Windows failed to apply the Group Policy Printers settings

Windows failed to apply the Group Policy Printers settings. Group Policy Printer
s settings might have its own log file.
only when I edit any setting on preferences at computer or users.  
Ahmed Zidan Network Administrator

Hi Ahmed,
>>Windows failed to apply the Group Policy Printers settings. Group Policy Printer
>>s settings might have its own log file.
Were we using GPP Printer extension to deploy printers? Did we deploy printers to user accounts or computer accounts? Besides,what printer did we depoly via GPP, local printer, share printer, or TCP/IP printer? Here, we can check event
logs in Event Viewer to see if more information regarding this issue can be found. Besides, we can also run command
gpresult/h gpreport.html to further check how group policy settings were applied. If necessary, we can enable GPP Printer debug logging for troubleshooting the issue.
To enable GPP Printer debug logging, we need to enable the following setting:
Computer Configuration > Policies > Administrative Templates > System > Group Policy > Logging and Tracing>Configure printer preferences logging and tracing
Regarding how to enable GPP debug logging, the following article can be referred to for more information.
Enabling Group Policy Preferences Debug Logging using the RSAT
http://blogs.technet.com/b/askds/archive/2008/07/18/enabling-group-policy-preferences-debug-logging-using-the-rsat.aspx
Best regards,
Frank Shen

Similar Messages

  • Event ID 1085 on DC - Failed to Apply the Group Policy Local Users and Groups Settings

    I have a domain with 2 DCs.  The primary DC is running Server 2012 and is raising Event ID 1085 every 10 minutes and 20 seconds.
    Windows failed to apply the Group Policy Local Users and Groups settings. Group Policy Local Users and Groups settings might have its own log file. Please click on the "More information" link.
    System
    - Provider
    [ Name] Microsoft-Windows-GroupPolicy
    [ Guid] {AEA1B4FA-97D1-45F2-A64C-4D69FFFD92C9}
    EventID 1085
    Version 0
    Level 3
    Task 0
    Opcode 1
    Keywords 0x8000000000000000
    - TimeCreated
    [ SystemTime] 2014-10-20T20:09:03.706992400Z
    EventRecordID 130087
    - Correlation
    [ ActivityID] {FDDFB8C5-9ECF-41B9-B2B4-3AD0B345A37A}
    - Execution
    [ ProcessID] 1000
    [ ThreadID] 3280
    Channel System
    Computer SERVER.DOMAIN.NAME
    - Security
    [ UserID] S-1-5-18
    - EventData
    SupportInfo1 1
    SupportInfo2 4404
    ProcessingMode 0
    ProcessingTimeInMilliseconds 10343
    ErrorCode 183
    ErrorDescription Cannot create a file when that file already exists.
    DCName \\SERVER.DOMAIN.name
    ExtensionName Group Policy Local Users and Groups
    ExtensionId {17D89FEC-5C44-4972-B12D-241CAEF74509}
    Everything I look up for Event ID 1085 seems to be about a different cause.
    Any ideas?

