[gptalk] Re: Internet Explorer Processing Issues - automatic configuration script
- From: "Buonora, Craig \(GE, Research, consultant\)" <buonora@xxxxxx>
- To: <gptalk@xxxxxxxxxxxxx>
- Date: Fri, 30 Mar 2007 08:54:38 -0400
Darren thanks. I did do some testing and with that option checked
(Process even if the Group Policy objects have not changed) that
registry key does NOT change to "0" like it would need to in order for
the GPO to process regardless if the GPO changed or not.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows
NT\CurrentVersion\Winlogon\GPExtensions\{A2E30F80-D7DE-11d2-BBDE-00C04F8
6AE3B}]
"NoGPOListChanges"=dword:00000001
If I manually change this key to "0", then the GPO DOES process
regardless, if I do not manually change it withing the registry, the GPO
does NOT do it? What am I missing if anything here. I have seen numerous
web sites on this issue and without a resolution except for manually or
programatically changes that value to 0. Not sure why my GPO does not do
it.
If have 20 something GPO, all except for this one are "Not Configured".
Does that mean if this one is configured and the others are not the
others will override this one?
Thanks,
Craig
________________________________
From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx]
On Behalf Of Darren Mar-Elia
Sent: Thursday, March 29, 2007 3:19 PM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Internet Explorer Processing Issues - automatic
configuration script
Craig-
If you have a GPO that is turning off NoGPOListChanges (by setting it to
1) then you should see that in GPResults. You can also try downloading
and running my GPExpert Health Reporter product (
www.sdmsoftware.com/products.php) against that system, which will tell
you if that option is set on a given machine for a CSE ( among other
things).
Darren
From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx]
On Behalf Of Buonora, Craig (GE, Research, consultant)
Sent: Thursday, March 29, 2007 6:59 AM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Internet Explorer Processing Issues - automatic
configuration script
I have an issue where my automatic configuration script does not reset
after the given period of time within the GPO.
Background:
The GPO is not in Preference mode as I understand if it was the policy
or the settings would never reset. In the policy also under the Computer
Configuration portion of this GPO I have the options set to Process even
if the Group Policy objects have not changed ; still the settings do not
revert back if a users changes them, unless the users reboots their
machine or does a manual GPO refresh. I have ~ 20 other GPO, this one is
not processed first [I do not believe]. Also, I looked at the
NoGPOListChanges within the registry on a few machines within the same
OU that they GPO is applied. The key is set to "1' which I understand to
mean this option is turned off.
So my question if this key needs to be turned on (set to "0") and I did
this within one (this particular GPO for IE) are my other GPO turning
this option off which in turn making this option not work? How can I
ensure this option is turned on and stays on? Also, am I correct in
saying this option needs to be turned on? Am I missing something else
within my GPO that would not make this GPO force the change to the
automatic configuration script?
Thanks in advance for the help.
Craig
Other related posts: