DATASET_A.xsd"/>
   <xs:import namespace="DATASET_B" schemaLocation="DATASET_B.xsd"/>
   <xs:import namespace="DATASET_C" schemaLocation="DATASET_C.xsd"/>
   <xs:import namespace="DATASET_D" schemaLocation="DATASET_D.xsd"/>
   <xs:import namespace="DATASET_E" schemaLocation="DATASET_E.xsd"/>
   <xs:import namespace="DATASET_F" schemaLocation="DATASET_F.xsd"/>
   <xs:complexType name="ReturnGetDataStatusType">
      <xs:sequence>
         <xs:element name="DATA_LIST">
            <xs:complexType>
               <xs:sequence maxOccurs="unbounded">
                  <xs:choice>
                     <xs:group ref="ns_a:ReturnGetDataItemType" minOccurs="0" maxOccurs="unbounded"/>
                     <xs:group ref="ns_b:ReturnGetDataItemType" minOccurs="0" maxOccurs="unbounded"/>
                     <xs:group ref="ns_c:ReturnGetDataItemType" minOccurs="0" maxOccurs="unbounded"/>
                     <xs:group ref="ns_d:ReturnGetDataItemType" minOccurs="0" maxOccurs="unbounded"/>
                     <xs:group ref="ns_e:ReturnGetDataItemType" minOccurs="0" maxOccurs="unbounded"/>
                     <xs:group ref="ns_f:ReturnGetDataItemType" minOccurs="0" maxOccurs="unbounded"/>
                  </xs:choice>
               </xs:sequence>
            </xs:complexType>
         </xs:element>
      </xs:sequence>
   </xs:complexType>
   
   <xs:complexType name="FileDataType">
      <xs:sequence>
         <xs:element name="DATA_LIST">
            <xs:complexType>
               <xs:choice>
                  <xs:group ref="ns_a:ReturnGetDataItemType" minOccurs="0" maxOccurs="unbounded"/>
                  <xs:group ref="ns_b:ReturnGetDataItemType" minOccurs="0" maxOccurs="unbounded"/>
                  <xs:group ref="ns_c:ReturnGetDataItemType" minOccurs="0" maxOccurs="unbounded"/>
                  <xs:group ref="ns_d:ReturnGetDataItemType" minOccurs="0" maxOccurs="unbounded"/>
                  <xs:group ref="ns_e:ReturnGetDataItemType" minOccurs="0" maxOccurs="unbounded"/>
                  <xs:group ref="ns_f:ReturnGetDataItemType" minOccurs="0" maxOccurs="unbounded"/>
               </xs:choice>
            </xs:complexType>
         </xs:element>
      </xs:sequence>
   </xs:complexType>
   <xs:element name="RETURN_GET_DATA" type="ReturnGetDataStatusType"/>
   <xs:element name="FILE_DATA" type="FileDataType"/>
</xs:schema>---
When I try to compile this schema and their underlying schemas, I get this error repeated for each "group" attribute of the FileDataType:
C:\dir\temp\fake_DataStore>xjc -d output   -p com.company.stuff   *.xsd *.XSD | more
parsing a schema...
[ERROR] Property "ReturnGetDataItemType" is already defined. Use <jaxb:property> to resolve this conflict.
line 49 of file:/C:/dir/temp/fake_DataStore/MainSchema.xsd
[ERROR] The following location is relevant to the above error
line 50 of file:/C:/dir/temp/fake_DataStore/MainSchema.xsd
[ERROR] Property "ReturnGetDataItemType" is already defined. Use <jaxb:property> to resolve this conflict.
line 50 of file:/C:/dir/temp/fake_DataStore/MainSchema.xsd
[ERROR] The following location is relevant to the above error
line 51 of file:/C:/dir/temp/fake_DataStore/MainSchema.xsd
[ERROR] Property "ReturnGetDataItemType" is already defined. Use <jaxb:property> to resolve this conflict.
line 51 of file:/C:/dir/temp/fake_DataStore/MainSchema.xsd
[ERROR] The following location is relevant to the above error
line 52 of file:/C:/dir/temp/fake_DataStore/MainSchema.xsd
[ERROR] Property "ReturnGetDataItemType" is already defined. Use <jaxb:property> to resolve this conflict.
line 52 of file:/C:/dir/temp/fake_DataStore/MainSchema.xsd
[ERROR] The following location is relevant to the above error
line 53 of file:/C:/dir/temp/fake_DataStore/MainSchema.xsd
[ERROR] Property "ReturnGetDataItemType" is already defined. Use <jaxb:property> to resolve this conflict.
line 53 of file:/C:/dir/temp/fake_DataStore/MainSchema.xsd
[ERROR] The following location is relevant to the above error
line 54 of file:/C:/dir/temp/fake_DataStore/MainSchema.xsd
Failed to parse a schema.---
It clearly has a problem with using the same group references in two different complexTypes, but I don't know how to use jaxb:property to resolve it.
Do I rename this ReturnGetDataItemType differently in the FileDataType complexType? If so, how?
Thank you for reading. Please let me know if you have any questions.
Edited by: jaylogan on Mar 18, 2010 6:49 PM

you need to pass a bindings file using the -b switch as explained here: http://java.sun.com/webservices/docs/1.5/tutorial/doc/JAXBUsing4.html

Group Policy Templates - Namespace Already Defined

Similar Messages

Maybe you are looking for