[gptalk] Re: Admin Template Error

  • From: jfvanmeter@xxxxxxxxxxx
  • To: gptalk@xxxxxxxxxxxxx, <gptalk@xxxxxxxxxxxxx>
  • Date: Tue, 11 Dec 2007 16:42:30 +0000

Thanks Darren,I'll check the gpolog.adm hopefully that will help.

I would say that theIE7 adm template is the one that comes with, it doesn't 
look like a custom job. 

Take Care --John

 -------------- Original message ----------------------
From: "Darren Mar-Elia" <darren@xxxxxxxxxx>
> John-
> There's actually logging that you can enable for loading of ADMs into GP
> Editor. Check out my gpolog.adm (www.gpoguy.com/gpolog.htm) as it already
> includes the log item. If that doesn't show the way, then the next question
> I'd ask is, is that inetres.adm the one that comes with the IE 7 Admin.
> Templates or did you get it from somewhere else?
> 
> Darren
> 
> -----Original Message-----
> From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
> Behalf Of jfvanmeter@xxxxxxxxxxx
> Sent: Tuesday, December 11, 2007 12:46 AM
> To: gptalk@xxxxxxxxxxxxx
> Subject: [gptalk] Admin Template Error
> 
> Hello Everyone, I'm trying to trouble shoot a problem with one of NIST's
> FDCC Administrative Templates that generates the following error when you
> edit the group policy or run a rsop on a workstation that has had the group
> policy applied. The template that is erroring is inetres.adm, NIST has
> configured the IE 7 security, the target is a XP SP2 workstation with IE 6
> installed
> 
> The error I'm getting is "The following keyword is tto long" the area
> after/below the statement is blank.
> 
> I've enabled two of the Group policy debug registry keys are there any other
> I can enable or should enable?
> 
> Output from: Is located in this file: Enable verbose logging by adding this
> key or value. .to this registry key 
> Group Policy core (UserEnv) and registry CSE
>  %windir%\debug\usermode\UserEnv.log
>  UserEnvDebugLevel = REG_DWORD 30002
>  HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon
>  
> Security CSE
>  %windir%\security\logs\winlogon.log
>  ExtensionDebugLevel = REG_DWORD 0x2
>  HKEY_LOCAL_MACHINE\Software\Microsoft\Windows
> NT\CurrentVersion\Winlogon\GpExtensions\{827d319e-6eac-11d2-a4ea-00c04f79f83
> a}
> 
> updated policy but no luck, nothing is logged in the event logs, winlogon
> logs, userenv logs
> 
> I've ran process monitor at the same time as rsop, but nothing. I'm going to
> run process monitor today while I run gpupdate /force and see if that gets
> me anything.
> 
> Does anyone know what the string length in a admin template is? Does anyone
> have any other thoughts on how to trouble shoot this.? 
> 
> Thanks in advance --John
>  
> 
>  
> ***********************
> You can unsubscribe from gptalk by sending email to
> gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by
> logging into the freelists.org Web interface. Archives for the list are
> available at http://www.freelists.org/archives/gptalk/
> ************************
> 
> ***********************
> You can unsubscribe from gptalk by sending email to 
> gptalk-request@xxxxxxxxxxxxx 
> with 'unsubscribe' in the Subject field OR by logging into the freelists.org 
> Web 
> interface. Archives for the list are available at 
> http://www.freelists.org/archives/gptalk/
> ************************

***********************
You can unsubscribe from gptalk by sending email to 
gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by 
logging into the freelists.org Web interface. Archives for the list are 
available at http://www.freelists.org/archives/gptalk/
************************

Other related posts: