Group Policy with different Results

I have Server2008 and Win 7 and Win8.1 clients
I created the GPO in fact my Fellow made the modifications in the default group policy that Deny the USB or any removable media
He exempted the Users in GPO's Delegation Tab and and select apply group policy as deny.
Since I removed that policy. Still users cannot access the USB even that the policy is removed
I have tried everything on Clients to update that GPO
gpupdate /force , gpupdate /sync and the USB still not updated
I backup the Default GPO and in the GPO folder I found the These files
its mean that the Policy is still Exist
I want to enable the USBs kindly update me
Regards

Hi,
Did you use custom ADM Administrative template to disable the usb?
If the answer is yes, it is considered a preference rather than a true policy and will tattoo the registry of client computers with its settings. If this template is moved out of scope of the
Group Policy which applies it, the registry changes it makes will remain.
If you wish to reverse the settings made by this template, simply reverse the options to re-enable the drivers.
For more detailed information, you can refer to the following links:
HOWTO: Use Group Policy to disable USB, CD-ROM, Floppy Disk and LS-120 drivers
http://support.microsoft.com/kb/555324
Besides, since sever 2008, we can use admx template to disable the usb.
For more detail information, you can refer to the following link:
Active Directory: How to Block USB Devices
http://social.technet.microsoft.com/wiki/contents/articles/1699.active-directory-how-to-block-usb-devices-dsforum2wiki.aspx
Best Regards,
Erin

Similar Messages

How to restrict users working on Windows 7 clients from accessing Windows Explorer and other systems in the network through Group Policy with a domain controller running on Windows Server 2008 r2

Dear All,
We are having an infrastructure setup of around 500 client computers managed through group policy.
Recently the domain controllers have been migrated from Windows Server 2003 to Server 2008 R2.
Since this account requires extremely strict environment, we need to figure the solution for restricting the users from access anything locally.
It would be great if you can assist me with the following query.
How to restrict users logged on Windows 7 clients from accessing Windows Explorer and browsing other systems in the network through Group Policy with a domain controller running on Windows Server 2008 r2 ?
Can we disable Network Tab on the left hand pane ?
explorer.exe is blocked already, but users are able to enter the Windows Explorer by clicking on the name which is visible on the Start Menu.

>   * explorer.exe is blocked already, but users are able to enter the
>    Windows Explorer by clicking on the name which is visible on the
>    Start Menu.
You cannot block explorer.exe when you do not replace the shell - the
desktop you see effectively IS explorer.exe...
Your requirement sounds like you need a custom shell:
http://gpsearch.azurewebsites.net/#2812
Martin
Mal ein
GUTES Buch über GPOs lesen?
NO THEY ARE NOT EVIL, if you know what you are doing:
Good or bad GPOs?
And if IT bothers me - coke bottle design refreshment :))

Siri comes up with different results than google maps

I was doing a search for Food Lion through Siri but she wasn't finding the one right around the corner from my house. I went into maps and it found it no problem. Why do they come up with different results? I thought Siri searched google maps.

Because Apple maps is NOT google maps.

Deploying software through group policy with certain requirements

here is the question:
I have an existing Active Directory environment, consisting of 300 computers. we need to install the latest version of ADOBE ACROBAT READER to all computers with the following requirements:
. The application is not supported on windows XP
. We need to have automatic updates turned off within the application
. We need a silent, automatic installation.
. The Engineer Department needs to be excluded, as they use Proprietary PDF app.
Is is possible to deploy thru Group Policy and meet all these so called requirements ?

Hi,
Before going further, I agree with Zanderol24.
>>
The application is not supported on windows XP
We can use a WMI filter to exclude Windows XP clients from applying the software installation policy.
Regarding WMI filter, the following article can be referred to for more information.
WMI filtering using GPMC
http://technet.microsoft.com/en-us/library/cc779036(v=ws.10).aspx
Regarding how to use WMI filter to filter out Windows XP, the following article can be referred to as reference.
Create WMI Filters for the GPO
http://technet.microsoft.com/en-us/library/cc947846(v=ws.10).aspx
>>We need to have automatic updates turned off within the application
For this is related to the software, we can contact vendor support to ask for suggestions.
>>We need a silent, automatic installation.
We can choose to assign a program distribution to users or computers.
If we assign the program to a user, it is installed when the user logs on to the computer. When the user first runs the program, the installation is completed.
If we assign the program to a computer, it is installed when the computer starts, and it is available to all users who log on to the computer. When a user first runs the program,
the installation is completed.
Regarding how to use Group Policy to remotely install software, the following article can be referred to for more information.
How to use Group Policy to remotely install software in Windows Server 2008 and in Windows Server 2003
http://support.microsoft.com/kb/816102/en-us
>>The Engineer Department needs to be excluded, as they use Proprietary PDF app.
If we choose to assign the software to computers, we have to filter out computer accounts for the Engineer Department from applying the software installation policy. If we
choose to assign the software to users, we have to filter out user accounts for the department. We can use security filtering to do this.
Regarding security filtering, the following articles can be referred to for more information.
Security filtering using GPMC
http://technet.microsoft.com/en-us/library/cc781988(v=ws.10).aspx
Filter Using Security Groups
http://technet.microsoft.com/en-us/library/cc752992.aspx
Best regards,
Frank Shen

Issues with iCloud synchronisation and contacts over two or more devices. iTouch and iPad2 sync with different results from iMac. Thoughts?

Has any one experienced issues with iCloud synchronisation and contacts over two or more devices? The primary machine is an iMac running Lion. Address Book was created from vcf file (backup of address book prior to moving to iCloud). iTouch replicates Contacts just fine and matches the Address Book on the iMac. The iPad 2 does not showing only 123 contacts where there should be 200. I have turned off iCloud on both devices thus erasing the iCloud content of both devices and staring from scratch with both devices with identical results. Even turned off iCloud on the iMac and erased the Address Book and rebuilt with the same results. Anyone have any ideas or suggestions? I am going nuts.....

To follow-up with this issue:
I ended up performing a security wipe on my device. The security wipe finished, and I was about to reconnect with Exchange when I decided to visit our host's web site to see if they had any articles covering the issues I was experiencing. While they didn't have anything specific, I did find a step-by-step guide to connecting a BB10 device to Exchange... and right there at the end, it said "Do NOT enable memo sync."
I contacted support, and the rep told me that OS 10 has an issue with memo sync and it can cause all sorts of unpredictable behavior. Now, whether or not this is accurate I can say this: So far, the device is not disconnecting and reconnecting like it was before. Problem is, is this a result of not enabling memo sync, or is this a result of the security wipe?
I may have overlooked it, but I don't recall reading anything about that anywhere else. I'm tempted to try re-enabling the memo sync to see if everything blows up again. At least that way I can see for myself if the memo sync is a real issue. Of course, perhaps it's an issue with SherWeb (our host) specifically. Hm...
Anyway, for those that were interested, and for those that may come along in the future with a similar situation, the strange behavior that I first reported is no longer happening. I just don't know if it was a result of a security wipe or a result of not enabling memo sync with Exchange.
Ian

Same circuit twice with different results

I've been having some trouble having Multisim match a circuit I have modeled in MATLAB. During the troubleshooting process I put voltage probes on each wire used. The circuit portion in question involves an AC Voltage source connected to a resistor which is then connected to an inductor. I made a copy of the circuit and started from scratch. One of the circuits gives a voltage drop across the resistor, while the other one doesn't drop any voltage at all. I've checked all of the connections and they are all good. The only difference I can see is that one has the pins labeled 1 - 2 while the other is 2 - 1. Does anyone know what the problem is here? I shouldn't not be getting two different results for the same circuit.

Hi Jmerc,
Maybe you can post the circuits so that we can compare.
Tien P.
National Instruments

In vs. Exists with different results

Hi all
I have a general question
Are there any cases where using the exists operator can produce different results/amount of results
Vs. using the IN operator ?
If yes please post an Example
the reason that i'm asking this it's because the exists returns true if the subquery returns at least one row and
it doesn't continue to check , but IN check all the values ,
this is critical for me to know , if i need to returns the amount of rows etc.
Thanks In advanced
Naama
Edited by: naama on Jun 21, 2011 11:52 PM

