Mobile AnyConnect group policy proxy settings

For Android or iPhone anyconnect client is it possible to have the group policy proxy settings take effect?
When connecting via desktop client these settings set the OS proxy settings. However for mobile platforms proxy settings are usually set on a WIFI connection profile.
Thanks
Sent from Cisco Technical Support Android App

Hi,
As stated in this
article:
"this is a BIG, BIG, BIG development in the world of GP. Finally, Microsoft has made a clear and bold statement–don’t use IE Maintenance Policy anymore." (Windows Server 2012 and Windows 8)
So, please use Group Golicy Preference:
Computer or User Configuration\Preferences\Control Panel Settings\Internet Settings
The problem has been discussed in:
Missing Proxy Group Policy Setting - Windows Server 2012
http://social.technet.microsoft.com/Forums/en-US/winserver8gen/thread/5c03a102-7d06-462a-b821-f2d69df7ab0a
Regards,
Cicely

Similar Messages

Windows failed to apply the Group Policy Printers settings

Windows failed to apply the Group Policy Printers settings. Group Policy Printer
s settings might have its own log file.
only when I edit any setting on preferences at computer or users.
Ahmed Zidan Network Administrator

Hi Ahmed,
>>Windows failed to apply the Group Policy Printers settings. Group Policy Printer
>>s settings might have its own log file.
Were we using GPP Printer extension to deploy printers? Did we deploy printers to user accounts or computer accounts? Besides,what printer did we depoly via GPP, local printer, share printer, or TCP/IP printer? Here, we can check event
logs in Event Viewer to see if more information regarding this issue can be found. Besides, we can also run command
gpresult/h gpreport.html to further check how group policy settings were applied. If necessary, we can enable GPP Printer debug logging for troubleshooting the issue.
To enable GPP Printer debug logging, we need to enable the following setting:
Computer Configuration > Policies > Administrative Templates > System > Group Policy > Logging and Tracing>Configure printer preferences logging and tracing
Regarding how to enable GPP debug logging, the following article can be referred to for more information.
Enabling Group Policy Preferences Debug Logging using the RSAT
http://blogs.technet.com/b/askds/archive/2008/07/18/enabling-group-policy-preferences-debug-logging-using-the-rsat.aspx
Best regards,
Frank Shen

Removing Windows 2003 Group Policy user settings

I'm having a difficult time finding what to do.
I have a windows 2003 domain with many GP settings. One of which I can't find. It has to do with the favorites bar in IE. When a user from a certain OU logs on to any computer with any Windows OS, any favorites saved either to their Favorites
bar, or even in the Favorites folder, disappear on next logon. This happens all the time.
I thought I would create another OU with a BLANK GP and blocked inheritance. I moved a user from the original OU into the test OU, replicated the changes, and rebooted the computer on which the user would log on. The user logged on and the settings
from the original OU still applied.
I created a completely new user in the test OU and no settings were applied, which is what I want.
What is the best way to remove the original OU settings from a user that was in that original OU?
Thank you for any help

Thanks for the quick response. There are no scripts that run with the former GPO.
I did run RSOP.MSC from the test computer and received an error about not being able to read the computer settings, but the user settings were displayed. The settings the account received were from "Software Restriction Policy" and "Public
Key Policy". Nothing shows about any IE settings. I'm at a loss as to why this is happening and where these dang policies are coming from.
I've even gone as far as to go to the original GPO, and in Delegation, deny the Apply Group Policy permission to the user.
And the only policy that is applying is the test policy. The others show as either Disabled(link), or Blocked(SOM).

Group policy printer settings

When using Group policy computer configuration control panel settings \printers you can specifiy both an IP address port and a path to the print server. Are these connections for local TCP\IP printers or for network print server printers. I am
not sure why I would have to specify path to server if they were local TCP\IP printers or vice\versa(specify IP address if they are only network printers).

The best spot for Group Policy Preferences questions is in the Group Policy forum
http://social.technet.microsoft.com/Forums/windowsserver/en-US/home?forum=winserverGP&filter=alltypes&sort=lastpostdesc
However, since they included this print related setting I do know what you are asking about.
The share is used to get the print driver installed on the client for adding the local printer. This will not work if you use type 4 print drivers since the drivers are not downloaded to the clients and the GPP printing scenario falls apart here.
I totally agree with you that this is confusing, however, as a print server admin, what I would do is create one share for each print driver that you need to install on the clients. If you have 80 printers that can use the same driver, create one share
and just update the GPP data with the IP for the specific device.
I would not use a print server to act as a software distribution point if the number of clients on your network is less than 100. Setup a Win7 or Win8 machine with the shares.
Alan Morris Windows Printing Team

Group Policy - Power Settings -

Hi Everyone,
The company I work for is currently in the process of completing a merger of 3 separate businesses from their respective AD Domains into our business domain/forest.
Currently we do not manage power settings via group policy or SCCM in the source environments.
We are having issues when the migration team is attempting to complete migrations of numerous workstations at the sites/locations when migrations processes occur overnight. This is due to the workstations being migrated hibernating or going to sleep.
As such, I've been request to ensure that Power Settings are enforce on these machines to stay on (i.e. not go to sleep or Hibernate).
I was hoping someone could please confirm the exact Group Policy items I will need to enable/disable to make sure all machines stay on overnight.
I'm aware the settings are in Computer Configuration>Administrative Templates>System>Power Settings>Power Management, but I'm currently unsure of how many or which setting would be required for this piece.
Thanks in Advance!!
Simon

Hi there,
Try GPP and Power Plan Item:
https://technet.microsoft.com/en-us/library/dd759141.aspx
http://blogs.technet.com/b/grouppolicy/archive/2009/09/30/configuring-a-power-plan-with-group-policy-preferences-by-alan-burchill.aspx

Desktop screen saver Group policy enable settings & Supported file.

Dear All,
My requirement is i need to apply Screensaver to all my domain member computers using my DC Group policy.
Could you please guide me how can i create my own Screensaver for file and support format ( what is the software do i need to use to create Screen save ) and please confirm will windows 2008 server will support .ppt file as a screensaver file.
Operating system details,
DC : Windows 2008 ent server
Member machines : Windows 7 prof.
Regards,
Kumar V
Regards, Kumar.V

Hi,
I agree with SenneVL.
After you have created the .scr file that you want to apply, you may deploy the screensaver via the following group policy.
User Configuration\Administrative Templates\Control Panel\Personalization\Force specific screen saver
If you enable this setting, type the name of the file that contains the screen saver, including the .scr file name extension. If the screen saver file is not in the %Systemroot%\System32
directory, type the fully qualified path to the file.
Note: This setting can be superseded by the "Enable Screen Saver" setting. If the "Enable Screen Saver" setting is disabled, this setting is ignored,
and screen savers do not run.
For more information, you can refer to the following thread:
how do i deploy custom screen saver in group policy?
http://social.technet.microsoft.com/Forums/windowsserver/en-US/60bd2b0e-58e9-46ac-83d2-3e4a4ab4de5d/how-do-i-deploy-custom-screen-saver-in-group-policy
Best Regards,
Erin

Windows 8 and IE10 and 11 not accepting Proxy Settings via Group Policy from windows server 2003

Hi
We are still running Windows Server 2003 with a Win7 and Win8 desktop environment. I can control Win7 IE9 settings,
But Win8 systems are running IE10. We have an internal proxy server.
Is there any way to force the proxy settings to the Win8/IE10 or 11 systems .
i have tried with The IE 10 .adm template and applied gpo,but does not have any proxy settings for ie10 and no changes were applies
please can anyone help me regarding this
i want to apply GPO from windows server 2003 to windows 8 ie10/11
Thanks
KNC

Hi,
I agree with Zanderol24, we can install RSAT on a windows8 client, and then we can use Group Policy Management to manage group policy from the client.
For more information about RSAT, we can refer to the following link:
Remote Server Administration Tools (RSAT) for Windows Client and Windows Server (dsforum2wiki)
http://social.technet.microsoft.com/wiki/contents/articles/2202.remote-server-administration-tools-rsat-for-windows-client-and-windows-server-dsforum2wiki.aspx
For more detailed information about how to use GPP to configure the proxy setting for ie10 and ie11, we can refer to the following link:
How to configure Group Policy Preference settings for Internet Explorer 11 in Windows 8.1 or Windows Server 2012 R2
http://support.microsoft.com/kb/2898604
When we use GPPs you need to be aware of the F5-F8 keys:
Red / Green: GP Preferences doesn’t work even though the policy applied and after gpupdate \force
http://blogs.technet.com/b/grouppolicy/archive/2008/10/13/red-green-gp-preferences-doesn-t-work-even-though-the-policy-applied-and-after-gpupdate-force.aspx
Besides, aside from using group policy to manage IE, IEAK can also be used to do this.
For IEAK, the following article can be referred to for more information.
Internet Explorer Administration Kit (IEAK) Information and Downloads
http://technet.microsoft.com/en-in/ie/bb219517.aspx
Best Regards,
Erin

EMET 5.0 Group Policy Settings Ignored (Probable race condition with Policy application)

In our deployment, EMET 5 seems to be ignoring group policy settings from immediately after the first group policy refresh post-boot.
Settings are being applied to the computer correctly, and are appearing in the registry correctly, and on boot, a set of Event ID 50 events are logged containing ConfigAppmitGPO (and similar for the other settings) elements with the correct settings.
Upon the first group policy refresh, further eventID 50 events are logged, with empty ConfigAppmitGPO elements.
Investigation with Process Monitor seems to indicate this is a race condition between Group Policy Registry settings being refreshed (which deletes the entries) and the EMET service reading out these settings from the registry (which appears to be triggered
by Group Policy application or by a notification on the registry keys themselves)
This is reproducible on Windows 7 and Windows 8.1.
Is there any way to arrange for settings to be applied correctly at all times, or is this a bug that will need to be fixed in a future update?

We're experiencing the exact same behavior currently. I was starting to think I was going crazy. Glad to know others are experiencing the same behavior.
I've found that using the method from pervious versions to read and update settings from Group Policy, using "emet_conf.exe --refresh" still works, and upon every execution, the event log shows the GPO settings being read and applied. While I welcome the
move to have EMET update from GPO settings without requiring running a separate task, as it stands now in its current condition, it is a step back.
Scott Ladewig http://www.ladewig.com

Group Policy Pref - Mapped Drives Not Applying to One User

Hi All,
I’m new to this list, so please excuse any etiquette slip ups. 
I have three users at a site. All their machines are running Windows XP Service Pack 3 and have client side extensions installed. I created a group policy to map their default drives using GP User Preferences.
Each of the drives is set to "update".
As an example of the policy created XML is as follows:
<Drive clsid="{935D1B74-9CB8-4e3c-9914-7DD559B7A417}" name="H:" status="H:"
image="2" changed="2009-11-25 05:13:58"
uid="{8A44D2F4-AAE5-4F43-AEEC-D36F08EA619C}" desc="Maps the users H drive to
ServerName\users$\%username%" bypassErrors="1"><Properties action="U"
thisDrive="NOCHANGE" allDrives="NOCHANGE" userName=""
path="\\ServerName\users$\%username%" label="Home (ServerName)"
persistent="1" useLetter="1" letter="H"/></Drive>
and
<Drive clsid="{935D1B74-9CB8-4e3c-9914-7DD559B7A417}" name="J:" status="J:"
image="0" changed="2009-11-30 03:52:58"
uid="{535CD462-A45D-4363-ADA1-2316D5ECC703}" desc="Maps J drive for users to
\\ServerName\apps" bypassErrors="1"><Properties action="C"
thisDrive="NOCHANGE" allDrives="NOCHANGE" userName=""
path="\\ServerName\Apps" label="Apps (ServerName)" persistent="1"
useLetter="1" letter="J"/></Drive>
The group policy is applied to an OU for that site.
All three users are in the same OU.
All three users are also in the same “xxsitecode Users” group.
2 of the users log into their pc and get the mapped drives with no issue, but one user doesn’t.
There are no other login scripts and the user has no manually mapped drives.
He does have a H drive mapped using the profile field in his AD object as a temp measure. But every 90 mins any other manually mapped drives are removed by the policy.
We don’t use roaming profiles
To trouble shoot I have tried
-    Reinstalling client side extensions
-    Re-joining the pc to the domain
-    Running gpupdate from the command prompt to see if any event logs are generated (none are)
-    Manually mapping the drives to make sure there is network access etc – I can manually map them/he can access them.
-    Creating the user a new account, when he logs in using that account he gets his mapped drives on all PC’s
-    Getting the user to log into a different pc, when he does this he doesn’t get his drives – so it’s not his machine or profile
-    Manually checking the security on the user object in AD against one of the users who gets their drives mapped
I'm sure the GP is fine because it works for two other users and the testing isolates his user account as the issue.
The Policy I’m having issues with is xxxx Mapped Drives/ Printers
I have posted this issue on the tech net GP discussion groups page, but haven’t had any replies.
Any suggestions would be appreciated.
Simone

What's interesting is that I applied a new GP to users - it has one policy setting and one preferences setting. He only gets the policy setting.. aka he gets the wallpaper but not the homepage.
Also, Jorke asked me to post the gpresult /z .
Microsoft (R) Windows (R) XP Operating System Group Policy Result tool v2.0
Copyright (C) Microsoft Corp. 1981-2001
Created On 10/02/2010 at 2:19:34 PM
RSOP results for DOMAIN\USER on MACHINENAME : Logging Mode
OS Type:                     Microsoft Windows XP Professional
OS Configuration:            Member Workstation
OS Version:                  5.1.2600
Domain Name:                 DOMAIN
Domain Type:                 Windows 2000
Site Name:                   SITECODE
Roaming Profile:
Local Profile:               C:\Documents and Settings\USER.DOMAIN
Connected over a slow link?: No
COMPUTER SETTINGS
    CN=MACHINENAME,OU=Laptops,OU=SITECODE,DC=DOMAIN,DC=com,DC=au
    Last time Group Policy was applied: 10/02/2010 at 1:06:38 PM
    Group Policy was applied from:      XXXXXADC.DOMAIN.com.au
    Group Policy slow link threshold:   500 kbps
    Applied Group Policy Objects
        Allow Remote Assistance
        au-mdwsus
        Default Domain Policy
        Legal Notice
        Proxy Settings
        Logon as service, operating system
        AU-WSUS
        Desktop Background & Home Page
        Reg Permissions for default desktop
        Local Admin & Local Power Users
    The following GPOs were not applied because they were filtered out
        SITECODE Mapped Drives/ Printers
            Filtering: Not Applied (Empty)
        Local Group Policy
            Filtering: Not Applied (Empty)
        AVD Rollout
            Filtering: Disabled (GPO)
    The computer is a part of the following security groups:
        BUILTIN\Administrators
        Everyone
        Debugger Users
        BUILTIN\Users
        NT AUTHORITY\NETWORK
        NT AUTHORITY\Authenticated Users
        MACHINENAME$
        Domain Computers
        CERTSVC_DCOM_ACCESS
    Resultant Set Of Policies for Computer:
        Software Installations
            N/A
        Startup Scripts
            GPO: Desktop Background & Home Page
                Name:         image.bat
                Parameters:
                LastExecuted: 7:55:34 PM
                Name:         swiftdesktop.vbs
                Parameters:
                LastExecuted: 7:55:35 PM
        Shutdown Scripts
            N/A
        Account Policies
        Audit Policy
        User Rights
        Security Options
        Event Log Settings
        Restricted Groups
        System Services
        Registry Settings
        File System Settings
        Public Key Policies
            N/A
        Administrative Templates
            GPO: Allow Remote Assistance
                Setting: Software\policies\Microsoft\Windows NT\Terminal Services
                State:   Enabled
            GPO: AU-WSUS
                Setting: Software\Policies\Microsoft\Windows\WindowsUpdate\AU
                State:   Enabled
            GPO: Allow Remote Assistance
                Setting: Software\policies\Microsoft\Windows NT\Terminal Services\RAUnsolicit
                State:   Enabled
            GPO: Allow Remote Assistance
                Setting: Software\policies\Microsoft\Windows NT\Terminal Services
                State:   Enabled
            GPO: Allow Remote Assistance
                Setting: Software\policies\Microsoft\Windows NT\Terminal Services\RAUnsolicit
                State:   Enabled
            GPO: Allow Remote Assistance
                Setting: Software\policies\Microsoft\WindowsFirewall\DomainProfile\GloballyOpenPorts
                State:   Enabled
            GPO: Allow Remote Assistance
                Setting: Software\policies\Microsoft\WindowsFirewall\DomainProfile\GloballyOpenPorts\List
                State:   Enabled
            GPO: Allow Remote Assistance
                Setting: Software\policies\Microsoft\WindowsFirewall\DomainProfile\AuthorizedApplications\List
                State:   Enabled
            GPO: AU-WSUS
                Setting: Software\Policies\Microsoft\Windows\WindowsUpdate\AU
                State:   Enabled
            GPO: Allow Remote Assistance
                Setting: Software\policies\Microsoft\Windows NT\Terminal Services\RAUnsolicit
                State:   Enabled
            GPO: Allow Remote Assistance
                Setting: Software\policies\Microsoft\WindowsFirewall\DomainProfile\AuthorizedApplications\List
                State:   Enabled
            GPO: Allow Remote Assistance
                Setting: Software\policies\Microsoft\Windows NT\Terminal Services\RAUnsolicit
                State:   Enabled
            GPO: Allow Remote Assistance
                Setting: Software\policies\Microsoft\Windows NT\Terminal Services\RAUnsolicit
                State:   Enabled
            GPO: AU-WSUS
                Setting: Software\Policies\Microsoft\Windows\WindowsUpdate\AU
                State:   Enabled
            GPO: Allow Remote Assistance
                Setting: Software\policies\Microsoft\Windows NT\Terminal Services
                State:   Enabled
            GPO: au-mdwsus
                Setting: Software\Policies\Microsoft\Windows\WindowsUpdate
                State:   Enabled
            GPO: Allow Remote Assistance
                Setting: Software\policies\Microsoft\Windows NT\Terminal Services\RAUnsolicit
                State:   Enabled
            GPO: Allow Remote Assistance
                Setting: Software\policies\Microsoft\Windows NT\Terminal Services\RAUnsolicit
                State:   Enabled
            GPO: au-mdwsus
                Setting: Software\Policies\Microsoft\Windows\WindowsUpdate\AU
                State:   Enabled
            GPO: Allow Remote Assistance
                Setting: Software\policies\Microsoft\Windows NT\CurrentVersion\Winlogon
                State:   Enabled
            GPO: Allow Remote Assistance
                Setting: Software\policies\Microsoft\Windows NT\Terminal Services
                State:   Enabled
            GPO: Allow Remote Assistance
                Setting: Software\policies\Microsoft\WindowsFirewall\DomainProfile\AuthorizedApplications\List
                State:   Enabled
            GPO: AU-WSUS
                Setting: Software\Policies\Microsoft\Windows\WindowsUpdate\AU
                State:   Enabled
            GPO: Allow Remote Assistance
                Setting: Software\policies\Microsoft\Windows NT\Terminal Services\RAUnsolicit
                State:   Enabled
            GPO: Allow Remote Assistance
                Setting: Software\policies\Microsoft\WindowsFirewall\DomainProfile\AuthorizedApplications
                State:   Enabled
            GPO: AU-WSUS
                Setting: Software\Policies\Microsoft\Windows\WindowsUpdate\AU
                State:   Enabled
            GPO: au-mdwsus
                Setting: Software\Policies\Microsoft\Windows\WindowsUpdate
                State:   Enabled
            GPO: Allow Remote Assistance
                Setting: Software\policies\Microsoft\Windows NT\Terminal Services
                State:   Enabled
            GPO: Desktop Background & Home Page
                Setting: Software\Policies\Microsoft\Internet Explorer\Security
                State:   Enabled
            GPO: Allow Remote Assistance
                Setting: Software\policies\Microsoft\Windows NT\Terminal Services
                State:   Enabled
            GPO: AU-WSUS
                Setting: Software\Policies\Microsoft\Windows\WindowsUpdate
                State:   Enabled
            GPO: AU-WSUS
                Setting: Software\Policies\Microsoft\Windows\WindowsUpdate\AU
                State:   Enabled
            GPO: Allow Remote Assistance
                Setting: Software\policies\Microsoft\Windows NT\Terminal Services\RAUnsolicit
                State:   Enabled
            GPO: Allow Remote Assistance
                Setting: Software\policies\Microsoft\WindowsFirewall\DomainProfile\AuthorizedApplications
                State:   Enabled
            GPO: Allow Remote Assistance
                Setting: Software\policies\Microsoft\WindowsFirewall\DomainProfile\RemoteAdminSettings
                State:   Enabled
            GPO: Allow Remote Assistance
                Setting: Software\policies\Microsoft\Windows NT\Terminal Services
                State:   Enabled
            GPO: AU-WSUS
                Setting: Software\Policies\Microsoft\Windows\WindowsUpdate\AU
                State:   Enabled
            GPO: au-mdwsus
                Setting: Software\Policies\Microsoft\Windows\WindowsUpdate
                State:   Enabled
            GPO: AU-WSUS
                Setting: Software\Policies\Microsoft\Windows\WindowsUpdate\AU
                State:   Enabled
            GPO: Allow Remote Assistance
                Setting: Software\policies\Microsoft\WindowsFirewall\DomainProfile\RemoteAdminSettings
                State:   Enabled
            GPO: Allow Remote Assistance
                Setting: Software\policies\Microsoft\Windows NT\Terminal Services\RAUnsolicit
                State:   Enabled
            GPO: au-mdwsus
                Setting: Software\Policies\Microsoft\Windows\WindowsUpdate
                State:   Enabled
            GPO: Allow Remote Assistance
                Setting: Software\policies\Microsoft\WindowsFirewall\DomainProfile\AuthorizedApplications\List
                State:   Enabled
            GPO: Allow Remote Assistance
                Setting: Software\policies\Microsoft\WindowsFirewall\DomainProfile\AuthorizedApplications\List
                State:   Enabled
            GPO: Allow Remote Assistance
                Setting: Software\policies\Microsoft\Windows NT\Terminal Services
                State:   Enabled
USER SETTINGS
    CN=Matthew Luhrs,OU=Users,OU=SITECODE,DC=DOMAIN,DC=com,DC=au
    Last time Group Policy was applied: 10/02/2010 at 1:54:53 PM
    Group Policy was applied from:      XXXXXADC.DOMAIN.com.au
    Group Policy slow link threshold:   500 kbps
    Applied Group Policy Objects
        Allow Remote Assistance
       **** SITECODE Mapped Drives/ Printers - has Gp Pref's that should apply
        Default Domain Policy
        Proxy Settings
        **** Desktop Background & Home Page - has Gp Pref's that should apply
        Local Admin & Local Power Users
    The following GPOs were not applied because they were filtered out
        AU-WSUS
            Filtering: Not Applied (Empty)
        Legal Notice
            Filtering: Disabled (GPO)
        Reg Permissions for default desktop
            Filtering: Not Applied (Empty)
        Logon as service, operating system
            Filtering: Not Applied (Empty)
        Local Group Policy
            Filtering: Not Applied (Empty)
        au-mdwsus
            Filtering: Not Applied (Empty)
        AVD Rollout
            Filtering: Disabled (GPO)
    The user is a part of the following security groups:
        Domain Users
        Everyone
        Offer Remote Assistance Helpers
        BUILTIN\Administrators
        BUILTIN\Users
        NT AUTHORITY\INTERACTIVE
        NT AUTHORITY\Authenticated Users
        LOCAL
        Computer Account Operators
        Internet Users
        SITECODE Users
        DOMAIN-Public Folders Administrators
        All Email Users
        DOMAINSWIFTEMAIL
        Domain Admins
        Offer Remote Assistance Helpers
        WSUS Administrators
        DHCP Administrators
        CERTSVC_DCOM_ACCESS
    Resultant Set Of Policies for User:
        Software Installations
            N/A
        Public Key Policies
            N/A
        Administrative Templates
            N/A
        Folder Redirection
            N/A
        Internet Explorer Browser User Interface
            GPO: Proxy Settings
                Large Animated Bitmap Name:      N/A
                Large Custom Logo Bitmap Name:   N/A
                Title BarText:                   N/A
                UserAgent Text:                  N/A
                Delete existing toolbar buttons: No
        Internet Explorer Connection
            HTTP Proxy Server:   Proxy:port
            Secure Proxy Server: Proxy:port
            FTP Proxy Server:    Proxy:port
            Gopher Proxy Server: Proxy:port
            Socks Proxy Server: Proxy:port
            Auto Config Enable: Yes
            Enable Proxy:        Yes
            Use same Proxy:      Yes
        Internet Explorer URLs
            GPO: Proxy Settings
                Home page URL:           N/A
                Search page URL:         N/A
                Online support page URL: N/A
        Internet Explorer Security
            Always Viewable Sites:     N/A
            Password Override Enabled: False
            GPO: Proxy Settings
                Import the current Content Ratings Settings:      No
                Import the current Security Zones Settings:       No
                Import current Authenticode Security Information: No
                Enable trusted publisher lockdown:                No
        Internet Explorer Programs
            GPO: Proxy Settings
                Import the current Program Settings: No

