Metric and Policy settings

I'm wondering if anyone has a good documentation on Metric and Policy Setting. There are metrics that I see in All Metrics that are not set but I can't find that metric in Metric and Policy Setting to set it.

Please refer below links
http://www.oracle.com/technology/obe/obe10gemgc/monitoring/monitoring.html
http://oracle.su/server.111/b28275/tdppt_alerts.htm
Hope this helps.
Regards,
Satishbabu Gunukula
Click here to improve[ RMAN backup Performance |http://oracleracexpert.blogspot.com/2009/09/block-change-tracking-in-oracle-10g.html]
Click here for steps to [Install Oracle 10g Grid Control and ASMLib|http://oracleracexpert.blogspot.com/2009/08/download-oracle-grid-control-and-asmlib.html]
http://oracleracexpert.blogspot.com
Edited by: Satishbabu Gunukula on Sep 1, 2009 8:55 PM

Similar Messages

Issue with HOST "metric and policy settings"

Hi All,
I have a OMS and EM Reporsitory installed on a linux machine I have connected four agents(4 hosts) to this grid control. For one perticular host I could not see any predefined metrics. The steps I followed are I have opened a host and went to "Metric and Policy Settings" and there I could not see any predefined metrics like Log file patteren match metrics and CPU utilization metric etc. For checking I have access "All Metrics" option there I can see all predefined metrics but their "collection Schedule" set to Real time-only. I think this is reason why I am not able to see these metrics in "Metric and Policy settings" for customization. How can change the Collection Schedule of these metric. This case is only for that perticular host other hosts are fine and showing metrics and allowing me to customize thresholds values.
As someone suggested I stopped and cleared the state of the agent and then started the agent again but the problem is not solved. Please suggest me a solution.
Regards,
Ashok Chava

You could create a MONITORING TEMPLATE of the metrics you want to collect and base it off of a host that has the Metric and Policy Settings SET and apply it to this perticular host.
Have you checked Setup> Management Pack Access> for HOSTS?

Applying Metric and Policy Settings globally

Hi,
I wish to remove some Metric and Policy Settings globally.
Example: I want to remove monitoring for percentage of space left in tablespaces. Instead, I want to make all tablespaces auto-extensible and only monitor disk space.
I don't want to go into the configuration of each and every database in order to do this. There must be a way to globally remove out-of-box configurations and globally add a custom configured one, or is that not true?
Thank you for any insights!
Maria

It disappears only because there is a drop down at the top that says to filter "metrics with thresholds" just switch that to "All metrics" and you will see the blank ones again. As for the disabling a collection. A collection is used for many metrics. When you go to disable a metric collection, by clicking on the link for "Every 15 minutes" (for example). It will list all of the metrics that you will no longer collect data for.
Again, I would suggest not stopping the collection, and simply blanking out the thesholds. Thats the way it was designed.
Eg. Disabling Archive space used collection will disable the following other metrics:
Archive Area Used (%)
Archive Area Used (KB)
Dump Area Directory
Dump Area Used (%)
Dump Area Used (KB)
Free Archive Area (KB)
Free Dump Area (KB)
Total Archive Area (KB)
Total Dump Area (KB)

12c - List of Metric and Polciy Settings.

I am doing research on 12c OEM, specifically what is monitored. What is the "Mertrics and Policy Settings" section in 12g.
http://docs.oracle.com/cd/E24628_01/doc.121/e24473/toc.htm is the main Cloud Admiins Guide but could not see what I am looking for in there.
Any links or tips would be welcome
Ta
MN

Hi,
I am not sure I understand exactly what you are looking for, but I will give a try. If you are looking for information on the "Metric and Policy Settings" page, it no longer exists in EM 12c.
Metric reference manuals are available here:
http://docs.oracle.com/cd/E24628_01/nav/reference.htm
In EM 12c, Compliance Standards replace metric policies. For information on Compliance see:
http://docs.oracle.com/cd/E24628_01/em.121/e27046/compliance_lcm.htm#CIAIICAF
Regards,
- Loc

How to remove ALL metric and policy alerts in EM Grid Control

Hi,
does anyone know how to clear all metric AND policy alerts in EM GC?

See this thread..
Clear the Alert list

Powershell export User properties and policy settings

is there a Powershell script "out-there" that export and import all the user properties from the User Profile service Application - including their individual placement on the various sections (contact, basic, details etc), and also including their
policy settings (only me /everyone/replicate settings) - basic all the settings - and if the AD mapping is there as weel it would be nice...
So I can export from environment A and then import them to environment B... ?

Did you try this blog:
POWERSHELL TO EXPORT / QUERY ALL USER PROFILE PROPERTIES AND AD MAPPINGS
http://www.sharepointfix.com/2012/01/powershell-script-to-print-user-profile.html
also
SharePoint 2010: Updating User Profile Properties with PowerShell
Please remember to mark your question as answered &Vote helpful,if this solves/helps your problem. ****************************************************************************************** Thanks -WS MCITP(SharePoint 2010, 2013) Blog: http://wscheema.com/blog

Description for Each Database Metric and Policy of OEM 10g

Hi Dba's,
Thanks for having a look into this thread. I am looking for some Oracle online description for the Metrics as well as Policies it has defined in OEM 10g 10.2.0.3.0. Grid.

Metrics
http://download.oracle.com/docs/cd/B16240_01/doc/em.102/b25986/toc.htm
http://download.oracle.com/docs/cd/B16240_01/doc/em.102/b16230/toc.htm
Policy
http://download.oracle.com/docs/cd/B16240_01/doc/em.102/b16231/toc.htm
All
http://download.oracle.com/docs/cd/B16240_01/doc/nav/portal_booklist.htm

Event ID 1085 on DC - Failed to Apply the Group Policy Local Users and Groups Settings

I have a domain with 2 DCs. The primary DC is running Server 2012 and is raising Event ID 1085 every 10 minutes and 20 seconds.
Windows failed to apply the Group Policy Local Users and Groups settings. Group Policy Local Users and Groups settings might have its own log file. Please click on the "More information" link.
System
- Provider
[ Name] Microsoft-Windows-GroupPolicy
[ Guid] {AEA1B4FA-97D1-45F2-A64C-4D69FFFD92C9}
EventID 1085
Version 0
Level 3
Task 0
Opcode 1
Keywords 0x8000000000000000
- TimeCreated
[ SystemTime] 2014-10-20T20:09:03.706992400Z
EventRecordID 130087
- Correlation
[ ActivityID] {FDDFB8C5-9ECF-41B9-B2B4-3AD0B345A37A}
- Execution
[ ProcessID] 1000
[ ThreadID] 3280
Channel System
Computer SERVER.DOMAIN.NAME
- Security
[ UserID] S-1-5-18
- EventData
SupportInfo1 1
SupportInfo2 4404
ProcessingMode 0
ProcessingTimeInMilliseconds 10343
ErrorCode 183
ErrorDescription Cannot create a file when that file already exists.
DCName \\SERVER.DOMAIN.name
ExtensionName Group Policy Local Users and Groups
ExtensionId {17D89FEC-5C44-4972-B12D-241CAEF74509}
Everything I look up for Event ID 1085 seems to be about a different cause.
Any ideas?

I enabled tracing on a domain gpo and I still get the error when running gpupdate /force .
I'm also still getting Event 1085. Here's the trace file. I've anonymized the site/domain and the GUIDs.
2014-10-21 11:16:54.003 [pid=0x3e8,tid=0xcd0] Entering ProcessGroupPolicyExLocUsAndGroups()
2014-10-21 11:16:54.018 [pid=0x3e8,tid=0xcd0] SOFTWARE\Policies\Microsoft\Windows\Group Policy\{GUID-1}
2014-10-21 11:16:54.018 [pid=0x3e8,tid=0xcd0] BackgroundPriorityLevel ( 0 )
2014-10-21 11:16:54.018 [pid=0x3e8,tid=0xcd0] DisableRSoP ( 0 )
2014-10-21 11:16:54.018 [pid=0x3e8,tid=0xcd0] LogLevel ( 2 )
2014-10-21 11:16:54.018 [pid=0x3e8,tid=0xcd0] Command subsystem initialized. [SUCCEEDED(S_FALSE)]
2014-10-21 11:16:54.065 [pid=0x3e8,tid=0xcd0] Background priority set to 0 (Idle).
2014-10-21 11:16:54.065 [pid=0x3e8,tid=0xcd0] ----- Parameters
2014-10-21 11:16:54.065 [pid=0x3e8,tid=0xcd0] CSE GUID : {GUID-1}
2014-10-21 11:16:54.065 [pid=0x3e8,tid=0xcd0] Flags : ( X ) GPO_INFO_FLAG_MACHINE - Apply machine policy rather than user policy
2014-10-21 11:16:54.065 [pid=0x3e8,tid=0xcd0] ( X ) GPO_INFO_FLAG_BACKGROUND - Background refresh of policy (ok to do slow stuff)
2014-10-21 11:16:54.065 [pid=0x3e8,tid=0xcd0] ( ) GPO_INFO_FLAG_SLOWLINK - Policy is being applied across a slow link
2014-10-21 11:16:54.065 [pid=0x3e8,tid=0xcd0] ( ) GPO_INFO_FLAG_VERBOSE - Verbose output to the eventlog
2014-10-21 11:16:54.065 [pid=0x3e8,tid=0xcd0] ( ) GPO_INFO_FLAG_NOCHANGES - No changes were detected to the Group Policy Objects
2014-10-21 11:16:54.065 [pid=0x3e8,tid=0xcd0] ( ) GPO_INFO_FLAG_LINKTRANSITION - A change in link speed was detected between previous policy application and current policy application
2014-10-21 11:16:54.065 [pid=0x3e8,tid=0xcd0] ( ) GPO_INFO_FLAG_LOGRSOP_TRANSITION - A change in RSoP logging was detected between the application of the previous policy and the application of the current policy.
2014-10-21 11:16:54.065 [pid=0x3e8,tid=0xcd0] ( X ) GPO_INFO_FLAG_FORCED_REFRESH - Forced Refresh is being applied. redo policies.
2014-10-21 11:16:54.081 [pid=0x3e8,tid=0xcd0] ( ) GPO_INFO_FLAG_SAFEMODE_BOOT - windows safe mode boot flag
2014-10-21 11:16:54.081 [pid=0x3e8,tid=0xcd0] ( ) GPO_INFO_FLAG_ASYNC_FOREGROUND - Asynchronous foreground refresh of policy
2014-10-21 11:16:54.081 [pid=0x3e8,tid=0xcd0] Token (computer or user SID): S-1-5-18
2014-10-21 11:16:54.081 [pid=0x3e8,tid=0xcd0] Abort Flag : Yes (0x313be090)
2014-10-21 11:16:54.081 [pid=0x3e8,tid=0xcd0] HKey Root : Yes (0x80000002)
2014-10-21 11:16:54.081 [pid=0x3e8,tid=0xcd0] Deleted GPO List : No
2014-10-21 11:16:54.081 [pid=0x3e8,tid=0xcd0] Changed GPO List : Yes
2014-10-21 11:16:54.081 [pid=0x3e8,tid=0xcd0] Asynchronous Processing : Yes
2014-10-21 11:16:54.081 [pid=0x3e8,tid=0xcd0] Status Callback : No (0x00000000)
2014-10-21 11:16:54.081 [pid=0x3e8,tid=0xcd0] WMI namespace : Yes (0x32273740)
2014-10-21 11:16:54.081 [pid=0x3e8,tid=0xcd0] RSoP Status : Yes (0x320cc7f4)
2014-10-21 11:16:54.081 [pid=0x3e8,tid=0xcd0] Planning Mode Site : (none)
2014-10-21 11:16:54.081 [pid=0x3e8,tid=0xcd0] Computer Target : No (0x00000000)
2014-10-21 11:16:54.081 [pid=0x3e8,tid=0xcd0] User Target : No (0x00000000)
2014-10-21 11:16:54.081 [pid=0x3e8,tid=0xcd0] Calculated list relevance. [SUCCEEDED(S_FALSE)]
2014-10-21 11:16:54.081 [pid=0x3e8,tid=0xcd0] ----- Changed - 0
2014-10-21 11:16:54.081 [pid=0x3e8,tid=0xcd0] Options : ( ) GPO_FLAG_DISABLE - This GPO is disabled.
2014-10-21 11:16:54.081 [pid=0x3e8,tid=0xcd0] ( ) GPO_FLAG_FORCE - Do not override the settings in this GPO with settings in a subsequent GPO.
2014-10-21 11:16:54.081 [pid=0x3e8,tid=0xcd0] Options (raw) : 0x00000000
2014-10-21 11:16:54.081 [pid=0x3e8,tid=0xcd0] Version : 19267878 (0x01260126)
2014-10-21 11:16:54.081 [pid=0x3e8,tid=0xcd0] GPC : LDAP://CN=Machine,CN={GUID-2},CN=Policies,CN=System,DC=SITE,DC=DOMAIN
2014-10-21 11:16:54.081 [pid=0x3e8,tid=0xcd0] GPT : \\SITE.DOMAIN\sysvol\SITE.DOMAIN\Policies\{GUID-2}\Machine
2014-10-21 11:16:54.081 [pid=0x3e8,tid=0xcd0] GPO Display Name : Default Domain Policy
2014-10-21 11:16:54.081 [pid=0x3e8,tid=0xcd0] GPO Name : {GUID-2}
2014-10-21 11:16:54.081 [pid=0x3e8,tid=0xcd0] GPO Link : ( ) GPLinkUnknown - No link information is available.
2014-10-21 11:16:54.081 [pid=0x3e8,tid=0xcd0] ( ) GPLinkMachine - The GPO is linked to a computer (local or remote).
2014-10-21 11:16:54.081 [pid=0x3e8,tid=0xcd0] ( ) GPLinkSite - The GPO is linked to a site.
2014-10-21 11:16:54.081 [pid=0x3e8,tid=0xcd0] ( X ) GPLinkDomain - The GPO is linked to a domain.
2014-10-21 11:16:54.081 [pid=0x3e8,tid=0xcd0] ( ) GPLinkOrganizationalUnit - The GPO is linked to an organizational unit.
2014-10-21 11:16:54.081 [pid=0x3e8,tid=0xcd0] ( ) GP Link Error
2014-10-21 11:16:54.096 [pid=0x3e8,tid=0xcd0] lParam : 0x00000000
2014-10-21 11:16:54.096 [pid=0x3e8,tid=0xcd0] Prev GPO : No
2014-10-21 11:16:54.096 [pid=0x3e8,tid=0xcd0] Next GPO : Yes
2014-10-21 11:16:54.096 [pid=0x3e8,tid=0xcd0] Extensions : [{00000000-0000-0000-0000-000000000000}{GUID-3}][{GUID-1}{GUID-3}][{GUID-4}{GUID-5}{GUID-6}{GUID-7}{GUID-8}][{GUID-9}{GUID-10}][{GUID-11}{GUID-5}{GUID-6}]
2014-10-21 11:16:54.096 [pid=0x3e8,tid=0xcd0] lParam2 : 0x3146f978
2014-10-21 11:16:54.096 [pid=0x3e8,tid=0xcd0] Link : LDAP://DC=SITE,DC=DOMAIN
2014-10-21 11:16:54.096 [pid=0x3e8,tid=0xcd0] Purge GPH : C:\ProgramData\Microsoft\Group Policy\History\{GUID-2}\Machine\Preferences\Groups\Groups.xml
2014-10-21 11:16:54.096 [pid=0x3e8,tid=0xcd0] Read GPE XML data file (592 bytes total).
2014-10-21 11:16:54.112 [pid=0x3e8,tid=0xcd0] ----- Changed - 1
2014-10-21 11:16:54.112 [pid=0x3e8,tid=0xcd0] Options : ( ) GPO_FLAG_DISABLE - This GPO is disabled.
2014-10-21 11:16:54.112 [pid=0x3e8,tid=0xcd0] ( ) GPO_FLAG_FORCE - Do not override the settings in this GPO with settings in a subsequent GPO.
2014-10-21 11:16:54.112 [pid=0x3e8,tid=0xcd0] Options (raw) : 0x00000000
2014-10-21 11:16:54.112 [pid=0x3e8,tid=0xcd0] Version : 1245203 (0x00130013)
2014-10-21 11:16:54.112 [pid=0x3e8,tid=0xcd0] GPC : LDAP://CN=Machine,CN={GUID-12},CN=Policies,CN=System,DC=SITE,DC=DOMAIN
2014-10-21 11:16:54.112 [pid=0x3e8,tid=0xcd0] GPT : \\SITE.DOMAIN\sysvol\SITE.DOMAIN\Policies\{GUID-12}\Machine
2014-10-21 11:16:54.112 [pid=0x3e8,tid=0xcd0] GPO Display Name : Default Domain Controllers Policy
2014-10-21 11:16:54.112 [pid=0x3e8,tid=0xcd0] GPO Name : {GUID-12}
2014-10-21 11:16:54.112 [pid=0x3e8,tid=0xcd0] GPO Link : ( ) GPLinkUnknown - No link information is available.
2014-10-21 11:16:54.112 [pid=0x3e8,tid=0xcd0] ( ) GPLinkMachine - The GPO is linked to a computer (local or remote).
2014-10-21 11:16:54.112 [pid=0x3e8,tid=0xcd0] ( ) GPLinkSite - The GPO is linked to a site.
2014-10-21 11:16:54.112 [pid=0x3e8,tid=0xcd0] ( ) GPLinkDomain - The GPO is linked to a domain.
2014-10-21 11:16:54.112 [pid=0x3e8,tid=0xcd0] ( X ) GPLinkOrganizationalUnit - The GPO is linked to an organizational unit.
2014-10-21 11:16:54.112 [pid=0x3e8,tid=0xcd0] ( ) GP Link Error
2014-10-21 11:16:54.112 [pid=0x3e8,tid=0xcd0] lParam : 0x00000000
2014-10-21 11:16:54.112 [pid=0x3e8,tid=0xcd0] Prev GPO : Yes
2014-10-21 11:16:54.112 [pid=0x3e8,tid=0xcd0] Next GPO : No
2014-10-21 11:16:54.112 [pid=0x3e8,tid=0xcd0] Extensions : [{00000000-0000-0000-0000-000000000000}{GUID-3}][{GUID-1}{GUID-3}][{GUID-9}{GUID-10}]
2014-10-21 11:16:54.112 [pid=0x3e8,tid=0xcd0] lParam2 : 0x324e8198
2014-10-21 11:16:54.112 [pid=0x3e8,tid=0xcd0] Link : LDAP://OU=Domain Controllers,DC=SITE,DC=DOMAIN
2014-10-21 11:16:54.127 [pid=0x3e8,tid=0xcd0] Purge GPH : C:\ProgramData\Microsoft\Group Policy\History\{GUID-12}\Machine\Preferences\Groups\Groups.xml
2014-10-21 11:16:54.127 [pid=0x3e8,tid=0xcd0] Read GPE XML data file (592 bytes total).
2014-10-21 11:16:54.143 [pid=0x3e8,tid=0xcd0] Completed get next GPO. [SUCCEEDED(S_FALSE)]
2014-10-21 11:16:54.143 [pid=0x3e8,tid=0xcd0] WQL : SELECT * FROM RSOP_PolmkrSetting WHERE polmkrBaseCseGuid = "{GUID-1}"
2014-10-21 11:16:54.143 [pid=0x3e8,tid=0xcd0] Purged 2 old RSoP entries.
2014-10-21 11:16:54.143 [pid=0x3e8,tid=0xcd0] Logging 2 new RSoP entries.
2014-10-21 11:16:54.159 [pid=0x3e8,tid=0xcd0] RSoP Entry 0
2014-10-21 11:16:54.174 [pid=0x3e8,tid=0xcd0] RSoP Entry 1
2014-10-21 11:16:54.174 [pid=0x3e8,tid=0xcd0] Completed get GPO list. [SUCCEEDED(S_FALSE)]
2014-10-21 11:16:54.174 [pid=0x3e8,tid=0xcd0] IsRsopPlanningMode() [SUCCEEDED(S_FALSE)]
2014-10-21 11:17:04.252 [pid=0x3e8,tid=0xcd0] Completed settings update (csePostProcess). [ hr = 0x800700b7 "Cannot create a file when that file already exists." ]
2014-10-21 11:17:04.252 [pid=0x3e8,tid=0xcd0] Completed CSE post-processing. [ hr = 0x800700b7 "Cannot create a file when that file already exists." ]
2014-10-21 11:17:04.267 [pid=0x3e8,tid=0xcd0] Leaving ProcessGroupPolicyExLocUsAndGroups() returned 0x000000b7

