IE 10 GPO Template
Hello all,
As I understand it, the Internet Explorer Maintenance Package with IE 10 is being discontinued. The issue I am running into is I downloaded the ADM in order to load the latest IE group policy template but I still have the IE 8 ADM loaded up as IE 8
is still in production in this environment with settings that are still in use under the maintenance window so I cannot just go ahead and replace that older template at the current time. I just want to test drive the new one. Is this possible to have both
of these ADMs loaded up without any conflicts? Or should I just load up the IE 10 ADM once we have migrated everything over to IE 10? How is it possible to just test the IE 10 template without disrupting current operations?
you can't have both templates available on a single machine at the same time, since they are named inetres.adm (or inetres.admx)
what you could do, is to setup a workstation, install RSAT on it, and have a differing version of the templates on there.
then you login to that workstation with your domain GP editing account, and play around with some test GPOs.
Note that the inetres is automatically updated by the installation of IE, so if the workstation gets IE10 on it (or IE11), that is the version of inetres you will be using there.
In case you have implemented a group policy central store in your domain, this won't work (because the point of a central store is that templates are always retrieved from the central store i.e. your DC's), but, you can override that central store behaviour
on a machine (so that it ignores the central store and instead reads templates from the machine local store)
Don
(Please take a moment to "Vote as Helpful" and/or "Mark as Answer", where applicable.
This helps the community, keeps the forums tidy, and recognises useful contributions. Thanks!)
Similar Messages
-
ADM GPO templates for Reader XI are incomplete and misleading
We've just migrated to Reader XI, and I was hoping to switch configuring the registry settings to the new official Adobe Reader XI ADM templates. However, they are very incomplete. For example, the following registry setting are missing:
HKLM\SOFTWARE\Policies\Adobe\Acrobat Reader\11.0\FeatureLockdown
iProtectedView
bUSEWhitelistConfigFile
bEnhancedSecurityInBrowser
bEnhancedSecurityStandalone
bDisableTrustedSites
bDisableTrustedFolders
bDisableOSTrustedSites
Also, the description of many settings are misleading. A good example is "Disable automatic updates" which reads:
Disables automatic updates and removes associated user interface items.
0: Disable and lock the Updater.
1: No effect.
Setting bUpdater disables the user interface items Preferences > Updater and Help > Check for updates are disabled.
This seems logical, however to get a "0" to be set you have to set this GPO to Disabled. So you "Disable" the "Disable automatic updates" GPO. That feels like you are enabling it. Very confusing.
I welcome the release of the official ADM templates, but it looks like a rush job and that benefits noone.Hi,
Thanks for your feedback again. I am not sure if you have noticed that the article you provided has been updated.
As the updated article states in the Addendum section:
Based on customer feedback, we have decided to wait thirty days before blocking any out-of-date ActiveX controls. Customers can use the new logging feature to assess ActiveX controls in their environment and deploy Group Policies to enforce blocking,
turn off blocking ActiveX controls for specific domains, or turn off the feature entirely depending on their needs. The feature and related Group Policies will still be available on August 12, but no out-of-date ActiveX controls will be blocked until Tuesday,
September 9th. Microsoft will continue to create a more secure browser, and we encourage all customers to upgrade and stay up-to-date with the latest Internet Explorer and updates.
Best regards,
Frank Shen -
Gpo templates what policies are using them
hello
how can I tell what templates my existing gpo are using?
I need to migrate my current policies to another domain do I need to worry about the templates?> how can I tell what templates my existing gpo are using ?
You cannot. At least there's no easy way. You would need to analyze
registry.pol for all keys and values it defines, and then you would need
to analyze all templates and identify those that have these keys and
values... Great fun :)
Martin
Mal ein
GUTES Buch über GPOs lesen?
NO THEY ARE NOT EVIL, if you know what you are doing:
Good or bad GPOs?
And if IT bothers me - coke bottle design refreshment :)) -
GPO Template to secure Computers joined to a 2012 Domain
Hi,
We are looking to implement a "Quarenteen OU" for new machines that join our domain. I've found out how to change the behavior of assigning machines to a different OU than the Computers OU using the redircmp command. Does anyone have
a good "template" resource of default security polices to assign a new Server/destkop machine that gets placed into such a quarenteen OU to ensure its secure before moving it to a different/seperate OU? I'm currently looking for knowledge base
articles that cover this. Any help would be greatly appreciated.
Thanks,
Kevin C.Hi Kevin,
Based on description, we can follow the suggestion provided by Martin to assign security policies to these machines.
SCM provides ready-to-deploy policies and DCM configuration packs based on Microsoft Security Guide recommendations and industry best practices, allowing
us to easily manage configuration drift, and address compliance requirements for Windows operating systems and Microsoft applications.
Regarding SCM, the following articles can be referred to for more information.
Microsoft Security Compliance Manager (SCM) - Getting Started
http://social.technet.microsoft.com/wiki/contents/articles/1866.microsoft-security-compliance-manager-scm-getting-started.aspx
Microsoft Security Compliance Manager
http://technet.microsoft.com/en-us/library/cc677002.aspx
Security Compliance Manager (SCM)
http://technet.microsoft.com/en-in/solutionaccelerators/cc835245.aspx
Best regards,
Frank Shen -
Need GPO template to keep Bing Bar and Bing Desktop out of Microsoft Update
Due to geographical distribution we aren't (yet) able to leverage WSUS, and I'm constantly having to scrape Bing trash off client machines (along with Ask Spywarebar). I've figured out a registry hack that disables Ask from piggybacking on Java updates
and am working on keeping McAfee from joining with Flash or Reader updates. So now I need a good solid way to prevent Bing from pretending it's something useful and wasting resources.
Microsoft, you write this stuff. Give us a proper way to manage it. We need a solid reproducible way to keep all current and future versions of Bing junk from appearing in Microsoft Update. It's not an "Update" to any installed software,
it's foistware, and by doing this you're violating any trust IT people might have had in your promise to clean up your act.Hi Mike,
Sorry, as far as I know, there is no such group policy template.
Best regards,
Frank Shen -
Office 2013 macro warnings GPO
How do we enable all macros to run that are stored from our LAN?
At the moment we receive warning below the ribbon in excel and word advising that some content maybe dangerous and to enable macros. Also we receive a Security warning after enabling macros; Do you want to make this file a trusted documents? All files stored
on local drives and network shares should automatically be trusted so users are not faced with these prompts.
Please advise how i can suppress this using GPO?
regardsusing office GPO templates, you need to change settings in Word and Excel - its under Word, Word Options, Security, Trust Center, Trusted locations. Excel path is similar. You can set trusted locations using gpo too.
The policy keys are at:
HKEY_CURRENT_USER\Software\Policies\Microsoft\Office\15.0\word\security\trusted locations
HKEY_CURRENT_USER\Software\Policies\Microsoft\Office\15.0\excel\security\trusted locations
Dword: allownetworklocations
Vlaue: 1 (allow)
Diane Poremsky [MVP - Outlook]
Outlook & Exchange Solutions Center
Outlook Tips
Subscribe to Exchange Messaging Outlook weekly newsletter -
Allow changing of Outlook anywhere options after applying GPO
Policy
Setting
Configure Outlook Anywhere user interface options
Enabled
All config UI enabled
I have used the outlook2010 GPO template to configure outlook anywhere settings. However after enabling these options, the user can no longer change the outlook anywhere settings (all greyed out). So I enabled the above GPO in outlook 2010 ADMX template.
"This policy setting allows you to determine whether users can view and change user interface (UI) options for Outlook Anywhere.If you enable this policy setting, users can view and change UI options for Outlook Anywhere.If you disable or do not configure
this policy setting, users will be able to use the Outlook Anywhere feature, but they will not be able to view or change UI options for it."
However after performing gpupdate, it has no effect, users still cannot change any of the outlook anywhere settings. Here are the download locations for the admx templates if anyone else would like to test and confirm this issue.
http://www.microsoft.com/en-us/download/details.aspx?id=18968
http://support.microsoft.com/kb/2426686
Anand_NHi,
Please check if the value of the following registry key has been set correctly by Group Policy:
HKEY_CURRENT_USER\Software\Policies\Microsoft\office\14.0\outlook\rpc
Value name: EnableRPCTunnelingUI
Type: REG_DWORD
To enable all configuration the value should be: 1
Sincerely
Rex Zhang
Rex Zhang
TechNet Community Support -
EMET 4.1 (Update 1) - GPO Settings
We have successfully deployed EMET 4.1 Update 1 via SCCM and now I am controlling EMET settings with GPO using the EMET GPO templates from the Deployment folder. However, after group policy is set, you have to use the command "emet_conf.exe --refresh"
to update EMET mitigation settings on each machine. Until and unless you do this on each machine, the processes aren't protected. Also, every time one makes any changes to the GPO setting, "emet_conf.exe --refresh" command has to be run on
100's of machines in our environment. Is there any other way for it to take effect without touching a machine besides having a scheduled task etc. as mentioned in the guide? You'd imagine once you set it in group policy, doing "gpupdate /force"
or during the next time when group policy is applied, the settings should take effect.....else what would be the point of using group policy to control these settings?? Any input is greatly appreciated.In the same GPO, you can create a shutdown script that runs emet_conf.exe --refresh. That way when the system is rebooted it gets the group policy applied that is already pushed out. I'm not aware of the reason for this either.
-
How to disable SSL V3 via GPO on a win2008R2 server
Hi everyone
because of this new Poodle threat involving SSL v3, I need to disable SLL v3 on our network, via Group policy.
There's plenty of post on how to do this ie
https://technet.microsoft.com/library/security/3009008.aspx
But the problem is, the option needed, isnt available!
II need to find the option Turn off Encryption Support .
I can do this using a local GPO, but as soon as I jump on the DC, and go to the same settings, its not there.
This is a Win2008 R2 server based network, running IE10 and IE11.
I've tried adding the GPO templates for both IE10 and IE11, but there appears to be no difference, the option is still missing,
anyone got any ideas?
thanks
G.I updated the admx and adml files in my central store to IE 11 ones and it added the option. Hope that helps. http://www.microsoft.com/en-us/download/details.aspx?id=40905
-
GPO for Automatically trust sites for Windows OS security zones
Hi Team,
Need your urgent help
Could you confirm which GPO we can use for Automatically trust sites for Windows OS security zones
I have checked Adobe Reader GPO templates but its not exists?
Pls assistHi,
We need to import these settings before we modify them.
To import security zones and privacy settings from our computer using IEM:
Click
Import the current security zones and privacy settings
To import content ratings from our computer:
Click
Import the current Content Ratings settings
Regarding how to configure Security Zones and Content Ratings, the following article can be referred to for more information.
Configure Security Zones and Content Ratings
http://technet.microsoft.com/en-us/library/cc772410.aspx
Best regards,
Frank Shen -
EMET v5.1 ADMX Group Policy Template Issue - Default protection settings can't be disabled
I am configuring EMET v5.1 (from 11/18/14) settings via GPO using the custom EMET admx template provided by Microsoft. I am able to enable all the EMET settings via GPMC and disable most of them, but I am not able to disable these 3 EMET setting via
GPMC in a GPO:
Default Protections for Internet Explorer
Default Protections for Popular Software
Default Protections for Recommended Software
When configuring any of these 3 EMET GPO settings to disabled and pressing apply or OK, GPMC keeps it at Not Configured, it does not change to disabled as it normally would. I have never before seen this in GPMC, where you try to disable a setting and it
doesn't change to disabled.
Unless this is somehow intended by Microsoft for these 3 EMET GPO settings, I think that this is a glitch/bug in the EMET GPO Template or the way that it works in GPMC.
Looking for some Guidance from a MS Rep to replicate this issue or anyone else who can confirm if they also see this issue. I have tested on multiple Windows 8.1 Enterprise x64 Update 2 Workstations, with GPMC loaded and the latest EMET ADMX file loaded
from the EMET client on 11/18/14. I have tested this in 2 separate domains, Note that we do not have Central ADMX Stores in either domain.I had a similar requirement as yours and found that we were able to get around in a simpler method then what was listed here. What we did was set GPO Preferences Registry changes which would then override the previously set EMET ADMX settings set from
another global GPO.
To be specific we had some thirds applications which were add-ons to Microsoft Excel, and the EMET was preventing the application from talking to Excel. So for the users that use this application we have a GPO which Does the following in the Preferences
section:
Action: Replace
HIVE: HKEY_LOCAL_MACHINE
Key path: SOFTWARE\Policies\Microsoft\EMET\Defaults
Value name: Excel
Value type: REG_SZ
Value data: *\OFFICE1*\EXCEL.EXE -Caller -MandatoryASLR -
Adobe Reader Browser Plugin - How to disable right click print
Here is some background to my question
I'm using Adobe Reader 9.2 and have configured to use the Adobe Reader Active X browser plugin.
which has the effect of launching pdf's within the IE browser rather than launching the full client. This is all working fine
I have a requirement that I need to lockdown certain menu items (for the purpose of this example, lets say "SaveAs" and "Print") and toolbars which I have also done successfully using folder level javascripts. For example I have created a HideMenuItems.js file and placed this in the "C:\Program Files\Adobe\Reader 9.0\Reader\Javascripts", here is a snippet of the file which relate to hiding / removing the SaveAs and Print items
app.hideToolbarButton("Print");
app.hideToolbarButton("SaveFileAs");
app.hideToolbarButton("Save");
These work fine and hide the Print and Save toolbar buttons from the Adobe Reader Browser plugin menu.
As an aside If I wanted to hide the same icons from the full adobe reader client I could use app.hideMenuItem("Print");
So this all works fine and I'm happy so far. Now, with these settings in place I launch the pdf within the browser, although save and print buttons are now hidden and I cannot add them back, I can still RightClick anywhere in the pdf and get the context menu, from there I can select print.
What I'm after is a way to either
(i) Selectively remove menu items from the right click context menu, and therefore remove the print option e.g something like app.[hideRightClickMenuItem]("Print") would be great but I dont know what that method is called.
or
(ii) Disable the RightClick context menu altogether for Adobe Reader Browser Plugin
Not bothered what the solution is whether its a reg hack - HKCU / HKLM / or javascript line I can add to my HideMenuItems.js, But basically I want to lock down the ability for the users to select print button from all sources including "CTRL + P",
Or if this is not possible let them hit CTRL P or right click print, but then not display the Adobe Print Dialog.
Basically the printing of the documents in handled by our web app sending a silent print to the adobe application which again works fine, I just need to prevent the users from being able to initiate a print from within the pdf when displaying the pdf in a browser.
Having searched around there is an API called AVAppRegisterForPageViewRightClicks which is supposed to prevent right clicks, But I dont know how to use this, or whether it can be used within my HideMenuItems.js file, tried many different syntaxes but to no avail.
Does anyone have any experience in this? Adobe - do you have any suggestions ?
