[gptalk] Re: Internet Explorer Processing Issues - automatic configuration script
- From: "Darren Mar-Elia" <darren@xxxxxxxxxx>
- To: <gptalk@xxxxxxxxxxxxx>
- Date: Fri, 30 Mar 2007 07:07:00 -0700
Craig-
When you set the "Process even if the Group Policy objects have not changed"
policy, its not setting it under the GPExtensions key. It is setting it
under a Policies key (don't have it off hand but you can look in the ADM for
the location). That's probably why you are not seeing it. The CSE will look
in the Policies key preferentially for that setting. Now I'm not sure why
setting the policy does not force the behavior. In your example, "Not
Configured" doesn't effect a policy that is configured, even if there are 20
of them. So it should work unless that policy is being filtered out by
something.
Darren
From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
Behalf Of Buonora, Craig (GE, Research, consultant)
Sent: Friday, March 30, 2007 5:55 AM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Internet Explorer Processing Issues - automatic
configuration script
Darren thanks. I did do some testing and with that option checked (Process
even if the Group Policy objects have not changed) that registry key does
NOT change to "0" like it would need to in order for the GPO to process
regardless if the GPO changed or not.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows
NT\CurrentVersion\Winlogon\GPExtensions\{A2E30F80-D7DE-11d2-BBDE-00C04F86AE3
B}]
"NoGPOListChanges"=dword:00000001
If I manually change this key to "0", then the GPO DOES process regardless,
if I do not manually change it withing the registry, the GPO does NOT do it?
What am I missing if anything here. I have seen numerous web sites on this
issue and without a resolution except for manually or programatically
changes that value to 0. Not sure why my GPO does not do it.
If have 20 something GPO, all except for this one are "Not Configured". Does
that mean if this one is configured and the others are not the others will
override this one?
Thanks,
Craig
_____
From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
Behalf Of Darren Mar-Elia
Sent: Thursday, March 29, 2007 3:19 PM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Internet Explorer Processing Issues - automatic
configuration script
Craig-
If you have a GPO that is turning off NoGPOListChanges (by setting it to 1)
then you should see that in GPResults. You can also try downloading and
running my GPExpert Health Reporter product
(www.sdmsoftware.com/products.php) against that system, which will tell you
if that option is set on a given machine for a CSE ( among other things).
Darren
From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
Behalf Of Buonora, Craig (GE, Research, consultant)
Sent: Thursday, March 29, 2007 6:59 AM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Internet Explorer Processing Issues - automatic
configuration script
I have an issue where my automatic configuration script does not reset after
the given period of time within the GPO.
Background:
The GPO is not in Preference mode as I understand if it was the policy or
the settings would never reset. In the policy also under the Computer
Configuration portion of this GPO I have the options set to Process even if
the Group Policy objects have not changed ; still the settings do not revert
back if a users changes them, unless the users reboots their machine or does
a manual GPO refresh. I have ~ 20 other GPO, this one is not processed first
[I do not believe]. Also, I looked at the NoGPOListChanges within the
registry on a few machines within the same OU that they GPO is applied. The
key is set to "1' which I understand to mean this option is turned off.
So my question if this key needs to be turned on (set to "0") and I did this
within one (this particular GPO for IE) are my other GPO turning this option
off which in turn making this option not work? How can I ensure this option
is turned on and stays on? Also, am I correct in saying this option needs to
be turned on? Am I missing something else within my GPO that would not make
this GPO force the change to the automatic configuration script?
Thanks in advance for the help.
Craig
Other related posts:
