Thanks Darren,I'll check the gpolog.adm hopefully that will help. I would say that theIE7 adm template is the one that comes with, it doesn't look like a custom job. Take Care --John -------------- Original message ---------------------- From: "Darren Mar-Elia" <darren@xxxxxxxxxx> > John- > There's actually logging that you can enable for loading of ADMs into GP > Editor. Check out my gpolog.adm (www.gpoguy.com/gpolog.htm) as it already > includes the log item. If that doesn't show the way, then the next question > I'd ask is, is that inetres.adm the one that comes with the IE 7 Admin. > Templates or did you get it from somewhere else? > > Darren > > -----Original Message----- > From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On > Behalf Of jfvanmeter@xxxxxxxxxxx > Sent: Tuesday, December 11, 2007 12:46 AM > To: gptalk@xxxxxxxxxxxxx > Subject: [gptalk] Admin Template Error > > Hello Everyone, I'm trying to trouble shoot a problem with one of NIST's > FDCC Administrative Templates that generates the following error when you > edit the group policy or run a rsop on a workstation that has had the group > policy applied. The template that is erroring is inetres.adm, NIST has > configured the IE 7 security, the target is a XP SP2 workstation with IE 6 > installed > > The error I'm getting is "The following keyword is tto long" the area > after/below the statement is blank. > > I've enabled two of the Group policy debug registry keys are there any other > I can enable or should enable? > > Output from: Is located in this file: Enable verbose logging by adding this > key or value. .to this registry key > Group Policy core (UserEnv) and registry CSE > %windir%\debug\usermode\UserEnv.log > UserEnvDebugLevel = REG_DWORD 30002 > HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon > > Security CSE > %windir%\security\logs\winlogon.log > ExtensionDebugLevel = REG_DWORD 0x2 > HKEY_LOCAL_MACHINE\Software\Microsoft\Windows > NT\CurrentVersion\Winlogon\GpExtensions\{827d319e-6eac-11d2-a4ea-00c04f79f83 > a} > > updated policy but no luck, nothing is logged in the event logs, winlogon > logs, userenv logs > > I've ran process monitor at the same time as rsop, but nothing. I'm going to > run process monitor today while I run gpupdate /force and see if that gets > me anything. > > Does anyone know what the string length in a admin template is? Does anyone > have any other thoughts on how to trouble shoot this.? > > Thanks in advance --John > > > > *********************** > You can unsubscribe from gptalk by sending email to > gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by > logging into the freelists.org Web interface. Archives for the list are > available at //www.freelists.org/archives/gptalk/ > ************************ > > *********************** > You can unsubscribe from gptalk by sending email to > gptalk-request@xxxxxxxxxxxxx > with 'unsubscribe' in the Subject field OR by logging into the freelists.org > Web > interface. Archives for the list are available at > //www.freelists.org/archives/gptalk/ > ************************ *********************** You can unsubscribe from gptalk by sending email to gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by logging into the freelists.org Web interface. Archives for the list are available at //www.freelists.org/archives/gptalk/ ************************