Cheers
WillHi thanks for your response, yes it seems this API is availalbe but there are no examples of how to use it. You mentioned its available in Adobe reader and Adobe Acrobat plugins. Well I'm using the Adobe Reader Active X Browser Plugin so how would I use this API to restrict the Browser plugin.l
I am not a developer writing my own custom plugins, I simply want to use the out of the box adobe reader product, specifically the Active X browser plugin, but I need to be able to customise and restrict what the user is able to do.
The reason I need to do this is that we publish IE on a citrix server which users access to launch this highly secure web based application. The sensitive data that they view is in the forms of PDFs which are viewed by the Adobe reader browser plugin within the browser. The web application controls who can save, export, print etc, so I need to be able to lock down the Adobe Reader Active X browser plugin so that the user cannot initiate save, and print functionality from within the viewed pdf. I've done this successfully by restricting the menu and toolbar items but it is still possible to right click on the viewed pdf and click select print from the context menu. This would cause us a big security flaw, which would result in users that are only supposed to view being able to click print.
I published a desktop (locked down) and published IE (locked down) all successfully with GPOs so the users cannot do anything they are not supposed to do, however Adobe reader it seems cannot be easily locked down and this is a problem as I might have to start looking at viable alterantives. Surely a simple requirement as this could be acheieved with relative ease.
In an ideal world there would be an available GPO template (.ADM file), which could be used to centrally manage these type of settings. I dont even mind writing an ADM myself, I've written many before, but for example what I need is the appropriate registry entries and how they are used to lock down / restrict certain functions so that I can write such an .ADM file.
I dont mind how I achieve this, I just need a way to do it. So if using the API AVAppRegisterForPageViewRightClicks would achieve this, can someone please tell me how I can implement something that would use this API to restrict the right Click Print options for example.
The sort of answer I;m looking for would be
Create a file, paste in this code, place the file is this location xxxxx, this is a per machine fix so will affect all users
or
Edit the regstry and make this HKCU change xxxxx - This is obviously a per user fix so use normal methods to get this into every users profile.
or
Open up the file in this location xxxxxx and add AVAppRegisterForPageViewRightClicks = AlwaysDisable (or whatever the syntax is)
Thanks for you help
Cheers
Will -
Server 2012 R2 + WSUS = not updating
Hi all,
We've (finally!) started to deploy Server 2012 R2 machines, and one of the things I'm having problems with is WSUS. I've patched WSUS (which is running on 2008R2) so that it's aware of Windows 8/2012R2 machines, and servers are querying/reporting against
the server correctly, and pick up their updates fine.
The problem comes from trying to install them. I've updated the GPO templates so that in it includes the 2012R2 options that force an immediate reboot, rather than having to wait for a 'maintenance window'. I've also disabled the maintenance windows using
psexec + schtasks.
I can see, via the registry, that the 2012R2 machine is picking up the correct settings from the GPO, so that's not the problem. I think I've got everything set correctly, according to the all the articles/KBs I've read, but yet, the server doesn't reboot
when it should do.
I left the machine set to reboot at 1000 this morning, when I got back from the Easter break (thinking that, maybe, for some odd reason, it just needed some time for WSUS to sync, or whatever), but even after 6 days of being on and idle, it didn't do anything.
My GPO is as follows (relevant entries):
Configure Automatic Updates: 4, install during automatic maintenance is unticked (time and date altered for testing).
I had been testing each hour, but I've since left it over the long Easter weekend, set to install just after we reopen, and it's not done anything.
Always automatically restart at the scheduled time: enabled - wait 15 minutes.
Delay Restart for scheduled installations: enabled - 1 minute.
Any advice very gratefully received!
Thanks,
JoeHi Michael,
Yes, the output from gpresult -r was one of the first things I checked. I've confirmed the settings are being applied from the GPO by checking the registry too.
You say a snippet from one of the machines that rebooted: none of the 2012 test machines have reboot themselves yet. They've just picked up updates, but not rebooted. In the windowsupdate.log file, the only entries are checking for updates. Keeping in mind
it's set to reboot at 1000, the update log reads as follows (sorry for verbosity!)
2015-04-08 09:34:04:090
724 7c0
AU ## START ## AU: Search for updates
2015-04-08 09:34:04:090
724 7c0
AU #########
2015-04-08 09:34:04:090
724 7c0
SLS Retrieving SLS response from server using ETAG "4V8nqvoeoxgpu+6kKNNNGpLr4BCvPTmaz82CIDm5o5g=_1440"...
2015-04-08 09:34:04:090
724 7c0
SLS Making request with URL HTTPS://sls.update.microsoft.com/SLS/{9482F4B4-E343-43B6-B170-9A65BC822C77}/x64/6.3.9600.0/0?CH=942&L=en-US&P=&PT=0x8&WUA=7.9.9600.17415
2015-04-08 09:34:05:512
724 7c0
EP Got 9482F4B4-E343-43B6-B170-9A65BC822C77 redir SecondaryServiceAuth URL: "117cab2d-82b1-4b5a-a08c-4d62dbee7782"
2015-04-08 09:34:05:512
724 7c0
SLS FATAL: SLS:CSLSRequest::RetrieveAdditionalAttributesIfRequired: CoCreateInstance failed with 0x80040154.
2015-04-08 09:34:05:512
724 7c0
Agent WARNING: Failed to retrieve SLS response data for service 117cab2d-82b1-4b5a-a08c-4d62dbee7782, error = 0x80040154
2015-04-08 09:34:05:512
724 7c0
Agent FATAL: Caller Service Recovery failed to opt in to service 117cab2d-82b1-4b5a-a08c-4d62dbee7782, hr=0X80040154
2015-04-08 09:34:05:512
724 7c0
IdleTmr WU operation (CSearchCall::Init ID 155) started; operation # 56743; does use network; is at background priority
2015-04-08 09:34:05:512
724 7c0
Agent *** START *** Queueing Finding updates [CallerId = AutomaticUpdates Id = 155]
2015-04-08 09:34:05:512
724 7c0
AU <<## SUBMITTED ## AU: Search for updates [CallId = {E2B60763-5B4C-4FB1-A134-086EDD0CAA84} ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}]
2015-04-08 09:34:05:512
724 300
Agent *** END *** Queueing Finding updates [CallerId = AutomaticUpdates Id = 155]
2015-04-08 09:34:05:512
724 300
Agent *************
2015-04-08 09:34:05:512
724 300
Agent ** START ** Agent: Finding updates [CallerId = AutomaticUpdates Id = 155]
2015-04-08 09:34:05:512
724 300
Agent *********
2015-04-08 09:34:05:512
724 300
Agent * Online = Yes; Ignore download priority = No
2015-04-08 09:34:05:512
724 300
Agent * Criteria = "IsInstalled=0 and DeploymentAction='Installation' or IsPresent=1 and DeploymentAction='Uninstallation' or IsInstalled=1 and DeploymentAction='Installation' and RebootRequired=1 or IsInstalled=0
and DeploymentAction='Uninstallation' and RebootRequired=1"
2015-04-08 09:34:05:512
724 300
Agent * ServiceID = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7} Managed
2015-04-08 09:34:05:512
724 300
Agent * Search Scope = {Machine & All Users}
2015-04-08 09:34:05:512
724 300
Agent * Caller SID for Applicability: S-1-5-18
2015-04-08 09:34:05:512
724 300
Agent * RegisterService is set
2015-04-08 09:34:05:512
724 300
SLS Retrieving SLS response from server using ETAG "4V8nqvoeoxgpu+6kKNNNGpLr4BCvPTmaz82CIDm5o5g=_1440"...
2015-04-08 09:34:05:512
724 300
SLS Making request with URL HTTPS://sls.update.microsoft.com/SLS/{9482F4B4-E343-43B6-B170-9A65BC822C77}/x64/6.3.9600.0/0?CH=942&L=en-US&P=&PT=0x8&WUA=7.9.9600.17415
2015-04-08 09:34:05:606
724 300
Agent WARNING: failed to access the auth cab, fatal error 0x80070003
2015-04-08 09:34:05:606
724 300
Agent WARNING: Invalid service in the backup data store; cleaning up
2015-04-08 09:34:05:606
724 300
Agent WARNING: Failed to add and register service 117cab2d-82b1-4b5a-a08c-4d62dbee7782 to the data store 0x80240031
2015-04-08 09:34:05:606
724 300
Agent WARNING: Service Recovery: Attempting to add pending registration for service 117cab2d-82b1-4b5a-a08c-4d62dbee7782 to the data store
2015-04-08 09:34:05:606
724 300
SLS Retrieving SLS response from server using ETAG "4V8nqvoeoxgpu+6kKNNNGpLr4BCvPTmaz82CIDm5o5g=_1440"...
2015-04-08 09:34:05:606
724 300
SLS Making request with URL HTTPS://sls.update.microsoft.com/SLS/{9482F4B4-E343-43B6-B170-9A65BC822C77}/x64/6.3.9600.0/0?CH=942&L=en-US&P=&PT=0x8&WUA=7.9.9600.17415
2015-04-08 09:34:05:684
724 300
EP Got 9482F4B4-E343-43B6-B170-9A65BC822C77 redir SecondaryServiceAuth URL: "117cab2d-82b1-4b5a-a08c-4d62dbee7782"
2015-04-08 09:34:05:684
724 300
SLS FATAL: SLS:CSLSRequest::RetrieveAdditionalAttributesIfRequired: CoCreateInstance failed with 0x80040154.
2015-04-08 09:34:05:684
724 300
Agent WARNING: Failed to retrieve SLS response data for service 117cab2d-82b1-4b5a-a08c-4d62dbee7782, error = 0x80040154
2015-04-08 09:34:05:684
724 300
Agent FATAL: Caller Service Recovery failed to opt in to service 117cab2d-82b1-4b5a-a08c-4d62dbee7782, hr=0X80040154
2015-04-08 09:34:05:684
724 300
EP Got WSUS Client/Server URL: "http://myserver/ClientWebService/client.asmx"
2015-04-08 09:34:05:700
724 300
Setup Checking for agent SelfUpdate
2015-04-08 09:34:05:700
724 300
Setup Client version: Core: 7.9.9600.17415 Aux: 7.9.9600.17415
2015-04-08 09:34:05:700
724 300
EP Got WSUS SelfUpdate URL: "http://myserver/selfupdate"
2015-04-08 09:34:05:700
724 300
Misc Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\wuident.cab with dwProvFlags 0x00000080:
2015-04-08 09:34:05:715
724 300
Misc Microsoft signed: NA
2015-04-08 09:34:05:715
724 300
Misc Infrastructure signed: Yes
2015-04-08 09:34:05:715
724 300
Misc WARNING: Cab does not contain correct inner CAB file.
2015-04-08 09:34:05:715
724 300
Misc Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\wuident.cab with dwProvFlags 0x00000080:
2015-04-08 09:34:05:715
724 300
Misc Microsoft signed: NA
2015-04-08 09:34:05:715
724 300
Misc Infrastructure signed: Yes
2015-04-08 09:34:05:715
724 300
Setup Skipping SelfUpdate check based on the /SKIP directive in wuident
2015-04-08 09:34:05:715
724 300
Setup SelfUpdate check completed. SelfUpdate is NOT required.
2015-04-08 09:34:05:997
724 300
PT +++++++++++ PT: Synchronizing server updates +++++++++++
2015-04-08 09:34:05:997
724 300
PT + ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL = http://myserver/ClientWebService/client.asmx
2015-04-08 09:34:05:997
724 300
PT WARNING: Cached cookie has expired or new PID is available
2015-04-08 09:34:05:997
724 300
EP Got WSUS SimpleTargeting URL: "http://myserver"
2015-04-08 09:34:05:997
724 300
IdleTmr WU operation (CAuthorizationCookieWrapper::InitializeSimpleTargetingCookie) started; operation # 56744; does use network; is at background priority
2015-04-08 09:34:05:997
724 300
PT Initializing simple targeting cookie, clientId = dd9980da-b1c3-45f0-9106-a5ed324f5861, target group = , DNS name = 2012-wsus-test
2015-04-08 09:34:05:997
724 300
PT Server URL = http://myserver/SimpleAuthWebService/SimpleAuth.asmx
2015-04-08 09:34:05:997
724 300
IdleTmr WU operation (CAuthorizationCookieWrapper::InitializeSimpleTargetingCookie, operation # 56744) stopped; does use network; is at background priority
2015-04-08 09:34:05:997
724 300
IdleTmr WU operation (CAgentProtocolTalker::GetCookie_WithRecovery) started; operation # 56745; does use network; is at background priority
2015-04-08 09:34:06:012
724 300
IdleTmr WU operation (CAgentProtocolTalker::GetCookie_WithRecovery, operation # 56745) stopped; does use network; is at background priority
2015-04-08 09:34:06:090
724 300
Agent Reading cached app categories using lifetime 604800 seconds
2015-04-08 09:34:06:090
724 300
Agent Read 0 cached app categories
2015-04-08 09:34:06:090
724 300
Agent SyncUpdates adding 0 visited app categories
2015-04-08 09:34:08:434
724 300
IdleTmr WU operation (CAgentProtocolTalker::SyncUpdates_WithRecover) started; operation # 56746; does use network; is at background priority
2015-04-08 09:34:08:434
724 300
IdleTmr WU operation (CAgentProtocolTalker::SyncUpdates_WithRecover, operation # 56746) stopped; does use network; is at background priority
2015-04-08 09:34:08:434
724 300
Agent Reading cached app categories using lifetime 604800 seconds
2015-04-08 09:34:08:434
724 300
Agent Read 0 cached app categories
2015-04-08 09:34:08:434
724 300
Agent SyncUpdates adding 0 visited app categories
2015-04-08 09:34:08:450
724 300
IdleTmr WU operation (CAgentProtocolTalker::SyncUpdates_WithRecover) started; operation # 56747; does use network; is at background priority
2015-04-08 09:34:08:450
724 300
IdleTmr WU operation (CAgentProtocolTalker::SyncUpdates_WithRecover, operation # 56747) stopped; does use network; is at background priority
2015-04-08 09:34:08:450
724 300
PT + SyncUpdates round trips: 2
2015-04-08 09:34:08:809
724 300
Agent WARNING: Failed to evaluate Installed rule, updateId = {{A4ECF96E-FE76-4933-B1A9-FAA712DC2A3B}.200}, hr = 80070057
2015-04-08 09:34:08:809
724 300
