Question on a specific Group Policy setting for SCCM Updates

Hello,
This may not exactly be the correct forum for this question but in looking around I didn't come up with an immediate answer and was hoping someone else had this issue.
I have a WSUS server and am moving over to SCCM for updates. I've actually had success in getting 2 sets of patches installed after some very frustrating days thanks to people here.
I've noticed that when I switch workstations to my AD folder that has the SCCM Updates GPO instead of our standard WSUS GPO that we get action center errors "Set up Windows Update", "Windows Update is not set up". When we click
the flag it tells us to "Choose an Update Option".
In my new GPO I do have Configure Automatic Updates Enabled for "Auto Download and notify for install" but we still get this warning. Is there a differnet setting that controls this action that anyone is aware of in their experience? I looked
through the other settings but didn't se anything obvious.
Thanks for any help!

Hi Dustin,
I'd read a number of different things trying to solve the problem. That article looked a little familiar but I re-read it carefully.
I do have "specify intranet Microsoft Update service location" set to Not Configured as someone had correctly pointed me to that as the reason I was not getting updates.
I did not have "Allow signed updates from an Intranet Micorsoft update server" enabled so that shoudl help some.
"Configure Automatic Updates" was enabled because I, incorectly, thoguth that's all that might be needed since Ihad to make sure I'd Not Configured the first setting.
I had "Turn on Recommended Updates" Enabled so I put it back to not configured.
I understand that turning things to Not Configured doesn't necessarily change any previous group policy settings so I may be getting some fallout from having a WSUS server on these systems before. I'd just like to aviod having to have everyone go into the
action center and manually click to configure updates.
I'll see if my one setting change has any effect.
UPDATE: I forced a gpupdate and the red flag in the action center has not disappeared.

Similar Messages

Setting a loopback policy setting for Domain Controllers/Preventing IE from accessing externally

Hello, we need to set a lookback policy for our domain controllers to ensure IE doesn't access externally. Is the loopback the best method, or do you all have recommendations?

As far as I'm aware, there's not a good Group Policy setting to do this.
If I understand your question correctly, you wish to prevent external Internet browsing from your Domain Controllers, but everyone else (other servers and workstations) should have full access.
If that's the case, I would recommend blocking port 80 for the Domain Controllers in your Firewall, as they (I hope) have static local IP addresses.
If you know of a good Group Policy setting however, it would be best to set it in the Default Domain Controller Policy, as that will only affect the Domain Controllers.
The "loopback" policy you're referring to is the "Configure user Group Policy loopback processing mode", which can be used to apply the computer configuration "instead of" or "merged with" the user configuration when
a user logs on to computers where this policy applies. Since the computer configuration is normally applied before the user configuration, that can be used to force rules on computers regardless of who's logging in.
Please mark as answer or vote
as helpful when
it applies. Thanks!

Users cannot access removable devices after you enable and then disable a Group Policy setting in Windows 7 64 Bit

Users cannot access removable devices after you enable and then disable a Group Policy setting on Windows 7 64 bit machines.
on the 32 bit machines I was able to apply this hotfix
http://support2.microsoft.com/kb/2738898
But it will not install on 64 bit machines.
Is there a hotfix for 64 bit? If not, what is the work around?
Thanks!
Robert

Select "Show hotfixes for all platforms and languages", then download x64 hotfix:
Please take a moment to Vote as Helpful and/or Mark as Answer where applicable. Thanks.

Group Policy design for Terminal Server

Hi, I am mixed about group policy design for Terminal server
My Infrastructure is so;
Zone
      ->Department
                   ->User
                   ->Computers
      ->Department
                   ->User
                   ->Computers
      ->Department
                   ->User
                   ->Computers
Server
       ->OtherServer
        ->TerminalServer (TerminalComputersGPO)
I create two group policy for user and for terminal server computers (security filtered for Terminal_Users)
I want to use terminal server user policy but it must effect
just in terminal computers. not TS user's computers. what i must do? where i must locate it?
Please click "Vote As Helpful" if it is helpful for you and "Propose as Answer"

Hi Davut EREN - TAT,
According to your description, you would like
terminal server user policy applying to users which log on to terminal computers. Right?
As MuhammadUmar's suggestion, you can use Loopback in replace mode. The GPO list for the user is replaced in its entirety by the GPO list that is already obtained for the computer at computer startup.
In the real work environment Loopback processing of Group Policy is usually used on Terminal Servers. For example we have users with enabled folder redirection settings, but we do not want these folder redirection to work when the users log on to the
Terminal Server, in this case we enable Loopback processing of Group s Computer account and do not enable the folder redirection settings.
For more information about this policy, please refer to the following articles:
Loopback processing with merge or replace
Loopback processing of Group Policy
Regards,
Lany Zhang

Group policy template for Novell Client for Windows 7

Does anyone know if there is a group policy template for the Novell Client for Windows 7? I find it really hard to believe that Novell has not yet released one, but I cannot find one anywhere. We use ZCM 11.2, and I really need to be able to send out settings for the client via a group policy.
By the way, I am also posting this on the Novell Client forum, but since this is also a ZCM thing, I am hoping I might get some feedback here.
Rick P

Two recent/new resources are available for the Novell Client 2 SP3 for Windows:
Cool Solutions AppNote: Novell Client 2 SP3 for Windows: Registry Settings
Novell Client 2 SP3 for Windows: Registry Settings | Novell User Communities
Cool Solutions Tool: Group Policy Administrative Template for Novell Client 2 SP3 for Windows
Group Policy Administrative Template for Novell Client 2 SP3 for Windows | Novell User Communities

Anyone having same prob as me? I updated to 8.1.3 and lost photo stream - all settings are set for photostream updating - the blue shirts at the Apple store seem to think that the feature was removed with the 8.1.3 update

Is anyone having same prob as me? I updated to 8.3 and lost photo stream on my photos - all my settings are set for photostream updating - the blue shirts at the Apple store seem to think that the feature was removed from the phones with the 8.1.3 update but it is not mentioned anywhere on Apple's site

found it
http://gimutaowebsolution.com/missing-photos-on-ios-8-3-or-8-x/

If your ipod is set for manual update, how do you add playlists?

If your ipod is set for manual update, how do you create and add playlists to the ipod?

Thanks! I have several ipod books and they told me about manually updating songs but not playlists. That tutorial is VERY helpful. I assume that if you manually update the playlist, all the songs contained in it would have had to been previously manually updated to the ipod....to say it another way, updating the playlist does not transfer any songs. Am I correct?

Group policy preference for creating printers setting the wrong printer as default

Hi
We have a a group policy preference applied to users. At the moment we create a shared printer and set it as default for all users in a specific OU. Now we need to add another shared printer. I have updated the policy and set it to create
the new shared printer and have set item level targeting to the same OU as the first printer. I want to keep the existing printer as the default, however when the policy runs, the new printer is created fine but it is set as the default
printer. Is this because it has been added last ? There doesn't seem to be a way of changing the order that the printers are applied.
Both printers are Shared printers and are set to Create
The existing printer (printer A) is set as the default printer. It is targeted at the London OU.
The new printer (printer B) has NOT been set as default. It is targeted at the London OU.
No other options have been set.
When the policy is applied both printers are added but printer B is being set as the default.
Any help would be appreciated.
Thanks
G

Hi G,
>>however when the policy runs, the new printer is created fine but it is set as the default printer. Is this because it has been added last ? There doesn't seem to be a way of changing the order that the printers are applied.
Before going further, what's the operating systems of our clients? Here, I need to double confirm that the checkbox of
Set this printer as the default printer... is not selected in the new GPP Printer item. Besides, we can change the orders of the printer items. To do this, select the printer item, right click, click All Tasks, and choose Move Up or Move
Down to change the order.
Best regards,
Frank Shen
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

Very specific group policy for IE 11

Got a very interesting GPO I need created. I need a GPO that forces all users on a certain machine to use InPrivate browsing at all times while they are using IE. Or even for a specific website.
I have an application that has a bug that is fixed by using private browsing, weirdly enough. To limit problems with users saying "But I did use private browsing" I would ideally like to force the use of it while they are on the machine. If I have
to apply it to a specific group, that will be fine too, but the end result needs to be private browsing they cannot turn off at all.
Any suggestions? Open to Powershell solutions, or creative options.

Hi Noah ,
The only group policy I have found related to the InPrivateBrowsing is this :
User Configuration, Administrative Templates, Windows Components, Internet Explorer, Privacy and Turn off InPrivate Browsing
But it is used to turn on /off the Inprivate Browsing feature and it can not be used to force the Inprivate Browsing .
I am afraid the only good option is to create a shortcut for the user if you want the user to open the Internet Explorer in private browsing mode every time .
Best regards
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected]

Work Folders - Specific Group Policy's that are needed to satisfy domain client security level

Hi All,
We have Work Folders successfully set up on our domain. A non domain joined client can connect and gain access to their work folder share without issue.
I am now in the process of setting up domain connected laptops that will be used by staff. These laptop will have restrictions on them and the users that logon will not have admin privileges.
The work folder server has the device policies of:
Encrypt Work Folders
Automatically lock screen, and require a password
We are using Windows 8.1 enterprise clients, with the latest patches. If I turn off the "Automatically lock screen...." policy, a domain user can successfully sync their work. If I turn it back on they get the below error:
"Make sure that your account is an administrator on the PC and that all administrator accounts on this PC have a password."
I have set the group polices that I believe might effect this message, but have yet to get a successful sync. Could someone give me the exact group policies I would need to set for client to meet the security requirements.
Minimum password length of 6
Autolock screen set to be 15 minutes or less
Maximum password retry of 10 or less

Hi,
Work Folders provides the two device policies that administrators can control. The policies are enforced on the Windows 8.1 clients before data sync is allowed.
The policy settings are not configurable, and they are enforced on the devices running with Windows 8.1 through the EAS Engine.
Please refer to the article below to troubleshoot the issue:
Work Folders for Windows 7
http://blogs.technet.com/b/filecab/archive/2014/04/24/work-folders-for-windows-7.aspx
Regards,
Mandy
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

How to access a domain server which is targeted by Group Policy set to block Inbound and Outbound connections

Hi,
I have a practice lab with two physical servers 2012 R2, one of them is Hyper-V host and one of VMs is a domain controller. I was doeing some exercises with firewall rule deployment through Group Policy, so I created an outbound rule to block port 80 which
was targeted to Domain Computers. Now my other physical server has inbound and outbound connections set to block and domain controller cannot be contacted to update policy ( with rule removed ). At least that is my understanding. Maybe I messed up something
with the profiles too, because port 80 would not have block all outband traffic, or?
I am new to IT so my understanding is still poor.
Best
Robert

Hi Robert,
If we block inbound connections, all connections that do not have firewall rules that explicitly allow the connection will be blocked.
If we block outbound connections, all connections that do not have firewall rules that explicitly allow the connection will be blocked.
If we block outbound TCP port 80, it will mean all websites will be unreachable, for TCP port 80 is for HTTP.
Regarding Windows firewall security settings, the following article can be referred to for more information.
Windows Firewall with Advanced Security Properties Page
http://technet.microsoft.com/en-us/library/cc753002.aspx
Best regards,
Frank Shen

Proxy details keep deleting from field in Group Policy Preferences for IE 10 on windows 7 and 8

We have a lot of users who on the last update and have seemed to manage to install IE 10 onto their windows 7 machines as now causing all sorts of issues. I know that IEM has been replaced in favour of Group Policy Preferences and I have build a windows
8 machine just to create a group policy preference as you are unable to create the preferences from windows 7, thank you Microsoft!
I have created a test OU and got a win 7 and a win 8 machine both with IE 10 for testing. I have created the preference settings, home page etc and disabled using the F keys the advanced features that we do not require as from reading in other post even
if it is not ticked, if it is green then it will apply it, kinda defeats the using the tick but it is what it is!
When we do a gpupdate it picks up the default homepage as well as other settings but the proxy settings is blank. I then went back into the preferences I created for IE 10 and checked the connections, LAN settings and the proxy server name is missing but
both ticks are showing for the proxy settings and when you click on advanced it shows the proxy server and port details fine. I have been working on this now for 4 days and getting no where to a point were we just roll back any users on IE 10 back to IE 9.
I have also unlinked any other gpo relating to Internet settings on the test OU just in case there are conflicts. Any ideas as where to go from here?

In the end to get around the proxy settings I had to create a registry key preference with proxy and port details which seemed to have done the trick and now IE 10 is picking up the proxy details and displaying webpages

Group Policy item for Security Center

What's the easiest way to do this?
I want to disable the security center popup.Windows XP Pro SP2, zen 3.2sp2
Roaming profiles (for students, a single volatile profile is in use).
I've attempted a few things to get this screen from showing up. I run
fortres, but the security center screen comes up before fortres has
initialized on the machine. I've tried wiping out the wscntfy.exe, but it's
self-repairing.
I tried to build an adm to add to the user extensible policies in the
package, but it's either being ignored or I've got the wrong key
(HKCU\Software\Microsoft\Security Center\FirstRun=dword:00000001).
I noticed that if I turn off the notification on the workstation, it appears
to be in the LM hive and sticks around for subsequent users. But the next
user to use the machine has the thing pop up everytime (because the
notification that they have seen the screen once disappears when their
profile is wiped out).
I guessed that this is the time that I would truly have to switch over to
Windows Group Policies rather than relying on the unsupported user
extensible policies (which have been working fine for me for quite some
time).
But when I tried to get the security center in the group policy editor
(launched from console 1), it isn't there at all. How do I add the proper
snapin to this editor so that I can apply security center settings?
Chris Denby
IT Coordinator
Rainy River District School Board
Fort Frances, Ontario
Canada

Chris,
It appears that in the past few days you have not received a response to your
posting. That concerns us, and has triggered this automated reply.
Has your problem been resolved? If not, you might try one of the following options:
- Do a search of our knowledgebase at http://support.novell.com/search/kb_index.jsp
- Check all of the other support tools and options available at
http://support.novell.com.
- You could also try posting your message again. Make sure it is posted in the
correct newsgroup. (http://support.novell.com/forums)
Be sure to read the forum FAQ about what to expect in the way of responses:
http://support.novell.com/forums/faq_general.html
If this is a reply to a duplicate posting, please ignore and accept our apologies
and rest assured we will issue a stern reprimand to our posting bot.
Good luck!
Your Novell Product Support Forums Team
http://support.novell.com/forums/

How to extract a specific group of data for printing

New to the forums here, I am using LiveCycle Designer ES 8.2, and am trying to find out how I would have data entered into my form extracted to be printed separately. In more detail, I have a form that users would fill out then submit to a help desk. The form would contain hardware specific info which would need to be printed out in such a manner as a ticket. How would I go about making this happen?
Thanks for your help!
Vincent

Hi vincent,
You can make the presence of all fields which you don't want them to be printed as Visible (Screen Only) , and the other fields presence as Visible.
This will let only the needed fields to be printed.
Hope this help.
Regards,
Mohammed

I can't remember my security questions and the email account I set for them no longer works what should I do???

So I tried paying for games on my my new iPhone but they wanted me to answer security questions but I don't remember the answers and the email they send them to is one I made when I was younger so I'm not sure what it is what should I do?

If it hasn't come through after a few hours and didn't end up in the spam filter, click here and request assistance.
(79160)

Question on a specific Group Policy setting for SCCM Updates

Similar Messages

Maybe you are looking for