[gptalk] Re: Strange results
- From: "Darren Mar-Elia" <darren@xxxxxxxxxx>
- To: <gptalk@xxxxxxxxxxxxx>
- Date: Thu, 25 Oct 2007 09:33:14 -0700
Typically when I initially set it up, it's a normal profile that gets all
the policy applied to it, then I set it to mandatory. If you have to update
it, set it back to normal, apply the new policies then back to mandatory.
Others may have a better process but that is what I've done.
Darren
From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
Behalf Of Bean, Scott
Sent: Thursday, October 25, 2007 8:36 AM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Strange results
Ok it wasn't set. Actually it wasn't there at all. So I replaced my
mandatory roaming profile with a backup I have and everything is back to
normal. What exactly is the best way to set up a mandatory profile. Off
the domain as an admin? Or in an OU that has block inheritance with a gpo
that has the same setting (minus some specific ones)? Problem that I run
into is that I occasionally have to open up the profile for specific apps to
actually work. While this has never had adverse effects until today.
From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
Behalf Of Darren Mar-Elia
Sent: Thursday, October 25, 2007 11:13 AM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Strange results
So if you go into the registry for that user under HKCU\Software \Microsoft
\Windows \CurrentVersion \Policies \Explorer\NoInternetIcon, do you see the
value set to 1?
Darren
From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
Behalf Of Bean, Scott
Sent: Thursday, October 25, 2007 8:08 AM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Strange results
I ran GPResults and I get the correct settings with the correct winning GPO
but when logging in as a user it is not the case. I thought perhaps the
policy got corrupt so I copied another policy with the correct permissions.
Did a gpupdate /force on a machine. Logged in as my user. Got the same
settings. Reran GPResults. And got the correct settings with the "new"
winning gpo but still seeing stuff I shouldn't when logged in.
From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
Behalf Of Darren Mar-Elia
Sent: Thursday, October 25, 2007 9:54 AM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Strange results
Scott-
I would make sure that the machine is still actually getting policy-because
it sounds like it is not. That could be because something changed in the
targeting of the policy, or for the user (I'm assuming most of these
policies are per-user?). You can run GPMC's GPResults Wizard to verify that
the computer and user are still receiving the policy in question and then go
from there.
Darren
From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
Behalf Of Bean, Scott
Sent: Thursday, October 25, 2007 5:52 AM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Strange results
So I have a site that some of the policy just stopped working. For
instance, the IE icon should not be seen on the desktop. But yet I am
seeing the icon. This just started happening about a week ago (of course I
just got told today). I am using desktop and start menu redirection.
When it was working the only thing users would see when they hit the start
button was programs and logoff. Now they see everything like a normal user
would running xp. Ie - documents, help and support, run, etc.
Hide Internet Explorer icon on desktop Software \Microsoft \Windows
\CurrentVersion \Policies \Explorer\NoInternetIcon 1
That is what is being applied according to the results from help and
support.
Any help would be greatly appreciated.
Other related posts:
