[gptalk] Re: Setting up GPP in a 2003 Environment

  • From: "Darren Mar-Elia" <darren@xxxxxxxxxx>
  • To: <gptalk@xxxxxxxxxxxxx>
  • Date: Tue, 29 Jul 2008 10:13:36 -0700

Good information Andrew. Thanks for that!




From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
Behalf Of Andrew McHale
Sent: Tuesday, July 29, 2008 9:32 AM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Setting up GPP in a 2003 Environment


Hi Darren,


Thanks for the swift and accurate reply! 


I'm glad I asked the question about identifying if CSE's are installed. When
I couldn't find it in the registry it made me dig a little deeper on my WSUS
server to see that the update for XP is actually showing as "Not Applicable"
rather than "Installed" (why those two values shown as a single result I
will never know).


I found this post (http://www.wsus.info/forums/index.php?showtopic=11994
> &view=findpost&p=41999) on the wsus.info forum stating that the XP CSE
update is not recognised as needed on XP machines running SP3! The issue is
due to be ironed out in an update due for release in August.


For those that understand it, Microsoft's response to this issue was:


"We are aware that our CSE package is not offered to SP3 yet. WU does not
have a way to target SP3 versions that have GP yet. Since our package should
only be offered to OS versions that have GP, we were not able to target
them. The required targeting should be available by the next WU release and
our CSE will then be offered to SP3."
"We plan to release the CSE package for SP3 in the August non-critical WU
(4th Tuesday) release which, I believe is the 24th."


Looks like I'm going to have to roll-out the update via that script Jakob
wrote. Don't you just love the irony!


I'll be back with more GPP questions once I progress further with this!


Thanks to all for the help







From: Darren Mar-Elia [mailto:darren@xxxxxxxxxx] 
Sent: 29 July 2008 16:35
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Setting up GPP in a 2003 Environment



The quickest and easiest way to make sure that the CSEs are installed is to
go into the registry on one of those clients under
HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions.
Browse the GUID-named keys. If GPP is successfully installed, you should see
the 2nd GUId-named key having something like "Group Policy Environment" as
its default value and the DLLName value being "gpprefcl.dll". If you see
entries with that DLLL name in the list, then it made it successfully to the


You don't have to copy any templates anywhere to get GP Preferences working.
All you need to do is fire up GPMC on that Vista, SP1 system, create a new
GPO just as you always would, edit it, and you should see a Preferences
container under each of Computer and User Configuration. In the simplest
case ,you can target that GPO as you normally would-but you just have more
options for doing so in there. 


Hope that helps get you started. Let us know if you have any other
questions, since I'm sure it will benefit a lot of folks on the list as





From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
Behalf Of Andrew McHale
Sent: Tuesday, July 29, 2008 8:12 AM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Setting up GPP in a 2003 Environment


Hi all,


I'm trying to introduce GPP's into my 2003 network and have come across some
really basic questions which I can't seem to find answers to. I have read
Jamie's GPP run down (including most of the links) and still couldn't work
it out (http://www.freelists.org/archives/gptalk/06-2008/msg00111.html).


Our network is made up of 6 Server 2003 SP2 machines and roughly 25 XP SP3
machines. There is a single Vista Ultimate SP1 machine running RSAT (my


I have used WSUS to deploy the client side extensions too all machines
(including servers).


Is there a simple guide to introducing GPP's to a 2003 environment? It'll
probably save me asking a lot of stupid questions here. So far today I've
spent 4 hours reading about GPP and all its seemed to tell me is the theory
behind it or how to configure a GPP GPO, not how to get your 2003 network to
the state where it is ready for these new GPO's.


An example of one of my stupid questions is: How can I locally check that
the CSE's are installed? I've looked in Add/Remove Programs (with updates
ticked) and Windows Features but can't see it. WSUS says its installed but
I'd like to manually check.


Also, I seem to remember someone mentioning previously that I need to copy
some templates or something from my Vista machine to a 2003 DC in order for
the new GPP GPO's to work. Is my memory correct and if so, what and where?


Many thanks




Other related posts: