Multiple OUs with GPOs - One OU with multiple GPOs and security - One OU with one GPO and item level targeting
Background...
We have around 30 locations and we need to deliver different GPOs to these locations.
There can be between 3 and 8 PCs in each location.
These PCs can move around at short notice (mainly as a backup with neighbouring locations should
PCs fail)
The GPOs differ to change printers (2 per location and 2 backup printers from neighbouring location), auto login, desktop wallpaper
Which is in your opinion the best solution for login speed, GPO & device management?
1) Multiple OUs with a single GPO in each OU, the devices can be moved into new OU when the PCs move
2) Single OU with multiple GPOs, add devices to security group and use security filtering on the GPOs
3) Single OU with single GPO, add devices to security group and use item level targeting on the group
> 1) Multiple OUs with a single GPO in each OU, the devices can be moved
> into new OU when the PCs move
> 2) Single OU with multiple GPOs, add devices to security group and use
> security filtering on the GPOs
> 3) Single OU with single GPO, add devices to security group and use item
> level targeting on the group
4) GPMC, Sites, "show sites". Then link appropriate GPOs to each
individual site.
That's the way to go here...
Martin
Mal ein
GUTES Buch über GPOs lesen?
NO THEY ARE NOT EVIL, if you know what you are doing:
Good or bad GPOs?
And if IT bothers me - coke bottle design refreshment :))
Similar Messages
-
Updating Administrators(built-in) with item-level targeting on an enforced policy
I need help with this.
In our Computers OU, we have an enforced GPO with a computer policy that adds local admins to the computers on our network. The policy is Computer Configuration >> Policies >> Windows Settings >> Security Settings >> Local Policies/User
Rights Assignment >> Restricted Groups >> Group (BUILTIN\Administrators). For this example, we'll call this GPO #1.
I need to add another user account as a local admin, but targeted to certain computers.
I tried to edit GPO #1. I went into Computer Configuration >> Control Panel Settings > Local Users and Groups, and then added a Group with the settings >> Updating >> Administrators (built-in) & item-level targeting to the computers
I wanted, but the setting always gets over-written by the setting that adds local admins.
I then tried to create a GPO with the Group update. Lets call this GPO #2. I enforced this rule, linked it to the OU, changed the order so that GPO #2 is above GPO #1, but this doesn't seem to be working.
Is my inheritance order incorrect?
1 is GPO #2
2 is GPO #1
Ideas anyone?> In our Computers OU, we have an enforced GPO with a computer policy that
> adds local admins to the computers on our network. The policy is
> Computer Configuration >> Policies >> Windows Settings >> Security
> Settings >> Local Policies/User Rights Assignment >> Restricted Groups
> >> Group (BUILTIN\Administrators).
Restricted Groups has 2 operation modes: Members and Member of. The
first one clears out any existing members, and that's what you use right
now. The second simply adds a group to another group and keeps all
existing members, that's what you want to use for your additional computers.
> I need to add another user account as a local admin, but targeted to
> certain computers.
To do so, you need to create a domain group that contains the related
account(s). This domain group is "member of" local admins. And make sure
this second GPO is linked higher (so it is processed _after_ the first
one that clears out existing members).
Martin
Mal ein
GUTES Buch über GPOs lesen?
NO THEY ARE NOT EVIL, if you know what you are doing:
Good or bad GPOs?
And if IT bothers me - coke bottle design refreshment :))
Yes I know I can do this, but I can't use item-level targeting with this setup. I don't want the user account to be local admins for all computers. I only want it to be local admins for 4 of them.
Wouldn't precedence take place in this OU if I have the GPO that adds another member as #1, and the GPO that deletes and adds as #2? It isn't working as I had thought it would. -
Mapping Networkdrive using GPO and Item-Level Targeting - Same Letter in two groups
Hi.
I'm using one GPO to Map networkdrives, we are using it with Item-Level Targeting which targets on Security Group, so a Member of "SecurityGroup" gets the Drive, we have several drives and we are using all the Letters that are available, now I'm
in a pickle and need help with If a User is part of two Security Groups that uses the same letter to map the drive, Example: User1 is a part of two security groups "Drive-Sales" and "Drive-Account" these two Security Groups uses the same
Letter in the GPO to map the drive, so if the User is in both Groups he only gets the "Sales Drive" but not "Account Drive".
So what I need is that can the GPO assign next Available letter on the computer that "user1" is logged on, and can it be signed on the "Account Drive". ?
Hope you understand what I'm going for
Kind Regards
Haflidi Fridthjofsson.> we are using all the Letters that are available
You should eventually switch to DFS Namespaces and Access based
enumeration - so each user will have the DFS root assigned and can only
see the subfolders he has access to.
> So what I need is that can the GPO assign next Available letter on the
> computer that "user1" is logged on, and can it be signed on the "Account
> Drive". ?
Yes: Create another assigment with an ILT of "user is member of BOTH
groups" and use "next available" in this assignment.
Martin
Mal ein
GUTES Buch über GPOs lesen?
NO THEY ARE NOT EVIL, if you know what you are doing:
Good or bad GPOs?
And if IT bothers me - coke bottle design refreshment :)) -
Drive Map GPO and Item-Level targeting using DNS Computer Name not working as expected
I've run into a snag trying to move from logon script based drive mappings, to a GPO based Drive map solution and I'm hoping somebody can shed some light on the problem that I am seeing. We started down the GPO based drive mappings because we have
a handful of Windows 8 client computers which don't run the logon script based drive mappings.
I put together a basic Drive Maps GPO. I'm mapping 3 drives, I've linked the GPO to a computer container OU for testing and everything is working just fine. I have 3 different Windows 8 client PC, all domain joined, and all 3 run the GPO as
expected.
The problem is when I attempt to apply Item-level targeting. I've found that if I define item-level targeting to use the NetBIOS name of the computer, I can either apply the GPO at an individual computer level, or I can exclude the GPO for that individual
computer by toggling between IS and IS NOT. However, when I choose to define the computer name by choosing the DNS option, the GPO does not apply as expected.
So, if I say "the DNS computer name is example1.mydomain.com" and I apply the GPO, it applies to example1, example2 and example3. And if I instead say, "the DNS computer name is not example1.mydomain.com", then it doesn't apply
to example1, example2 or example3. Obviously, I would expect it to apply or not apply only to example1.mydomain.com.
If instead, I say "the NetBIOS computer name is example1", and apply the GPO, then example1 gets it, and example2 and example3 do not. If I say, "the netBIOS name is not example 1", then example1 does NOT get the drive mapping,
but example 2 and example3 do. < This is exactly what I want and I can continue to just use NetBIOS names...but I don't understand why DNS isn't working in the same manner.
My clients are all using DHCP and using domain controllers for DNS. All 3 machines are in the mydomain.com namespace. The mydomain.com namespace is an active directory integrated zone. We have reverse zones in place for the dns records.
I can ping the machines from the DC's as well as the machines themselves. I can run nslookup and resolve the computer name for each host using the FQDN. I can also run a ping -a IP_ADDY and get the FQDN back. The DC's themselves are
running Server 2008 R2. I honestly don't see any issues from a name resolution standpoint on the network itself.
So, any suggestions as to why defining the shortened NetBIOS name works just fine, but using DNS with a FQDN does not? (I've tried the DNS name using just the name, the name., as well as name.mydomain.com and name.mydomain.com.)And here is the result from a Windows 7 host, which is named d2-7-user1...thus it should map the T drive and in fact does;
2013-04-19 15:34:43.691 [pid=0x3e0,tid=0x120c] Entering ProcessGroupPolicyExDrives()
2013-04-19 15:34:43.691 [pid=0x3e0,tid=0x120c] SOFTWARE\Policies\Microsoft\Windows\Group Policy\{5794DAFD-BE60-433f-88A2-1A31939AC01F}
2013-04-19 15:34:43.691 [pid=0x3e0,tid=0x120c] BackgroundPriorityLevel ( 0 )
2013-04-19 15:34:43.691 [pid=0x3e0,tid=0x120c] DisableRSoP ( 0 )
2013-04-19 15:34:43.691 [pid=0x3e0,tid=0x120c] LogLevel ( 3 )
2013-04-19 15:34:43.691 [pid=0x3e0,tid=0x120c] Command subsystem initialized. [SUCCEEDED(S_FALSE)]
2013-04-19 15:34:43.706 [pid=0x3e0,tid=0x120c] Set user security context.
2013-04-19 15:34:43.706 [pid=0x3e0,tid=0x120c] Set system security context.
2013-04-19 15:34:43.706 [pid=0x3e0,tid=0x120c] User impersonation initialized.
2013-04-19 15:34:43.706 [pid=0x3e0,tid=0x120c] Client context subsystem initialized.
2013-04-19 15:34:43.706 [pid=0x3e0,tid=0x120c] Configuration subsystem initialized.
2013-04-19 15:34:43.706 [pid=0x3e0,tid=0x120c] Licensing subsystem initialized.
2013-04-19 15:34:43.706 [pid=0x3e0,tid=0x120c] Set user security context.
2013-04-19 15:34:43.706 [pid=0x3e0,tid=0x120c] User information initialized.