Agent WARNING: Failed to evaluate Installable rule, updateId = {{A4ECF96E-FE76-4933-B1A9-FAA712DC2A3B}.200}, hr = 80070057
2015-04-08 09:34:08:825
724 300
Agent WARNING: Failed to evaluate Installed rule, updateId = {{9941EB5F-4953-446D-99A2-C5989C596283}.200}, hr = 80070057
2015-04-08 09:34:08:825
724 300
Agent WARNING: Failed to evaluate Installable rule, updateId = {{9941EB5F-4953-446D-99A2-C5989C596283}.200}, hr = 80070057
2015-04-08 09:34:09:934
724 300
Agent * Added update {15D2ED04-1EB8-4E57-9E87-04C53FF227A0}.203 to search result
<snip>
<snip>
2015-04-08 09:34:09:934
724 300
Agent * Added update {2DB7BC39-FF38-4849-B28F-4C8072C48F91}.200 to search result
2015-04-08 09:34:09:934
724 300
Agent * Found 30 updates and 71 categories in search; evaluated appl. rules of 472 out of 831 deployed entities
2015-04-08 09:34:09:950
724 300
Agent Reporting status event with 7 installable, 12 installed, 0 installed pending, 0 failed and 30 downloaded updates
2015-04-08 09:34:09:950
724 300
Agent *********
2015-04-08 09:34:09:950
724 300
Agent ** END ** Agent: Finding updates [CallerId = AutomaticUpdates Id = 155]
2015-04-08 09:34:09:950
724 300
Agent *************
2015-04-08 09:34:09:950
724 300
IdleTmr WU operation (CSearchCall::Init ID 155, operation # 56743) stopped; does use network; is at background priority
2015-04-08 09:34:09:950
724 984
AU >>## RESUMED ## AU: Search for updates [CallId = {E2B60763-5B4C-4FB1-A134-086EDD0CAA84} ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}]
2015-04-08 09:34:09:950
724 984
AU # 30 updates detected
2015-04-08 09:34:09:950
724 984
AU #########
2015-04-08 09:34:09:950
724 984
AU ## END ## AU: Search for updates [CallId = {E2B60763-5B4C-4FB1-A134-086EDD0CAA84} ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}]
2015-04-08 09:34:09:950
724 984
AU #############
2015-04-08 09:34:09:950
724 984
AU All AU searches complete.
2015-04-08 09:34:09:950
724 984
AU AU setting next detection timeout to 2015-04-08 09:31:24
2015-04-08 09:34:09:950
724 984
AU Adding timer:
2015-04-08 09:34:09:950
724 984
AU Timer: 31DA7559-FE27-4810-8FF6-987195B1FD98, Expires 2015-04-08 09:31:24, not idle-only, not network-only
2015-04-08 09:34:09:950
724 b74
Report REPORT EVENT: {12180EA2-ECBA-4B75-8E2D-AA285CAFD9D3}
2015-04-08 09:34:09:934+0100 1
147 [AGENT_DETECTION_FINISHED] 101
{00000000-0000-0000-0000-000000000000}
0 0 AutomaticUpdates
Success Software Synchronization
Windows Update Client successfully detected 30 updates.
2015-04-08 09:34:09:950
724 b74
Report REPORT EVENT: {430750CB-173C-4BA1-97EF-97A9512C15E5}
2015-04-08 09:34:09:950+0100 1
156 [AGENT_STATUS_30] 101
{00000000-0000-0000-0000-000000000000}
0 0 AutomaticUpdates
Success Pre-Deployment Check
Reporting client status.
2015-04-08 09:34:09:965
724 b74
Report WARNING: CSerializationHelper:: InitSerialize failed : 0x80070002
2015-04-08 09:34:09:965
724 984
AU WARNING: Failed to get Network Cost info from NLM, assuming network is NOT metered, error = 0x80240037
2015-04-08 09:34:09:965
724 984
AU WARNING: Failed to get Network Cost info from NLM, assuming network is NOT metered, error = 0x80240037
2015-04-08 09:34:09:965
724 b74
Report WARNING: CSerializationHelper:: InitSerialize failed : 0x80070002
2015-04-08 09:34:10:044
724 b74
Report CWERReporter finished handling 10 events. (00000000)
2015-04-08 09:34:10:044
724 b74
Report CWERReporter finished handling 10 events. (00000000)
2015-04-08 09:34:10:044
724 b74
Report CWERReporter finished handling 10 events. (00000000)
2015-04-08 09:34:14:950
724 b74
Report CWERReporter finished handling 2 events. (00000000)
2015-04-08 09:35:34:374
724 7c0
AU AU received policy change subscription event
2015-04-08 09:48:57:053
724 b74
EP Got WSUS Client/Server URL: "http://myserver/ClientWebService/client.asmx"
2015-04-08 09:48:57:115
724 b74
EP Got WSUS Reporting URL: "http://myserver/ReportingWebService/ReportingWebService.asmx"
2015-04-08 09:48:57:115
724 b74
Report OpenReportingWebServiceConnection, reporting URL = http://myserver/ReportingWebService/ReportingWebService.asmx
2015-04-08 09:48:57:115
724 b74
IdleTmr WU operation (CLegacyEventUploader::HandleEvents) started; operation # 57095; does use network; is at background priority
2015-04-08 09:48:57:115
724 b74
Report Uploading 2 events using cached cookie.
2015-04-08 09:48:58:115
724 b74
Report Reporter successfully uploaded 2 events.
2015-04-08 09:48:58:115
724 b74
IdleTmr WU operation (CLegacyEventUploader::HandleEvents, operation # 57095) stopped; does use network; is at background priority
2015-04-08 10:31:25:046
724 7c0
AU #############
2015-04-08 10:31:25:046
724 7c0
AU ## START ## AU: Search for updates
2015-04-08 10:31:25:046
724 7c0
AU #########
2015-04-08 10:31:25:046
724 7c0
SLS Retrieving SLS response from server using ETAG "4V8nqvoeoxgpu+6kKNNNGpLr4BCvPTmaz82CIDm5o5g=_1440"...
2015-04-08 10:31:25:046
724 7c0
SLS Making request with URL HTTPS://sls.update.microsoft.com/SLS/{9482F4B4-E343-43B6-B170-9A65BC822C77}/x64/6.3.9600.0/0?CH=942&L=en-US&P=&PT=0x8&WUA=7.9.9600.17415
2015-04-08 10:31:25:499
724 7c0
EP Got 9482F4B4-E343-43B6-B170-9A65BC822C77 redir SecondaryServiceAuth URL: "117cab2d-82b1-4b5a-a08c-4d62dbee7782" -
Sometime last week Instant Search stopped working on a Terminal Server we have deployed. I don't use Outlook on the server so I didn't notice it myself but users started complaining several days ago. When I checked instant search settings everything was
grayed out. I noticed that the feature for Windows Search was disabled so I enabled that feature rebooted the server and now instant search is looking for email in archive folders and sharepoint lists. Local Mailbox mail however is not being indexed by instant
search. When I check data files it says that there is no file for the local mailbox. I checked and Cached Exchange Mode is disabled so no OST is being created and apparently there is no PST for it either.
Do I need an OST/PST to search the local mailbox?
Also I have added the Office GPO Templates and enabled the GPO for allowing Cached Exchange Mode but that doesn't seem to be helping either. Please help.Have you had any luck with this?
One of our clients has reported that 5 different users, when RDP'd into 3 different RDS Servers, cannot use the Instant Search.
I haven't been able to find anything about this in my online searches.
Like you, the mailboxes aren't even appearing under Instant Search > Search Options. Also, it would appear that there are no locally-hosted .ost/.pst's for any of the users on this server; can the instant search function work on a .pst that's saved
somewhere else on the network? -
Can we disable the 'Do not send a response' option for invitations?
Our organization recently migrated to Outlook \Exchange 2010 from Lotus Notes\Domino R7.0.4. Users are getting frustrated with the many limitations, or hopefully our lack of understanding, related to calendaring in Outlook.
Current Issue:
Employees can select "Do Not Send a Response" to meeting invitations, but still accept the invitations for their personal calendars. This can be very frustrating to the invitee, who is attempting to orchestrate complex meetings, since they do not
get updates for invitees who have accepted the meeting using this option.
It is plausible that all invitees could accept a meeting, but choose not to send a response. The originator of the meeting may than cancel the meeting, thinking, "what's the point, no one accepted it". The originator or an Admin staff should have
the ability to disable the "Do not Send a Response" option or at least have the option to require a response if desired.
Additionally, when invitees do send a response, it would be nice to have an option not to see response in the form of an email, but simply as an update to the Calendar 'Attendees' status, to avoid inbox clutter.
Lotus Notes had these functions at least 10 years ago, so I'm sure we are just overlooking a setting or configuration. Any guidance Microsoft support or readers can provide would be greatly appreciated.Hi,
We can disable that option via GPO.
Please refer to Disable user interface items and shortcut keys in Office 2010:
http://technet.microsoft.com/en-us/library/cc179143(v=office.14).aspx
After adding the Office 2010 GPO templates to the domain, in Group Policy Management go to:
User Configuration / Polices / Administrative Templates / Microsoft Outlook 2010 / Disable Items in User Interface / Custom
Add the following Policy ID's: 19987, 19995 and 19991.
This will disable the three menu items "Do Not Send a Response" below the buttons Accept, Tentative and Decline. When the mouse pointer points to the disabled ("grayed out") menu item a message is shown telling the user that this menu is disabled by the
administrator.
If you are not used to the email response, simply create a rule to move all these responses to a single folder and clean them up periodically:
http://office.microsoft.com/en-in/outlook-help/manage-email-messages-by-using-rules-HA010355682.aspx
Regards.
Melon Chen
TechNet Community Support
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.
Maybe you are looking for
-
Which is better 500gb or 750gb
I am looking into buying a macbook pro and I am wondering if I should get the 500gb or the 750gb?
-
HT4059 Which format does ibooks use?
Which format does ibooks use?
-
Syntax for calling Stored procedures?
Seems straightforward but I just can get the syntax. Here's the procedure defined in SQL CREATE Procedure usp_InsTest @title varchar(150), @length int, @catid int, @date datetime, @filename varchar(50), @typeid int, @desc varchar(2000), @statusid int
-
Can't download the Premier Pro trial from Creative cloud
can't download the Premier Pro trial from Creative cloud
-
Hi forum!, I am editing the marketing planner adapting to the rules of my client. Well, i have added some fields with the EEWB tool, but now i would like to generate a table or do something like a table...my question is: Is that possible? generate a