PIN sign-in GPO not applying to workstations

I am currently testing Windows server 2012 R2 with Windows 8.1 tablets and cannot get PIN sign-in to work on the client machines, I have disabled local policy processing and all of the management is coming from GP, however when I manually apply the policy
setting using gpedit.msc it works, does anyone of a way to have it read from GPO in domain?

Hi,
Before going further, the setting Turn on PIN sign-in allows users to set up and sign in with PIN. As Don suggested we could check the registry key to confirm if the policy
setting was enabled successfully. If yes, to use PIN sign-in option, 
users need to create a PIN for themselves. After a PIN is created, users should be able to choose to sign in with PIN sign-in option when they log on. After we enabled the turn on PIN sign-in setting, user also need to set the password for sign-in account.
After reset the account, user can use sign-in when user re-logon.
We can follow the steps below to set account password: to create a PIN, the following steps can be referred to as reference:
Step 1: Swipe in from the right edge of the screen, and then tap Settings.
(If you're using a mouse, point to the upper-right corner of the screen, move the mouse pointer down, and then click Settings.) 
Step 2: Tap or click Change PC settings, and then tap or click Accounts. 
Step 3: Tap or click Sign-in options, and under PIN, tap or click Add.
If you don't have a password on your account, you'll need to create a password before you can create a PIN. 
Step 4: Confirm your current password and then you can create a PIN.
If there is any question, don’t hesitate to let us know.
Best Regards,
Erin

Similar Messages

  • GPO not applied at all with build 9926

    Hello,
    I have a Samba 4 Active Directory Domain controler. My LAN is composed of XP and 7 computers ; everything works well.
    I also have tested previous builds of Windows 10, and had no particular problem with Group Policies.
    With build 9926, my GPOs are not applied at all. It seems there is a big change making Group Policies not applied / not reloaded when users log in. Here are step by steps what I have noticed :
    0) At the very first log in, when I do a gpresult /V, i have a message saying something like "no rsop data for this user"
    1) I performed a gpupdate /force
    2) I performed another gpresult /V and then I got information about my GPO
    3) I logged out and logged in with same user --> my GPO is applied
    4) I modified my GPO to set new policy
    5) I loggged out and in again --> old policies are applied but new policy is not applied
    6) I performed gpresult /V --> new policy is not displayed
    7) I performed a gpupdate /force and then a gpresult /V --> new policy appears
    8) I loggged out and in again --> All policies, including the new one are applied
    So it seems the GPOs are not automatically updated and applied when logging in, and I have to force them manually.
    The good question is : WHY ? :)
    Thanks
    Will

    Hi Will799114,
    I tested this in my environment, it seems a restart would apply group policy successfully, but a sign out and sign in would not trigger this procedure.
    Here I would suggest you post your feedback directly to our Feedback channel:
    http://windows.microsoft.com/en-in/windows/preview-how-to#how-to=tab7
    Alex Zhao
    TechNet Community Support

  • User GPO not applying

    I have just started at a new company and trying to to setup some new GPO's
    We have all the users in a root OU called Accounts
    We have  all the computers in a root OU Company\Workstations
    There are a number of GPO assigned to the "Workstations" OU for both Users and Computer Policy's
    I would like to add some new GPO's to the Users OU for Uses settings but they will not apply or appear.
    I have run a Group Policy Results on a few workstations and I can see the GPO being applied from the Workstations OU but none from the Users OU.  However if I set the GPO to run off the Workstations OU it appears.  
     

    > GPO's in the Workstations OU and if there are any users settings I will
    > have to create a new GPO in for the Accounts' OU for any user settings
    > before I disabled the Loopback GPO?
    Basically "yes". Alternatively change Loopback "replace" to Loopback
    "merge".
    Martin
    Mal ein
    GUTES Buch über GPOs lesen?
    NO THEY ARE NOT EVIL, if you know what you are doing:
    Good or bad GPOs?
    And if IT bothers me - coke bottle design refreshment :))

  • WSUS GPO not applying on server restart

    At first I thought this was limited to a single SBS 2008 server but I have now seen this behavior on another SBS2008 and SBS2011 server.  Basically what happens is I patch the server, I restart the server but... somehow the GPO for WSUS does not apply
    and leaves the server Windows update settings set on Download automatically and install at 3am when it should be the Standard "Download and Notify for install"
    I can open a command prompt and perform a gpupdate /force and the the correct policy immediately applies.
    Has anyone seen this behavior?  Is it possible a windows patch that has caused this issue.  It must be something common amongst all three different instances of SBS.  I do not see any errors in event logs regarding group policy.
    Please Help

    Hi skahlam,
    Does this issue always occur when you reboot the server?
    If yes, to verify if this issue is related to the updates, please try to remove the updates installed recently.
    If issue persists after removing the updates, please try to run the gpresult /h C:\report.html
    to check the detailed information about the GPO.
    Note: This procedure needs the privilege of the Administrator.
    Best Regards.
    Steven Lee Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

  • GPO Not Applying

    HI All,
      I have a OU for Computers and OU for USers.
     Create the FolderRedirect GPO for User configuration ( Folder Redirection) for One Security Group (OLGroup) of people only.
     I have applied to users but this policy not applying?  Do i need Computers and Users in same OU?
    AS

    GPO delegation to Sub OU is the same as the domain OU?
    any conflicting GPOs that you think that might cause the problem?
    or check the GPO inheritance and precedence:
    Group Policy settings are processed in the following order:
    Local Group Policy object—Each computer has exactly one Group Policy object that is stored locally. This processes for both computer and user Group Policy processing. 
    Site—Any GPOs that have been linked to the site that the computer belongs to are processed next. Processing is in the order that is specified by the administrator, on the Linked Group Policy Objects tab for the
    site in Group Policy Management Console (GPMC). The GPO with the lowest link order is processed last, and therefore has the highest precedence.
    Domain—Processing of multiple domain-linked GPOs is in the order specified by the administrator, on the Linked Group Policy Objects tab for the domain in GPMC. The GPO with the lowest link order is
    processed last, and therefore has the highest precedence.
    Organizational units—GPOs that are linked to the organizational unit that is highest in the Active Directory hierarchy are processed first, then GPOs that are linked to its child organizational unit, and so on. Finally, the GPOs that are
    linked to the organizational unit that contains the user or computer are processed. 
    At the level of each organizational unit in the Active Directory hierarchy, one, many, or no GPOs can be linked. If several GPOs are linked to an organizational unit, their processing is in the order that is specified by the administrator, on the Linked
    Group Policy Objects tab for the organizational unit in GPMC. The GPO with the lowest link order is processed last, and therefore has the highest precedence.
    This order means that the local GPO is processed first, and GPOs that are linked to the organizational unit of which the computer or user
    is a direct member are processed last, which overwrites settings in the earlier GPOs if there are conflicts. (If there are no conflicts, then the earlier and later settings are merely aggregated.)
    from this link: http://technet.microsoft.com/en-us/library/cc785665(v=ws.10).aspx

  • Cross Forest User GPOs not applying

    I know I've read a ton of forums concerning this issue and most were resolved but nothing read so far has helped and I'm really hoping there are a few ideas out there that I have missed.
    We have two forests: a new 2012 forest and an 2008 at an 2003 forest level with two way forest trust.
    We are able to login to computers in the 2012 forest regardless of domain with any user in the 2008 forest.  However we are setting up our workstation environment in the 2012 forest which requires us applying user policies.  All users are in the
    2008 forest.  We have enabled the allow cross forest policy and the loopback processing applied to the OU where the client machines are located in Active Directory.  We have verified the trust on both sides and tested DNS using nslookup on both sides.
     The DCs for both forest are located in the same physical building but two different subnets.  The WAN guy has assured us that there are no ACLs involved.  The firewall has been shut off on all DCs and all workstations.  I see no LSA errors
    on the DCs.  Each forest has a stub DNS zone to the other forest zones.  I've been able to successfully setup computer gpos to map drives to the users when they login to 2012 clients.
    I'm completely lost for what else we need to be looking at to solve this problem.   Any suggestion would be most welcome.  

    Hi,
    Before going further, what settings have we configured? Which Loopback mode have we chosen, Merger or Replace? What are operating systems of our clients?
    For further troubleshooting, we can follow the following article to collect Gpsvc.log file.
    How to enable GPO logging on windows 7 /2008 r2 ?
    http://blogs.technet.com/b/csstwplatform/archive/2010/11/09/how-to-enable-gpo-logging-on-windows-7-2008-r2.aspx
    After getting the log, you may upload it to OneDrive and provide us the download link.
    Besides, we can try using netmon.exe to further trace network to see if this is caused by network traffic.
    Microsoft Network Monitor 3.4
    http://www.microsoft.com/en-in/download/details.aspx?id=4865
    How to use Network Monitor to capture network traffic
    http://support.microsoft.com/kb/812953/en-us
    TechNet Subscriber Support
    If you are TechNet Subscription user and have any feedback on our support quality, please send your feedback here.
    Best regards,
    Frank Shen

  • GPO not applying to all users in the same security groups

    If Elaine logs in on Angie's PC does it work?

    Using Windows Server 2008 R1. I have a single domain with two DCs (both Server 2008 R1). Both DCs seem to be communicating without issues, as changes on one DC are replicating normally to the other for all services.I have a group policy set up to set drive mapping for my users. However when I run the GP modeling wizard only a few of the users receive the proper mappings. In this specific instance I have two users, Elaine and Angie. 1. Both are members of the Domain Users security group and another security group I created called Staff2. Neither user is a member of any other security groups.3. My group policy Security Filtering setting is set to apply the policy ONLY to the Staff security group4. When running the GP Results Wizard, Elaine's computer successfully processes the policy, but Angie's does not, and returns "Access Denied...
    This topic first appeared in the Spiceworks Community

  • Windows 2008 R2 group policy not applied to windows 8 Workstations, but applied to XP and Win 7

    I have a Windows 2008 R2 Domain Controllers and have a Policy to put a specify wallpaper, eventuality i have to change the Wallpaper, this setting applied sucesfully in Windows xp and Windows 7 workstations, but not applied in Windows 8 workstations even
    if i run gpupdate /forcé,
    Best Regards,
    Thank you

    Hi,
    Thanks for posting in the forum.
    Before going further, would you please let me know how did you configure the Group Policy setting to deploy the wallpaper? Have you configured some settings to limit the scope the GPO applying?
    If all Windows 8 machines failed to receive the GPO settings? In order to narrow down the cause of the issue, I suggest we could try to collect the following information for troubleshooting.
    GPMC.log
    ==================
    a. On domain controller, click Start ->Run, type GPMC.MSC, it will load the GPMC console.
    b. Right click on "Group Policy Result" and choose wizard to generate a report for the problematic computer and user account (please place appropriately). (Choose computer and select the proper
    user in the wizard)
    c. Right click 
    the resulting group policy result and click the "Save Report…" => save report to save the report to a HTML file.
    Once we get the report, please check if the settings have been applied to the target correctly.
    In addition, would you please let me know whether you have imported the latest Windows 8 Administrative Templates to the Windows Server 2008 DC? If not, please try to download and import it.
    Then try to configure the wallpaper GPO settings again to see if it could help.
    For details, please refer to the following articles.
    Administrative Templates (.admx) for Windows 8 and Windows Server 2012
    http://www.microsoft.com/en-us/download/details.aspx?id=36991
    Set Desktop Background via Group Policy in Windows 7, Windows 8 in a Server 2008 or Server 2012 Domain
    http://dizzyit.com/2013/04/14/set-desktop-background-group-policy-windows-7-windows-8-server-2008-server-2012-domain/
    Hope this helps.
    Best Regards,
    Andy Qi
    TechNet Subscriber Support
    If you are
    TechNet Subscription user and have any feedback on our support quality, please send your feedback
    here.
    Andy Qi
    TechNet Community Support

  • GPO settings are not applied

    Hi everyone
    I am using WSUS in my internal network.
    When i am trying to deploy GPO, The GPO seems to be applying on the computer but the 
    GPO settings are not being applied.
    I am getting error An error occured while checking for updates for your computer
    and in Windows update change settings, i can see it is grayed out with the option
    Download updates but let me choose wheter to install them(some settings are managed by your system administrator)
    I have disabled windows firewall when i was using Windows XP computers, Is any settings of windows firewall creating issues?
    I have created a computer group in WSUS say TESTGroup
    In GPO I have assigned the following settings(Please correct me if i am going wrong with the settings)
    Configure Automatic updates : 3-Auto download and notify for install
    Specify Intranet microsoft update service location: http://mywsus (here should it be mywsus or mywsus:8530)
    Enable Client Side targeting : TestGroup ( I have OU in active directory with Computers)
    Do not display install updates and shutdown option : Enabled
    Automatic Updates detection frequency : 2 hours
    Allow Non administrators to receive update notification : Enabled
    Allow Automatic updates immedidate installation : Enabled
    Turn of recommended updates via automatic updates : Enabled
    Reschedule automatic udpates scheduled installation : 10 min
    I have approved few updats in WSUS console to install on TestGroup
    On Client Computer ihave used the command 
    wuauclt /detectnow and wuauclt /reportnow
    Please guide me

    I have installed the updates KB2720211 KB2530678 KB2530709 KB2734608 on WSUS Server
    My GPO settings are 
    Configure Automatic updates : 3-Auto download and notify for install
    Allow signed updates from an intranet microsoft update service location : Enabled(i am using internal WSUS server exporting updates from internet connected WSUS to internal WSUS)
    GPO is applying but settings are not being applied.
    please do refer the client logs & attachment.
    Triggering AU detection through DetectNow API
    START ##  AU: Search for updates
    <<## SUBMITTED ## AU: Search for updates [CallId = {A52428A8-E7EC-4CAB-9842-0B66F6969382}]
    ** START **  Agent: Finding updates [CallerId = AutomaticUpdates]
    Agent *********
    * Online = Yes; Ignore download priority = No
    * Criteria = "IsInstalled=0 and DeploymentAction='Installation' or IsPresent=1 and DeploymentAction='Uninstallation' or IsInstalled=1 and DeploymentAction='Installation' and RebootRequired=1 or IsInstalled=0 and DeploymentAction='Uninstallation' and RebootRequired=1"
    * ServiceID = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7} Managed
    Agent   * Search Scope = {Machine}
    Setup Checking for agent SelfUpdate
    Setup Client version: Core: 7.6.7600.320  Aux: 7.6.7600.320
    Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\wuident.cab with dwProvFlags 0x00000080:
    Microsoft signed: NA
    Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\TMP8FF3.tmp with dwProvFlags 0x00000080:
    Triggering AU detection through DetectNow API
    Piggybacking on an AU detection already in progress
    Microsoft signed: NA
    Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\wsus3setup.cab with dwProvFlags 0x00000080:
    Microsoft signed: NA
    Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\wsus3setup.cab with dwProvFlags 0x00000080:
    Microsoft signed: NA
    Setup Determining whether a new setup handler needs to be downloaded
    Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\Handler\WuSetupV.exe with dwProvFlags 0x00000080:
    Microsoft signed: NA
    Setup SelfUpdate handler update NOT required: Current version: 7.6.7600.320, required version: 7.6.7600.320
    Evaluating applicability of setup package "WUClient-SelfUpdate-ActiveX~31bf3856ad364e35~x86~~7.6.7600.320"
    Setup package "WUClient-SelfUpdate-ActiveX~31bf3856ad364e35~x86~~7.6.7600.320" is already installed.
    Setup Evaluating applicability of setup package "WUClient-SelfUpdate-Aux-TopLevel~31bf3856ad364e35~x86~~7.6.7600.320"
    Setup package "WUClient-SelfUpdate-Aux-TopLevel~31bf3856ad364e35~x86~~7.6.7600.320" is already installed.
    Evaluating applicability of setup package "WUClient-SelfUpdate-Core-TopLevel~31bf3856ad364e35~x86~~7.6.7600.320"
    Setup package "WUClient-SelfUpdate-Core-TopLevel~31bf3856ad364e35~x86~~7.6.7600.320" is already installed.
    SelfUpdate check completed.  SelfUpdate is NOT required.
    +++++++++++  PT: Synchronizing server updates  +++++++++++
    + ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL = http://MYWSUSServer/ClientWebService/client.asmx
    WARNING: GetConfig failure, error = 0x80244019, soap client error = 10, soap error code = 0, HTTP status code = 404
    WARNING: PTError: 0x80244019
    WARNING: GetConfig_WithRecovery failed: 0x80244019
    WARNING: RefreshConfig failed: 0x80244019
    WARNING: RefreshPTState failed: 0x80244019
    WARNING: Sync of Updates: 0x80244019
    WARNING: SyncServerUpdatesInternal failed: 0x80244019
     * WARNING: Failed to synchronize, error = 0x80244019
    * WARNING: Exit code = 0x80244019
    **  END  **  Agent: Finding updates [CallerId = AutomaticUpdates]
    Agent *************
    WARNING: WU client failed Searching for update with error 0x80244019
    >>##  RESUMED  ## AU: Search for updates [CallId = {A52428A8-E7EC-4CAB-9842-0B66F6969382}]
    # WARNING: Search callback failed, result = 0x80244019
    # WARNING: Failed to find updates with error code 80244019
    ##  END  ##  AU: Search for updates [CallId = {A52428A8-E7EC-4CAB-9842-0B66F6969382}]
    Need to show Unable to Detect notification
    Successfully wrote event for AU health state:1
    AU setting next detection timeout to 2015-03-20 20:18:22
    Successfully wrote event for AU health state:1
    Successfully wrote event for AU health state:1
    Report REPORT EVENT: {5BCEA64A-0FEB-4B01-9509-CE94AFE0D04A}
    2015-03-20 21:19:59:003+0300 1
    148 101
    {00000000-0000-AutomaticUpdates Failure
    Software Synchronization Windows Update Client failed to detect with error 0x80244019.
    CWERReporter::HandleEvents - WER report upload completed with status 0x8
    WER Report sent: 7.6.7600.320 0x80244019 00000000-0000-0000-0000-000000000000 Scan 101 Managed
    Report CWERReporter finishing event handling. (00000000)
    WARNING: GetConfig failure, error = 0x80244019, soap client error = 10, soap error code = 0, HTTP status code = 404
    WARNING: PTError: 0x80244019
    WARNING: GetConfig_WithRecovery failed: 0x80244019
    WARNING: RefreshConfig failed: 0x80244019
    WARNING: RefreshPTState failed: 0x80244019
    WARNING: PTError: 0x80244019
    WARNING: Reporter failed to upload events with hr = 80244019.
    WARNING: GetConfig failure, error = 0x80244019, soap client error = 10, soap error code = 0, HTTP status code = 404
    WARNING: PTError: 0x80244019
    WARNING: GetConfig_WithRecovery failed: 0x80244019
    WARNING: RefreshConfig failed: 0x80244019
    WARNING: RefreshPTState failed: 0x80244019
    WARNING: PTError: 0x80244019
    WARNING: Reporter failed to upload events with hr = 80244019.

  • Hide Display Settings not applied in User GPO

    Hello,
    I am trying to hide the display settings via a GPO so folks can't change the resolution. I set the "Disable the Display Control Panel" setting to enable, but users can still go to the Control Panel and change the display settings. Other parts of
    the GPO are applying, like the Ctrl+Alt+Del settings. The GPO has the loopback function set to replace. From my understanding, that should force all user settings in that GPO on everyone who logs into the computer, whether they are in that OU or not.
    Some settings apply, just not the Display settings. Is there something else I have to enable to get that working?
    Thanks
    Jason Watkins MCSE, MCSA, MCDBA, CCNA

    Hi Jason,
    It's been a while. How is it going? If it still doesn't work out, we can run command
    gpresult/h report.html to collect group policy result to check this. Note: to collect computer part group policy settings, we need to run the command with administrative privileges.
    In addition, regarding troubleshooting group policy issues, the following thread can be referred to as reference.
    [Forum FAQ] Common steps to start troubleshooting Group Policy application issues
    https://social.technet.microsoft.com/Forums/windowsserver/en-US/382c97e8-93c8-4022-b8fe-22401037d14c/forum-faq-common-steps-to-start-troubleshooting-group-policy-application-issues?forum=winserverGP
    Best regards,
    Frank Shen
    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

  • GPO preference not applying to map network drive?

    Hello,
    Server 2008 r2 GPO preference not applying to users to map network drive? When I see errors on client pc, here is the error I found?
    Log Name: Application
    Source: Group Policy Drive Maps
    Date: 1/7/2014 1:47:33 PM
    Event ID: 4098
    Task Category: (2)
    Level: Warning
    Keywords: Classic
    User: SYSTEM
    Description:
    The user 'S:' preference item in the 'GPO {C990F58F-E8B2-41BF-B6FD-E1BAC389C4F1}' Group Policy object did not apply because it failed with error code '0x80070037 The specified network resource or device is no longer available.' This error was suppressed.
    GPresult shows following message on client pc:
    The following settings have applied to this object. Within this category, settings nearest the top of the report are the prevailing settings when resolving conflicts.
    Winning GPO Name GPO
    Result: Failure (Error Code: 0x80070037)
    I also have tried using full server name in the share, IP address but no success. :(
    I'm using variable %username% in share location: \\servername\share\%username%
    Any idea? Please help. Thanks

    Just a control question, can you actually access the users homefolder manually from the client?
    Drive maps for GP Preferences is used to map drives only. It cannot create folder on the server and that’s why we see the error “0x80070037 The specified network resource or device is no longer available.”.  If you'd like to use share location
    with Variable, please ensure that these folders exist on the file server.
    Hope this helps you!
    Microsoft Certified Trainer
    MCSE: Desktop, Server, Private Cloud, Messaging
    Blog: http://365lab.net

  • Windows Server 2012 GPO setting are not apply on windows Xp clients

    Hi
    I am create GPO on windows server 2012.  300 clients on domain are working fine, GPO setting apply on all windows 7, 8 clients. But 200 clients of windows XP are not working. GPO setting are not applies on XP. I am trying to Group Policy
    Preference Client Side Extensions for Windows XP (KB943729) on one window XP client, all GPO servers 2012 setting is working fine. But is not solution. I have 200 clients of windows XP, Please provide batter solution on one click command and apply all 200
    XP clients.
    Thanks.

    Dear,
    I have Windows server 2012 ,  i have install ADDS with Forest functional level 2008 & Domain functional level 2008 .
    I have applied GPO to particular OU, when i login to domain user on Windows 7 PC all GPO working fine but when i login on Windows Xp SP3 PC its not applied on XP. 
    I am facing issue on windows XP clients it is true. Please see this URL address:
    http://blogs.technet.com/b/grouppolicy/archive/2009/03/27/group-policy-preferences-not-applying-on-some-clients-client-side-extension-xmllite.aspx
    Please provide batter solution on one click command
    Thanks.

  • Webfeed gpo is applied (in resultant Policy) but RADC is not configured

    After tests for placing Remote app shortcut in Start menu of Windows 7 client and getting positive result I want to automate the process.
    So I created computer GPO for SSO and linked it to OU where test computer resides.
    I created User GPO for WebFeed and linked it to Test Users OU (User1, User2)
    Resultant Policy shows that User GPO is applied to each user. But I cannot get webfeed URL in RADC when logged in with test User2.  To be sure that final solution works I entered manually webfeed url in RADC when logged in as USER1
    1 Remote App works fine from shortcut in start Menu and Desktop when
    USER1 is logged in.
    WebFeed link is entered manually in RADC applet in Control Panel for user USER1
    2. The last desired point is to make work WebFeed GPO.
    If I login as USER2 no icon in start menu. RADC is empty.
    As mentioned Resultant GPO shows that webfeed GPO is applied to USER1 and USER2
    How to troubleshoot this thing?
    &quot;When you hit a wrong note it's the next note that makes it good or bad&quot;. Miles Davis

    what is the registry ? if I want to insert it in the image.
    Can you provide a script plz.
    In GPO itself it says Windows 8 or RT minimum. But I think I saw somewere that I can use it on Windows 7 with RDP 8.
    Thanks.
    &quot;When you hit a wrong note it's the next note that makes it good or bad&quot;. Miles Davis

  • GPP for Folder Options Not Applying to Windows 7 Current Users

    I have a Windows 7 client that I am trying to push a GPP for a folder option. The setting is "Show pop-up description for folder and desktop items".
    If a user has already logged into the machine before the policy applied, it will not change the setting.
    If a brand new user logs into the machine, the policy is applied.
    On users that have logged in previosu to the policy, I can go to the Group Policy folder, check the history folder and I am showing that it is applied in the XML file.
    Things I have verified:
    Setting is for Windows Vista and Later
    Same results on different Windows 7 PCs
    Set to run in logged on user context
    Apply once and not reapply is NOT checked.
    Can anyone help shed some light on this?
    Thanks!

    Hi JiuJitsuJeff,
    Sorry for misunderstanding this issue. This GPP for folder option could apply to new users sucessfully, however, could not apply to old users sucessfully. Right?
    Firstly, please check if the GPO has applied to old users. You can also run  the following command on the problematic workstation when an old user logs on:
    Gpresult /h > C:\temp\gpresult.html  (“C:\temp\” is the path of the gpresult.html, you can set it yourself). This gpresult.html file is used for checking the result of Group Policy information. 
    If the GPO setting has been applied according to the result of Gpresult, please check if the value of corresponding registry key has been modified. The corresnponding registry key is shown as following:
    HKEY_CURRENT_USER \ Software \ Microsoft \ Windows \ CurrentVersion \ Explorer \ Advanced: ShowInfoTip
    If the value is 1, this means the value has been modified. Vice versa.
    Regards,
    Lany Zhang

  • Group Policy Pref - Mapped Drives Not Applying to One User

    Hi All,
    I’m new to this list, so please excuse any etiquette slip ups.  
    I have three users at a site. All their machines are running Windows XP Service Pack 3 and have client side extensions installed. I created a group policy to map their default drives using GP User Preferences.
    Each of the drives is set to "update".
    As an example of the policy created XML is as follows:
    <Drive clsid="{935D1B74-9CB8-4e3c-9914-7DD559B7A417}" name="H:" status="H:"
    image="2" changed="2009-11-25 05:13:58"
    uid="{8A44D2F4-AAE5-4F43-AEEC-D36F08EA619C}" desc="Maps the users H drive to
    ServerName\users$\%username%" bypassErrors="1"><Properties action="U"
    thisDrive="NOCHANGE" allDrives="NOCHANGE" userName=""
    path="\\ServerName\users$\%username%" label="Home (ServerName)"
    persistent="1" useLetter="1" letter="H"/></Drive>
    and
    <Drive clsid="{935D1B74-9CB8-4e3c-9914-7DD559B7A417}" name="J:" status="J:"
    image="0" changed="2009-11-30 03:52:58"
    uid="{535CD462-A45D-4363-ADA1-2316D5ECC703}" desc="Maps J drive for users to
    \\ServerName\apps" bypassErrors="1"><Properties action="C"
    thisDrive="NOCHANGE" allDrives="NOCHANGE" userName=""
    path="\\ServerName\Apps" label="Apps (ServerName)" persistent="1"
    useLetter="1" letter="J"/></Drive>
    The group policy is applied to an OU for that site. 
    All three users are in the same OU.
    All three users are also in the same “xxsitecode Users” group.
    2 of the users log into their pc and get the mapped drives with no issue, but one user doesn’t.
    There are no other login scripts and the user has no manually mapped drives.
    He does have a H drive mapped using the profile field in his AD object as a temp measure. But every 90 mins any other manually mapped drives are removed by the policy.
    We don’t use roaming profiles
    To trouble shoot I have tried
    -    Reinstalling client side extensions
    -    Re-joining the pc to the domain
    -    Running gpupdate from the command prompt to see if any event logs are generated (none are)
    -    Manually mapping the drives to make sure there is network access etc – I can manually map them/he can access them.
    -    Creating the user a new account, when he logs in using that account he gets his mapped drives on all PC’s
    -    Getting the user to log into a different pc, when he does this he doesn’t get his drives – so it’s not his machine or profile
    -    Manually checking the security on the user object in AD against one of the users who gets their drives mapped
    I'm sure the GP is fine because it works for two other users and the testing isolates his user account as the issue.
    The Policy I’m having issues with is xxxx Mapped Drives/ Printers
    I have posted this issue on the tech net GP discussion groups page, but haven’t had any replies.
    Any suggestions would be appreciated.
    Simone

    What's interesting is that I applied a new GP to users - it has one policy setting and one preferences setting. He only gets the policy setting.. aka he gets the wallpaper but not the homepage.
    Also, Jorke asked me to post the gpresult /z .
    Microsoft (R) Windows (R) XP Operating System Group Policy Result tool v2.0
    Copyright (C) Microsoft Corp. 1981-2001
    Created On 10/02/2010 at 2:19:34 PM
    RSOP results for DOMAIN\USER on MACHINENAME : Logging Mode
    OS Type:                     Microsoft Windows XP Professional
    OS Configuration:            Member Workstation
    OS Version:                  5.1.2600
    Domain Name:                 DOMAIN
    Domain Type:                 Windows 2000
    Site Name:                   SITECODE
    Roaming Profile:            
    Local Profile:               C:\Documents and Settings\USER.DOMAIN
    Connected over a slow link?: No
    COMPUTER SETTINGS
        CN=MACHINENAME,OU=Laptops,OU=SITECODE,DC=DOMAIN,DC=com,DC=au
        Last time Group Policy was applied: 10/02/2010 at 1:06:38 PM
        Group Policy was applied from:      XXXXXADC.DOMAIN.com.au
        Group Policy slow link threshold:   500 kbps
        Applied Group Policy Objects
            Allow Remote Assistance
            au-mdwsus
            Default Domain Policy
            Legal Notice
            Proxy Settings
            Logon as service, operating system
            AU-WSUS
            Desktop Background & Home Page
            Reg Permissions for default desktop
            Local Admin & Local Power Users
        The following GPOs were not applied because they were filtered out
            SITECODE Mapped Drives/ Printers
                Filtering:  Not Applied (Empty)
            Local Group Policy
                Filtering:  Not Applied (Empty)
            AVD Rollout
                Filtering:  Disabled (GPO)
        The computer is a part of the following security groups:
            BUILTIN\Administrators
            Everyone
            Debugger Users
            BUILTIN\Users
            NT AUTHORITY\NETWORK
            NT AUTHORITY\Authenticated Users
            MACHINENAME$
            Domain Computers
            CERTSVC_DCOM_ACCESS
        Resultant Set Of Policies for Computer:
            Software Installations
                N/A
            Startup Scripts
                GPO: Desktop Background & Home Page
                    Name:         image.bat
                    Parameters:  
                    LastExecuted: 7:55:34 PM
                    Name:         swiftdesktop.vbs
                    Parameters:  
                    LastExecuted: 7:55:35 PM
            Shutdown Scripts
                N/A
            Account Policies
            Audit Policy
            User Rights
            Security Options
            Event Log Settings
            Restricted Groups
            System Services
            Registry Settings
            File System Settings
            Public Key Policies
                N/A
            Administrative Templates
                GPO: Allow Remote Assistance
                    Setting: Software\policies\Microsoft\Windows NT\Terminal Services
                    State:   Enabled
                GPO: AU-WSUS
                    Setting: Software\Policies\Microsoft\Windows\WindowsUpdate\AU
                    State:   Enabled
                GPO: Allow Remote Assistance
                    Setting: Software\policies\Microsoft\Windows NT\Terminal Services\RAUnsolicit
                    State:   Enabled
                GPO: Allow Remote Assistance
                    Setting: Software\policies\Microsoft\Windows NT\Terminal Services
                    State:   Enabled
                GPO: Allow Remote Assistance
                    Setting: Software\policies\Microsoft\Windows NT\Terminal Services\RAUnsolicit
                    State:   Enabled
                GPO: Allow Remote Assistance
                    Setting: Software\policies\Microsoft\WindowsFirewall\DomainProfile\GloballyOpenPorts
                    State:   Enabled
                GPO: Allow Remote Assistance
                    Setting: Software\policies\Microsoft\WindowsFirewall\DomainProfile\GloballyOpenPorts\List
                    State:   Enabled
                GPO: Allow Remote Assistance
                    Setting: Software\policies\Microsoft\WindowsFirewall\DomainProfile\AuthorizedApplications\List
                    State:   Enabled
                GPO: AU-WSUS
                    Setting: Software\Policies\Microsoft\Windows\WindowsUpdate\AU
                    State:   Enabled
                GPO: Allow Remote Assistance
                    Setting: Software\policies\Microsoft\Windows NT\Terminal Services\RAUnsolicit
                    State:   Enabled
                GPO: Allow Remote Assistance
                    Setting: Software\policies\Microsoft\WindowsFirewall\DomainProfile\AuthorizedApplications\List
                    State:   Enabled
                GPO: Allow Remote Assistance
                    Setting: Software\policies\Microsoft\Windows NT\Terminal Services\RAUnsolicit
                    State:   Enabled
                GPO: Allow Remote Assistance
                    Setting: Software\policies\Microsoft\Windows NT\Terminal Services\RAUnsolicit
                    State:   Enabled
                GPO: AU-WSUS
                    Setting: Software\Policies\Microsoft\Windows\WindowsUpdate\AU
                    State:   Enabled
                GPO: Allow Remote Assistance
                    Setting: Software\policies\Microsoft\Windows NT\Terminal Services
                    State:   Enabled
                GPO: au-mdwsus
                    Setting: Software\Policies\Microsoft\Windows\WindowsUpdate
                    State:   Enabled
                GPO: Allow Remote Assistance
                    Setting: Software\policies\Microsoft\Windows NT\Terminal Services\RAUnsolicit
                    State:   Enabled
                GPO: Allow Remote Assistance
                    Setting: Software\policies\Microsoft\Windows NT\Terminal Services\RAUnsolicit
                    State:   Enabled
                GPO: au-mdwsus
                    Setting: Software\Policies\Microsoft\Windows\WindowsUpdate\AU
                    State:   Enabled
                GPO: Allow Remote Assistance
                    Setting: Software\policies\Microsoft\Windows NT\CurrentVersion\Winlogon
                    State:   Enabled
                GPO: Allow Remote Assistance
                    Setting: Software\policies\Microsoft\Windows NT\Terminal Services
                    State:   Enabled
                GPO: Allow Remote Assistance
                    Setting: Software\policies\Microsoft\WindowsFirewall\DomainProfile\AuthorizedApplications\List
                    State:   Enabled
                GPO: AU-WSUS
                    Setting: Software\Policies\Microsoft\Windows\WindowsUpdate\AU
                    State:   Enabled
                GPO: Allow Remote Assistance
                    Setting: Software\policies\Microsoft\Windows NT\Terminal Services\RAUnsolicit
                    State:   Enabled
                GPO: Allow Remote Assistance
                    Setting: Software\policies\Microsoft\WindowsFirewall\DomainProfile\AuthorizedApplications
                    State:   Enabled
                GPO: AU-WSUS
                    Setting: Software\Policies\Microsoft\Windows\WindowsUpdate\AU
                    State:   Enabled
                GPO: au-mdwsus
                    Setting: Software\Policies\Microsoft\Windows\WindowsUpdate
                    State:   Enabled
                GPO: Allow Remote Assistance
                    Setting: Software\policies\Microsoft\Windows NT\Terminal Services
                    State:   Enabled
                GPO: Desktop Background & Home Page
                    Setting: Software\Policies\Microsoft\Internet Explorer\Security
                    State:   Enabled
                GPO: Allow Remote Assistance
                    Setting: Software\policies\Microsoft\Windows NT\Terminal Services
                    State:   Enabled
                GPO: AU-WSUS
                    Setting: Software\Policies\Microsoft\Windows\WindowsUpdate
                    State:   Enabled
                GPO: AU-WSUS
                    Setting: Software\Policies\Microsoft\Windows\WindowsUpdate\AU
                    State:   Enabled
                GPO: Allow Remote Assistance
                    Setting: Software\policies\Microsoft\Windows NT\Terminal Services\RAUnsolicit
                    State:   Enabled
                GPO: Allow Remote Assistance
                    Setting: Software\policies\Microsoft\WindowsFirewall\DomainProfile\AuthorizedApplications
                    State:   Enabled
                GPO: Allow Remote Assistance
                    Setting: Software\policies\Microsoft\WindowsFirewall\DomainProfile\RemoteAdminSettings
                    State:   Enabled
                GPO: Allow Remote Assistance
                    Setting: Software\policies\Microsoft\Windows NT\Terminal Services
                    State:   Enabled
                GPO: AU-WSUS
                    Setting: Software\Policies\Microsoft\Windows\WindowsUpdate\AU
                    State:   Enabled
                GPO: au-mdwsus
                    Setting: Software\Policies\Microsoft\Windows\WindowsUpdate
                    State:   Enabled
                GPO: AU-WSUS
                    Setting: Software\Policies\Microsoft\Windows\WindowsUpdate\AU
                    State:   Enabled
                GPO: Allow Remote Assistance
                    Setting: Software\policies\Microsoft\WindowsFirewall\DomainProfile\RemoteAdminSettings
                    State:   Enabled
                GPO: Allow Remote Assistance
                    Setting: Software\policies\Microsoft\Windows NT\Terminal Services\RAUnsolicit
                    State:   Enabled
                GPO: au-mdwsus
                    Setting: Software\Policies\Microsoft\Windows\WindowsUpdate
                    State:   Enabled
                GPO: Allow Remote Assistance
                    Setting: Software\policies\Microsoft\WindowsFirewall\DomainProfile\AuthorizedApplications\List
                    State:   Enabled
                GPO: Allow Remote Assistance
                    Setting: Software\policies\Microsoft\WindowsFirewall\DomainProfile\AuthorizedApplications\List
                    State:   Enabled
                GPO: Allow Remote Assistance
                    Setting: Software\policies\Microsoft\Windows NT\Terminal Services
                    State:   Enabled
    USER SETTINGS
        CN=Matthew Luhrs,OU=Users,OU=SITECODE,DC=DOMAIN,DC=com,DC=au
        Last time Group Policy was applied: 10/02/2010 at 1:54:53 PM
        Group Policy was applied from:      XXXXXADC.DOMAIN.com.au
        Group Policy slow link threshold:   500 kbps
        Applied Group Policy Objects
            Allow Remote Assistance
           **** SITECODE Mapped Drives/ Printers - has Gp Pref's that should apply
            Default Domain Policy
            Proxy Settings
            **** Desktop Background & Home Page - has Gp Pref's that should apply
            Local Admin & Local Power Users
        The following GPOs were not applied because they were filtered out
            AU-WSUS
                Filtering:  Not Applied (Empty)
            Legal Notice
                Filtering:  Disabled (GPO)
            Reg Permissions for default desktop
                Filtering:  Not Applied (Empty)
            Logon as service, operating system
                Filtering:  Not Applied (Empty)
            Local Group Policy
                Filtering:  Not Applied (Empty)
            au-mdwsus
                Filtering:  Not Applied (Empty)
            AVD Rollout
                Filtering:  Disabled (GPO)
        The user is a part of the following security groups:
            Domain Users
            Everyone
            Offer Remote Assistance Helpers
            BUILTIN\Administrators
            BUILTIN\Users
            NT AUTHORITY\INTERACTIVE
            NT AUTHORITY\Authenticated Users
            LOCAL
            Computer Account Operators
            Internet Users
            SITECODE Users
            DOMAIN-Public Folders Administrators
            All Email Users
            DOMAINSWIFTEMAIL
            Domain Admins
            Offer Remote Assistance Helpers
            WSUS Administrators
            DHCP Administrators
            CERTSVC_DCOM_ACCESS
        Resultant Set Of Policies for User:
            Software Installations
                N/A
            Public Key Policies
                N/A
            Administrative Templates
                N/A
            Folder Redirection
                N/A
            Internet Explorer Browser User Interface
                GPO: Proxy Settings
                    Large Animated Bitmap Name:      N/A
                    Large Custom Logo Bitmap Name:   N/A
                    Title BarText:                   N/A
                    UserAgent Text:                  N/A
                    Delete existing toolbar buttons: No
            Internet Explorer Connection
                HTTP Proxy Server:   Proxy:port
                Secure Proxy Server: Proxy:port
                FTP Proxy Server:    Proxy:port
                Gopher Proxy Server: Proxy:port
                Socks Proxy Server:  Proxy:port
                Auto Config Enable:  Yes
                Enable Proxy:        Yes
                Use same Proxy:      Yes
            Internet Explorer URLs
                GPO: Proxy Settings
                    Home page URL:           N/A
                    Search page URL:         N/A
                    Online support page URL: N/A
            Internet Explorer Security
                Always Viewable Sites:     N/A
                Password Override Enabled: False
                GPO: Proxy Settings
                    Import the current Content Ratings Settings:      No
                    Import the current Security Zones Settings:       No
                    Import current Authenticode Security Information: No
                    Enable trusted publisher lockdown:                No
            Internet Explorer Programs
                GPO: Proxy Settings
                    Import the current Program Settings: No

Maybe you are looking for

  • I cant see why it is not working please help

    Hello all, I am practicing JSP by developing a site of my own.. I have come across a problem that I could not figure out.. I will appreciate all your hints please.. If I am posting this question in a wrong forum please be kind enough to route me to a

  • Can't Play AVI movie with QT 7.1

    I am unable to run this particular avi movie, Rendezvous, which I downloaded to my G5. All I get is a white background and a very intermittent/jerky sound. Also the total time of the movie gets doubled with QT Player which may account for the screwy

  • Something is wrong with the bottom cover

    The bottom cover, I mean this one which protects sim card from water, is broken. I close it every single time but it still keep opening... Not completely but it comes off a little bit. What should I do? Should I give my Xperia for the warranty?

  • Where is SDN search in ABAP forum?

    I could not find search in ABAP sdn forum. Thanks a®

  • Process orders not reflecting in SNP planning book

    Hi, I am facing a problem here that the SNP planned orders once converted into process orders in ECC are not reflecting in the SNP planning book. However if i check the /sapapo/rrp3 product view, the process orders are visible here. Kindly help me un