Start Screen Layout not applying to every user

Ok, i'm stuck. I have a 2012r2 DC with a 2012r2 terminal server. I exported the xml file to be the start screen layout and have it applied to a specific user OU with my two users in it. One gets the layout the other does not (metro
layout btw) Same users, same permissions, in the same OU. Tried to gpupdate with no luck, the only difference I can tell is one users existed and the other I created brand new to test with.
User config - policies - admin templates - start menus & taskbar - start screen layout
this OU is blocked from inheritence for testing purposes. I have also deleted all references to the non-woking user locally on the server and tried to re-login. No dice.
Idea's on what I am missing?

Hi wlords,
Thanks for your sharing!
In addition, I would like to share with you a useful post which can help us to troubleshoot group policy application issues:
Common steps to start troubleshooting Group Policy application issues
http://social.technet.microsoft.com/Forums/en-US/382c97e8-93c8-4022-b8fe-22401037d14c/forum-faq-common-steps-to-start-troubleshooting-group-policy-application-issues?forum=winserverGP
Regards,
Lany Zhang

Similar Messages

KB3000850 Breaks Start Screen Layout Tiles

Hi All,
I have a problem which is a direct cause of KB3000850, this affects both 64bit and 32bit variants.
We use GPO to apply a start screen layout xml file to our users.
On a PC without KB3000850 it works fine, however if you install this update it breaks the layout.
I've read online a couple of other instances of this, but no concrete fix.
Any ideas?
Thanks
Andy
PS - incidentally, this issue is reintroduced by the December Rollup KB3013769

Hi,
Just in case anyone trips over this post after having this issue and not finding the answer.
Here it is, it took a paid support call to MS but the answer is......... it's by design.
The key part here is Windows 8.1 Professional vs Windows 8.1 Enterprise
Prior to these updates, the policy to apply start screen layout via policy worked on Professional and Enterprise.
The fact it did work on Processional was a BUG, it was ONLY intended to work in Enterprise.
The update rollups fix the bug, and hence break a previously working solution for 8.1 Professional users.
The fixes are either the workaround I noted above (copying in file) or changing to 8.1 Enterprise.
Just an additional note on my workaround, if you are using a login script to copy the file, do it is a logoff script instead. The reason is that if you have it as a login script and a brand new user logs in, the profile creation process has a bit of a fit
as you have copied in part of a profile, so instead of seeing the 'Hi...... We're setting things up for you.....' part, the PC just sits for about 5-10 mins and then eventually logs in.
If you set it to a logoff script then the login processes normally, even for brand new users, and the file copies without a hitch on logoff. It takes an extra login for brand new users to see the screen layout but hey, its better than a 10min first login.
So, no fix from MS, as the fix is the reason for the break in functionality.
Yes, by the letter of the policy it is correct, but we have been robbed of a perfectly working piece of functionality that some people may have been using extensively.
Thanks

Folder shortcuts are not included in Start Screen Layout GPO, RDS 2012 R2

Hi,
I've recently installed Remote Desktop Services 2012 R2 and i'm having some trouble with the Start Screen Layout GPO. The application icons that i've included are being regenerated on the users start screens but not the folder shortcuts, even though
they are included in the .XML layout file. Does anybody know if there is a way to get them to show up to? Here is the contents of the .XML file.
<?xml version="1.0"?>
-<launcher version="2">
-<view name="Start">
-<group>
<tile FencePost="0" size="square150x150" AppID="{941AD39E-2520-4774-82ED-2E803866C201}\Dep.lnk"/>
<tile FencePost="0" size="square150x150" AppID="{60B44F4C-FD27-4FA7-9BE4-4192D50847F0}\Documents"/>
<tile FencePost="0" size="square150x150" AppID="Microsoft.InternetExplorer.Default"/>
<tile FencePost="0" size="square150x150" AppID="{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\Adobe\Reader 11.0\Reader\AcroRd32.exe"/>
</group>
-<group name="Office">
<tile FencePost="0" size="square150x150" AppID="{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\Microsoft Office\Office14\OUTLOOK.EXE"/>
<tile FencePost="0" size="square150x150" AppID="{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\Microsoft Office\Office14\EXCEL.EXE"/>
<tile FencePost="0" size="square150x150" AppID="{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\Microsoft Office\Office14\WINWORD.EXE"/>
<tile FencePost="0" size="square150x150" AppID="{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\Microsoft Office\Office14\POWERPNT.EXE"/>
</group>
-<group>
<tile FencePost="0" size="wide310x150" AppID="Microsoft.Windows.Desktop"/>
</group>
</view>
</launcher>
The links that don't show up on the user start screens are \Dep.ink and \Documents
Any help greatly apreciated!

Hi,
In your case, you can try to edit “Start Screen Layout” setting under below mention path.
User Configuration \ Policies \ Administrator Templates \ Start Menu and Taskbar
Please refer below article which helps to guide you in better way.
1. A New Windows 8.1 Enterprise feature: Start screen Control
2. Customizing the Windows 8.1 Start Screen? Don’t follow Microsoft’s guidance
Hope it helps!
Thanks,
Dharmesh

Start Screen Layout missing icon

One of the program I pinned to the Start Screen is missing. The program that's missing is the Opera browser. I created a custom start screen layout with all the programs I want in different namegroups. I put the AppsFolderLayout.bin file in the Default profile.
I am preparing a Windows 8.1 image. I do this so all users can have the same Start Screen layout. The first time I did this, it worked fine. I logged in as new users in the computers and I see all the programs I pinned to the Start Screen.
Right now, I'm doing the exact thing for a new Windows 8.1 image. I placed the AppsFolderLayout.bin file in the Default profile. I logged in as a new user and many. The Start Screen is empty, other than the Desktop and Computer tiles, since it's a new
Windows install, The programs that are pinned are not installed yet. When I install the programs, the tiles will populate to the Start Screen. All of them worked, except for the Opera browser. The Opera browser is not showing the Start Screen. I made sure
the program is pinned before I exported the layout. The program is installed for all user.
I checked the program is installed when I log in as different users. I
even deleted the user profiles that was installed on and logged in again, the icon is still not there.
Would a new version of the browser cause this issue? I even installed the version I had when I first had it working and it didn't work. Let me know what would cause this issue.

Hi,
Please use the command “get-startapps” in powershell.
We have tested. Every time we reinstall the Opera, the AppID will change.
The AppID is the identifier of app. If it changes automatically, the Operating System can’t customize Start screen by different AppID.
Please refer to the following article to customize Windows 8.1 start screen.
Customize Windows 8.1 Start Screens by Using Group Policy
http://technet.microsoft.com/en-us/library/dn467928.aspx
If you change the AppID in xml file to match the ID in the PC you want to customize Start screen. The Opera will show out.
Best Regard,

Source Safe causing LabVIEW Quick Start Screen to not appear after closing open vi windows?

Hey All,
We've recently implemented Source Safe version control for LabVIEW on XP and I've noticed that LabVIEW is hanging between closing open vi windows and showing the Quick Start Screen. The usual pattern is for the Quick Start window to appear after the last open vi window is closed. Instead the vi window is closed, the tab at the bottom of the screen says debug development and the Quick Start Screen does not appear, the tab does not read "Getting Started."
I think it is a LabVIEW <--> Source Safe issue when I do a Task Manager Exit on the LabVIEW process that I sometimes see a dialog box asking if I want to save changes in memory to disc and those files are not checked out. But it is too late at that point to do anything as XP clobbers the application before I can do anything.
Anyone else have this issue?
Message Edited by Drewski on 05-30-2008 02:28 PM

What LabVIEW version do you use?
I have used SourceSafe in every version from 8.0, and in the way some bugs are resolved.
Ton
Free Code Capture Tool! Version 2.1.3 with comments, web-upload, back-save and snippets!
Nederlandse LabVIEW user groep www.lvug.nl
My LabVIEW Ideas
LabVIEW, programming like it should be!

Start screen does not exist in batch input data

I'm using .NET Connector calling Rfc_Call_Transaction funtion throught a proxy, i stablished all the params as you can see in the code below, but i get the message cited in the subject 'Start screen does not exist in batch input data'.
What do you think is happening? or Where can i get the samples needed for perform this type of request?
        private BDCDATA FillBDCDATA(string Program,
                                    string Dynbegin,
                                    string Dynpro,
                                    string Fnam,
                                    string Fval)
            BDCDATA st_DATA = new BDCDATA();
            st_DATA.Program = Program;
            st_DATA.Dynbegin = Dynbegin;
            st_DATA.Dynpro = Dynpro;
            st_DATA.Fnam = Fnam;
            st_DATA.Fval = Fval;
            return st_DATA;
        private void button3_Click(object sender, System.EventArgs e)
            SAPProxy proxy = null;
            try
                proxy = new SAPProxy("ASHOST=" + txtHost.Text +
                    " SYSNR=" + txtSysnr.Text +
                    " CLIENT=" + txtMand.Text +
                    " LANG="   + txtLang.Text +
                    " USER="   + txtUser.Text +
                    " PASSWD=" + txtPass.Text);
            catch(Exception excpt)
                txtMsg.Text = excpt.Message;
            if (proxy == null)
                return;
            BDCDATATable tblBDCDATA = new BDCDATATable();
            MESSAGEINF infMessage = new MESSAGEINF();
            //BDCDATA st_DATA = new BDCDATA();
            tblBDCDATA.Add(FillBDCDATA("SAPMKBUA", "0111", "0111", "BDC_OKCODE", "/00"));
            tblBDCDATA.Add(FillBDCDATA("SAPMKBUA", "0111", "0111", "BPDY-BLDAT", "30.12.2004"));
            tblBDCDATA.Add(FillBDCDATA("SAPMKBUA", "0111", "0111", "BPDY-VERSN", "0"));
            tblBDCDATA.Add(FillBDCDATA("SAPMKBUA", "0111", "0111", "FMPS-FIKRS", "ente"));
            tblBDCDATA.Add(FillBDCDATA("SAPMKBUA", "0111", "0111", "BPDY-JAHR", "2005"));
            proxy.Rfc_Call_Transaction("FM9J","", out infMessage, ref tblBDCDATA);
            txtMsg.Text = infMessage.Msgtx;

Jose,
I imagine you are passing, for the Dynbegin parameter of the private method FillBDCDATA, invalid values.
Why don't you try this way:
tblBDCDATA.Add(FillBDCDATA("SAPMKBUA", "X", "0111", " "," "));
tblBDCDATA.Add(FillBDCDATA(" ", " ", " ", "BDC_OKCODE", "/00"));
tblBDCDATA.Add(FillBDCDATA(" ", " ", " ", "BPDY-BLDAT", "30.12.2004"));
tblBDCDATA.Add(FillBDCDATA(" ", " ", " ", "BPDY-VERSN", "0"));
tblBDCDATA.Add(FillBDCDATA(" ", " ", " ", "FMPS-FIKRS", "ente"));
tblBDCDATA.Add(FillBDCDATA(" ", " ", " ", "BPDY-JAHR", "2005"));
I hope I could help you.
Regards,
Daniel Carvalho

Windows Embedded 8.1 Industry Pro - Start Screen Layout Deployment GPO

We have recently finished signing our Microsoft Customer License Agreement (CLA) for reselling Windows on a diagnostic tool for our industry. We developed our software with Windows Embedded 8.1 Industry Pro from an MSDN source. Installed from MSDN, configured,
put 20 mobile devices in the field for testing, and pushed updates to them. As a part of this we were able to remotely modify the start screen and add new icons for the newly installed software. Now that the MS CLA is complete we have received the official
Embedded 8.1 Industry Pro OPK from Microsoft Ireland and recreated our setup. So far all but one function works as expected. We are finding that we are unable to modify the Start Screen Layout via XML file or any other method as we did with the MSDN setup.
I have reviewed HKLM/Software/Microsoft/Windows NT/CurrentVersion for build and product ID information to find the MSDN install and the OPK install both show the same information other than install date. The DigitalIDs are different though.
We needed the Embedded version for the Unified Write Filter and after being able to modify the start screen layout with our MSDN copy all looked great. After not being able to modify the start screen layout with our official OPK copy of 8.1 we've done additional
searching to find: https://social.technet.microsoft.com/Forums/en-US/71f0be7a-43af-4ca3-a068-f99b92217e2a/windows-81-start-screen-layout-gpo?forum=w81previtpro Which plainly says that 8.1 PRO is NOT able to do this.
Is this correct?
If so why might our MSDN installation have worked while the OPK installation does not?
Why wouldn't an EMBEDDED INDUSTRY PRO version not allow for such a simple function? People using this version I would image would require the most flexibility and customizable options versus another, no?
If this advanced and highly modifiable version of 8.1 pro cannot do this then how might it be recommended to accomplish this goal?
Please help as this may soon push our development out much further.
Thanks in advance,
Joey

Hi HVACjoe
For general system start screen control is supported in the Windows 8.1 Enterprise operating system, the Windows RT 8.1 operating system with sideloading enabled, and in all editions of the Windows Server
2012 R2 operating system. Start screen control is not supported in the Windows 8.1 Pro operating system.
As Tripredacus mentioned that Windows Embedded support is not typically handled on the public forums and Microsoft Developer Network distributes special editions of Windows for testing and development purposes, those are not general purpose licenses and
the validity of the key has a time limit, we could not access resources from MSDN for test.
We suggest you look for help from your Embedded Partner or MSDN forum
https://social.msdn.microsoft.com/Forums/en-US/home
You could get more information from following link about start screen lay out.
https://technet.microsoft.com/en-us/library/dn467928.aspx
Regards

List all GPOs applied to every user in the AD

Hi,
I would like to generate a report with the GPOs applied to every user and every computer in the AD. The output will be like:
users_gpo.csv:
user1;gpo1,gpo2;gpo3
computers_gpo.csv:
computer1;gpo4,gpo5,gpo6
How I can do it using Powershell or some automatic tool?.
I tried it with gpresult but it only works if the user has a profile on the target system.
Thanks!

Finally, It works for computers:
Write-Host "Computers" -ForegroundColor Green
$computers = Get-ADComputer -Filter * -Properties 'Name' | Select 'Name'
$namespace = "root\rsop\computer"
foreach ($computer in $computers){
    Write-host $computer.Name -ForegroundColor Yellow
    Try {
        Get-WmiObject -Namespace $namespace -Class RSOP_GPLink -Filter "AppliedOrder <> 0" -ComputerName $computer.Name -ErrorAction Stop | Foreach-Object {
            $GPO_FILTER = $_.GPO.ToString().Replace("RSOP_GPO.","")
            #$linkOrder = $_.linkOrder
            #$appliedOrder = $_.appliedOrder
            $Enabled = $_.Enabled
            #$noOverride = $_.noOverride
            #$SourceOU = $_.SOM
            #$somOrder = $_.somOrder
            if ($enabled){
                Get-WmiObject -Namespace $namespace -Class RSOP_GPO -Filter $GPO_FILTER -ComputerName $computer.Name -ErrorAction Stop | Foreach-Object {
                    Write-host "`t" $_.Name
    Catch [System.UnauthorizedAccessException]{
        Write-host "Unauthorized Access" -ForegroundColor Red
    Catch [Exception]{
        if ($_.Exception.GetType().Name -eq "COMException") {
            Write-host "`tServer unavailable" -ForegroundColor Red
    Write-host ""
But It doesn't work for users:
Write-Host "Users" -ForegroundColor Green
$users = Get-ADUser -Filter * -Properties 'Name' | Select 'Name', 'SID'
$namespaceBase = "root\rsop\user\"
foreach ($user in $users){
    Write-host $user.Name -ForegroundColor Yellow
    $namespace = $namespaceBase + $user.SID -replace '-', '_'
    Write-host $namespace -ForegroundColor Gray
    Try {
        Get-WmiObject -Namespace $namespace -Class RSOP_GPLink -Filter "AppliedOrder <> 0" -ErrorAction Stop | Foreach-Object {
            $GPO_FILTER = $_.GPO.ToString().Replace("RSOP_GPO.","")
            Write-host "`t" $GPO_FILTER
            #$linkOrder = $_.linkOrder
            #$appliedOrder = $_.appliedOrder
            $Enabled = $_.Enabled
            #$noOverride = $_.noOverride
            #$SourceOU = $_.SOM
            #$somOrder = $_.somOrder
            if ($enabled){
            Get-WmiObject -Namespace $namespace -Class RSOP_GPO -Filter $GPO_FILTER -ErrorAction Stop | Foreach-Object {
                    Write-host "`t" $_.Name
    Catch [System.UnauthorizedAccessException]{
        Write-host "Unauthorized Access" -ForegroundColor Red
    Catch {
        Write-Host "`t$_" -ForegroundColor Red
    Write-host ""
It is working for some user but not for all, part of the output is:
test test. test
root\rsop\user\S_1_5_21..._1231
LocalGPO
Default Domain Policy
gpoguy gpoguy
root\rsop\user\S_1_5_21_..._1232
Invalid namespace
Why I get "Invalid namespace"?
Thanks Martin!

Start Screen Layout with Windows 8.1

Hi Team,
Just wondering if below Technet article for capture and deploy start screen layout applies to windows 8.1\windows 8.1 update 1?
http://technet.microsoft.com/library/jj134269#BKMK_AppFolder
As far as i understand these 3 methods are good with windows 8.0 but with Windows 8.1 , capture layout with
Export-StartLayout and using GP is applicable. Any pointers will be appreciated.
Regards,

check these:
http://stealthpuppy.com/customizing-the-windows-8-1-start-screen-dont-follow-microsofts-guidance/
http://blogs.technet.com/b/canitpro/archive/2013/12/19/step-by-step-windows-8-1-start-screen-customization-via-powershell.aspx
Don
(Please take a moment to "Vote as Helpful" and/or "Mark as Answer", where applicable.
This helps the community, keeps the forums tidy, and recognises useful contributions. Thanks!)

Folder Redirection policy is not applied to a user, when the server target is changed, but works after resetting the windows profile.

Folder Redirection policy is not applied to a user, when the server target is changed.
After server target is changed via group policy, when user login (roaming profile)first time, the the new server target has not been applied, instead it's pointing to the old folder redirection path.
But if we reset the windows profile (roaming ), the new folder redirection works, can you please specify a solutions that the new folder redirection works when the user login for the first time. so it reduce the time on resetting users profile.
it seems that we need to delete the old folder redirection path from the user profile (roaming user profile) via group policy or similar solutions..
Many Thanks

> But when the specific users login they all get the same error, it
Is the old server removed from the domain? Seems so - or some other
authentication related issue, hard to tell from here...
> seems that the roaming user profiles still keeps the old server details,
Yes - if you change redirection targets, FR moves content from old to
new, and only if this ends sucessfully, it will update the redirection
target.
Make the old redirection target accessible to the user and you'll be fine.
Martin
Mal ein
GUTES Buch über GPOs lesen?
NO THEY ARE NOT EVIL, if you know what you are doing:
Good or bad GPOs?
And if IT bothers me - coke bottle design refreshment :))

Print preferences do not apply to CRM users

When Print Preferences are set for a document type (for example, print 2 copies on Add), they are applied to Professional users, but not to CRM users. While it seems reasonable to restrict CRM users from changing the print preferences, these are meant to be company-wide defaults and should apply to all users. I have verified with SAP support that CRM users are not affected by settings in the print preferences. We are currently using a work-around of setting the preferences in User Defaults for these users, but it is time-consuming and could be neglected when adding a new user. There is no reason why system defaults should not apply to CRM users.

Hi,
I agree with Meinolf. Besides, we can try to configure this setting under Computer Configuration and apply the GPO to the terminal server, in which way all users logging onto
the server will apply the setting.
Regarding how to add trusted sites, the following article can be referred to as reference.
How to configure Internet Explorer security zone sites using group polices
http://blogs.msdn.com/b/askie/archive/2012/06/05/how-to-configure-internet-explorer-security-zone-sites-using-group-polices.aspx
Best regards,
Frank Shen

RH 11 Imported Screen Layout Not Displaying in Gallery

Began using a trial of RH11 today and am experimenting with Responsive HTML5. I am trying to understand how to use a newly downloaded/imported screen layout while setting up a new single source Responsive HTML5 layout. I downloaded the screen layout from the Adobe site, which was a single file in a zip file. I unzipped the layout file to the same download folder and imported the extracted file into the Screen Layouts folder in the Project Set-up pod within RH11. Then while working in the Responsive HTML5 Settings window, clicked Gallery and expected to see the newly imported layout as an option there. The layout does not display. The layout name does display under the Screen Layouts folder folder in Project Set-up though.
How do I get the layout to display in the Gallery? I am wondering if I extracted the layout file to the wrong location? Does it have to be extracted to a folder within my project files such as the SSL folder or within the folder to which the RH11 trial software was installed? I assumed the Import process in Project Set-up would copy the layout file to wherever it was needed for it to work in Robohelp.
4/3 addition to original post -- adding a picture for reference regarding where I can't get the new layout to show. WIthout it showing here, how would I go about assigning the layout to my single source layout?
Message was edited by: KFarrelly

Thank you William. After following those steps, I was able to apply a newly downloaded .slz to my desired Responsive HTML5 single source layout.
While I am still not successful in getting the new screen layout to show in the gallery (in window accessed from B below), I was able to see the new screen layout in the Select drop-down list of the Responsive HTML Settings window -- thus mission acomplished! I made my selection from that list to get the desired, new screen layout applied to my project. Thanks so much!

Group Policy Pref - Mapped Drives Not Applying to One User

Hi All,
I’m new to this list, so please excuse any etiquette slip ups. 
I have three users at a site. All their machines are running Windows XP Service Pack 3 and have client side extensions installed. I created a group policy to map their default drives using GP User Preferences.
Each of the drives is set to "update".
As an example of the policy created XML is as follows:
<Drive clsid="{935D1B74-9CB8-4e3c-9914-7DD559B7A417}" name="H:" status="H:"
image="2" changed="2009-11-25 05:13:58"
uid="{8A44D2F4-AAE5-4F43-AEEC-D36F08EA619C}" desc="Maps the users H drive to
ServerName\users$\%username%" bypassErrors="1"><Properties action="U"
thisDrive="NOCHANGE" allDrives="NOCHANGE" userName=""
path="\\ServerName\users$\%username%" label="Home (ServerName)"
persistent="1" useLetter="1" letter="H"/></Drive>
and
<Drive clsid="{935D1B74-9CB8-4e3c-9914-7DD559B7A417}" name="J:" status="J:"
image="0" changed="2009-11-30 03:52:58"
uid="{535CD462-A45D-4363-ADA1-2316D5ECC703}" desc="Maps J drive for users to
\\ServerName\apps" bypassErrors="1"><Properties action="C"
thisDrive="NOCHANGE" allDrives="NOCHANGE" userName=""
path="\\ServerName\Apps" label="Apps (ServerName)" persistent="1"
useLetter="1" letter="J"/></Drive>
The group policy is applied to an OU for that site.
All three users are in the same OU.
All three users are also in the same “xxsitecode Users” group.
2 of the users log into their pc and get the mapped drives with no issue, but one user doesn’t.
There are no other login scripts and the user has no manually mapped drives.
He does have a H drive mapped using the profile field in his AD object as a temp measure. But every 90 mins any other manually mapped drives are removed by the policy.
We don’t use roaming profiles
To trouble shoot I have tried
-    Reinstalling client side extensions
-    Re-joining the pc to the domain
-    Running gpupdate from the command prompt to see if any event logs are generated (none are)
-    Manually mapping the drives to make sure there is network access etc – I can manually map them/he can access them.
-    Creating the user a new account, when he logs in using that account he gets his mapped drives on all PC’s
-    Getting the user to log into a different pc, when he does this he doesn’t get his drives – so it’s not his machine or profile
-    Manually checking the security on the user object in AD against one of the users who gets their drives mapped
I'm sure the GP is fine because it works for two other users and the testing isolates his user account as the issue.
The Policy I’m having issues with is xxxx Mapped Drives/ Printers
I have posted this issue on the tech net GP discussion groups page, but haven’t had any replies.
Any suggestions would be appreciated.
Simone

What's interesting is that I applied a new GP to users - it has one policy setting and one preferences setting. He only gets the policy setting.. aka he gets the wallpaper but not the homepage.
Also, Jorke asked me to post the gpresult /z .
Microsoft (R) Windows (R) XP Operating System Group Policy Result tool v2.0
Copyright (C) Microsoft Corp. 1981-2001
Created On 10/02/2010 at 2:19:34 PM
RSOP results for DOMAIN\USER on MACHINENAME : Logging Mode
OS Type:                     Microsoft Windows XP Professional
OS Configuration:            Member Workstation
OS Version:                  5.1.2600
Domain Name:                 DOMAIN
Domain Type:                 Windows 2000
Site Name:                   SITECODE
Roaming Profile:
Local Profile:               C:\Documents and Settings\USER.DOMAIN
Connected over a slow link?: No
COMPUTER SETTINGS
    CN=MACHINENAME,OU=Laptops,OU=SITECODE,DC=DOMAIN,DC=com,DC=au
    Last time Group Policy was applied: 10/02/2010 at 1:06:38 PM
    Group Policy was applied from:      XXXXXADC.DOMAIN.com.au
    Group Policy slow link threshold:   500 kbps
    Applied Group Policy Objects
        Allow Remote Assistance
        au-mdwsus
        Default Domain Policy
        Legal Notice
        Proxy Settings
        Logon as service, operating system
        AU-WSUS
        Desktop Background & Home Page
        Reg Permissions for default desktop
        Local Admin & Local Power Users
    The following GPOs were not applied because they were filtered out
        SITECODE Mapped Drives/ Printers
            Filtering: Not Applied (Empty)
        Local Group Policy
            Filtering: Not Applied (Empty)
        AVD Rollout
            Filtering: Disabled (GPO)
    The computer is a part of the following security groups:
        BUILTIN\Administrators
        Everyone
        Debugger Users
        BUILTIN\Users
        NT AUTHORITY\NETWORK
        NT AUTHORITY\Authenticated Users
        MACHINENAME$
        Domain Computers
        CERTSVC_DCOM_ACCESS
    Resultant Set Of Policies for Computer:
        Software Installations
            N/A
        Startup Scripts
            GPO: Desktop Background & Home Page
                Name:         image.bat
                Parameters:
                LastExecuted: 7:55:34 PM
                Name:         swiftdesktop.vbs
                Parameters:
                LastExecuted: 7:55:35 PM
        Shutdown Scripts
            N/A
        Account Policies
        Audit Policy
        User Rights
        Security Options
        Event Log Settings
        Restricted Groups
        System Services
        Registry Settings
        File System Settings
        Public Key Policies
            N/A
        Administrative Templates
            GPO: Allow Remote Assistance
                Setting: Software\policies\Microsoft\Windows NT\Terminal Services
                State:   Enabled
            GPO: AU-WSUS
                Setting: Software\Policies\Microsoft\Windows\WindowsUpdate\AU
                State:   Enabled
            GPO: Allow Remote Assistance
                Setting: Software\policies\Microsoft\Windows NT\Terminal Services\RAUnsolicit
                State:   Enabled
            GPO: Allow Remote Assistance
                Setting: Software\policies\Microsoft\Windows NT\Terminal Services
                State:   Enabled
            GPO: Allow Remote Assistance
                Setting: Software\policies\Microsoft\Windows NT\Terminal Services\RAUnsolicit
                State:   Enabled
            GPO: Allow Remote Assistance
                Setting: Software\policies\Microsoft\WindowsFirewall\DomainProfile\GloballyOpenPorts
                State:   Enabled
            GPO: Allow Remote Assistance
                Setting: Software\policies\Microsoft\WindowsFirewall\DomainProfile\GloballyOpenPorts\List
                State:   Enabled
            GPO: Allow Remote Assistance
                Setting: Software\policies\Microsoft\WindowsFirewall\DomainProfile\AuthorizedApplications\List
                State:   Enabled
            GPO: AU-WSUS
                Setting: Software\Policies\Microsoft\Windows\WindowsUpdate\AU
                State:   Enabled
            GPO: Allow Remote Assistance
                Setting: Software\policies\Microsoft\Windows NT\Terminal Services\RAUnsolicit
                State:   Enabled
            GPO: Allow Remote Assistance
                Setting: Software\policies\Microsoft\WindowsFirewall\DomainProfile\AuthorizedApplications\List
                State:   Enabled
            GPO: Allow Remote Assistance
                Setting: Software\policies\Microsoft\Windows NT\Terminal Services\RAUnsolicit
                State:   Enabled
            GPO: Allow Remote Assistance
                Setting: Software\policies\Microsoft\Windows NT\Terminal Services\RAUnsolicit
                State:   Enabled
            GPO: AU-WSUS
                Setting: Software\Policies\Microsoft\Windows\WindowsUpdate\AU
                State:   Enabled
            GPO: Allow Remote Assistance
                Setting: Software\policies\Microsoft\Windows NT\Terminal Services
                State:   Enabled
            GPO: au-mdwsus
                Setting: Software\Policies\Microsoft\Windows\WindowsUpdate
                State:   Enabled
            GPO: Allow Remote Assistance
                Setting: Software\policies\Microsoft\Windows NT\Terminal Services\RAUnsolicit
                State:   Enabled
            GPO: Allow Remote Assistance
                Setting: Software\policies\Microsoft\Windows NT\Terminal Services\RAUnsolicit
                State:   Enabled
            GPO: au-mdwsus
                Setting: Software\Policies\Microsoft\Windows\WindowsUpdate\AU
                State:   Enabled
            GPO: Allow Remote Assistance
                Setting: Software\policies\Microsoft\Windows NT\CurrentVersion\Winlogon
                State:   Enabled
            GPO: Allow Remote Assistance
                Setting: Software\policies\Microsoft\Windows NT\Terminal Services
                State:   Enabled
            GPO: Allow Remote Assistance
                Setting: Software\policies\Microsoft\WindowsFirewall\DomainProfile\AuthorizedApplications\List
                State:   Enabled
            GPO: AU-WSUS
                Setting: Software\Policies\Microsoft\Windows\WindowsUpdate\AU
                State:   Enabled
            GPO: Allow Remote Assistance
                Setting: Software\policies\Microsoft\Windows NT\Terminal Services\RAUnsolicit
                State:   Enabled
            GPO: Allow Remote Assistance