2013-04-19 15:34:43.722 [pid=0x3e0,tid=0x120c] Variable %ComSpec% = "C:\Windows\system32\cmd.exe"
2013-04-19 15:34:43.722 [pid=0x3e0,tid=0x120c] Variable %FP_NO_HOST_CHECK% = "NO"
2013-04-19 15:34:43.722 [pid=0x3e0,tid=0x120c] Variable %OS% = "Windows_NT"
2013-04-19 15:34:43.722 [pid=0x3e0,tid=0x120c] Variable %Path% = "C:\Program Files (x86)\VMware\VMware vSphere CLI\Perl\site\bin;C:\Program Files (x86)\VMware\VMware vSphere CLI\Perl\bin;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS
Client\;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x86;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x64;C:\Program Files\Intel\Intel(R) Management Engine
Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT"
2013-04-19 15:34:43.722 [pid=0x3e0,tid=0x120c] Variable %PATHEXT% = ".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC"
2013-04-19 15:34:43.722 [pid=0x3e0,tid=0x120c] Variable %PROCESSOR_ARCHITECTURE% = "AMD64"
2013-04-19 15:34:43.722 [pid=0x3e0,tid=0x120c] Variable %TEMP% = "C:\Users\user1\AppData\Local\Temp"
2013-04-19 15:34:43.722 [pid=0x3e0,tid=0x120c] Variable %TMP% = "C:\Users\user1\AppData\Local\Temp"
2013-04-19 15:34:43.722 [pid=0x3e0,tid=0x120c] Variable %USERNAME% = "user1"
2013-04-19 15:34:43.722 [pid=0x3e0,tid=0x120c] Variable %windir% = "C:\Windows"
2013-04-19 15:34:43.722 [pid=0x3e0,tid=0x120c] Variable %PSModulePath% = "C:\Windows\system32\WindowsPowerShell\v1.0\Modules\"
2013-04-19 15:34:43.722 [pid=0x3e0,tid=0x120c] Variable %NUMBER_OF_PROCESSORS% = "8"
2013-04-19 15:34:43.722 [pid=0x3e0,tid=0x120c] Variable %PROCESSOR_LEVEL% = "6"
2013-04-19 15:34:43.737 [pid=0x3e0,tid=0x120c] Variable %PROCESSOR_IDENTIFIER% = "Intel64 Family 6 Model 58 Stepping 9, GenuineIntel"
2013-04-19 15:34:43.737 [pid=0x3e0,tid=0x120c] Variable %PROCESSOR_REVISION% = "3a09"
2013-04-19 15:34:43.737 [pid=0x3e0,tid=0x120c] Variable %windows_tracing_logfile% = "C:\BVTBin\Tests\installpackage\csilogfile.log"
2013-04-19 15:34:43.737 [pid=0x3e0,tid=0x120c] Variable %windows_tracing_flags% = "3"
2013-04-19 15:34:43.737 [pid=0x3e0,tid=0x120c] Variable %ALLUSERSPROFILE% = "C:\ProgramData"
2013-04-19 15:34:43.737 [pid=0x3e0,tid=0x120c] Variable %APPDATA% = "C:\Users\user1\AppData\Roaming"
2013-04-19 15:34:43.737 [pid=0x3e0,tid=0x120c] Variable %CommonProgramFiles% = "C:\Program Files\Common Files"
2013-04-19 15:34:43.737 [pid=0x3e0,tid=0x120c] Variable %CommonProgramFiles(x86)% = "C:\Program Files (x86)\Common Files"
2013-04-19 15:34:43.737 [pid=0x3e0,tid=0x120c] Variable %CommonProgramW6432% = "C:\Program Files\Common Files"
2013-04-19 15:34:43.737 [pid=0x3e0,tid=0x120c] Variable %COMPUTERNAME% = "D2-7-user1"
2013-04-19 15:34:43.737 [pid=0x3e0,tid=0x120c] Variable %HOMEDRIVE% = "C:"
2013-04-19 15:34:43.737 [pid=0x3e0,tid=0x120c] Variable %HOMEPATH% = "\Users\user1"
2013-04-19 15:34:43.753 [pid=0x3e0,tid=0x120c] Variable %LOCALAPPDATA% = "C:\Users\user1\AppData\Local"
2013-04-19 15:34:43.753 [pid=0x3e0,tid=0x120c] Variable %LOGONSERVER% = "\\VM-EXAMPLE-DC05"
2013-04-19 15:34:43.753 [pid=0x3e0,tid=0x120c] Variable %ProgramData% = "C:\ProgramData"
2013-04-19 15:34:43.753 [pid=0x3e0,tid=0x120c] Variable %ProgramFiles% = "C:\Program Files"
2013-04-19 15:34:43.753 [pid=0x3e0,tid=0x120c] Variable %ProgramFiles(x86)% = "C:\Program Files (x86)"
2013-04-19 15:34:43.753 [pid=0x3e0,tid=0x120c] Variable %ProgramW6432% = "C:\Program Files"
2013-04-19 15:34:43.753 [pid=0x3e0,tid=0x120c] Variable %PUBLIC% = "C:\Users\Public"
2013-04-19 15:34:43.753 [pid=0x3e0,tid=0x120c] Variable %SystemDrive% = "C:"
2013-04-19 15:34:43.753 [pid=0x3e0,tid=0x120c] Variable %SystemRoot% = "C:\Windows"
2013-04-19 15:34:43.753 [pid=0x3e0,tid=0x120c] Variable %USERDNSDOMAIN% = "mydomain.com.au"
2013-04-19 15:34:43.753 [pid=0x3e0,tid=0x120c] Variable %USERDOMAIN% = "mydomain"
2013-04-19 15:34:43.769 [pid=0x3e0,tid=0x120c] Variable %USERPROFILE% = "C:\Users\user1"
2013-04-19 15:34:43.769 [pid=0x3e0,tid=0x120c] Variable %LogonUser% = "user1"
2013-04-19 15:34:43.769 [pid=0x3e0,tid=0x120c] Variable %LogonDomain% = "mydomain"
2013-04-19 15:34:43.769 [pid=0x3e0,tid=0x120c] Variable %LogonUserSid% = "S-1-5-21-976655598-962914793-294660928-7222"
2013-04-19 15:34:43.769 [pid=0x3e0,tid=0x120c] Variable %BinaryUserSid% = "00001C3611902B403964E9E93A3694EE000000150500000000000501"
2013-04-19 15:34:43.769 [pid=0x3e0,tid=0x120c] Variable %LdapUserSid% = "\01\05\00\00\00\00\00\05\15\00\00\00\EE\94\36\3A\E9\E9\64\39\40\2B\90\11\36\1C\00\00"
2013-04-19 15:34:43.769 [pid=0x3e0,tid=0x120c] Variable %ReversedUserSid% = "010500000000000515000000EE94363AE9E96439402B9011361C0000"
2013-04-19 15:34:43.769 [pid=0x3e0,tid=0x120c] Variable %BinaryComputerSid% = "000040EC11902B403964E9E93A3694EE000000150500000000000501"
2013-04-19 15:34:43.769 [pid=0x3e0,tid=0x120c] Variable %ReversedComputerSid% = "010500000000000515000000EE94363AE9E96439402B9011EC400000"
2013-04-19 15:34:43.784 [pid=0x3e0,tid=0x120c] Variable %LdapComputerSid% = "\01\05\00\00\00\00\00\05\15\00\00\00\EE\94\36\3A\E9\E9\64\39\40\2B\90\11\EC\40\00\00"
2013-04-19 15:34:43.784 [pid=0x3e0,tid=0x120c] Variable %OsVersion% = "Windows 7"
2013-04-19 15:34:43.784 [pid=0x3e0,tid=0x120c] Variable %LocalTimeEx% = "2013-04-19 15:34:43.706"
2013-04-19 15:34:43.784 [pid=0x3e0,tid=0x120c] Variable %LocalTime% = "2013-04-19 15:34:43"
2013-04-19 15:34:43.784 [pid=0x3e0,tid=0x120c] Variable %LocalTimeXmlEx% = "2013-04-19T15:34:43.706"
2013-04-19 15:34:43.784 [pid=0x3e0,tid=0x120c] Variable %LocalTimeXml% = "2013-04-19T15:34:43"
2013-04-19 15:34:43.784 [pid=0x3e0,tid=0x120c] Variable %DateTimeEx% = "2013-04-19 19:34:43.706"
2013-04-19 15:34:43.784 [pid=0x3e0,tid=0x120c] Variable %DateTime% = "2013-04-19 19:34:43"
2013-04-19 15:34:43.784 [pid=0x3e0,tid=0x120c] Variable %MacAddress% = "cc-f7-20-52-41-53"
2013-04-19 15:34:43.784 [pid=0x3e0,tid=0x120c] Variable %TempDir% = "C:\Users\user1\AppData\Local\Temp"
2013-04-19 15:34:43.800 [pid=0x3e0,tid=0x120c] Variable %WindowsDir% = "C:\Windows"
2013-04-19 15:34:43.800 [pid=0x3e0,tid=0x120c] Variable %SystemDir% = "C:\Windows\system32"
2013-04-19 15:34:43.800 [pid=0x3e0,tid=0x120c] Variable %DomainName% = "mydomain"
2013-04-19 15:34:43.800 [pid=0x3e0,tid=0x120c] Variable %ProgramFilesDir% = "C:\Program Files"
2013-04-19 15:34:43.800 [pid=0x3e0,tid=0x120c] Variable %AppDataDir% = "C:\Users\user1\AppData\Roaming"
2013-04-19 15:34:43.800 [pid=0x3e0,tid=0x120c] Variable %DesktopDir% = "C:\Users\user1\Desktop"
2013-04-19 15:34:43.800 [pid=0x3e0,tid=0x120c] Variable %StartMenuDir% = "C:\Users\user1\AppData\Roaming\Microsoft\Windows\Start Menu"
2013-04-19 15:34:43.800 [pid=0x3e0,tid=0x120c] Variable %ProgramsDir% = "C:\Users\user1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs"
2013-04-19 15:34:43.800 [pid=0x3e0,tid=0x120c] Variable %StartUpDir% = "C:\Users\user1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup"
2013-04-19 15:34:43.800 [pid=0x3e0,tid=0x120c] Variable %FavoritesDir% = "C:\Users\user1\Favorites"
2013-04-19 15:34:43.815 [pid=0x3e0,tid=0x120c] Variable %SendToDir% = "C:\Users\user1\AppData\Roaming\Microsoft\Windows\SendTo"
2013-04-19 15:34:43.815 [pid=0x3e0,tid=0x120c] Variable %RecentDocumentsDir% = "C:\Users\user1\AppData\Roaming\Microsoft\Windows\Recent"
2013-04-19 15:34:43.815 [pid=0x3e0,tid=0x120c] Variable %NetPlacesDir% = "C:\Users\user1\AppData\Roaming\Microsoft\Windows\Network Shortcuts"
2013-04-19 15:34:43.815 [pid=0x3e0,tid=0x120c] Variable %CommonAppdataDir% = "C:\ProgramData"
2013-04-19 15:34:43.815 [pid=0x3e0,tid=0x120c] Variable %CommonDesktopDir% = "C:\Users\Public\Desktop"
2013-04-19 15:34:43.815 [pid=0x3e0,tid=0x120c] Variable %CommonStartMenuDir% = "C:\ProgramData\Microsoft\Windows\Start Menu"
2013-04-19 15:34:43.815 [pid=0x3e0,tid=0x120c] Variable %CommonProgramsDir% = "C:\ProgramData\Microsoft\Windows\Start Menu\Programs"
2013-04-19 15:34:43.815 [pid=0x3e0,tid=0x120c] Variable %CommonStartUpDir% = "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup"
2013-04-19 15:34:43.815 [pid=0x3e0,tid=0x120c] Variable %CommonFavoritesDir% = "C:\Users\user1\Favorites"
2013-04-19 15:34:43.831 [pid=0x3e0,tid=0x120c] Variable %CurrentProcessId% = "992"
2013-04-19 15:34:43.831 [pid=0x3e0,tid=0x120c] Variable %CurrentThreadId% = "4620"
2013-04-19 15:34:43.831 [pid=0x3e0,tid=0x120c] Variable %GroupPolicyVersion% = "6.1.7601.17514"
2013-04-19 15:34:43.831 [pid=0x3e0,tid=0x120c] Variable %TraceFile% = "C:\ProgramData\GroupPolicy\Preference\Trace\User.log"
2013-04-19 15:34:43.831 [pid=0x3e0,tid=0x120c] Variable %LastError% = "0x00000000"
2013-04-19 15:34:43.831 [pid=0x3e0,tid=0x120c] Variable %LastErrorText% = "The operation completed successfully."
2013-04-19 15:34:43.831 [pid=0x3e0,tid=0x120c] Variables subsystem initialized.
2013-04-19 15:34:43.831 [pid=0x3e0,tid=0x120c] Set system security context.
2013-04-19 15:34:43.831 [pid=0x3e0,tid=0x120c] ----- Parameters
2013-04-19 15:34:43.847 [pid=0x3e0,tid=0x120c] CSE GUID : {5794DAFD-BE60-433f-88A2-1A31939AC01F}
2013-04-19 15:34:43.847 [pid=0x3e0,tid=0x120c] Flags : ( ) GPO_INFO_FLAG_MACHINE - Apply machine policy rather than user policy
2013-04-19 15:34:43.847 [pid=0x3e0,tid=0x120c] ( ) GPO_INFO_FLAG_BACKGROUND - Background refresh of policy (ok to do slow stuff)
2013-04-19 15:34:43.847 [pid=0x3e0,tid=0x120c] ( ) GPO_INFO_FLAG_SLOWLINK - Policy is being applied across a slow link
2013-04-19 15:34:43.847 [pid=0x3e0,tid=0x120c] ( ) GPO_INFO_FLAG_VERBOSE - Verbose output to the eventlog
2013-04-19 15:34:43.847 [pid=0x3e0,tid=0x120c] ( ) GPO_INFO_FLAG_NOCHANGES - No changes were detected to the Group Policy Objects
2013-04-19 15:34:43.847 [pid=0x3e0,tid=0x120c] ( ) GPO_INFO_FLAG_LINKTRANSITION - A change in link speed was detected between previous policy application and current policy application
2013-04-19 15:34:43.847 [pid=0x3e0,tid=0x120c] ( ) GPO_INFO_FLAG_LOGRSOP_TRANSITION - A change in RSoP logging was detected between the application of the previous policy and the application of the
current policy.
2013-04-19 15:34:43.847 [pid=0x3e0,tid=0x120c] ( ) GPO_INFO_FLAG_FORCED_REFRESH - Forced Refresh is being applied. redo policies.
2013-04-19 15:34:43.862 [pid=0x3e0,tid=0x120c] ( ) GPO_INFO_FLAG_SAFEMODE_BOOT - windows safe mode boot flag
2013-04-19 15:34:43.862 [pid=0x3e0,tid=0x120c] ( ) GPO_INFO_FLAG_ASYNC_FOREGROUND - Asynchronous foreground refresh of policy
2013-04-19 15:34:43.862 [pid=0x3e0,tid=0x120c] Token (computer or user SID): S-1-5-21-976655598-962914793-294660928-7222
2013-04-19 15:34:43.862 [pid=0x3e0,tid=0x120c] Abort Flag : Yes (0x02b54a60)
2013-04-19 15:34:43.862 [pid=0x3e0,tid=0x120c] HKey Root : Yes (0x0000163c)
2013-04-19 15:34:43.862 [pid=0x3e0,tid=0x120c] Deleted GPO List : No
2013-04-19 15:34:43.862 [pid=0x3e0,tid=0x120c] Changed GPO List : Yes
2013-04-19 15:34:43.862 [pid=0x3e0,tid=0x120c] Asynchronous Processing : Yes
2013-04-19 15:34:43.878 [pid=0x3e0,tid=0x120c] Status Callback : Yes (0xfae525b0)
2013-04-19 15:34:43.878 [pid=0x3e0,tid=0x120c] WMI namespace : Yes (0x03c96fa0)
2013-04-19 15:34:43.878 [pid=0x3e0,tid=0x120c] RSoP Status : Yes (0x057ae838)
2013-04-19 15:34:43.878 [pid=0x3e0,tid=0x120c] Planning Mode Site : (none)
2013-04-19 15:34:43.878 [pid=0x3e0,tid=0x120c] Computer Target : No (0x00000000)
2013-04-19 15:34:43.878 [pid=0x3e0,tid=0x120c] User Target : No (0x00000000)
2013-04-19 15:34:43.878 [pid=0x3e0,tid=0x120c] Calculated session relevance.
2013-04-19 15:34:43.878 [pid=0x3e0,tid=0x120c] Completed CSE pre-processing.
2013-04-19 15:34:43.878 [pid=0x3e0,tid=0x120c] Calculated list relevance. [SUCCEEDED(S_FALSE)]
2013-04-19 15:34:43.893 [pid=0x3e0,tid=0x120c] Deleted GPO list is not relevant to the CSE.
2013-04-19 15:34:43.893 [pid=0x3e0,tid=0x120c] Calculated list relevance.
2013-04-19 15:34:43.893 [pid=0x3e0,tid=0x120c] Planning mode not detected.
2013-04-19 15:34:43.893 [pid=0x3e0,tid=0x120c] Processing changed list.
2013-04-19 15:34:43.893 [pid=0x3e0,tid=0x120c] Processing user policy.
2013-04-19 15:34:43.893 [pid=0x3e0,tid=0x120c] Got WMI namespace for logging mode.
2013-04-19 15:34:43.893 [pid=0x3e0,tid=0x120c] Completed get GPO list.
2013-04-19 15:34:43.893 [pid=0x3e0,tid=0x120c] Initialized internal RSoP storage.
2013-04-19 15:34:43.909 [pid=0x3e0,tid=0x120c] Completed GPO list pre-processing.
2013-04-19 15:34:43.909 [pid=0x3e0,tid=0x120c] ----- Changed - 0
2013-04-19 15:34:43.909 [pid=0x3e0,tid=0x120c] Options : ( ) GPO_FLAG_DISABLE - This GPO is disabled.
2013-04-19 15:34:43.909 [pid=0x3e0,tid=0x120c] ( ) GPO_FLAG_FORCE - Do not override the settings in this GPO with settings in a subsequent GPO.
2013-04-19 15:34:43.909 [pid=0x3e0,tid=0x120c] Options (raw) : 0x00000000
2013-04-19 15:34:43.909 [pid=0x3e0,tid=0x120c] Version : 10354846 (0x009e009e)
2013-04-19 15:34:43.909 [pid=0x3e0,tid=0x120c] GPC : LDAP://CN=User,cn={14209C3C-8E16-4247-95C6-925260D86074},cn=policies,cn=system,DC=mydomain,DC=com,DC=au
2013-04-19 15:34:43.909 [pid=0x3e0,tid=0x120c] GPT :
\\mydomain.com.au\SysVol\mydomain.com.au\Policies\{14209C3C-8E16-4247-95C6-925260D86074}\User
2013-04-19 15:34:43.925 [pid=0x3e0,tid=0x120c] GPO Display Name : US Drive Mapping
2013-04-19 15:34:43.925 [pid=0x3e0,tid=0x120c] GPO Name : {14209C3C-8E16-4247-95C6-925260D86074}
2013-04-19 15:34:43.925 [pid=0x3e0,tid=0x120c] GPO Link : ( ) GPLinkUnknown - No link information is available.
2013-04-19 15:34:43.925 [pid=0x3e0,tid=0x120c] ( ) GPLinkMachine - The GPO is linked to a computer (local or remote).
2013-04-19 15:34:43.925 [pid=0x3e0,tid=0x120c] ( ) GPLinkSite - The GPO is linked to a site.
2013-04-19 15:34:43.925 [pid=0x3e0,tid=0x120c] ( ) GPLinkDomain - The GPO is linked to a domain.
2013-04-19 15:34:43.925 [pid=0x3e0,tid=0x120c] ( X ) GPLinkOrganizationalUnit - The GPO is linked to an organizational unit.
2013-04-19 15:34:43.925 [pid=0x3e0,tid=0x120c] ( ) GP Link Error
2013-04-19 15:34:43.925 [pid=0x3e0,tid=0x120c] lParam : 0x00000000
2013-04-19 15:34:43.940 [pid=0x3e0,tid=0x120c] Prev GPO : No
2013-04-19 15:34:43.940 [pid=0x3e0,tid=0x120c] Next GPO : No
2013-04-19 15:34:43.940 [pid=0x3e0,tid=0x120c] Extensions : [{00000000-0000-0000-0000-000000000000}{2EA1A81B-48E5-45E9-8BB7-A6E3AC170006}][{5794DAFD-BE60-433F-88A2-1A31939AC01F}{2EA1A81B-48E5-45E9-8BB7-A6E3AC170006}]
2013-04-19 15:34:43.940 [pid=0x3e0,tid=0x120c] lParam2 : 0x02a92248
2013-04-19 15:34:43.940 [pid=0x3e0,tid=0x120c] Link : LDAP://OU=Windows8 Machines,OU=USA,DC=mydomain,DC=com,DC=au
2013-04-19 15:34:43.940 [pid=0x3e0,tid=0x120c] Variable %GPHPATH% = "C:\ProgramData\Microsoft\Group Policy\History\{14209C3C-8E16-4247-95C6-925260D86074}\S-1-5-21-976655598-962914793-294660928-7222"
2013-04-19 15:34:43.940 [pid=0x3e0,tid=0x120c] Completed get GPH path.