Server 2008 R2 does not show Internet Explorer 10/11 Group Policy options

Hello,
I have a Windows Server 2008 R2 server that has IE11 installed. I am attempting to create a GPO to control Proxy settings for IE10/11 clients, however, when I go to User Config>Preferences> Control Panel Settings> Internet Settings and Right click,
I do not see an option for IE10, only IE5 and 6, IE7, and IE8.
I have downloaded and installed the Administrative Templates for Internet Explorer from
here, and followed the installation instructions, but still, the option does not show up. I have ensured that all the latest Windows Updates are installed on the server, and rebooted
the server a couple times.
What am I missing here?
Thanks in advance.

<meta content="text/html; charset=UTF-16" http-equiv="Content-Type" /><title>SFDN\testuser</title> <style type="text/css">body { background-color:#FFFFFF; border:1px solid #666666; color:#000000; font-size:68%;
font-family:MS Shell Dlg; margin:0,0,10px,0; word-break:normal; word-wrap:break-word; } table { font-size:100%; table-layout:fixed; width:100%; } td,th { overflow:visible; text-align:left; vertical-align:top; white-space:normal; } .title { background:#FFFFFF;
border:none; color:#333333; display:block; height:24px; margin:0px,0px,-1px,0px; padding-top:4px; ; table-layout:fixed; width:100%; z-index:5; } .he0_expanded { background-color:#FEF7D6; border:1px solid #BBBBBB; color:#3333CC; cursor:hand; display:block;
font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:0px; margin-right:0px; padding-left:8px; padding-right:5em; padding-top:4px; ; width:100%; } .he1_expanded { background-color:#A0BACB; border:1px solid
#BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:20px; margin-right:0px; padding-left:8px; padding-right:5em; padding-top:4px; ; width:100%; } .he1h_expanded
{ background-color: #7197B3; border: 1px solid #BBBBBB; color: #000000; cursor: hand; display: block; font-family: MS Shell Dlg; font-size: 100%; font-weight: bold; height: 2.25em; margin-bottom: -1px; margin-left: 10px; margin-right: 0px; padding-left: 8px;
padding-right: 5em; padding-top: 4px; ; width: 100%; } .he1 { background-color:#A0BACB; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:20px;
margin-right:0px; padding-left:8px; padding-right:5em; padding-top:4px; ; width:100%; } .he2 { background-color:#C0D2DE; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em;
margin-bottom:-1px; margin-left:30px; margin-right:0px; padding-left:8px; padding-right:5em; padding-top:4px; ; width:100%; } .he3 { background-color:#D9E3EA; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%;
font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:40px; margin-right:0px; padding-left:11px; padding-right:5em; padding-top:4px; ; width:100%; } .he4 { background-color:#E8E8E8; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block;
font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:50px; margin-right:0px; padding-left:11px; padding-right:5em; padding-top:4px; ; width:100%; } .he4h { background-color:#E8E8E8; border:1px solid #BBBBBB;
color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:55px; margin-right:0px; padding-left:11px; padding-right:5em; padding-top:4px; ; width:100%; } .he4i { background-color:#F9F9F9;
border:1px solid #BBBBBB; color:#000000; display:block; font-family:MS Shell Dlg; font-size:100%; margin-bottom:-1px; margin-left:55px; margin-right:0px; padding-bottom:5px; padding-left:21px; padding-top:4px; ; width:100%; } .he5 { background-color:#E8E8E8;
border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:60px; margin-right:0px; padding-left:11px; padding-right:5em; padding-top:4px; ;
width:100%; } .he5h { background-color:#E8E8E8; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; padding-left:11px; padding-right:5em; padding-top:4px; margin-bottom:-1px; margin-left:65px; margin-right:0px;
; width:100%; } .he5i { background-color:#F9F9F9; border:1px solid #BBBBBB; color:#000000; display:block; font-family:MS Shell Dlg; font-size:100%; margin-bottom:-1px; margin-left:65px; margin-right:0px; padding-left:21px; padding-bottom:5px; padding-top:
4px; ; width:100%; } DIV .expando { color:#000000; text-decoration:none; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:normal; ; right:10px; text-decoration:underline; z-index: 0; } .he0 .expando { font-size:100%; } .info, .info3, .info4,
.disalign { line-height:1.6em; padding:0px,0px,0px,0px; margin:0px,0px,0px,0px; } .disalign TD { padding-bottom:5px; padding-right:10px; } .info TD { padding-right:10px; width:50%; } .info3 TD { padding-right:10px; width:33%; } .info4 TD, .info4 TH { padding-right:10px;
width:25%; } .info TH, .info3 TH, .info4 TH, .disalign TH { border-bottom:1px solid #CCCCCC; padding-right:10px; } .subtable, .subtable3 { border:1px solid #CCCCCC; margin-left:0px; background:#FFFFFF; margin-bottom:10px; } .subtable TD, .subtable3 TD { padding-left:10px;
padding-right:5px; padding-top:3px; padding-bottom:3px; line-height:1.1em; width:10%; } .subtable TH, .subtable3 TH { border-bottom:1px solid #CCCCCC; font-weight:normal; padding-left:10px; line-height:1.6em; } .subtable .footnote { border-top:1px solid #CCCCCC;
} .subtable3 .footnote, .subtable .footnote { border-top:1px solid #CCCCCC; } .subtable_frame { background:#D9E3EA; border:1px solid #CCCCCC; margin-bottom:10px; margin-left:15px; } .subtable_frame TD { line-height:1.1em; padding-bottom:3px; padding-left:10px;
padding-right:15px; padding-top:3px; } .subtable_frame TH { border-bottom:1px solid #CCCCCC; font-weight:normal; padding-left:10px; line-height:1.6em; } .subtableInnerHead { border-bottom:1px solid #CCCCCC; border-top:1px solid #CCCCCC; } .explainlink { color:#000000;
text-decoration:none; cursor:hand; } .explainlink:hover { color:#0000FF; text-decoration:underline; } .spacer { background:transparent; border:1px solid #BBBBBB; color:#FFFFFF; display:block; font-family:MS Shell Dlg; font-size:100%; height:10px; margin-bottom:-1px;
margin-left:43px; margin-right:0px; padding-top: 4px; ; } .filler { background:transparent; border:none; color:#FFFFFF; display:block; font:100% MS Shell Dlg; line-height:8px; margin-bottom:-1px; margin-left:53px; margin-right:0px; padding-top:4px; ; } .container
{ display:block; ; } .rsopheader { background-color:#A0BACB; border-bottom:1px solid black; color:#333333; font-family:MS Shell Dlg; font-size:130%; font-weight:bold; padding-bottom:5px; text-align:center; } .rsopname { color:#333333; font-family:MS Shell
Dlg; font-size:130%; font-weight:bold; padding-left:11px; } .gponame{ color:#333333; font-family:MS Shell Dlg; font-size:130%; font-weight:bold; padding-left:11px; } .gpotype{ color:#333333; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; padding-left:11px;
} #uri { color:#333333; font-family:MS Shell Dlg; font-size:100%; padding-left:11px; } #dtstamp{ color:#333333; font-family:MS Shell Dlg; font-size:100%; padding-left:11px; text-align:left; width:30%; } #objshowhide { color:#000000; cursor:hand; font-family:MS
Shell Dlg; font-size:100%; font-weight:bold; margin-right:0px; padding-right:10px; text-align:right; text-decoration:underline; z-index:2; word-wrap:normal; } #gposummary { display:block; } #gpoinformation { display:block; } @media print { #objshowhide{ display:none;
} body { color:#000000; border:1px solid #000000; } .title { color:#000000; border:1px solid #000000; } .he0_expanded { color:#000000; border:1px solid #000000; } .he1h_expanded { color:#000000; border:1px solid #000000; } .he1_expanded { color:#000000; border:1px
solid #000000; } .he1 { color:#000000; border:1px solid #000000; } .he2 { color:#000000; background:#EEEEEE; border:1px solid #000000; } .he3 { color:#000000; border:1px solid #000000; } .he4 { color:#000000; border:1px solid #000000; } .he4h { color:#000000;
border:1px solid #000000; } .he4i { color:#000000; border:1px solid #000000; } .he5 { color:#000000; border:1px solid #000000; } .he5h { color:#000000; border:1px solid #000000; } .he5i { color:#000000; border:1px solid #000000; } } v\:* {behavior:url(#default#VML);}
</style> <script language="vbscript">  </script> <script language="javascript">
 </script>
Group Policy Management
body { font-size:68%;font-family:MS Shell Dlg; margin:0px,0px,0px,0px; border: 1px solid #666666; background:#F6F6F6; width:100%; word-break:normal; word-wrap:break-word; } .head { font-weight:bold; font-size:160%; font-family:MS
Shell Dlg; width:100%; color:#6587DC; background:#E3EAF9; border:1px solid #5582D2; padding- height:24px; } .path { margin- margin- margin-bottom:5px;width:100%; } .info { padding-width:100%; } table { font-size:100%; width:100%; border:1px solid #999999;
} th { border-bottom:1px solid #999999; text-align:left; padding- height:24px; } td { background:#FFFFFF; padding- padding-bottom:10px; padding- } .btn { width:100%; text-align:right; margin- } .hdr { font-weight:bold; border:1px solid #999999; text-align:left;
padding- padding- height:24px; margin-bottom:-1px; width:100%; } .bdy { width:100%; height:182px; display:block; background:#FFFFFF; padding- padding-bottom:10px; padding- border:1px solid #999999; } button { width:6.9em; height:2.1em; font-size:100%; font-family:MS
Shell Dlg; margin-right:15px; } @media print { .bdy { display:block; } button { display:none; } .head { color:#000000; background:#FFFFFF; border:1px solid #000000; } }
Setting Path:
Explanation
<button accesskey="P" name="Print" onclick="window.print()">Print</button>
<button accesskey="C" name="Close" onclick="window.close()">Close</button>
No explanation is available for this setting.
Supported On:
Not available
Group Policy Results
SFDN\testuser
Data collected on: 12/14/2014 1:00:12 PM
Summary
Computer Configuration Summary
No data available.
User Configuration Summary
General
User name
SFDN\testuser
Domain
SFD.local
Last time Group Policy was processed
12/14/2014 12:59:22 PM
Group Policy Objects
Applied GPOs
Name
Link Location
Revision
Local Group Policy
Local
AD (1), Sysvol (1)
Default Domain Policy
SFD.local
AD (6), Sysvol (6)
Test
SFD.local/SFD-Restricted-Users
AD (10), Sysvol (10)
Limit Downloads
SFD.local/SFD-Restricted-Users
AD (2), Sysvol (2)
SFD Restricted Users
SFD.local/SFD-Restricted-Users
AD (59), Sysvol (59)
Denied GPOs
Name
Link Location
Reason Denied
None
Security Group Membership when Group Policy was applied
SFDN\Domain Users
Everyone
BUILTIN\Users
NT AUTHORITY\INTERACTIVE
CONSOLE LOGON
NT AUTHORITY\Authenticated Users
NT AUTHORITY\This Organization
LOCAL
Mandatory Label\Medium Mandatory Level
WMI Filters
Name
Value
Reference GPO(s)
None
Component Status <v:group alt="Warning" class="vmlimage" coordsize="100,100" style="width:15px;height:15px;vertical-align:middle;"><v:shape class="vmlimage" fillcolor="yellow"
strokecolor="yellow" style="width:100;height:100;"><v:path v="m 50,0 l 0,99 99,99 x e"></v:path></v:shape> <v:rect class="vmlimage" fillcolor="black" strokecolor="black" style="width:10;height:35;"></v:rect>
<v:rect class="vmlimage" fillcolor="black" strokecolor="black" style="width:10;height:5;"></v:rect> </v:group>
Component Name
Status
Last Process Time
Group Policy Infrastructure
Success
12/14/2014 12:59:46 PM
Folder Redirection
Failed
12/14/2014 12:59:46 PM
Folder Redirection failed due to the error listed below.
Cannot complete this function.
Additional information may have been logged. Review the Policy Events tab in the console or the application event log for events between 12/14/2014 12:59:23 PM and 12/14/2014 12:59:46 PM.
Group Policy Internet Settings
Success
12/14/2014 12:59:46 PM
Registry
Success
12/12/2014 10:28:23 AM
Computer Configuration
No data available.
User Configuration
Policies
Windows Settings
Security Settings
Software Restriction Policies
Winning GPO
SFD Restricted Users
Enforcement
Policy
Setting
Apply software restriction policies to the following
All software files except libraries (such as DLLs)
Apply software restriction policies to the following users
All users
When applying software restriction policies
Ignore certificate rules
Designated File Types
File Extension
File Type
ADE
Microsoft Access Project Extension
ADP
Microsoft Access Project
BAS
BAS File
BAT
Windows Batch File
CHM
Compiled HTML Help file
CMD
Windows Command Script
COM
MS-DOS Application
CPL
Control panel item
CRT
Security Certificate
EXE
Application
HLP
Help file
HTA
HTML Application
INF
Setup Information
INS
INS File
ISP
ISP File
LNK
Shortcut
MDB
Microsoft Access Database
MDE
Microsoft Access MDE Database
MSC
Microsoft Common Console Document
MSI
Windows Installer Package
MSP
Windows Installer Patch
MST
MST File
OCX
ActiveX control
PCD
PCD File
PIF
Shortcut to MS-DOS Program
REG
Registration Entries
SCR
Screen saver
SHS
SHS File
URL
Internet Shortcut
VB
VB File
WSC
Windows Script Component
Trusted Publishers
Trusted publisher management
Allow all administrators and users to manage user's own Trusted Publishers
Certificate verification
None
Software Restriction Policies/Security Levels
Policy
Setting
Winning GPO
Default Security Level
Unrestricted
SFD Restricted Users
Software Restriction Policies/Additional Rules
Path Rules
%HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRoot%
Security Level
Unrestricted
Description
Date last modified
9/30/2011 12:34:27 PM
Winning GPO
SFD Restricted Users
%HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir%
Security Level
Unrestricted
Description
Date last modified
9/30/2011 12:34:27 PM
Winning GPO
SFD Restricted Users
Administrative Templates
Policy definitions (ADMX files) retrieved from the local machine.
Control Panel
Policy
Setting
Winning GPO
Network/Network Connections
Policy
Setting
Winning GPO
This setting determines whether the Properties menu item is enabled, and thus, whether the Local Area Connection Properties dialog box is available to users.
If you enable this setting (and enable the "Enable Network Connections settings for Administrators" setting), the Properties menu items are disabled for all users, and users cannot open the Local Area Connection Properties dialog box.
Important: If the "Enable Network Connections settings for Administrators" is disabled or not configured, this setting will not apply to administrators on post-Windows 2000 computers.
If you disable this setting or do not configure it, a Properties menu item appears when users right-click the icon representing a LAN connection. Also, when users select the connection, Properties is enabled on the File menu.
Note: This setting takes precedence over settings that manipulate the availability of features inside the Local Area Connection Properties dialog box. If this setting is enabled, nothing within the properties dialog box for a LAN connection is available to
users.
Note: Nonadministrators have the right to view the properties dialog box for a connection but not to make changes, regardless of this setting." gpmc_settingname="Prohibit access to properties of a LAN connection" gpmc_settingpath="User Configuration/Administrative
Templates/Network/Network Connections" gpmc_supported="At least Windows 2000 Service Pack 1" href="javascript:void();" onclick="javascript:showExplainText(this); return false;">Prohibit access to properties of a LAN connection
Enabled
SFD Restricted Users
If you enable this setting (and enable the "Enable Network Connections settings for Administrators" setting), the check boxes for enabling and disabling components are disabled. As a result, administrators cannot enable or disable the components that
a connection uses.
Important: If the "Enable Network Connections settings for Administrators" is disabled or not configured, this setting will not apply to administrators on post-Windows 2000 computers.
If you disable this setting or do not configure it, the Properties dialog box for a connection includes a check box beside the name of each component that the connection uses. Selecting the check box enables the component, and clearing the check box disables
the component.
Note: When the "Prohibit access to properties of a LAN connection" setting is enabled, users are blocked from accessing the check boxes for enabling and disabling the components of a LAN connection.
Note: Nonadministrators are already prohibited from enabling or disabling components for a LAN connection, regardless of this setting." gpmc_settingname="Prohibit Enabling/Disabling components of a LAN connection" gpmc_settingpath="User
Configuration/Administrative Templates/Network/Network Connections" gpmc_supported="Microsoft Windows Server 2003, Windows XP, and Windows 2000 Service Pack 1 operating systems only" href="javascript:void();" onclick="javascript:showExplainText(this);
return false;">Prohibit Enabling/Disabling components of a LAN connection
Enabled
SFD Restricted Users
Windows Components/Internet Explorer
Policy
Setting
Winning GPO
If you enable this policy setting, the user will not be able to configure proxy settings.
If you disable or do not configure this policy setting, the user can configure proxy settings." gpmc_settingname="Prevent changing proxy settings" gpmc_settingpath="User Configuration/Administrative Templates/Windows Components/Internet
Explorer" gpmc_supported="At least Internet Explorer 5.0" href="javascript:void();" onclick="javascript:showExplainText(this); return false;">Prevent changing proxy settings
Enabled
SFD Restricted Users
Windows Components/Internet Explorer/Internet Control Panel/Security Page/Internet Zone
Policy
Setting
Winning GPO
Allow file downloads
Disable
Extra Registry Settings
Display names for some settings cannot be found. You might be able to resolve this issue by updating the .ADM files used by Group Policy Management.
Setting
State
Winning GPO
Software\Policies\Microsoft\office\14.0\outlook\ForceOSTPath
P:\My Documents\Outlook Files
SFD Restricted Users
Software\Policies\Microsoft\office\14.0\outlook\ForcePSTPath
P:\My Documents\Outlook Files
SFD Restricted Users

GPP Scheduled Task Fails in Group Policy Modeling depending on DC

We have multiple domain controllers running at a 2003 functional level.
We have 1 DC running Server 2003 x86 SP2 and the rest run Server 2008 (maybe R2)
I created a GPO that includes a Scheduled Task Group Policy Preference under Computer Configuration.
In order to test this I used Group Policy Modeling in the GPMC on a 2008 R2 Machine where I am editing Group Policy.
If I run the modeling (perform the simulation on the 2003 DC it fails. (Note I am modeling the GPO for a different computer, not the 2003 SP2 DC, I am running the modeling for a Workstation)
Information from the Component Status on the Summary Tab of the Modeling Report
Component Name Status
Group Policy Infrastructure Success
EFS recovery Success (no data)
Group Policy Scheduled Tasks Failed
Group Policy Scheduled Tasks failed due to the error listed below and failed to log resultant set of policy information.
Additional information may have been logged. Review the application event log on the domain controller on which the simulation was run for events between 2/28/2014 10:07:36 AM and 2/28/2014 10:07:36 AM.
Registry Success
Security Success
Info on the Settings Tab of the Modeling Report below.
An error has occurred while collecting data for Scheduled Tasks.
The following errors were encountered:
An unknown error occurred while data was gathered for this extension. Details: Invalid class
If I run the modeling using a 2008 DC to perform the simulation it works fine.
Per the instructions on the Summary Tab regarding the scheduled task failure I look at the event log on the 2003 domain controller and this is what i find.
The event I get on the 2003 DC is 8196 and I will place the details below.
Event Type:   Error
Event Source:           Group Policy Scheduled Tasks
Event Category:        Disk
Event ID:       8196
Date:              2/27/2014
Time:             4:48:47 PM
User:              NT AUTHORITY\SYSTEM
Computer:     <computername>
Description:
The client-side extension caught the unhandled exception '0xC0000005' inside: 'threadEntry : client main' See trace file for more details. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
So, should I be concerned that this is failing on the 2003 DC, does this mean that if my workstations authenticate to my 2003 DC that the preference will not process?
I was reading that in 2003 client side extensions were not there and can be installed, would this make the modeling succeed?
How do I get verified, I tried to post screenshots, but I could not. :(

Hi Jonathan,
As you have found the reason, I want to confirm whether the issue has been fixed.
In fact, for Windows Server 2003 to apply or process Group Policy Preferences settings, we must install client-side extensions of GPP for Windows Server 2003.
Although this is not related to this case, for your information, if our clients are Windows XP or Windows Vista, to use GPP, we must install client-side extensions for these
workstations respectively.
Regarding GPP, the following article can be referred to for more information.
Group Policy Preferences Getting Started Guide
http://technet.microsoft.com/en-us/library/cc731892(v=WS.10).aspx
Best regards,
Frank Shen

Group Policy Preferences Shortcut issues ( event ID 1085 )

I am hoping someone will be able to help me with a problem that is causing our users a headache
We have a Windows 2008 SP2 terminal server farm ( 1 gateway, 2 Terminal servers TS1 and TS2 ), we also use Group Policy Preferences to deliver app shortcuts to different AD user groups.
TS1 and TS2 were built from the same image. On TS1 users logon and get all the icons they are entitled to, on TS2 it is random to whether they get their shortcuts or not.
Both TS are rebooted daily and I have scripted removing any local profiles incase it was something left behind.
Checking the event Logs on TS2 I see several errors that appear to relate to Group Policy and correspond to when users have connected in.
any help with this issue would be appreciated.
Here is the information from the System log:
Log Name: System
Source: Microsoft-Windows-GroupPolicy
Date: 05/12/2014 15:32:26
Event ID: 1085
Task Category: None
Level: Warning
Keywords:
User: Username
Computer: TerminalServer
Description:
Windows failed to apply the Group Policy Shortcuts settings. Group Policy Shortcuts settings might have its own log file. Please click on the "More information" link.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-GroupPolicy" Guid="{aea1b4fa-97d1-45f2-a64c-4d69fffd92c9}" />
<EventID>1085</EventID>
<Version>0</Version>
<Level>3</Level>
<Task>0</Task>
<Opcode>1</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2014-12-05T15:32:26.450Z" />
<EventRecordID>478778</EventRecordID>
<Correlation ActivityID="{CCB45268-E6F8-4127-97C8-A8544829F2DE}" />
<Execution ProcessID="344" ThreadID="11212" />
<Channel>System</Channel>
<Computer>TerminalServer</Computer>
<Security UserID="S-1-5-21" />
</System>
<EventData>
<Data Name="SupportInfo1">1</Data>
<Data Name="SupportInfo2">3892</Data>
<Data Name="ProcessingMode">1</Data>
<Data Name="ProcessingTimeInMilliseconds">6047</Data>
<Data Name="ErrorCode">2147942413</Data>
<Data Name="ErrorDescription">The data is invalid. </Data>
<Data Name="DCName”>\\OurDomain</Data>
<Data Name="ExtensionName">Group Policy Shortcuts</Data>
<Data Name="ExtensionId">{C418DD9D-0D14-4efb-8FBF-CFE535C8FAC7}</Data>
</EventData>
</Event>

> <Data Name="ErrorDescription">The data is invalid. </Data>
Delete the history XML.
Martin
Mal ein
GUTES Buch über GPOs lesen?
NO THEY ARE NOT EVIL, if you know what you are doing:
Good or bad GPOs?
And if IT bothers me - coke bottle design refreshment :))

The Group Policy Client Side Extension Group Policy Shortcuts may have caused th e Group Policy Service to terminate unexpectedly.

Hi all,
Having an issue with the shortcuts Group Policy extension applying to our Windows 7 machines. It was working until last Wednesday and since then users get a Group Policy Client service error when logging in.
We have narrowed it down to the shortcuts extension, if the extension is disabled then a user can log in, if enabled and empty then the following error comes up. With all the investigation we have done so far it seems as though something on the client is
making this happen.
We have –
Copied the original policy
Exported and imported the policy
Deleted all the shortcuts
Deleted all the shortcuts and created a brand new shortcut
And the same thing happens. Only if you right click on the Shortcut Extension and select disable then the user can log in
When running Gpupdate /force we get the following error
The Group Policy Client Side Extension Group Policy Shortcuts may have caused the Group Policy Service to terminate unexpectedly. To prevent further failures inthe
Group Policy Service, this extension has been temporarily disabled until after the next system restart. Group Policy settings managed by this extension may no
longer be enforced until the system is restarted. The vendor of this extension should be contacted if this issue recurs.
The Group Policy Client Side Extension Group Policy Internet Settings may have caused the Group Polcy Service to terminate unexpectedly. To prevent further failures
in the Group Policy Service, this extension has been temporarily disabled until after the next system restart. Group Policy settings managed by this extension
may no longer be enforced until the system is restarted. The vendor of this extension should be contacted if this issue recurs.
Has anyone come across this before?
Thanks

Hi Dejul,
How is the issue going? Does this issue happen to all Windows 7 clients? I am not sure this can be helpful but we can give it a try to install the following hotfix.
Some Group Policy preferences are not applied successfully on computers that are running Windows Vista, Windows Server 2008, Windows 7 or Windows Server 2008 R2
http://support.microsoft.com/kb/979731
Besides, please make sure that our clients are patched or updated to the latest.
An enterprise hotfix rollup is available for Windows 7 SP1 and Windows Server 2008 R2 SP1
http://support.microsoft.com/kb/2775511
TechNet Subscriber Support
If you are TechNet Subscription user and have any feedback on our support quality, please send your feedback here.
Best regards,
Frank Shen

Group Policy Preferences

I'm interested in applying group policy preferences to our new Windows 7 machines, partly to simplify my image-building process, via Zen 10 (soon Zen 11). However, I understand that these are not available through the Local Group Policy editor- so my question is, does anybody know how we could produce a set of Group Policy preference settings to deploy via Zen, without the presence of Active Directory?

Make sure this option is not set on the policy in the ZCC.
"After enforcement, force a re-login on the managed device, if necessary"
On 5/24/2011 9:36 AM, jfansell wrote:
>
> Thanks- I was hoping to be able to utilise something that already
> existed rather than using custom adm files- but we are now looking into
> doing it that way now. Incidentally we do have a purely for testing AD
> environment in which I created a test policy containing preferences, and
> imported this into ZCM 10, still no joy even though the policy
> preferences files appeared at the workstation (under
> c:\Windows\System32\grouppolicy\...) they just weren't effective.
> Presumably this is somehow a limitation of our environment (the AD is
> completely disconnected from the users and workstations). It would be
> nice if somehow the preferences were replicated in ZCM in the future.
>
>
Craig Wilson - MCNE, MCSE, CCNA
Novell Knowledge Partner
Novell does not officially monitor these forums.
Suggestions/Opinions/Statements made by me are solely my own.
These thoughts may not be shared by either Novell or any rational human.

Server 2012 Win 8.1 GPO Remote Registry Service & Group Policy Trace

I'm trying to enable the Remote Registry Service via GPO (Computer > Preferences > Control Panel > Services).
I set the following (and left the other config items at default):
Startup: Automatic
Service name: RemoteRegistry
Service action: Start service
This only results in a message in the event log and a message when running "gpupdate /force" both saying
"Windows failed to apply the Group Policy Services settings. Group Policy Services settings might have its own log file. Please click on the "More information" link."
HA! When was the last time one of those links helped anyone?
So I tried to enable "Computer > Policies > Administrative Templates > System > Group Policy > Logging and tracing > Configure Services preference logging and tracing" and set
Event logging Informational, Warnings and Errors
Tracing On
User trace c:\Trace\User.log
Computer trace c:\Trace\Computer.log
Planning trace c:\Trace\Planning.log
Maximum size of trace file (KB) 1024
I made the C:\Trace folder.
And NOTHING.
So the GPO doesn't log anything meaningful to the Event Viewer (and tells you to look somewhere that says it can't help you), The same thing is in the "Operational" GPO log, Group Policy Result and GPRESULT /h <filename> give you the same
meaningless poop.
Is there any way to start the flippin' service with the GPO, and is there a way to get any kind of meaningful logging?

Hi,
>>
Is there any way to start the flippin' service with the GPO, and is there a way to get any kind of meaningful logging?
If we want to get verbose information about group policy processing, we can try to enable logging in the Gpsvc.log file.
Regarding how to enable logging in the Gpsvc.log file, the following blog can be referred to for more information.
How to enable GPO logging on windows 7 /2008 r2 ?
http://blogs.technet.com/b/csstwplatform/archive/2010/11/09/how-to-enable-gpo-logging-on-windows-7-2008-r2.aspx
In addition, regarding group policy debug logging, the following article can be referred to for more information.
Group Policy Debug Log Settings
http://social.technet.microsoft.com/wiki/contents/articles/4506.group-policy-debug-log-settings.aspx
Best regards,
Frank Shen

Mobile AnyConnect group policy proxy settings

Similar Messages

Maybe you are looking for