| Author | Messages | |
recluse
Posts:6
 | | 03/10/2009 12:19 PM |
|
Last time I'll make an edit, I promise! I'm running GPMC on a Windows XP SP2 Client, and the Group Policy Modeling Wizard shows the same incorrect/incomplete settings as the GPMC settings. On the server when I run RSOP I'm getting the correct information, just no easy way of printing it out. Sorry again and thanks in advance!
Sorry, I forgot to mention this is a Windows 2003 64-bit Server. I'm using GPMC version 1.0.2. This is for a library and we're basically trying to get a detailed report of what policies are configured for each of our servers for documentation purposes.
When creating a report of GPO settings, I noticed that not all of the policies are showing up in the list. For example, I have Disable changing Home Page settings ENABLED, Disable autocomplete for forms ENABLED and Do not allow autocomplete to save passwords ENABLED but the report shows that only the Disable changing Home Page settings ENABLED, and sometimes when I refresh it shows the Disable autocomplete for forms DISABLED policy which is completely wrong. There is only two GPOs linked to this OU, one is the Default Domain policy which only contains password policies, and this custom GPO that include the above settings. I've tried blocking inheritance just to be sure, and I get the same thing. Resultant Set of Policy shows the correct settings, so I'm at a loss and would greatly appreciate any help!
Thanks!
Windows Live™ Hotmail®:…more than just e-mail. Check it out.
Windows Live™ Groups: Create an online spot for your favorite groups to meet. Check it out.
_________________________________________________________________
Hotmail® is up to 70% faster. Now good news travels really fast.
http://windowslive.com/online/hotmail?ocid=TXT_TAGLM_WL_HM_70faster_032009
| | | |
| Syspro
Posts:0
| | 03/10/2009 4:38 PM |
| Hi Brad,
It would seem to me that it is a bug in the GPMC. The only other thing I can
think of is that replication is not working between your servers, so that
you are changing it on one server and reporting it on another server. If you
reopen the policy and look at it, I assume the settings are still in place?
And how are you making these settings, is it through IE maintenance,
Administrative templates or Group Policy Preferences?
I do have some software called PolMan which will report on all policy
settings, It should give exactly the same results as GPMC, but it may be
useful to get a "second opinion" on what is actually there. If can also
export the settings and you can send them to me to look at. You can get a
free trial, or you can talk to me offline about it.
Alan Cuthbertson
Policy Management Software (PolMan):-
http://www.sysprosoft.com/index.php?ref=activedir
<http://www.sysprosoft.com/index.php?ref=activedir&f=pol_summary.shtml>
&f=pol_summary.shtml
ADM Template Editor(Now with ADMX support):-
http://www.sysprosoft.com/index.php?ref=activedir
<http://www.sysprosoft.com/index.php?ref=activedir&f=adm_summary.shtml>
&f=adm_summary.shtml
Policy Log Reporter - including Preference logging(Free)
http://www.sysprosoft.com/index.php?ref=activedir
<http://www.sysprosoft.com/index.php?ref=activedir&f=policyreporter.shtml>
&f=policyreporter.shtml
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Brad
Sent: Wednesday, 11 March 2009 3:14 AM
To: xxxxxxxxxxxxxxxx
Subject: [gptalk] GPMC Incomplete Settings
Last time I'll make an edit, I promise! I'm running GPMC on a Windows XP SP2
Client, and the Group Policy Modeling Wizard shows the same
incorrect/incomplete settings as the GPMC settings. On the server when I run
RSOP I'm getting the correct information, just no easy way of printing it
out. Sorry again and thanks in advance!
_____
Sorry, I forgot to mention this is a Windows 2003 64-bit Server. I'm using
GPMC version 1.0.2. This is for a library and we're basically trying to get
a detailed report of what policies are configured for each of our servers
for documentation purposes.
_____
When creating a report of GPO settings, I noticed that not all of the
policies are showing up in the list. For example, I have Disable changing
Home Page settings ENABLED, Disable autocomplete for forms ENABLED and Do
not allow autocomplete to save passwords ENABLED but the report shows that
only the Disable changing Home Page settings ENABLED, and sometimes when I
refresh it shows the Disable autocomplete for forms DISABLED policy which is
completely wrong. There is only two GPOs linked to this OU, one is the
Default Domain policy which only contains password policies, and this custom
GPO that include the above settings. I've tried blocking inheritance just to
be sure, and I get the same thing. Resultant Set of Policy shows the correct
settings, so I'm at a loss and would greatly appreciate any help!
Thanks!
_____
Windows LiveT HotmailR:.more than just e-mail. Check
<http://windowslive.com/explore?ocid=TXT_TAGLM_WL_t2_hm_justgotbetter_explor
e_022009> it out.
_____
Windows LiveT Groups: Create an online spot for your favorite groups to
meet. Check
<http://windowslive.com/online/groups?ocid=TXT_TAGLM_WL_groups_032009> it
out.
_____
HotmailR is up to 70% faster. Now good news travels really fast. Find out
more.
<http://windowslive.com/online/hotmail?ocid=TXT_TAGLM_WL_HM_70faster_032009>
| | | |
| Darren
Posts:103
| | 03/11/2009 12:16 PM |
| Also, one thing that comes to mind is that perhaps your GPMC is configured
to look for ADM files (for reporting purposes) in a different place and so
what you're seeing in the GPMC report is that the settings may be showing up
under "Extra Registry Settings" instead of in their proper place? Do you see
that "Extra Registry Settings" section in your report Brad?
Darren
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Alan and Margaret Cuthbertson
Sent: Tuesday, March 10, 2009 1:34 PM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] GPMC Incomplete Settings
Hi Brad,
It would seem to me that it is a bug in the GPMC. The only other thing I can
think of is that replication is not working between your servers, so that
you are changing it on one server and reporting it on another server. If you
reopen the policy and look at it, I assume the settings are still in place?
And how are you making these settings, is it through IE maintenance,
Administrative templates or Group Policy Preferences?
I do have some software called PolMan which will report on all policy
settings, It should give exactly the same results as GPMC, but it may be
useful to get a "second opinion" on what is actually there. If can also
export the settings and you can send them to me to look at. You can get a
free trial, or you can talk to me offline about it.
Alan Cuthbertson
Policy Management Software (PolMan):-
http://www.sysprosoft.com/index.php?ref=activedir
<http://www.sysprosoft.com/index.php?ref=activedir&f=pol_summary.shtml>
&f=pol_summary.shtml
ADM Template Editor(Now with ADMX support):-
http://www.sysprosoft.com/index.php?ref=activedir
<http://www.sysprosoft.com/index.php?ref=activedir&f=adm_summary.shtml>
&f=adm_summary.shtml
Policy Log Reporter - including Preference logging(Free)
http://www.sysprosoft.com/index.php?ref=activedir
<http://www.sysprosoft.com/index.php?ref=activedir&f=policyreporter.shtml>
&f=policyreporter.shtml
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Brad
Sent: Wednesday, 11 March 2009 3:14 AM
To: xxxxxxxxxxxxxxxx
Subject: [gptalk] GPMC Incomplete Settings
Last time I'll make an edit, I promise! I'm running GPMC on a Windows XP SP2
Client, and the Group Policy Modeling Wizard shows the same
incorrect/incomplete settings as the GPMC settings. On the server when I run
RSOP I'm getting the correct information, just no easy way of printing it
out. Sorry again and thanks in advance!
_____
Sorry, I forgot to mention this is a Windows 2003 64-bit Server. I'm using
GPMC version 1.0.2. This is for a library and we're basically trying to get
a detailed report of what policies are configured for each of our servers
for documentation purposes.
_____
When creating a report of GPO settings, I noticed that not all of the
policies are showing up in the list. For example, I have Disable changing
Home Page settings ENABLED, Disable autocomplete for forms ENABLED and Do
not allow autocomplete to save passwords ENABLED but the report shows that
only the Disable changing Home Page settings ENABLED, and sometimes when I
refresh it shows the Disable autocomplete for forms DISABLED policy which is
completely wrong. There is only two GPOs linked to this OU, one is the
Default Domain policy which only contains password policies, and this custom
GPO that include the above settings. I've tried blocking inheritance just to
be sure, and I get the same thing. Resultant Set of Policy shows the correct
settings, so I'm at a loss and would greatly appreciate any help!
Thanks!
_____
Windows LiveT HotmailR:.more than just e-mail. Check
<http://windowslive.com/explore?ocid=TXT_TAGLM_WL_t2_hm_justgotbetter_explor
e_022009> it out.
_____
Windows LiveT Groups: Create an online spot for your favorite groups to
meet. Check
<http://windowslive.com/online/groups?ocid=TXT_TAGLM_WL_groups_032009> it
out.
_____
HotmailR is up to 70% faster. Now good news travels really fast. Find out
more.
<http://windowslive.com/online/hotmail?ocid=TXT_TAGLM_WL_HM_70faster_032009>
| | | |
| recluse
Posts:6
| | 03/17/2009 12:26 PM |
|
Hello,
Thanks for the assisstance, I downloaded PolMan and installed the trial version, then went to view the policies for my OU and it DID show up with the correct settings, it looked like all the policies I configured were showing up. However, when I go to double-click on the policy that was giving me trouble in GPMC, the FormsSuggest and FormsSuggestPassword, it gave the message "Note: There are active Registry keys that are not reflected in the ADM file.
Additional ADM Entries have been created to display them" and then you can click Ok. Is this possibly a reason why FormsSuggest and FormsSuggestPassword don't show up in GPMC? The adm file is inetres.adm and I make all policy changes through group policy preferences.
Thanks!
-Brad
From: xxxxxxxxxxxxxxxx
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] GPMC Incomplete Settings
Date: Wed, 11 Mar 2009 07:33:30 +1100
Hi Brad,
It would seem to me that it is a bug in the GPMC. The only other thing I can think of is that replication is not working between your servers, so that you are changing it on one server and reporting it on another server. If you reopen the policy and look at it, I assume the settings are still in place? And how are you making these settings, is it through IE maintenance, Administrative templates or Group Policy Preferences?
I do have some software called PolMan which will report on all policy settings, It should give exactly the same results as GPMC, but it may be useful to get a “second opinion” on what is actually there. If can also export the settings and you can send them to me to look at. You can get a free trial, or you can talk to me offline about it.
Alan Cuthbertson
Policy Management Software (PolMan):-
http://www.sysprosoft.com/index.php?ref=activedir&f=pol_summary.shtml
ADM Template Editor(Now with ADMX support):-
http://www.sysprosoft.com/index.php?ref=activedir&f=adm_summary.shtml
Policy Log Reporter – including Preference logging(Free)
http://www.sysprosoft.com/index.php?ref=activedir&f=policyreporter.shtml
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On Behalf Of Brad
Sent: Wednesday, 11 March 2009 3:14 AM
To: xxxxxxxxxxxxxxxx
Subject: [gptalk] GPMC Incomplete Settings
Last time I'll make an edit, I promise! I'm running GPMC on a Windows XP SP2 Client, and the Group Policy Modeling Wizard shows the same incorrect/incomplete settings as the GPMC settings. On the server when I run RSOP I'm getting the correct information, just no easy way of printing it out. Sorry again and thanks in advance!
Sorry, I forgot to mention this is a Windows 2003 64-bit Server. I'm using GPMC version 1.0.2. This is for a library and we're basically trying to get a detailed report of what policies are configured for each of our servers for documentation purposes.
When creating a report of GPO settings, I noticed that not all of the policies are showing up in the list. For example, I have Disable changing Home Page settings ENABLED, Disable autocomplete for forms ENABLED and Do not allow autocomplete to save passwords ENABLED but the report shows that only the Disable changing Home Page settings ENABLED, and sometimes when I refresh it shows the Disable autocomplete for forms DISABLED policy which is completely wrong. There is only two GPOs linked to this OU, one is the Default Domain policy which only contains password policies, and this custom GPO that include the above settings. I've tried blocking inheritance just to be sure, and I get the same thing. Resultant Set of Policy shows the correct settings, so I'm at a loss and would greatly appreciate any help!
Thanks!
Windows Live™ Hotmail®:…more than just e-mail. Check it out.
Windows Live™ Groups: Create an online spot for your favorite groups to meet. Check it out.
Hotmail® is up to 70% faster. Now good news travels really fast. Find out more.
_________________________________________________________________
Windows Live™ Contacts: Organize your contact list.
http://windowslive.com/connect/post/marcusatmicrosoft.spaces.live.com-Blog-cns!503D1D86EBB2B53C!2285.entry?ocid=TXT_TAGLM_WL_UGC_Contacts_032009
| | | |
| recluse
Posts:6
| | 03/17/2009 1:14 PM |
|
Also, I forgot to mention this but when I first open the program it says "This workstation does not support viewing ADMX files in GPMC".
From: xxxxxxxxxxxxxxxx
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] GPMC Incomplete Settings
Date: Tue, 17 Mar 2009 12:20:51 -0400
Hello,
Thanks for the assisstance, I downloaded PolMan and installed the trial version, then went to view the policies for my OU and it DID show up with the correct settings, it looked like all the policies I configured were showing up. However, when I go to double-click on the policy that was giving me trouble in GPMC, the FormsSuggest and FormsSuggestPassword, it gave the message "Note: There are active Registry keys that are not reflected in the ADM file.
Additional ADM Entries have been created to display them" and then you can click Ok. Is this possibly a reason why FormsSuggest and FormsSuggestPassword don't show up in GPMC? The adm file is inetres.adm and I make all policy changes through group policy preferences.
Thanks!
-Brad
From: xxxxxxxxxxxxxxxx
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] GPMC Incomplete Settings
Date: Wed, 11 Mar 2009 07:33:30 +1100
Hi Brad,
It would seem to me that it is a bug in the GPMC. The only other thing I can think of is that replication is not working between your servers, so that you are changing it on one server and reporting it on another server. If you reopen the policy and look at it, I assume the settings are still in place? And how are you making these settings, is it through IE maintenance, Administrative templates or Group Policy Preferences?
I do have some software called PolMan which will report on all policy settings, It should give exactly the same results as GPMC, but it may be useful to get a “second opinion” on what is actually there. If can also export the settings and you can send them to me to look at. You can get a free trial, or you can talk to me offline about it.
Alan Cuthbertson
Policy Management Software (PolMan):-
http://www.sysprosoft.com/index.php?ref=activedir&f=pol_summary.shtml
ADM Template Editor(Now with ADMX support):-
http://www.sysprosoft.com/index.php?ref=activedir&f=adm_summary.shtml
Policy Log Reporter – including Preference logging(Free)
http://www.sysprosoft.com/index.php?ref=activedir&f=policyreporter.shtml
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On Behalf Of Brad
Sent: Wednesday, 11 March 2009 3:14 AM
To: xxxxxxxxxxxxxxxx
Subject: [gptalk] GPMC Incomplete Settings
Last time I'll make an edit, I promise! I'm running GPMC on a Windows XP SP2 Client, and the Group Policy Modeling Wizard shows the same incorrect/incomplete settings as the GPMC settings. On the server when I run RSOP I'm getting the correct information, just no easy way of printing it out. Sorry again and thanks in advance!
Sorry, I forgot to mention this is a Windows 2003 64-bit Server. I'm using GPMC version 1.0.2. This is for a library and we're basically trying to get a detailed report of what policies are configured for each of our servers for documentation purposes.
When creating a report of GPO settings, I noticed that not all of the policies are showing up in the list. For example, I have Disable changing Home Page settings ENABLED, Disable autocomplete for forms ENABLED and Do not allow autocomplete to save passwords ENABLED but the report shows that only the Disable changing Home Page settings ENABLED, and sometimes when I refresh it shows the Disable autocomplete for forms DISABLED policy which is completely wrong. There is only two GPOs linked to this OU, one is the Default Domain policy which only contains password policies, and this custom GPO that include the above settings. I've tried blocking inheritance just to be sure, and I get the same thing. Resultant Set of Policy shows the correct settings, so I'm at a loss and would greatly appreciate any help!
Thanks!
Windows Live™ Hotmail®:…more than just e-mail. Check it out.
Windows Live™ Groups: Create an online spot for your favorite groups to meet. Check it out.
Hotmail® is up to 70% faster. Now good news travels really fast. Find out more.
Windows Live™ Contacts: Organize your contact list. Check it out.
_________________________________________________________________
Windows Live™ Groups: Create an online spot for your favorite groups to meet.
http://windowslive.com/online/groups?ocid=TXT_TAGLM_WL_groups_032009
| | | |
| Darren
Posts:103
| | 03/17/2009 1:48 PM |
| Brad-
Was this GPO created on a Vista or 2008 box? When you create a GPO on those
systems, no ADM files are copied up to the GPO storage in SYSVOL. Then, if
you try viewing that GPO on a 2003 or XP system within a GPMC settings
report, those settings may appear under "Extra Registry Settings" rather
than as fully-resolved policies. This has to do with how GPMC resolves the
location to the underlying ADM or ADMX files. For example, in GPMC under
View, Options, Reporting on the menu, you should have an option to change
how it searches for ADM files. The default is to look in c:\windows\inf
first and then in the SYSVOL portion of the GPO but you can also change that
path. Also note that GPMC on 2003 or XP is unable to parse ADMX files at
all, which may explain the message you are seeing (although I'm not familiar
with Alan's program).
Darren
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Brad
Sent: Tuesday, March 17, 2009 10:10 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] GPMC Incomplete Settings
Also, I forgot to mention this but when I first open the program it says
"This workstation does not support viewing ADMX files in GPMC".
_____
From: xxxxxxxxxxxxxxxx
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] GPMC Incomplete Settings
Date: Tue, 17 Mar 2009 12:20:51 -0400
Hello,
Thanks for the assisstance, I downloaded PolMan and installed the trial
version, then went to view the policies for my OU and it DID show up with
the correct settings, it looked like all the policies I configured were
showing up. However, when I go to double-click on the policy that was giving
me trouble in GPMC, the FormsSuggest and FormsSuggestPassword, it gave the
message "Note: There are active Registry keys that are not reflected in the
ADM file.
Additional ADM Entries have been created to display them" and then you can
click Ok. Is this possibly a reason why FormsSuggest and
FormsSuggestPassword don't show up in GPMC? The adm file is inetres.adm and
I make all policy changes through group policy preferences.
Thanks!
-Brad
_____
From: xxxxxxxxxxxxxxxx
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] GPMC Incomplete Settings
Date: Wed, 11 Mar 2009 07:33:30 +1100
Hi Brad,
It would seem to me that it is a bug in the GPMC. The only other thing I can
think of is that replication is not working between your servers, so that
you are changing it on one server and reporting it on another server. If you
reopen the policy and look at it, I assume the settings are still in place?
And how are you making these settings, is it through IE maintenance,
Administrative templates or Group Policy Preferences?
I do have some software called PolMan which will report on all policy
settings, It should give exactly the same results as GPMC, but it may be
useful to get a "second opinion" on what is actually there. If can also
export the settings and you can send them to me to look at. You can get a
free trial, or you can talk to me offline about it.
Alan Cuthbertson
Policy Management Software (PolMan):-
http://www.sysprosoft.com/index.php?ref=activedir
<http://www.sysprosoft.com/index.php?ref=activedir&f=pol_summary.shtml>
&f=pol_summary.shtml
ADM Template Editor(Now with ADMX support):-
http://www.sysprosoft.com/index.php?ref=activedir
<http://www.sysprosoft.com/index.php?ref=activedir&f=adm_summary.shtml>
&f=adm_summary.shtml
Policy Log Reporter - including Preference logging(Free)
http://www.sysprosoft.com/index.php?ref=activedir
<http://www.sysprosoft.com/index.php?ref=activedir&f=policyreporter.shtml>
&f=policyreporter.shtml
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Brad
Sent: Wednesday, 11 March 2009 3:14 AM
To: xxxxxxxxxxxxxxxx
Subject: [gptalk] GPMC Incomplete Settings
Last time I'll make an edit, I promise! I'm running GPMC on a Windows XP SP2
Client, and the Group Policy Modeling Wizard shows the same
incorrect/incomplete settings as the GPMC settings. On the server when I run
RSOP I'm getting the correct information, just no easy way of printing it
out. Sorry again and thanks in advance!
_____
Sorry, I forgot to mention this is a Windows 2003 64-bit Server. I'm using
GPMC version 1.0.2. This is for a library and we're basically trying to get
a detailed report of what policies are configured for each of our servers
for documentation purposes.
_____
When creating a report of GPO settings, I noticed that not all of the
policies are showing up in the list. For example, I have Disable changing
Home Page settings ENABLED, Disable autocomplete for forms ENABLED and Do
not allow autocomplete to save passwords ENABLED but the report shows that
only the Disable changing Home Page settings ENABLED, and sometimes when I
refresh it shows the Disable autocomplete for forms DISABLED policy which is
completely wrong. There is only two GPOs linked to this OU, one is the
Default Domain policy which only contains password policies, and this custom
GPO that include the above settings. I've tried blocking inheritance just to
be sure, and I get the same thing. Resultant Set of Policy shows the correct
settings, so I'm at a loss and would greatly appreciate any help!
Thanks!
_____
Windows LiveT HotmailR:.more than just e-mail. Check
<http://windowslive.com/explore?ocid=TXT_TAGLM_WL_t2_hm_justgotbetter_explor
e_022009> it out.
_____
Windows LiveT Groups: Create an online spot for your favorite groups to
meet. Check
<http://windowslive.com/online/groups?ocid=TXT_TAGLM_WL_groups_032009> it
out.
_____
HotmailR is up to 70% faster. Now good news travels really fast. Find
<http://windowslive.com/online/hotmail?ocid=TXT_TAGLM_WL_HM_70faster_032009>
out more.
_____
Windows LiveT Contacts: Organize your contact list. Check
<http://windowslive.com/connect/post/marcusatmicrosoft.spaces.live.com-Blog-
cns!503D1D86EBB2B53C!2285.entry?ocid=TXT_TAGLM_WL_UGC_Contacts_032009> it
out.
_____
Windows LiveT Groups: Create an online spot for your favorite groups to
meet. Check it out.
<http://windowslive.com/online/groups?ocid=TXT_TAGLM_WL_groups_032009>
| | | |
| recluse
Posts:6
| | 03/17/2009 2:28 PM |
|
Sorry, the GPO was created on a Windows Server 2003 box and GPMC is being used on Windows XP and I'm not seeing an option labeled Extra Registry Settings. Thanks for clarifying!
-Brad
From: xxxxxxxxxxxxxxxx
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] GPMC Incomplete Settings
Date: Tue, 17 Mar 2009 10:43:44 -0700
Brad-
Was this GPO created on a Vista or 2008 box? When you create a GPO on those systems, no ADM files are copied up to the GPO storage in SYSVOL. Then, if you try viewing that GPO on a 2003 or XP system within a GPMC settings report, those settings may appear under “Extra Registry Settings” rather than as fully-resolved policies. This has to do with how GPMC resolves the location to the underlying ADM or ADMX files. For example, in GPMC under View, Options, Reporting on the menu, you should have an option to change how it searches for ADM files. The default is to look in c:\windows\inf first and then in the SYSVOL portion of the GPO but you can also change that path. Also note that GPMC on 2003 or XP is unable to parse ADMX files at all, which may explain the message you are seeing (although I’m not familiar with Alan’s program).
Darren
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On Behalf Of Brad
Sent: Tuesday, March 17, 2009 10:10 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] GPMC Incomplete Settings
Also, I forgot to mention this but when I first open the program it says "This workstation does not support viewing ADMX files in GPMC".
From: xxxxxxxxxxxxxxxx
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] GPMC Incomplete Settings
Date: Tue, 17 Mar 2009 12:20:51 -0400
Hello,
Thanks for the assisstance, I downloaded PolMan and installed the trial version, then went to view the policies for my OU and it DID show up with the correct settings, it looked like all the policies I configured were showing up. However, when I go to double-click on the policy that was giving me trouble in GPMC, the FormsSuggest and FormsSuggestPassword, it gave the message "Note: There are active Registry keys that are not reflected in the ADM file.
Additional ADM Entries have been created to display them" and then you can click Ok. Is this possibly a reason why FormsSuggest and FormsSuggestPassword don't show up in GPMC? The adm file is inetres.adm and I make all policy changes through group policy preferences.
Thanks!
-Brad
From: xxxxxxxxxxxxxxxx
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] GPMC Incomplete Settings
Date: Wed, 11 Mar 2009 07:33:30 +1100
Hi Brad,
It would seem to me that it is a bug in the GPMC. The only other thing I can think of is that replication is not working between your servers, so that you are changing it on one server and reporting it on another server. If you reopen the policy and look at it, I assume the settings are still in place? And how are you making these settings, is it through IE maintenance, Administrative templates or Group Policy Preferences?
I do have some software called PolMan which will report on all policy settings, It should give exactly the same results as GPMC, but it may be useful to get a “second opinion” on what is actually there. If can also export the settings and you can send them to me to look at. You can get a free trial, or you can talk to me offline about it.
Alan Cuthbertson
Policy Management Software (PolMan):-
http://www.sysprosoft.com/index.php?ref=activedir&f=pol_summary.shtml
ADM Template Editor(Now with ADMX support):-
http://www.sysprosoft.com/index.php?ref=activedir&f=adm_summary.shtml
Policy Log Reporter – including Preference logging(Free)
http://www.sysprosoft.com/index.php?ref=activedir&f=policyreporter.shtml
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On Behalf Of Brad
Sent: Wednesday, 11 March 2009 3:14 AM
To: xxxxxxxxxxxxxxxx
Subject: [gptalk] GPMC Incomplete Settings
Last time I'll make an edit, I promise! I'm running GPMC on a Windows XP SP2 Client, and the Group Policy Modeling Wizard shows the same incorrect/incomplete settings as the GPMC settings. On the server when I run RSOP I'm getting the correct information, just no easy way of printing it out. Sorry again and thanks in advance!
Sorry, I forgot to mention this is a Windows 2003 64-bit Server. I'm using GPMC version 1.0.2. This is for a library and we're basically trying to get a detailed report of what policies are configured for each of our servers for documentation purposes.
When creating a report of GPO settings, I noticed that not all of the policies are showing up in the list. For example, I have Disable changing Home Page settings ENABLED, Disable autocomplete for forms ENABLED and Do not allow autocomplete to save passwords ENABLED but the report shows that only the Disable changing Home Page settings ENABLED, and sometimes when I refresh it shows the Disable autocomplete for forms DISABLED policy which is completely wrong. There is only two GPOs linked to this OU, one is the Default Domain policy which only contains password policies, and this custom GPO that include the above settings. I've tried blocking inheritance just to be sure, and I get the same thing. Resultant Set of Policy shows the correct settings, so I'm at a loss and would greatly appreciate any help!
Thanks!
Windows Live™ Hotmail®:…more than just e-mail. Check it out.
Windows Live™ Groups: Create an online spot for your favorite groups to meet. Check it out.
Hotmail® is up to 70% faster. Now good news travels really fast. Find out more.
Windows Live™ Contacts: Organize your contact list. Check it out.
Windows Live™ Groups: Create an online spot for your favorite groups to meet. Check it out.
_________________________________________________________________
Windows Live™ Groups: Create an online spot for your favorite groups to meet.
http://windowslive.com/online/groups?ocid=TXT_TAGLM_WL_groups_032009
| | | |
| Darren
Posts:103
| | 03/17/2009 2:33 PM |
| Got it. Ok. So that means that there is likely something corrupt in that
setting file for the setting not to show up at all. Are the settings
actually being successfully processed by clients?
Darren
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Brad
Sent: Tuesday, March 17, 2009 11:22 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] GPMC Incomplete Settings
Sorry, the GPO was created on a Windows Server 2003 box and GPMC is being
used on Windows XP and I'm not seeing an option labeled Extra Registry
Settings. Thanks for clarifying!
-Brad
_____
From: xxxxxxxxxxxxxxxx
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] GPMC Incomplete Settings
Date: Tue, 17 Mar 2009 10:43:44 -0700
Brad-
Was this GPO created on a Vista or 2008 box? When you create a GPO on those
systems, no ADM files are copied up to the GPO storage in SYSVOL. Then, if
you try viewing that GPO on a 2003 or XP system within a GPMC settings
report, those settings may appear under "Extra Registry Settings" rather
than as fully-resolved policies. This has to do with how GPMC resolves the
location to the underlying ADM or ADMX files. For example, in GPMC under
View, Options, Reporting on the menu, you should have an option to change
how it searches for ADM files. The default is to look in c:\windows\inf
first and then in the SYSVOL portion of the GPO but you can also change that
path. Also note that GPMC on 2003 or XP is unable to parse ADMX files at
all, which may explain the message you are seeing (although I'm not familiar
with Alan's program).
Darren
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Brad
Sent: Tuesday, March 17, 2009 10:10 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] GPMC Incomplete Settings
Also, I forgot to mention this but when I first open the program it says
"This workstation does not support viewing ADMX files in GPMC".
_____
From: xxxxxxxxxxxxxxxx
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] GPMC Incomplete Settings
Date: Tue, 17 Mar 2009 12:20:51 -0400
Hello,
Thanks for the assisstance, I downloaded PolMan and installed the trial
version, then went to view the policies for my OU and it DID show up with
the correct settings, it looked like all the policies I configured were
showing up. However, when I go to double-click on the policy that was giving
me trouble in GPMC, the FormsSuggest and FormsSuggestPassword, it gave the
message "Note: There are active Registry keys that are not reflected in the
ADM file.
Additional ADM Entries have been created to display them" and then you can
click Ok. Is this possibly a reason why FormsSuggest and
FormsSuggestPassword don't show up in GPMC? The adm file is inetres.adm and
I make all policy changes through group policy preferences.
Thanks!
-Brad
_____
From: xxxxxxxxxxxxxxxx
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] GPMC Incomplete Settings
Date: Wed, 11 Mar 2009 07:33:30 +1100
Hi Brad,
It would seem to me that it is a bug in the GPMC. The only other thing I can
think of is that replication is not working between your servers, so that
you are changing it on one server and reporting it on another server. If you
reopen the policy and look at it, I assume the settings are still in place?
And how are you making these settings, is it through IE maintenance,
Administrative templates or Group Policy Preferences?
I do have some software called PolMan which will report on all policy
settings, It should give exactly the same results as GPMC, but it may be
useful to get a "second opinion" on what is actually there. If can also
export the settings and you can send them to me to look at. You can get a
free trial, or you can talk to me offline about it.
Alan Cuthbertson
Policy Management Software (PolMan):-
http://www.sysprosoft.com/index.php?ref=activedir
<http://www.sysprosoft.com/index.php?ref=activedir&f=pol_summary.shtml>
&f=pol_summary.shtml
ADM Template Editor(Now with ADMX support):-
http://www.sysprosoft.com/index.php?ref=activedir
<http://www.sysprosoft.com/index.php?ref=activedir&f=adm_summary.shtml>
&f=adm_summary.shtml
Policy Log Reporter - including Preference logging(Free)
http://www.sysprosoft.com/index.php?ref=activedir
<http://www.sysprosoft.com/index.php?ref=activedir&f=policyreporter.shtml>
&f=policyreporter.shtml
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Brad
Sent: Wednesday, 11 March 2009 3:14 AM
To: xxxxxxxxxxxxxxxx
Subject: [gptalk] GPMC Incomplete Settings
Last time I'll make an edit, I promise! I'm running GPMC on a Windows XP SP2
Client, and the Group Policy Modeling Wizard shows the same
incorrect/incomplete settings as the GPMC settings. On the server when I run
RSOP I'm getting the correct information, just no easy way of printing it
out. Sorry again and thanks in advance!
_____
Sorry, I forgot to mention this is a Windows 2003 64-bit Server. I'm using
GPMC version 1.0.2. This is for a library and we're basically trying to get
a detailed report of what policies are configured for each of our servers
for documentation purposes.
_____
When creating a report of GPO settings, I noticed that not all of the
policies are showing up in the list. For example, I have Disable changing
Home Page settings ENABLED, Disable autocomplete for forms ENABLED and Do
not allow autocomplete to save passwords ENABLED but the report shows that
only the Disable changing Home Page settings ENABLED, and sometimes when I
refresh it shows the Disable autocomplete for forms DISABLED policy which is
completely wrong. There is only two GPOs linked to this OU, one is the
Default Domain policy which only contains password policies, and this custom
GPO that include the above settings. I've tried blocking inheritance just to
be sure, and I get the same thing. Resultant Set of Policy shows the correct
settings, so I'm at a loss and would greatly appreciate any help!
Thanks!
_____
Windows LiveT HotmailR:.more than just e-mail. Check
<http://windowslive.com/explore?ocid=TXT_TAGLM_WL_t2_hm_justgotbetter_explor
e_022009> it out.
_____
Windows LiveT Groups: Create an online spot for your favorite groups to
meet. Check
<http://windowslive.com/online/groups?ocid=TXT_TAGLM_WL_groups_032009> it
out.
_____
HotmailR is up to 70% faster. Now good news travels really fast. Find
<http://windowslive.com/online/hotmail?ocid=TXT_TAGLM_WL_HM_70faster_032009>
out more.
_____
Windows LiveT Contacts: Organize your contact list. Check
<http://windowslive.com/connect/post/marcusatmicrosoft.spaces.live.com-Blog-
cns!503D1D86EBB2B53C!2285.entry?ocid=TXT_TAGLM_WL_UGC_Contacts_032009> it
out.
_____
Windows LiveT Groups: Create an online spot for your favorite groups to
meet. Check
<http://windowslive.com/online/groups?ocid=TXT_TAGLM_WL_groups_032009> it
out.
_____
Windows LiveT Groups: Create an online spot for your favorite groups to
meet. Check it out.
<http://windowslive.com/online/groups?ocid=TXT_TAGLM_WL_groups_032009>
| | | |
| recluse
Posts:6
| | 03/17/2009 2:43 PM |
|
Yeah, I've tested it on individual PCs and it works, and resultant set of policy indicates that it's being applied. I just thought it was kind of bizarre that it doesn't show the settings in GPMC. If it's a bug and not something that's normal and I was misunderstanding, I think I can live with that. Is there another program like RSOP or the settings view of the GPMC that I can print an organized list of settings? Unfortunately the Polmon program only lists views by I think adm files and registry paths and not the way it's laid out in Group Policy Editor like we need.
From: xxxxxxxxxxxxxxxx
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] GPMC Incomplete Settings
Date: Tue, 17 Mar 2009 11:26:34 -0700
Got it. Ok. So that means that there is likely something corrupt in that setting file for the setting not to show up at all. Are the settings actually being successfully processed by clients?
Darren
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On Behalf Of Brad
Sent: Tuesday, March 17, 2009 11:22 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] GPMC Incomplete Settings
Sorry, the GPO was created on a Windows Server 2003 box and GPMC is being used on Windows XP and I'm not seeing an option labeled Extra Registry Settings. Thanks for clarifying!
-Brad
From: xxxxxxxxxxxxxxxx
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] GPMC Incomplete Settings
Date: Tue, 17 Mar 2009 10:43:44 -0700
Brad-
Was this GPO created on a Vista or 2008 box? When you create a GPO on those systems, no ADM files are copied up to the GPO storage in SYSVOL. Then, if you try viewing that GPO on a 2003 or XP system within a GPMC settings report, those settings may appear under “Extra Registry Settings” rather than as fully-resolved policies. This has to do with how GPMC resolves the location to the underlying ADM or ADMX files. For example, in GPMC under View, Options, Reporting on the menu, you should have an option to change how it searches for ADM files. The default is to look in c:\windows\inf first and then in the SYSVOL portion of the GPO but you can also change that path. Also note that GPMC on 2003 or XP is unable to parse ADMX files at all, which may explain the message you are seeing (although I’m not familiar with Alan’s program).
Darren
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On Behalf Of Brad
Sent: Tuesday, March 17, 2009 10:10 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] GPMC Incomplete Settings
Also, I forgot to mention this but when I first open the program it says "This workstation does not support viewing ADMX files in GPMC".
From: xxxxxxxxxxxxxxxx
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] GPMC Incomplete Settings
Date: Tue, 17 Mar 2009 12:20:51 -0400
Hello,
Thanks for the assisstance, I downloaded PolMan and installed the trial version, then went to view the policies for my OU and it DID show up with the correct settings, it looked like all the policies I configured were showing up. However, when I go to double-click on the policy that was giving me trouble in GPMC, the FormsSuggest and FormsSuggestPassword, it gave the message "Note: There are active Registry keys that are not reflected in the ADM file.
Additional ADM Entries have been created to display them" and then you can click Ok. Is this possibly a reason why FormsSuggest and FormsSuggestPassword don't show up in GPMC? The adm file is inetres.adm and I make all policy changes through group policy preferences.
Thanks!
-Brad
From: xxxxxxxxxxxxxxxx
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] GPMC Incomplete Settings
Date: Wed, 11 Mar 2009 07:33:30 +1100
Hi Brad,
It would seem to me that it is a bug in the GPMC. The only other thing I can think of is that replication is not working between your servers, so that you are changing it on one server and reporting it on another server. If you reopen the policy and look at it, I assume the settings are still in place? And how are you making these settings, is it through IE maintenance, Administrative templates or Group Policy Preferences?
I do have some software called PolMan which will report on all policy settings, It should give exactly the same results as GPMC, but it may be useful to get a “second opinion” on what is actually there. If can also export the settings and you can send them to me to look at. You can get a free trial, or you can talk to me offline about it.
Alan Cuthbertson
Policy Management Software (PolMan):-
http://www.sysprosoft.com/index.php?ref=activedir&f=pol_summary.shtml
ADM Template Editor(Now with ADMX support):-
http://www.sysprosoft.com/index.php?ref=activedir&f=adm_summary.shtml
Policy Log Reporter – including Preference logging(Free)
http://www.sysprosoft.com/index.php?ref=activedir&f=policyreporter.shtml
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On Behalf Of Brad
Sent: Wednesday, 11 March 2009 3:14 AM
To: xxxxxxxxxxxxxxxx
Subject: [gptalk] GPMC Incomplete Settings
Last time I'll make an edit, I promise! I'm running GPMC on a Windows XP SP2 Client, and the Group Policy Modeling Wizard shows the same incorrect/incomplete settings as the GPMC settings. On the server when I run RSOP I'm getting the correct information, just no easy way of printing it out. Sorry again and thanks in advance!
Sorry, I forgot to mention this is a Windows 2003 64-bit Server. I'm using GPMC version 1.0.2. This is for a library and we're basically trying to get a detailed report of what policies are configured for each of our servers for documentation purposes.
When creating a report of GPO settings, I noticed that not all of the policies are showing up in the list. For example, I have Disable changing Home Page settings ENABLED, Disable autocomplete for forms ENABLED and Do not allow autocomplete to save passwords ENABLED but the report shows that only the Disable changing Home Page settings ENABLED, and sometimes when I refresh it shows the Disable autocomplete for forms DISABLED policy which is completely wrong. There is only two GPOs linked to this OU, one is the Default Domain policy which only contains password policies, and this custom GPO that include the above settings. I've tried blocking inheritance just to be sure, and I get the same thing. Resultant Set of Policy shows the correct settings, so I'm at a loss and would greatly appreciate any help!
Thanks!
Windows Live™ Hotmail®:…more than just e-mail. Check it out.
Windows Live™ Groups: Create an online spot for your favorite groups to meet. Check it out.
Hotmail® is up to 70% faster. Now good news travels really fast. Find out more.
Windows Live™ Contacts: Organize your contact list. Check it out.
Windows Live™ Groups: Create an online spot for your favorite groups to meet. Check it out.
Windows Live™ Groups: Create an online spot for your favorite groups to meet. Check it out.
_________________________________________________________________
Express your personality in color! Preview and select themes for Hotmail®.
http://www.windowslive-hotmail.com/LearnMore/personalize.aspx?ocid=TXT_MSGTX_WL_HM_express_032009#colortheme
| | | |
| Darren
Posts:103
| | 03/17/2009 3:33 PM |
| Any of the existing reporting solutions out there usually rely on the same
GPMC APIs, which isn't going to help you if it is a GPMC bug. However, I'm
curious about this because I don't see any obvious reason why this would not
show up in GPMC settings reports. I mean, these are standard policies that
should not cause GPMC any issues. Have you tried using GPMC on a different
machine to make sure it isn't something machine specific?
My company's Scripting Toolkit product can report on GP settings, but you
have to script it and its not presented in the GPMC format unless you
specifically script it that way. It doesn't rely on GPMC.
Darren
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Brad
Sent: Tuesday, March 17, 2009 11:37 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] GPMC Incomplete Settings
Yeah, I've tested it on individual PCs and it works, and resultant set of
policy indicates that it's being applied. I just thought it was kind of
bizarre that it doesn't show the settings in GPMC. If it's a bug and not
something that's normal and I was misunderstanding, I think I can live with
that. Is there another program like RSOP or the settings view of the GPMC
that I can print an organized list of settings? Unfortunately the Polmon
program only lists views by I think adm files and registry paths and not the
way it's laid out in Group Policy Editor like we need.
_____
From: xxxxxxxxxxxxxxxx
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] GPMC Incomplete Settings
Date: Tue, 17 Mar 2009 11:26:34 -0700
Got it. Ok. So that means that there is likely something corrupt in that
setting file for the setting not to show up at all. Are the settings
actually being successfully processed by clients?
Darren
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Brad
Sent: Tuesday, March 17, 2009 11:22 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] GPMC Incomplete Settings
Sorry, the GPO was created on a Windows Server 2003 box and GPMC is being
used on Windows XP and I'm not seeing an option labeled Extra Registry
Settings. Thanks for clarifying!
-Brad
_____
From: xxxxxxxxxxxxxxxx
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] GPMC Incomplete Settings
Date: Tue, 17 Mar 2009 10:43:44 -0700
Brad-
Was this GPO created on a Vista or 2008 box? When you create a GPO on those
systems, no ADM files are copied up to the GPO storage in SYSVOL. Then, if
you try viewing that GPO on a 2003 or XP system within a GPMC settings
report, those settings may appear under "Extra Registry Settings" rather
than as fully-resolved policies. This has to do with how GPMC resolves the
location to the underlying ADM or ADMX files. For example, in GPMC under
View, Options, Reporting on the menu, you should have an option to change
how it searches for ADM files. The default is to look in c:\windows\inf
first and then in the SYSVOL portion of the GPO but you can also change that
path. Also note that GPMC on 2003 or XP is unable to parse ADMX files at
all, which may explain the message you are seeing (although I'm not familiar
with Alan's program).
Darren
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Brad
Sent: Tuesday, March 17, 2009 10:10 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] GPMC Incomplete Settings
Also, I forgot to mention this but when I first open the program it says
"This workstation does not support viewing ADMX files in GPMC".
_____
From: xxxxxxxxxxxxxxxx
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] GPMC Incomplete Settings
Date: Tue, 17 Mar 2009 12:20:51 -0400
Hello,
Thanks for the assisstance, I downloaded PolMan and installed the trial
version, then went to view the policies for my OU and it DID show up with
the correct settings, it looked like all the policies I configured were
showing up. However, when I go to double-click on the policy that was giving
me trouble in GPMC, the FormsSuggest and FormsSuggestPassword, it gave the
message "Note: There are active Registry keys that are not reflected in the
ADM file.
Additional ADM Entries have been created to display them" and then you can
click Ok. Is this possibly a reason why FormsSuggest and
FormsSuggestPassword don't show up in GPMC? The adm file is inetres.adm and
I make all policy changes through group policy preferences.
Thanks!
-Brad
_____
From: xxxxxxxxxxxxxxxx
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] GPMC Incomplete Settings
Date: Wed, 11 Mar 2009 07:33:30 +1100
Hi Brad,
It would seem to me that it is a bug in the GPMC. The only other thing I can
think of is that replication is not working between your servers, so that
you are changing it on one server and reporting it on another server. If you
reopen the policy and look at it, I assume the settings are still in place?
And how are you making these settings, is it through IE maintenance,
Administrative templates or Group Policy Preferences?
I do have some software called PolMan which will report on all policy
settings, It should give exactly the same results as GPMC, but it may be
useful to get a "second opinion" on what is actually there. If can also
export the settings and you can send them to me to look at. You can get a
free trial, or you can talk to me offline about it.
Alan Cuthbertson
Policy Management Software (PolMan):-
http://www.sysprosoft.com/index.php?ref=activedir
<http://www.sysprosoft.com/index.php?ref=activedir&f=pol_summary.shtml>
&f=pol_summary.shtml
ADM Template Editor(Now with ADMX support):-
http://www.sysprosoft.com/index.php?ref=activedir
<http://www.sysprosoft.com/index.php?ref=activedir&f=adm_summary.shtml>
&f=adm_summary.shtml
Policy Log Reporter - including Preference logging(Free)
http://www.sysprosoft.com/index.php?ref=activedir
<http://www.sysprosoft.com/index.php?ref=activedir&f=policyreporter.shtml>
&f=policyreporter.shtml
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Brad
Sent: Wednesday, 11 March 2009 3:14 AM
To: xxxxxxxxxxxxxxxx
Subject: [gptalk] GPMC Incomplete Settings
Last time I'll make an edit, I promise! I'm running GPMC on a Windows XP SP2
Client, and the Group Policy Modeling Wizard shows the same
incorrect/incomplete settings as the GPMC settings. On the server when I run
RSOP I'm getting the correct information, just no easy way of printing it
out. Sorry again and thanks in advance!
_____
Sorry, I forgot to mention this is a Windows 2003 64-bit Server. I'm using
GPMC version 1.0.2. This is for a library and we're basically trying to get
a detailed report of what policies are configured for each of our servers
for documentation purposes.
_____
When creating a report of GPO settings, I noticed that not all of the
policies are showing up in the list. For example, I have Disable changing
Home Page settings ENABLED, Disable autocomplete for forms ENABLED and Do
not allow autocomplete to save passwords ENABLED but the report shows that
only the Disable changing Home Page settings ENABLED, and sometimes when I
refresh it shows the Disable autocomplete for forms DISABLED policy which is
completely wrong. There is only two GPOs linked to this OU, one is the
Default Domain policy which only contains password policies, and this custom
GPO that include the above settings. I've tried blocking inheritance just to
be sure, and I get the same thing. Resultant Set of Policy shows the correct
settings, so I'm at a loss and would greatly appreciate any help!
Thanks!
_____
Windows LiveT HotmailR:.more than just e-mail. Check
<http://windowslive.com/explore?ocid=TXT_TAGLM_WL_t2_hm_justgotbetter_explor
e_022009> it out.
_____
Windows LiveT Groups: Create an online spot for your favorite groups to
meet. Check
<http://windowslive.com/online/groups?ocid=TXT_TAGLM_WL_groups_032009> it
out.
_____
HotmailR is up to 70% faster. Now good news travels really fast. Find
<http://windowslive.com/online/hotmail?ocid=TXT_TAGLM_WL_HM_70faster_032009>
out more.
_____
Windows LiveT Contacts: Organize your contact list. Check
<http://windowslive.com/connect/post/marcusatmicrosoft.spaces.live.com-Blog-
cns!503D1D86EBB2B53C!2285.entry?ocid=TXT_TAGLM_WL_UGC_Contacts_032009> it
out.
_____
Windows LiveT Groups: Create an online spot for your favorite groups to
meet. Check
<http://windowslive.com/online/groups?ocid=TXT_TAGLM_WL_groups_032009> it
out.
_____
Windows LiveT Groups: Create an online spot for your favorite groups to
meet. Check
<http://windowslive.com/online/groups?ocid=TXT_TAGLM_WL_groups_032009> it
out.
_____
Express your personality in color! Preview and select themes for HotmailR.
See how.
<http://www.windowslive-hotmail.com/LearnMore/personalize.aspx?ocid=TXT_MSGT
X_WL_HM_express_032009#colortheme>
| | | |
| Syspro
Posts:0
| | 03/17/2009 4:41 PM |
| Hi Brad,
PolMan will show the settings as displayed in GPMC. You need to click the
"ADM(X)" button in the top right on then go to file/Show Base policies and
select the Policy that you want. This will load all of the ADMX (and ADM
files which are not disabled by the ADMX files) and display it as in the
GPMC.
You can also click on setup/General Options and click "Ignore ADMX files".
If you do that, it will behave like an XP machine and ignore ADMX files.
When you load all the settings for the Policy (file/Show Base policies), it
will probably mention "orphan entries", that is registry settings that are
not reflected in the ADM Files. This could be because they only exist in the
ADMX files, or because the INETRES.ADM file is not loaded. PolMan will show
if it is loaded. If you right click on the policy in GPMC, you can load
INETRES.ADM
Alan Cuthbertson
Policy Management Software (PolMan):-
http://www.sysprosoft.com/index.php?ref=activedir
<http://www.sysprosoft.com/index.php?ref=activedir&f=pol_summary.shtml>
&f=pol_summary.shtml
ADM Template Editor(Now with ADMX support):-
http://www.sysprosoft.com/index.php?ref=activedir
<http://www.sysprosoft.com/index.php?ref=activedir&f=adm_summary.shtml>
&f=adm_summary.shtml
Policy Log Reporter - including Preference logging(Free)
http://www.sysprosoft.com/index.php?ref=activedir
<http://www.sysprosoft.com/index.php?ref=activedir&f=policyreporter.shtml>
&f=policyreporter.shtml
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Brad
Sent: Wednesday, 18 March 2009 5:37 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] GPMC Incomplete Settings
Yeah, I've tested it on individual PCs and it works, and resultant set of
policy indicates that it's being applied. I just thought it was kind of
bizarre that it doesn't show the settings in GPMC. If it's a bug and not
something that's normal and I was misunderstanding, I think I can live with
that. Is there another program like RSOP or the settings view of the GPMC
that I can print an organized list of settings? Unfortunately the Polmon
program only lists views by I think adm files and registry paths and not the
way it's laid out in Group Policy Editor like we need.
_____
From: xxxxxxxxxxxxxxxx
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] GPMC Incomplete Settings
Date: Tue, 17 Mar 2009 11:26:34 -0700
Got it. Ok. So that means that there is likely something corrupt in that
setting file for the setting not to show up at all. Are the settings
actually being successfully processed by clients?
Darren
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Brad
Sent: Tuesday, March 17, 2009 11:22 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] GPMC Incomplete Settings
Sorry, the GPO was created on a Windows Server 2003 box and GPMC is being
used on Windows XP and I'm not seeing an option labeled Extra Registry
Settings. Thanks for clarifying!
-Brad
_____
From: xxxxxxxxxxxxxxxx
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] GPMC Incomplete Settings
Date: Tue, 17 Mar 2009 10:43:44 -0700
Brad-
Was this GPO created on a Vista or 2008 box? When you create a GPO on those
systems, no ADM files are copied up to the GPO storage in SYSVOL. Then, if
you try viewing that GPO on a 2003 or XP system within a GPMC settings
report, those settings may appear under "Extra Registry Settings" rather
than as fully-resolved policies. This has to do with how GPMC resolves the
location to the underlying ADM or ADMX files. For example, in GPMC under
View, Options, Reporting on the menu, you should have an option to change
how it searches for ADM files. The default is to look in c:\windows\inf
first and then in the SYSVOL portion of the GPO but you can also change that
path. Also note that GPMC on 2003 or XP is unable to parse ADMX files at
all, which may explain the message you are seeing (although I'm not familiar
with Alan's program).
Darren
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Brad
Sent: Tuesday, March 17, 2009 10:10 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] GPMC Incomplete Settings
Also, I forgot to mention this but when I first open the program it says
"This workstation does not support viewing ADMX files in GPMC".
_____
From: xxxxxxxxxxxxxxxx
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] GPMC Incomplete Settings
Date: Tue, 17 Mar 2009 12:20:51 -0400
Hello,
Thanks for the assisstance, I downloaded PolMan and installed the trial
version, then went to view the policies for my OU and it DID show up with
the correct settings, it looked like all the policies I configured were
showing up. However, when I go to double-click on the policy that was giving
me trouble in GPMC, the FormsSuggest and FormsSuggestPassword, it gave the
message "Note: There are active Registry keys that are not reflected in the
ADM file.
Additional ADM Entries have been created to display them" and then you can
click Ok. Is this possibly a reason why FormsSuggest and
FormsSuggestPassword don't show up in GPMC? The adm file is inetres.adm and
I make all policy changes through group policy preferences.
Thanks!
-Brad
_____
From: xxxxxxxxxxxxxxxx
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] GPMC Incomplete Settings
Date: Wed, 11 Mar 2009 07:33:30 +1100
Hi Brad,
It would seem to me that it is a bug in the GPMC. The only other thing I can
think of is that replication is not working between your servers, so that
you are changing it on one server and reporting it on another server. If you
reopen the policy and look at it, I assume the settings are still in place?
And how are you making these settings, is it through IE maintenance,
Administrative templates or Group Policy Preferences?
I do have some software called PolMan which will report on all policy
settings, It should give exactly the same results as GPMC, but it may be
useful to get a "second opinion" on what is actually there. If can also
export the settings and you can send them to me to look at. You can get a
free trial, or you can talk to me offline about it.
Alan Cuthbertson
Policy Management Software (PolMan):-
http://www.sysprosoft.com/index.php?ref=activedir
<http://www.sysprosoft.com/index.php?ref=activedir&f=pol_summary.shtml>
&f=pol_summary.shtml
ADM Template Editor(Now with ADMX support):-
http://www.sysprosoft.com/index.php?ref=activedir
<http://www.sysprosoft.com/index.php?ref=activedir&f=adm_summary.shtml>
&f=adm_summary.shtml
Policy Log Reporter - including Preference logging(Free)
http://www.sysprosoft.com/index.php?ref=activedir
<http://www.sysprosoft.com/index.php?ref=activedir&f=policyreporter.shtml>
&f=policyreporter.shtml
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx]
On Behalf Of Brad
Sent: Wednesday, 11 March 2009 3:14 AM
To: xxxxxxxxxxxxxxxx
Subject: [gptalk] GPMC Incomplete Settings
Last time I'll make an edit, I promise! I'm running GPMC on a Windows XP SP2
Client, and the Group Policy Modeling Wizard shows the same
incorrect/incomplete settings as the GPMC settings. On the server when I run
RSOP I'm getting the correct information, just no easy way of printing it
out. Sorry again and thanks in advance!
_____
Sorry, I forgot to mention this is a Windows 2003 64-bit Server. I'm using
GPMC version 1.0.2. This is for a library and we're basically trying to get
a detailed report of what policies are configured for each of our servers
for documentation purposes.
_____
When creating a report of GPO settings, I noticed that not all of the
policies are showing up in the list. For example, I have Disable changing
Home Page settings ENABLED, Disable autocomplete for forms ENABLED and Do
not allow autocomplete to save passwords ENABLED but the report shows that
only the Disable changing Home Page settings ENABLED, and sometimes when I
refresh it shows the Disable autocomplete for forms DISABLED policy which is
completely wrong. There is only two GPOs linked to this OU, one is the
Default Domain policy which only contains password policies, and this custom
GPO that include the above settings. I've tried blocking inheritance just to
be sure, and I get the same thing. Resultant Set of Policy shows the correct
settings, so I'm at a loss and would greatly appreciate any help!
Thanks!
_____
Windows LiveT HotmailR:.more than just e-mail. Check
<http://windowslive.com/explore?ocid=TXT_TAGLM_WL_t2_hm_justgotbetter_explor
e_022009> it out.
_____
Windows LiveT Groups: Create an online spot for your favorite groups to
meet. Check
<http://windowslive.com/online/groups?ocid=TXT_TAGLM_WL_groups_032009> it
out.
_____
HotmailR is up to 70% faster. Now good news travels really fast. Find
<http://windowslive.com/online/hotmail?ocid=TXT_TAGLM_WL_HM_70faster_032009>
out more.
_____
Windows LiveT Contacts: Organize your contact list. Check
<http://windowslive.com/connect/post/marcusatmicrosoft.spaces.live.com-Blog-
cns!503D1D86EBB2B53C!2285.entry?ocid=TXT_TAGLM_WL_UGC_Contacts_032009> it
out.
_____
Windows LiveT Groups: Create an online spot for your favorite groups to
meet. Check
<http://windowslive.com/online/groups?ocid=TXT_TAGLM_WL_groups_032009> it
out.
_____
Windows LiveT Groups: Create an online spot for your favorite groups to
meet. Check
<http://windowslive.com/online/groups?ocid=TXT_TAGLM_WL_groups_032009> it
out.
_____
Express your personality in color! Preview and select themes for HotmailR.
See how.
<http://www.windowslive-hotmail.com/LearnMore/personalize.aspx?ocid=TXT_MSGT
X_WL_HM_express_032009#colortheme>
| | | |
|
|