The newsgroup response is assuming that IE maintenance is the problem.
Specifically, if you try to use IE maintenance policy to set zone security
for a user who is using IE7, that is when GPMC chokes. So, what the posting
suggests is to go into the SYSVOL portion of the GPO in question (i.e. the
one implementing IE maintenance policy) on a DC (preferably the PDC emulator
DC) and navigate to \\<domain>\sysvol\<domain>\policies\<GUID of
GPO>\User\Microsoft\IEAK and look for a file called install.ins and then
modify that parameter accordingly.
Darren
*From:* gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] *On
Behalf Of *Jason Williams
*Sent:* Monday, July 02, 2007 2:08 PM
*To:* gptalk@xxxxxxxxxxxxx
*Subject:* [gptalk] Re: Error trying to generate RSOP from GPMC
Right, exactly. Details tab is your friend.
My only thing is, since I am just running a RSOP for a specific account
(say mine for example), how do I know which policy is the problem so I lcan
ook for that specific GUID to know which
Hope that makes sense.
Appreciate the help very much.
Cheers,
Jason
On 7/2/07, *Darren Mar-Elia* <darren@xxxxxxxxxx> wrote:
The GUID of a GPO is available in a variety of ways—most quickly via GPMC
by focusing on the GPO in question and selecting the "Details" tab, which
lists its ID, or GUID.
*From:* gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] *On
Behalf Of *Jason Williams
*Sent:* Monday, July 02, 2007 1:54 PM
*To:* gptalk@xxxxxxxxxxxxx
*Subject:* [gptalk] Re: Error trying to generate RSOP from GPMC
Ahh...I was in the wrong menu. Mondays....
Saw that response as well, the only catch is that it specifically asks for
the GUID of the offending policy, which I do not know.
Now that I am in the right menu and enabled it, I will still post the log.
Give me about 10 minutes.
Much appreciated.
JW
On 7/2/07, *Darren Mar-Elia* <darren@xxxxxxxxxx> wrote:
On that page, it talked about enabling the ability to view unmanaged
policies (preferences) in the GP editor by selecting View, Filtering.
Also, I found this response on the GP newsgroups that is related to IE
Maintenance use of zone settings.
http://groups.google.com/group/microsoft.public.windows.group_policy/browse_thread/thread/fd709e5f8eaee318/e239e8c95f7b4039?lnk=st&rnum=1&hl=en#e239e8c95f7b4039
Looks like it was in response to your question up there.
*From:* gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] *On
Behalf Of *Jason Williams
*Sent:* Monday, July 02, 2007 1:45 PM
*To:* gptalk@xxxxxxxxxxxxx
*Subject:* [gptalk] Re: Error trying to generate RSOP from GPMC
Ok...what am I missing here?
i downloaded your gpolog, put the files in the correct location, but can't
seem them in the GPO editor?
I feel like I am missing a step on how to add these properly.
Any tips? :)
Thanks,
Jason
On 7/2/07, *Darren Mar-Elia* <darren@xxxxxxxxxx> wrote:
Jason-
You can enable GPMC logging to get a log of any errors that GPMC throws.
Check out my ADM file –gpolog.adm ( http://www.gpoguy.com/gpolog.htm) and
apply that to the local GPO on the workstation where you're running this
from. Then, post the log file here.
*From:* gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] *On
Behalf Of *Jason Williams
*Sent:* Monday, July 02, 2007 12:28 PM
*To:* gptalk@xxxxxxxxxxxxx
*Subject:* [gptalk] Re: Error trying to generate RSOP from GPMC
Still no luck.
Still getting the same error in the 'summary' and 'settings' window.
I also see zero errors in the policy events as well.
Argh!
On 7/2/07, *Omar Droubi* <omar@xxxxxxxxxxxxxxxxxxxxx> wrote:
Try adding your account to the domain "Distributed COM users" group, wait
for AD replication, log off, log back on and try it again.
Omar
*From:* gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] *On
Behalf Of *Jason Williams
*Sent:* Monday, July 02, 2007 12:14 PM
*To:* gptalk@xxxxxxxxxxxxx
*Subject:* [gptalk] Re: Error trying to generate RSOP from GPMC
Long story short, we have a mix of IE 6 and IE 7 (something I am trying to
get a hold of).
I should have mentioned that this was from a Vista machine.
However, I did test it out on a Windows Server 2003 machine to see if I
would receive the same results, which I did.
As far as policies for IE 7, we just have a few some basic IE settings;
home page, trusted sites, but that seems to be the extent.
Im new at this job, so I am still getting my head wrapped around
everything.
The one other thing I have noticed is that, they do have a IE 7 "Block"
policy at the root, which does not allow delivery of IE 7.
I ran GPOTOOL and everything came back with no errors, so I am a little
stumped.
Any other information I can provide? Tests? Logs? Just let me know.
Thanks,
Jason
On 7/2/07, *Darren Mar-Elia* <darren@xxxxxxxxxx> wrote:
Jason-
Did you recently add IE 7 to your environment or start implementing IE
Maintenance policy on IE 7 systems?
Darren
*From:* gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] *On
Behalf Of *Jason Williams
*Sent:* Monday, July 02, 2007 12:06 PM
*To:* gptalk@xxxxxxxxxxxxx
*Subject:* [gptalk] Error trying to generate RSOP from GPMC
Hello everyone.
I have a odd thing going on this morning and I have been unsuccessful
trying to find the answer.
Not sure exactly what is going on, but I am trying to run some RSOP from
my desktop and I am getting some errors. I can browse, edit and view
settings for all my GPO's, but when I run a RSOP (tried my computer and my
account), I get this error below:
An error occured while generating report:
An unknown error occured while the HTML report was being generated.
I have had no luck googling for this and am a little concerned.
Anyone ever seen this before?
Thanks,
Jason