Issue with UAG/TMG communication to published SharePoint application is blocked by access policy settings

We have a UAG/TMG server set up with SharePoint published. The UAG is also doing load balancing for the SharePoint farm. We have an MDM application that is trying to connect to our SharePoint but our SharePoint is routed through the UAG. The MDM application
does not need to be published neither is there any component that can be accessed directly by end users. It is more of a proxy to relay content to mobile devices. It is using 443 and two other secondary ports.
On the TMG logs, we can see requests hitting the TMG over port 443 from the MDM application server. We can also see that it is trying to be routed to our SharePoint but we get the following error in the TMG log:
“Filter information: A request from source IP address xx.xx.xx.xx, user to trunk portal; Secure=1 for application SharePoint of type SharePoint15 failed. The endpoint device does not comply with access policy settings ([%PolicyId%]) for session [%SessionId]”
The source IP is the internal IP of the host running the MDM application. In the UAG side, under the SharePoint publishing rule, for Access Policy Settings we have tried selecting the 'Always' option but that had no effect. It appears like there is a policy
blocking communication to SharePoint. Does anyone have a suggestion on which policy or where the policy that is controlling this is located so that we can try to resolve this issue? Thanks.

Looking at the UAG Web Monitor, it says that the access policy is 'Hybrid_Default_Session_Access' and the URL is /_vti_bin/Webs.asmx.
We can't find a 'Hybrid Default Session Access' policy. In the Endpoint Policy Settings tab, we tried using 'Always' for the Access Policy for the published SharePoint application but that did not make any difference.

User Group Policy Settings not applied to new user profiles at first logon

Good Afternoon,
We have an issue that occurs to a new user when they first log on to their machines. They log on and a new profile creates from the Default User Profile. We can see that a number of our Group Policy Settings applied as "User Configuration" are
not applying.A log off and back on is required before the policies apply.
Any thoughts to this behaviour please?
Regards
LeeB
Lee Bowman MCITP MCTS

Hi,
How about your problem now? How many system encounter this problem? Is all policy couldn't be applied? Is there any feedback when using gpresult to check policy applied status?
As Group Policy applies after user identity authentication, generally speaking, user logoff and back doesn't helpful with this problem.
When this problem occures, have you checked event log if it identify this problem?
Roger Lu
TechNet Community Support

Any applicable\recommended Group Policy settings (Local & Domain) for configuring windows 8.1 "gold master image" for collection

Happy Friday everybody -
I'm working on implementing Microsoft RDS 2012\VDI for the folks here at work. I've read - online - a lot of articles on VDI and RDS 2012 - and have a working model that is working somewhat satisfactorily. I haven't seen much online about steps
I could take in Local Group Policy on my Windows 8.1 'gold image' - or for that matter Domain level group policy - that can assist in creating a better, more reliable/robust Windows 2012 VDI environment.
Anybody out there got any information or opinions or advice on Group Policy settings for VDI environments?
Thanks again, everyone!
Adrian
anr

Hi Adrian,
Thank you for posting in Windows Server Forum.
In regards to your issue you can refer beneath article for detail information.
1. Group Policy Best Practices for VDI Environments
2.Some Basic Group Policy Settings for VDI
Hope it helps!
Thanks.
Dharmesh Solanki

O365 firstrun suppression policy settings do not suppress file formats chooser when installed on EU locale computers

I am not sure where to report this but I believe I have found a bug in the latest Office 365 product. I set up a machine running windows 7, and implemented Office 2010 and Office 2013 group policies, I scoped the policies to the correct user and machine.
the particular policy I am interested in is the "default file format" found in the GPO under the save option for word, excel and powerpoint. under office 2010 this policy applies correctly and does not display the "choose a file format"
dialog box when those programs start, this is the behaviour I am looking for. I then installed Office 2013 and implemented the exact same group policy, the default file format dialog box does not appear. however, when I install Office 365 (2013 edition) the
dialog box does display. it appears that some other policies do apply correctly to the office 365 product but the default files format policy does not, office 365 is ignoring this policy setting.... hence why I believe this is a bug. according to the Microsoft
technical literature the Office 365 product and Office 2013 share the same group policy settings, I can not find any admx files specifically for office 365, only for office 2013 so 365 should recognise and use this policy setting.
Steve

ok, then to (possibly) help you, this is what I did in my initial testing to help prevent the running of some of those apps... up to you if you chose to implement this but it did seem to work for me in my test environment
Create a GPO which uses User GPP and Computer start up scripts. The GPP will remove the shortcuts and the start up scripts will install an ACT Database with AppHelp messages. These AppHelp messages
will disallow the application to run passing it off as a "compatibility" issue, and that's assuming the user can get to the exe file after the shortcut has gone.
Create a GPP Folder Options – File Type which re-associates the extensions for the blocked app with another application or removes the extension.
http://technet.microsoft.com/en-us/library/hh825139.aspx
http://technet.microsoft.com/en-us/library/cc749586(v=ws.10).aspx
http://technet.microsoft.com/en-us/library/cc749169(v=ws.10).aspx
any or all of those steps could form a solution as far as i can tell. I know this appears a pretty botch job but its the best I can think of, you could use app locker policies but personally I have never been a fan of implementing such restrictions (perhaps
it comes from the days where software restriction and hash rules and such seemed a pain in the wassit).
I don't mean to appear greedy when asking for help, but you have an even bigger rollout than Don has at the moment with O365, we both have a joint scenario which I wonder if you had come across and know the answer to, even though I've marked this as answered
it is the best we have at the moment but not 100% conclusive, would you have anything to add to it? the thread is located at
http://social.technet.microsoft.com/Forums/en-US/officesetupdeploy/thread/6a3b4fd6-1ad3-40a7-8b9e-e9cf815e115b
Many thanks
Steve

No policy settings on certificate authority console

Greetings,
The microsoft article discussing windows server 2000 under the heading "Configuration of Certificates to Be Issued" in the third paragraph talks about right clicking the Policy settings node under the certificate authority. When look on the
certificate authority, I do not see a Policy settings node to right click on.
Not that I am running Small Business Server 2011 if it makes a difference. Also, when I click request new certificate on the certificate (local computer) personal\certificates node, I get only three certificate types whose status is available. All
other ones (including the web server template) show as status unavailable.
How can I get the other templates. I looked at their permissions using the active directory sites and services under services/public key services/certificate templates but the permission already allow the currently logged on userid.
Your help is much appreciated

Hi Mario,
The article you mentioned applies to Windows Server 2000, on my Windows Server 2008 R2, there is no Policy Settings node, too.
Instead, there is a
Certificate Templates node under the CA name, you can right click on it, select
New then click on Certificate Template
to issue, after that you can enable new certificate templates.
I hope this helps.
Amy Wang

ActiveX UAC and Proxy Settings via GPO

Hi there,
Wondering if anyone can help.
I am experiencing the following issue when trying to load ActiveX control without UAC prompts for standard users.
I have:
Configured ActiveXInstaller Service and configured allowed sites and settings via GPO.
Configured IE Security settings for the Trusted Zone to Allow ActiveX content to run via GPO.
Configured IE to use per user proxy settings via GPO.
Allowed the domain in our proxy and bypassed authentication for that domain.
Everything seems to be in place but I receive a UAC prompt for the Internet Explorer Add-on Installer UNLESS I either turn off the IE proxy settings or add the domain to the IE proxy exclusions list.
Unfortunately neither of these are options in our environment..
Anything I've missed?
Thanks!

Hi,
Before going further, what's the operating systems you are using? How did you configure
approved Installation Sites for ActiveX Controls and Active X installation policy for sites in Trusted zones settings?
Regarding how to configure these two settings, we can refer to the following article for double check.
Administering the ActiveX Installer Service in Windows 7
http://technet.microsoft.com/en-us/library/dd631688(v=ws.10).aspx
Besides, we can also run command gpresult/h gpreport.html with admin privileges to collect group policy result report to check if the policy settings are applied correctly.
Best regards,
Frank Shen

Analyze and Write a log of windows logon/shutdown script and policy

Good Morning,
Is there a way to write a complete log of pc from when it start to receive the domain policy for the machine and user and for the startup/shutdown process?
Thanks for you help.
Salento.

Hi Salento,
Before going further, what do we want to do? Are we troubleshooting something?
If we want to troubleshoot group policy, we can collect group policy result to check if our policy settings get applied properly.
To collect group policy result:
1. On domain controller, click Start -> Run, type GPMC.MSC, it will load the GPMC console.
2. Right click on "Group Policy Result" and choose wizard to generate a report for the problematic computer and user account (please place appropriately). (Choose computer and select the proper
user in the wizard)
3. Right click the resulting group policy result and click the "Save Report…" => save report to save the report to a HTML file.
If we need more specific information for troubleshooting group policy, we can enable gpsvc logging for group policy processing.
To enable Gpsvc logging, the following blog can be referred to as reference.
Userenvlog for Windows Vista/2008/Win7
http://blogs.technet.com/b/mempson/archive/2010/01/10/userenvlog-for-windows-vista-2008-win7.aspx
In addition, regarding group policy debug log settings, the following article can be referred to for more information.
Group Policy Debug Log Settings
http://social.technet.microsoft.com/wiki/contents/articles/4506.group-policy-debug-log-settings.aspx
Best regards,
Frank Shen

Metric and Policy settings

Similar Messages

Maybe you are looking for