[gptalk] Re: New to the list, vexing issue here...

  • From: Stephen Barash <Stephen.Barash@xxxxxxxxxxxxxxx>
  • To: "gptalk@xxxxxxxxxxxxx" <gptalk@xxxxxxxxxxxxx>
  • Date: Thu, 2 Oct 2008 14:39:41 -0700

Hello Jamie, thanks for the reply

All under user config, always use gpupdate /force.

I do use an IE maintenance to set the home page. Wish I could get rid of it, 
but I don't know of a way to force home page without it.

Question about the test, is there any way I can get an accurate gpresult on a 
legacy user without instructing them to do a gpupdate /force? I just put a 
security deny on the IE maintenance GP for a legacy user, but gpresults for the 
user show the GP is still applying.

-Stephen


Stephen R. Barash

Clever Ducks-Computer Network Services

1413 Monterey Street

San Luis Obispo, CA 93401

p.805.543.1930 x15

www.cleverducks.com<http://www.cleverducks.com>

From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On 
Behalf Of Nelson, Jamie
Sent: Thursday, October 02, 2008 2:10 PM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: New to the list, vexing issue here...

Hmmm, strange. Do you have any older IE Maintenance Policy GPOs still in your 
environment? Sometimes they can conflict with Admin Template settings and 
produce odd results.

Have you tried a "gpupdate /force" for an existing user to see if that kicks 
things into gear for you?

Jamie Nelson | Operations Consultant | BI&T Infrastructure-Intel | Devon Energy 
Corporation | Work: 405.552.8054 | Mobile: 405.200.8088 | 
http://www.dvn.com<http://www.dvn.com/>

From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On 
Behalf Of Stephen Barash
Sent: Thursday, October 02, 2008 4:01 PM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] New to the list, vexing issue here...

Hello folks, I've been trying to roll out Administrative Template IE7 Intranet 
security zone changes via group policy for a long time. Gpmodeling shows the 
changes for existing users. With gpresults, the changes are never picked up - 
gpupdate doesn't help.

If I create a new user, the new user does pick up these changes. But no-go on 
the hundreds of existing users.

This is a load balanced terminal server environment, with roaming profiles. I 
thought this may be a 'tatooing' issue, but tools like Clean Registry Policy 
Utility don't seem appropriate as user profiles are stored at a centralized 
location on a file server.

Any suggestions? Especially for a way to propagate these changes en masse?

Thanks!
Stephen


________________________________

Confidentiality Warning: This message and any attachments are intended only for 
the use of the intended recipient(s), are confidential, and may be privileged. 
If you are not the intended recipient, you are hereby notified that any review, 
retransmission, conversion to hard copy, copying, circulation or other use of 
all or any portion of this message and any attachments is strictly prohibited. 
If you are not the intended recipient, please notify the sender immediately by 
return e-mail, and delete this message and any attachments from your system.

Other related posts: