Shutdown oracle from group policy

I try to shutdown an Oracle 9i database as part of the shutdown script that runs when my Windows 2003 Server is being shutdown. I am getting a priviledge violation: This is my script
set oracle_sid=SID
set oracle_home=d:\oracle\SID\920
sqlplus sys/password@"SID as sysdba" @shutdownimmediate.sql
The script file contains:
shutdown immediate
exit
I have added the local system account to the ORA_DBA, ORA_DEV_DBA, ORA_DEV_OPER groups without success.
Has anyone out there successfully used the group policy editor (gpedit.msc) to make Oracle part of the shutdown procedure?

Hi,
You could use powershell command to enable this:
Step-By-Step: Enabling BranchCache in Microsoft Windows Server 2012
http://blogs.technet.com/b/canitpro/archive/2013/05/13/step-by-step-enabling-branchcache-in-microsoft-windows-server-2012.aspx
Or you could create another GPO to check the result.
More detail information:
http://technet.microsoft.com/library/hh848392.aspx
Regards.
Vivian Wang

Similar Messages

How to Enable USB Internet Dongles and only Block USB storage device from Group Policy

Hi ,
I have a very urgent requirement , Is there a way to disable the USB and only enable to Internet Dongle using Group policy.
Regards,
Schan.

Hi,
Checkout the below link for restricting the access for USB devices using Group Policy,
http://www.windowsecurity.com/articles-tutorials/authentication_and_encryption/Control-USB-Devices-Group-Policy.html
Checkout the below thread on similar discussion,
http://social.technet.microsoft.com/Forums/en-US/89c8a8f0-da98-4cc9-8044-1e457e26840e/how-to-disable-usb-internet-dongle-datacard-from-group-policy-server-2008-r2?forum=winserverGP
Regards,
Gopi
www.jijitechnologies.com

Can't Remove IE Maintenance settings from group policy

Dear Techies,
In group policy under IE Maintenance I configured
some settings like home page and proxy settings etc, now I removed all
settings from group policy, I cleared every thing but still I can see the IE settings under group policy.
1)automatically detect settings                   Disabled
2)automatic browser configuration             Not configured.
Now
the problem is I am giving some proxy settings in IE manually when I
restarted the system proxy settings are getting empty and again I have to
give them.
Please tell the procedure to remove IE Maintenance completely from group policy.
can anybody please help me to solve this issue.
Thanks in advance for your valuable support.
Regards,
Phani Kumar .B

Hi,
If GPO settings are not removed completely or settings were not saved correctly, this issue may occur.
Let’s try to check if Registry settings was changed when changing IE proxy settings.
1.   Open IE and change proxy settings. Click OK to apply.
2.   Open "regedit", navigate to
HKCU\software\Microsoft\Windows\CurrentVersion\Internet Settings
   In the right panel, are Proxy settings correct?
3.   Log off and test. If the issue persists, please help to collect gpresult log.
Run "gpresult /v >>c:\gpresult.log", send gpresult.log to [email protected]
4.   On DC, open GPO, navigate to Computer Configuration\Administrative Templates\System\Group Policy,
Double-click Internet Explorer Maintenance policy processing, Make sure it’s Note Configured or Disabled.
Navigate to IE Maintenance, right-click Internet Explorer Maintenance, choose Reset Browser settings. Delete all file in the following folder.
\\FQDN\Sysvol\FQDN\Policies\<GPOGUID>\User\Microsoft\IEAK
Note: Replace FQDN and <GPOGUID> accordingly.
5.   On client, delete files in the following folder.
%windir%\System32\GroupPolicy\User\Microsoft\IEAK
Documents and Settings\<<username>>\Application Data\Microsoft\Internet Explorer\Custom Settings\Custom0\
Documents and Settings\<<username>>\Application Data\Microsoft\Network\Connections\pbk\Rasphone.pbk (for connection settings)
Thanks.
This posting is provided "AS IS" with no warranties, and confers no rights.

I have removed some ADM templates from group policy but are still showing in RSOP

I removed some old custom ADM templates from group policy but they are still showing up when I run RSOP.MSC.
How do I get RSOP.msc not to show these old custom ADM templates? I'm not able to find what I'm looking for in my searches.

Hi,
Even you remove these custom ADM templates, the policy settings configured by these custom ADM templates still exist. We can try to import these ADM templates again then un-configure
the policy settings set by these custom ADM templates. After refreshing the policy settings, we can delete the custom ADM templates.
Best Regards,
Erin
Thanks. That almost works. When I import a new updated template with a different name but with some of the same settings, the old template shows up again.

Windows 7 Policy missing from Group Policy Management

Hey all,
I have 2 SBS 2008 clients that have Windows 7 Policy missing from Group Policy Management. I noticed that they have XP, Vista, and 8, but not 7.
I came across this when I started to deploy some new support software. I deployed my package, the XP, Vista, and 8 policies as well as the "Windows SBS Client Policy" and workstation, but Win 7 workstations do not get the software package
and this is at both sites.
I personally have SBS008 have tested this and same issue, XP, Vista, 8, 8.1, even my 10 get the software, but my Windows 7 does not.
Do you have any ideas? I have attached a screenshot so you can see what I am talking about.

Hi,
Similar query answered :
https://social.technet.microsoft.com/Forums/en-US/d6a6e3fa-fb15-4bcc-a5ca-449f69eeee5d/sbs-2008-missing-client-policy-for-windows-7?forum=smallbusinessserver
https://www.microsoft.com/en-us/download/details.aspx?id=25250
I hope that will help.
Binu Kumar - MCP, MCITP, MCTS , MBA - IT , Director Aarbin Technology Pvt Ltd - Please remember to mark the replies as answers if they help and unmark them if they provide no help.

Cannot install program after begin removed from Group Policy published programs

Hello,
We recently attempted to publish a program through Group Policy to allow users to install it but due to some requirements of the installer, it did not work. We removed it as a published program and now someone who attempted to install it through that method
cannot install the program at all. When they attempt to run the MSI from their local machine (not from a server share) they get an error saying "The feature you are trying to use is on a network resource that is unavailable". We tried putting a copy
of the MSI in the network location it was looking for (which is where it was when it was a published program) and ran in to the same errors as before when it was a published program.
When we ran the installer as a different user that had admin access the program installed correctly and without issue. To avoid having to run as a different user in case the computer only has one admin account, is there a way to clear the user account's
memory of the msi or something?
Thanks.

Hi,
Based on my knowledge, deployed msi application will be installed before the computer allows a user to logon if you choose Assign. Otherwise, you need to use Control Panel\Programs\Programs and Features\install a program from internet to get the msi
installed.
Did you mean to deploy a MSI file to each computers? Is it not the method written in this KB?
How to use Group Policy to remotely install software in Windows Server 2008 and in Windows Server 2003
https://support.microsoft.com/kb/816102?wa=wsignin1.0#method6
If you just deploy a file from a shared network location, make sure that all your users has the permission to access the Network location.
Also, please check the policy under Applocker if there is any policy block the installation of MSI for your domain user except the admin account.
Kate Li
TechNet Community Support

How to disable .EXE files to be run from Group Policy

I would like to know how to disable .exe files from GP?
Thanks in advance

All exe files icluding calc.exe, notepad.exe and explorer.exe or just some exe files?
There are different approaches to this.
If you're trying to block a single executable that you're familiar with you can disable it from a GPO using the setting:
User Configuration/Administrative Templates/System/Don't run specified Windows applications
Another option is to specify only the applications you want to allow Using:
User Configuration/Administrative Templates/System/Run only specified Windows applications
This one would probably take a lot of work to populate for a system with many applications installed or for a corporate environment.
None of the two mentioned settings takes into account that a user can name their exe file what they want so renaming mydangerousapp.exe to explorer.exe would make it a perfectly legitimate executable.
A more robust and managable way of securing your systems by controlling which applications that can be launched is Software Restriction Policies.
Check this article for an introduction to Software Restriction Policies: http://technet.microsoft.com/en-us/magazine/2008.06.srp.aspx

Group Policy Msi status Log

Hi
I am embedded developer. i don't have any knowledge about group policy and active directory. I need help ...please
we are launching msi , from group policy method for all client machine. (that Msi contains silent mode application, application run when msi launch).
My Question is:
1.How to i know msi launched successfully in all client machine. if msi could failed in any other client machine, how to i know?
2. Any other log will be created in server machine? if yes, How to i see that?
3. From server, How to i know my application launched successfully in client machine? I wont check all client machine one by one?
Ranjith

Hi Ran_619,
According to my description, you would like to know how to check if the msi was installed sucessfully from the server. Right?
Based on my knowledge, there are no related logs which can record the result of Windows Installer. You can enable enable software installation logging on the client computer to help you troubleshoot issues that may occur when you install software packages:
Log on to the administration computer as the administrator.
Click Start, Run, and then run Regedit to add the following registry value (or modify it, if the value already exists):
Key: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Diagnostics
Enter the following:
     Value: AppmgmtDebugLevel
    Value Type: REG_DWORD
    Value Data: 9B (Hexadecimal)
For your information, please refer to the following artilces to lget more help:
Enable Logging for Software Installation Client Side Extension
How to Enable Microsoft Installer logging and Verbose logging to gather additional troubleshooting Information
Fixing Group Policy problems by using log files
Regards,
Lany Zhang

Does using Group Policy Preferences to deploy printers require the print driver to be pre-installed?

I'm trying to prepare our school system for Windows 7 (we currently use XP). I would like to use the new Group Policy Preferences method of deploying printers. I pushed out the XP client side extensions through WSUS. In my test environment, I added the shared printer in group policy preferences. My XP machine had the printers show up automatically, but my Windows 7 machine did not. I realized that I had previously connected a printer of the same type to my XP machine before and the drivers were already installed. To test this theory, I manually connected the shared printers to the Windows 7 machine, deleted them, then logged off and back on. Now the printers are showing up from group policy. My question is does using group policy preferences to deploy printers require the print driver to be pre-installed? If not, then what am I doing wrong? If so, is there a way to work around this? Thanks for your help.
EDIT: To clarify, I am using the share method in GPP. This is the error message I get in the event log:
The user 'PRINTERNAME' preference item in the 'win7 printer test {946461A1-27F8-406F-A0B3-0A1A05AF34F6}' Group Policy object did not apply because it failed with error code '0x80070bcb The specified printer driver was not found on the system and needs to be downloaded.' This error was suppressed.

This link have a description of resolution:
http://technet.microsoft.com/en-us/library/cc725938.aspx
Open the GPMC.
Open the GPO where the printer connections are deployed, and navigate to Computer Configuration, Policies, Administrative Templates, Control
Panel, and thenPrinters.
Note
The Point and Print Restrictions setting can also be found under User Configuration\Policies\Administrative Templates\Control Panel\Printers.
This policy is ignored by Windows 7 and Windows Server 2008 R2, but is enforced by earlier editions of Windows including Windows XP with SP1, Windows Server 2003 with SP1, and Windows Server 2008. We recommend that you change
this policy setting in both locations so that all down-level clients have a consistent experience.
Right-click Point and Print Restrictions, and then click Properties.
Click Enabled.
Clear the following check boxes:
Users can only point and print to these servers
Users can only point and print to machines in their forest
In the When installing drivers for a new connection box, select Do not show warning or elevation prompt.
Scroll down, and in the When updating drivers for an existing connection box, select Show warning only.
Click OK.

Group Policy and GroupWise Attachments

My company uses the "Run only allowed Windows Applications" feature from Group Policy to lock down what can be run on our workstations. We have 2 main policies, a standard (lockdown) policy and an admin (open) policy.
Ever since a 7.0.2 GroupWise client/server upgrade, under my lockdown policy some of my users have complained that when they click the attachment button in GroupWise it no longer goes to the location of the last attached document, instead it goes to a default location. It might be the D drive, the GroupWise directory, it changes from computer to computer. I have confirmed that this is the behavior of the lockdown policy, and when I switch to the open policy the attachment button goes to the previous attachment location as is expected.
I've placed addrbook.exe, grpwise.exe, gwmailto.exe, gwreload.exe, gwsync.exe and notify.exe in my allowed list for executables and can't figure out what I might be missing. In the past I ahve found OCX and DLL files that have had to be specifically added to the policies as well to get certain functions to work, is it possible that this may be the case in my situation or could it be a completely different policy that I should be looking at?
I'm getting ready to push the 8.0.2 clients to my users and this is something that I'd like to try to resolve before I do that push. Thanks!

I just tore apart my group policy and found that using the Hide These Specific Drives and hiding the C: drive is what is causing this attachment behavior issue. Any ideas why it is causing this and any possible work arounds other than unhiding the C: drive?

Prevent OL2010 PST creation through group policy; need menu number or policy ID

Greetings all and thanks in advance,
In a similar fashion as found here: http://social.technet.microsoft.com/Forums/pl-PL/outlook/thread/76081525-71d8-459e-a0cf-39d80a4c6cc7, I need to block the creation of Outlook Data files through this path: File > Account Settings >
Data Files (tab) > ADD
What is the menu number or policy ID of this item so I use it to disable from Group Policy?
Thanks,
Willis

I cannot find the specified command bar ID in the following link:
http://support.microsoft.com/kb/173604
However, we may prevent users from adding PSTs to Outlook profiles via GPO. The location is "gpedit.msc | Computer Configuration | User Configuration | Administrative Templates | Micrsoft Outlook 2010 | Miscellaneous | PST Settings | prevent users from adding
PSTs to Outlook profiles..."
Thanks.
Tony Chen
TechNet Community Support

Disable IE 10 & 11 Security Alert popup w/ Group Policy

We get a Security Alert popup when accessing a https site
"You are abut to view pages over a secure connection....."
With previous version of IE, user can simply check box for "In the future, do not show this warning" and it will not pop up again, however, w/ the new IE 10 and IE 11, it keeps coming back. What is the group policy rule to disable this pop
up?
Thanks in advance.
Roget Luo

Hi Roget,
It seems that we can enable the following setting to block the warning message:
Computer Configuration/User Configuration > Adminstrative Templates > Windows Components > Internet Explorer >Turn off the Security
Settings Check feature
Besides, apart from group policy, if we just want to individually block the message, the following article can be referred to for more information.
Stop security warning in Internet Explorer
https://innsida.ntnu.no/wiki/-/wiki/English/Stop+security+warning+in+Internet+Explorer
Please Note:Since
the web site is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information.
Best regards,
Frank Shen

Disable Adaptive Brightness by Group Policy

Hello,
for some windows 8.1 i want to disable adaptive brigtness.
This not a default GPO as i can see :
http://www.eightforums.com/performance-maintenance/21982-lock-brightness-settings.html
Is there a option to only DISABLE this?
When this setting is disabled, the brightness of windows 8.1-tablets are far better than default.
Thx

They won't let me link a hyperlink but if you search for "adaptive brightness service computerstepbystep" then they have a decent article.
In Windows 8 the service has been changed from "Adaptive Brightness" to "Sensor Monitoring Service" and you could change registry settings and/or service startup from group policy.

Group Policy for Windows Ten

http://community.spiceworks.com/topic/1104098-windows-10-gpos

Does anyone know if you need to have Server 2012 domain controller in order to setup group policy for windows ten? Currently we are running Server 2008 R2 but I am starting to get devices with windows ten that I will need to control from group policy.
@CreativeTechie
This topic first appeared in the Spiceworks Community

EMET 5.0 Group Policy Settings Ignored (Probable race condition with Policy application)

In our deployment, EMET 5 seems to be ignoring group policy settings from immediately after the first group policy refresh post-boot.
Settings are being applied to the computer correctly, and are appearing in the registry correctly, and on boot, a set of Event ID 50 events are logged containing ConfigAppmitGPO (and similar for the other settings) elements with the correct settings.
Upon the first group policy refresh, further eventID 50 events are logged, with empty ConfigAppmitGPO elements.
Investigation with Process Monitor seems to indicate this is a race condition between Group Policy Registry settings being refreshed (which deletes the entries) and the EMET service reading out these settings from the registry (which appears to be triggered
by Group Policy application or by a notification on the registry keys themselves)
This is reproducible on Windows 7 and Windows 8.1.
Is there any way to arrange for settings to be applied correctly at all times, or is this a bug that will need to be fixed in a future update?

We're experiencing the exact same behavior currently. I was starting to think I was going crazy. Glad to know others are experiencing the same behavior.
I've found that using the method from pervious versions to read and update settings from Group Policy, using "emet_conf.exe --refresh" still works, and upon every execution, the event log shows the GPO settings being read and applied. While I welcome the
move to have EMET update from GPO settings without requiring running a separate task, as it stands now in its current condition, it is a step back.
Scott Ladewig http://www.ladewig.com

Shutdown oracle from group policy

Similar Messages

Maybe you are looking for