"Local Policies User Rights Assignment" not applying

I bought Dell Vostro series computer with a Windows 7 Professional 64-bit OEM.
The OS cannot apply the changed User Rights Assignment in Local Policies.
Here is the step to re-produce the problem:
1. Launch "cmd"
2. Type "date 2014-06-20" in the command prompt. (i.e. try to change the date)
3. A error shown "A required privilege is not held by the client."
4. I go to "Control Panel > Administrative Tools > Local Security Policy".
5. I open "Local Policies > User Rights Assignment", and add "Everyone" to "Change the system time" and "Change the time zone"
6. Restart the computer
7. Launch "cmd" and type "date 2014-06-20", the same error message shown. That is, the policy is not applied.
Note: If I launch the cmd as administrator, no error will show.
I am not familiar with Local Security Policy and related and I tried to search online but not thing found (maybe I didn't know how to apply).
I would like to know how to resolve this problem from you. If you need more information like the log in Event Log, please tell me which one you need.
Thanks so much!

Hi,
I tested this issue, after adding everyone to the group you mentioned above, I can successfully change the system time as a standard user. and the format is date 06-20-2014
I suggest you logon as admin, and manually check the policy, see whether it has been updated.
Yolanda Zhu
TechNet Community Support

Similar Messages

  • Group Policy - User Rights Assignments not taking effect on workstation`

    Novell 5.1 SP7. ZenWorks 3.2 sp3. Windows XP Pro workstations.
    In Group Policy, (Computer Configuration/Windows Settings/Security
    Settings/Local Policies/User Rights Assignment), I have added Power Users to
    the "Load and Unload device drivers" policy. However this setting is not
    taking effect on my Windows XP workstations. My DLU policy for users is
    configured to have the users members of the "Users" and "Power Users" groups
    on the local PC.
    Other parts of Group Policy (Computer Policy/Administrative Templates) are
    taking effect on the workstation, so I'm wondering if the problem I am
    having is related to Security Settings only.
    I enabled Group Policy logging on the Windows XP workstation and include it
    below:
    WMHelperInitialization (Mar 4 2004) called! Flags: 0x8001002. Event:
    0x1000. Impersonation: 0x2
    Created Mutex.
    Loaded userenv.dll
    Mapped function RefreshPolicy
    Mapped function RegisterGPNotification
    Mapped function UnregisterGPNotification
    Mapped function RefreshPolicyEx
    Exiting WMHelperInitialization. Returning flags: 0x204
    WMHelperSystemEntryEx called!
    Entered GPCleanupEntry
    Writing User Logged In to \HKLM\Software\Novell\Workstation Manager\Group
    Policies
    Wrote reg. value 0x0 to User Logged In in key Software\Novell\Workstation
    Manager\Group Policies
    Reading Group Policy User Flags from \HKLM\Software\Novell\Workstation
    Manager\Group Policies
    Read reg. value Group Policy User Flags: 0x80000070 in key
    Software\Novell\Workstation Manager\Group Policies
    Reading Persist Workstation settings from \HKLM\Software\Novell\Workstation
    Manager\Group Policies
    Reg key Software\Novell\Workstation Manager\Group Policies\Persist
    Workstation settings not found. Assuming 0
    Error 2 reading Persist Workstation settings
    Entered RestoreOriginalGP.
    Reading Group Policy Machine Flags from \HKLM\Software\Novell\Workstation
    Manager\Group Policies
    Reg key Software\Novell\Workstation Manager\Group Policies\Group Policy
    Machine Flags not found. Assuming 0
    Reading Group Policy User Flags from \HKLM\Software\Novell\Workstation
    Manager\Group Policies
    Read reg. value Group Policy User Flags: 0x80000070 in key
    Software\Novell\Workstation Manager\Group Policies
    Entered GPDel
    Deleting C:\WINDOWS\System32\GroupPolicy\User
    Deleting C:\WINDOWS\System32\GroupPolicy\Machine
    Exiting GPDel 0
    Restoring backup GP from C:\WINDOWS\System32\GroupPolicy.WMOriginal
    Entered GPCopy(C:\WINDOWS\System32\GroupPolicy.WMOriginal,
    C:\WINDOWS\System32\GroupPolicy, 0, handle, 0x80000070)
    Warning: C:\WINDOWS\System32\GroupPolicy.WMOriginal\GPT.ini does not exist
    Copied file
    C:\WINDOWS\System32\GroupPolicy.WMOriginal\Machine \Microsoft\Windows
    NT\SecEdit\IPS1.dat to
    C:\WINDOWS\System32\GroupPolicy\Machine\Microsoft\ Windows
    NT\SecEdit\IPS1.dat
    Copied file
    C:\WINDOWS\System32\GroupPolicy.WMOriginal\Machine \Microsoft\Windows
    NT\SecEdit\XPSec.dat to
    C:\WINDOWS\System32\GroupPolicy\Machine\Microsoft\ Windows
    NT\SecEdit\XPSec.dat
    GP_FLAG_APPLY_SECURITY_SETTINGS (0x40), not set, or security file already
    copied. Will not copy security file
    Exiting GPCopy 0x0
    Writing Group Policy Machine Status to \HKLM\Software\Novell\Workstation
    Manager\Group Policies
    Wrote reg. value 0x4000 to Group Policy Machine Status in key
    Software\Novell\Workstation Manager\Group Policies
    Exiting RestoreOriginalGP 0x0
    Entered AppendSecuritySettings
    Inf path: C:\WINDOWS\System32\GroupPolicy\Machine\Microsoft\ Windows
    NT\SecEdit\XPSec.dat
    Restoring GP settings
    Loading Account Policies...
    Loading Audit Policies...
    Loading user rights...
    Restoring security options...
    No data
    No data
    No data
    No data
    No data
    No data
    No data
    No data
    Renamed Administrator account: Administrator
    Local Administrator's user name = Administrator
    Administrator account names match, skipping.
    Renamed Guest account: Guest
    Local Guest's user name = Guest
    Guest account names match, skipping.
    LoadXPSecuritySettings returning 0
    LoadHive entered
    LoadHive exit : 0
    Exiting AppendSecuritySettings 0x0
    GPCleanupEntry releasing mutex.
    Exiting GPCleanupEntry: 0
    Exiting WMHelperSystemEntryEx ccode: 0x0
    Closing log file.
    WMHelperInitialization (Mar 4 2004) called! Flags: 0x0. Event: 0x0.
    Impersonation: 0x0
    Created Mutex.
    Loaded userenv.dll
    Mapped function RefreshPolicy
    Mapped function RegisterGPNotification
    Mapped function UnregisterGPNotification
    Mapped function RefreshPolicyEx
    Exiting WMHelperInitialization. Returning flags: 0x11
    Entering WMHelperInteractiveUserEntry!
    szFullDN = CN=wintest3.OU=Users.OU=Newcastle.O=OSG
    DN is Typed convert it to TYPELESS
    g_szUserDN = wintest3.Users.Newcastle.OSG
    GinaGetUsersSIDInTextualForm ENTERED
    Textual SID : S-1-5-21-1214440339-507921405-1708537768-1019
    GinaGetUsersSIDInTextualForm EXIT : 0
    Writing Don't reparse to \HKLM\Software\Novell\Workstation Manager\Group
    Policies
    Wrote reg. value 0x0 to Don't reparse in key Software\Novell\Workstation
    Manager\Group Policies
    Writing User Logged In to \HKLM\Software\Novell\Workstation Manager\Group
    Policies
    Wrote reg. value 0x1 to User Logged In in key Software\Novell\Workstation
    Manager\Group Policies
    Entered CheckForObsoleteWksCache .
    No workstation. Exiting CheckForObsoleteWksCache
    Applying user policies
    Reading Don't reparse from \HKLM\Software\Novell\Workstation Manager\Group
    Policies
    Read reg. value Don't reparse: 0x0 in key Software\Novell\Workstation
    Manager\Group Policies
    Reading Group Policy User Status from \HKLM\Software\Novell\Workstation
    Manager\Group Policies
    Read reg. value Group Policy User Status: 0x3000 in key
    Software\Novell\Workstation Manager\Group Policies
    Read reg. key Group Policy User Status: 0x3000
    Entering ApplyPolicies
    Reading Group Policy User Flags from \HKLM\Software\Novell\Workstation
    Manager\Group Policies
    Read reg. value Group Policy User Flags: 0x80000070 in key
    Software\Novell\Workstation Manager\Group Policies
    Read reg. key Group Policy User Flags: 0x80000070
    Reading Group Policy User Status from \HKLM\Software\Novell\Workstation
    Manager\Group Policies
    Read reg. value Group Policy User Status: 0x3000 in key
    Software\Novell\Workstation Manager\Group Policies
    Read reg. key Group Policy User Status: 0x3000
    Writing Group Policy User Status to \HKLM\Software\Novell\Workstation
    Manager\Group Policies
    Wrote reg. value 0x1000 to Group Policy User Status in key
    Software\Novell\Workstation Manager\Group Policies
    Impersonating logged on user.
    Context : OU=Users.OU=Newcastle.O=OSG
    Full Object DN CN=wintest3.OU=Users.OU=Newcastle.O=OSG
    Calling WMGetAllAssociatedObjects(FALSE, MARITIME, 1,
    CN=wintest3.OU=Users.OU=Newcastle.O=OSG, WINNT Workstation Package,
    zenwmGroupPolicy, 512, pBuffer)
    Reverting to system impersonation.
    Found DN CN=XP User Package:WinNT-2000-XP:Windows Group Policy.OU=Policy
    Packages.OU=Newcastle.O=OSG
    WMCheckIfGroupPolicyObjectsChanged entered
    Impersonating logged on user.
    Reverting to system impersonation.
    Group Policy object has NOT changed!
    Exiting WMCheckIfGroupPolicyObjectsChanged 0x0
    Entered ScheduleCleanup.
    Loaded wmschapi.dll
    Calling WMScheduleAction
    Finished Calling WMScheduleAction. Returned 0x0
    Exiting ScheduleCleanup 0x0
    Entered BackupOriginalGP.
    No backup exists. Creating one: C:\WINDOWS\System32\GroupPolicy.WMOriginal
    Backing up original GP to C:\WINDOWS\System32\GroupPolicy.WMOriginal
    Copied file C:\WINDOWS\System32\GroupPolicy\Adm\admfiles.ini to
    C:\WINDOWS\System32\GroupPolicy.WMOriginal\Adm\adm files.ini
    Copied file C:\WINDOWS\System32\GroupPolicy\Adm\conf.adm to
    C:\WINDOWS\System32\GroupPolicy.WMOriginal\Adm\con f.adm
    Copied file C:\WINDOWS\System32\GroupPolicy\Adm\inetres.adm to
    C:\WINDOWS\System32\GroupPolicy.WMOriginal\Adm\ine tres.adm
    Copied file C:\WINDOWS\System32\GroupPolicy\Adm\system.adm to
    C:\WINDOWS\System32\GroupPolicy.WMOriginal\Adm\sys tem.adm
    Copied file C:\WINDOWS\System32\GroupPolicy\Adm\wmplayer.adm to
    C:\WINDOWS\System32\GroupPolicy.WMOriginal\Adm\wmp layer.adm
    Copied file C:\WINDOWS\System32\GroupPolicy\Adm\wuau.adm to
    C:\WINDOWS\System32\GroupPolicy.WMOriginal\Adm\wua u.adm
    Copied file C:\WINDOWS\System32\GroupPolicy\GPT.ini to
    C:\WINDOWS\System32\GroupPolicy.WMOriginal\GPT.ini
    Copied file C:\WINDOWS\System32\GroupPolicy\Machine\Microsoft\ Windows
    NT\SecEdit\IPS1.dat to
    C:\WINDOWS\System32\GroupPolicy.WMOriginal\Machine \Microsoft\Windows
    NT\SecEdit\IPS1.dat
    Copied file C:\WINDOWS\System32\GroupPolicy\Machine\Microsoft\ Windows
    NT\SecEdit\XPSec.dat to
    C:\WINDOWS\System32\GroupPolicy.WMOriginal\Machine \Microsoft\Windows
    NT\SecEdit\XPSec.dat
    Entered SaveSecuritySettings
    Inf path:
    C:\WINDOWS\System32\GroupPolicy.WMOriginal\Machine \Microsoft\Windows
    NT\SecEdit\
    Saving XP security settings
    Saving Account Policies...
    Saving Audit Policies...
    Saving user rights...
    Name: Administrator
    Comment: Built-in account for administering the computer/domain
    Full Name:
    No rights.
    Name: Guest
    Comment: Built-in account for guest access to the computer/domain
    Full Name:
    Right: SeInteractiveLogonRight
    Right: SeDenyInteractiveLogonRight
    Right: SeDenyNetworkLogonRight
    Name: HelpAssistant
    Comment: Account for Providing Remote Assistance
    Full Name: Remote Desktop Help Assistant Account
    No rights.
    Name: SUPPORT_388945a0
    Comment: This is a vendor's account for the Help and Support Service
    Full Name: CN=Microsoft Corporation,L=Redmond,S=Washington,C=US
    Right: SeBatchLogonRight
    Right: SeDenyInteractiveLogonRight
    Right: SeDenyNetworkLogonRight
    Name: vector
    Comment: Account created by Novell's Workstation Manager
    Full Name:
    No rights.
    Name: wintest3
    Comment: Account created by Novell's Workstation Manager
    Full Name:
    No rights.
    Name: None
    Comment: Ordinary users
    No rights.
    Name: Administrators
    Right: SeSecurityPrivilege
    Right: SeBackupPrivilege
    Right: SeRestorePrivilege
    Right: SeSystemtimePrivilege
    Right: SeShutdownPrivilege
    Right: SeRemoteShutdownPrivilege
    Right: SeTakeOwnershipPrivilege
    Right: SeDebugPrivilege
    Right: SeSystemEnvironmentPrivilege
    Right: SeSystemProfilePrivilege
    Right: SeProfileSingleProcessPrivilege
    Right: SeIncreaseBasePriorityPrivilege
    Right: SeLoadDriverPrivilege
    Right: SeCreatePagefilePrivilege
    Right: SeIncreaseQuotaPrivilege
    Right: SeChangeNotifyPrivilege
    Right: SeUndockPrivilege
    Right: SeManageVolumePrivilege
    Right: SeImpersonatePrivilege
    Right: SeCreateGlobalPrivilege
    Right: SeInteractiveLogonRight
    Right: SeNetworkLogonRight
    Right: SeRemoteInteractiveLogonRight
    Name: Users
    Right: SeShutdownPrivilege
    Right: SeChangeNotifyPrivilege
    Right: SeUndockPrivilege
    Right: SeInteractiveLogonRight
    Right: SeNetworkLogonRight
    Name: Guests
    No rights.
    Name: Power Users
    Right: SeSystemtimePrivilege
    Right: SeShutdownPrivilege
    Right: SeProfileSingleProcessPrivilege
    Right: SeChangeNotifyPrivilege
    Right: SeUndockPrivilege
    Right: SeInteractiveLogonRight
    Right: SeNetworkLogonRight
    Name: Account operators
    No rights.
    Name: System operators
    No rights.
    Name: Printer operators
    No rights.
    Name: Backup operators
    Right: SeBackupPrivilege
    Right: SeRestorePrivilege
    Right: SeShutdownPrivilege
    Right: SeChangeNotifyPrivilege
    Right: SeInteractiveLogonRight
    Right: SeNetworkLogonRight
    Name: Replicators
    No rights.
    Name: RAS servers
    No rights.
    Name: Pre2000 compatible access
    No rights.
    Exiting SaveUserRights (0)
    Saving Security Options
    Found: MACHINE/Software/Microsoft/Driver Signing/Policy
    Data type is 3
    Found: MACHINE/Software/Microsoft/Windows
    NT/CurrentVersion/Setup/RecoveryConsole/SecurityLevel
    Data type is 4
    Found: MACHINE/Software/Microsoft/Windows
    NT/CurrentVersion/Setup/RecoveryConsole/SetCommand
    Data type is 4
    Found: MACHINE/Software/Microsoft/Windows
    NT/CurrentVersion/Winlogon/AllocateCDRoms
    Data type is 1
    Found: MACHINE/Software/Microsoft/Windows
    NT/CurrentVersion/Winlogon/AllocateDASD
    Data type is 1
    Found: MACHINE/Software/Microsoft/Windows
    NT/CurrentVersion/Winlogon/AllocateFloppies
    Data type is 1
    Found: MACHINE/Software/Microsoft/Windows
    NT/CurrentVersion/Winlogon/CachedLogonsCount
    Data type is 1
    Found: MACHINE/Software/Microsoft/Windows
    NT/CurrentVersion/Winlogon/ForceUnlockLogon
    Data type is 4
    Found: MACHINE/Software/Microsoft/Windows
    NT/CurrentVersion/Winlogon/PasswordExpiryWarning
    Data type is 4
    Found: MACHINE/Software/Microsoft/Windows
    NT/CurrentVersion/Winlogon/ScRemoveOption
    Data type is 1
    Found:
    MACHINE/Software/Microsoft/Windows/CurrentVersion/Policies/System/DisableCAD
    Data type is 4
    Found:
    MACHINE/Software/Microsoft/Windows/CurrentVersion/Policies/System/DontDisplayLastUserName
    Data type is 4
    Found:
    MACHINE/Software/Microsoft/Windows/CurrentVersion/Policies/System/LegalNoticeCaption
    Data type is 1
    Found:
    MACHINE/Software/Microsoft/Windows/CurrentVersion/Policies/System/LegalNoticeText
    Data type is 7
    Found:
    MACHINE/Software/Microsoft/Windows/CurrentVersion/Policies/System/ScForceOption
    Data type is 4
    Found:
    MACHINE/Software/Microsoft/Windows/CurrentVersion/Policies/System/ShutdownWithoutLogon
    Data type is 4
    Found:
    MACHINE/Software/Microsoft/Windows/CurrentVersion/Policies/System/UndockWithoutLogon
    Data type is 4
    Found: MACHINE/SOFTWARE/policies/Microsoft/windows
    NT/DCOM/MachineAccessRestriction
    Data type is 1
    Found: MACHINE/SOFTWARE/policies/Microsoft/windows
    NT/DCOM/MachineLaunchRestriction
    Data type is 1
    Found: MACHINE/System/CurrentControlSet/Control/Lsa/AuditBaseObjects
    Data type is 4
    Found: MACHINE/System/CurrentControlSet/Control/Lsa/CrashOnAuditFail
    Data type is 4
    Found: MACHINE/System/CurrentControlSet/Control/Lsa/DisableDomainCreds
    Data type is 4
    Found:
    MACHINE/System/CurrentControlSet/Control/Lsa/EveryoneIncludesAnonymous
    Data type is 4
    Found: MACHINE/System/CurrentControlSet/Control/Lsa/FIPSAlgorithmPolicy
    Data type is 4
    Found: MACHINE/System/CurrentControlSet/Control/Lsa/ForceGuest
    Data type is 4
    Found: MACHINE/System/CurrentControlSet/Control/Lsa/FullPrivilegeAuditing
    Data type is 3
    Found: MACHINE/System/CurrentControlSet/Control/Lsa/LimitBlankPasswordUse
    Data type is 4
    Found: MACHINE/System/CurrentControlSet/Control/Lsa/LmCompatibilityLevel
    Data type is 4
    Found: MACHINE/System/CurrentControlSet/Control/Lsa/MSV1_0/NTLMMinClientSec
    Data type is 4
    Found: MACHINE/System/CurrentControlSet/Control/Lsa/MSV1_0/NTLMMinServerSec
    Data type is 4
    Found: MACHINE/System/CurrentControlSet/Control/Lsa/NoDefaultAdminOwner
    Data type is 4
    Found: MACHINE/System/CurrentControlSet/Control/Lsa/NoLMHash
    Data type is 4
    Found: MACHINE/System/CurrentControlSet/Control/Lsa/RestrictAnonymous
    Data type is 4
    Found: MACHINE/System/CurrentControlSet/Control/Lsa/RestrictAnonymousSAM
    Data type is 4
    Found: MACHINE/System/CurrentControlSet/Control/Lsa/SubmitControl
    Data type is 4
    Found: MACHINE/System/CurrentControlSet/Control/Print/Providers/LanMan Print
    Services/Servers/AddPrinterDrivers
    Data type is 4
    Found:
    MACHINE/System/CurrentControlSet/Control/SecurePipeServers/Winreg/AllowedPaths/Machine
    Data type is 7
    Found: MACHINE/System/CurrentControlSet/Control/Session
    Manager/Kernel/ObCaseInsensitive
    Data type is 4
    Found: MACHINE/System/CurrentControlSet/Control/Session Manager/Memory
    Management/ClearPageFileAtShutdown
    Data type is 4
    Found: MACHINE/System/CurrentControlSet/Control/Session
    Manager/ProtectionMode
    Data type is 4
    Found:
    MACHINE/System/CurrentControlSet/Services/LanManServer/Parameters/AutoDisconnect
    Data type is 4
    Found:
    MACHINE/System/CurrentControlSet/Services/LanManServer/Parameters/EnableForcedLogOff
    Data type is 4
    Found:
    MACHINE/System/CurrentControlSet/Services/LanManServer/Parameters/EnableSecuritySignature
    Data type is 4
    Found:
    MACHINE/System/CurrentControlSet/Services/LanManServer/Parameters/NullSessionPipes
    Data type is 7
    Found:
    MACHINE/System/CurrentControlSet/Services/LanManServer/Parameters/NullSessionShares
    Data type is 7
    Found:
    MACHINE/System/CurrentControlSet/Services/LanManServer/Parameters/RequireSecuritySignature
    Data type is 4
    Found:
    MACHINE/System/CurrentControlSet/Services/LanmanWorkstation/Parameters/EnablePlainTextPassword
    Data type is 4
    Found:
    MACHINE/System/CurrentControlSet/Services/LanmanWorkstation/Parameters/EnableSecuritySignature
    Data type is 4
    Found:
    MACHINE/System/CurrentControlSet/Services/LanmanWorkstation/Parameters/RequireSecuritySignature
    Data type is 4
    Found: MACHINE/System/CurrentControlSet/Services/LDAP/LDAPClientIntegrity
    Data type is 4
    Found:
    MACHINE/System/CurrentControlSet/Services/Netlogon/Parameters/DisablePasswordChange
    Data type is 4
    Found:
    MACHINE/System/CurrentControlSet/Services/Netlogon/Parameters/MaximumPasswordAge
    Data type is 4
    Found:
    MACHINE/System/CurrentControlSet/Services/Netlogon/Parameters/RefusePasswordChange
    Data type is 4
    Found:
    MACHINE/System/CurrentControlSet/Services/Netlogon/Parameters/RequireSignOrSeal
    Data type is 4
    Found:
    MACHINE/System/CurrentControlSet/Services/Netlogon/Parameters/RequireStrongKey
    Data type is 4
    Found:
    MACHINE/System/CurrentControlSet/Services/Netlogon/Parameters/SealSecureChannel
    Data type is 4
    Found:
    MACHINE/System/CurrentControlSet/Services/Netlogon/Parameters/SignSecureChannel
    Data type is 4
    Found:
    MACHINE/System/CurrentControlSet/Services/NTDS/Parameters/LDAPServerIntegrity
    Data type is 4
    Administrator's user name = Administrator
    Guest's user name = Guest
    SaveHive entered
    SaveHive exit : 0
    Exiting SaveSecuritySettings 0x0
    Backup path: C:\WINDOWS\System32\GroupPolicy.WMOriginal
    Exiting BackupOriginalGP 0x0
    Entered RestoreCachedGP.
    Reading Group Policy User Flags from \HKLM\Software\Novell\Workstation
    Manager\Group Policies
    Read reg. value Group Policy User Flags: 0x80000070 in key
    Software\Novell\Workstation Manager\Group Policies
    Reading Group Policy Machine Flags from \HKLM\Software\Novell\Workstation
    Manager\Group Policies
    Reg key Software\Novell\Workstation Manager\Group Policies\Group Policy
    Machine Flags not found. Assuming 0
    No gpt.ini detected, aborting RestoreCachedGP.
    Checking whether OriginalGP exists
    Entered GPDel
    Deleting C:\WINDOWS\System32\GroupPolicy\User
    Deleting C:\WINDOWS\System32\GroupPolicy\Machine
    Exiting GPDel 0
    Restoring original GP.
    Entered RestoreOriginalGP.
    Reading Group Policy Machine Flags from \HKLM\Software\Novell\Workstation
    Manager\Group Policies
    Reg key Software\Novell\Workstation Manager\Group Policies\Group Policy
    Machine Flags not found. Assuming 0
    Reading Group Policy User Flags from \HKLM\Software\Novell\Workstation
    Manager\Group Policies
    Read reg. value Group Policy User Flags: 0x80000070 in key
    Software\Novell\Workstation Manager\Group Policies
    Entered GPDel
    Deleting C:\WINDOWS\System32\GroupPolicy\User
    Deleting C:\WINDOWS\System32\GroupPolicy\Machine
    Exiting GPDel 0
    Restoring backup GP from C:\WINDOWS\System32\GroupPolicy.WMOriginal
    Entered GPCopy(C:\WINDOWS\System32\GroupPolicy.WMOriginal,
    C:\WINDOWS\System32\GroupPolicy, 0, handle, 0x80000070)
    Copied C:\WINDOWS\System32\GroupPolicy.WMOriginal\GPT.ini to
    C:\WINDOWS\System32\GroupPolicy\GPT.ini
    Copied file
    C:\WINDOWS\System32\GroupPolicy.WMOriginal\Machine \Microsoft\Windows
    NT\SecEdit\IPS1.dat to
    C:\WINDOWS\System32\GroupPolicy\Machine\Microsoft\ Windows
    NT\SecEdit\IPS1.dat
    Copied file
    C:\WINDOWS\System32\GroupPolicy.WMOriginal\Machine \Microsoft\Windows
    NT\SecEdit\XPSec.dat to
    C:\WINDOWS\System32\GroupPolicy\Machine\Microsoft\ Windows
    NT\SecEdit\XPSec.dat
    GP_FLAG_APPLY_SECURITY_SETTINGS (0x40), not set, or security file already
    copied. Will not copy security file
    Exiting GPCopy 0x0
    Writing Group Policy User Status to \HKLM\Software\Novell\Workstation
    Manager\Group Policies
    Wrote reg. value 0x4000 to Group Policy User Status in key
    Software\Novell\Workstation Manager\Group Policies
    Exiting RestoreOriginalGP 0x0
    Writing Group Policy User Status to \HKLM\Software\Novell\Workstation
    Manager\Group Policies
    Wrote reg. value 0x4000 to Group Policy User Status in key
    Software\Novell\Workstation Manager\Group Policies
    Entered GPCopy(C:\WINDOWS\System32\GroupPolicy.UserCache,
    C:\WINDOWS\System32\GroupPolicy, 0, handle, 0x80000070)
    Copied C:\WINDOWS\System32\GroupPolicy.UserCache\GPT.ini to
    C:\WINDOWS\System32\GroupPolicy\GPT.ini
    Copied file
    C:\WINDOWS\System32\GroupPolicy.UserCache\User\MIC ROSOFT\IEAK\install.ins to
    C:\WINDOWS\System32\GroupPolicy\User\MICROSOFT\IEA K\install.ins
    Copied file C:\WINDOWS\System32\GroupPolicy.UserCache\User\Reg istry.pol to
    C:\WINDOWS\System32\GroupPolicy\User\Registry.pol
    Copied file
    C:\WINDOWS\System32\GroupPolicy.UserCache\Machine\ Microsoft\Windows
    NT\SecEdit\IPS1.dat to
    C:\WINDOWS\System32\GroupPolicy\Machine\Microsoft\ Windows
    NT\SecEdit\IPS1.dat
    Copied file
    C:\WINDOWS\System32\GroupPolicy.UserCache\Machine\ Microsoft\Windows
    NT\SecEdit\IPS2.dat to
    C:\WINDOWS\System32\GroupPolicy\Machine\Microsoft\ Windows
    NT\SecEdit\IPS2.dat
    Copied file
    C:\WINDOWS\System32\GroupPolicy.UserCache\Machine\ Microsoft\Windows
    NT\SecEdit\IPS3.dat to
    C:\WINDOWS\System32\GroupPolicy\Machine\Microsoft\ Windows
    NT\SecEdit\IPS3.dat
    Copied file
    C:\WINDOWS\System32\GroupPolicy.UserCache\Machine\ Microsoft\Windows
    NT\SecEdit\XPSec.dat to
    C:\WINDOWS\System32\GroupPolicy\Machine\Microsoft\ Windows
    NT\SecEdit\XPSec.dat
    Copied file C:\WINDOWS\System32\GroupPolicy.UserCache\Machine\ Registry.pol
    to C:\WINDOWS\System32\GroupPolicy\Machine\Registry.p ol
    GP_FLAG_APPLY_SECURITY_SETTINGS (0x40), not set, or security file already
    copied. Will not copy security file
    Exiting GPCopy 0x0
    Writing Group Policy User Status to \HKLM\Software\Novell\Workstation
    Manager\Group Policies
    Wrote reg. value 0x3000 to Group Policy User Status in key
    Software\Novell\Workstation Manager\Group Policies
    Entered MergeGptFile(C:\WINDOWS\System32\GroupPolicy.UserC ache, 0x80000070)
    g_dwVersion: 0x0.
    Reading GPT Version from \HKLM\Software\Novell\Workstation Manager\Group
    Policies
    Read reg. value GPT Version: 0x70007 in key Software\Novell\Workstation
    Manager\Group Policies
    Found machine extensions...
    Found user extensions...
    Exiting MergeGptFile 0x0
    Reading user's user settings.
    Entered AppendPolicy
    C:\WINDOWS\System32\GroupPolicy.UserCache\User\Reg istry.pol
    Entered parseRegFile
    Val: 'BlockExeAttachments'
    Added: Software\Microsoft\Outlook Express\BlockExeAttachments
    Val: 'NoHTMLWallPaper'
    Added:
    Software\Microsoft\Windows\CurrentVersion\Policies \ActiveDesktop\NoHTMLWallPaper
    Val: '**del.NoChangingWallPaper'
    Trying to delete key:
    Software\Microsoft\Windows\CurrentVersion\Policies \ActiveDesktop, val:
    NoChangingWallPaper
    Added:
    Software\Microsoft\Windows\CurrentVersion\Policies \ActiveDesktop\**del.NoChangingWallPaper
    Val: 'ForceClassicControlPanel'
    Added:
    Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\ForceClassicControlPanel
    Val: 'NoSMMyPictures'
    Added:
    Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\NoSMMyPictures
    Val: 'NoStartMenuMyMusic'
    Added:
    Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\NoStartMenuMyMusic
    Val: 'NoDesktopCleanupWizard'
    Added:
    Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\NoDesktopCleanupWizard
    Val: 'NoWelcomeScreen'
    Added:
    Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\NoWelcomeScreen
    Val: 'NoActiveDesktop'
    Added:
    Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\NoActiveDesktop
    Val: '**del.NoInternetIcon'
    Trying to delete key:
    Software\Microsoft\Windows\CurrentVersion\Policies \Explorer, val:
    NoInternetIcon
    Added:
    Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\**del.NoInternetIcon
    Val: '**del.NoNetHood'
    Trying to delete key:
    Software\Microsoft\Windows\CurrentVersion\Policies \Explorer, val: NoNetHood
    Added:
    Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\**del.NoNetHood
    Val: 'NoAutoUpdate'
    Added:
    Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\NoAutoUpdate
    Val: 'NoSMBalloonTip'
    Added:
    Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\NoSMBalloonTip
    Val: 'NoSMConfigurePrograms'
    Added:
    Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\NoSMConfigurePrograms
    Val: 'NoComputersNearMe'
    Added:
    Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\NoComputersNearMe
    Val: 'MaxRecentDocs'
    Added:
    Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\MaxRecentDocs
    Val: 'NoSharedDocuments'
    Added:
    Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\NoSharedDocuments
    Val: '**del.NoStartMenuEjectPC'
    Trying to delete key:
    Software\Microsoft\Windows\CurrentVersion\Policies \Explorer, val:
    NoStartMenuEjectPC
    Added:
    Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\**del.NoStartMenuEjectPC
    Val: 'NoActiveDesktopChanges'
    Added:
    Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\NoActiveDesktopChanges
    Val: '**del.NoAddPrinter'
    Trying to delete key:
    Software\Microsoft\Windows\CurrentVersion\Policies \Explorer, val:
    NoAddPrinter
    Added:
    Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\**del.NoAddPrinter
    Val: '**del.NoDeletePrinter'
    Trying to delete key:
    Software\Microsoft\Windows\CurrentVersion\Policies \Explorer, val:
    NoDeletePrinter
    Added:
    Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\**del.NoDeletePrinter
    Val: '**del.NoToolbarsOnTaskbar'
    Trying to delete key:
    Software\Microsoft\Windows\CurrentVersion\Policies \Explorer, val:
    NoToolbarsOnTaskbar
    Added:
    Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\**del.NoToolbarsOnTaskbar
    Val: '**del.NoSetTaskbar'
    Trying to delete key:
    Software\Microsoft\Windows\CurrentVersion\Policies \Explorer, val:
    NoSetTaskbar
    Added:
    Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\**del.NoSetTaskbar
    Val: 'ForceStartMenuLogOff'
    Added:
    Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\ForceStartMenuLogOff
    Val: '{20D04FE0-3AEA-1069-A2D8-08002B30309D}'
    Added:
    Software\Microsoft\Windows\CurrentVersion\Policies \NonEnum\{20D04FE0-3AEA-1069-A2D8-08002B30309D}
    Val: '**del.{450D8FBA-AD25-11D0-98A8-0800361B1103}'
    Trying to delete key:
    Software\Microsoft\Windows\CurrentVersion\Policies \NonEnum, val:
    {450D8FBA-AD25-11D0-98A8-0800361B1103}
    Added:
    Software\Microsoft\Windows\CurrentVersion\Policies \NonEnum\**del.{450D8FBA-AD25-11D0-98A8-0800361B1103}
    Val: '**del.{645FF040-5081-101B-9F08-00AA002F954E}'
    Trying to delete key:
    Software\Microsoft\Windows\CurrentVersion\Policies \NonEnum, val:
    {645FF040-5081-101B-9F08-00AA002F954E}
    Added:
    Software\Microsoft\Windows\CurrentVersion\Policies \NonEnum\**del.{645FF040-5081-101B-9F08-00AA002F954E}
    Val: '**del.Wallpaper'
    Trying to delete key:
    Software\Microsoft\Windows\CurrentVersion\Policies \System, val: Wallpaper
    Added:
    Software\Microsoft\Windows\CurrentVersion\Policies \System\**del.Wallpaper
    Val: '**del.WallpaperStyle'
    Trying to delete key:
    Software\Microsoft\Windows\CurrentVersion\Policies \System, val:
    WallpaperStyle
    Added:
    Software\Microsoft\Windows\CurrentVersion\Policies \System\**del.WallpaperStyle
    Val: 'NoDispScrSavPage'
    Added:
    Software\Microsoft\Windows\CurrentVersion\Policies \System\NoDispScrSavPage
    Val: 'NoAddFromNetwork'
    Added:
    Software\Microsoft\Windows\CurrentVersion\Policies \Uninstall\NoAddFromNetwork
    Val: '**del.NoAddRemovePrograms'
    Trying to delete key:
    Software\Microsoft\Windows\CurrentVersion\Policies \Uninstall, val:
    NoAddRemovePrograms
    Added:
    Software\Microsoft\Windows\CurrentVersion\Policies \Uninstall\**del.NoAddRemovePrograms
    Val: 'ListBox_Support_Allow'
    Added: Software\Policies\Microsoft\Internet Explorer\New
    Windows\ListBox_Support_Allow
    Val: '*.fleetviewonline.com'
    Added: Software\Policies\Microsoft\Internet Explorer\New
    Windows\Allow\*.fleetviewonline.com
    Val: '*.osg.com'
    Added: Software\Policies\Microsoft\Internet Explorer\New
    Windows\Allow\*.osg.com
    Val: 'NoHelpItemTutorial'
    Added: Software\Policies\Microsoft\Internet
    Explorer\Restrictions\NoHelpItemTutorial
    Val: 'NoHelpItemNetscapeHelp'
    Added: Software\Policies\Microsoft\Internet
    Explorer\Restrictions\NoHelpItemNetscapeHelp
    Val: 'NoHelpItemSendFeedback'
    Added: Software\Policies\Microsoft\Internet
    Explorer\Restrictions\NoHelpItemSendFeedback
    Val: 'PreventAutoRun'
    Added: Software\Policies\Microsoft\Messenger\Client\Preve ntAutoRun
    Val: ''
    Added: Software\Policies\Microsoft\SystemCertificates\Tru st\Certificates\
    Val: ''
    Added: Software\Policies\Microsoft\SystemCertificates\Tru st\CRLs\
    Val: ''
    Added: Software\Policies\Microsoft\SystemCertificates\Tru st\CTLs\
    Val: 'ScreenSaverIsSecure'
    Added: Software\Policies\Microsoft\Windows\Control
    Panel\Desktop\ScreenSaverIsSecure
    Val: 'ScreenSaveActive'
    Added: Software\Policies\Microsoft\Windows\Control
    Panel\Desktop\ScreenSaveActive
    Val: 'ScreenSaveTimeOut'
    Added: Software\Policies\Microsoft\Windows\Control
    Panel\Desktop\ScreenSaveTimeOut
    Val: 'SCRNSAVE.EXE'
    Added: Software\Policies\Microsoft\Windows\Control
    Panel\Desktop\SCRNSAVE.EXE
    Val: 'ListBox_Support_ZoneMapKey'
    Added: Software\Policies\Microsoft\Windows\CurrentVersion \Internet
    Settings\ListBox_Support_ZoneMapKey
    Val: '*.osg.com'
    Added: Software\Policies\Microsoft\Windows\CurrentVersion \Internet
    Settings\ZoneMapKey\*.osg.com
    Val: 'osgintranet'
    Added: Software\Policies\Microsoft\Windows\CurrentVersion \Internet
    Settings\ZoneMapKey\osgintranet
    Val: '1A00'
    Added: Software\Policies\Microsoft\Windows\CurrentVersion \Internet
    Settings\Zones\1\1A00
    Val: '1809'
    Added: Software\Policies\Microsoft\Windows\CurrentVersion \Internet
    Settings\Zones\1\1809
    Val: '1803'
    Added: Software\Policies\Microsoft\Windows\CurrentVersion \Internet
    Settings\Zones\1\1803
    Val: 'DontPromptForWindowsUpdate'
    Added:
    Software\Policies\Microsoft\Windows\DriverSearchin g\DontPromptForWindowsUpdate
    Val: 'NC_RenameLanConnection'
    Added: Software\Policies\Microsoft\Windows\Network
    Connections\NC_RenameLanConnection
    Val: 'PromptPasswordOnResume'
    Added:
    Software\Policies\Microsoft\Windows\System\Power\P romptPasswordOnResume
    Val: 'NoAUAsDefaultShutdownOption'
    Added:
    Software\Policies\Microsoft\Windows\WindowsUpdate\ AU\NoAUAsDefaultShutdownOption
    Val: 'NoAUShutdownOption'
    Added:
    Software\Policies\Microsoft\Windows\WindowsUpdate\ AU\NoAUShutdownOption
    Val: 'BehaviorOnFailedVerify'
    Added: Software\Policies\Microsoft\Windows NT\Driver
    Signing\BehaviorOnFailedVerify
    Val: 'MovieMaker'
    Added: Software\Policies\Microsoft\WindowsMovieMaker\Movi eMaker
    Exiting parseRegFile
    Exiting AppendPolicy
    C:\WINDOWS\System32\GroupPolicy.UserCache\User\Reg istry.pol 0x0
    Reading user's computer settings.
    Entered AppendPolicy
    C:\WINDOWS\System32\GroupPolicy.UserCache\Machine\ Registry.pol
    Entered parseRegFile
    Val: 'NoUpdateCheck'
    Added: Software\Policies\Microsoft\Internet
    Explorer\Infodelivery\Restrictions\NoUpdateCheck
    Val: 'NoSplash'
    Added: Software\Policies\Microsoft\Internet
    Explorer\Infodelivery\Restrictions\NoSplash
    Val: 'PreventAutoRun'
    Added: Software\Policies\Microsoft\Messenger\Client\Preve ntAutoRun
    Val: 'NV PrimaryDnsSuffix'
    Added: Software\Policies\Microsoft\System\DNSClient\NV PrimaryDnsSuffix
    Val: ''
    Added: Software\Policies\Microsoft\Windows\Safer\
    Val: 'WUServer'
    Added: Software\Policies\Microsoft\Windows\WindowsUpdate\ WUServer
    Val: 'WUStatusServer'
    Added: Software\Policies\Microsoft\Windows\WindowsUpdate\ WUStatusServer
    Val: 'NoAutoRebootWithLoggedOnUsers'
    Added:
    Software\Policies\Microsoft\Windows\WindowsUpdate\ AU\NoAutoRebootWithLoggedOnUsers
    Val: 'AutoInstallMinorUpdates'
    Added:
    Software\Policies\Microsoft\Windows\WindowsUpdate\ AU\AutoInstallMinorUpdates
    Val: 'DetectionFrequencyEnabled'
    Added:
    Software\Policies\Microsoft\Windows\WindowsUpdate\ AU\DetectionFrequencyEnabled
    Val: 'DetectionFrequency'
    Added:
    Software\Policies\Microsoft\Windows\WindowsUpdate\ AU\DetectionFrequency
    Val: 'UseWUServer'
    Added: Software\Policies\Microsoft\Windows\WindowsUpdate\ AU\UseWUServer
    Val: 'RescheduleWaitTimeEnabled'
    Added:
    Software\Policies\Microsoft\Windows\WindowsUpdate\ AU\RescheduleWaitTimeEnabled
    Val: 'RescheduleWaitTime'
    Added:
    Software\Policies\Microsoft\Windows\WindowsUpdate\ AU\RescheduleWaitTime
    Val: 'NoAutoUpdate'
    Added: Software\Policies\Microsoft\Windows\WindowsUpdate\ AU\NoAutoUpdate
    Val: 'AUOptions'
    Added: Software\Policies\Microsoft\Windows\WindowsUpdate\ AU\AUOptions
    Val: 'ScheduledInstallDay'
    Added:
    Software\Policies\Microsoft\Windows\WindowsUpdate\ AU\ScheduledInstallDay
    Val: 'ScheduledInstallTime'
    Added:
    Software\Policies\Microsoft\Windows\WindowsUpdate\ AU\ScheduledInstallTime
    Val: 'RegistrationOverwritesInConflict'
    Added: Software\Policies\Microsoft\Windows
    NT\DNSClient\RegistrationOverwritesInConflict
    Val: 'SearchList'
    Added: Software\Policies\Microsoft\Windows NT\DNSClient\SearchList
    Val: 'PreventIISInstall'
    Added: Software\Policies\Microsoft\Windows NT\IIS\PreventIISInstall
    Val: 'SecurityCenterInDomain'
    Added: Software\Policies\Microsoft\Windows NT\Security
    Center\SecurityCenterInDomain
    Exiting parseRegFile
    Exiting AppendPolicy
    C:\WINDOWS\System32\GroupPolicy.UserCache\Machine\ Registry.pol 0x0
    Entered GenerateGptFile(C:\WINDOWS\System32\GroupPolicy)
    g_dwVersion: 0x70007.
    Writing GPT Version to \HKLM\Software\Novell\Workstation Manager\Group
    Policies
    Wrote reg. value 0x70007 to GPT Version in key Software\Novell\Workstation
    Manager\Group Policies
    Exiting GenerateGptFile 0x0
    Exiting RestoreCachedGP 0x0
    Writing Group Policy User Status to \HKLM\Software\Novell\Workstation
    Manager\Group Policies
    Wrote reg. value 0x3000 to Group Policy User Status in key
    Software\Novell\Workstation Manager\Group Policies
    Bumping GPT version...
    Entered SetGptVersion(0x0, TRUE).
    Reading GPT Version from \HKLM\Software\Novell\Workstation Manager\Group
    Policies
    Read reg. value GPT Version: 0x70007 in key Software\Novell\Workstation
    Manager\Group Policies
    Read file C:\WINDOWS\System32\GroupPolicy\GPT.ini
    Found version 0x70007 in gpt.ini
    Using version: 0x70007
    Saving GPT version: 0x80008
    Writing GPT Version to \HKLM\Software\Novell\Workstation Manager\Group
    Policies
    Wrote reg. value 0x80008 to GPT Version in key Software\Novell\Workstation
    Manager\Group Policies
    Exiting SetGptVersion 0x0.
    Entered AppendSecuritySettings
    Inf path: C:\WINDOWS\System32\GroupPolicy\Machine\Microsoft\ Windows
    NT\SecEdit\XPSec.dat
    Restoring GP settings
    Loading Account Policies...
    Loading Audit Policies...
    Loading user rights...
    Restoring security options...
    No data
    No data
    No data
    No data
    No data
    No data
    No data
    No data
    No data for Administrator account name.
    LoadXPSecuritySettings returning 0
    LoadHive entered
    LoadHive exit : 0
    Exiting AppendSecuritySettings 0x0
    Signalling OS to refresh policies
    RegQueryValueEx returned 2
    Policies are set to apply asynchronously
    Policies will be processed asynchronously
    Entered SetGptVersion(0x0, TRUE).
    Reading GPT Version from \HKLM\Software\Novell\Workstation Manager\Group
    Policies
    Read reg. value GPT Version: 0x80008 in key Software\Novell\Workstation
    Manager\Group Policies
    Read file C:\WINDOWS\System32\GroupPolicy\GPT.ini
    Found version 0x80008 in gpt.ini
    Using version: 0x80008
    Saving GPT version: 0x90009
    Writing GPT Version to \HKLM\Software\Novell\Workstation Manager\Group
    Policies
    Wrote reg. value 0x90009 to GPT Version in key Software\Novell\Workstation
    Manager\Group Policies
    Exiting SetGptVersion 0x0.
    Entering RunGPUpdate
    Exiting RunGPUpdate 0
    Exiting ApplyPolicies 0x0
    Writing Last Run Time High to \HKLM\Software\Novell\Workstation
    Manager\Group Policies
    Wrote reg. value 0x1c58076 to Last Run Time High in key
    Software\Novell\Workstation Manager\Group Policies
    Writing Last Run Time Low to \HKLM\Software\Novell\Workstation Manager\Group
    Policies
    Wrote reg. value 0x34349ce0 to Last Run Time Low in key
    Software\Novell\Workstation Manager\Group Policies
    Apply user policies releasing mutex.
    Exiting WMHelperInteractiveUserEntry ccode: 0x0
    Closing log file.
    WMHelperInitialization (Mar 4 2004) called! Flags: 0x2001. Event: 0x2000.
    Impersonation: 0x1
    Opened Mutex.
    Loaded userenv.dll
    Mapped function RefreshPolicy
    Mapped function RegisterGPNotification
    Mapped function UnregisterGPNotification
    Mapped function RefreshPolicyEx
    Exiting WMHelperInitialization. Returning flags: 0x11
    Entering WMHelperInteractiveUserEntry!
    szFullDN = CN=wintest3.OU=Users.OU=Newcastle.O=OSG
    DN is Typed convert it to TYPELESS
    g_szUserDN = wintest3.Users.Newcastle.OSG
    GinaGetUsersSIDInTextualForm ENTERED
    Textual SID : S-1-5-21-1214440339-507921405-1708537768-1019
    GinaGetUsersSIDInTextualForm EXIT : 0
    Writing Don't reparse to \HKLM\Software\Novell\Workstation Manager\Group
    Policies
    Wrote reg. value 0x0 to Don't reparse in key Software\Novell\Workstation
    Manager\Group Policies
    Current time high: 0x1c58076
    Reading Last Run Time High from \HKLM\Software\Novell\Workstation
    Manager\Group Policies
    Read reg. value Last Run Time High: 0x1c58076 in key
    Software\Novell\Workstation Manager\Group Policies
    Previous time high: 0x1c58076
    Writing Don't reparse to \HKLM\Software\Novell\Workstation Manager\Group
    Policies
    Wrote reg. value 0x1 to Don't reparse in key Software\Novell\Workstation
    Manager\Group Policies
    Writing User Logged In to \HKLM\Software\Novell\Workstation Manager\Group
    Policies
    Wrote reg. value 0x1 to User Logged In in key Software\Novell\Workstation
    Manager\Group Policies
    Entered CheckForObsoleteWksCache
    CN=LT_VECTOR.OU=Workstations.OU=Newcastle.O=OSG.
    Full Object DN
    CN=LT_VECTOR.OU=Workstations.OU=Newcastle.O=OSG.OU =Users.OU=Newcastle.O=OSG
    Calling WMGetAllAssociatedObjects(FALSE, MARITIME, 1,
    CN=LT_VECTOR.OU=Workstations.OU=Newcastle.O=OSG.OU =Users.OU=Newcastle.O=OSG,
    WINNT Workstation Package, zenwmGroupPolicy, 512, pBuffer)
    WMGetAllAssociatedObject returned 2
    No associated workstation policies. Deleting
    C:\WINDOWS\System32\GroupPolicy.WksCache.
    DeleteGPRegVal: Error 0x2 deleting Group Policy Machine Flags
    Exiting CheckForObsoleteWksCache 2
    Applying user policies
    Reading Don't reparse from \HKLM\Software\Novell\Workstation Manager\Group
    Policies
    Read reg. value Don't reparse: 0x1 in key Software\Novell\Workstation
    Manager\Group Policies
    Reading Group Policy User Status from \HKLM\Software\Novell\Workstation
    Manager\Group Policies
    Read reg. value Group Policy User Status: 0x3000 in key
    Software\Novell\Workstation Manager\Group Policies
    Read reg. key Group Policy User Status: 0x3000
    Policy applied at predesktop. Skipping reapplication at user login.
    Writing Don't reparse to \HKLM\Software\Novell\Workstation Manager\Group
    Policies
    Wrote reg. value 0x0 to Don't reparse in key Software\Novell\Workstation
    Manager\Group Policies
    Writing Last Run Time High to \HKLM\Software\Novell\Workstation
    Manager\Group Policies
    Wrote reg. value 0x1c58076 to Last Run Time High in key
    Software\Novell\Workstation Manager\Group Policies
    Writing Last Run Time Low to \HKLM\Software\Novell\Workstation Manager\Group
    Policies
    Wrote reg. value 0x38844da0 to Last Run Time Low in key
    Software\Novell\Workstation Manager\Group Policies
    Apply user policies releasing mutex.
    Exiting WMHelperInteractiveUserEntry ccode: 0x0
    Closing log file.
    Thanks in advance
    Ali

    DUPLICATE
    Answered in
    novell.support.zenworks.desktops.3x.workstation-manager
    Regards
    Rolf Lidvall
    Swedish Radio (Ltd)
    NSC SysOp

  • User Rights Assignment should WLi have

    Hi:
    No matter what system user I try to use I can't start the WLserver for WLi.
    What am I missing? or what rights should be assigned system user for WL to start?
    A system user name and password. WebLogic Server user names and passwords can
    contain any character from the JDK supported character sets, including international
    characters.
    Thank You
    David L. Wasler
    [email protected]

    Hi ikrambuneri,
    Based on your description, I have an idea .But I won`t guarantee it will work .
    We can use the AccessChk tool with parameter "/f /p"to check the token information and privilages information of this specific software process .Then we can create a group and authority the realted privilages to this group from the group policy .
    Group policy \Computer Configurations\Windows Settings \Security Settings \Local Policies\User Rights Assignment
    AccessChk v5.21
    https://technet.microsoft.com/en-us/sysinternals/bb664922.aspx?f=255&MSPPError=-2147217396
    As a work around ,you can create a shortcut with "Runas" command line for the user .Here is a link for reference of doing this .
    Please note that this method will ask for the administrator password for the first time to run the software short cut and it will save the administrator privilages and this may result in security issue .We don`t recommend to do this.
    Windows 7: Elevated Program Shortcut - Create for Standard User
    http://www.sevenforums.com/tutorials/193743-elevated-program-shortcut-create-standard-user.html
    NOTE: This response contains a reference to a third party World Wide Web site. Microsoft is providing this information as a convenience to you. Microsoft does not control these sites and has not tested any software or information found on these sites.
    Best regards
    Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected]

  • User rights assignment

    Hi All
    i have a small domain environment where 40 clients are connected to 2008 server.
    some clients needs to run specific software for which they needs administrative rights and password. but i dont want to give them administrator password. please any one can let me know how to keep them in a separate group and assign them the rights so they
    can run specific program on server without knowing admin password,
    please help me with proper steps.
    thanks 

    Hi ikrambuneri,
    Based on your description, I have an idea .But I won`t guarantee it will work .
    We can use the AccessChk tool with parameter "/f /p"to check the token information and privilages information of this specific software process .Then we can create a group and authority the realted privilages to this group from the group policy .
    Group policy \Computer Configurations\Windows Settings \Security Settings \Local Policies\User Rights Assignment
    AccessChk v5.21
    https://technet.microsoft.com/en-us/sysinternals/bb664922.aspx?f=255&MSPPError=-2147217396
    As a work around ,you can create a shortcut with "Runas" command line for the user .Here is a link for reference of doing this .
    Please note that this method will ask for the administrator password for the first time to run the software short cut and it will save the administrator privilages and this may result in security issue .We don`t recommend to do this.
    Windows 7: Elevated Program Shortcut - Create for Standard User
    http://www.sevenforums.com/tutorials/193743-elevated-program-shortcut-create-standard-user.html
    NOTE: This response contains a reference to a third party World Wide Web site. Microsoft is providing this information as a convenience to you. Microsoft does not control these sites and has not tested any software or information found on these sites.
    Best regards
    Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected]

  • Missing user rights assignment entries for many security policies in list exported via secedit

    Hello,
    First of all, I posted this same question on The Official Scripting Guys Forum! but didn't get the answer to this exact question (even though I received a lot of useful relevant info). That is why I am posting here. This is a more appropriate
    forum for the question. (Also posted on Windows Server 2012 General two days ago and didn't get a response at all).
    OK, question time:
    I want to modify the user rights assignment for a local security policy. In the GUI, find User Rights Assignment as follows: Win+R -> Enter "secpol.msc" -> Go to Local Policies -> Go to User Rights Assignment.
    So, to modify a particular use rights assignment via a script, I need to export the INF file using secedit, modify it and then configure using the modified file using secedit. To export the INF file, I am using:
    secedit /export /db C:\Windows\security\database\secedit.sdb /mergedpolicy /cfg SecPolicy
    Now, the problem is that the INF file exported doesn't have all the user rights assignments that I see in the GUI. For example, the policy "Restore files and directories" has users/groups in its settings but it doesn't show up in the INF file.
    In fact, most don't. Only five do and all these five have a different symbol next to them in the GUI. How are these policies different? What do I need to do to export all the policies?
    EDIT: Adding screenshot of what I see:
    Thanks!
    -Rohan.

    On Fri, 11 Apr 2014 18:26:50 +0000, Rohan PN wrote:
    Now, the problem is that the INF file exported doesn't have all the user rights assignments that I see in the GUI. For example, the policy "Restore files and directories" has users/groups in its settings but it doesn't show up in the INF
    file. In fact, most don't. Only five do and all these five have a different symbol next to them in the GUI. How are these policies different? What do I need to do to export all the policies?
    Can you post a screen shot? My guess is that what you're seeing is that
    secpol is only exporting the local settings and not ones that are set by a
    GPO in AD and that will also be the difference between the icons.
    Paul Adare - FIM CM MVP
    Although the Buddhists will tell you that desire is the root of suffering,
    my personal experience leads me to point the finger at system
    administration.
    -- Philip Greenspun

  • When using the camera downloader in Adobe Bridge CS6 with Nikon D5200 we are unable to see previews of the photos and it is very slow to download. The issue occurs under a the users rights, but not under admin level. This is a new issue

    When using the camera downloader in Adobe Bridge CS6 with Nikon D5200 we are unable to see previews of the photos and it is very slow to download. The issue occurs under a the users rights, but not under admin level. This is a new issue.

    Hi Jdentremont,
    Lync client gets user photos by first querying the Address Book Web Query (ABWQ) service on the server, which is exposed through the Distribution List Expansion web service. The client receives
    the image file and then copies it to the user's cache to avoid downloading the image each time it needs to be displayed. The attribute values returned from the query are also stored in the cached Address Book Service entry for the user. The Address Book Service
    deletes all cached images every 24 hours, which means that it can take up to 24 hours for new user images to be updated in the cache on the server.
    To troubleshoot your problem, please follow the steps below:
    1.  Navigate to
     “X:\share\1-WebServices-1\ABfiles\000000000\000000000” folder. (ABS file share)
    You should see some photo files in this folder as the following screenshot.
    2. Delete all the files in this folder.
    3. On test PC, delete local cache files.
    %userprofile%\AppData\Local\Microsoft\Office\15.0\Lync\[email protected]
    4. Sign-in Lync with the test account.
    5. Go back to the ABS file share, check if there is any Photo file in the folder.
    Best regards,
    Eric
    Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected]

  • Remote Desktop user rights assignment

    I have a 2012 server that I'm using with Remote Desktop Services. Users connect to this server to work with QuickBooks 2013 Premiere.  The problem is that QuickBooks would not run unless users had administrative rights.  To get around this I made
    everyone an administrator.  The problem is that a user inadvertently shut down the server.  How can I assign enough rights to enable users to use QuickBooks, but not shut down the server?
    More specifically - how can I more granularly adjust the rights and permissions users have when they log in via Remote Desktop.
    Thanks!

    Hi,
    As QuickBookes requires the Windows administrator privilege, I’m afraid that we cannot limit user rights and prevent them to shut down the server.
    However, as a workaround, you may try to publish QuickBooks as a RemoteApp so that users will just connect to the App instead of the server.
    Overview of RemoteApp
    http://technet.microsoft.com/en-us/library/cc755055.aspx
    Best Regards.
    Jeremy Wu
    TechNet Community Support

  • How can you remove User rights that were applied to a MailStore?

    Hi All,
    I've inherited an Exchange 2010 SP3 environment and I'd like to do a bit of cleanup from legacy accounts such as Blackberry, Digiscope and others that were assigned rights directly to our MailStores.
    I see that Digiscope had rights applied like this:
    http://www.lucid8.com/download/documentation/DSWebHelp/SETUP/Granting_Access_to_Exchange_2010_Production_Databases_Mailboxes.htm
    I'd like to remove the access rights and then delete the legacy accounts.
    I'm thinking the following may work, but if you have alternative ideas, I'd really like to read them.
    Remove-ADPermission –identity “Microsoft Exchange” –user MyDomain\DSAdministrators
    Remove DSAdministrators from the “Public Folder Management”
           Delete DSAdmin User Account
    Delete DSAdministrators Group
    Thank you very much for your time,
    Mr Mister

    Hi,
    I recommend you follow Rich's suggestion to check the result. If there is any updata, please feel free to post here for further research.
    Best regards,
    Belinda
    Belinda Ma
    TechNet Community Support

  • Local Repository User Rights for the Data Designer

    Hello,
    we are using the Data Services with 4 users and one local repository stored on the server.
    Is it possible to hide in the Data Designer foreign objects and projects from other users in the local repository? What's the best practice for that, for every user a seperate repository or to restrict the repository rights with the cmc?
    Our system:
    Windows Server 2008
    Data Services 4.0 SP1
    IBM DB2 9.7 (Repository)
    Thanks for some tips and hints!

    Hi Alexander,
    At any point in time, you should only have one user connected to one repository in Designer.
    If two users are using the same repository at the same time, then there is a risk of corruption of repository objects.
    Best practice is to have a repository for each (concurrent) developer and a central repository for version management.
    Depending how testing is organised, you might also need to have repositories for unit test / QA (UAT) and finally a production repository.
    For good measure, an additional central reposotiry for production can be valuable:
    - if development for new project start before the 'previous' project has gone into live.
    - You can prepare go-live by checking in all the objects required for live into central-production first.
    - It's the final safety measure, if objects in production are corrupted and dev/test systems have modified versions.
    So, a typical landscape would look like this:
    DEVELOPMENT:
    n number of development repositories, one for each developer
    1 test repository (local)
    1 dev central repository
    TEST
    1 UAT repository (local)
    PROD
    1 PROD repository (local)
    1 central repository
    Jan.

  • User Group Policy Settings not applied to new user profiles at first logon

    Good Afternoon,
    We have an issue that occurs to a new user when they first log on to their machines. They log on and a new profile creates from the Default User Profile. We can see that a number of our Group Policy Settings applied as "User Configuration" are
    not applying.A log off and back on is required before the policies apply.
    Any thoughts to this behaviour please?
    Regards
    LeeB
    Lee Bowman MCITP MCTS

    Hi,
    How about your problem now? How many system encounter this problem? Is all policy couldn't be applied? Is there any feedback when using gpresult to check policy applied status?
    As Group Policy applies after user identity authentication, generally speaking, user logoff and back doesn't helpful with this problem.
    When this problem occures, have you checked event log if it identify this problem?
    Roger Lu
    TechNet Community Support

  • View RSOP data for logged on user that is not administrator

    When troubleshooting group policies I use GPResult and RSOP.msc a LOT!  Since we started deploying Windows 7 I've been having the worst time trying to use these utilities.
    Normally when a user is not getting policies I can just run rsop.msc and see if there is any error information as well as which policies have and have not applied.  In Windows 7 I am prompted for an Admin password when I run rsop.  Well that would
    be fine but now RSOP attempts to gather data for the administrator; I need to see the data for the logged on user.  The only way I've been able to work around this so far is to add the user to the local admin group then I can run rsop and gpresult.  When
    I'm done I have to remove them from the admin group.
    This seems silly to me.  Can anyone tell me how to see RSOP and GPResult data as the USER instead of the Admin.
    Also please do not chime in telling me to run rsop in planning mode as that only tells me what is supposed to happen, not what is actually happening on the system.

    Hi,
    Base on my test and research, there’s impossible to use RSOP.msc with user, and run as administrator when you login with user still doesn’t work.
    That’s necessary to login with administrator and run rsop.msc. It’s a by design feature.
    Thank you for your understanding.
    Regards,
    Leo  
    Huang
    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

  • User policies not applied hence dlu not working

    We have 6 pc's that for some reason don't get user policies. Here's the
    line from zmd-message.log of the workstation agent:
    [1296] [ZenworksWindowsService] [56] [] [PolicyManager] []
    [ApplyPolicies: Either user session is null or Device-only mode is
    enabled or Zen logon module is not present; not applying user policies.]
    The zone is 10.3.3, we use a user source connected to edir and the user
    is getting user policies on other computers. What's this Device-only mode?
    regards,
    Limor

    Found the problem. Our people disabled Zenworks User Authentication in
    the registry.
    On 13/09/2011 09:13, Limor wrote:
    > We have 6 pc's that for some reason don't get user policies. Here's the
    > line from zmd-message.log of the workstation agent:
    > [1296] [ZenworksWindowsService] [56] [] [PolicyManager] []
    > [ApplyPolicies: Either user session is null or Device-only mode is
    > enabled or Zen logon module is not present; not applying user policies.]
    >
    > The zone is 10.3.3, we use a user source connected to edir and the user
    > is getting user policies on other computers. What's this Device-only mode?
    >
    > regards,
    > Limor

  • ZCM 11 Group Policies not applying to satellite servers

    Hi there
    We are running 2 Windows 2012 Primary Servers and a SQL 2012 Database server at our main site, all remote sites have SLES11 SP2/OES11 SP1 as satellite servers. We upgraded all servers last weekend to 11.3.1 and now have an issue with Group Policies applying to the satellites. The satellites are all set up the same with Authentication, Collection, Content and Imaging roles.
    Since we upgraded Group Policies are (99% of the time) not applying on satellite sites. I have tried manually replicating content (I assume policies will come from content replication?) to the satellites - I've done this with a zac cdp replicate and zac cvc and everything seems to replicate over however I tried highlighting a satellite server and clicking on Action, Specify Content - select the Policy that is not applying and move it into the selected Content to update column and when I click finish I get the error "The Wizard cannot continue for the following reason(s): Unable to complete your request for the following reason: Error updating content"
    On a managed device at the satellite site if you look at the properties of the Zenworks agent and click on Policies it has applied 4 device assigned policies successfully - Remote Management, Power Management, Application Launcher Config and Application Control Policy, also has successfully applied 3 out of the 4 User Assigned Policies - Mandatory Profile, Dynamic Local User, Application Control - but not the Windows Group Policy.
    Our PCs are on Windows 8.1 and all policies were applying fine before the weekend upgrade......
    Has anyone else had any experience of Group Policies not applying that could point me where to look? I have logged an SR with Novell through our reseller but as yet I am getting no response back at all, not even asking me for more information.
    Many thanks
    Sharon

    Sounds like you have a content replication issue more than a GPO issue.
    Especially if the GPO works for locations that point to the Primaries
    for Content.
    Do you have throttling configured anywhere in any fashion?
    You may need to increase the Replication Timeout to make sure content is
    getting over to the Sats. Often increasing from 60 to 240 helps, but
    watch out for throttling preventing content replication.
    It is possible things are backing up.
    On 7/31/2014 8:26 AM, shazzypoos wrote:
    >
    > I should add that when you looked at the "Click for Details" to the
    > right of the Effective "Failed" status the message is "Policy
    > Enforcement Failed : The action (0) threw an exception. Message (1).
    > Exception (2) (grouppolicy, "None of the source locations could be
    > found"
    >
    > Hmmmm! Currently in closest server rules there is only the server for
    > the site it's on set - we do not want it to come back to the Primary for
    > policies. As I say, this was working before the weekend upgrade. Thanks!
    >
    >
    Craig Wilson - MCNE, MCSE, CCNA
    Novell Technical Support Engineer
    Novell does not officially monitor these forums.
    Suggestions/Opinions/Statements made by me are solely my own.
    These thoughts may not be shared by either Novell or any rational human.

  • Group Policy Pref - Mapped Drives Not Applying to One User

    Hi All,
    I’m new to this list, so please excuse any etiquette slip ups.  
    I have three users at a site. All their machines are running Windows XP Service Pack 3 and have client side extensions installed. I created a group policy to map their default drives using GP User Preferences.
    Each of the drives is set to "update".
    As an example of the policy created XML is as follows:
    <Drive clsid="{935D1B74-9CB8-4e3c-9914-7DD559B7A417}" name="H:" status="H:"
    image="2" changed="2009-11-25 05:13:58"
    uid="{8A44D2F4-AAE5-4F43-AEEC-D36F08EA619C}" desc="Maps the users H drive to
    ServerName\users$\%username%" bypassErrors="1"><Properties action="U"
    thisDrive="NOCHANGE" allDrives="NOCHANGE" userName=""
    path="\\ServerName\users$\%username%" label="Home (ServerName)"
    persistent="1" useLetter="1" letter="H"/></Drive>
    and
    <Drive clsid="{935D1B74-9CB8-4e3c-9914-7DD559B7A417}" name="J:" status="J:"
    image="0" changed="2009-11-30 03:52:58"
    uid="{535CD462-A45D-4363-ADA1-2316D5ECC703}" desc="Maps J drive for users to
    \\ServerName\apps" bypassErrors="1"><Properties action="C"
    thisDrive="NOCHANGE" allDrives="NOCHANGE" userName=""
    path="\\ServerName\Apps" label="Apps (ServerName)" persistent="1"
    useLetter="1" letter="J"/></Drive>
    The group policy is applied to an OU for that site. 
    All three users are in the same OU.
    All three users are also in the same “xxsitecode Users” group.
    2 of the users log into their pc and get the mapped drives with no issue, but one user doesn’t.
    There are no other login scripts and the user has no manually mapped drives.
    He does have a H drive mapped using the profile field in his AD object as a temp measure. But every 90 mins any other manually mapped drives are removed by the policy.
    We don’t use roaming profiles
    To trouble shoot I have tried
    -    Reinstalling client side extensions
    -    Re-joining the pc to the domain
    -    Running gpupdate from the command prompt to see if any event logs are generated (none are)
    -    Manually mapping the drives to make sure there is network access etc – I can manually map them/he can access them.
    -    Creating the user a new account, when he logs in using that account he gets his mapped drives on all PC’s
    -    Getting the user to log into a different pc, when he does this he doesn’t get his drives – so it’s not his machine or profile
    -    Manually checking the security on the user object in AD against one of the users who gets their drives mapped
    I'm sure the GP is fine because it works for two other users and the testing isolates his user account as the issue.
    The Policy I’m having issues with is xxxx Mapped Drives/ Printers
    I have posted this issue on the tech net GP discussion groups page, but haven’t had any replies.
    Any suggestions would be appreciated.
    Simone

    What's interesting is that I applied a new GP to users - it has one policy setting and one preferences setting. He only gets the policy setting.. aka he gets the wallpaper but not the homepage.
    Also, Jorke asked me to post the gpresult /z .
    Microsoft (R) Windows (R) XP Operating System Group Policy Result tool v2.0
    Copyright (C) Microsoft Corp. 1981-2001
    Created On 10/02/2010 at 2:19:34 PM
    RSOP results for DOMAIN\USER on MACHINENAME : Logging Mode
    OS Type:                     Microsoft Windows XP Professional
    OS Configuration:            Member Workstation
    OS Version:                  5.1.2600
    Domain Name:                 DOMAIN
    Domain Type:                 Windows 2000
    Site Name:                   SITECODE
    Roaming Profile:            
    Local Profile:               C:\Documents and Settings\USER.DOMAIN
    Connected over a slow link?: No
    COMPUTER SETTINGS
        CN=MACHINENAME,OU=Laptops,OU=SITECODE,DC=DOMAIN,DC=com,DC=au
        Last time Group Policy was applied: 10/02/2010 at 1:06:38 PM
        Group Policy was applied from:      XXXXXADC.DOMAIN.com.au
        Group Policy slow link threshold:   500 kbps
        Applied Group Policy Objects
            Allow Remote Assistance
            au-mdwsus
            Default Domain Policy
            Legal Notice
            Proxy Settings
            Logon as service, operating system
            AU-WSUS
            Desktop Background & Home Page
            Reg Permissions for default desktop
            Local Admin & Local Power Users
        The following GPOs were not applied because they were filtered out
            SITECODE Mapped Drives/ Printers
                Filtering:  Not Applied (Empty)
            Local Group Policy
                Filtering:  Not Applied (Empty)
            AVD Rollout
                Filtering:  Disabled (GPO)
        The computer is a part of the following security groups:
            BUILTIN\Administrators
            Everyone
            Debugger Users
            BUILTIN\Users
            NT AUTHORITY\NETWORK
            NT AUTHORITY\Authenticated Users
            MACHINENAME$
            Domain Computers
            CERTSVC_DCOM_ACCESS
        Resultant Set Of Policies for Computer:
            Software Installations
                N/A
            Startup Scripts
                GPO: Desktop Background & Home Page
                    Name:         image.bat
                    Parameters:  
                    LastExecuted: 7:55:34 PM
                    Name:         swiftdesktop.vbs
                    Parameters:  
                    LastExecuted: 7:55:35 PM
            Shutdown Scripts
                N/A
            Account Policies
            Audit Policy
            User Rights
            Security Options
            Event Log Settings
            Restricted Groups
            System Services
            Registry Settings
            File System Settings
            Public Key Policies
                N/A
            Administrative Templates
                GPO: Allow Remote Assistance
                    Setting: Software\policies\Microsoft\Windows NT\Terminal Services
                    State:   Enabled
                GPO: AU-WSUS
                    Setting: Software\Policies\Microsoft\Windows\WindowsUpdate\AU
                    State:   Enabled
                GPO: Allow Remote Assistance
                    Setting: Software\policies\Microsoft\Windows NT\Terminal Services\RAUnsolicit
                    State:   Enabled
                GPO: Allow Remote Assistance
                    Setting: Software\policies\Microsoft\Windows NT\Terminal Services
                    State:   Enabled
                GPO: Allow Remote Assistance
                    Setting: Software\policies\Microsoft\Windows NT\Terminal Services\RAUnsolicit
                    State:   Enabled
                GPO: Allow Remote Assistance
                    Setting: Software\policies\Microsoft\WindowsFirewall\DomainProfile\GloballyOpenPorts
                    State:   Enabled
                GPO: Allow Remote Assistance
                    Setting: Software\policies\Microsoft\WindowsFirewall\DomainProfile\GloballyOpenPorts\List
                    State:   Enabled
                GPO: Allow Remote Assistance
                    Setting: Software\policies\Microsoft\WindowsFirewall\DomainProfile\AuthorizedApplications\List
                    State:   Enabled
                GPO: AU-WSUS
                    Setting: Software\Policies\Microsoft\Windows\WindowsUpdate\AU
                    State:   Enabled
                GPO: Allow Remote Assistance
                    Setting: Software\policies\Microsoft\Windows NT\Terminal Services\RAUnsolicit
                    State:   Enabled
                GPO: Allow Remote Assistance
                    Setting: Software\policies\Microsoft\WindowsFirewall\DomainProfile\AuthorizedApplications\List
                    State:   Enabled
                GPO: Allow Remote Assistance
                    Setting: Software\policies\Microsoft\Windows NT\Terminal Services\RAUnsolicit
                    State:   Enabled
                GPO: Allow Remote Assistance
                    Setting: Software\policies\Microsoft\Windows NT\Terminal Services\RAUnsolicit
                    State:   Enabled
                GPO: AU-WSUS
                    Setting: Software\Policies\Microsoft\Windows\WindowsUpdate\AU
                    State:   Enabled
                GPO: Allow Remote Assistance
                    Setting: Software\policies\Microsoft\Windows NT\Terminal Services
                    State:   Enabled
                GPO: au-mdwsus
                    Setting: Software\Policies\Microsoft\Windows\WindowsUpdate
                    State:   Enabled
                GPO: Allow Remote Assistance
                    Setting: Software\policies\Microsoft\Windows NT\Terminal Services\RAUnsolicit
                    State:   Enabled
                GPO: Allow Remote Assistance
                    Setting: Software\policies\Microsoft\Windows NT\Terminal Services\RAUnsolicit
                    State:   Enabled
                GPO: au-mdwsus
                    Setting: Software\Policies\Microsoft\Windows\WindowsUpdate\AU
                    State:   Enabled
                GPO: Allow Remote Assistance
                    Setting: Software\policies\Microsoft\Windows NT\CurrentVersion\Winlogon
                    State:   Enabled
                GPO: Allow Remote Assistance
                    Setting: Software\policies\Microsoft\Windows NT\Terminal Services
                    State:   Enabled
                GPO: Allow Remote Assistance
                    Setting: Software\policies\Microsoft\WindowsFirewall\DomainProfile\AuthorizedApplications\List
                    State:   Enabled
                GPO: AU-WSUS
                    Setting: Software\Policies\Microsoft\Windows\WindowsUpdate\AU
                    State:   Enabled
                GPO: Allow Remote Assistance
                    Setting: Software\policies\Microsoft\Windows NT\Terminal Services\RAUnsolicit
                    State:   Enabled
                GPO: Allow Remote Assistance
                    Setting: Software\policies\Microsoft\WindowsFirewall\DomainProfile\AuthorizedApplications
                    State:   Enabled
                GPO: AU-WSUS
                    Setting: Software\Policies\Microsoft\Windows\WindowsUpdate\AU
                    State:   Enabled
                GPO: au-mdwsus
                    Setting: Software\Policies\Microsoft\Windows\WindowsUpdate
                    State:   Enabled
                GPO: Allow Remote Assistance
                    Setting: Software\policies\Microsoft\Windows NT\Terminal Services
                    State:   Enabled
                GPO: Desktop Background & Home Page
                    Setting: Software\Policies\Microsoft\Internet Explorer\Security
                    State:   Enabled
                GPO: Allow Remote Assistance
                    Setting: Software\policies\Microsoft\Windows NT\Terminal Services
                    State:   Enabled
                GPO: AU-WSUS
                    Setting: Software\Policies\Microsoft\Windows\WindowsUpdate
                    State:   Enabled
                GPO: AU-WSUS
                    Setting: Software\Policies\Microsoft\Windows\WindowsUpdate\AU
                    State:   Enabled
                GPO: Allow Remote Assistance
                    Setting: Software\policies\Microsoft\Windows NT\Terminal Services\RAUnsolicit
                    State:   Enabled
                GPO: Allow Remote Assistance
                    Setting: Software\policies\Microsoft\WindowsFirewall\DomainProfile\AuthorizedApplications
                    State:   Enabled
                GPO: Allow Remote Assistance
                    Setting: Software\policies\Microsoft\WindowsFirewall\DomainProfile\RemoteAdminSettings
                    State:   Enabled
                GPO: Allow Remote Assistance
                    Setting: Software\policies\Microsoft\Windows NT\Terminal Services
                    State:   Enabled
                GPO: AU-WSUS
                    Setting: Software\Policies\Microsoft\Windows\WindowsUpdate\AU
                    State:   Enabled
                GPO: au-mdwsus
                    Setting: Software\Policies\Microsoft\Windows\WindowsUpdate
                    State:   Enabled
                GPO: AU-WSUS
                    Setting: Software\Policies\Microsoft\Windows\WindowsUpdate\AU
                    State:   Enabled
                GPO: Allow Remote Assistance
                    Setting: Software\policies\Microsoft\WindowsFirewall\DomainProfile\RemoteAdminSettings
                    State:   Enabled
                GPO: Allow Remote Assistance
                    Setting: Software\policies\Microsoft\Windows NT\Terminal Services\RAUnsolicit
                    State:   Enabled
                GPO: au-mdwsus
                    Setting: Software\Policies\Microsoft\Windows\WindowsUpdate
                    State:   Enabled
                GPO: Allow Remote Assistance
                    Setting: Software\policies\Microsoft\WindowsFirewall\DomainProfile\AuthorizedApplications\List
                    State:   Enabled
                GPO: Allow Remote Assistance
                    Setting: Software\policies\Microsoft\WindowsFirewall\DomainProfile\AuthorizedApplications\List
                    State:   Enabled
                GPO: Allow Remote Assistance
                    Setting: Software\policies\Microsoft\Windows NT\Terminal Services
                    State:   Enabled
    USER SETTINGS
        CN=Matthew Luhrs,OU=Users,OU=SITECODE,DC=DOMAIN,DC=com,DC=au
        Last time Group Policy was applied: 10/02/2010 at 1:54:53 PM
        Group Policy was applied from:      XXXXXADC.DOMAIN.com.au
        Group Policy slow link threshold:   500 kbps
        Applied Group Policy Objects
            Allow Remote Assistance
           **** SITECODE Mapped Drives/ Printers - has Gp Pref's that should apply
            Default Domain Policy
            Proxy Settings
            **** Desktop Background & Home Page - has Gp Pref's that should apply
            Local Admin & Local Power Users
        The following GPOs were not applied because they were filtered out
            AU-WSUS
                Filtering:  Not Applied (Empty)
            Legal Notice
                Filtering:  Disabled (GPO)
            Reg Permissions for default desktop
                Filtering:  Not Applied (Empty)
            Logon as service, operating system
                Filtering:  Not Applied (Empty)
            Local Group Policy
                Filtering:  Not Applied (Empty)
            au-mdwsus
                Filtering:  Not Applied (Empty)
            AVD Rollout
                Filtering:  Disabled (GPO)
        The user is a part of the following security groups:
            Domain Users
            Everyone
            Offer Remote Assistance Helpers
            BUILTIN\Administrators
            BUILTIN\Users
            NT AUTHORITY\INTERACTIVE
            NT AUTHORITY\Authenticated Users
            LOCAL
            Computer Account Operators
            Internet Users
            SITECODE Users
            DOMAIN-Public Folders Administrators
            All Email Users
            DOMAINSWIFTEMAIL
            Domain Admins
            Offer Remote Assistance Helpers
            WSUS Administrators
            DHCP Administrators
            CERTSVC_DCOM_ACCESS
        Resultant Set Of Policies for User:
            Software Installations
                N/A
            Public Key Policies
                N/A
            Administrative Templates
                N/A
            Folder Redirection
                N/A
            Internet Explorer Browser User Interface
                GPO: Proxy Settings
                    Large Animated Bitmap Name:      N/A
                    Large Custom Logo Bitmap Name:   N/A
                    Title BarText:                   N/A
                    UserAgent Text:                  N/A
                    Delete existing toolbar buttons: No
            Internet Explorer Connection
                HTTP Proxy Server:   Proxy:port
                Secure Proxy Server: Proxy:port
                FTP Proxy Server:    Proxy:port
                Gopher Proxy Server: Proxy:port
                Socks Proxy Server:  Proxy:port
                Auto Config Enable:  Yes
                Enable Proxy:        Yes
                Use same Proxy:      Yes
            Internet Explorer URLs
                GPO: Proxy Settings
                    Home page URL:           N/A
                    Search page URL:         N/A
                    Online support page URL: N/A
            Internet Explorer Security
                Always Viewable Sites:     N/A
                Password Override Enabled: False
                GPO: Proxy Settings
                    Import the current Content Ratings Settings:      No
                    Import the current Security Zones Settings:       No
                    Import current Authenticode Security Information: No
                    Enable trusted publisher lockdown:                No
            Internet Explorer Programs
                GPO: Proxy Settings
                    Import the current Program Settings: No

  • Local User Rights Assignments overwritten by AD DS User Rights Assignments Group Policy

    Hello,
    I have a AD DS Group Policy being pushed out to all machine on my domain to for privileged domain service account (Deny log on locally & Log on as a service). I also have a couple machines in the domain that have a local service account which also needs
    the same rights/restrictions.
    We attempted to add the local service account into the AD DS Group Policy. This works but it generates errors on all machines which do not have the local service account on them.
    We attempted to set this in the local Group Policy editor on the machines with the local service account but the AD DS Group Policy will overwrite it.
    Does anyone know of a solution to merge User Rights Assignments rather than overwrite them?

    Hello,
    I have a AD DS Group Policy being pushed out to all machine on my domain to for privileged domain service account (Deny log on locally & Log on as a service). I also have a couple machines in the domain that have a local service account which also needs
    the same rights/restrictions.
    We attempted to add the local service account into the AD DS Group Policy. This works but it generates errors on all machines which do not have the local service account on them.
    We attempted to set this in the local Group Policy editor on the machines with the local service account but the AD DS Group Policy will overwrite it.
    Does anyone know of a solution to merge User Rights Assignments rather than overwrite them?
    The way I got around this is you make another OU for that computer/server.
    In the GPO section you want to remove inheritance of policies applied. Then link the policies all but the one that is causing the overwrite. Place the computers in that OU and it will not over write.
    If you need other things from that policy then you may make another policy just for that OU that has all you need minus the one that cause issues and want to type in manually. When a PC is placed in that OU and you do a gpupdate /force it will not get the
    locked down one and you can change those settings manually. If you move it out of that OU back to the main OU then it will get the policy and overwrite the local. This is what we had to do per our Domain.
    Hope this helps you out.
    Darkplate ^^

Maybe you are looking for

  • On writing on pdf

    I cannot write on pdf as I used to. What do I get back to do it?

  • Async to sych Bridge

    Hi all, as i know it is possible to couple Synch to Async via Sync-Async Bridge. But what about the other way around, e.g. couple async to sync via ccBPM? What we want to try is to send a async message via a jms-Adapter. This message will request an

  • Exit button on ESS iViews

    Hi, We have ESS deployed on EP7.0, so we are using the WebDynpro version of ESS. Now we want to redirect the navigation to our own customized iView when click "Exit" button on any of the ESS iView, for example , address iView. I guess this should be

  • Best file for importing images from Illustrator and Photoshop for small file sizes

    Hello Adode consults! I'm in the process of preparing an inDesign file for a school project -- I've already had a few harrowing experiences sending large files to the printer that are too large to process (and a very grumpy computer, etc). The end re

  • Itunes keeps crashing when I click my iphone´s apps tab

    Hi, My itunes keeps crashing when I click the tab "Apps" when my iphone is selected in the left column. The button circled in this image: http://dl.getdropbox.com/u/85398/crash.png Im using 10.6.4 o22n a macbook pro 13 inch, my iphone is a 3gs 32 gb.