Location: Mail List

Ads

Skyscraper

The GPTalk Mailing List

The GPTALK mailing list is where you can send and receive email related to Windows Group Policy. You must subscribe to the list to send and receive mail from the list. The purpose of the list is to provide a forum for asking and answering technical questions related to Group Policy. Any question is fair game as long as it is related to Windows Group Policy.  The Archives for this list can be found on this page.

 

List Posts

Subject: [gptalk] Help with deploying GPP CSE
Prev Next
You are not authorized to post a reply.

AuthorMessages
rpo8373User is Offline

Posts:58

02/01/2012 12:20 AM  
Hi,

Grab a coffee and take a seat; this will take a while.

A few years ago as part of an SOE refresh (Windows XP) we decided to add
the GPP CSE (KB943729), lets call this SOE v1. Recently as part of another
SOE refresh we decided to add also add the GPP rollup hotfix (KB974266),
lets call this SOE v2. However when the latest refresh was performed rather
than using the existing copy of KB943729 the SOE guy just redownloaded it.

So as a summary we now have three types of SOE deployed throughout our
organisation:
- Computers prior to both versions of the aforementioned SOEs that have
neither KB943729 nor KB974266.
- Computers with only KB943729 installed
- Computers with both KB943729 and KB974266 installed.

Up until now we haven't actually done anything via GPP however that is
about to change and therefore I need to make sure all computers have the
GPP CSE. We have SCCM 2007 so I decided I would simply deploy KB943729 as
an update to computers that do not have it. KB974266 is a hotfix that is
required to be requested to download and is therefore not available to be
deployed via SCCM.

This is where the strangeness begins. Computers that already have KB943729
installed are reporting as requiring the update in SCCM. Computers with
both KB943729 and KB974266 installed are reporting as not required. I've
performed the following tests:
- