Mail redirection via Mail policy / filter

Hi
I have configured a mail policy / filter to redirect email coming from a external source but the Exchange admin cannot see the email arrive at the mailbox..
1. I can telnet and smtp ping to the exchange server
2. There is already a route configured for these email server
3. The exchange server is present in the HAT list
4. When I go to Message Tracking , I get this error message ...
Message 11368 to xxxxxxxxx@XXXX received remote SMTP response '2.6.0 <80a1b0$b38@unknown domain> [InternalId=35171] Queued mail for delivery'.
What else do I need to do or is this the right way to redirect mail ?

Issue has been resolved.
1. Incoming Content Filters if (mail-from == "@ mydomain.com $") {alt-mailhost ("[10.0.2.188]");}
2.Turn this filter for Default police
3. Add Incoming Mail police where to specify e-mail addresses of senders VIP
4. Content Filters disable this policy

Similar Messages

Outgoing mail Policy only able to use one of either Content Filter - Outbreak Filter - DLP

No matter what config I use I am able to apply sender domains, anti spam and anti virus however I can only apply a single process of content filter which then will not move to the next process of DLP. Can this be achieved so I can have within the same outgoing mail policy the process of content filter and dlp policies applied.

Hello Bighead81,
could you explain what you mean by "single process of content filter" please? I'd suppose adding more than one content filter to a policy, which should be no problem. Also activation of Content Filter, Outbreak Filters and DLP (for outbound mailflow) for any policies.
Regards,
Andreas

Mail policy not blocking attachment

I'm trialling an Ironport C160, and having problems with the content filter. I have an incoming content filter that is set to drop incoming attachments of type jpeg. However, the ironport just lets the attachment past.
The content filter is applied to the default incomping policy. I also tried setting it up as a separate policy with higher priority to default, but the attchment was still allowed through.
If I check the tracking, it says
MAIL POLICY "DEFAULT" MATCHED THESE RECIPIENTS: [email protected]
So it seems that it goes through the policy, but doesn't apply the content filter.
Any idea what I'm doing wrong?

MAIL POLICY "DEFAULT" MATCHED THESE RECIPIENTS: [email protected]
28 Dec 2011 15:36:17 (GMT)
Protocol SMTP interface Data1 (IP 192.168.1.17) on incoming connection (ICID 239) from sender IP 192.168.1.199. Reverse DNS host None verified no.
28 Dec 2011 15:36:17 (GMT)
(ICID 239) RELAY sender group RELAYLIST match 192.168.1. SBRS rfc1918
28 Dec 2011 15:36:17 (GMT)
Start message 271 on incoming connection (ICID 239).
28 Dec 2011 15:36:17 (GMT)
Message 271 enqueued on incoming connection (ICID 239) from [email protected]
28 Dec 2011 15:36:17 (GMT)
Message 271 on incoming connection (ICID 239) added recipient ([email protected]).
28 Dec 2011 15:36:17 (GMT)
Message 271 contains message ID header '<CAKFcXox=[email protected]>'.
28 Dec 2011 15:36:17 (GMT)
Message 271 original subject on injection: JP
28 Dec 2011 15:36:17 (GMT)
Message 271 (7685 bytes) from [email protected] ready.
28 Dec 2011 15:36:17 (GMT)
Message 271 matched per-recipient policy DEFAULT for outbound mail policies.
28 Dec 2011 15:36:17 (GMT)
Message 271 queued for delivery.
28 Dec 2011 15:36:17 (GMT)
SMTP delivery connection (DCID 254) opened from IronPort interface 192.168.1.17 to IP address 192.168.1.25 on port 25.
28 Dec 2011 15:36:17 (GMT)
(DCID 254) Delivery started for message 271 [email protected]
28 Dec 2011 15:36:17 (GMT)
(DCID 254) Delivery details: Message 271 sent to [email protected]
28 Dec 2011 15:36:17 (GMT)
Message 271 to [email protected] received remote SMTP response '2.6.0 <CAKFcXox=[email protected]> Queued mail for delivery'.

Mail Policy Matching

I have a group of recipients defined in one policy in order to let them receive PPS attachments, but won't receive password protected ZIPs.
I have another group of recipients in another policy in order to let them receive password protected ZIP files, but won't receive PPS files.
One recipient is in both groups.
But, depending on the order of the policies, this recipient will receive a Password protected ZIP or not, or will receive a PPS or not.
Is there a way to make Ironport to scan all policies and use the less restrictive one???

Basically, first match wins with respect to what incoming mail policy a message is assigned to.
However, what you can do is keep your two policies the way they are.
For example:
Incoming mail policies:
1. Allows_PPS_no_pwd_protected_files
2. Allow_pwd_protected_files_no_PPS
3. Default policy
For the first policy, have two content filters.
The first filter checks if it's a certain recipient and allow them to receive the pwd_protected_files and does a deliver() action so that it doesn't process any additional content filters.
The second content filter sees if whoever else is not one of the recipients above and has a pwd_protected_file and then strips the attachment out or whatever action you want.
Basically, incoming content filter #1 is the exception part and will allow select recipients to get both PPS and pwd_protected_files. The second filter is where you enforce the no pwd_protected_file policy.
Then just do the same thing for the second incoming mail policy, and make adjustments where needed.
-kevin
I have a group of recipients defined in one policy in order to let them receive PPS attachments, but won't receive password protected ZIPs.
I have another group of recipients in another policy in order to let them receive password protected ZIP files, but won't receive PPS files.
One recipient is in both groups.
But, depending on the order of the policies, this recipient will receive a Password protected ZIP or not, or will receive a PPS or not.
Is there a way to make Ironport to scan all policies and use the less restrictive one???

Attachment Mail Policy

Dear Expert,
I'm not sure Exchange Server have some mail policy below:
Eg: when we received mail with attachment from outside, I would like to separate the attachment from the Email.
Only Email(message) will send to the our internal
recipient, the attachment will go to ‘Attachment Server’.
*In the email will have URL or Link to download the attachment from our FTP / Files server. Please Suggest.
Thank you

Hi,
Is there any update with your issue?
Agree with Amit. Exchange server 2013 doesn't have a built-in function that can separate attachments from emails and save them to another place. Thanks for your understanding.
Best regards,
If you have feedback for TechNet Subscriber Support, contact
[email protected]
Amy Wang
TechNet Community Support

Incoming Mail Policy is not working - SPAM quarantine

I have configured a Mail Policy that has the Antispam disabled. I have done this because of an specific mail user that wants to receive all the emails, including the ones the ESA consider spam.
I usually works fine but now I have 4 emails in the spam quarantine. All of them are from the same sender. I have the details and there is this one line that "explains" why the email is send to quarantine:
"Remote procedure call connection (RCID 13) started for message 65161521 to local Spam Quarantine.".
Can you please give me some advice in order to know what causes this Remote call procedure connection?
Thanks!!
MAIL POLICY "No-spam-check" MATCHED THESE RECIPIENTS: [email protected]
19 Nov 2014 09:52:21 (GMT +05:00)
Protocol SMTP interface in.perulng (IP 129.39.179.38) on incoming connection (ICID 59143385) from sender IP 104.200.16.96. Reverse DNS host mta11.avanzaperu.pe verified yes.
19 Nov 2014 09:52:21 (GMT +05:00)
(ICID 59143385) ACCEPT sender group UNKNOWNLIST match sbrs[none] SBRS unable to retrieve
19 Nov 2014 09:52:24 (GMT +05:00)
Start message 65161521 on incoming connection (ICID 59143385).
19 Nov 2014 09:52:24 (GMT +05:00)
Message 65161521 enqueued on incoming connection (ICID 59143385) from [email protected].
19 Nov 2014 09:52:24 (GMT +05:00)
Message 65161521 on incoming connection (ICID 59143385) added recipient ([email protected]).
19 Nov 2014 09:52:24 (GMT +05:00)
Message 65161521 contains message ID header '<6C67A08179394CEA891EBF61D105B938@User-PC>'.
19 Nov 2014 09:52:24 (GMT +05:00)
Message 65161521 original subject on injection: Envasado y Empaque de Alimentos y Bebidas
19 Nov 2014 09:52:24 (GMT +05:00)
Message 65161521 (29275 bytes) from [email protected] ready.
19 Nov 2014 09:52:24 (GMT +05:00)
Message 65161521 matched per-recipient policy No-spam-check for inbound mail policies.
19 Nov 2014 09:52:24 (GMT +05:00)
Message 65161521 scanned by Anti-Spam engine: SLBL. Interim verdict: Positive
19 Nov 2014 09:52:24 (GMT +05:00)
Message 65161521 scanned by Anti-Spam engine: SLBL. Final verdict: Positive
19 Nov 2014 09:52:24 (GMT +05:00)
Message 65161521 scanned by Anti-Virus engine Sophos. Interim verdict: CLEAN
19 Nov 2014 09:52:24 (GMT +05:00)
Message 65161521 scanned by Anti-Virus engine. Final verdict: Negative
19 Nov 2014 09:52:25 (GMT +05:00)
Message 65161521 scanned by Outbreak Filters. Verdict: Negative
19 Nov 2014 09:52:25 (GMT +05:00)
Message 65161521 queued for delivery.
19 Nov 2014 09:52:27 (GMT +05:00)
Remote procedure call connection (RCID 13) started for message 65161521 to local Spam Quarantine.
19 Nov 2014 09:52:28 (GMT +05:00)
Message 65161521 quarantined in Spam Quarantine.

That message got spam checked, was declared spam, so the RPC call happens to put it in the Quarantine.
19 Nov 2014 09:52:24 (GMT +05:00)
Message 65161521 scanned by Anti-Spam engine: SLBL. Interim verdict: Positive
19 Nov 2014 09:52:24 (GMT +05:00)
Message 65161521 scanned by Anti-Spam engine: SLBL. Final verdict: Positive
If you want to deliver this, either don't scan it by setting the Anti-Spam scanning to disabled, or set the action to Deliver, and maybe add something to the subject?

How to deploy a file on all users C drive via group policy

I'm trying to deploy a file on all users C drive via group policy but its not working. logon script is already kept in place but nothing is happening. If I run the same command from my pc it's working fine. Does any one have good script to copy & deploy
the file. Pls help

Hi,
You can use Group Policy Preferences to deploy this and Item-level-Targetting to filter by OUs/groups, wmi filters ,etc.
Computer Configuration / User Configuration - Preferences - Windows Settings - Files
More on this here.
http://technet.microsoft.com/en-us/library/cc772536.aspx
Hope this helps.
Regards,
Calin

RDS 2012 R2 - How do I lockdown access to Local Computer Management and Windows Backup via Group Policy

Greetings all,
I am needing assistance in how to lockdown access to Local Computer Management and Windows Backup via Group Policy for users that access RDS service. I have followed this awesome guide - h t t p://w w w.it.ltsoy.com/windows/lock-down-remote-desktop-services-server-2012/
- but it is missing two important resources that I would like to lock down.Currently, I have successfully locked down Control Panel for users via Group Policy, but I cannot find any group policy or guide on how to restrict user access
to Computer Management (different to Server Manager). When using Win-X shortcut to open the 'Administrator's shortcuts' near the windows icon, I have locked down everything except Computer Management. Computer Management gives direct access to Disk Management,
Shares etc, which are locked down for users. But Windows Server Backup is still accessible. Can someone please guide me on how to restrict access to both Computer Management and Windows Server Backup.
Thanks in advance.
Terry.

Prevent running of Windows Server Backup
Computer Configuration\Policies\Windows Settings\Security Settings\File System
Right click on File System - Add File - Drill down to \System32\wbadmin.msc
On the Database Security ACL that pops up - Remove Creator Owner, Remove Users and check Adminstrators have Full Access.
On the Object window - choose Propagate inheritable permissions to all... (Default)

Updating Existing Install and adding extensions via Group Policy

We have recently installed StarOffice 8 due a full planned move away from Microsoft Office 2003, we have deployed the CD install via group policy to test the functionality of StarOffice in a school environment. Due to a problem cropping images in Writer (cropooo 0.2.1 extension needed) we are having to update to the latest patch ver10 (300+pc's). Is there a way to automate this via GPO? We only have the standard version of staroffice 8 and not the enterprise CD so we can not make a custom transform file. Also can extensions be deployed via Group Policy? We are runnning a Windows 2k3 server with XP clients.

Network Deployment of Adobe Flash Player
I found this link http://www.adobe.com/devnet/flashplayer/articles/flash_player_admin_guide.html
It is a good idea to extract the msi the deployment data point using msiexec /a {filename} (this creates an administrative installer)
Use the extracted MSI to deploy flash. (either assigned or published)
Please make sure that the user can read from the data point you place the files.

Installing Flash Player V 10.2.153.1 Via Group Policy

Recently i tried to upgrade our existing flash player V10.2.152.32, to V 10.2.153.1 Via Group Policy.
But the group policy keep failing, during the investigation phase i have enabled logging to try to troubleshoot the installation steps, and possibly find a solution, but so far am clueless on a solution. I have included the installation log please help.
=== Logging started: 11/04/2011 15:29:46 ===
Action start 15:29:46: INSTALL.
Action start 15:29:46: ISSetAllUsers.
InstallShield 15:29:46: Begin SetAllUsers()
InstallShield 15:29:46: Getting records from Upgrade table
InstallShield 15:29:46: UpgradeCode: {42463807-970B-4257-BC95-5C348D61DF1C}    MinVersion: 6.0.0.0    MaxVersion: 10.2.153.1    Language:     Attributes: 769
InstallShield 15:29:46: Checking related product {148D9D03-5D23-4D4F-B5D0-BA6030C45DCF}
InstallShield 15:29:46:     Adobe Flash Player 10 ActiveX    {148D9D03-5D23-4D4F-B5D0-BA6030C45DCF}    1033         ***Related***
InstallShield 15:29:46: ALLUSERS of related product {148D9D03-5D23-4D4F-B5D0-BA6030C45DCF} is = 1
InstallShield 15:29:46: End SetAllUsers()
Action ended 15:29:46: ISSetAllUsers. Return value 1.
Action start 15:29:46: AppSearch.
Action ended 15:29:46: AppSearch. Return value 0.
Action start 15:29:46: LaunchConditions.
Action ended 15:29:46: LaunchConditions. Return value 1.
Action start 15:29:46: SetupInitialization.
Info 2898.For Tahoma8 textstyle, the system created a 'Tahoma' font, in 0 character set.
Info 2898.For TahomaBold10 textstyle, the system created a 'Tahoma' font, in 0 character set.
Action ended 15:29:46: SetupInitialization. Return value 1.
Action start 15:29:46: FindRelatedProducts.
Action ended 15:29:46: FindRelatedProducts. Return value 1.
Action start 15:29:46: ValidateProductID.
Action ended 15:29:46: ValidateProductID. Return value 1.
Action start 15:29:46: CostInitialize.
Action ended 15:29:46: CostInitialize. Return value 1.
Action start 15:29:46: FileCost.
Action ended 15:29:46: FileCost. Return value 1.
Action start 15:29:46: IsolateComponents.
Action ended 15:29:46: IsolateComponents. Return value 0.
Action start 15:29:46: setUserProfileNT.
Action ended 15:29:46: setUserProfileNT. Return value 1.
Action start 15:29:46: setAllUsersProfile2K.
Action ended 15:29:46: setAllUsersProfile2K. Return value 1.
Action start 15:29:46: ResolveSource.
Action ended 15:29:46: ResolveSource. Return value 1.
Action start 15:29:46: CostFinalize.
Action ended 15:29:46: CostFinalize. Return value 1.
Action start 15:29:46: MigrateFeatureStates.
Action ended 15:29:46: MigrateFeatureStates. Return value 1.
Action start 15:29:46: InstallWelcome.
Action ended 15:29:48: InstallWelcome. Return value 1.
Action start 15:29:48: SetupProgress.
Info 2898.For MSSansBold8 textstyle, the system created a 'Tahoma' font, in 0 character set.
Info 2898.For MSSWhiteSerif8 textstyle, the system created a 'Tahoma' font, in 0 character set.
Action ended 15:29:48: SetupProgress. Return value 1.
Action start 15:29:48: ExecuteAction.
Action start 15:29:49: INSTALL.
Action start 15:29:49: ISSetAllUsers.
Action ended 15:29:49: ISSetAllUsers. Return value 0.
Action start 15:29:49: AppSearch.
Action ended 15:29:49: AppSearch. Return value 0.
Action start 15:29:49: LaunchConditions.
Action ended 15:29:49: LaunchConditions. Return value 1.
Action start 15:29:49: FindRelatedProducts.
Action ended 15:29:49: FindRelatedProducts. Return value 0.
Action start 15:29:49: ValidateProductID.
Action ended 15:29:49: ValidateProductID. Return value 1.
Action start 15:29:49: CostInitialize.
Action ended 15:29:49: CostInitialize. Return value 1.
Action start 15:29:49: FileCost.
Action ended 15:29:49: FileCost. Return value 1.
Action start 15:29:49: IsolateComponents.
Action ended 15:29:49: IsolateComponents. Return value 0.
Action start 15:29:49: CostFinalize.
Action ended 15:29:49: CostFinalize. Return value 1.
Action start 15:29:49: SetARPINSTALLLOCATION.
Action ended 15:29:49: SetARPINSTALLLOCATION. Return value 1.
Action start 15:29:49: SetODBCFolders.
Action ended 15:29:49: SetODBCFolders. Return value 0.
Action start 15:29:49: MigrateFeatureStates.
Action ended 15:29:49: MigrateFeatureStates. Return value 0.
Action start 15:29:49: InstallValidate.
Action ended 15:29:49: InstallValidate. Return value 1.
Action start 15:29:49: RemoveExistingProducts.
Action start 15:29:49: INSTALL.
Action start 15:29:49: ISSetAllUsers.
InstallShield 15:29:49: Begin SetAllUsers()
InstallShield 15:29:49: Getting records from Upgrade table
InstallShield 15:29:49: UpgradeCode: {42463807-970B-4257-BC95-5C348D61DF1C}    MinVersion: 6.0.0.0    MaxVersion: 10.1.102.64    Language:     Attributes: 769
InstallShield 15:29:49: Checking related product {148D9D03-5D23-4D4F-B5D0-BA6030C45DCF}
InstallShield 15:29:49:     Adobe Flash Player 10 ActiveX    {148D9D03-5D23-4D4F-B5D0-BA6030C45DCF}    1033         ***Related***
InstallShield 15:29:49: ALLUSERS of related product {148D9D03-5D23-4D4F-B5D0-BA6030C45DCF} is = 1
InstallShield 15:29:49: End SetAllUsers()
Action ended 15:29:49: ISSetAllUsers. Return value 1.
Action start 15:29:49: AppSearch.
Action ended 15:29:49: AppSearch. Return value 0.
Action start 15:29:49: LaunchConditions.
Action ended 15:29:49: LaunchConditions. Return value 1.
Action start 15:29:49: FindRelatedProducts.
Action ended 15:29:49: FindRelatedProducts. Return value 1.
Action start 15:29:49: ValidateProductID.
Action ended 15:29:49: ValidateProductID. Return value 1.
Action start 15:29:49: CostInitialize.
Action ended 15:29:49: CostInitialize. Return value 1.
Action start 15:29:49: FileCost.
Action ended 15:29:49: FileCost. Return value 1.
Action start 15:29:49: IsolateComponents.
Action ended 15:29:49: IsolateComponents. Return value 0.
Action start 15:29:49: CostFinalize.
Action ended 15:29:49: CostFinalize. Return value 1.
Action start 15:29:49: SetARPINSTALLLOCATION.
Action ended 15:29:49: SetARPINSTALLLOCATION. Return value 1.
Action start 15:29:49: SetODBCFolders.
Action ended 15:29:49: SetODBCFolders. Return value 0.
Action start 15:29:49: MigrateFeatureStates.
Action ended 15:29:49: MigrateFeatureStates. Return value 0.
Action start 15:29:49: InstallValidate.
Action ended 15:29:49: InstallValidate. Return value 1.
Action start 15:29:49: RemoveExistingProducts.
Action ended 15:29:49: RemoveExistingProducts. Return value 0.
Action start 15:29:49: InstallInitialize.
Action ended 15:29:54: InstallInitialize. Return value 1.
Action start 15:29:54: CallExeUninstaller.
Action ended 15:29:54: CallExeUninstaller. Return value 1.
Action start 15:29:54: MakePropsAvailable.
Action ended 15:29:54: MakePropsAvailable. Return value 1.
Action start 15:29:54: AllocateRegistrySpace.
Action ended 15:29:54: AllocateRegistrySpace. Return value 1.
Action start 15:29:54: ProcessComponents.
Action ended 15:29:54: ProcessComponents. Return value 1.
Action start 15:29:54: UnpublishComponents.
Action ended 15:29:54: UnpublishComponents. Return value 0.
Action start 15:29:54: UnpublishFeatures.
Action ended 15:29:54: UnpublishFeatures. Return value 1.
Action start 15:29:54: StopServices.
Action ended 15:29:54: StopServices. Return value 1.
Action start 15:29:54: DeleteServices.
Action ended 15:29:54: DeleteServices. Return value 1.
Action start 15:29:54: UnregisterComPlus.
Action ended 15:29:54: SelfUnregModules. Return value 1.
Action start 15:29:54: SelfUnregModules.
Action ended 15:29:54: SelfUnregModules. Return value 1.
Action start 15:29:54: UnregisterTypeLibraries.
Action ended 15:29:54: UnregisterTypeLibraries. Return value 0.
Action start 15:29:54: RemoveODBC.
Action ended 15:29:54: RemoveODBC. Return value 1.
Action start 15:29:54: UnregisterFonts.
Action ended 15:29:54: UnregisterFonts. Return value 1.
Action start 15:29:54: RemoveRegistryValues.
Action ended 15:29:54: RemoveRegistryValues. Return value 1.
Action start 15:29:54: UnregisterClassInfo.
Action ended 15:29:54: UnregisterClassInfo. Return value 0.
Action start 15:29:54: UnregisterExtensionInfo.
Action ended 15:29:54: UnregisterExtensionInfo. Return value 0.
Action start 15:29:54: UnregisterProgIdInfo.
Action ended 15:29:54: UnregisterProgIdInfo. Return value 0.
Action start 15:29:54: UnregisterMIMEInfo.
     7 Action ended 15:29:54: RemoveIniValues. Return value 1 Action start 15:29:54: RemoveShortcuts.
Action ended 15:29:54: RemoveIniValues. Return value 1.
Action start 15:29:54: RemoveShortcuts.
Action ended 15:29:54: RemoveShortcuts. Return value 0.
Action start 15:29:54: RemoveEnvironmentStrings.
Action ended 15:29:54: RemoveEnvironmentStrings. Return value 1.
Action start 15:29:54: RemoveDuplicateFiles.
Action ended 15:29:54: RemoveDuplicateFiles. Return value 1.
Action start 15:29:54: RemoveFolders.
Action ended 15:29:54: RemoveFolders. Return value 1.
Action start 15:29:54: CreateFolders.
Action ended 15:29:54: CreateFolders. Return value 1.
Action start 15:29:54: MoveFiles.
   tion ended 15:29:54: MoveFiles. Return value 1.
Action start 15:29:54: InstallFiles.
Action ended 15:29:54: InstallFiles. Return value 1.
Action start 15:29:54: NewCustomAction1.
Info 2835.The control ErrorIcon was not found on dialog SetupError.
Error 2753.The File 'InstallAX.exe' is not marked for installation.
MSI (s) (3C:70) [15:29:56:473]: Product: Adobe Flash Player 10 ActiveX -- Error 2753.The File 'InstallAX.exe' is not marked for installation.
Action ended 15:29:56: NewCustomAction1. Return value 3.
Action ended 15:29:56: INSTALL. Return value 3.
Action ended 15:29:56: RemoveExistingProducts. Return value 3.
Action ended 15:29:56: INSTALL. Return value 3.
Action ended 15:29:56: ExecuteAction. Return value 3.
Action start 15:29:56: SetupCompleteError.
Action ended 15:29:57: SetupCompleteError. Return value 2.
Action ended 15:29:57: INSTALL. Return value 3.
=== Logging stopped: 11/04/2011 15:29:57 ===
MSI (c) (40:60) [15:29:57:692]: Product: Adobe Flash Player 10 ActiveX -- Installation operation failed.
MSI (c) (40:60) [15:29:57:692]: Windows Installer installed the product. Product Name: Adobe Flash Player 10 ActiveX. Product Version: 10.2.153.1. Product Language: 1033. Installation success or error status: 1603.
========================================================================================== ========================
Please note that i have unloaded the antivirus and conducted the installation with no luck.

Today i have tried installing flash manually via the web interface that worked fine. im not sure now if the MSI file provided by adobe is faulty. can someone please explain.
Manuall install is not a solution for me as i have over 300 machine that i need to deploy flash to.

Automatic Windows Update via Group Policy in Windows 8

Hi,
I have created a new GPO to place some settings on the Automatic Update to all my client pcs. The settings applied as the image i uploaded below. The problem is that this GPO were successfully applied to all my Windows 7 machine but not Windows 8.1 machines.
Is there anything that i missed or i should know about Windows 8.1 automatic update configuration via Group Policy?. I've tried to google but cant find any guidance that relates. I'm not using WSUS. Appreciates any advise. Thanks.
Cheers, Sparcx [MCTS,MCITP-EA]

Hi Leon, yes i have read the blog that you gave, It says that Windows 8 requires a KB update to roll the changes that will solve this issue. However its also said that the update is included in Windows 8.1 and there's no need to update to solve the Automatic
Update behaviour via Group Policy as mentioned. Also tried to apply the KB update suggested, but failed. It is not for Windows 8.1 platform. Is there any other suggestion? I kinda stuck here..
Cheers, Sparcx [MCTS,MCITP-EA]

How to control IE10's "Compatibility View settings" via Group Policy

First
of all thanks for taking the time to read this. I must let you know that I have limited experience with Group Policy so here it goes...
Domain Controllers are 2008 R2 Datacenter and client computers are Win7 Pro with IE10
I need to add several sites to the "Compatibility View settings" in IE10 and have these pushed out via Group Policy.
I followed this to enable the "Use Policy List of Internet Explorer 7 sites:"
Use
Policy List of Internet Explorer 7 sites
I even added the settings to both User Configuration as well as Computer Configuration. However the computers on the domain wouldn't show these sites in
IE even after forcing a GP update (gpupdate /force)
Yes I did use top level domain names.
Next I installed the Administrative Templates for Windows Internet Explorer 10 on the DC:
Administrative Templates for Windows Internet Explorer 10
this gave me an Inetres.adm file while I put in the same location as my other .adm files that Group Policy Manager sees (located at C:\Windows\SYSVOL\domain\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\Adm)
I do see a bunch of .ADMX files located at C:\Windows\PolicyDefinitions
on the DC. I also see a lot of .ADML files located at C:\Windows\PolicyDefinitions\en-US.
Where is my Central Store located that my Group Policy references? How do I know what location GP is reading from?
Now I installed the Administrative Templates (ADMX) for Windows Server 2008 R2 and Windows 7 from here:
Administrative Templates (ADMX) for Windows Server 2008 R2 and
Windows 7
This gave me a "Win7-2008R2-admx.msi" package that I installed. I took the defaults and extracted contents to:
C:\Windows\PolicyDefinitions\Server 2008 Win7\PolicyDefinitions
Are all of these .ADMX files supposed to be placed into my Central Store?
If I mouse-over "Administrative Templates" in Group Policy Manager is says that the policy definitions are retrieved from the local machine.
I then right-clicked on top of "Administrative
Templates" in Group Policy Manager and highlighted Inetres and selected Delete.
While in Add/Remove Templates I click on Add and it defaults to looking for "Policy Templates" and will not let me select and .ADM/.ADML/.ADMX files.
What am I doing wrong here?
How do I know that I'm using the most recent Inetres file?
How do I know which file Group Policy Manager is using to manage the IE settings that are in:
User Configuration->Administrative Templates->Windows Components->Internet Explorer->Compatibility View->Use Policy List of Internet
Explorer 7 sites
or
Computer Configuration->Administrative Templates->Windows Components->Internet Explorer->Compatibility View->Use Policy List of
Internet Explorer 7 sites.
Is there anything else you can suggest?
Many, many thanks in advance for any response

Hi,
Regarding your question, usually we create a Central Store for Administrative Templates (Both .admx and .adml files), and create a folder that is named PolicyDefinitions in the following location:
\\FQDN\SYSVOL\FQDN\policies. The .adml files on the Windows computer
are stored in a language-specific folder. For example, English (United States) .adml files are stored in a folder that is named "en-US." When you have copied all .admx and .adml files, the PolicyDefinitions folder on the domain controller should contain the
.admx files and one or more folders that contain language-specific .adml files.
Please refer to the following articles. You will get more helpful details about the Central Store for Group Policy Administrative Template files.
How to create the Central Store for Group Policy Administrative Template files in Windows Vista
http://support.microsoft.com/kb/929841
Windows 7, Windows Server 2008 R2 and the Group Policy Central Store
http://blogs.technet.com/b/askds/archive/2009/12/09/windows-7-windows-server-2008-r2-and-the-group-policy-central-store.aspx
Based on your description, I understand you enable the setting “Use Policy List of Internet Explorer 7 sites”. However, didn’t show any sites in IE in client even after forcing a GP update
(gpupdate /force). Please use command “gpresult” in clients to collect the GPOs, and then check whether the GPO contain the setting “Use Policy List of Internet Explorer 7 sites” was applied to clients or wasn’t.
In addition, you also can change the related setting by using registry directly.
Follow the path of the registry:
HKEY_CURRENT_USER->Software->Policies->Microsoft->Internet Explorer->BrowserEmulation->PolicyList. (Create registry folders
manually if not present)
Right Click
PolicyList ->New->String Value->Enter the name of the website. (Both under ‘Name’ and ‘Data’. For example,
Value name: example.com Value data: example.com)
There is a similar question, please read as a reference.
Add manually URL on Compatibility View List in IE10
http://social.msdn.microsoft.com/Forums/ie/en-US/5a15e861-d106-471e-a968-fdea15e31c45/add-manually-url-on-compatibility-view-list-in-ie10
Hope this helps.
Best regards,
Justin Gu

Is there a way to deploy Adobe Air package via Group Policy or SCCM?

Is there a way to deploy Adobe Air package via Group Policy or SCCM?

hi,
I guess you can try the following options
Remove the all the entry from the TOC of your project or create a new blank TOC and select that while AIR file generation
Remove the all the entry from the index of your project or create a new blank index and select that while AIR file generation
Remove the all the entry from the glossary of your project or create a new blank glossary file and select that while AIR file generation
THis will ensure that TOC/Index/Glossary page is not shown,
There is no way to hide Favorite or RSS from the AIR Help. Again, you can try looking at the Unipane Template provided in the AIR SSL Dialog.
Hope this helps
-Praful Jain

Can Adobe Air 3.1 be deployed via Group Policy?

I am looking for a definitive answer as to whether or not Adobe Air 3.1 can be deployed via Group Policy? I've found material on the web that is very contradictory. Can it be done and if so how? I can't find any solid instructions on how to deploy this application and need to have it installed on about 60 desktops.
We are trying to deploy the Salesforce.com Desktop Chatter application. Any helpful info is greatly appreciated.
Thanks!

Hi Kevin,
I replied via email yesterday, but in case anyone else is following along here's what I said:
For GPO deployment, we don't officially "support" it (ie. we don't test for it internally), however I did run across this recent post where an admin had success.
http://www.appdeploy.com/packages/detail.asp?id=2339
Hope this helps,
Chris

Disable Private Browsing via Group policy

We are a medium sized business using Firefox 27.0.1. I have been looking for a way to control private browsing via group policy for a while but there are no clear answers on how a system administrator can do this without a convoluted process of editing files that can't be found anywhere on a computer.
Our environment:
windows 2008 DC
using group policy
500 users, all windows
Do not use any proxy or L7 filtering
I've looked into using the adm file that is available from the link below. I've sifted through the code and followed instructions for the lockdown process for Computer and User configuration; however, nothing works.
http://4sysops.com/archives/group-policy-for-firefox-and-chrome/#download-the-adm-files
If someone can point me to a registry entry or a vbs file that can be used as a start up script, it would be greatly appreciated by myself and all the system administrators of the world that are trying to decrease private browsing in organizations.
Between the 3 major browsers we are using on our Windows platform (IE, Chrome Firefox); Firefox seems to be a challenge to control. I have been successful in controlling settings via group policy for the other two. I'm working on a cumulative step by step document for this and will share with the world when I am able to configure Firefox.

Thanks for those suggestions; however, they don't help sysadmins that already have the non-enterprise version in their environment. From what I gather, there really isn't a straightforward way of doing this via group policy in a Windows environment without first removing the app and then deploying it with customizations (using tools suggested).
I guess I'll go with the answer "No, there isn't a straighforward way of controlling Firefox through Group policy".

Mail redirection via Mail policy / filter

Similar Messages

Maybe you are looking for