2013-04-19 15:34:43.940 [pid=0x3e0,tid=0x120c] Completed set extensions.
2013-04-19 15:34:43.956 [pid=0x3e0,tid=0x120c] Completed get GPO is relevant.
2013-04-19 15:34:43.956 [pid=0x3e0,tid=0x120c] Variable %GPTPATH% = "\\mydomain.com.au\SysVol\mydomain.com.au\Policies\{14209C3C-8E16-4247-95C6-925260D86074}\User"
2013-04-19 15:34:43.956 [pid=0x3e0,tid=0x120c] Completed get GPT path.
2013-04-19 15:34:43.956 [pid=0x3e0,tid=0x120c] Completed RSoP init.
2013-04-19 15:34:43.956 [pid=0x3e0,tid=0x120c] Completed get next GPO.
2013-04-19 15:34:43.956 [pid=0x3e0,tid=0x120c] Completed check GPO license usage.
2013-04-19 15:34:43.956 [pid=0x3e0,tid=0x120c] Completed GPO pre-processing.
2013-04-19 15:34:43.971 [pid=0x3e0,tid=0x120c] Started removing policy.
2013-04-19 15:34:43.971 [pid=0x3e0,tid=0x120c] Read GPH data file.
2013-04-19 15:34:43.971 [pid=0x3e0,tid=0x120c] Completed parse of GPH XML.
2013-04-19 15:34:43.971 [pid=0x3e0,tid=0x120c] Completed get tree root.
2013-04-19 15:34:43.971 [pid=0x3e0,tid=0x120c] Deleted GPH data file.
2013-04-19 15:34:43.987 [pid=0x3e0,tid=0x120c] Started package execution.
2013-04-19 15:34:43.987 [pid=0x3e0,tid=0x120c] Set package timestamp variable (2013-04-19 19:34:43).
2013-04-19 15:34:43.987 [pid=0x3e0,tid=0x120c] Starting class <Drives>.
2013-04-19 15:34:43.987 [pid=0x3e0,tid=0x120c] RunOnce value created [SUCCEEDED(S_FALSE)]
2013-04-19 15:34:43.987 [pid=0x3e0,tid=0x120c] Handle Children.
2013-04-19 15:34:43.987 [pid=0x3e0,tid=0x120c] {935D1B74-9CB8-4e3c-9914-7DD559B7A417}
2013-04-19 15:34:43.987 [pid=0x3e0,tid=0x120c] Starting class <Drive> - G:.
2013-04-19 15:34:43.987 [pid=0x3e0,tid=0x120c] Set user security context.
2013-04-19 15:34:44.003 [pid=0x3e0,tid=0x120c] Adding child elements to RSOP.
2013-04-19 15:34:44.034 [pid=0x3e0,tid=0x120c] Properties handled.
2013-04-19 15:34:44.034 [pid=0x3e0,tid=0x120c] RunOnce value created [SUCCEEDED(S_FALSE)]
2013-04-19 15:34:44.034 [pid=0x3e0,tid=0x120c] Handle Children.
2013-04-19 15:34:44.034 [pid=0x3e0,tid=0x120c] Set system security context.
2013-04-19 15:34:44.034 [pid=0x3e0,tid=0x120c] EVENT : The user 'G:' preference item in the 'US Drive Mapping {14209C3C-8E16-4247-95C6-925260D86074}' Group Policy object was successfully removed.
2013-04-19 15:34:44.034 [pid=0x3e0,tid=0x120c] Completed class <Drive> - G:.
2013-04-19 15:34:44.034 [pid=0x3e0,tid=0x120c] {935D1B74-9CB8-4e3c-9914-7DD559B7A417}
2013-04-19 15:34:44.049 [pid=0x3e0,tid=0x120c] Starting class <Drive> - M:.
2013-04-19 15:34:44.049 [pid=0x3e0,tid=0x120c] Set user security context.
2013-04-19 15:34:44.049 [pid=0x3e0,tid=0x120c] Adding child elements to RSOP.
2013-04-19 15:34:44.096 [pid=0x3e0,tid=0x120c] Properties handled.
2013-04-19 15:34:44.096 [pid=0x3e0,tid=0x120c] RunOnce value created [SUCCEEDED(S_FALSE)]
2013-04-19 15:34:44.096 [pid=0x3e0,tid=0x120c] Handle Children.
2013-04-19 15:34:44.096 [pid=0x3e0,tid=0x120c] Set system security context.
2013-04-19 15:34:44.112 [pid=0x3e0,tid=0x120c] EVENT : The user 'M:' preference item in the 'US Drive Mapping {14209C3C-8E16-4247-95C6-925260D86074}' Group Policy object was successfully removed.
2013-04-19 15:34:44.112 [pid=0x3e0,tid=0x120c] Completed class <Drive> - M:.
2013-04-19 15:34:44.112 [pid=0x3e0,tid=0x120c] {935D1B74-9CB8-4e3c-9914-7DD559B7A417}
2013-04-19 15:34:44.112 [pid=0x3e0,tid=0x120c] Starting class <Drive> - H:.
2013-04-19 15:34:44.112 [pid=0x3e0,tid=0x120c] Set user security context.
2013-04-19 15:34:44.112 [pid=0x3e0,tid=0x120c] Adding child elements to RSOP.
2013-04-19 15:34:44.143 [pid=0x3e0,tid=0x120c] Properties handled.
2013-04-19 15:34:44.143 [pid=0x3e0,tid=0x120c] RunOnce value created [SUCCEEDED(S_FALSE)]
2013-04-19 15:34:44.143 [pid=0x3e0,tid=0x120c] Handle Children.
2013-04-19 15:34:44.143 [pid=0x3e0,tid=0x120c] Set system security context.
2013-04-19 15:34:44.143 [pid=0x3e0,tid=0x120c] EVENT : The user 'H:' preference item in the 'US Drive Mapping {14209C3C-8E16-4247-95C6-925260D86074}' Group Policy object was successfully removed.
2013-04-19 15:34:44.158 [pid=0x3e0,tid=0x120c] Completed class <Drive> - H:.
2013-04-19 15:34:44.158 [pid=0x3e0,tid=0x120c] {935D1B74-9CB8-4e3c-9914-7DD559B7A417}
2013-04-19 15:34:44.158 [pid=0x3e0,tid=0x120c] Starting class <Drive> - T:.
2013-04-19 15:34:44.158 [pid=0x3e0,tid=0x120c] Policy is not flagged for removal.
2013-04-19 15:34:44.158 [pid=0x3e0,tid=0x120c] Completed class <Drive> - T:.
2013-04-19 15:34:44.158 [pid=0x3e0,tid=0x120c] Completed class <Drives>.
2013-04-19 15:34:44.158 [pid=0x3e0,tid=0x120c] Completed package execution.
2013-04-19 15:34:44.174 [pid=0x3e0,tid=0x120c] Completed execution of removal package.
2013-04-19 15:34:44.174 [pid=0x3e0,tid=0x120c] Completed remove GPH.
2013-04-19 15:34:44.174 [pid=0x3e0,tid=0x120c] Started applying policy.
2013-04-19 15:34:44.174 [pid=0x3e0,tid=0x120c] Set user security context.
2013-04-19 15:34:44.174 [pid=0x3e0,tid=0x120c] Opened file.
2013-04-19 15:34:44.174 [pid=0x3e0,tid=0x120c] Got file size.
2013-04-19 15:34:44.174 [pid=0x3e0,tid=0x120c] Created file buffer.
2013-04-19 15:34:44.190 [pid=0x3e0,tid=0x120c] Completed read file data.
2013-04-19 15:34:44.190 [pid=0x3e0,tid=0x120c] Terminated file buffer.
2013-04-19 15:34:44.190 [pid=0x3e0,tid=0x120c] Closed file handle.
2013-04-19 15:34:44.190 [pid=0x3e0,tid=0x120c] Read GPE XML data file (1807 bytes total).
2013-04-19 15:34:44.190 [pid=0x3e0,tid=0x120c] Set system security context.
2013-04-19 15:34:44.190 [pid=0x3e0,tid=0x120c] Completed parse of GPE XML data.
2013-04-19 15:34:44.190 [pid=0x3e0,tid=0x120c] Completed loading of package.
2013-04-19 15:34:44.205 [pid=0x3e0,tid=0x120c] Completed get tree root.
2013-04-19 15:34:44.205 [pid=0x3e0,tid=0x120c] Started package execution.
2013-04-19 15:34:44.205 [pid=0x3e0,tid=0x120c] Set package timestamp variable (2013-04-19 19:34:43).
2013-04-19 15:34:44.205 [pid=0x3e0,tid=0x120c] Starting class <Drives>.
2013-04-19 15:34:44.205 [pid=0x3e0,tid=0x120c] RunOnce value created [SUCCEEDED(S_FALSE)]
2013-04-19 15:34:44.205 [pid=0x3e0,tid=0x120c] Handle Children.
2013-04-19 15:34:44.205 [pid=0x3e0,tid=0x120c] {935D1B74-9CB8-4e3c-9914-7DD559B7A417}
2013-04-19 15:34:44.221 [pid=0x3e0,tid=0x120c] Starting class <Drive> - G:.
2013-04-19 15:34:44.221 [pid=0x3e0,tid=0x120c] Set user security context.
2013-04-19 15:34:44.221 [pid=0x3e0,tid=0x120c] Adding child elements to RSOP.
2013-04-19 15:34:44.283 [pid=0x3e0,tid=0x120c] Properties handled.
2013-04-19 15:34:44.283 [pid=0x3e0,tid=0x120c] RunOnce value created [SUCCEEDED(S_FALSE)]
2013-04-19 15:34:44.283 [pid=0x3e0,tid=0x120c] Handle Children.
2013-04-19 15:34:44.283 [pid=0x3e0,tid=0x120c] Set system security context.
2013-04-19 15:34:44.299 [pid=0x3e0,tid=0x120c] EVENT : The user 'G:' preference item in the 'US Drive Mapping {14209C3C-8E16-4247-95C6-925260D86074}' Group Policy object applied successfully.
2013-04-19 15:34:44.299 [pid=0x3e0,tid=0x120c] Completed class <Drive> - G:.
2013-04-19 15:34:44.299 [pid=0x3e0,tid=0x120c] {935D1B74-9CB8-4e3c-9914-7DD559B7A417}
2013-04-19 15:34:44.299 [pid=0x3e0,tid=0x120c] Starting class <Drive> - M:.