Hi,
naama wrote:
Hi all
I have a general question
Are there any cases where using the exists operator can produce different results/amount of results
Vs. using the IN operator ?
If yes please post an Example I don't believe that's really your question.
The answer to the question above is: Yes, of course. Most of the time, EXISTS and IN will produce different results. For example, this query returns 3 rows:
SELECT     dname
FROM     scott.dept
WHERE     deptno   IN (
               SELECT deptno
               FROM     scott.emp
;but this query produces 0 rows:
SELECT     dname
FROM     scott.dept     d
WHERE     EXISTS      (
               SELECT NULL
               FROM     scott.emp
               WHERE     sal     = d.deptno
;Try again; what really is your question?
An important difference between EXISTS and IN is that EXISTS always returns TRUE or FALSE, but IN can return any of the 3 logical values: TRUE, FALSE or UNKNOWN. When you say "WHERE condition_1" in a query, the row is included if condition_1 is TRUE, and the row is not included if condition is either FALSE or UNKNOWN. That means you can have situations where these two conditions:
WHERE deptno IN (subquery_a)always produces the exact same results as
WHERE EXISTS (subquery_b)but
WHERE deptno NOT IN (subquery_a)always produces the exact same results as
WHERE NOT EXISTS (subquery_b)for the exact same subqueries. That's because it's possible for neither
"IN (subquery_a)" or
"NOT IN (subquery_a)" to be TRUE, but either
"EXISTS (subquery_b)" or
"NOT EXISTS (subquery_b)" will always be TRUE.
Review SQL's 3-valued logic. NOT UNKNOWN is the same as UNKNOWN.

Two queries against aud$ with different results

hi guys
I'm not so good with queries and that is the reason for my question:
We have audit activated and we want to get the following information (monthly):
- how many times the user logon to database.
- every logon of each user in a month.
For the first (1) requirement we have the following query:
select USERID "Cuenta", USERHOST, TERMINAL, nombres||' '||PRIMER_APELLIDO||' '||SEGUNDO_APELLIDO "WhiteList"
, count(*) "TOTAL"
from aud$, ab.usuarios
where (ACTION# = 100) and
(NTIMESTAMP# between (to_date(to_char('01092013 00:00:00'),'ddmmyyyy HH24:MI:SS'))
    and (to_date(to_char('30092013 23:59:00'),'ddmmyyyy HH24:MI:SS'))) and
USERID = CODIGO_USUARIO(+) and
USERID not in ('DBSNMP','SYSMAN')
group by USERID, USERHOST, TERMINAL, nombres||' '||PRIMER_APELLIDO||' '||SEGUNDO_APELLIDO
order by USERID, USERHOST, TERMINAL;
the result of this query shows like this:
Header 1
Cuenta               USERHOST                  TERMINAL        WhiteList                                     TOTAL
ASEGUR               MAQUINADIAB\SSSSS        IUOOO          PEPITO GARCIA Y GARCIA SOCIED                    10
ASEGUR               POSADASDE\MNNN4550094 MNNN4550094    PEPITO GARCIA Y GARCIA SOCIED                     1
ASEGUR               POSADASDE\YUMI          YUMI            PEPITO GARCIA Y GARCIA SOCIED                    10
ASEGUR               YUH                                       PEPITO GARCIA Y GARCIA SOCIED                    20
ASEGUR               SDFRG                                    PEPITO GARCIA Y GARCIA SOCIED                    13
ASEGUR               signy                                     PEPITO GARCIA Y GARCIA SOCIED                    29
ASEGUR               sigurd                                    PEPITO GARCIA Y GARCIA SOCIED                    32
ASEGUR               valhalla-Legacy                           PEPITO GARCIA Y GARCIA SOCIED                    12
ADMIN                MAQUINADIAB\SSSSS        IUOOO          USUARIO ADMINISTRADOR NETWORKING                3
SPRINGUSR            bragi                                                                                      98
SPRINGUSR            hermod                                                                                     59
SPRINGUSR            YUH                                                                                        49
So, is the total logons in a month by user.
for the second requirement we are using the follow query:
select USERID "Cuenta", USERHOST, TERMINAL, to_char(NTIMESTAMP#,'YYYYMMDD HH24:MI:SS') "Fec Ing", nombres||' '||PRIMER_APELLIDO||' '||SEGUNDO_APELLIDO "WhiteList"
--, count(*) "TOTAL"
from aud$, ab.usuarios
where (ACTION# = 100) and
--to_char(NTIMESTAMP#,'dd-mm-yy')=to_char(sysdate-50,'dd-mm-yy') and
(NTIMESTAMP# between (to_date(to_char('01062013 18:00:00'),'ddmmyyyy HH24:MI:SS'))
    and (to_date(to_char('30062013 23:59:00'),'ddmmyyyy HH24:MI:SS'))) and
USERID = CODIGO_USUARIO(+) and
USERID not in ('DBSNMP','SYSMAN')
group by USERID, USERHOST, TERMINAL,to_char(NTIMESTAMP#,'YYYYMMDD HH24:MI:SS'), nombres||' '||PRIMER_APELLIDO||' '||SEGUNDO_APELLIDO
order by USERID, USERHOST, TERMINAL;
Header 1
Cuenta               USERHOST                  TERMINAL        Fec Ing              WhiteList
USER12               DOMINIODDD\IOIPOP        IOIPOP          20130930 12:08:33    ANGEL ROBERTO GARCIA Y GARCIA S
USER12               DOMINIODDD\IOIPOP        IOIPOP          20130930 14:28:47    ANGEL ROBERTO GARCIA Y GARCIA S
USER12               DOMINIODDD\IOIPOP        IOIPOP          20130930 16:24:43    ANGEL ROBERTO GARCIA Y GARCIA S
so, shows each logon done by user in a month.
But in the both queries, the results are different. It is not suppose that they have to be the same number of logons?
I mean, If I sum the numbers in TOTAL column I have less that I get in the second query. Always !!!
could you help us?
thank you

Your timeframes are different:
(NTIMESTAMP# between (to_date(to_char('01092013 00:00:00'),'ddmmyyyy HH24:MI:SS'))
and (to_date(to_char('30092013 23:59:00'),'ddmmyyyy HH24:MI:SS'))) and
versus
(NTIMESTAMP# between (to_date(to_char('01062013 18:00:00'),'ddmmyyyy HH24:MI:SS'))
    and (to_date(to_char('30062013 23:59:00'),'ddmmyyyy HH24:MI:SS'))) and

Webutil_File_Transfer.DB_To_Client with different result

hi
Forms 10.1.2.3
i use in Forms this function to Downlaod BLOBs
Webutil_File_Transfer.DB_To_Client
     ('H:\l.xml',
     'T_DEV_ARCHIV',
     'dar_xml_blob',
     'dar_id=110874')
In the BLOB are German letters inside ü, ä, ö ..
Result on two Clients:
at the first client the result looks good
On the other Client I’m missing the German letters.
Why the transfer is different? What has to do with the client?
BLOB's are binary files !!!
I just despair.
Edited by: alinzenb on 04.03.2013 13:16

Yes, but did you add a characterset definition to your XML file, and does the data stored in the XML match this characterset?
If you have e.g.
<?xml version="1.0" encoding="windows-1252" ?>But the data in the blob is actually UTF-8 encoded you have a Characterset-Problem, as the XML parser will treat your (UTF-8 data) as windows-1252 data...
cheers

Permissions - "everyone" group twice with different rights

Hi,
I found a couple of permission threads on the web and in here, but none seem to hit precisely what I experience.
Since I was already reading about problems upgrading/migrating from Tiger to Leopard, I was taking the precautious extra step and cloned my hard drive using Tiger 10.4.10 and Carbon Copy Cloner to an IEEE 1394 drive, after which I installed Leopard from scratch. Everything went well until the point I copied back my stuff into the respective folders (not overwriting the 1st-level home folders, e.g. Documents). Despite I selected that the external drive shall ignore permissions, it obviously created a permission mess on the internal drive on those files/folders. Permission-wise the files/folders looked like the following:
everyone - Custom
(unknown) - Custom <--- Not every file or folder
Phoenix (Me) - Read & Write
staff - Read Only <--- Not every file or folder
everyone - Read Only <--- Not every file or folder
The result is that as long as there is the "everyone" group in there with the "Custom" permissions, I am unable to change (e.g. rename) those files/folders.
If the "everyone" group is listed twice, I need to do the following 3 steps to straighten the permissions again:
1. Set "everyone - Custom" to "everyone - No Access"
2. Set the "everyone - Read Only" also to "everyone - No Access" (the second entry disappears at that point)
3. Set the remaining "everyone" group to "Read Only" as it was meant to be
Also, the "(unknown)" user seems not to disappear when clicking the "-" button, but disappears afterwards when doing the first of the above-mentioned 3 steps.
Though I managed to change the permissions on the items itself to just contain the 700 or 755 permissions, I was not successfully removing the "everyone - Custom" group or the "(Unknown)" users when using the "Apply to enclosed items" option for the sub-items. In fact, it appears to just sets the permissions to the 1st-level sub-folders skipping the files, but leaving the "Custom" and "(Unknown)" entries in there.
*After this long, but required introduction, here my question:*
Is there a tool, which is relatively simple to use to remove ALL permission entries and then after that adds the default permissions on it?
A script with "chmod" would also be fine. You may call me lazy, but I find it just nasty to change all 10s of 1000s of files basically one-by-one manually using the 3 steps for each file/folder.
Kind Regards,
Jan
PS: The issue seems to be ONLY with the old copied Tiger files. New files appear to get the correct permissions.

Question is archived and cannot be answered anymore.

Linking 2 text boxes with different results

Hello
I am trying to Link a drop down box with names, to a text field containing the relative identification of that person,
Here is what I am trying to do.
The drop down would have              and the result in the linked text box
Richard                                                       123456
Steve                                                            654321
Jerry                                                                125874
Fred                                                                  987542
I have attached a screen shot with some graphics
How can I do this please?
Thanks in advance

Thank you so very much I will give it a go I am totally new to theis program.
Sorry for asking more but.
If the Dropdown has the names and once they have selected the name using the dropdown, I would like the texbox called "Certificatenumber" to associate the name with the correct number, how do I link the boxes.
Any chance of a couple of screen shots.
Sorry I am so bad on this I just started with forms like the other day.
Thank you for your time everyone.
(Thank you MarkWalsh)

Project 7 - Pop menu magic 2 - 1 template with different results

I just noticed something strange on my website.
I only use 1 template which should normally give the same result on all pages.
However on 4 pages the menu bar is split into 2 row. All other pages are correct as per template.
Here is the link for the correct page : http://www.lotolux.com/media.html
And here are the links of the 4 pages with the error.
http://www.lotolux.com/biography.html
http://www.lotolux.com/actingcareer.html
http://www.lotolux.com/burbank08concert.html
http://www.lotolux.com/london08concert.html
Can somebody help me solving this?
Many thanks
Martine

And it becomes more stranger.
I recreated those 4 pages using the template. I copied and pasted all info from the old pages onto the new ones.
The new pages have the same name - I only added 2 at the end.
http://www.lotolux.com/biography2.html
http://www.lotolux.com/actingcareer2.html
http://www.lotolux.com/burbank08concert2.html
http://www.lotolux.com/london08concert2.html
They are uploaded and the error is gone. BUT BUT BUT BUT BUT ....................if I update the P7 -PMM2 menu bar ......the error is back there.
It is a mystery to me and get frustrated from it. Uploaded without linked in the menu bar = all ok, but if the link is made = back to zero.

Sandpit and Dev give Address search with different results using Web UI

Using the Sandpit system I can perform a BP search on Street and enter the post code, but it still finds the right address. However, in our development sytsem it does not. The FM which performs the search is identical so I assume this would be down to some kind of address related config?. Can anyone enlighten me further as what could possible cause this?.
Jason
[RESOLVED]
Edited by: Jason Stratham on Sep 8, 2009 11:35 AM

Okay. So, I asked the admin to create a scope for the list, which they did following the steps outlined in Ben Tedders article, and then I followed the steps in the rest of the article setting up the web parts. When I ran a search, it returned the no results
page. Not sure why, but I removed the scope from the Search Core Results web part, and the search returned usable data from the list.
Here's my part ii question - - how do I customize the Search Core Results web part to display the data from the search in manner that makes more sense than from a list of nondescript layout of,
Search Result
     Search Term ... dataField01 ... dataField02 ... dataField03 ... dataField04 ...
     author info
url info
to something a tad more informative, such as,
You search for Search Term, with the following results:
     Search Result
          dataField01 label ... dataField01
          dataField02 label ... dataField02
          dataField03 label ... dataField03
          dataField04 label ... dataField04
because nobody's really going to care who uploaded the list or want to link to the data pulled from the list in one of those columnar results tables.

Disjointed Rollovers with different results

Hi,
In Dreamweaver CS4 I'm trying to do a disjointed rollover that swaps one image on mouseover and restores it on mouseout (a simple navigation bar rollover) and swaps a second image onclick and doesn't restore the original (an image in the main content area). Right now both images restore on mouseout:
http://inkllusionist.com/test
I realize I may be going about this the wrong way... any advice? Should I try to do this with something other than the javascript behaviors?
...Later...
Well, after more searching I found the answer in a very nice video on youtube.
http://www.youtube.com/watch?v=hN_MhdmtCsM&feature=colike
It explains that you set the simple rollover using the behavior "Set Nav Bar Image" and you do the main image swap using the behavior Swap Image and set that to <A> onClick and uncheck Restore images on Mouseout. It's so simple when ypu know how. lol.

> Is it possible for me to create a disjointed rollover so
that when I mouse
> over
> one image it will make another image switch to a .SWF
file?
Not in any easy way that I can think of.
> How can I make an image switch to something else when I
mouse over a
> totally
> different image?
Behaviors: swap image
-Darrel

Group Policy not Applying

Currently we are running ZfD 7 and Netware 6.5 and have recently upgraded all our workstations to Windows XP Service Pack 2. Our tree structure consists of an OU for each school level, elementary, middle, and high, and an OU for each school in that respective level. Example:
Elementary
West Main
South Main
Middle
Brown Middle
The current contents in each School OU have users, groups, policies, ect. Previously policy was applied by a workstation policy package that distributed all policies: user, machine, and security which were associated with the School OU. Now we split the policy into workstation packages and a user packages. The goal was to have the workstation apply the machine and security policy and the user policy to apply user settings and create dynamic the local user account.
The workstation policy remains persistent on the workstation while the user policy creates a local user (non-volatile) and applies the user policy from a server path depending on group membership. We have four different user policy packages: Student, Teacher, Specialist and Technology. Each with there own group policy user configuration. Everyone in our Tree has the appropriate permissions to access the policies. We configure the user policy package as follows:
Policies  Windows XP
Enabled Dynamic Local User
Enabled Windows Group Policy
Workstation Manager
Network Location
\\serverpath
Checked User Configuration
Policy Schedule
User Desktop is active
Advanced Schedule
Impersonation
Interactive User
Associations
Groups (Teachers, Students)
I can get the workstation policy to apply with no problem. The problem comes when a users logs on. It doesnt matter if a new user is being created or if they are simply just switching users. User group policy doesnt apply randomly. The strange thing is it does copy down to the machine. If I connect to the admin share on a newly imaged workstation (with no policy applied) and open c:\windows\system32\ you see the creation of GroupPolicy.Usercache Folder and it copies to the GroupPolicy Folder which is were it applies policy from. Also you can see policy dynamically changing if different users logs on. The Registry.pol updates in the c:\windows\system32\ GroupPolicy.Usercache\User folder and c:\windows\system32\ GroupPolicy \User Sometimes group policy applies and sometimes it does not. When a user logs on you see the policy that was copied down apply. For example the run option is taken away from the start menu. During the log on process this remains in effect but when the process completes its almost like policy is take away. When this occurs I can run WMSCHED.Exe and reapply the user policy and it will apply sometimes. I tried applying group policy through both groups and organizational units. Both with the same results. I was wondering if anyone has had issues with applying group policy with ZEN or if I am doing this incorrectly. Any help would be much appreciated. Thanks.

rscurr,
It appears that in the past few days you have not received a response to your
posting. That concerns us, and has triggered this automated reply.
Has your problem been resolved? If not, you might try one of the following options:
- Visit http://support.novell.com and search the knowledgebase and/or check all
the other self support options and support programs available.
- You could also try posting your message again. Make sure it is posted in the
correct newsgroup. (http://forums.novell.com)
Be sure to read the forum FAQ about what to expect in the way of responses:
http://forums.novell.com/faq.php
If this is a reply to a duplicate posting, please ignore and accept our apologies
and rest assured we will issue a stern reprimand to our posting bot.
Good luck!
Your Novell Product Support Forums Team
http://support.novell.com/forums/

Group Policy with different Results

Similar Messages

Maybe you are looking for