                Setting: Software\policies\Microsoft\WindowsFirewall\DomainProfile\AuthorizedApplications
                State:   Enabled
            GPO: AU-WSUS
                Setting: Software\Policies\Microsoft\Windows\WindowsUpdate\AU
                State:   Enabled
            GPO: au-mdwsus
                Setting: Software\Policies\Microsoft\Windows\WindowsUpdate
                State:   Enabled
            GPO: Allow Remote Assistance
                Setting: Software\policies\Microsoft\Windows NT\Terminal Services
                State:   Enabled
            GPO: Desktop Background & Home Page
                Setting: Software\Policies\Microsoft\Internet Explorer\Security
                State:   Enabled
            GPO: Allow Remote Assistance
                Setting: Software\policies\Microsoft\Windows NT\Terminal Services
                State:   Enabled
            GPO: AU-WSUS
                Setting: Software\Policies\Microsoft\Windows\WindowsUpdate
                State:   Enabled
            GPO: AU-WSUS
                Setting: Software\Policies\Microsoft\Windows\WindowsUpdate\AU
                State:   Enabled
            GPO: Allow Remote Assistance
                Setting: Software\policies\Microsoft\Windows NT\Terminal Services\RAUnsolicit
                State:   Enabled
            GPO: Allow Remote Assistance
                Setting: Software\policies\Microsoft\WindowsFirewall\DomainProfile\AuthorizedApplications
                State:   Enabled
            GPO: Allow Remote Assistance
                Setting: Software\policies\Microsoft\WindowsFirewall\DomainProfile\RemoteAdminSettings
                State:   Enabled
            GPO: Allow Remote Assistance
                Setting: Software\policies\Microsoft\Windows NT\Terminal Services
                State:   Enabled
            GPO: AU-WSUS
                Setting: Software\Policies\Microsoft\Windows\WindowsUpdate\AU
                State:   Enabled
            GPO: au-mdwsus
                Setting: Software\Policies\Microsoft\Windows\WindowsUpdate
                State:   Enabled
            GPO: AU-WSUS
                Setting: Software\Policies\Microsoft\Windows\WindowsUpdate\AU
                State:   Enabled
            GPO: Allow Remote Assistance
                Setting: Software\policies\Microsoft\WindowsFirewall\DomainProfile\RemoteAdminSettings
                State:   Enabled
            GPO: Allow Remote Assistance
                Setting: Software\policies\Microsoft\Windows NT\Terminal Services\RAUnsolicit
                State:   Enabled
            GPO: au-mdwsus
                Setting: Software\Policies\Microsoft\Windows\WindowsUpdate
                State:   Enabled
            GPO: Allow Remote Assistance
                Setting: Software\policies\Microsoft\WindowsFirewall\DomainProfile\AuthorizedApplications\List
                State:   Enabled
            GPO: Allow Remote Assistance
                Setting: Software\policies\Microsoft\WindowsFirewall\DomainProfile\AuthorizedApplications\List
                State:   Enabled
            GPO: Allow Remote Assistance
                Setting: Software\policies\Microsoft\Windows NT\Terminal Services
                State:   Enabled
USER SETTINGS
    CN=Matthew Luhrs,OU=Users,OU=SITECODE,DC=DOMAIN,DC=com,DC=au
    Last time Group Policy was applied: 10/02/2010 at 1:54:53 PM
    Group Policy was applied from:      XXXXXADC.DOMAIN.com.au
    Group Policy slow link threshold:   500 kbps
    Applied Group Policy Objects
        Allow Remote Assistance
       **** SITECODE Mapped Drives/ Printers - has Gp Pref's that should apply
        Default Domain Policy
        Proxy Settings
        **** Desktop Background & Home Page - has Gp Pref's that should apply
        Local Admin & Local Power Users
    The following GPOs were not applied because they were filtered out
        AU-WSUS
            Filtering: Not Applied (Empty)
        Legal Notice
            Filtering: Disabled (GPO)
        Reg Permissions for default desktop
            Filtering: Not Applied (Empty)
        Logon as service, operating system
            Filtering: Not Applied (Empty)
        Local Group Policy
            Filtering: Not Applied (Empty)
        au-mdwsus
            Filtering: Not Applied (Empty)
        AVD Rollout
            Filtering: Disabled (GPO)
    The user is a part of the following security groups:
        Domain Users
        Everyone
        Offer Remote Assistance Helpers
        BUILTIN\Administrators
        BUILTIN\Users
        NT AUTHORITY\INTERACTIVE
        NT AUTHORITY\Authenticated Users
        LOCAL
        Computer Account Operators
        Internet Users
        SITECODE Users
        DOMAIN-Public Folders Administrators
        All Email Users
        DOMAINSWIFTEMAIL
        Domain Admins
        Offer Remote Assistance Helpers
        WSUS Administrators
        DHCP Administrators
        CERTSVC_DCOM_ACCESS
    Resultant Set Of Policies for User:
        Software Installations
            N/A
        Public Key Policies
            N/A
        Administrative Templates
            N/A
        Folder Redirection
            N/A
        Internet Explorer Browser User Interface
            GPO: Proxy Settings
                Large Animated Bitmap Name:      N/A
                Large Custom Logo Bitmap Name:   N/A
                Title BarText:                   N/A
                UserAgent Text:                  N/A
                Delete existing toolbar buttons: No
        Internet Explorer Connection
            HTTP Proxy Server:   Proxy:port
            Secure Proxy Server: Proxy:port
            FTP Proxy Server:    Proxy:port
            Gopher Proxy Server: Proxy:port
            Socks Proxy Server: Proxy:port
            Auto Config Enable: Yes
            Enable Proxy:        Yes
            Use same Proxy:      Yes
        Internet Explorer URLs
            GPO: Proxy Settings
                Home page URL:           N/A
                Search page URL:         N/A
                Online support page URL: N/A
        Internet Explorer Security
            Always Viewable Sites:     N/A
            Password Override Enabled: False
            GPO: Proxy Settings
                Import the current Content Ratings Settings:      No
                Import the current Security Zones Settings:       No
                Import current Authenticode Security Information: No
                Enable trusted publisher lockdown:                No
        Internet Explorer Programs
            GPO: Proxy Settings
                Import the current Program Settings: No

User Group Policy Settings not applied to new user profiles at first logon

Good Afternoon,
We have an issue that occurs to a new user when they first log on to their machines. They log on and a new profile creates from the Default User Profile. We can see that a number of our Group Policy Settings applied as "User Configuration" are
not applying.A log off and back on is required before the policies apply.
Any thoughts to this behaviour please?
Regards
LeeB
Lee Bowman MCITP MCTS

Hi,
How about your problem now? How many system encounter this problem? Is all policy couldn't be applied? Is there any feedback when using gpresult to check policy applied status?
As Group Policy applies after user identity authentication, generally speaking, user logoff and back doesn't helpful with this problem.
When this problem occures, have you checked event log if it identify this problem?
Roger Lu
TechNet Community Support

Purchasing Info record screen layout not working for ME11

Dear All Experts,
I got requirement where GR Based IV and GR should be required for one vendor. So htought to create PIR from where I can make these two fields DEFAULT. So I went to table T162 from where I can make these two fields mandatory for ME11.
I followed the path : SPRO - Materials Management - Purchasing - Prcahsing Info Record - Define Screen Layout for making fields mandatory for ME11.
It is not working at all, as well I can see rest irrelevant fields which are not of my use are required. Have I missed any piece of configuration somewhere in MM ?
Experts guidance from forum will be very much appreciable.
Regards,
Revati Joshi.

HI,
as you know we can create purchasing info record manually as well as automatic at time of Po creation
If you mark it in ME11 manually it will be helpful to you
or you can mark its required field in Vendor master record as well for your vendor account group in following path.
Logistic general - Bunisess partner -vendors > control > define accont groups and field selection > select your account goups and click on details and double click on purchase data and check for "GR based invoice verification" and mark required field
Regards
kailas ugale

Start Screen Layout not applying to every user

Similar Messages

Maybe you are looking for