2013-04-19 15:34:44.299 [pid=0x3e0,tid=0x120c] Set user security context.
2013-04-19 15:34:44.299 [pid=0x3e0,tid=0x120c] Adding child elements to RSOP.
2013-04-19 15:34:44.314 [pid=0x3e0,tid=0x120c] Properties handled.
2013-04-19 15:34:44.330 [pid=0x3e0,tid=0x120c] RunOnce value created [SUCCEEDED(S_FALSE)]
2013-04-19 15:34:44.330 [pid=0x3e0,tid=0x120c] Handle Children.
2013-04-19 15:34:44.330 [pid=0x3e0,tid=0x120c] Set system security context.
2013-04-19 15:34:44.330 [pid=0x3e0,tid=0x120c] EVENT : The user 'M:' preference item in the 'US Drive Mapping {14209C3C-8E16-4247-95C6-925260D86074}' Group Policy object applied successfully.
2013-04-19 15:34:44.330 [pid=0x3e0,tid=0x120c] Completed class <Drive> - M:.
2013-04-19 15:34:44.330 [pid=0x3e0,tid=0x120c] {935D1B74-9CB8-4e3c-9914-7DD559B7A417}
2013-04-19 15:34:44.346 [pid=0x3e0,tid=0x120c] Starting class <Drive> - H:.
2013-04-19 15:34:44.346 [pid=0x3e0,tid=0x120c] Starting filter [AND NOT FilterComputer].
2013-04-19 15:34:44.346 [pid=0x3e0,tid=0x120c] Adding child elements to RSOP.
2013-04-19 15:34:44.346 [pid=0x3e0,tid=0x120c] Passed filter [FilterComputer].
2013-04-19 15:34:44.346 [pid=0x3e0,tid=0x120c] Filters passed.
2013-04-19 15:34:44.346 [pid=0x3e0,tid=0x120c] Set user security context.
2013-04-19 15:34:44.346 [pid=0x3e0,tid=0x120c] Adding child elements to RSOP.
2013-04-19 15:34:44.377 [pid=0x3e0,tid=0x120c] Properties handled.
2013-04-19 15:34:44.377 [pid=0x3e0,tid=0x120c] RunOnce value created [SUCCEEDED(S_FALSE)]
2013-04-19 15:34:44.377 [pid=0x3e0,tid=0x120c] Handle Children.
2013-04-19 15:34:44.377 [pid=0x3e0,tid=0x120c] Set system security context.
2013-04-19 15:34:44.392 [pid=0x3e0,tid=0x120c] EVENT : The user 'H:' preference item in the 'US Drive Mapping {14209C3C-8E16-4247-95C6-925260D86074}' Group Policy object applied successfully.
2013-04-19 15:34:44.392 [pid=0x3e0,tid=0x120c] Completed class <Drive> - H:.
2013-04-19 15:34:44.392 [pid=0x3e0,tid=0x120c] {935D1B74-9CB8-4e3c-9914-7DD559B7A417}
2013-04-19 15:34:44.392 [pid=0x3e0,tid=0x120c] Starting class <Drive> - T:.
2013-04-19 15:34:44.392 [pid=0x3e0,tid=0x120c] Starting filter [AND NOT FilterComputer].
2013-04-19 15:34:44.392 [pid=0x3e0,tid=0x120c] Adding child elements to RSOP.
2013-04-19 15:34:44.408 [pid=0x3e0,tid=0x120c] Passed filter [FilterComputer].
2013-04-19 15:34:44.408 [pid=0x3e0,tid=0x120c] Filters passed.
2013-04-19 15:34:44.408 [pid=0x3e0,tid=0x120c] Set user security context.
2013-04-19 15:34:44.408 [pid=0x3e0,tid=0x120c] Adding child elements to RSOP.
2013-04-19 15:34:44.548 [pid=0x3e0,tid=0x120c] Properties handled.
2013-04-19 15:34:44.548 [pid=0x3e0,tid=0x120c] RunOnce value created [SUCCEEDED(S_FALSE)]
2013-04-19 15:34:44.548 [pid=0x3e0,tid=0x120c] Handle Children.
2013-04-19 15:34:44.548 [pid=0x3e0,tid=0x120c] Set system security context.
2013-04-19 15:34:44.548 [pid=0x3e0,tid=0x120c] EVENT : The user 'T:' preference item in the 'US Drive Mapping {14209C3C-8E16-4247-95C6-925260D86074}' Group Policy object applied successfully.
2013-04-19 15:34:44.564 [pid=0x3e0,tid=0x120c] Completed class <Drive> - T:.
2013-04-19 15:34:44.564 [pid=0x3e0,tid=0x120c] Completed class <Drives>.
2013-04-19 15:34:44.564 [pid=0x3e0,tid=0x120c] Completed package execution.
2013-04-19 15:34:44.564 [pid=0x3e0,tid=0x120c] Completed execution of apply package.
2013-04-19 15:34:44.564 [pid=0x3e0,tid=0x120c] Update GPH : apmCreateFoldersEx
2013-04-19 15:34:44.564 [pid=0x3e0,tid=0x120c] Update GPH : xmlRemovalPackage
2013-04-19 15:34:44.580 [pid=0x3e0,tid=0x120c] Update GPH : apmWriteFile
2013-04-19 15:34:44.580 [pid=0x3e0,tid=0x120c] Updated GPH.
2013-04-19 15:34:44.580 [pid=0x3e0,tid=0x120c] Completed apply GPO.
2013-04-19 15:34:44.580 [pid=0x3e0,tid=0x120c] Completed GPO post-processing.
2013-04-19 15:34:44.580 [pid=0x3e0,tid=0x120c] Completed get next GPO. [SUCCEEDED(S_FALSE)]
2013-04-19 15:34:44.580 [pid=0x3e0,tid=0x120c] Completed calculate precedence.
2013-04-19 15:34:44.580 [pid=0x3e0,tid=0x120c] Completed get RSoP class.
2013-04-19 15:34:44.595 [pid=0x3e0,tid=0x120c] Completed initialize namespace.
2013-04-19 15:34:44.595 [pid=0x3e0,tid=0x120c] WQL : SELECT * FROM RSOP_PolmkrSetting WHERE polmkrBaseCseGuid = "{5794DAFD-BE60-433f-88A2-1A31939AC01F}"
2013-04-19 15:34:44.595 [pid=0x3e0,tid=0x120c] Executed WQL query.
2013-04-19 15:34:44.595 [pid=0x3e0,tid=0x120c] Purged 4 old RSoP entries.
2013-04-19 15:34:44.611 [pid=0x3e0,tid=0x120c] Logging 4 new RSoP entries.
2013-04-19 15:34:44.611 [pid=0x3e0,tid=0x120c] RSoP Entry 0
2013-04-19 15:34:44.611 [pid=0x3e0,tid=0x120c] <INSTANCE CLASSNAME="RSOP_PolmkrDriveSetting">
<PROPERTY NAME="name">
<VALUE>G:</VALUE></PROPERTY>
<PROPERTY NAME="GPOID">
<VALUE>cn={14209C3C-8E16-4247-95C6-925260D86074},cn=policies,cn=system,DC=mydomain,DC=com,DC=au</VALUE></PROPERTY>
<PROPERTY NAME="SOMID">
<VALUE>OU=Windows8 Machines,OU=USA,DC=mydomain,DC=com,DC=au</VALUE></PROPERTY>
<PROPERTY NAME="polmkrBaseGpeGuid">
<VALUE>{2EA1A81B-48E5-45E9-8BB7-A6E3AC170006}</VALUE></PROPERTY>
<PROPERTY NAME="polmkrBaseCseGuid">
<VALUE>{5794DAFD-BE60-433f-88A2-1A31939AC01F}</VALUE></PROPERTY>
<PROPERTY NAME="polmkrBaseGpoDisplayName">
<VALUE>US Drive Mapping</VALUE></PROPERTY>
<PROPERTY NAME="polmkrBaseGpoGuid">
<VALUE>{14209C3C-8E16-4247-95C6-925260D86074}</VALUE></PROPERTY>
<PROPERTY NAME="id">
<VALUE>{67CE9D8B-48A8-433A-813F-2B549875ABAA}</VALUE></PROPERTY>
<PROPERTY NAME="precedence" CHANGETYPE="3">
<VALUE>1</VALUE></PROPERTY>
<PROPERTY NAME="creationTime">
<VALUE>20130419193444.221000+000</VALUE></PROPERTY>
<INSTANCE CLASSNAME="RSOP_PolmkrDriveItem">
<PROPERTY NAME="polmkrClassClsid">
<VALUE>{935D1B74-9CB8-4e3c-9914-7DD559B7A417}</VALUE></PROPERTY>
<PROPERTY NAME="polmkrClassName">
<VALUE>G:</VALUE></PROPERTY>
<PROPERTY NAME="polmkrClassStatus">
<VALUE>G:</VALUE></PROPERTY>
<PROPERTY NAME="polmkrClassImage">
<VALUE>1</VALUE></PROPERTY>
<PROPERTY NAME="polmkrClassChanged">
<VALUE>2013-04-16 18:53:56</VALUE></PROPERTY>
<PROPERTY NAME="polmkrClassUid">
<VALUE>{840ACB3A-24B1-40C9-9CFA-936FC3F08A9E}</VALUE></PROPERTY>
<PROPERTY NAME="polmkrClassRemovePolicy">
<VALUE>1</VALUE></PROPERTY>
<PROPERTY NAME="polmkrClassUserContext">
<VALUE>1</VALUE></PROPERTY>
<PROPERTY NAME="polmkrClassBypassErrors">
<VALUE>1</VALUE></PROPERTY>
<PROPERTY NAME="polmkrAction">
<VALUE>R</VALUE></PROPERTY>
<PROPERTY NAME="polmkrThisDrive">
<VALUE>NOCHANGE</VALUE></PROPERTY>
<PROPERTY NAME="polmkrAllDrives">
<VALUE>NOCHANGE</VALUE></PROPERTY>
<PROPERTY NAME="polmkrUserName">
<VALUE></VALUE></PROPERTY>
<PROPERTY NAME="polmkrPath">
<VALUE>\\detfs01\general</VALUE></PROPERTY>
<PROPERTY NAME="polmkrLabel">
<VALUE></VALUE></PROPERTY>
<PROPERTY NAME="polmkrPersistent">
<VALUE>0</VALUE></PROPERTY>
<PROPERTY NAME="polmkrUseLetter">
<VALUE>1</VALUE></PROPERTY>
<PROPERTY NAME="polmkrLetter">
<VALUE>G</VALUE></PROPERTY>
<PROPERTY NAME="polmkrActionResolved">
<VALUE>R</VALUE></PROPERTY>
<PROPERTY NAME="polmkrLetterResolved">
<VALUE>g:</VALUE></PROPERTY>
<PROPERTY NAME="polmkrClassResultCodeValue">
<VALUE>0</VALUE></PROPERTY>
<PROPERTY NAME="polmkrClassResultCode">
<VALUE>0x00000000</VALUE></PROPERTY>
<PROPERTY NAME="polmkrClassResultText">
<VALUE>The operation completed successfully.</VALUE></PROPERTY></INSTANCE>
<PROPERTY NAME="polmkrBaseHash">
<VALUE>RSOP_PolmkrDriveSetting.polmkrLetter="G"</VALUE></PROPERTY></INSTANCE>
2013-04-19 15:34:44.626 [pid=0x3e0,tid=0x120c] RSoP Entry 1
2013-04-19 15:34:44.626 [pid=0x3e0,tid=0x120c] <INSTANCE CLASSNAME="RSOP_PolmkrDriveSetting">
<PROPERTY NAME="name">
<VALUE>M:</VALUE></PROPERTY>
<PROPERTY NAME="GPOID">
<VALUE>cn={14209C3C-8E16-4247-95C6-925260D86074},cn=policies,cn=system,DC=mydomain,DC=com,DC=au</VALUE></PROPERTY>
<PROPERTY NAME="SOMID">
<VALUE>OU=Windows8 Machines,OU=USA,DC=mydomain,DC=com,DC=au</VALUE></PROPERTY>
<PROPERTY NAME="polmkrBaseGpeGuid">
<VALUE>{2EA1A81B-48E5-45E9-8BB7-A6E3AC170006}</VALUE></PROPERTY>
<PROPERTY NAME="polmkrBaseCseGuid">
<VALUE>{5794DAFD-BE60-433f-88A2-1A31939AC01F}</VALUE></PROPERTY>
<PROPERTY NAME="polmkrBaseGpoDisplayName">
<VALUE>US Drive Mapping</VALUE></PROPERTY>
<PROPERTY NAME="polmkrBaseGpoGuid">
<VALUE>{14209C3C-8E16-4247-95C6-925260D86074}</VALUE></PROPERTY>
<PROPERTY NAME="id">
<VALUE>{DBA37AA7-F6DF-4E18-9BD4-383BB43637F3}</VALUE></PROPERTY>
<PROPERTY NAME="precedence" CHANGETYPE="3">
<VALUE>1</VALUE></PROPERTY>
<PROPERTY NAME="creationTime">
<VALUE>20130419193444.299000+000</VALUE></PROPERTY>
<INSTANCE CLASSNAME="RSOP_PolmkrDriveItem">
<PROPERTY NAME="polmkrClassClsid">
<VALUE>{935D1B74-9CB8-4e3c-9914-7DD559B7A417}</VALUE></PROPERTY>
<PROPERTY NAME="polmkrClassName">
<VALUE>M:</VALUE></PROPERTY>
<PROPERTY NAME="polmkrClassStatus">
<VALUE>M:</VALUE></PROPERTY>
<PROPERTY NAME="polmkrClassImage">
<VALUE>1</VALUE></PROPERTY>
<PROPERTY NAME="polmkrClassChanged">
<VALUE>2013-04-16 18:55:02</VALUE></PROPERTY>
<PROPERTY NAME="polmkrClassUid">
<VALUE>{3D62A401-52C3-40D1-999A-32D0F0D00117}</VALUE></PROPERTY>
<PROPERTY NAME="polmkrClassRemovePolicy">
<VALUE>1</VALUE></PROPERTY>
<PROPERTY NAME="polmkrClassUserContext">
<VALUE>1</VALUE></PROPERTY>
<PROPERTY NAME="polmkrClassBypassErrors">
<VALUE>1</VALUE></PROPERTY>
<PROPERTY NAME="polmkrAction">
<VALUE>R</VALUE></PROPERTY>
<PROPERTY NAME="polmkrThisDrive">
<VALUE>NOCHANGE</VALUE></PROPERTY>
<PROPERTY NAME="polmkrAllDrives">
<VALUE>NOCHANGE</VALUE></PROPERTY>
<PROPERTY NAME="polmkrUserName">
<VALUE></VALUE></PROPERTY>
<PROPERTY NAME="polmkrPath">
<VALUE>\\detfs01\EmailArchives</VALUE></PROPERTY>
<PROPERTY NAME="polmkrLabel">
<VALUE></VALUE></PROPERTY>
<PROPERTY NAME="polmkrPersistent">
<VALUE>0</VALUE></PROPERTY>
<PROPERTY NAME="polmkrUseLetter">
<VALUE>1</VALUE></PROPERTY>
<PROPERTY NAME="polmkrLetter">
<VALUE>M</VALUE></PROPERTY>
<PROPERTY NAME="polmkrActionResolved">
<VALUE>R</VALUE></PROPERTY>
<PROPERTY NAME="polmkrLetterResolved">
<VALUE>m:</VALUE></PROPERTY>
<PROPERTY NAME="polmkrClassResultCodeValue">
<VALUE>0</VALUE></PROPERTY>
<PROPERTY NAME="polmkrClassResultCode">
<VALUE>0x00000000</VALUE></PROPERTY>
<PROPERTY NAME="polmkrClassResultText">
<VALUE>The operation completed successfully.</VALUE></PROPERTY></INSTANCE>
<PROPERTY NAME="polmkrBaseHash">
<VALUE>RSOP_PolmkrDriveSetting.polmkrLetter="M"</VALUE></PROPERTY></INSTANCE>
2013-04-19 15:34:44.642 [pid=0x3e0,tid=0x120c] RSoP Entry 2
2013-04-19 15:34:44.642 [pid=0x3e0,tid=0x120c] <INSTANCE CLASSNAME="RSOP_PolmkrDriveSetting">
<PROPERTY NAME="name">
<VALUE>H:</VALUE></PROPERTY>
<PROPERTY NAME="GPOID">
<VALUE>cn={14209C3C-8E16-4247-95C6-925260D86074},cn=policies,cn=system,DC=mydomain,DC=com,DC=au</VALUE></PROPERTY>
<PROPERTY NAME="SOMID">
<VALUE>OU=Windows8 Machines,OU=USA,DC=mydomain,DC=com,DC=au</VALUE></PROPERTY>
<PROPERTY NAME="polmkrBaseGpeGuid">
<VALUE>{2EA1A81B-48E5-45E9-8BB7-A6E3AC170006}</VALUE></PROPERTY>
<PROPERTY NAME="polmkrBaseCseGuid">
<VALUE>{5794DAFD-BE60-433f-88A2-1A31939AC01F}</VALUE></PROPERTY>
<PROPERTY NAME="polmkrBaseGpoDisplayName">
<VALUE>US Drive Mapping</VALUE></PROPERTY>
<PROPERTY NAME="polmkrBaseGpoGuid">
<VALUE>{14209C3C-8E16-4247-95C6-925260D86074}</VALUE></PROPERTY>
<PROPERTY NAME="id">
<VALUE>{AEEB1495-02E1-4B94-909B-C8DE89C82C0B}</VALUE></PROPERTY>
<PROPERTY NAME="precedence" CHANGETYPE="3">
<VALUE>1</VALUE></PROPERTY>
<PROPERTY NAME="creationTime">
<VALUE>20130419193444.346000+000</VALUE></PROPERTY>
<INSTANCE CLASSNAME="RSOP_PolmkrComputerFilterItem">
<PROPERTY NAME="polmkrBool">
<VALUE>AND</VALUE></PROPERTY>
<PROPERTY NAME="polmkrNot">
<VALUE>1</VALUE></PROPERTY>
<PROPERTY NAME="polmkrType">
<VALUE>NETBIOS</VALUE></PROPERTY>
<PROPERTY NAME="polmkrName">
<VALUE>d-7-user1</VALUE></PROPERTY>
<PROPERTY NAME="polmkrClassResultCodeValue">
<VALUE>1</VALUE></PROPERTY>
<PROPERTY NAME="polmkrClassResultCode">
<VALUE>0x00000001</VALUE></PROPERTY>
<PROPERTY NAME="polmkrClassResultText">
<VALUE>Incorrect function.</VALUE></PROPERTY></INSTANCE>
<INSTANCE CLASSNAME="RSOP_PolmkrDriveItem">
<PROPERTY NAME="polmkrClassClsid">
<VALUE>{935D1B74-9CB8-4e3c-9914-7DD559B7A417}</VALUE></PROPERTY>
<PROPERTY NAME="polmkrClassName">
<VALUE>H:</VALUE></PROPERTY>
<PROPERTY NAME="polmkrClassStatus">
<VALUE>H:</VALUE></PROPERTY>
<PROPERTY NAME="polmkrClassImage">
<VALUE>1</VALUE></PROPERTY>
<PROPERTY NAME="polmkrClassChanged">
<VALUE>2013-04-18 20:14:04</VALUE></PROPERTY>
<PROPERTY NAME="polmkrClassUid">
<VALUE>{04A87992-7420-44CE-B2B6-1B07FE654F77}</VALUE></PROPERTY>
<PROPERTY NAME="polmkrClassRemovePolicy">
<VALUE>1</VALUE></PROPERTY>
<PROPERTY NAME="polmkrClassUserContext">
<VALUE>1</VALUE></PROPERTY>
<PROPERTY NAME="polmkrClassBypassErrors">
<VALUE>1</VALUE></PROPERTY>
<PROPERTY NAME="polmkrAction">
<VALUE>R</VALUE></PROPERTY>
<PROPERTY NAME="polmkrThisDrive">
<VALUE>NOCHANGE</VALUE></PROPERTY>
<PROPERTY NAME="polmkrAllDrives">
<VALUE>NOCHANGE</VALUE></PROPERTY>
<PROPERTY NAME="polmkrUserName">
<VALUE></VALUE></PROPERTY>
<PROPERTY NAME="polmkrPath">
<VALUE>\\detfs01\users\%username%</VALUE></PROPERTY>
<PROPERTY NAME="polmkrLabel">
<VALUE></VALUE></PROPERTY>
<PROPERTY NAME="polmkrPersistent">
<VALUE>0</VALUE></PROPERTY>
<PROPERTY NAME="polmkrUseLetter">
<VALUE>1</VALUE></PROPERTY>
<PROPERTY NAME="polmkrLetter">
<VALUE>H</VALUE></PROPERTY>
<PROPERTY NAME="polmkrActionResolved">
<VALUE>R</VALUE></PROPERTY>
<PROPERTY NAME="polmkrLetterResolved">
<VALUE>h:</VALUE></PROPERTY>
<PROPERTY NAME="polmkrClassResultCodeValue">
<VALUE>0</VALUE></PROPERTY>
<PROPERTY NAME="polmkrClassResultCode">
<VALUE>0x00000000</VALUE></PROPERTY>
<PROPERTY NAME="polmkrClassResultText">
<VALUE>The operation completed successfully.</VALUE></PROPERTY></INSTANCE>
<PROPERTY NAME="polmkrBaseHash">
<VALUE>RSOP_PolmkrDriveSetting.polmkrLetter="H"</VALUE></PROPERTY></INSTANCE>
2013-04-19 15:34:44.658 [pid=0x3e0,tid=0x120c] RSoP Entry 3
2013-04-19 15:34:44.658 [pid=0x3e0,tid=0x120c] <INSTANCE CLASSNAME="RSOP_PolmkrDriveSetting">
<PROPERTY NAME="name">
<VALUE>T:</VALUE></PROPERTY>
<PROPERTY NAME="GPOID">
<VALUE>cn={14209C3C-8E16-4247-95C6-925260D86074},cn=policies,cn=system,DC=mydomain,DC=com,DC=au</VALUE></PROPERTY>
<PROPERTY NAME="SOMID">
<VALUE>OU=Windows8 Machines,OU=USA,DC=mydomain,DC=com,DC=au</VALUE></PROPERTY>
<PROPERTY NAME="polmkrBaseGpeGuid">
<VALUE>{2EA1A81B-48E5-45E9-8BB7-A6E3AC170006}</VALUE></PROPERTY>
<PROPERTY NAME="polmkrBaseCseGuid">
<VALUE>{5794DAFD-BE60-433f-88A2-1A31939AC01F}</VALUE></PROPERTY>
<PROPERTY NAME="polmkrBaseGpoDisplayName">
<VALUE>US Drive Mapping</VALUE></PROPERTY>
<PROPERTY NAME="polmkrBaseGpoGuid">
<VALUE>{14209C3C-8E16-4247-95C6-925260D86074}</VALUE></PROPERTY>
<PROPERTY NAME="id">
<VALUE>{7E0CA279-4F24-4773-BD3D-8E4E8AA8AF86}</VALUE></PROPERTY>
<PROPERTY NAME="precedence" CHANGETYPE="3">
<VALUE>1</VALUE></PROPERTY>
<PROPERTY NAME="creationTime">
<VALUE>20130419193444.392000+000</VALUE></PROPERTY>
<INSTANCE CLASSNAME="RSOP_PolmkrComputerFilterItem">
<PROPERTY NAME="polmkrBool">
<VALUE>AND</VALUE></PROPERTY>
<PROPERTY NAME="polmkrNot">
<VALUE>1</VALUE></PROPERTY>
<PROPERTY NAME="polmkrType">
<VALUE>DNS</VALUE></PROPERTY>
<PROPERTY NAME="polmkrName">
<VALUE>nb-864-user1.mydomain.com.au</VALUE></PROPERTY>
<PROPERTY NAME="polmkrClassResultCodeValue">
<VALUE>1</VALUE></PROPERTY>
<PROPERTY NAME="polmkrClassResultCode">
<VALUE>0x00000001</VALUE></PROPERTY>
<PROPERTY NAME="polmkrClassResultText">
<VALUE>Incorrect function.</VALUE></PROPERTY></INSTANCE>
<INSTANCE CLASSNAME="RSOP_PolmkrDriveItem">
<PROPERTY NAME="polmkrClassClsid">
<VALUE>{935D1B74-9CB8-4e3c-9914-7DD559B7A417}</VALUE></PROPERTY>
<PROPERTY NAME="polmkrClassName">
<VALUE>T:</VALUE></PROPERTY>
<PROPERTY NAME="polmkrClassStatus">
<VALUE>T:</VALUE></PROPERTY>
<PROPERTY NAME="polmkrClassImage">
<VALUE>1</VALUE></PROPERTY>
<PROPERTY NAME="polmkrClassChanged">
<VALUE>2013-04-19 13:21:12</VALUE></PROPERTY>
<PROPERTY NAME="polmkrClassUid">
<VALUE>{57350522-F65A-4B69-84D5-7FD5EAA99875}</VALUE></PROPERTY>
<PROPERTY NAME="polmkrClassRemovePolicy">
<VALUE>1</VALUE></PROPERTY>
<PROPERTY NAME="polmkrClassUserContext">
<VALUE>1</VALUE></PROPERTY>
<PROPERTY NAME="polmkrClassBypassErrors">
<VALUE>1</VALUE></PROPERTY>
<PROPERTY NAME="polmkrAction">
<VALUE>R</VALUE></PROPERTY>
<PROPERTY NAME="polmkrThisDrive">
<VALUE>NOCHANGE</VALUE></PROPERTY>
<PROPERTY NAME="polmkrAllDrives">
<VALUE>NOCHANGE</VALUE></PROPERTY>
<PROPERTY NAME="polmkrUserName">
<VALUE></VALUE></PROPERTY>
<PROPERTY NAME="polmkrPath">
<VALUE>\\detfs01\users</VALUE></PROPERTY>
<PROPERTY NAME="polmkrLabel">
<VALUE></VALUE></PROPERTY>
<PROPERTY NAME="polmkrPersistent">
<VALUE>0</VALUE></PROPERTY>
<PROPERTY NAME="polmkrUseLetter">
<VALUE>1</VALUE></PROPERTY>
<PROPERTY NAME="polmkrLetter">
<VALUE>T</VALUE></PROPERTY>
<PROPERTY NAME="polmkrActionResolved">
<VALUE>R</VALUE></PROPERTY>
<PROPERTY NAME="polmkrLetterResolved">
<VALUE>t:</VALUE></PROPERTY>
<PROPERTY NAME="polmkrClassResultCodeValue">
<VALUE>0</VALUE></PROPERTY>
<PROPERTY NAME="polmkrClassResultCode">
<VALUE>0x00000000</VALUE></PROPERTY>
<PROPERTY NAME="polmkrClassResultText">
<VALUE>The operation completed successfully.</VALUE></PROPERTY></INSTANCE>
<PROPERTY NAME="polmkrBaseHash">
<VALUE>RSOP_PolmkrDriveSetting.polmkrLetter="T"</VALUE></PROPERTY></INSTANCE>
2013-04-19 15:34:44.658 [pid=0x3e0,tid=0x120c] Completed logging of RSoP data.
2013-04-19 15:34:44.658 [pid=0x3e0,tid=0x120c] Completed commit reporting.
2013-04-19 15:34:44.658 [pid=0x3e0,tid=0x120c] Completed GPO list post-processing.
2013-04-19 15:34:44.673 [pid=0x3e0,tid=0x120c] Completed get GPO list. [SUCCEEDED(S_FALSE)]
2013-04-19 15:34:44.673 [pid=0x3e0,tid=0x120c] Completed CSE post-processing.
2013-04-19 15:34:44.673 [pid=0x3e0,tid=0x120c] User impersonation uninitialized.
2013-04-19 15:34:44.673 [pid=0x3e0,tid=0x120c] Leaving ProcessGroupPolicyExDrives() returned 0x00000000
2013-04-19 15:34:44.673 [pid=0x3e0,tid=0x120c] -
Mapping drive using GPO does not obey to Item-level targeting
Dear all,
We are mapping drive using Item-level targeting based on security group (User Configuration > Preferences > Windows Settings > Drive Maps) with the following settings:
Action: Replace
Run in logged-on user's security context: <Checked>
Item-level targeting: <Checked>
So if user is member of Group_X then he/she will have drive X mapped on his computer.
Problem now is that (even if reconnect is unchecked), drive will stay mapped when we remove a user from this group.
Is this the normal behavior ? did I missed something ?
or even worst, imho, should I add a new drive properties which would say to delete the drive if user does not belong to the relevant group ?
-> double targeting query for a single drive
-> what's the point of Replace / Reconnect then ?
Thanks in advance for your opinions!
/behd
[EDIT: Forgot to specify Win2008R2 AD, Win7 Pro clients but doubt that it'll be of any interest for this case]Drive mapping should not remain after you remove the user from the group.
What I suspect is, that at first, the "reconnect" was checked then the user got the policy and tattooed the reconnect value. after that it doesn't matter that "reconnect" was removed.
Try the following:
Logon with test user, make sure no drive mapping exist (disconnect if necessary).
Create a new policy with drive map - make sure reconnect is not checked, and apply it for the test user.
Make sure no other drive mapping policy exist for that user.
Login with the test user, make sure drive was mapped.
Log off that user, remove it from the group, wait for AD replication and log on again (sometimes another log off \ log on required).
Please take a moment to Vote as Helpful and/or Mark as Answer where applicable. Thanks. -
GPO Item-level targeting for IE11
Hi, hoping someone can help guide me with setting up item-level targeting on a group policy. I have created a set of IE11 group policy settings, and only want to apply to machines with IE11. When creating the WMI query what and how do you enter
the criteria in the Query, Namespace, Property, and Environment variable name fields. Any help is much appreciated.Use Item Level Targeting and do a "File Match" check with the Targeting Editor.
You may have to uncheck the option "Run in logged-on user's security context" to make it work properly depending on your system security.
Charlie Newman -
Authentification and Security in WebApp with JSP
Hello to all.
I'm developing a Web Applications with JSP's. To use the application a user must first Login.
To restrict access via URL typing I have included in every JSP page a user_logged_in_check page that verifies that the user is logged in, and if not redirects to the Login page.
The problem is that I must not forget to include that page in all my JSPs, and if the name of the page changes, it must be changed everywhere (though a search/replace might do the job just fine).
I used this approach because is not server dependent (such as the Tomcat Realms example I have seen on this forum).
Is there a better strategy?
Is there a way to enforce security check and not rely on my attention ;)?
Is there a pattern that solves the problem?
Any help would be greatly appreciated.The first and biggest disadvantage is the repetitive coding - what happens if you realise that you need to change something - you will need to modify each of your JSP files. The chances of someone forgetting to add it in are a security risk.
Secondly, using the web server's mechanism, in most cases, would mean that you are using a proven and much more stable security mechanism then you can whip up.
For example, in Weblogic, you can configure a JAAS provider -- that means you are not limited to using uname/password. Your customer may have an enterprise wide single sign on policy that is supported by the JAAS provider and you can use it straight away - by just making a declarative change in the web*.xml files.
If you must, use the Filter class (its a Servlet class, I checked after I had posted) as described in the Intercepting Filter pattern - at least thats a standard approach and will cut down on you having to rely on adding a snip of code to each of your JSPs. -
Multiple OUs using a single common WIP?
Multiple OUs using a single common WIP?
We have a manufacturing facility that contains tools and personnel that belong to multiple operating units (OU). Of course, the manufacturing part should work as if it is one site. Since all equipment and personnel work on all jobs there is no distinction between the higher level operating units and legal entities and books at the low level manufacturing point of view. However, costing must be costed appropriately by OU and the GL books of the seperate legal entities must be kept correctly and seperately.
How can Oracle Applications manufacturing modules be setup to handle a common manufacturing area used by personnel and equipment that is owned and costed by seperate OUs? I am unable to locate an example or reference to this type of situation in any manufacturing manuals.
ThanksNot sure that you will be able to find your example. You explain an interesting problem that is very unique. I do not think that you will find a standard system set up to meet your need. The work around solutions, that come to mind quickly, would require a standard cost environment and involve changing the period close process for manufacturing.
-
GPP assigned to Users OU but use Item-Levewl targeting with Computers?
I have a group of machines that I would like to have Lync 2013 NOT autostart. I can delete the registry key from the reference section below and Lync 2013 will not start (as expected). These machines have 10-20 unique profiles that also need
this key removed. I was considering creating a Group Policy Preference (GPP) and assign it to the Users OU (as this is a HKCU setting) but use item-level targeting to a security group containing the computers that need the autostart disabled. This
will keep the registry key from being removed from the users primary computer but if they log into one of these machines in the security group it WILL be removed.
Questions:
Is applying the GPP to the Users OU and using Item-level filtering to a security group populated with computers the best approach?
Will the GPP get processed by all users every time they log in even if they aren't logging into one of the computers in the security group? Note: The Users OU would contains all users in the company.
Reference:
http://blogs.technet.com/b/rischwen/archive/2013/06/20/lync-2013-client-auto-start-registry-key.aspx
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\Lync
Thanks> Is there any way to get the GPP to run before the lync.exe runs from
> *HKCU\Software\Microsoft\Windows\CurrentVersion\Run*? ...or more
> generically, can I configure GPP to run before the items in the HKCU Run
> key? I need that entry gone before it gets processed.
GPP is processed BEFORE the Run key, but...
> For new users Lync.exe will launch once, then the GPP removes the
> entry. On the next logon Lync no longer runs. I am trying to get the
> GPP to remove Lync from running on the first try.
...Lync seems to use ActiveSetup to populate the Run Entry and to
immediately start itself. And ActiveSetup is processed AFTER GPP.
Martin
Mal ein
GUTES Buch über GPOs lesen?
NO THEY ARE NOT EVIL, if you know what you are doing:
Good or bad GPOs?
And if IT bothers me - coke bottle design refreshment :))
I have already looked in
HKLM\Software\Microsoft\Active Setup\Installed Components and didn't see anything related to Lync. Could it be somewhere else?
Thanks -
Secure a folder with sessions - PHP/MySQL
I have a member site that I hav erecently developed a download library for. All the downloads (Word docs or PDFs) are stored in one directory and the user must be logged in using a session based system to gain access to the download page (in the directiry above) which contains all the links to the documents.
So non members can't access the downloads page but I'm guesssing that pretty soon each of the PDFs and Word docs will be picked up by google and non-members will be able to open or download them directly.
Is there a way that I can secure access to the contents of the download folder using sessions?
Or if not any other solution?
Cheers
DaveThe simple way is to put all of the docs in a folder that you secure using web server security. Most hosting plans these days make this option available from the host control panel. The problem with this is that it is a different security layer than the one you are currently using, and integrating the two , while possible, might be challenging.So you might instead just put all of the documents, including html, into a secured folder and use that security method instead.
Another method to consider is putting all of the sensitive docs in a directory above the site root, and then use server side scripting on a secured page to stream the files. It's relatively simple and you can use a script like this one:
http://www.computerhope.com/issues/ch001113.htm -
Hi, I have a new computer and new apple id. I've purchased music with my old computer, email and apple id.
I cant access now the previously purchase music, because it wants to authorize the new computer to play the
music. I cant remember password and security questions for my old id and the old email doest exist anymore.
What can I do?Hi, Carmen.
Thank you for visiting Apple Support Communities.
If you need to reset you security questions, do not know the answers and no longer have access to that email account, see the last sentence under Note in step 5.
You'll be asked to answer 2 of your 3 security questions before you can make any modifications. If you are unable to remember your answers, you can choose to send an email to your rescue email to reset your security questions.
Note: The option to send an email to reset your security questions and answers will not be available if a rescue email address is not provided. You will need tocontact iTunes Store support in order to do so.
Rescue email address and how to reset Apple ID security questions
http://support.apple.com/kb/ht5312
Cheers,
Jason H. -
Pull owner from computer object and add to BUILTIN\Administrators via GPO
Quick question here - is it possible to pull an owner from computer object in AD (left side of picture) and add him to BUILTIN\Administrators on this particular workstation along with 2 AD groups and 'LocalAdmin' user (right side of picture)? Im interested
only in doing it via GPO.> Quick question here - is it possible to pull an owner from computer
You mean "manager" and not "owner", right? The owner is defined in
"security - advanced - owner" and is the account that initially created
the object. Typically "Domain Admins"...
> object in AD (left side of picture) and add him to
> BUILTIN\Administrators on this particular workstation along with 2 AD
> groups and 'LocalAdmin' user (right side of picture)? Im interested only
> in doing it via GPO.
Nothing as easy as that. You can use GPP local users and groups, and you
can use Item Level Targeting with LDAP filters. Grab the managedBy
attribute of the computer account, grab the samaccountname of the
managedBy DN and you're almost done :)
Martin
Mal ein
GUTES Buch über GPOs lesen?
NO THEY ARE NOT EVIL, if you know what you are doing:
Good or bad GPOs?
And if IT bothers me - coke bottle design refreshment :)) -
Lots of info about one user using multiple computers. What about multiple users with separate Apple IDs using same computer? Having problems getting my wifes new iPhone talking to her apple account on the computer we share (2 users)
You need to create a user account for your wife (or yourself depending on who has the current user account). When syncing, each of you should sign in as a separate user, login to iTunes and then sync. I had this problem when my sister got an iPhone. When we did her initial sync, everything on my iPhone showed up on hers. Apple gave me this solution.
-
My new computer is 64-bit running Windows 7 pro, SP1 and Microsoft Office 2010 Pro Plus 32-bit
My phone is a 4S runing iOS 6.1.3
Very frustrated now that I have recently installed itunes and outlook on this new computer. Everything worked perfectly ok on my laptop which was also 64-bit Windows 7 and running 32-bit Microsoft Office 2010 Pro. I have multiple email accounts set up in Outlook tho only use contacts and calendar in relation to one of these. Cannot sync itunes with the correct contacts and calendars, when I sync the calendar and contacts are empty. Not sure if there is any way to point itunes to particular address books and calendars.
I have installed and uninstalled itunes 3 times and thank goodness have a backup
Can anyone help please?
thanks in anticipationI had my home computer set up to sync to work's Exchange server. It worked well, but I didn't like seeing work email messages and other programs trying to sync with my default Outlook folder, which was then the Exchange (& work related) .ost file. I know there are various ways to manage those problems using filters, view, subfolders, etc., but it was a hassle for me. I think it could work well for many other folks.
For now, I have published my work calendar and subscribed to that calendar on my home computer. So I have view only access to my calendar on my home computer (and I can add/edit calendar items on my iPad (or Outlook Web Access) when away from work). This is not quite what I wanted, but it may work.
It almost makes me long for the days when I used my Windows Mobile Treo to sync back and forth between exchange at work and outlook at home (but had many sync conflicts as a result). -
I have multiple album titles of the same name with different artists. How can I get them to go under one album title again?
In iTunes(on a Mac or PC) just tap on 'Albums' rather than 'Artists' and you'll see them all together.
You may find that there are songs mislabelled. In which case right tap on the Album or Artist and tap 'Get Info', then change to the correct name and the songs will join the rest of the songs for that Artist or Album.
Then resync with your iPhone and all will be well.
Maybe you are looking for
-
i bought a new iphone and as i was setting my apple ID account and i signed in to my account and confirmed two useres with diffrent numbers that were signed to the same apple ID and it messed up my i messege and face time. how do i fix that or delete
-
I am trying to setup a development server to test an upgrade to Business Objects 11.10.1336.0 to 11.6 using a copy of our production database. I am getting the following error when I login. Any ideas would be appreciated. There was an error launching
-
I have been trying to install the new Flash Player 9. I used the uninstaller to get rid of the other ones. But yet i still can't download it..here's what happens: Well right now i won't even get a download screen! O and im using IE 7
-
ITunes 7 has "unauthorized" all of my iTunes store purchases!!!
iTunes 7 won't play any of the music that I have bought from the iTunes store! If I try to play them or move them to my iPod it pops up an error saying, "this machine is not authorized...". I have chosen the AUTHORIZE COMPUTER feature from the STORE
-
Time remaining for a mailbox move
Hi All, I am using Primal form to monitor my mailbox moves and have the following script $outputbox.text = get-moverequest| get-moverequeststatistics |Sort-Object PercentComplete -Descending | ft displayname, @{label=" % "; expression="percentcomplet