    I enabled tracing on a domain gpo and I still get the error when running gpupdate /force .
    I'm also still getting Event 1085.  Here's the trace file.  I've anonymized the site/domain and the GUIDs.
    2014-10-21 11:16:54.003 [pid=0x3e8,tid=0xcd0] Entering ProcessGroupPolicyExLocUsAndGroups()
    2014-10-21 11:16:54.018 [pid=0x3e8,tid=0xcd0] SOFTWARE\Policies\Microsoft\Windows\Group Policy\{GUID-1}
    2014-10-21 11:16:54.018 [pid=0x3e8,tid=0xcd0] BackgroundPriorityLevel ( 0 )
    2014-10-21 11:16:54.018 [pid=0x3e8,tid=0xcd0] DisableRSoP ( 0 )
    2014-10-21 11:16:54.018 [pid=0x3e8,tid=0xcd0] LogLevel ( 2 )
    2014-10-21 11:16:54.018 [pid=0x3e8,tid=0xcd0] Command subsystem initialized. [SUCCEEDED(S_FALSE)]
    2014-10-21 11:16:54.065 [pid=0x3e8,tid=0xcd0] Background priority set to 0 (Idle).
    2014-10-21 11:16:54.065 [pid=0x3e8,tid=0xcd0] ----- Parameters
    2014-10-21 11:16:54.065 [pid=0x3e8,tid=0xcd0] CSE GUID : {GUID-1}
    2014-10-21 11:16:54.065 [pid=0x3e8,tid=0xcd0] Flags : ( X ) GPO_INFO_FLAG_MACHINE - Apply machine policy rather than user policy
    2014-10-21 11:16:54.065 [pid=0x3e8,tid=0xcd0] ( X ) GPO_INFO_FLAG_BACKGROUND - Background refresh of policy (ok to do slow stuff)
    2014-10-21 11:16:54.065 [pid=0x3e8,tid=0xcd0] ( ) GPO_INFO_FLAG_SLOWLINK - Policy is being applied across a slow link
    2014-10-21 11:16:54.065 [pid=0x3e8,tid=0xcd0] ( ) GPO_INFO_FLAG_VERBOSE - Verbose output to the eventlog
    2014-10-21 11:16:54.065 [pid=0x3e8,tid=0xcd0] ( ) GPO_INFO_FLAG_NOCHANGES - No changes were detected to the Group Policy Objects
    2014-10-21 11:16:54.065 [pid=0x3e8,tid=0xcd0] ( ) GPO_INFO_FLAG_LINKTRANSITION - A change in link speed was detected between previous policy application and current policy application
    2014-10-21 11:16:54.065 [pid=0x3e8,tid=0xcd0] ( ) GPO_INFO_FLAG_LOGRSOP_TRANSITION - A change in RSoP logging was detected between the application of the previous policy and the application of the current policy.
    2014-10-21 11:16:54.065 [pid=0x3e8,tid=0xcd0] ( X ) GPO_INFO_FLAG_FORCED_REFRESH - Forced Refresh is being applied. redo policies.
    2014-10-21 11:16:54.081 [pid=0x3e8,tid=0xcd0] ( ) GPO_INFO_FLAG_SAFEMODE_BOOT - windows safe mode boot flag
    2014-10-21 11:16:54.081 [pid=0x3e8,tid=0xcd0] ( ) GPO_INFO_FLAG_ASYNC_FOREGROUND - Asynchronous foreground refresh of policy
    2014-10-21 11:16:54.081 [pid=0x3e8,tid=0xcd0] Token (computer or user SID): S-1-5-18
    2014-10-21 11:16:54.081 [pid=0x3e8,tid=0xcd0] Abort Flag : Yes (0x313be090)
    2014-10-21 11:16:54.081 [pid=0x3e8,tid=0xcd0] HKey Root : Yes (0x80000002)
    2014-10-21 11:16:54.081 [pid=0x3e8,tid=0xcd0] Deleted GPO List : No
    2014-10-21 11:16:54.081 [pid=0x3e8,tid=0xcd0] Changed GPO List : Yes
    2014-10-21 11:16:54.081 [pid=0x3e8,tid=0xcd0] Asynchronous Processing : Yes
    2014-10-21 11:16:54.081 [pid=0x3e8,tid=0xcd0] Status Callback : No (0x00000000)
    2014-10-21 11:16:54.081 [pid=0x3e8,tid=0xcd0] WMI namespace : Yes (0x32273740)
    2014-10-21 11:16:54.081 [pid=0x3e8,tid=0xcd0] RSoP Status : Yes (0x320cc7f4)
    2014-10-21 11:16:54.081 [pid=0x3e8,tid=0xcd0] Planning Mode Site : (none)
    2014-10-21 11:16:54.081 [pid=0x3e8,tid=0xcd0] Computer Target : No (0x00000000)
    2014-10-21 11:16:54.081 [pid=0x3e8,tid=0xcd0] User Target : No (0x00000000)
    2014-10-21 11:16:54.081 [pid=0x3e8,tid=0xcd0] Calculated list relevance. [SUCCEEDED(S_FALSE)]
    2014-10-21 11:16:54.081 [pid=0x3e8,tid=0xcd0] ----- Changed - 0
    2014-10-21 11:16:54.081 [pid=0x3e8,tid=0xcd0] Options : ( ) GPO_FLAG_DISABLE - This GPO is disabled.
    2014-10-21 11:16:54.081 [pid=0x3e8,tid=0xcd0] ( ) GPO_FLAG_FORCE - Do not override the settings in this GPO with settings in a subsequent GPO.
    2014-10-21 11:16:54.081 [pid=0x3e8,tid=0xcd0] Options (raw) : 0x00000000
    2014-10-21 11:16:54.081 [pid=0x3e8,tid=0xcd0] Version : 19267878 (0x01260126)
    2014-10-21 11:16:54.081 [pid=0x3e8,tid=0xcd0] GPC : LDAP://CN=Machine,CN={GUID-2},CN=Policies,CN=System,DC=SITE,DC=DOMAIN
    2014-10-21 11:16:54.081 [pid=0x3e8,tid=0xcd0] GPT : \\SITE.DOMAIN\sysvol\SITE.DOMAIN\Policies\{GUID-2}\Machine
    2014-10-21 11:16:54.081 [pid=0x3e8,tid=0xcd0] GPO Display Name : Default Domain Policy
    2014-10-21 11:16:54.081 [pid=0x3e8,tid=0xcd0] GPO Name : {GUID-2}
    2014-10-21 11:16:54.081 [pid=0x3e8,tid=0xcd0] GPO Link : ( ) GPLinkUnknown - No link information is available.
    2014-10-21 11:16:54.081 [pid=0x3e8,tid=0xcd0] ( ) GPLinkMachine - The GPO is linked to a computer (local or remote).
    2014-10-21 11:16:54.081 [pid=0x3e8,tid=0xcd0] ( ) GPLinkSite - The GPO is linked to a site.
    2014-10-21 11:16:54.081 [pid=0x3e8,tid=0xcd0] ( X ) GPLinkDomain - The GPO is linked to a domain.
    2014-10-21 11:16:54.081 [pid=0x3e8,tid=0xcd0] ( ) GPLinkOrganizationalUnit - The GPO is linked to an organizational unit.
    2014-10-21 11:16:54.081 [pid=0x3e8,tid=0xcd0] ( ) GP Link Error
    2014-10-21 11:16:54.096 [pid=0x3e8,tid=0xcd0] lParam : 0x00000000
    2014-10-21 11:16:54.096 [pid=0x3e8,tid=0xcd0] Prev GPO : No
    2014-10-21 11:16:54.096 [pid=0x3e8,tid=0xcd0] Next GPO : Yes
    2014-10-21 11:16:54.096 [pid=0x3e8,tid=0xcd0] Extensions : [{00000000-0000-0000-0000-000000000000}{GUID-3}][{GUID-1}{GUID-3}][{GUID-4}{GUID-5}{GUID-6}{GUID-7}{GUID-8}][{GUID-9}{GUID-10}][{GUID-11}{GUID-5}{GUID-6}]
    2014-10-21 11:16:54.096 [pid=0x3e8,tid=0xcd0] lParam2 : 0x3146f978
    2014-10-21 11:16:54.096 [pid=0x3e8,tid=0xcd0] Link : LDAP://DC=SITE,DC=DOMAIN
    2014-10-21 11:16:54.096 [pid=0x3e8,tid=0xcd0] Purge GPH : C:\ProgramData\Microsoft\Group Policy\History\{GUID-2}\Machine\Preferences\Groups\Groups.xml
    2014-10-21 11:16:54.096 [pid=0x3e8,tid=0xcd0] Read GPE XML data file (592 bytes total).
    2014-10-21 11:16:54.112 [pid=0x3e8,tid=0xcd0] ----- Changed - 1
    2014-10-21 11:16:54.112 [pid=0x3e8,tid=0xcd0] Options : ( ) GPO_FLAG_DISABLE - This GPO is disabled.
    2014-10-21 11:16:54.112 [pid=0x3e8,tid=0xcd0] ( ) GPO_FLAG_FORCE - Do not override the settings in this GPO with settings in a subsequent GPO.
    2014-10-21 11:16:54.112 [pid=0x3e8,tid=0xcd0] Options (raw) : 0x00000000
    2014-10-21 11:16:54.112 [pid=0x3e8,tid=0xcd0] Version : 1245203 (0x00130013)
    2014-10-21 11:16:54.112 [pid=0x3e8,tid=0xcd0] GPC : LDAP://CN=Machine,CN={GUID-12},CN=Policies,CN=System,DC=SITE,DC=DOMAIN
    2014-10-21 11:16:54.112 [pid=0x3e8,tid=0xcd0] GPT : \\SITE.DOMAIN\sysvol\SITE.DOMAIN\Policies\{GUID-12}\Machine
    2014-10-21 11:16:54.112 [pid=0x3e8,tid=0xcd0] GPO Display Name : Default Domain Controllers Policy
    2014-10-21 11:16:54.112 [pid=0x3e8,tid=0xcd0] GPO Name : {GUID-12}
    2014-10-21 11:16:54.112 [pid=0x3e8,tid=0xcd0] GPO Link : ( ) GPLinkUnknown - No link information is available.
    2014-10-21 11:16:54.112 [pid=0x3e8,tid=0xcd0] ( ) GPLinkMachine - The GPO is linked to a computer (local or remote).
    2014-10-21 11:16:54.112 [pid=0x3e8,tid=0xcd0] ( ) GPLinkSite - The GPO is linked to a site.
    2014-10-21 11:16:54.112 [pid=0x3e8,tid=0xcd0] ( ) GPLinkDomain - The GPO is linked to a domain.
    2014-10-21 11:16:54.112 [pid=0x3e8,tid=0xcd0] ( X ) GPLinkOrganizationalUnit - The GPO is linked to an organizational unit.
    2014-10-21 11:16:54.112 [pid=0x3e8,tid=0xcd0] ( ) GP Link Error
    2014-10-21 11:16:54.112 [pid=0x3e8,tid=0xcd0] lParam : 0x00000000
    2014-10-21 11:16:54.112 [pid=0x3e8,tid=0xcd0] Prev GPO : Yes
    2014-10-21 11:16:54.112 [pid=0x3e8,tid=0xcd0] Next GPO : No
    2014-10-21 11:16:54.112 [pid=0x3e8,tid=0xcd0] Extensions : [{00000000-0000-0000-0000-000000000000}{GUID-3}][{GUID-1}{GUID-3}][{GUID-9}{GUID-10}]
    2014-10-21 11:16:54.112 [pid=0x3e8,tid=0xcd0] lParam2 : 0x324e8198
    2014-10-21 11:16:54.112 [pid=0x3e8,tid=0xcd0] Link : LDAP://OU=Domain Controllers,DC=SITE,DC=DOMAIN
    2014-10-21 11:16:54.127 [pid=0x3e8,tid=0xcd0] Purge GPH : C:\ProgramData\Microsoft\Group Policy\History\{GUID-12}\Machine\Preferences\Groups\Groups.xml
    2014-10-21 11:16:54.127 [pid=0x3e8,tid=0xcd0] Read GPE XML data file (592 bytes total).
    2014-10-21 11:16:54.143 [pid=0x3e8,tid=0xcd0] Completed get next GPO. [SUCCEEDED(S_FALSE)]
    2014-10-21 11:16:54.143 [pid=0x3e8,tid=0xcd0] WQL : SELECT * FROM RSOP_PolmkrSetting WHERE polmkrBaseCseGuid = "{GUID-1}"
    2014-10-21 11:16:54.143 [pid=0x3e8,tid=0xcd0] Purged 2 old RSoP entries.
    2014-10-21 11:16:54.143 [pid=0x3e8,tid=0xcd0] Logging 2 new RSoP entries.
    2014-10-21 11:16:54.159 [pid=0x3e8,tid=0xcd0] RSoP Entry 0
    2014-10-21 11:16:54.174 [pid=0x3e8,tid=0xcd0] RSoP Entry 1
    2014-10-21 11:16:54.174 [pid=0x3e8,tid=0xcd0] Completed get GPO list. [SUCCEEDED(S_FALSE)]
    2014-10-21 11:16:54.174 [pid=0x3e8,tid=0xcd0] IsRsopPlanningMode() [SUCCEEDED(S_FALSE)]
    2014-10-21 11:17:04.252 [pid=0x3e8,tid=0xcd0] Completed settings update (csePostProcess). [ hr = 0x800700b7 "Cannot create a file when that file already exists." ]
    2014-10-21 11:17:04.252 [pid=0x3e8,tid=0xcd0] Completed CSE post-processing. [ hr = 0x800700b7 "Cannot create a file when that file already exists." ]
    2014-10-21 11:17:04.267 [pid=0x3e8,tid=0xcd0] Leaving ProcessGroupPolicyExLocUsAndGroups() returned 0x000000b7

  • Windows failed to apply the Internet Explorer Zonemapping settings - the data was invald (event ID: 1085)

    Hi All,
    I have a large domain and a long list of websites that are trusted using the following group policy setting:
    Administrative Templates > Windows Components > Internet Explorer> Internet Control Panel > Security Page >
    Site to Zone Assignment List
    On all (XP/vista/win7) workstations across the domain I'm getting the following error:
    Log Name:  System
    Source:  Microsoft-Windows-GroupPolicy
    Event ID: 1085
    Task Category: None
    Level: Warning
    Keywords:   Description: Windows failed to apply the Internet Explorer Zonemapping settings. Internet Explorer Zonemapping settings might have its own log file.
    There's nothing either side of this error in the log that shines any more light on the issue.
    I know which group policy object its applying these settings but cant find which of the entries in the site to zone assignment list is causing this issue. I looked in the
    Group Policy/Operational log but all I see is the following entry which says "completed" but is logged as an error:
    After some research I'm guessing that the issue is an incorrect wild-card. This is what my trusted sites list looks like (with names removed of course):
    http://servername.*  
    *.internaldomain.com.au  
    *.domain.com.au  
    *.domain.*  
    *.externaldomain.com  
    *.domain.inernaldomain.com.au  
    *.domain.*  
    *.domain/name.*  
    *.domain.inernaldomain.au*  
    *.domain.com
    Is there something obviously incorrect here?
    Does anyone know where I could find an article that clearly outlines the acceptable wildcard syntax for the
    "Security page\ site to zone assignment list" group policy?  Ive read every forum post, website and blog I could find on the internet but nothing is clear and I wasn't able to find an MS document that steps it out. I've also changed the
    existing list a number of times based on blog posts etc but had no luck.
    **Please Note**
    I dont want to change to a different method or have an intellectual debate re why I would have these sites/wildacrd/policy set. I'm really looking to see what entry is invalid and where the documentation is for this policy setting so i can make sure they are
    always correct in the future. 
    thanks in advance for your time and assistance
    Simone
    PS: I've already read the following posts a number of times:
    I get no data but have identified the GP that is causing the issue:
    A test case for troubleshooting group policy application – Event ID 1085 and 7016 - http://blogs.technet.com/b/askds/archive/2008/08/21/a-test-case-for-troubleshooting-group-policy-application-event-id-1085-and-7016.aspx 
    I dont have any 2 letter domain names:
    Problems Adding Top-Level Domains to Zone Sites List - http://support.microsoft.com/kb/259493
    I tried formatting the list per this article:
    [Solved] The Group Policy client-side extension Internet Explorer Zonemapping failed to execute  - http://daily-it.blogspot.com.au/2008/09/solved-group-policy-client-side.html
    Has no domain wildcard format info:
    Behavior of Site to Zone Assignment List  - http://blogcastrepository.com/blogs/mattbro/archive/2006/09/07/2183.aspx
    Great article, no wildcard data:
    Internet Explorer Policy Settings  - http://technet.microsoft.com/en-us/library/bb457144.aspx
    Internet zonemapping problem: http://social.technet.microsoft.com/Forums/en-US/winserverGP/thread/a8756a27-b562-42ad-8782-87d284e6bcfb/
    Spiceworks Event 1085 (Warning) - http://community.spiceworks.com/windows_event/show/1582-microsoft-windows-grouppolicy-1085
    Event ID 1085 — Application of Group Policy - http://technet.microsoft.com/en-us/library/cc727303%28v=ws.10%29.aspx
    Application of group policy - http://technet.microsoft.com/en-us/library/cc727312%28v=ws.10%29.aspx
    Evt ID 1085 GP client-side extension IE ZoneMapping failed to exec  - http://www.winvistatips.com/evt-id-1085-gp-client-side-extension-ie-zonemapping-failed-exec-t706399.html
    Event 1085 - Internet Explorer Zonemapping - http://www.minasi.com/forum/topic.asp?TOPIC_ID=29206
    EventID.net - http://www.eventid.net/display.asp?eventid=1085&eventno=1412&source=Userenv&phase=1
    Event ID 1085 - Internet Explorer Zonemapping failed to execute - http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/2003_Server/Q_24897522.html
    UPDATE:
    I disabled the original policy and created a new one with only one trusted site address in it. Then I logged into a clean test machine did some testing.What I found after a few hours of testing was; regardless of the site that I have listed in group policy
    The HKCU\Software\Policies\Microsoft\Current version\Internet Settings\Zone Map Key registry entry is
    always updated with that entry on the workstation. So the workstation's registry always updates the key with
    *.sitename.com per the site that I have set in GP
    If I run GPUPDATE /FORCE over and over again, on the same machine, under the same user account, using the same DC I get:
    Failure, Failure, Failure, Success, Success, Success, Failure etc
    I wasn't able to determine any pattern to the failures, I tried stopping some of the processes on that machine but didn't find anything that would make it fail/succeed reliably.
    There is no AV or firewalls installed on my test machine
    Anyone have any more ideas?  I think I might install filemon and try to capture some more data unless there's a better tool?

    Yes, and that's straight from my Microsoft TAM. As long as you include an asterisk inside those site-to-zone mappings, you'll continue to see them. The key is whether or not they're working. In my environment, I've seen complete success using the
    http://*.domain.com, or
    https://*.domain.com, no matter if the site is http://www.domain.com or
    http://milk.does.a.body.good.domain.com. Despite the success, we continue to see the errors. It's much the same as Group Policy Preferences where you can apply a setting once, or repeatedly. If you apply
    something repeatedly and it's already set, lookout for some complaints in the application log. It really is annoying. There's potential to play with the logging levels, but I'll admit that my experience ranks as "novice" in this specific section of group policy.
    This link might get the creative juices flowing:
    http://blogs.technet.com/b/askds/archive/2008/07/18/enabling-group-policy-preferences-debug-logging-using-the-rsat.aspx
    I see you've already read a number of articles including "a test case for troubleshooting those event IDs"... I sympathize with your efforts. I despise warnings and errors that I can't solve or don't want to see, but I've researched a number of them to death
    and found that many are simply "normal". Uggg... I hope this helps, but please take my advice, as with anyone else's out here, with caution. I've seen some crazy recommendations. I saw a recommendation to install SQL on a DHCP server to get failover clustering
    up and running. I hope the guy asking for help didn't listen to that one! : ) - josh

  • Fail to open the group policy object. you might not have thw appropriate right

    fail to open the group policy object. you might not have thw appropriate right

    Hi,
    Would you please let me know which account you use to open GPO? Was it a Domain Administrator? Please refer to following KB and check if can help you to troubleshoot this issue.
    "Failed to Open the Group Policy Object" Error Message Occurs When You Try to Open a Policy As a Domain Administrator
    Meanwhile, please open Event Viewer and check if find some relevant events.
    If any update, please feel free to let me know.
    Hope this helps.
    Best regards,
    Justin Gu
    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

  • Failed to open the Group Policy Object. You may not have the appropriate rights. The system cannot find the path specified.

    Hi
    I am trying to edit the "Default Domain Controllers Policy" but when I click on Edit, I get the error message as shown below.
    We have three domain controllers, 2 of them (hq-dc1 and
    hq-dc2)are 2008 R2 and one (hq-dc3) is 2012 R2.
    The permissions are correct as I'm trying with domain admin account and I checked the permissions and domain admins have the necessary permissions. 
    The Policy does exist.
    The replications works fine also!
    any ideas any one???

    Hi everyone and thanks for all your help. 
    The only GPO effected is the "Default
    Domain Controllers Policy". I can edit any other GPO's fine.
    I have tried editing "Default
    Domain Controllers Policy" from all three domain controllers and I get the same error on all of
    them. 
    I can access SYSVOL via the shared path also and read the contents. 
    I have looked at the threads provided also but still no luck :(

  • Server log shows error and warning 108 & 1085 every 5 minutes. Faile dto apply changes to software installation settings.

    Event: 108
    Failed to apply changes to software installation settings. Software changes could not be applied. A previous log entry with details should exist. The error was : %%2147746153
    Event: 1085
    Windows failed to apply the Software Installation settings. Software Installation settings might have its own log file. Please click on the "More information" link.
    This errors have been happening a long while and do not appear to be having any effects on our end users. However, they are making
    it very hard to sift through our log files as you could imagine! This DC is windows 2008 r2.
    If there is any other information needed, let me know. Thanks!

    In addition you can debug the software installation Policy easily.
    GPO Troubleshooting
    Also you can use the ADM/ADMX for GPO related issues (GPO DEBUG LOGGING).
    http://www.gpoguy.com/FreeTools/FreeToolsLibrary/tabid/67/agentType/View/PropertyID/85/Default.aspx
    http://www.gpoguy.com/FreeTools/FreeToolsLibrary/tabid/67/agentType/View/PropertyID/84/Default.aspx
    Use this tool for registry key change.
    http://www.gpoguy.com/FreeTools/FreeToolsLibrary/tabid/67/agentType/View/PropertyID/87/Default.aspx 
    I have tested all the above tools and all are working fine.
    Best regards Biswajit Biswas Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights. MCP 2003,MCSA 2003, MCSA:M 2003, CCNA, MCTS, Enterprise Admin

  • Mobile AnyConnect group policy proxy settings

    For Android or iPhone anyconnect client is it possible to have the group policy proxy settings take effect?
    When connecting via desktop client these settings set the OS proxy settings. However for mobile platforms proxy settings are usually set on a WIFI connection profile.
    Thanks
    Sent from Cisco Technical Support Android App

    Hi,
    As stated in this
    article:
    "this is a BIG, BIG, BIG development in the world of GP. Finally, Microsoft has made a clear and bold statement–don’t use IE Maintenance Policy anymore." (Windows Server 2012 and Windows 8)
    So, please use Group Golicy Preference:
    Computer or User Configuration\Preferences\Control Panel Settings\Internet Settings
    The problem has been discussed in:
    Missing Proxy Group Policy Setting - Windows Server 2012
    http://social.technet.microsoft.com/Forums/en-US/winserver8gen/thread/5c03a102-7d06-462a-b821-f2d69df7ab0a
    Regards,
    Cicely

  • Stuck at Applying Group Policy Printers Policy on Windows 2008 Servers

    xp clients seem to be fine and map all printers at logon. The 2k8 servers all hang at logon for 30min or more at the Applying Group Policy Printers Policy. The print server is a DC in the same domain and it does not experience the issues at logon and gets to the desktop immediately.

    a DHCP workstation
    Microsoft Windows XP [Version 5.1.2600]
    (C) Copyright 1985-2001 Microsoft Corp.
    U:\>ipconfig /all
    Windows IP Configuration
            Host Name . . . . . . . . . . . . : CP0030621
            Primary Dns Suffix  . . . . . . . : us.tms.local
            Node Type . . . . . . . . . . . . : Unknown
            IP Routing Enabled. . . . . . . . : No
            WINS Proxy Enabled. . . . . . . . : No
            DNS Suffix Search List. . . . . . : us.tms.local
                                                us.tms.local
                                                tms.local
    Ethernet adapter Local Area Connection:
            Connection-specific DNS Suffix  . : us.tms.local
            Description . . . . . . . . . . . : Broadcom NetXtreme Gigabit Ethernet
            Physical Address. . . . . . . . . : 00-19-BB-5F-EE-75
            Dhcp Enabled. . . . . . . . . . . : Yes
            Autoconfiguration Enabled . . . . : Yes
            IP Address. . . . . . . . . . . . : 10.1.10.165
            Subnet Mask . . . . . . . . . . . : 255.255.254.0
            Default Gateway . . . . . . . . . : 10.1.10.1
            DHCP Server . . . . . . . . . . . : 10.1.10.27
            DNS Servers . . . . . . . . . . . : 10.1.10.27
                                                10.1.10.28
            Lease Obtained. . . . . . . . . . : Monday, August 24, 2009 8:24:12 AM
            Lease Expires . . . . . . . . . . : Saturday, August 29, 2009 8:24:12 A
    Ethernet adapter Bluetooth Network Connection:
            Media State . . . . . . . . . . . : Media disconnected
            Description . . . . . . . . . . . : Bluetooth Device (Personal Area Net
    ork)
            Physical Address. . . . . . . . . : 00-0D-3A-A6-BA-28
    win2k3 web server which logs in successfully
    Microsoft Windows [Version 5.2.3790]
    (C) Copyright 1985-2003 Microsoft Corp.
    U:\>ipconfig /all
    Windows IP Configuration
       Host Name . . . . . . . . . . . . : wlfdweb01
       Primary Dns Suffix  . . . . . . . : us.tms.local
       Node Type . . . . . . . . . . . . : Unknown
       IP Routing Enabled. . . . . . . . : No
       WINS Proxy Enabled. . . . . . . . : No
       DNS Suffix Search List. . . . . . : us.tms.local
                                           tms.local
    Ethernet adapter Local Area Connection 2:
       Connection-specific DNS Suffix  . :
       Description . . . . . . . . . . . : HP NC7782 Gigabit Server Adapter #2
       Physical Address. . . . . . . . . : 00-14-C2-C3-DA-3A
       DHCP Enabled. . . . . . . . . . . : No
       IP Address. . . . . . . . . . . . : 10.1.10.29
       Subnet Mask . . . . . . . . . . . : 255.255.254.0
       IP Address. . . . . . . . . . . . : 10.1.10.30
       Subnet Mask . . . . . . . . . . . : 255.255.254.0
       Default Gateway . . . . . . . . . : 10.1.10.1
       DNS Servers . . . . . . . . . . . : 10.1.10.27
                                           10.1.10.28
    Print Server that logs in fine (also a DC and DNS Server)
    Microsoft Windows [Version 6.0.6002]
    Copyright (c) 2006 Microsoft Corporation.  All rights reserved.
    U:\>ipconfig /all
    Windows IP Configuration
       Host Name . . . . . . . . . . . . : wlfddc02
       Primary Dns Suffix  . . . . . . . : us.tms.local
       Node Type . . . . . . . . . . . . : Hybrid
       IP Routing Enabled. . . . . . . . : No
       WINS Proxy Enabled. . . . . . . . : No
       DNS Suffix Search List. . . . . . : us.tms.local
                                           tms.local
    Ethernet adapter Local Area Connection 4:
       Connection-specific DNS Suffix  . :
       Description . . . . . . . . . . . : HP NC373i Multifunction Gigabit Server Ad
    apter #2
       Physical Address. . . . . . . . . : 00-1C-C4-EF-B7-A4
       DHCP Enabled. . . . . . . . . . . : No
       Autoconfiguration Enabled . . . . : Yes
       IPv4 Address. . . . . . . . . . . : 10.1.10.28(Preferred)
       Subnet Mask . . . . . . . . . . . : 255.255.254.0
       Default Gateway . . . . . . . . . : 10.1.10.1
       DNS Servers . . . . . . . . . . . : 10.1.10.28
                                           10.1.10.27
       NetBIOS over Tcpip. . . . . . . . : Enabled
    Tunnel adapter Local Area Connection* 9:
       Media State . . . . . . . . . . . : Media disconnected
       Connection-specific DNS Suffix  . :
       Description . . . . . . . . . . . : isatap.{9FB5C233-FB93-471F-873E-6DFDFCFED
    2AE}
       Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
       DHCP Enabled. . . . . . . . . . . : No
       Autoconfiguration Enabled . . . . : Yes
    server that hangs at applying group policy printers (the other dc and dns server for the domain)
    Microsoft Windows [Version 6.0.6002]
    Copyright (c) 2006 Microsoft Corporation.  All rights reserved.
    U:\>ipconfig /all
    Windows IP Configuration
       Host Name . . . . . . . . . . . . : wlfddc01
       Primary Dns Suffix  . . . . . . . : us.tms.local
       Node Type . . . . . . . . . . . . : Hybrid
       IP Routing Enabled. . . . . . . . : No
       WINS Proxy Enabled. . . . . . . . : No
       DNS Suffix Search List. . . . . . : us.tms.local
                                           tms.local
    Ethernet adapter Local Area Connection:
       Connection-specific DNS Suffix  . :
       Description . . . . . . . . . . . : Broadcom NetXtreme Gigabit Ethernet
       Physical Address. . . . . . . . . : 00-0F-1F-68-D6-42
       DHCP Enabled. . . . . . . . . . . : No
       Autoconfiguration Enabled . . . . : Yes
       IPv4 Address. . . . . . . . . . . : 10.1.10.27(Preferred)
       Subnet Mask . . . . . . . . . . . : 255.255.254.0
       Default Gateway . . . . . . . . . : 10.1.10.1
       DNS Servers . . . . . . . . . . . : 127.0.0.1
                                           10.1.10.25
       NetBIOS over Tcpip. . . . . . . . : Enabled
    Tunnel adapter Local Area Connection* 8:
       Media State . . . . . . . . . . . : Media disconnected
       Connection-specific DNS Suffix  . :
       Description . . . . . . . . . . . : isatap.{C0EEED04-498A-42FC-9C42-86A37BD4D
    8D5}
       Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
       DHCP Enabled. . . . . . . . . . . : No
       Autoconfiguration Enabled . . . . : Yes

  • The Group Policy Client service failed the sign-in The universal unique identifier (UUID) type is not supported

    Hi guys,
    we created a custom WIM Image (Windows 8 Enterprise) with MDT 2012.
    Sysprept the Image, Deployed via SCCM 2012 SP1.
    Computers are Domainjoined. Error with standard Domain User.
    On some computers (not every computer) and not with every user on the first logon following error message arises:
    The Group Policy Client service failed the sign-in The universal unique identifier (UUID) type is not supported
    It works, when you log in a second time but this error isn't very nice. 
    Is there a solution for that?
    Kind Regards
    Martin

    Hi,
    The service is responsible for applying settings configured by administrators for the computer and users through the Group Policy component. This issue can be caused by various reasons based on the computer environment.
    Can you find any information in event log about this issue?
    Here is the related blog in which the steps can solve most of such issues if the issue continuously happen.
    http://blogs.msdn.com/b/moiqubal/archive/2012/03/04/how-to-fix-quot-the-group-policy-client-service-failed-the-logon-access-denied-quot-error.aspx
    Also, you can refer to the similar thread about this issue:
    http://social.technet.microsoft.com/Forums/en-US/4a644219-50ee-494d-b965-e64a8555109e/the-group-policy-client-service-failed-the-signin-the-universal-unique-identifier-uuid-type-is
    Since this issue can be related to SCCM, to better help you, please submit a new thread for further help:
    https://social.technet.microsoft.com/Forums/en-US/home?category=systemcenter2012configurationmanager
    Hope these could be helpful.
    Kate Li
    TechNet Community Support

  • Error Message when logging on "The Group Policy Client service failed the logon. Access is denied"

    Since the move to Windows 7 we have started getting this error above when people login at random times and on random machines, at first we thought it was only a select few users, but now it seems to have occurred to about 20 different Staff members working
    at the school. Also of those 20 odd users it has happened to them on a few occasions.
    What we know
    We know this problem is only occurring to staff with Roaming Profiles, it seems like somehow the profile is not Synchronizing with the Servers File Share that houses the profiles, which causes the NTUSER.DAT file to become corrupt and go from being around
    2 – 3 MBs to 256KB (In all cases where a user has had this issue there NTUSER.DAT file has been 256KB)
    Current Resolution to the problem
    When a staff member contact us with this problem, we fortunately have Previous Versions working on the profiles folder on the server, so we are able to restore their NTUSER.DAT file from 1 to 2 days before it became corrupt, which then seems to allow them
    to log on fine
    What we have tried so far & suggested so far
    After some research on Google, we found the following thread on EduGeek
    http://www.edugeek.net/forums/windows-7/78733-windows-7-user-profile-failed-error-again.html#post700415
    Which suggested that the problem may lay within registry, so we implemented the Script that was posted on the website, however this has not seemed to make any difference
    In the early stages when only 5 – 10 staff seemed to be having the problem, we believed the issue could be with just certain AD accounts. It had not seemed to happen to any recently created AD accounts so we thought it could be a corrupt attribute on
    the user so we delete one of the staff AD accounts that had the problem and creating a brand new one, however within about 2 – 3 weeks that staff member had the issue occur again
    Leading on from point two, we also thought the problem could be with people using multiple computers, logging on in 2 places and not logging off properly, but unfortunately the staff member referred to in point 2 only uses the one computer in reception.
    Another potential cause that we figured might be the route of the problem, was it could be specific computers that are not communicating properly with the server, which could be causing this problem to occur, but we have no real way of testing this,
    as the staff generally log onto 3 – 4 different computers throughout the day and in different location
    We log a call with EE and they just pointed us to various websites that we had already checked and wasn’t much help.
    In Summary
    This error has now occurred with about 20 members of staff, we currently only use Windows 7 at our Senior School & Moving to Windows 7 at our Prep School in the Summer
    holidays, we would like to find out the route of this problem ideally before then, as we could potentially be doubling the amount of staff with the problem after the move. Has anyone else seen this problem or have a brain wave on how to solve it?
    Regards
    Andy

    Hi Dudleya,
    First of all ,I would suggest to check the permissions of the NTUSER.DAT registry hive .Here is a link for reference :
    The Group Policy Client service failed the logon. Access is denied(Juke Chou`s answer)
    https://social.technet.microsoft.com/Forums/windows/en-US/8c0054a3-35be-4fc4-839c-e2176613eb23/the-group-policy-client-service-failed-the-logon-access-is-denied?forum=w7itpronetworking
    Please refer to this link and add the registry keys to have a check .Please backup the registry keys before you made modifications to them.
    The Group Policy Client Service Failed The Logon In Windows 8(It should also work on windows 7 )
    http://www.thewindowsclub.com/fix-group-policy-client-service-failed-logon-windows-8
    If the issue persists ,we can refer to this link to troubleshoot this issue .
    Troubleshoot User Profiles with Events(It should also be applied to windows 7 )
    https://technet.microsoft.com/en-us/library/jj649075.aspx
    NOTE: This response contains a reference to a third party World Wide Web site. Microsoft is providing this information as a convenience to you. Microsoft does not control these sites and has not tested any software or information found on these sites.
    Best regards

  • The Group Policy client-side extension Scripts failed ...

    This is an error I've been seeing forever and it was always the impression that upgrading would resolve it, but it never has even in 10.3. 100% of our users get these errors in the Event Viewer:
    Event Type: Error
    Event Source: Userenv
    Event Category: None
    Event ID: 1085
    Date: 10/21/2010
    Time: 8:04:52 AM
    User: NT AUTHORITY\SYSTEM
    Computer: XXXXXX
    Description:
    The Group Policy client-side extension Scripts failed to execute. Please look for any errors reported earlier by that extension.
    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
    We also seem to have flakey policy issues where once in awhile a user will not be able to logon to Windows with Workstation Only while getting the " not allowed to logon interactively" message, other times the users report not being able to access the Windows Date and Time Properties and further sometimes they are unable to make system changes.
    We have troubleshooted this and the only resolutions we've found are to run zac cc, zac ref, zac pl and sometimes it seems like deleting c:\windows\system32\grouppolicy will help.
    In regards to the Event Viewer entry I posted, on any given machine I can issue the command gpupdate and it will put another entry into the Event Viewer (sometimes multiple ones). I've learned through research that if I "clean up" c:\windows\system32\grouppolicy\gpt.ini the errors go away, but once the policy is refreshed they come right back.
    This is the version ZenWorks gives the users:
    [General]
    gPCFunctionalityVersion=2
    gPCFunctionalityVersion=2
    gPCMachineExtensionNames=[{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957D-509E-11D1-A7CC-0000F87571E3}][{3610EDA5-77EF-11D2-8DC5-00C04FA31A66}{0F6B957D-509E-11D1-A7CC-0000F87571E3}][{42B5FAAE-6536-11D2-AE5A-0000F87571E3}{40B6664F-4972-11D1-A7CA-0000F87571E3}][{4CFB60C1-FAA6-47F1-89AA-0B18730C9FD3}{0F6B957D-509E-11D1-A7CC-0000F87571E3}][{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}]
    Version=6488106
    gPCUserExtensionNames=[{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957E-509E-11D1-A7CC-0000F87571E3}][{42B5FAAE-6536-11D2-AE5A-0000F87571E3}{40B66650-4972-11D1-A7CA-0000F87571E3}][{4CFB60C1-FAA6-47F1-89AA-0B18730C9FD3}{0F6B957E-509E-11D1-A7CC-0000F87571E3}][{A2E30F80-D7DE-11D2-BBDE-00C04F86AE3B}{FC715823-C5FB-11D1-9EEF-00A0C90347FF}]
    This is the version I cleaned up:
    [General]
    gPCFunctionalityVersion=2
    gPCUserExtensionNames=[{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957E-509E-11D1-A7CC-0000F87571E3}][{4CFB60C1-FAA6-47F1-89AA-0B18730C9FD3}{0F6B957E-509E-11D1-A7CC-0000F87571E3}][{A2E30F80-D7DE-11D2-BBDE-00C04F86AE3B}{FC715823-C5FB-11D1-9EEF-00A0C90347FF}]
    gPCUserExtensionNames=[{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957E-509E-11D1-A7CC-0000F87571E3}][{A2E30F80-D7DE-11D2-BBDE-00C04F86AE3B}{FC715823-C5FB-11D1-9EEF-00A0C90347FF}]
    I'm not sure how to get Zenworks to use the cleaned up version nor and I too sure what those extra extensions are and how they got in there. I may need to contact Novell in regards to this, but since I'm already working on an SR with them I figured I'd go ahead and post here first.
    Any help or advice would be greatly appreciated.

    Here are the groups I'm using. NOTE: These have been in affect throughout the issues experienced. Users will work perfectly fine then suddenly the problem will start happening without any policy change on our side.
    -Member of-
    Network Configuration Operators+
    Remote Desktop Users+
    Users+
    -Assigned Rights under a group I called "Other Rights"-
    Access this computer from network
    Change the system time
    Log on locally
    Shut down the system
    The only condition I have is that these issues happen when logging in Workstation Only and I'm not able to recreate the problem on demand with tests.
    Originally Posted by craig_wilson
    The "Interactive Logon" is a Windows Security Permission.
    It is generally assigned to certain local groups such as "User".
    Which groups are assigned this right can be changed manually and
    controlled by local security policies.
    When user's get this error, it generally means their account is not in a
    local group that has been assigned that right.
    If using "DLU", make sure the user accounts are a member of "Users".
    And If anyone was messing with security policies, make sure they did not
    take away "Interactive Logons" from anyone.
    On 10/29/2010 7:06 AM, jcsmith1 wrote:
    >
    > Thanks for replying craig.
    >
    > My policy woes have only grown since my first post. We are currently
    > testing the removal of administrative rights and now we're having
    > teleworkers (who login Workstation Only) getting the message "policy
    > does not allow interactive login". What -seems- to fix it is a zac cc,
    > zac ref and zac pl, however we just started getting call backs from
    > users.
    >
    > I seem to have no further leads and Novell's ZenWorks tech supports
    > seems to be going through some kind of painful-to-the-customer
    > transition as one of my thoughts on resolving the issue is to go to 10.3
    > or 10.3.1, but my Satellites appear to be upgrading but in reality do
    > not upgrade (but the primary servers upgraded) (See SR 10655976331).
    >
    > Does anyone knows how to troubleshoot policy issues when the users
    > aren't loggin into ZCM?
    >
    > craig_wilson;2036646 Wrote:
    >> See: 'Group Policy Error: The Group Policy client-side extension Script
    >> failed to execute.'
    >> (Group Policy Error: The Group Policy client-side extension Script failed to execute.)
    >>
    >> This would never be fixed in any patch, since it would be the job of
    >> GPEDIT to properly maintain the GPT.INI.
    >>
    >> Most of the Time these errors are cosmetic and caused by stray script
    >> extensions.
    >>
    >> You may want to create an Enhancement Request to allow the creation of
    >> "Filters" so certain errors are discarded and not sent to the DB/ZCC.
    >> This way an Admin could choose to filter out various error messages
    >> that
    >> they deem are not actually of concern.
    >>
    >> On 10/21/2010 9:36 AM, jcsmith1 wrote:
    >>>
    >>> This is an error I've been seeing forever and it was always the
    >>> impression that upgrading would resolve it, but it never has even in
    >>> 10.3. 100% of our users get these errors in the Event Viewer:
    >>>
    >>> -Event Type: Error
    >>> Event Source: Userenv
    >>> Event Category: None
    >>> Event ID: 1085
    >>> Date: 10/21/2010
    >>> Time: 8:04:52 AM
    >>> User: NT AUTHORITY\SYSTEM
    >>> Computer: XXXXXX
    >>> Description:
    >>> The Group Policy client-side extension Scripts failed to execute.
    >>> Please look for any errors reported earlier by that extension.
    >>>
    >>> For more information, see Help and Support Center at
    >>> http://go.microsoft.com/fwlink/events.asp.
    >>> -
    >>> We also seem to have flakey policy issues where once in awhile a
    >> user
    >>> will not be able to logon to Windows with Workstation Only while
    >> getting
    >>> the " not allowed to logon interactively" message, other times the
    >> users
    >>> report not being able to access the Windows Date and Time Properties
    >> and
    >>> further sometimes they are unable to make system changes.
    >>>
    >>> We have troubleshooted this and the only resolutions we've found are
    >> to
    >>> run zac cc, zac ref, zac pl and sometimes it seems like deleting
    >>> c:\windows\system32\grouppolicy will help.
    >>>
    >>> In regards to the Event Viewer entry I posted, on any given machine
    >> I
    >>> can issue the command gpupdate and it will put another entry into
    >> the
    >>> Event Viewer (sometimes multiple ones). I've learned through
    >> research
    >>> that if I "clean up" c:\windows\system32\grouppolicy\gpt.ini the
    >> errors
    >>> go away, but once the policy is refreshed they come right back.
    >>>
    >>> This is the version ZenWorks gives the users:
    >>>> [General]
    >>>> gPCFunctionalityVersion=2
    >>>> gPCFunctionalityVersion=2
    >>>>
    >> gPCMachineExtensionNames=[{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957D-509E-11D1-A7CC-0000F87571E3}][{3610EDA5-77EF-11D2-8DC5-00C04FA31A66}{0F6B957D-509E-11D1-A7CC-0000F87571E3}][{42B5FAAE-6536-11D2-AE5A-0000F87571E3}{40B6664F-4972-11D1-A7CA-0000F87571E3}][{4CFB60C1-FAA6-47F1-89AA-0B18730C9FD3}{0F6B957D-509E-11D1-A7CC-0000F87571E3}][{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}]
    >>>> Version=6488106
    >>>>
    >> gPCUserExtensionNames=[{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957E-509E-11D1-A7CC-0000F87571E3}][{42B5FAAE-6536-11D2-AE5A-0000F87571E3}{40B66650-4972-11D1-A7CA-0000F87571E3}][{4CFB60C1-FAA6-47F1-89AA-0B18730C9FD3}{0F6B957E-509E-11D1-A7CC-0000F87571E3}][{A2E30F80-D7DE-11D2-BBDE-00C04F86AE3B}{FC715823-C5FB-11D1-9EEF-00A0C90347FF}]
    >>>>
    >>>>
    >>>
    >>> This is the version I cleaned up:
    >>>> [General]
    >>>> gPCFunctionalityVersion=2
    >>>>
    >> gPCUserExtensionNames=[{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957E-509E-11D1-A7CC-0000F87571E3}][{4CFB60C1-FAA6-47F1-89AA-0B18730C9FD3}{0F6B957E-509E-11D1-A7CC-0000F87571E3}][{A2E30F80-D7DE-11D2-BBDE-00C04F86AE3B}{FC715823-C5FB-11D1-9EEF-00A0C90347FF}]
    >>>>
    >> gPCUserExtensionNames=[{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957E-509E-11D1-A7CC-0000F87571E3}][{A2E30F80-D7DE-11D2-BBDE-00C04F86AE3B}{FC715823-C5FB-11D1-9EEF-00A0C90347FF}]
    >>>>
    >>>>
    >>>
    >>> I'm not sure how to get Zenworks to use the cleaned up version nor
    >> and
    >>> I too sure what those extra extensions are and how they got in there.
    >> I
    >>> may need to contact Novell in regards to this, but since I'm already
    >>> working on an SR with them I figured I'd go ahead and post here
    >> first.
    >>>
    >>> Any help or advice would be greatly appreciated.
    >>>
    >>>
    >>
    >>
    >> --
    >> Craig Wilson - MCNE, MCSE, CCNA
    >> Novell Knowledge Partner
    >>
    >> Novell does not officially monitor these forums.
    >>
    >> Suggestions/Opinions/Statements made by me are solely my own.
    >> These thoughts may not be shared by either Novell or any rational
    >> human.
    >
    >
    Craig Wilson - MCNE, MCSE, CCNA
    Novell Knowledge Partner
    Novell does not officially monitor these forums.
    Suggestions/Opinions/Statements made by me are solely my own.
    These thoughts may not be shared by either Novell or any rational human.

  • The Group Policy Client Service Failed The Logon

    Hello,
    When our students login to our Windows 7 machines they are getting this error:
    The Group Policy Client Service Failed The Logon
    Access is denied.
    We are attempting to use both volatile and roaming profiles. The profiles are being stored on their H drives. I seem to only see the issue when the Windows NT 6.1 Workstation Profile.V2 folder already exists on their H drive. If the profile is not there then everything works fine.
    Loading the user's ntuser.dat hive located in their H drive and changing the permissions manually to allow System, Administrators, and Users Full Control fixes the issue. How can I do this across all my user's H drives? Should I just delete them all and manually create the folder myself?
    Last time I found one, the permissions for the hive had an "Unknown" user in the permissions list. There was no "Users" group. Removing the "Unknown" and adding "Users" fixed the problem. Are the permissions getting corrupted somehow?
    Thanks for any assistance.
    I've used the following link for reference:
    Support | Windows 7 Roaming Profiles fail - user is assigned a temporary profile or fails to log on
    Novell Doc: ZENworks 10 Configuration Management Policy Management Reference - Assigning a Roaming Profile Policy that has the User Profile Stored on a Home Directory

    Originally Posted by coreyhansen
    So it appears that I am experiencing the temporary profile detailed in my link I referenced above. I have status bubbles disabled by policy and didn't notice the notification. I'm going to try pre-populating my user H drives with the Windows NT 6.1 Workstation Profile.V2 folder containing an ntuser.dat file I've already edited the hive permissions of. This worked in small scale testing, so we will see.
    I've been referencing this thread: http://forums.novell.com/novell-prod....html#poststop
    So I have tried this with students that are experiencing the problem, and gotten limited success. It feels like it works at random, with around 50% of attempts working.
    Has anyone out there had success with roaming profiles? Do I just need to go back to folder redirection? Will anyone please respond?
    This is what the student's ntuser.dat hive permissions look like when things are not working:

  • The group policy client service failed the logon access is denied.

    This one is starting to get on my nerves now. We've had 2 users suffering this problem on our Remote Desktop server.
    We are running two Windows Server 2008 SP2 domain controllers, with two Windows 2008 R2 servers running RD Gateway and Remote Desktop Server.
    The first user I had to recreate because of following instructions I googled because it caused the user to always logon with a temporary profile on the server and I could not resolve this.
    This user I have managed to cleanly delete the local logon profile.
    BOTH of these users are on roaming profiles, as are most of the users that are logging in to this server (for reasons that they move around the office). On the server, the user is listed twice one with a .v2 extension (XP machines at desks)
    The user we are having a problem with at the moment was working perfectly fine a couple of weeks ago when they last logged into the server.
    Could this be down to me setting an over ride on the settings that force people to logout completely after an hour of idle time, resulting in an unclean logoff?
    Some of the messages that are in the event log for when that user attempts to login:
    Event id: 1542
    Windows cannot load classes registry file.
    DETAIL - The system cannot find the file specified.
    Event ID: 6001
    The winlogon notification subscriber <Sens> failed a notification event.
    Event ID: 6004
    The winlogon notification subscriber <GPClient> failed a critical notification event.
    I'm also getting a constant batch of
    Event ID: 510
    Folder redirection policy application has been delayed until the next logon because the group policy logon optimization is in effect
    Any ideas why this should happen? I need a solution as soon as possible please as these users are running our sales department from home, and this user is due to be on the rota to do it this week! :)

    Andy, I have been struggling with this issue on a new 2008R2 server. Can
    you explain the commands you used to load ntuser.dat and usrclass.dat
    into the registry? This is a truly maddening issue.
    Thank you.
    On 1/10/2011 11:01 AM, Andy Murphy wrote:
    > Seems I have managed to over come this.
    >
    > After deleting the profile from within the Advanced System Settings >
    > User Profiles on the RD server I still couldn't logon (as said above
    > about clean deletion of the local profile)
    >
    > So I manually loaded the UsrClass.dat and NTUser.dat into the registry
    > as they were not there. To do this I did the following:
    >
    > Loaded NTUser.dat from the profile on the server as a hive under
    > HKEY_USERS to S-1-5-21-2055973500-2782184047-1828406536-1165
    >
    > Loaded UsrClass.dat from the profile.v2 on the server as a hive under
    > HKEY_USERS to S-1-5-21-2055973500-2782184047-1828406536-1165_Classes
    >
    > Then logged in as the user, and it works perfectly again (it did hang on
    > waiting for the session manager). To be sure I then copied the Default
    > user to that newly created profile on the RD server and logged in again,
    > no hangs. Perfect.
    >
    > Maybe this will solve a few other peoples problems with these related
    > errors.
    >

  • After restarting i get a message saying that Windows could not connect to the Group policy client service

    The message i get is the following: 
    Windows could not connect to the Group policy client service. This problem prevents limited users from logging on to the system As and administrative user you can review the system event log for details why the service didn't respond.
    This happens after restarting my laptop. It takes longer than usual and once it has booted up and loaded Windows Vista, I get the message on the right bottom corner as a window popping up.
    I can still use my computer but a lot of my user account settings are not there.
    I fixed it temporarily by rebooting using the option: boot up using my last successful configuration. Bu once I restart again the same thing happens.
    How can i fix it?
    Thanks.

    Hi,
    Please try the solutions on the following threads:
    http://social.answers.microsoft.com/Forums/en/vistasecurity/thread/bbfe3246-0ceb-4899-bfba-7a98e642c009
    http://social.technet.microsoft.com/Forums/en/winserverGP/thread/5de9f483-ff69-4fac-ac3f-601a62cc78d1
    If the problem continues, please let us know if the computer is in a domain environment.
    Regards,
    Bruce

  • Event 4098 Group Policy Printers, Printers intermittently don't deploy

     Hi,
    On a similar vein to this topic We also deploy printers Via the Server 2008 group policy preferences. All our PC's are Vista Business 32bit SP1. The problem we are having is that intermittently the printer will not install at logon. If you logoff and back on again it is there. On one particular PC I found this event in the Applications log.
    Log Name:      Application
    Source:        Group Policy Printers
    Date:          13/01/2009 4:07:48 PM
    Event ID:      4098
    Task Category: (2)
    Level:         Warning
    Keywords:      Classic
    User:          SYSTEM
    Computer:      E-HSS.cygnet.library.uwa.edu.au
    Description:
    The user 'HSSClient1' preference item in the 'Client Vista Domain Policy SP1 {A85CA6F0-874B-467F-B50A-939E64932884}' Group Policy object did not apply because it failed with error code '0x80070709 The printer name is invalid.' This error was suppressed.
    Event Xml:
      <System>
        <Provider Name="Group Policy Printers" />
        <EventID Qualifiers="34305">4098</EventID>
        <Level>3</Level>
        <Task>2</Task>
        <Keywords>0x80000000000000</Keywords>
        <TimeCreated SystemTime="2009-01-13T07:07:48.000Z" />
        <EventRecordID>37184</EventRecordID>
        <Channel>Application</Channel>
        <Computer>E-HSS.cygnet.library.uwa.edu.au</Computer>
        <Security UserID="S-1-5-18" />
    Now if this error happened every time we would change the name of the printer to be something more "Valid" but it doesn't and we can logon again and the printer installs fine. Can someone explain to me why it thinks HSSClient1 is invalid intermittently?
    From this thread I investigated the print processor of one of our printer queues and found is was not set to 'WinPrint' So on HSSClient1 I set the print processor to 'WinPrint'.  Do all printers managed/deployed by Group Policy preferences need to have their processor set to WinPrint?
    Regards
    Jason Langoulant
    UWA Library I.T.

    Hi,
    Regarding print processors , third party print processors are supported but not recommended. Print processors are user-mode dynamic-link libraries that are responsible for converting the spooled data of a print job to a format that can be sent to a print monitor. Print processors are also responsible for handling program requests to pause, to resume, and to cancel print jobs. But Print processors would be started during system startup. It’s not related to this GPO issue.
    This issue may occur if you create the Printer as TCP/IP printer. Please try to delete the original printer and try to create a new shared Printer in Group Policy Preferences.
    However, if it’s the original printer is not TCP/IP printer, please also try to recreate it and help to run the MPS report (PFE version) on the clients to collect reports. The MPS Reporting Tool is utilized to gather detailed information regarding a systems current configuration. The data collected will assist you with fault isolation.
    A . Please download MPS Reporting Tool (MPSRPT_PFE.EXE) from the following link:
    (http://www.microsoft.com/downloads/details.aspx?FamilyID=00ad0eac-720f-4441-9ef6-ea9f657b5c2f&DisplayLang=en)
    Please note: The link may be truncated when you read the E-mail. Be sure to include all text between '(' and ')' when navigating to the download location.
    B . Right click MPSRPT_PFE.EXE and select Run as Administrator to run this tool, and you will see a Command Window start up.
    C . Please type Y with the message of <Include the MSINFO32 report? (defaults to Y in 15 seconds)[Y,N]?
    D . When the tool is done you will see an Explorer Window opening up the %systemroot%\MPSReports\Setup\Reports\cab folder and containing a <Computername>MPSReports.cab file. After collecting, please use Windows Live SkyDrive (http://www.skydrive.live.com/) to upload the file and then give me the download address.
    Thanks.

Maybe you are looking for

  • Nokia N95 v31.0.017 Bugs- Demanding a new firmware...

    Hello guys, I have recently upgrade my firmware from a nice v30 to v31 with hope of improvement in many things. But I end up very regretful after. My phone is no longer do what V30 allowed me to do. For example:                 Taking Picture using t

  • Connecting ipod video to tv

    Will a standard red, white and yellow cable (such as from a camcorder) work to connect the iPod to a tv? Or must I buy the pricy apple brand? Thank you

  • After updating to IOS 7 I can't see an purchased apps

    After updating to IOS 7 on my iPad 4 when I go to the App Store and click on Purchased, the Purchased tab is completely empty and when I go to the App Store I see the price for the app I already own.  When I click on the price of that app I get eithe

  • Role with SPRO for FICO

    Hello SAP EXperts, Can anyone tell me how to create a role with SPRO authorization for FICO transactions and roles only. I need to assign a role with which a FICO consultant can do all the customizing related tasks in the development server. Please g

  • Monitor Adaptor Cable for 2008 Macbook Pro

    I need an adaptor cable to hook up my 2008 Macbook Pro to a new 21" HP monitor. My Macbook Pro does not have the Mini DisplayPort. Any other suggestions? The monitor came with a PC VGA and DVI-D cable. Thanks!