[gptalk] Re: Setting up GPP in a 2003 Environment

  • From: "Andrew McHale" <Andrew.McHale@xxxxxxxxxxxxxx>
  • To: <gptalk@xxxxxxxxxxxxx>
  • Date: Tue, 29 Jul 2008 17:31:48 +0100

Hi Darren,


Thanks for the swift and accurate reply! 


I'm glad I asked the question about identifying if CSE's are installed.
When I couldn't find it in the registry it made me dig a little deeper
on my WSUS server to see that the update for XP is actually showing as
"Not Applicable" rather than "Installed" (why those two values shown as
a single result I will never know).


I found this post
1999) on the wsus.info forum stating that the XP CSE update is not
recognised as needed on XP machines running SP3! The issue is due to be
ironed out in an update due for release in August.


For those that understand it, Microsoft's response to this issue was:


"We are aware that our CSE package is not offered to SP3 yet. WU does
not have a way to target SP3 versions that have GP yet. Since our
package should only be offered to OS versions that have GP, we were not
able to target them. The required targeting should be available by the
next WU release and our CSE will then be offered to SP3."
"We plan to release the CSE package for SP3 in the August non-critical
WU (4th Tuesday) release which, I believe is the 24th."


Looks like I'm going to have to roll-out the update via that script
Jakob wrote. Don't you just love the irony!


I'll be back with more GPP questions once I progress further with this!


Thanks to all for the help







From: Darren Mar-Elia [mailto:darren@xxxxxxxxxx] 
Sent: 29 July 2008 16:35
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Setting up GPP in a 2003 Environment



The quickest and easiest way to make sure that the CSEs are installed is
to go into the registry on one of those clients under
HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions.
Browse the GUID-named keys. If GPP is successfully installed, you should
see the 2nd GUId-named key having something like "Group Policy
Environment" as its default value and the DLLName value being
"gpprefcl.dll". If you see entries with that DLLL name in the list, then
it made it successfully to the workstation.


You don't have to copy any templates anywhere to get GP Preferences
working. All you need to do is fire up GPMC on that Vista, SP1 system,
create a new GPO just as you always would, edit it, and you should see a
Preferences container under each of Computer and User Configuration. In
the simplest case ,you can target that GPO as you normally would-but you
just have more options for doing so in there. 


Hope that helps get you started. Let us know if you have any other
questions, since I'm sure it will benefit a lot of folks on the list as





From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx]
On Behalf Of Andrew McHale
Sent: Tuesday, July 29, 2008 8:12 AM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Setting up GPP in a 2003 Environment


Hi all,


I'm trying to introduce GPP's into my 2003 network and have come across
some really basic questions which I can't seem to find answers to. I
have read Jamie's GPP run down (including most of the links) and still
couldn't work it out


Our network is made up of 6 Server 2003 SP2 machines and roughly 25 XP
SP3 machines. There is a single Vista Ultimate SP1 machine running RSAT
(my machine).


I have used WSUS to deploy the client side extensions too all machines
(including servers).


Is there a simple guide to introducing GPP's to a 2003 environment?
It'll probably save me asking a lot of stupid questions here. So far
today I've spent 4 hours reading about GPP and all its seemed to tell me
is the theory behind it or how to configure a GPP GPO, not how to get
your 2003 network to the state where it is ready for these new GPO's.


An example of one of my stupid questions is: How can I locally check
that the CSE's are installed? I've looked in Add/Remove Programs (with
updates ticked) and Windows Features but can't see it. WSUS says its
installed but I'd like to manually check.


Also, I seem to remember someone mentioning previously that I need to
copy some templates or something from my Vista machine to a 2003 DC in
order for the new GPP GPO's to work. Is my memory correct and if so,
what and where?


Many thanks




Other related posts: