OneDrive Pro Group Policy & Centralised Configuration Options

Hi there,
I would like to guidance as to the available options for controlling and configuring the Office 365 Pro Plus 'OneDrive Pro' application within Group Policy?  What is the most streamlined way of centrally configuring the desktop application on sync'ing
online OneDrive content from Office 365 to the desktop?  It all seems rather manual and based around individual user subscriptions initially.
Responses appreciated, with any reference links / guides.
Thank you.
MSEBlogger (Technet)

This might be Group Policy object what you need:
http://blogs.msdn.com/b/denotation/archive/2013/11/01/disable-windows-skydrive-app-using-group-policy.aspx
Tony Chen
TechNet Community Support

Similar Messages

  • SBL and Windows group policy user configuration preference

    We would like to have user connects to VPN via SBL and then login to the AD domain.  Ideally, the group policy user configuration preference, such as drive mapping, should be applied after successful AD login.  However, we are running into issue where the preferences are not being applied.  It appears the AnyConnect VPN tunnel is not completely established after the user login to AD; and hence the GPO preference was not able to apply.  It takes about 1 min.after the user's AD login before the VPN tunnel is completely established.
    Just want to find out if anyone is able to get SBL and AD GPO preference working successfully.

    Originally Posted by twiggy
    Tbreeden - thanks for ur note, yes I am aware of the apply button - but u r right, it's not really noticeable unless u know to look for it
    Rroncme - I am using 32bit. We don't have any vita machines but win7 is supposed to be supported. I've created other policies using win7 and the saved just fine/applied fine too. Thanks for ur thoughts, I appreciate it.
    Any one else haven success w 32 bit win7 -building ie policy?
    Well there is a TID 7005804 about IE policy failures but don't know if the bug applies to your situation...
    Policy failures in Terminal Sessions on Windows Server 2003 and Windows Server 2008
    Thomas

  • Group Policy for Outlook Option: "Mark Messages as expired after this many days"

    In Outlook, there is a option where you can have Outlook "Mark Messages as expired after this many days".  If you enable this option, you fill in a number of days when Outlook will mark the message as expired.  The default is 180 days.
    The option is located under FILE -> Options -> Mail -> Send Messages.
    Does anyone know how to enable this setting via Group Policy? I can't find it.
    Thanks!

    Hi,
    Do you have the
    Office 2010 Administrative Templates loaded? If so, we can find the GPO setting under:
    Administrative Templates > Microsoft Outlook 2010 > Outlook Options > Preferences > E-mail Options > Advanced E-mail Options
    Double click "When sending a message" setting, select Enable bullet. Now, you can specify the "Messages expire after (days):" option.
    Regards,
    Steve Fan
    TechNet Community Support
    It's recommended to download and install
    Configuration Analyzer Tool (OffCAT), which is developed by Microsoft Support teams. Once the tool is installed, you can run it at any time to scan for hundreds of known issues in Office
    programs.

  • Group policy Preference - Internet Option setting not applying

    Hi,
    I’m not very sure if any of you have encounter this strange issue when
    configuring GPP -> Internet option setting for window 7 IE9 or IE11.
    The following
    are spec of OS and IE version used in my environment.
    Window Server
    2012 R2 (IE 10)
    Window 7 (IE9
    and IE11)
    Recently I
    have deployed proxy setting via GPP as I do not have IEM under my GPMC console.
    Once the setting is been configured and deployed, I have notice that the GPO do
    not apply after the user login. The following scenarios is what we observed.
    1) User boot up the machine, Login and proxy setting will not applied
    1a) gpupdate /force -> Proxy Settings applied
    1b) setting will be removed after the GPO refreshed
    2) User boot up the machine, Login and proxy setting will not apply
    2a) User logoff and login proxy setting applied.
    2b) Setting will be removed after the GPO refreshed
    Kindy advise
    if there is any solution to ensure that the setting apply whenever the user
    login and stay intact even after the gpo refreshed by itself.

    Hi,
    >>1a) gpupdate /force -> Proxy Settings applied
    >>1b) setting will be removed after the GPO refreshed
    Based on the description, we can run command gpresult/h report.html to collect group policy result reports to compare how the settings are being applied.
    Besides, have we installed the following hotfix on the computers with IE 9? If not, we can try to install the hotfix.
    Internet Explorer Group Policy Preferences do not apply to Internet Explorer 9 in a Windows Server 2008 R2 domain environment
    https://support.microsoft.com/en-us/kb/2530309?wa=wsignin1.0
    Best regards,
    Frank Shen
    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

  • Windows 2008 R2 - Group Policy Preference - folder option "Open with" Access denied

    Similar to this post:
    social.technet.microsoft.com/Forums/en-US/d42a81bc-96de-4af3-bc41-079e88e6ea4a
    We have Citrix terminal servers running Windows 2008 R2 and attempting to force PDF files to open with Acrobat versus PDF editing software we have installed for a small subset of users.  So I created a Group Policy Preference and added a OpenWith item
    to the Folder Options to use Acrobat as the default and linked it to a Users OU.  However, if I run gpresult the OpenWith setting fails with error code 0x80070005.  You can change it to not run in the user's security context which eliminates the
    error but then it won't actually do anything.
    The problem seems to be that when a user sets another program as their default via Windows Explorer the permissions on HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pdf\UserChoice get changed so that the user is specifically
    denied the ability to set that key.  Remove the special permissions added and the group policy succeeds and changes it back to the default ... until the user changes it back (intentionally or otherwise) and the permissions are changed again.
    Any ideas here?

    > Any ideas here?
    We use GPP Registry to achieve this goal, so we do not run into that
    issue (we unchecked "run in users context", so privs are not an issue)
    But I agree, this really should work as intended...
    Martin
    Mal ein
    GUTES Buch über GPOs lesen?
    NO THEY ARE NOT EVIL, if you know what you are doing:
    Good or bad GPOs?
    And if IT bothers me - coke bottle design refreshment :))

  • Group Policy for configuring SNMP service

    HI,
    I want to configure SNMP service on HP Physical server for communicating with HP SIM server through GPO as need to congifure it on 100 servers.
    Though I have configure a policy but its not working.
    When I configured manually on HP Physical server its working fine but when I tried to implement through GPO, SNMP stops responding to SNMP requests.
    I need a working GPO.
    -- Sandeep Gupta

    Hi Sandeep Gupta,
    Based on my understanding, there were something wrong when you configured the SNMP service via GPO. As Martin said, please provide us the policy you configured to get more help. In addition, please also tell us your OS information.
    I would like to introduce you some knowledge on SNMP settings:
    Based on my experience and research, the
    SNMP settings (including permissions) are stored in the following registry:
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SNMP
    Therefore, we can configure a sample computer and then propagate the registry settings to other computers via scripts. Note that, the default ADM file can only
     be used to configure "Read only" settings.
    Regards,
    Lany Zhang

  • How to disable Internet Options using Group Policy Object?

    Dear everybody,
    Please tell me about how to disable Internet Options via group policy to Internet Options on Tool menu, Internet Options on Control Panel and Command control inetcpl.cpl?
    kea

    Hi,
    The location of this GPO in Windows Server 2008 should be:
    User Configuration\Administrative
    Templates\Windows Components\Internet Explorer\Browser menus
    Enable the Group Policy “Tools
    menu: Disable Internet Options… menu option”
    Hope that helps.
    Regards,
    Leo   Huang
    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

  • Configure ASR via Group Policy

    A recent security advisory suggests configuring EMET 5.0 to enable some additional ASR mitigation settings for dllhost.exe and powerpoint.
    See:  Microsoft security advisory 3010060
    The instructions include importing an XML file containing the new configuration settings.
    Is there a way to apply these settings via the EMET group policy settings?
    If using group policy to configure EMET, are the default ASR settings enabled? Are any ASR settings available to be configured through group policy?

    Hi,
    No, I think there is no change from old “Win32_TSPermissionsSetting”. You can use the same class for remote control.
    You may use WMI to change the listener's security descriptor.  For example, you may use the AddAccount method to add a group to the default RDP-Tcp listener and grant it Full Control (below is using wmic logged in locally):
    wmic /namespace:\\root\CIMV2\TerminalServices PATH Win32_TSPermissionsSetting WHERE(TerminalName="RDP-Tcp") CALL AddAccount "DOMAIN\group",2
    After making a permission change you should log off any users that will be the target of a log off so that the change will take effect (quoted from
    this thread).
    Apart you can also try below policy setting.
    Computer Configuration\Policies\Administrative Templates\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Connections 
    User Configuration\Policies\Administrative Templates\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Connections 
    Set rules for remote control of Remote Desktop Session Host server user sessions: Enable
    Hope it helps!
    Thanks.
    Dharmesh Solanki
    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

  • EMET 5.x Configure EAF+ and ASR using Group Policy

    I'm deploying EMET 5.2 in a test environment here at the office, and trying using Group Policy to configure the actual EMET mitigation policies.  I'm aware of the new mitigations in 5.x, EAF+ and ASR, but I don't see any way to configure those using
    Group Policy; they're not in the "available parameters" list in the GPO description, and nothing is mentioned about configuring them using GPO in the 5.2 config guide.  Is there something I'm missing?  I definitely updated the Group Policy
    files with the latest from 5.2 in our domain's sysvol.
    For example, to match the default configuration, I'd want a few GPO config lines like:
    *\7-Zip\7zG.exe -EAF -EAF+ -ASR
    *\Adobe\Acrobat*\Acrobat\Acrobat.exe -ASR

    Hi.
    Read this please: 
    Works well for the enterprise. Enterprise IT professionals can easily deploy EMET through Microsoft System Center Configuration Manager and apply Group Policies in Windows Active Directory to comply with enterprise account, user, and
    role policies. Administrators can customize and configure EMET deployments and determine which applications they want to protect through which mitigation techniques. 
    I found it at the
    Emet 5.2 Download website, in Details

  • Group Policy - User Rights Assignments not taking effect on workstation`

    Novell 5.1 SP7. ZenWorks 3.2 sp3. Windows XP Pro workstations.
    In Group Policy, (Computer Configuration/Windows Settings/Security
    Settings/Local Policies/User Rights Assignment), I have added Power Users to
    the "Load and Unload device drivers" policy. However this setting is not
    taking effect on my Windows XP workstations. My DLU policy for users is
    configured to have the users members of the "Users" and "Power Users" groups
    on the local PC.
    Other parts of Group Policy (Computer Policy/Administrative Templates) are
    taking effect on the workstation, so I'm wondering if the problem I am
    having is related to Security Settings only.
    I enabled Group Policy logging on the Windows XP workstation and include it
    below:
    WMHelperInitialization (Mar 4 2004) called! Flags: 0x8001002. Event:
    0x1000. Impersonation: 0x2
    Created Mutex.
    Loaded userenv.dll
    Mapped function RefreshPolicy
    Mapped function RegisterGPNotification
    Mapped function UnregisterGPNotification
    Mapped function RefreshPolicyEx
    Exiting WMHelperInitialization. Returning flags: 0x204
    WMHelperSystemEntryEx called!
    Entered GPCleanupEntry
    Writing User Logged In to \HKLM\Software\Novell\Workstation Manager\Group
    Policies
    Wrote reg. value 0x0 to User Logged In in key Software\Novell\Workstation
    Manager\Group Policies
    Reading Group Policy User Flags from \HKLM\Software\Novell\Workstation
    Manager\Group Policies
    Read reg. value Group Policy User Flags: 0x80000070 in key
    Software\Novell\Workstation Manager\Group Policies
    Reading Persist Workstation settings from \HKLM\Software\Novell\Workstation
    Manager\Group Policies
    Reg key Software\Novell\Workstation Manager\Group Policies\Persist
    Workstation settings not found. Assuming 0
    Error 2 reading Persist Workstation settings
    Entered RestoreOriginalGP.
    Reading Group Policy Machine Flags from \HKLM\Software\Novell\Workstation
    Manager\Group Policies
    Reg key Software\Novell\Workstation Manager\Group Policies\Group Policy
    Machine Flags not found. Assuming 0
    Reading Group Policy User Flags from \HKLM\Software\Novell\Workstation
    Manager\Group Policies
    Read reg. value Group Policy User Flags: 0x80000070 in key
    Software\Novell\Workstation Manager\Group Policies
    Entered GPDel
    Deleting C:\WINDOWS\System32\GroupPolicy\User
    Deleting C:\WINDOWS\System32\GroupPolicy\Machine
    Exiting GPDel 0
    Restoring backup GP from C:\WINDOWS\System32\GroupPolicy.WMOriginal
    Entered GPCopy(C:\WINDOWS\System32\GroupPolicy.WMOriginal,
    C:\WINDOWS\System32\GroupPolicy, 0, handle, 0x80000070)
    Warning: C:\WINDOWS\System32\GroupPolicy.WMOriginal\GPT.ini does not exist
    Copied file
    C:\WINDOWS\System32\GroupPolicy.WMOriginal\Machine \Microsoft\Windows
    NT\SecEdit\IPS1.dat to
    C:\WINDOWS\System32\GroupPolicy\Machine\Microsoft\ Windows
    NT\SecEdit\IPS1.dat
    Copied file
    C:\WINDOWS\System32\GroupPolicy.WMOriginal\Machine \Microsoft\Windows
    NT\SecEdit\XPSec.dat to
    C:\WINDOWS\System32\GroupPolicy\Machine\Microsoft\ Windows
    NT\SecEdit\XPSec.dat
    GP_FLAG_APPLY_SECURITY_SETTINGS (0x40), not set, or security file already
    copied. Will not copy security file
    Exiting GPCopy 0x0
    Writing Group Policy Machine Status to \HKLM\Software\Novell\Workstation
    Manager\Group Policies
    Wrote reg. value 0x4000 to Group Policy Machine Status in key
    Software\Novell\Workstation Manager\Group Policies
    Exiting RestoreOriginalGP 0x0
    Entered AppendSecuritySettings
    Inf path: C:\WINDOWS\System32\GroupPolicy\Machine\Microsoft\ Windows
    NT\SecEdit\XPSec.dat
    Restoring GP settings
    Loading Account Policies...
    Loading Audit Policies...
    Loading user rights...
    Restoring security options...
    No data
    No data
    No data
    No data
    No data
    No data
    No data
    No data
    Renamed Administrator account: Administrator
    Local Administrator's user name = Administrator
    Administrator account names match, skipping.
    Renamed Guest account: Guest
    Local Guest's user name = Guest
    Guest account names match, skipping.
    LoadXPSecuritySettings returning 0
    LoadHive entered
    LoadHive exit : 0
    Exiting AppendSecuritySettings 0x0
    GPCleanupEntry releasing mutex.
    Exiting GPCleanupEntry: 0
    Exiting WMHelperSystemEntryEx ccode: 0x0
    Closing log file.
    WMHelperInitialization (Mar 4 2004) called! Flags: 0x0. Event: 0x0.
    Impersonation: 0x0
    Created Mutex.
    Loaded userenv.dll
    Mapped function RefreshPolicy
    Mapped function RegisterGPNotification
    Mapped function UnregisterGPNotification
    Mapped function RefreshPolicyEx
    Exiting WMHelperInitialization. Returning flags: 0x11
    Entering WMHelperInteractiveUserEntry!
    szFullDN = CN=wintest3.OU=Users.OU=Newcastle.O=OSG
    DN is Typed convert it to TYPELESS
    g_szUserDN = wintest3.Users.Newcastle.OSG
    GinaGetUsersSIDInTextualForm ENTERED
    Textual SID : S-1-5-21-1214440339-507921405-1708537768-1019
    GinaGetUsersSIDInTextualForm EXIT : 0
    Writing Don't reparse to \HKLM\Software\Novell\Workstation Manager\Group
    Policies
    Wrote reg. value 0x0 to Don't reparse in key Software\Novell\Workstation
    Manager\Group Policies
    Writing User Logged In to \HKLM\Software\Novell\Workstation Manager\Group
    Policies
    Wrote reg. value 0x1 to User Logged In in key Software\Novell\Workstation
    Manager\Group Policies
    Entered CheckForObsoleteWksCache .
    No workstation. Exiting CheckForObsoleteWksCache
    Applying user policies
    Reading Don't reparse from \HKLM\Software\Novell\Workstation Manager\Group
    Policies
    Read reg. value Don't reparse: 0x0 in key Software\Novell\Workstation
    Manager\Group Policies
    Reading Group Policy User Status from \HKLM\Software\Novell\Workstation
    Manager\Group Policies
    Read reg. value Group Policy User Status: 0x3000 in key
    Software\Novell\Workstation Manager\Group Policies
    Read reg. key Group Policy User Status: 0x3000
    Entering ApplyPolicies
    Reading Group Policy User Flags from \HKLM\Software\Novell\Workstation
    Manager\Group Policies
    Read reg. value Group Policy User Flags: 0x80000070 in key
    Software\Novell\Workstation Manager\Group Policies
    Read reg. key Group Policy User Flags: 0x80000070
    Reading Group Policy User Status from \HKLM\Software\Novell\Workstation
    Manager\Group Policies
    Read reg. value Group Policy User Status: 0x3000 in key
    Software\Novell\Workstation Manager\Group Policies
    Read reg. key Group Policy User Status: 0x3000
    Writing Group Policy User Status to \HKLM\Software\Novell\Workstation
    Manager\Group Policies
    Wrote reg. value 0x1000 to Group Policy User Status in key
    Software\Novell\Workstation Manager\Group Policies
    Impersonating logged on user.
    Context : OU=Users.OU=Newcastle.O=OSG
    Full Object DN CN=wintest3.OU=Users.OU=Newcastle.O=OSG
    Calling WMGetAllAssociatedObjects(FALSE, MARITIME, 1,
    CN=wintest3.OU=Users.OU=Newcastle.O=OSG, WINNT Workstation Package,
    zenwmGroupPolicy, 512, pBuffer)
    Reverting to system impersonation.
    Found DN CN=XP User Package:WinNT-2000-XP:Windows Group Policy.OU=Policy
    Packages.OU=Newcastle.O=OSG
    WMCheckIfGroupPolicyObjectsChanged entered
    Impersonating logged on user.
    Reverting to system impersonation.
    Group Policy object has NOT changed!
    Exiting WMCheckIfGroupPolicyObjectsChanged 0x0
    Entered ScheduleCleanup.
    Loaded wmschapi.dll
    Calling WMScheduleAction
    Finished Calling WMScheduleAction. Returned 0x0
    Exiting ScheduleCleanup 0x0
    Entered BackupOriginalGP.
    No backup exists. Creating one: C:\WINDOWS\System32\GroupPolicy.WMOriginal
    Backing up original GP to C:\WINDOWS\System32\GroupPolicy.WMOriginal
    Copied file C:\WINDOWS\System32\GroupPolicy\Adm\admfiles.ini to
    C:\WINDOWS\System32\GroupPolicy.WMOriginal\Adm\adm files.ini
    Copied file C:\WINDOWS\System32\GroupPolicy\Adm\conf.adm to
    C:\WINDOWS\System32\GroupPolicy.WMOriginal\Adm\con f.adm
    Copied file C:\WINDOWS\System32\GroupPolicy\Adm\inetres.adm to
    C:\WINDOWS\System32\GroupPolicy.WMOriginal\Adm\ine tres.adm
    Copied file C:\WINDOWS\System32\GroupPolicy\Adm\system.adm to
    C:\WINDOWS\System32\GroupPolicy.WMOriginal\Adm\sys tem.adm
    Copied file C:\WINDOWS\System32\GroupPolicy\Adm\wmplayer.adm to
    C:\WINDOWS\System32\GroupPolicy.WMOriginal\Adm\wmp layer.adm
    Copied file C:\WINDOWS\System32\GroupPolicy\Adm\wuau.adm to
    C:\WINDOWS\System32\GroupPolicy.WMOriginal\Adm\wua u.adm
    Copied file C:\WINDOWS\System32\GroupPolicy\GPT.ini to
    C:\WINDOWS\System32\GroupPolicy.WMOriginal\GPT.ini
    Copied file C:\WINDOWS\System32\GroupPolicy\Machine\Microsoft\ Windows
    NT\SecEdit\IPS1.dat to
    C:\WINDOWS\System32\GroupPolicy.WMOriginal\Machine \Microsoft\Windows
    NT\SecEdit\IPS1.dat
    Copied file C:\WINDOWS\System32\GroupPolicy\Machine\Microsoft\ Windows
    NT\SecEdit\XPSec.dat to
    C:\WINDOWS\System32\GroupPolicy.WMOriginal\Machine \Microsoft\Windows
    NT\SecEdit\XPSec.dat
    Entered SaveSecuritySettings
    Inf path:
    C:\WINDOWS\System32\GroupPolicy.WMOriginal\Machine \Microsoft\Windows
    NT\SecEdit\
    Saving XP security settings
    Saving Account Policies...
    Saving Audit Policies...
    Saving user rights...
    Name: Administrator
    Comment: Built-in account for administering the computer/domain
    Full Name:
    No rights.
    Name: Guest
    Comment: Built-in account for guest access to the computer/domain
    Full Name:
    Right: SeInteractiveLogonRight
    Right: SeDenyInteractiveLogonRight
    Right: SeDenyNetworkLogonRight
    Name: HelpAssistant
    Comment: Account for Providing Remote Assistance
    Full Name: Remote Desktop Help Assistant Account
    No rights.
    Name: SUPPORT_388945a0
    Comment: This is a vendor's account for the Help and Support Service
    Full Name: CN=Microsoft Corporation,L=Redmond,S=Washington,C=US
    Right: SeBatchLogonRight
    Right: SeDenyInteractiveLogonRight
    Right: SeDenyNetworkLogonRight
    Name: vector
    Comment: Account created by Novell's Workstation Manager
    Full Name:
    No rights.
    Name: wintest3
    Comment: Account created by Novell's Workstation Manager
    Full Name:
    No rights.
    Name: None
    Comment: Ordinary users
    No rights.
    Name: Administrators
    Right: SeSecurityPrivilege
    Right: SeBackupPrivilege
    Right: SeRestorePrivilege
    Right: SeSystemtimePrivilege
    Right: SeShutdownPrivilege
    Right: SeRemoteShutdownPrivilege
    Right: SeTakeOwnershipPrivilege
    Right: SeDebugPrivilege
    Right: SeSystemEnvironmentPrivilege
    Right: SeSystemProfilePrivilege
    Right: SeProfileSingleProcessPrivilege
    Right: SeIncreaseBasePriorityPrivilege
    Right: SeLoadDriverPrivilege
    Right: SeCreatePagefilePrivilege
    Right: SeIncreaseQuotaPrivilege
    Right: SeChangeNotifyPrivilege
    Right: SeUndockPrivilege
    Right: SeManageVolumePrivilege
    Right: SeImpersonatePrivilege
    Right: SeCreateGlobalPrivilege
    Right: SeInteractiveLogonRight
    Right: SeNetworkLogonRight
    Right: SeRemoteInteractiveLogonRight
    Name: Users
    Right: SeShutdownPrivilege
    Right: SeChangeNotifyPrivilege
    Right: SeUndockPrivilege
    Right: SeInteractiveLogonRight
    Right: SeNetworkLogonRight
    Name: Guests
    No rights.
    Name: Power Users
    Right: SeSystemtimePrivilege
    Right: SeShutdownPrivilege
    Right: SeProfileSingleProcessPrivilege
    Right: SeChangeNotifyPrivilege
    Right: SeUndockPrivilege
    Right: SeInteractiveLogonRight
    Right: SeNetworkLogonRight
    Name: Account operators
    No rights.
    Name: System operators
    No rights.
    Name: Printer operators
    No rights.
    Name: Backup operators
    Right: SeBackupPrivilege
    Right: SeRestorePrivilege
    Right: SeShutdownPrivilege
    Right: SeChangeNotifyPrivilege
    Right: SeInteractiveLogonRight
    Right: SeNetworkLogonRight
    Name: Replicators
    No rights.
    Name: RAS servers
    No rights.
    Name: Pre2000 compatible access
    No rights.
    Exiting SaveUserRights (0)
    Saving Security Options
    Found: MACHINE/Software/Microsoft/Driver Signing/Policy
    Data type is 3
    Found: MACHINE/Software/Microsoft/Windows
    NT/CurrentVersion/Setup/RecoveryConsole/SecurityLevel
    Data type is 4
    Found: MACHINE/Software/Microsoft/Windows
    NT/CurrentVersion/Setup/RecoveryConsole/SetCommand
    Data type is 4
    Found: MACHINE/Software/Microsoft/Windows
    NT/CurrentVersion/Winlogon/AllocateCDRoms
    Data type is 1
    Found: MACHINE/Software/Microsoft/Windows
    NT/CurrentVersion/Winlogon/AllocateDASD
    Data type is 1
    Found: MACHINE/Software/Microsoft/Windows
    NT/CurrentVersion/Winlogon/AllocateFloppies
    Data type is 1
    Found: MACHINE/Software/Microsoft/Windows
    NT/CurrentVersion/Winlogon/CachedLogonsCount
    Data type is 1
    Found: MACHINE/Software/Microsoft/Windows
    NT/CurrentVersion/Winlogon/ForceUnlockLogon
    Data type is 4
    Found: MACHINE/Software/Microsoft/Windows
    NT/CurrentVersion/Winlogon/PasswordExpiryWarning
    Data type is 4
    Found: MACHINE/Software/Microsoft/Windows
    NT/CurrentVersion/Winlogon/ScRemoveOption
    Data type is 1
    Found:
    MACHINE/Software/Microsoft/Windows/CurrentVersion/Policies/System/DisableCAD
    Data type is 4
    Found:
    MACHINE/Software/Microsoft/Windows/CurrentVersion/Policies/System/DontDisplayLastUserName
    Data type is 4
    Found:
    MACHINE/Software/Microsoft/Windows/CurrentVersion/Policies/System/LegalNoticeCaption
    Data type is 1
    Found:
    MACHINE/Software/Microsoft/Windows/CurrentVersion/Policies/System/LegalNoticeText
    Data type is 7
    Found:
    MACHINE/Software/Microsoft/Windows/CurrentVersion/Policies/System/ScForceOption
    Data type is 4
    Found:
    MACHINE/Software/Microsoft/Windows/CurrentVersion/Policies/System/ShutdownWithoutLogon
    Data type is 4
    Found:
    MACHINE/Software/Microsoft/Windows/CurrentVersion/Policies/System/UndockWithoutLogon
    Data type is 4
    Found: MACHINE/SOFTWARE/policies/Microsoft/windows
    NT/DCOM/MachineAccessRestriction
    Data type is 1
    Found: MACHINE/SOFTWARE/policies/Microsoft/windows
    NT/DCOM/MachineLaunchRestriction
    Data type is 1
    Found: MACHINE/System/CurrentControlSet/Control/Lsa/AuditBaseObjects
    Data type is 4
    Found: MACHINE/System/CurrentControlSet/Control/Lsa/CrashOnAuditFail
    Data type is 4
    Found: MACHINE/System/CurrentControlSet/Control/Lsa/DisableDomainCreds
    Data type is 4
    Found:
    MACHINE/System/CurrentControlSet/Control/Lsa/EveryoneIncludesAnonymous
    Data type is 4
    Found: MACHINE/System/CurrentControlSet/Control/Lsa/FIPSAlgorithmPolicy
    Data type is 4
    Found: MACHINE/System/CurrentControlSet/Control/Lsa/ForceGuest
    Data type is 4
    Found: MACHINE/System/CurrentControlSet/Control/Lsa/FullPrivilegeAuditing
    Data type is 3
    Found: MACHINE/System/CurrentControlSet/Control/Lsa/LimitBlankPasswordUse
    Data type is 4
    Found: MACHINE/System/CurrentControlSet/Control/Lsa/LmCompatibilityLevel
    Data type is 4
    Found: MACHINE/System/CurrentControlSet/Control/Lsa/MSV1_0/NTLMMinClientSec
    Data type is 4
    Found: MACHINE/System/CurrentControlSet/Control/Lsa/MSV1_0/NTLMMinServerSec
    Data type is 4
    Found: MACHINE/System/CurrentControlSet/Control/Lsa/NoDefaultAdminOwner
    Data type is 4
    Found: MACHINE/System/CurrentControlSet/Control/Lsa/NoLMHash
    Data type is 4
    Found: MACHINE/System/CurrentControlSet/Control/Lsa/RestrictAnonymous
    Data type is 4
    Found: MACHINE/System/CurrentControlSet/Control/Lsa/RestrictAnonymousSAM
    Data type is 4
    Found: MACHINE/System/CurrentControlSet/Control/Lsa/SubmitControl
    Data type is 4
    Found: MACHINE/System/CurrentControlSet/Control/Print/Providers/LanMan Print
    Services/Servers/AddPrinterDrivers
    Data type is 4
    Found:
    MACHINE/System/CurrentControlSet/Control/SecurePipeServers/Winreg/AllowedPaths/Machine
    Data type is 7
    Found: MACHINE/System/CurrentControlSet/Control/Session
    Manager/Kernel/ObCaseInsensitive
    Data type is 4
    Found: MACHINE/System/CurrentControlSet/Control/Session Manager/Memory
    Management/ClearPageFileAtShutdown
    Data type is 4
    Found: MACHINE/System/CurrentControlSet/Control/Session
    Manager/ProtectionMode
    Data type is 4
    Found:
    MACHINE/System/CurrentControlSet/Services/LanManServer/Parameters/AutoDisconnect
    Data type is 4
    Found:
    MACHINE/System/CurrentControlSet/Services/LanManServer/Parameters/EnableForcedLogOff
    Data type is 4
    Found:
    MACHINE/System/CurrentControlSet/Services/LanManServer/Parameters/EnableSecuritySignature
    Data type is 4
    Found:
    MACHINE/System/CurrentControlSet/Services/LanManServer/Parameters/NullSessionPipes
    Data type is 7
    Found:
    MACHINE/System/CurrentControlSet/Services/LanManServer/Parameters/NullSessionShares
    Data type is 7
    Found:
    MACHINE/System/CurrentControlSet/Services/LanManServer/Parameters/RequireSecuritySignature
    Data type is 4
    Found:
    MACHINE/System/CurrentControlSet/Services/LanmanWorkstation/Parameters/EnablePlainTextPassword
    Data type is 4
    Found:
    MACHINE/System/CurrentControlSet/Services/LanmanWorkstation/Parameters/EnableSecuritySignature
    Data type is 4
    Found:
    MACHINE/System/CurrentControlSet/Services/LanmanWorkstation/Parameters/RequireSecuritySignature
    Data type is 4
    Found: MACHINE/System/CurrentControlSet/Services/LDAP/LDAPClientIntegrity
    Data type is 4
    Found:
    MACHINE/System/CurrentControlSet/Services/Netlogon/Parameters/DisablePasswordChange
    Data type is 4
    Found:
    MACHINE/System/CurrentControlSet/Services/Netlogon/Parameters/MaximumPasswordAge
    Data type is 4
    Found:
    MACHINE/System/CurrentControlSet/Services/Netlogon/Parameters/RefusePasswordChange
    Data type is 4
    Found:
    MACHINE/System/CurrentControlSet/Services/Netlogon/Parameters/RequireSignOrSeal
    Data type is 4
    Found:
    MACHINE/System/CurrentControlSet/Services/Netlogon/Parameters/RequireStrongKey
    Data type is 4
    Found:
    MACHINE/System/CurrentControlSet/Services/Netlogon/Parameters/SealSecureChannel
    Data type is 4
    Found:
    MACHINE/System/CurrentControlSet/Services/Netlogon/Parameters/SignSecureChannel
    Data type is 4
    Found:
    MACHINE/System/CurrentControlSet/Services/NTDS/Parameters/LDAPServerIntegrity
    Data type is 4
    Administrator's user name = Administrator
    Guest's user name = Guest
    SaveHive entered
    SaveHive exit : 0
    Exiting SaveSecuritySettings 0x0
    Backup path: C:\WINDOWS\System32\GroupPolicy.WMOriginal
    Exiting BackupOriginalGP 0x0
    Entered RestoreCachedGP.
    Reading Group Policy User Flags from \HKLM\Software\Novell\Workstation
    Manager\Group Policies
    Read reg. value Group Policy User Flags: 0x80000070 in key
    Software\Novell\Workstation Manager\Group Policies
    Reading Group Policy Machine Flags from \HKLM\Software\Novell\Workstation
    Manager\Group Policies
    Reg key Software\Novell\Workstation Manager\Group Policies\Group Policy
    Machine Flags not found. Assuming 0
    No gpt.ini detected, aborting RestoreCachedGP.
    Checking whether OriginalGP exists
    Entered GPDel
    Deleting C:\WINDOWS\System32\GroupPolicy\User
    Deleting C:\WINDOWS\System32\GroupPolicy\Machine
    Exiting GPDel 0
    Restoring original GP.
    Entered RestoreOriginalGP.
    Reading Group Policy Machine Flags from \HKLM\Software\Novell\Workstation
    Manager\Group Policies
    Reg key Software\Novell\Workstation Manager\Group Policies\Group Policy
    Machine Flags not found. Assuming 0
    Reading Group Policy User Flags from \HKLM\Software\Novell\Workstation
    Manager\Group Policies
    Read reg. value Group Policy User Flags: 0x80000070 in key
    Software\Novell\Workstation Manager\Group Policies
    Entered GPDel
    Deleting C:\WINDOWS\System32\GroupPolicy\User
    Deleting C:\WINDOWS\System32\GroupPolicy\Machine
    Exiting GPDel 0
    Restoring backup GP from C:\WINDOWS\System32\GroupPolicy.WMOriginal
    Entered GPCopy(C:\WINDOWS\System32\GroupPolicy.WMOriginal,
    C:\WINDOWS\System32\GroupPolicy, 0, handle, 0x80000070)
    Copied C:\WINDOWS\System32\GroupPolicy.WMOriginal\GPT.ini to
    C:\WINDOWS\System32\GroupPolicy\GPT.ini
    Copied file
    C:\WINDOWS\System32\GroupPolicy.WMOriginal\Machine \Microsoft\Windows
    NT\SecEdit\IPS1.dat to
    C:\WINDOWS\System32\GroupPolicy\Machine\Microsoft\ Windows
    NT\SecEdit\IPS1.dat
    Copied file
    C:\WINDOWS\System32\GroupPolicy.WMOriginal\Machine \Microsoft\Windows
    NT\SecEdit\XPSec.dat to
    C:\WINDOWS\System32\GroupPolicy\Machine\Microsoft\ Windows
    NT\SecEdit\XPSec.dat
    GP_FLAG_APPLY_SECURITY_SETTINGS (0x40), not set, or security file already
    copied. Will not copy security file
    Exiting GPCopy 0x0
    Writing Group Policy User Status to \HKLM\Software\Novell\Workstation
    Manager\Group Policies
    Wrote reg. value 0x4000 to Group Policy User Status in key
    Software\Novell\Workstation Manager\Group Policies
    Exiting RestoreOriginalGP 0x0
    Writing Group Policy User Status to \HKLM\Software\Novell\Workstation
    Manager\Group Policies
    Wrote reg. value 0x4000 to Group Policy User Status in key
    Software\Novell\Workstation Manager\Group Policies
    Entered GPCopy(C:\WINDOWS\System32\GroupPolicy.UserCache,
    C:\WINDOWS\System32\GroupPolicy, 0, handle, 0x80000070)
    Copied C:\WINDOWS\System32\GroupPolicy.UserCache\GPT.ini to
    C:\WINDOWS\System32\GroupPolicy\GPT.ini
    Copied file
    C:\WINDOWS\System32\GroupPolicy.UserCache\User\MIC ROSOFT\IEAK\install.ins to
    C:\WINDOWS\System32\GroupPolicy\User\MICROSOFT\IEA K\install.ins
    Copied file C:\WINDOWS\System32\GroupPolicy.UserCache\User\Reg istry.pol to
    C:\WINDOWS\System32\GroupPolicy\User\Registry.pol
    Copied file
    C:\WINDOWS\System32\GroupPolicy.UserCache\Machine\ Microsoft\Windows
    NT\SecEdit\IPS1.dat to
    C:\WINDOWS\System32\GroupPolicy\Machine\Microsoft\ Windows
    NT\SecEdit\IPS1.dat
    Copied file
    C:\WINDOWS\System32\GroupPolicy.UserCache\Machine\ Microsoft\Windows
    NT\SecEdit\IPS2.dat to
    C:\WINDOWS\System32\GroupPolicy\Machine\Microsoft\ Windows
    NT\SecEdit\IPS2.dat
    Copied file
    C:\WINDOWS\System32\GroupPolicy.UserCache\Machine\ Microsoft\Windows
    NT\SecEdit\IPS3.dat to
    C:\WINDOWS\System32\GroupPolicy\Machine\Microsoft\ Windows
    NT\SecEdit\IPS3.dat
    Copied file
    C:\WINDOWS\System32\GroupPolicy.UserCache\Machine\ Microsoft\Windows
    NT\SecEdit\XPSec.dat to
    C:\WINDOWS\System32\GroupPolicy\Machine\Microsoft\ Windows
    NT\SecEdit\XPSec.dat
    Copied file C:\WINDOWS\System32\GroupPolicy.UserCache\Machine\ Registry.pol
    to C:\WINDOWS\System32\GroupPolicy\Machine\Registry.p ol
    GP_FLAG_APPLY_SECURITY_SETTINGS (0x40), not set, or security file already
    copied. Will not copy security file
    Exiting GPCopy 0x0
    Writing Group Policy User Status to \HKLM\Software\Novell\Workstation
    Manager\Group Policies
    Wrote reg. value 0x3000 to Group Policy User Status in key
    Software\Novell\Workstation Manager\Group Policies
    Entered MergeGptFile(C:\WINDOWS\System32\GroupPolicy.UserC ache, 0x80000070)
    g_dwVersion: 0x0.
    Reading GPT Version from \HKLM\Software\Novell\Workstation Manager\Group
    Policies
    Read reg. value GPT Version: 0x70007 in key Software\Novell\Workstation
    Manager\Group Policies
    Found machine extensions...
    Found user extensions...
    Exiting MergeGptFile 0x0
    Reading user's user settings.
    Entered AppendPolicy
    C:\WINDOWS\System32\GroupPolicy.UserCache\User\Reg istry.pol
    Entered parseRegFile
    Val: 'BlockExeAttachments'
    Added: Software\Microsoft\Outlook Express\BlockExeAttachments
    Val: 'NoHTMLWallPaper'
    Added:
    Software\Microsoft\Windows\CurrentVersion\Policies \ActiveDesktop\NoHTMLWallPaper
    Val: '**del.NoChangingWallPaper'
    Trying to delete key:
    Software\Microsoft\Windows\CurrentVersion\Policies \ActiveDesktop, val:
    NoChangingWallPaper
    Added:
    Software\Microsoft\Windows\CurrentVersion\Policies \ActiveDesktop\**del.NoChangingWallPaper
    Val: 'ForceClassicControlPanel'
    Added:
    Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\ForceClassicControlPanel
    Val: 'NoSMMyPictures'
    Added:
    Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\NoSMMyPictures
    Val: 'NoStartMenuMyMusic'
    Added:
    Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\NoStartMenuMyMusic
    Val: 'NoDesktopCleanupWizard'
    Added:
    Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\NoDesktopCleanupWizard
    Val: 'NoWelcomeScreen'
    Added:
    Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\NoWelcomeScreen
    Val: 'NoActiveDesktop'
    Added:
    Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\NoActiveDesktop
    Val: '**del.NoInternetIcon'
    Trying to delete key:
    Software\Microsoft\Windows\CurrentVersion\Policies \Explorer, val:
    NoInternetIcon
    Added:
    Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\**del.NoInternetIcon
    Val: '**del.NoNetHood'
    Trying to delete key:
    Software\Microsoft\Windows\CurrentVersion\Policies \Explorer, val: NoNetHood
    Added:
    Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\**del.NoNetHood
    Val: 'NoAutoUpdate'
    Added:
    Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\NoAutoUpdate
    Val: 'NoSMBalloonTip'
    Added:
    Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\NoSMBalloonTip
    Val: 'NoSMConfigurePrograms'
    Added:
    Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\NoSMConfigurePrograms
    Val: 'NoComputersNearMe'
    Added:
    Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\NoComputersNearMe
    Val: 'MaxRecentDocs'
    Added:
    Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\MaxRecentDocs
    Val: 'NoSharedDocuments'
    Added:
    Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\NoSharedDocuments
    Val: '**del.NoStartMenuEjectPC'
    Trying to delete key:
    Software\Microsoft\Windows\CurrentVersion\Policies \Explorer, val:
    NoStartMenuEjectPC
    Added:
    Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\**del.NoStartMenuEjectPC
    Val: 'NoActiveDesktopChanges'
    Added:
    Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\NoActiveDesktopChanges
    Val: '**del.NoAddPrinter'
    Trying to delete key:
    Software\Microsoft\Windows\CurrentVersion\Policies \Explorer, val:
    NoAddPrinter
    Added:
    Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\**del.NoAddPrinter
    Val: '**del.NoDeletePrinter'
    Trying to delete key:
    Software\Microsoft\Windows\CurrentVersion\Policies \Explorer, val:
    NoDeletePrinter
    Added:
    Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\**del.NoDeletePrinter
    Val: '**del.NoToolbarsOnTaskbar'
    Trying to delete key:
    Software\Microsoft\Windows\CurrentVersion\Policies \Explorer, val:
    NoToolbarsOnTaskbar
    Added:
    Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\**del.NoToolbarsOnTaskbar
    Val: '**del.NoSetTaskbar'
    Trying to delete key:
    Software\Microsoft\Windows\CurrentVersion\Policies \Explorer, val:
    NoSetTaskbar
    Added:
    Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\**del.NoSetTaskbar
    Val: 'ForceStartMenuLogOff'
    Added:
    Software\Microsoft\Windows\CurrentVersion\Policies \Explorer\ForceStartMenuLogOff
    Val: '{20D04FE0-3AEA-1069-A2D8-08002B30309D}'
    Added:
    Software\Microsoft\Windows\CurrentVersion\Policies \NonEnum\{20D04FE0-3AEA-1069-A2D8-08002B30309D}
    Val: '**del.{450D8FBA-AD25-11D0-98A8-0800361B1103}'
    Trying to delete key:
    Software\Microsoft\Windows\CurrentVersion\Policies \NonEnum, val:
    {450D8FBA-AD25-11D0-98A8-0800361B1103}
    Added:
    Software\Microsoft\Windows\CurrentVersion\Policies \NonEnum\**del.{450D8FBA-AD25-11D0-98A8-0800361B1103}
    Val: '**del.{645FF040-5081-101B-9F08-00AA002F954E}'
    Trying to delete key:
    Software\Microsoft\Windows\CurrentVersion\Policies \NonEnum, val:
    {645FF040-5081-101B-9F08-00AA002F954E}
    Added:
    Software\Microsoft\Windows\CurrentVersion\Policies \NonEnum\**del.{645FF040-5081-101B-9F08-00AA002F954E}
    Val: '**del.Wallpaper'
    Trying to delete key:
    Software\Microsoft\Windows\CurrentVersion\Policies \System, val: Wallpaper
    Added:
    Software\Microsoft\Windows\CurrentVersion\Policies \System\**del.Wallpaper
    Val: '**del.WallpaperStyle'
    Trying to delete key:
    Software\Microsoft\Windows\CurrentVersion\Policies \System, val:
    WallpaperStyle
    Added:
    Software\Microsoft\Windows\CurrentVersion\Policies \System\**del.WallpaperStyle
    Val: 'NoDispScrSavPage'
    Added:
    Software\Microsoft\Windows\CurrentVersion\Policies \System\NoDispScrSavPage
    Val: 'NoAddFromNetwork'
    Added:
    Software\Microsoft\Windows\CurrentVersion\Policies \Uninstall\NoAddFromNetwork
    Val: '**del.NoAddRemovePrograms'
    Trying to delete key:
    Software\Microsoft\Windows\CurrentVersion\Policies \Uninstall, val:
    NoAddRemovePrograms
    Added:
    Software\Microsoft\Windows\CurrentVersion\Policies \Uninstall\**del.NoAddRemovePrograms
    Val: 'ListBox_Support_Allow'
    Added: Software\Policies\Microsoft\Internet Explorer\New
    Windows\ListBox_Support_Allow
    Val: '*.fleetviewonline.com'
    Added: Software\Policies\Microsoft\Internet Explorer\New
    Windows\Allow\*.fleetviewonline.com
    Val: '*.osg.com'
    Added: Software\Policies\Microsoft\Internet Explorer\New
    Windows\Allow\*.osg.com
    Val: 'NoHelpItemTutorial'
    Added: Software\Policies\Microsoft\Internet
    Explorer\Restrictions\NoHelpItemTutorial
    Val: 'NoHelpItemNetscapeHelp'
    Added: Software\Policies\Microsoft\Internet
    Explorer\Restrictions\NoHelpItemNetscapeHelp
    Val: 'NoHelpItemSendFeedback'
    Added: Software\Policies\Microsoft\Internet
    Explorer\Restrictions\NoHelpItemSendFeedback
    Val: 'PreventAutoRun'
    Added: Software\Policies\Microsoft\Messenger\Client\Preve ntAutoRun
    Val: ''
    Added: Software\Policies\Microsoft\SystemCertificates\Tru st\Certificates\
    Val: ''
    Added: Software\Policies\Microsoft\SystemCertificates\Tru st\CRLs\
    Val: ''
    Added: Software\Policies\Microsoft\SystemCertificates\Tru st\CTLs\
    Val: 'ScreenSaverIsSecure'
    Added: Software\Policies\Microsoft\Windows\Control
    Panel\Desktop\ScreenSaverIsSecure
    Val: 'ScreenSaveActive'
    Added: Software\Policies\Microsoft\Windows\Control
    Panel\Desktop\ScreenSaveActive
    Val: 'ScreenSaveTimeOut'
    Added: Software\Policies\Microsoft\Windows\Control
    Panel\Desktop\ScreenSaveTimeOut
    Val: 'SCRNSAVE.EXE'
    Added: Software\Policies\Microsoft\Windows\Control
    Panel\Desktop\SCRNSAVE.EXE
    Val: 'ListBox_Support_ZoneMapKey'
    Added: Software\Policies\Microsoft\Windows\CurrentVersion \Internet
    Settings\ListBox_Support_ZoneMapKey
    Val: '*.osg.com'
    Added: Software\Policies\Microsoft\Windows\CurrentVersion \Internet
    Settings\ZoneMapKey\*.osg.com
    Val: 'osgintranet'
    Added: Software\Policies\Microsoft\Windows\CurrentVersion \Internet
    Settings\ZoneMapKey\osgintranet
    Val: '1A00'
    Added: Software\Policies\Microsoft\Windows\CurrentVersion \Internet
    Settings\Zones\1\1A00
    Val: '1809'
    Added: Software\Policies\Microsoft\Windows\CurrentVersion \Internet
    Settings\Zones\1\1809
    Val: '1803'
    Added: Software\Policies\Microsoft\Windows\CurrentVersion \Internet
    Settings\Zones\1\1803
    Val: 'DontPromptForWindowsUpdate'
    Added:
    Software\Policies\Microsoft\Windows\DriverSearchin g\DontPromptForWindowsUpdate
    Val: 'NC_RenameLanConnection'
    Added: Software\Policies\Microsoft\Windows\Network
    Connections\NC_RenameLanConnection
    Val: 'PromptPasswordOnResume'
    Added:
    Software\Policies\Microsoft\Windows\System\Power\P romptPasswordOnResume
    Val: 'NoAUAsDefaultShutdownOption'
    Added:
    Software\Policies\Microsoft\Windows\WindowsUpdate\ AU\NoAUAsDefaultShutdownOption
    Val: 'NoAUShutdownOption'
    Added:
    Software\Policies\Microsoft\Windows\WindowsUpdate\ AU\NoAUShutdownOption
    Val: 'BehaviorOnFailedVerify'
    Added: Software\Policies\Microsoft\Windows NT\Driver
    Signing\BehaviorOnFailedVerify
    Val: 'MovieMaker'
    Added: Software\Policies\Microsoft\WindowsMovieMaker\Movi eMaker
    Exiting parseRegFile
    Exiting AppendPolicy
    C:\WINDOWS\System32\GroupPolicy.UserCache\User\Reg istry.pol 0x0
    Reading user's computer settings.
    Entered AppendPolicy
    C:\WINDOWS\System32\GroupPolicy.UserCache\Machine\ Registry.pol
    Entered parseRegFile
    Val: 'NoUpdateCheck'
    Added: Software\Policies\Microsoft\Internet
    Explorer\Infodelivery\Restrictions\NoUpdateCheck
    Val: 'NoSplash'
    Added: Software\Policies\Microsoft\Internet
    Explorer\Infodelivery\Restrictions\NoSplash
    Val: 'PreventAutoRun'
    Added: Software\Policies\Microsoft\Messenger\Client\Preve ntAutoRun
    Val: 'NV PrimaryDnsSuffix'
    Added: Software\Policies\Microsoft\System\DNSClient\NV PrimaryDnsSuffix
    Val: ''
    Added: Software\Policies\Microsoft\Windows\Safer\
    Val: 'WUServer'
    Added: Software\Policies\Microsoft\Windows\WindowsUpdate\ WUServer
    Val: 'WUStatusServer'
    Added: Software\Policies\Microsoft\Windows\WindowsUpdate\ WUStatusServer
    Val: 'NoAutoRebootWithLoggedOnUsers'
    Added:
    Software\Policies\Microsoft\Windows\WindowsUpdate\ AU\NoAutoRebootWithLoggedOnUsers
    Val: 'AutoInstallMinorUpdates'
    Added:
    Software\Policies\Microsoft\Windows\WindowsUpdate\ AU\AutoInstallMinorUpdates
    Val: 'DetectionFrequencyEnabled'
    Added:
    Software\Policies\Microsoft\Windows\WindowsUpdate\ AU\DetectionFrequencyEnabled
    Val: 'DetectionFrequency'
    Added:
    Software\Policies\Microsoft\Windows\WindowsUpdate\ AU\DetectionFrequency
    Val: 'UseWUServer'
    Added: Software\Policies\Microsoft\Windows\WindowsUpdate\ AU\UseWUServer
    Val: 'RescheduleWaitTimeEnabled'
    Added:
    Software\Policies\Microsoft\Windows\WindowsUpdate\ AU\RescheduleWaitTimeEnabled
    Val: 'RescheduleWaitTime'
    Added:
    Software\Policies\Microsoft\Windows\WindowsUpdate\ AU\RescheduleWaitTime
    Val: 'NoAutoUpdate'
    Added: Software\Policies\Microsoft\Windows\WindowsUpdate\ AU\NoAutoUpdate
    Val: 'AUOptions'
    Added: Software\Policies\Microsoft\Windows\WindowsUpdate\ AU\AUOptions
    Val: 'ScheduledInstallDay'
    Added:
    Software\Policies\Microsoft\Windows\WindowsUpdate\ AU\ScheduledInstallDay
    Val: 'ScheduledInstallTime'
    Added:
    Software\Policies\Microsoft\Windows\WindowsUpdate\ AU\ScheduledInstallTime
    Val: 'RegistrationOverwritesInConflict'
    Added: Software\Policies\Microsoft\Windows
    NT\DNSClient\RegistrationOverwritesInConflict
    Val: 'SearchList'
    Added: Software\Policies\Microsoft\Windows NT\DNSClient\SearchList
    Val: 'PreventIISInstall'
    Added: Software\Policies\Microsoft\Windows NT\IIS\PreventIISInstall
    Val: 'SecurityCenterInDomain'
    Added: Software\Policies\Microsoft\Windows NT\Security
    Center\SecurityCenterInDomain
    Exiting parseRegFile
    Exiting AppendPolicy
    C:\WINDOWS\System32\GroupPolicy.UserCache\Machine\ Registry.pol 0x0
    Entered GenerateGptFile(C:\WINDOWS\System32\GroupPolicy)
    g_dwVersion: 0x70007.
    Writing GPT Version to \HKLM\Software\Novell\Workstation Manager\Group
    Policies
    Wrote reg. value 0x70007 to GPT Version in key Software\Novell\Workstation
    Manager\Group Policies
    Exiting GenerateGptFile 0x0
    Exiting RestoreCachedGP 0x0
    Writing Group Policy User Status to \HKLM\Software\Novell\Workstation
    Manager\Group Policies
    Wrote reg. value 0x3000 to Group Policy User Status in key
    Software\Novell\Workstation Manager\Group Policies
    Bumping GPT version...
    Entered SetGptVersion(0x0, TRUE).
    Reading GPT Version from \HKLM\Software\Novell\Workstation Manager\Group
    Policies
    Read reg. value GPT Version: 0x70007 in key Software\Novell\Workstation
    Manager\Group Policies
    Read file C:\WINDOWS\System32\GroupPolicy\GPT.ini
    Found version 0x70007 in gpt.ini
    Using version: 0x70007
    Saving GPT version: 0x80008
    Writing GPT Version to \HKLM\Software\Novell\Workstation Manager\Group
    Policies
    Wrote reg. value 0x80008 to GPT Version in key Software\Novell\Workstation
    Manager\Group Policies
    Exiting SetGptVersion 0x0.
    Entered AppendSecuritySettings
    Inf path: C:\WINDOWS\System32\GroupPolicy\Machine\Microsoft\ Windows
    NT\SecEdit\XPSec.dat
    Restoring GP settings
    Loading Account Policies...
    Loading Audit Policies...
    Loading user rights...
    Restoring security options...
    No data
    No data
    No data
    No data
    No data
    No data
    No data
    No data
    No data for Administrator account name.
    LoadXPSecuritySettings returning 0
    LoadHive entered
    LoadHive exit : 0
    Exiting AppendSecuritySettings 0x0
    Signalling OS to refresh policies
    RegQueryValueEx returned 2
    Policies are set to apply asynchronously
    Policies will be processed asynchronously
    Entered SetGptVersion(0x0, TRUE).
    Reading GPT Version from \HKLM\Software\Novell\Workstation Manager\Group
    Policies
    Read reg. value GPT Version: 0x80008 in key Software\Novell\Workstation
    Manager\Group Policies
    Read file C:\WINDOWS\System32\GroupPolicy\GPT.ini
    Found version 0x80008 in gpt.ini
    Using version: 0x80008
    Saving GPT version: 0x90009
    Writing GPT Version to \HKLM\Software\Novell\Workstation Manager\Group
    Policies
    Wrote reg. value 0x90009 to GPT Version in key Software\Novell\Workstation
    Manager\Group Policies
    Exiting SetGptVersion 0x0.
    Entering RunGPUpdate
    Exiting RunGPUpdate 0
    Exiting ApplyPolicies 0x0
    Writing Last Run Time High to \HKLM\Software\Novell\Workstation
    Manager\Group Policies
    Wrote reg. value 0x1c58076 to Last Run Time High in key
    Software\Novell\Workstation Manager\Group Policies
    Writing Last Run Time Low to \HKLM\Software\Novell\Workstation Manager\Group
    Policies
    Wrote reg. value 0x34349ce0 to Last Run Time Low in key
    Software\Novell\Workstation Manager\Group Policies
    Apply user policies releasing mutex.
    Exiting WMHelperInteractiveUserEntry ccode: 0x0
    Closing log file.
    WMHelperInitialization (Mar 4 2004) called! Flags: 0x2001. Event: 0x2000.
    Impersonation: 0x1
    Opened Mutex.
    Loaded userenv.dll
    Mapped function RefreshPolicy
    Mapped function RegisterGPNotification
    Mapped function UnregisterGPNotification
    Mapped function RefreshPolicyEx
    Exiting WMHelperInitialization. Returning flags: 0x11
    Entering WMHelperInteractiveUserEntry!
    szFullDN = CN=wintest3.OU=Users.OU=Newcastle.O=OSG
    DN is Typed convert it to TYPELESS
    g_szUserDN = wintest3.Users.Newcastle.OSG
    GinaGetUsersSIDInTextualForm ENTERED
    Textual SID : S-1-5-21-1214440339-507921405-1708537768-1019
    GinaGetUsersSIDInTextualForm EXIT : 0
    Writing Don't reparse to \HKLM\Software\Novell\Workstation Manager\Group
    Policies
    Wrote reg. value 0x0 to Don't reparse in key Software\Novell\Workstation
    Manager\Group Policies
    Current time high: 0x1c58076
    Reading Last Run Time High from \HKLM\Software\Novell\Workstation
    Manager\Group Policies
    Read reg. value Last Run Time High: 0x1c58076 in key
    Software\Novell\Workstation Manager\Group Policies
    Previous time high: 0x1c58076
    Writing Don't reparse to \HKLM\Software\Novell\Workstation Manager\Group
    Policies
    Wrote reg. value 0x1 to Don't reparse in key Software\Novell\Workstation
    Manager\Group Policies
    Writing User Logged In to \HKLM\Software\Novell\Workstation Manager\Group
    Policies
    Wrote reg. value 0x1 to User Logged In in key Software\Novell\Workstation
    Manager\Group Policies
    Entered CheckForObsoleteWksCache
    CN=LT_VECTOR.OU=Workstations.OU=Newcastle.O=OSG.
    Full Object DN
    CN=LT_VECTOR.OU=Workstations.OU=Newcastle.O=OSG.OU =Users.OU=Newcastle.O=OSG
    Calling WMGetAllAssociatedObjects(FALSE, MARITIME, 1,
    CN=LT_VECTOR.OU=Workstations.OU=Newcastle.O=OSG.OU =Users.OU=Newcastle.O=OSG,
    WINNT Workstation Package, zenwmGroupPolicy, 512, pBuffer)
    WMGetAllAssociatedObject returned 2
    No associated workstation policies. Deleting
    C:\WINDOWS\System32\GroupPolicy.WksCache.
    DeleteGPRegVal: Error 0x2 deleting Group Policy Machine Flags
    Exiting CheckForObsoleteWksCache 2
    Applying user policies
    Reading Don't reparse from \HKLM\Software\Novell\Workstation Manager\Group
    Policies
    Read reg. value Don't reparse: 0x1 in key Software\Novell\Workstation
    Manager\Group Policies
    Reading Group Policy User Status from \HKLM\Software\Novell\Workstation
    Manager\Group Policies
    Read reg. value Group Policy User Status: 0x3000 in key
    Software\Novell\Workstation Manager\Group Policies
    Read reg. key Group Policy User Status: 0x3000
    Policy applied at predesktop. Skipping reapplication at user login.
    Writing Don't reparse to \HKLM\Software\Novell\Workstation Manager\Group
    Policies
    Wrote reg. value 0x0 to Don't reparse in key Software\Novell\Workstation
    Manager\Group Policies
    Writing Last Run Time High to \HKLM\Software\Novell\Workstation
    Manager\Group Policies
    Wrote reg. value 0x1c58076 to Last Run Time High in key
    Software\Novell\Workstation Manager\Group Policies
    Writing Last Run Time Low to \HKLM\Software\Novell\Workstation Manager\Group
    Policies
    Wrote reg. value 0x38844da0 to Last Run Time Low in key
    Software\Novell\Workstation Manager\Group Policies
    Apply user policies releasing mutex.
    Exiting WMHelperInteractiveUserEntry ccode: 0x0
    Closing log file.
    Thanks in advance
    Ali

    DUPLICATE
    Answered in
    novell.support.zenworks.desktops.3x.workstation-manager
    Regards
    Rolf Lidvall
    Swedish Radio (Ltd)
    NSC SysOp

  • Group Policy not Applying

    Currently we are running ZfD 7 and Netware 6.5 and have recently upgraded all our workstations to Windows XP Service Pack 2. Our tree structure consists of an OU for each school level, elementary, middle, and high, and an OU for each school in that respective level. Example:
    Elementary
    West Main
    South Main
    Middle
    Brown Middle
    The current contents in each School OU have users, groups, policies, ect. Previously policy was applied by a workstation policy package that distributed all policies: user, machine, and security which were associated with the School OU. Now we split the policy into workstation packages and a user packages. The goal was to have the workstation apply the machine and security policy and the user policy to apply user settings and create dynamic the local user account.
    The workstation policy remains persistent on the workstation while the user policy creates a local user (non-volatile) and applies the user policy from a server path depending on group membership. We have four different user policy packages: Student, Teacher, Specialist and Technology. Each with there own group policy user configuration. Everyone in our Tree has the appropriate permissions to access the policies. We configure the user policy package as follows:
    Policies  Windows XP
    Enabled Dynamic Local User
    Enabled Windows Group Policy
    Workstation Manager
    Network Location
    \\serverpath
    Checked User Configuration
    Policy Schedule
    User Desktop is active
    Advanced Schedule
    Impersonation
    Interactive User
    Associations
    Groups (Teachers, Students)
    I can get the workstation policy to apply with no problem. The problem comes when a users logs on. It doesnt matter if a new user is being created or if they are simply just switching users. User group policy doesnt apply randomly. The strange thing is it does copy down to the machine. If I connect to the admin share on a newly imaged workstation (with no policy applied) and open c:\windows\system32\ you see the creation of GroupPolicy.Usercache Folder and it copies to the GroupPolicy Folder which is were it applies policy from. Also you can see policy dynamically changing if different users logs on. The Registry.pol updates in the c:\windows\system32\ GroupPolicy.Usercache\User folder and c:\windows\system32\ GroupPolicy \User Sometimes group policy applies and sometimes it does not. When a user logs on you see the policy that was copied down apply. For example the run option is taken away from the start menu. During the log on process this remains in effect but when the process completes its almost like policy is take away. When this occurs I can run WMSCHED.Exe and reapply the user policy and it will apply sometimes. I tried applying group policy through both groups and organizational units. Both with the same results. I was wondering if anyone has had issues with applying group policy with ZEN or if I am doing this incorrectly. Any help would be much appreciated. Thanks.

    rscurr,
    It appears that in the past few days you have not received a response to your
    posting. That concerns us, and has triggered this automated reply.
    Has your problem been resolved? If not, you might try one of the following options:
    - Visit http://support.novell.com and search the knowledgebase and/or check all
    the other self support options and support programs available.
    - You could also try posting your message again. Make sure it is posted in the
    correct newsgroup. (http://forums.novell.com)
    Be sure to read the forum FAQ about what to expect in the way of responses:
    http://forums.novell.com/faq.php
    If this is a reply to a duplicate posting, please ignore and accept our apologies
    and rest assured we will issue a stern reprimand to our posting bot.
    Good luck!
    Your Novell Product Support Forums Team
    http://support.novell.com/forums/

  • Excel 2013 - disable "scale content for a4 or 8.5 x11" paper sizes" deploy via group policy

    In office 2010 and 2013, the option "scale content for a4 or 8.5 x11" paper sizes" is enabled by default in word and excel.
    I need to be disable this option on all machines, since it conflicts with our printers and doesn't allow us to print.
    Ideally this should be done by group policy as our users change very frequently.
    I have found the policy to disable this option in word, but can't find a similar policy setting for excel.
    Any idea how I can resolve this?

    Create the below given registry key using GPP  for Excel and apply that to the ou or security group to disable or enable the check mark.
    0=Disable
    1=enable
    Navigate group policy "User Configuration\Preferences\Windows Settings\Registry"
    Right click on Registry\New\Registry Item
    Action: Update
    Hive: HKEY_CURRENT_USER
    Key Path: HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Options
    Value name: A4Letter
    Value Type: REG_DWORD
    Value Data: 0

  • Wallpaper Group Policy

    I created a domain in which i added 100 clients computer window 7 installed. I have set corporate
    wallpaper to all of my client computers in the domain via Group Policy. But problem is that this GP is followed by some systems and some are not following. How to resolve this problem?

    Hi Pawan,
    Before going further, as Zanderol24 suggested, we can run command gpresult/h gpreport.html on the troubles machines to check the issue. Besides, we need to make sure that all machine accounts can access the wallpaper. We can also check event logs in Event
    Viewer to see if some related events were logged.
    Moreover, we can check the Symptoms described in the following article, and if they match ours, we can install the available hotfix.
    The "Desktop Wallpaper" Group Policy setting is not applied in Windows 7 or in Windows Server 2008 R2
    http://support2.microsoft.com/kb/977944
    In addition, there are several ways to configure desktop wallpaper, and the following blog can be referred to for more information.
    Using Group Policy to configure Desktop Wallpaper (“Background”)
    http://www.grouppolicy.biz/2011/03/best-practice-using-group-policy-to-configure-desktop-wallpaper-background/
    Best regards,
    Frank Shen

  • Shutdown Script / Group Policy

    I need to implement a script that runs at shutdown on 2 labs in our
    main office. I know that I can set this using Group Policy. My
    question is, I already have policies associated with the container that
    the group resides in. If I create a new group policy and apply it to
    the workstation group, will it override the container policy where the
    users reside? Or, if anyone knows a better way for me to do this, let
    me know.
    Basically, I have contextless logins associated with user containers at
    each site. When those users come to the main office and use our
    training lab, it sets the contextless login to search their old site.
    The next time the computer reboots, the local context is replaced by
    that of the last user. I figured if I run a regkey on shutdown that
    sets it back, everything will be ok. Can I do this using a ZEN app, or
    is the group policy my only option?

    [email protected],
    > I have contextless logins associated with user containers at
    >each site. When those users come to the main office and use our
    >training lab, it sets the contextless login to search their old site.
    >The next time the computer reboots, the local context is replaced by
    >that of the last user. I figured if I run a regkey on shutdown that
    >sets it back, everything will be ok.
    Why wont' contextless login put it back correctly?
    If you want a policy, then I would add a action to a regular workstation
    package, the policy being a "action" which would run the reg file on logout.
    Jared Jennings
    Data Technique, Inc.
    Novell Support Forums Sysop
    http://wiki.novell.com

  • Group policy printer settings

    When using Group policy computer configuration control panel settings \printers you can specifiy both an IP address port and a path to the print server.  Are these connections for local TCP\IP printers or for network print server printers.  I am
    not sure why I would have to specify path to server if they were local TCP\IP printers or vice\versa(specify IP address if they are only network printers).

    The best spot for Group Policy Preferences questions is in the Group Policy forum
    http://social.technet.microsoft.com/Forums/windowsserver/en-US/home?forum=winserverGP&filter=alltypes&sort=lastpostdesc
    However, since they included this print related setting I do know what you are asking about.
    The share is used to get the print driver installed on the client for adding the local printer.  This will not work if you use type 4 print drivers since the drivers are not downloaded to the clients and the GPP printing scenario falls apart here.
    I totally agree with you that this is confusing, however, as a print server admin, what I would do is create one share for each print driver that you need to install on the clients.  If you have 80 printers that can use the same driver, create one share
    and just update the GPP data with the IP for the specific device.
    I would not use a print server to act as a software distribution point if the number of clients on your network is less than 100.  Setup a Win7 or Win8 machine with the shares. 
    Alan Morris Windows Printing Team

Maybe you are looking for