NT User Extensible Policy - what am I missing ?

Hi,
NT4SP6a Workstation, NW Client 4.83
Zen 3.2 on NW6SP3 server.
I have created one simple user.
Then I created a User Policy Package, including a DLU policy and a User
Extensible Policy, in which I disabled "Registry editing tools".
I have assigned my policy to my user :
- the DLU policy works fine, my user is created at login, in the user group
I've chosen
- unfortunately, the user has access to regedit, and the parameters I
modifiy in the common.adm policy does not seem to be applied.
What did I miss ?

I once noticed a strange behaviour you might want to check.
When working in the policy package, I associated the policy package directly
to users.
It failed to apply.
I looked at the user for associated policies and it was empty. I can't
really remember whether or not the new policy association showed up in
effective policies or not. I suspect not.
So I worked from the user screen and associated the policy and it worked.
Maybe that will work for you.
Chris Denby
IT Coordinator
Rainy River District School Board
Fort Frances, Ontario
Canada
<[email protected]> wrote in message
news:CfvHd.655$[email protected]..
> Hi,
>
> NT4SP6a Workstation, NW Client 4.83
> Zen 3.2 on NW6SP3 server.
>
> I have created one simple user.
>
> Then I created a User Policy Package, including a DLU policy and a User
> Extensible Policy, in which I disabled "Registry editing tools".
>
> I have assigned my policy to my user :
>
> - the DLU policy works fine, my user is created at login, in the user
group
> I've chosen
> - unfortunately, the user has access to regedit, and the parameters I
> modifiy in the common.adm policy does not seem to be applied.
>
> What did I miss ?

Similar Messages

Missing the User Extensible Policy

Hello,
I don't know if this is the right forum.
We are missing the User Extensible Policy when we are creating a User
Policy packet
When we create a new User Policy packet we have all the options except the
User Extensible Policy. We need this to redirect folders. We did this on
other networks without any problems.
Network:
Netware 5.1 sp6
Zen 3.2 sp2
Tested on:
Windows 2000 (NwClient 4.83 sp1 and sp3)
Windows 98 (NwClient 3.21)
ConsoleOne 1.3.3
ConsoleOne 1.3.5
The pcs and the servers are the same on every network.
Greets,
Bert Nieuwenampsen
[email protected]
ROC Twente Plus
Dr. D.H. Groen College

bnieuwenampsen,
> Is not a ConsoleOne snapin that we are missing, because we copied the
> Consoleone from the 'working' network.
>
> How can we check witch snapin is installed on the server ? We checked
> NWconfig view install products, and they are the same.
In consoleone you would go to help and then snapins, but that can be
very confusing.
Easiest way would be to download the snapins from novell.
download.novell.com under products select zenworks for desktops from
there you can get the 3.2 snap-ins.
Extract the download and copy the snap-ins to your c1 copy, it would be
best if you were running c1 local on your workstation.
Q, when you copied c1 from the working location, did you copy the whole
1.2 directory to your desired location?
Jared L Jennings
Novell Support Forums SysOp
Using XanaNews 1.16.3.1

I'm unable to grant full access to 2nd user account. What am I missing

While our MacBook Pro is out for repairs, I need a way to process my wife's emails and other business. So I'm trying to set up a 2nd user account for my wife on our iMac (running 10.7.5 Lion). Unfortunately, every step I've tried has failed to grant permission for her account to access the iMac desktop or launch applications other than Safari.
Here's what I've tried:
1. I created an account with my wife's name and password under Users & Groups in System Preferences.
2. In her Users & Groups account, I granted her Adminstrator privileges.
3. In the Sharing folder in System Preferences, I selected all the folders except those labeled "remote" and "xgrid" (whatever that is). I granted Read & Write privileges for each one. These included two Desktop folders, and I added the folder for Applications.
4. I made sure File Sharing was turned on, along with Printer Sharing, Web Sharing, Screen Sharing, Internet Sharing, etc.
5. Under Sharing Options, I noted a checkmark in the box labeled "Share files and folders using AFP", although the "number of users connected" was 0. I left that alone.
6. Because several sharing choices were listed as "blocked by firewall," I turned the Firewall setting off.
Despite all this, when I log in as my wife, I cannot launch any major applications except Safari, whether from the Dock or Applications folder. In fact, most of the apps in the folder are grayed out. And when I try to access the Desktop, Other Files, and various other folders, I receive a message that her account "does not have permission to see the contents." Why not? What have I overlooked?
This is becoming an urgent problem, because there's business that must be conducted. I have had similar problems with the iMac from the start, when it refused to accept me as the rightful owner of files that were transferred from our older Mac Pro dwesktop. Yikes!
Any help on this will be very much appreciated. Thanks.
Message was edited by: David Henderson7

Hey thomashfrompa,
Thanks for the question. I understand that you are experiencing issues with iTunes for Windows. The following article outlines the error message you are receiving and a potential resolution:
iTunes 11.1.4 for Windows: Unable to install or open
http://support.apple.com/kb/TS5376
Some Windows customers may experience installation issues while trying to install or open iTunes 11.1.4.
Symptoms may include:
"The program can't start because MSVCR80.dll is missing from your computer"
"iTunes was not installed correctly. Please reinstall iTunes. Error 7 (Windows Error 126)”
"Runtime Error: R6034 - An application has made an attempt to load the C runtime library incorrectly"
"Entry point not found: videoTracks@QTMovie@@QBE?AV?$Vector@V?$RefPtr@VQTTrack@@@***@@$0A@VCrashOnOverf low@@***@@XZ could not be located in the dynamic link library C:\Program Files(x86)\Common Files\Apple\Apple Application Support\WebKit.dll”
Resolution
Follow these steps to resolve the issue:
Check for .dll files
1. Go to C:\Program Files (x86)\iTunes and C:\Program Files\iTunes and look for .dll files.
2. If you find QTMovie.DLL, or any other .dll files, move them to the desktop.
3. Reboot your computer.
Note: Depending on your operating system, you may only have one of the listed paths.
Uninstall and reinstall iTunes
1. Uninstall iTunes and all of its related components.
2. Reboot your computer. If you can't uninstall a piece of Apple software, try using the Microsoft Program Install and Uninstall Utility.
3. Re-download and reinstall iTunes 11.1.4.
Thanks,
Matt M.

Hi I am a new iMac user. I got my iTunes on here finally, but now it is telling me I haven't authorized my computer? When I ask @ the app. store- no answers... What did I miss?

Hi, I am a new iMac user and I finally got my itunes to recognize my music to the iMac, but now it says my computer is not authorized?! When I ask at the App. store about this- they have nothing, but that is where the iMac sends me? So what did I miss?

TARDISvt wrote:
When I click on the apple in the left cornor I get App. Store- but I do not get the choice to authorize?...
You need to Open iTunes and then click on Store in the Menu Bar.
See this Discussion...
https://discussions.apple.com/thread/4631735?tstart=0

HT1600 I have an Apple TV 2nd Gen, iPad 2 and can't get the icon to appear when i swipe from left to right. What am I missing? I am able to get the 'Home sharing' 'user and password on my Mac.

I have an Apple TV 2nd Gen, iPad 2 and can't get the icon to appear when i swipe from left to right. What am I missing?
I am able to get the 'Home sharing' 'user and password on my Mac.
Also using IPad 2 I am able to get the ITunes to accept the user name and same password as the Mac.
However, the only way I can see the 'Home sharing; icon is in Music on the Ipad. When I tap on the Icon it asks for a password.
When I give the same password, it is rejected.
Help!!!!
Jaxxdiggs

Personally I think the iOS devices are poor at reconnecting - Airplay establishes that a link is available but when the iPhone/iPad has been away from the house and rejoins the network i think AppleTV already thinks it's connected with a different IP address and fails to recognise it has joined the network again with new credentials.
Something along those lines anyway.
I find that a combination of restarting AppleTV, router and iOS device tends to fix it, but not for everyone.
AC

Time machine only copies User Info and Users (Applications, Library, and System are missing) from my quad core Mac Pro. 45 Gb of 162 Gb are missing. Any one having success with time machine copying all folders using Mavericks? What do I need to do dif

Time machine only copies User Info and Users (Applications, Library, and System are missing) from my quad core Mac Pro. 45 Gb of 162 Gb are missing. Any one having success with time machine copying all folders using Mavericks?
What do I need to do differently?

The late, great Pondini was investigating that issue before he passed away.
See here: https://discussions.apple.com/thread/5125969
I think there might be information there on how to reset Time Machine to do a full backup. I think you basically have to reset it and start over.

HT4889 When I transferred my data from a 128GB Macbook Air to 256GB Macbook Air (brand new version as of 9/1/13) I end up with 188GB used! I add up the size of Users, System, Library and Applications and it comes to 90GB. What am I missing?

When I transferred my data from a 128GB Macbook Air to 256GB Macbook Air (brand new version as of 9/1/13) I end up with 188GB used! I add up the size of Users, System, Library and Applications and it comes to 90GB. What am I missing? How did I "use" up so much space in migrating from one Mac to another?

Did you use the Setup Assistant available at the beginning of the new machine's setup process? Or did you use Migration Assistant later after you had set up the new machine?
If you used Migration Assistant, you generally wind up with two accounts (the new one you set up on the new machine plus the old one you ported over) - that may explain your excessive use of space. In that case, you can either manually combine/remove all unnecessary duplicate files, or you can start over by using Command + R, wiping your drive, and downloading the OS. Once it's downloaded, use the Setup Assistant offered at the beginning of the install/setup process.

Extensible Policy problems

Greetings,
I am having issues with extensible policies. I have disabled the network
control panel via admin.adm Network->Restrict Network Control Panel. Problem
is it is working too good. The control panel remains disabled no matter who
logs into the work station. I have tried deselecting the check box (white)
and logging back in as the user who the package is associated with, still no
access. Setting to ignore (grey) has the same effect. It seems like a one
way street.
Could someone please explain just what I am missing? It does not make sense
that once it is disabled it can never be re-enabled.
Ed

Ed,
It appears that in the past few days you have not received a response to your posting. That concerns us, and has triggered this automated reply.
Has your problem been resolved? If not, you might try one of the following options:
- Do a search of our knowledgebase at http://support.novell.com/search/kb_index.jsp
- Check all of the other support tools and options available at http://support.novell.com in both the "free product support" and "paid product support" drop down boxes.
- You could also try posting your message again. Make sure it is posted in the correct newsgroup. (http://support.novell.com/forums)
If this is a reply to a duplicate posting, please ignore and accept our apologies and rest assured we will issue a stern reprimand to our posting bot.
Good luck!
Your Novell Product Support Forums Team
http://support.novell.com/forums/

Devices/Printers tile does not appear, what am I missing??

This is a Windows Server 2012 R2 Remote Desktop Host environment.
Devices and Printers tile created and placed underneath 'Desktop'
Configured a custom Start menu using the XML file method and setting its location in Group Policy, I can see 'Devices and Printers' in the XML file.
Set polcies to allow access to Control Panel and to show ONLY Devices and Printers.
Did gpupdate /force on the DC and on the RDS host wherein I'm testing, logged in as a test user.
The D and P tile is still not showing on Start screen nor does it show in Apps list...
D and P can be found with Search but that is clunky...
What am I missing to make this tile visible to users?? (I even tried re-creating the test user)
Thank you, Tom

Hi Tom,
I did a test and it seems that we can't deploy the tile of Devices and Printers via group policy setting
Start Screen Layout. The reason behind this may be due to the fact that the AppID of the Devices and Printers in the exported start layout file is not a set one. We can compare the AppIDs of the Devices and Printers after exporting
the screen layout files with two different user accounts.
Regarding this point, the following thread can also be referred to for more information.
[Suggestion/Issue] GPO "Start Menu Layout" / PS Export-StartLayout Issue
http://social.technet.microsoft.com/Forums/en-US/1aa2b56f-c044-4ab0-938a-f3e4b9e8cad4/suggestionissue-gpo-start-menu-layout-ps-exportstartlayout-issue
TechNet Subscriber Support
If you are TechNet Subscription user and have any feedback on our support quality, please send your feedback here.
Best regards,
Frank Shen

HT1209 My Itunes Library and iPhone have fallen out of sync on music over the yearsare - how can I compare my itunes library with my Iphone to see what songs are missing from my library so I can then bring my Library up to date

My Itunes Library and iPhone have fallen out of sync on music over the yearsare - how can I compare my itunes library with my Iphone to see what songs are missing from my library so I can then bring my Library up to date

Hello Solid Buck,
Thank you so much for providing the details about the duplicate song issue you are experiencing. It sounds like you would like to remove the duplicate songs that will not play on your iPhone, but when you connect it to iTunes, iTunes only shows you one copy of the song on your iPhone.
In this situation, I recommend deleting the individual songs that do not play directly from your iPhone. I found the steps to do this on page 61 of the iPhone User Guide (http://manuals.info.apple.com/en_US/iphone_user_guide.pdf):
Delete a song from iPhone: In Songs, swipe the song, then tap Delete.
Thank you for using Apple Support Communities.
Best,
Sheila M.

Pages 4.9 will open Appleworks Documents, but I Pages 5 will not. What am I missing? or is the software just not as good as 4.9?

Pages 4.3 will open Appleworks Power PC Documents, but I Pages 5 will not. What am I missing? or is the software just not as good as 4.3?

"Some users have reported" is a mild way to put it. To answer your question "or is the software just not as good as 4.3?" more directly... it's only better in transparency between platforms. Everything else is pretty gutted. Dozens of features deleted, as listed occassionally in this long thread: https://discussions.apple.com/thread/5468056?tstart=0
Oh, one other improvement- it DOES run faster, but then of course it would since it's so much more lightweight.

HT201210 I've updated to the latest IOS version. I am now asked to accept the conditions. I click on accept and am always returned to the accept window. What am I missing

I've updated to the last IOS version and am now asked to accept the conditions. I click on I accept and am constantly referred back to the acceptance window. What am I missing? TIA

Hi Vulcan37!
I have some troubleshooting steps for you that can help you resolve this issue. First, you will want to try just performing a reset on your phone by following the instructions in this article:
iOS: Turning off and on (restarting) and resetting
http://support.apple.com/kb/ht1430
You may also need to make sure your Safari settings are set for accepting cookies. More information on this can be found here:
Privacy and security - iPhone User Guide
http://help.apple.com/iphone/7/#/iphb01fc3c85
Thanks for coming to the Apple Support Communities!
Regards,
Braden

ADS config - what I have missed ?

At the risk of flogging a dead horse, I've got an error FPRUNX001   when I run program
FP_TEST_00 .....    before everyone shouts "it's the destination service !!" , can someone tell
me what I've missed from the steps below ?
ASABAP
1. Create SM59 destination ADS   .... test connection > OK
2. Create service user ADS_AGENT and assign to role SAP_BC_FPADS_ICF
3. Create system user ADSUser
4. Create role ADSCallers and assign user ADSUser to role
5. SICF > activate service default host/sap/bc/fp ....no user logon info provided on service ?
ASJAVA
1. Define user ADSUser and group ADSCallers
2. Create services->Destination-> FP_ICF_DATA_NSP.
    Uses user ADS_AGENT, URL set to http://<ASABAP server>:8000
    Pressing Save & test returns http error 404 - like the documentation says it should...
Thanks
Ian
Edited by: Ian Huxley on Jan 24, 2008 4:56 PM

Some sites use regular HTML for ads while others use a plugin such as Flash. If you right-click the blank area, does it show an Adobe Flash menu or other plugin menu?
Perhaps you could give a URL or two where this problem occurs.

What am I missing with VPN enforcement?

I'm making sense of how to implement the VPN Enforcement feature and would like to hear from others who have set it up.
The way I understand it to work is this...
User connects to the internet (eg with a laptop using a 3G card). Once it detects the internet connection, it switches to the Location specified in the "Switch To" setting on the VPN Enforcement page.
And I have it prompting to connect to the VPN client at this point.
What is puzzling me is... what's the point?
It doesn't seem to make a difference whether the user connects to the VPN or not. The Location in the Switch To setting can have certain restrictions but once connected to the VPN, the Location doesn't change. So, before or after connection to the VPN the same restrictions are in place.
Perhaps I'm missing something in the way this is meant to work.
How has anyone else set this up?
Ideally what I want to happen is....
User connects to the internet - so has enough restrictions (or un-restrictions) to allow this. This would include connecting at an airport or hotel where you connect via a web page. Usually this would be with a 3G modem
then the user is forced to connect to their VPN (in our case we have a dongle and log in. So, I can cause the login screen to appear on VPN switching)
Only allow internet access as long as the VPN is connected. And block access if it is not.
Any thoughts are happily received, thanks
Alison

Here is a brief description of what needs to be done in order for VPN Enforcement to work.
1) The "Unknown" location should have a "stateful" firewall assigned. This allows the endpoint to see all APs and also authenticate to them.
2) The VPN Location should have an "all closed" firewall. This location will be used to switch to once the endpoint gains internet connection (the ZSC checks this automatically). You have to setup a single ACL rule
that points to the IP address of your VPN concentrator (so now the only accessible service/device is the VPN)
3) In the "VPN Enforcement" settings, enter the IP address of the VPN concentrator, the trigger location (at a minimum this is the Unknown), and "Switch to" locations (this is the location you set up in step 2)
5) Again, in "VPN Enforcement" configure the settings needed to make your VPN client to connect "automagically" to the VPN concentrator (client path, and optionally any arguments).
Please note that internet connectivity triggers the enforcement. If someone connects to an AP or wired network that requires authentication (such as you see at a coffee house or hotel), then the Internet connectivity fails.
Hope this clarifies,
Daniel
>>>
From: AWhitwood<[email protected]>
To:novell.support.zenworks.endpoint-security-management
Date: 7/8/2009 10:06 PM
Subject: Re: What am I missing with VPN enforcement?
Excellent - thanks Indy
That is pretty much the same as what I'm setting up. Would you mind
expanding on how you've set this up....I've put your original comments
in blue
1) Users log in and change their location to 'Wired/Wireless/3G'.
I know our users won't manually switch Locations themselves.
I've got this set up to detect the Unknown location which is anything
that is away from the office wired network.
2) Once they have connected to a secure wifi hotspot or their vodafone
3g dongle is connected the location automatically switches to 'Secure
VPN'.
Once they are on the internet, ourLcoation does switch from
"Unknown" to "Away from the Office" (or "VPN" in your system). Can I
ask you what your Firewall settings are on your VPN location? Are there
any restrictions? eg I had it All Blocked but of course it stopped it
connecting the VPN client so I've now got it set to All Stateful.
3) After a few seconds the Cisco VPN Client automatically loads and the
user has to connect via that to get internet connectivity otherwise they
get nothing.
I have this too - the client VPN launches and the user is prompted
to login. But what if they don't? what stops the internet working for
them if they didn't log in? When you say "otherwise they get nothing" -
what is it that prevents them getting to the internet if they have not
connected to the VPN. This is exactly what I'm trying to set up so I'm
very happy to hear that you've done it. What is puzzling me is how to
have it blocking internet access unless it is through the VPN.
I think its purpose is to make sure all internet traffic goes through
your VPN and firewalls, settings, etc etc...
Exactly what I want ! Thanks - I've just got to figure out how to
do it.
Hope that helps,
That helped a lot.
Alison
AWhitwood
AWhitwood's Profile: http://forums.novell.com/member.php?userid=4390
View this thread: http://forums.novell.com/showthread.php?t=379389

Changes to User Extensible Policies not working

I'm having some difficulty with User Extensible Policies being applied on
Windows XP machines. We've been using these policies/machines for some
time without a problem. However, when I make a change to one of the
policies, the change is not reflected on the XP machines (works fine on
W2k, and W98 machines). The main changes I've been making are with the
Allowed Applications parameter.
Also, this particular client limits logins to 1 per user. I've also
noticed that the XP machines don't pick up the change when I increase the
login limit from 1 to 2 (they still give me the error message upon
attempting to login indicating the user has exceeded the maximum allowable
logins, even though there's only 1 active login for this particular
user). Again, I don't see this behavior from the W2k, or W98 machines.
I've tried completely removing the client and reinstalling and completely
recreating the user profile. When removing the client, I made sure there
were no left over policies on the local machine before reinstalling. Upon
reinstalling the client, policies are pulled down and applied, but they
are the version of the policies before the changes were made. (I"ve tried
client versions 4.9, and 4.9 sp1. I couldn't get 4.9sp2 to install
properly, but I'm still working on that one)
It's as if the XP workstations aren't properly reading changes in NDS.
I'm wondering if some automatic update has been applied that has broken
some Novell functionality somewhere.
Has anyone experience this problem yet?
Zen 3.2, sp3
Thanks,
Kenny Franklin

You were dead on. Group Policies worked perfectly. Thanks a bunch!
On a side note, this particular site has three sets of policies enabled:
1 to allow access to a certain list of apps
2 to allow access to a different list of apps
3 to allow access to all apps.
When I modify the Group Policy for the first user package, it duplicates
the same settings for the second user package (i.e. it's reading from the
same policy file). Do I need to specify different policy paths for each
user package to have separate and distinct policies?
Thanks again,
Kenny
> Extensible Policies are not officially supported under Windows XP by
Microsoft
> and hence by Novell.
> You may want to give Group Policies a try.
>
> Try Forcing Policy Updates as shown here -
> http://support.novell.com/cgi-bin/se...?/10073744.htm
>
> [email protected] wrote:
>
> > I'm having some difficulty with User Extensible Policies being
applied on
> > Windows XP machines. We've been using these policies/machines for
some
> > time without a problem. However, when I make a change to one of the
> > policies, the change is not reflected on the XP machines (works fine
on
> > W2k, and W98 machines). The main changes I've been making are with
the
> > Allowed Applications parameter.
> >
> > Also, this particular client limits logins to 1 per user. I've also
> > noticed that the XP machines don't pick up the change when I increase
the
> > login limit from 1 to 2 (they still give me the error message upon
> > attempting to login indicating the user has exceeded the maximum
allowable
> > logins, even though there's only 1 active login for this particular
> > user). Again, I don't see this behavior from the W2k, or W98
machines.
> >
> > I've tried completely removing the client and reinstalling and
completely
> > recreating the user profile. When removing the client, I made sure
there
> > were no left over policies on the local machine before reinstalling.
Upon
> > reinstalling the client, policies are pulled down and applied, but
they
> > are the version of the policies before the changes were made. (I"ve
tried
> > client versions 4.9, and 4.9 sp1. I couldn't get 4.9sp2 to install
> > properly, but I'm still working on that one)
> >
> > It's as if the XP workstations aren't properly reading changes in NDS.
> > I'm wondering if some automatic update has been applied that has
broken
> > some Novell functionality somewhere.
> >
> > Has anyone experience this problem yet?
> >
> > Zen 3.2, sp3
> >
> > Thanks,
> >
> > Kenny Franklin
>
> --
> Craig Wilson
> CNE3, 4, 5 - MCSE - CCNA
> NSC Sysop (http://support.novell.com/forums/)
>
> Tech Writer - http://www.ithowto.com
> (I Peter 4:10)
>
>

NT User Extensible Policy - what am I missing ?

Similar Messages

Maybe you are looking for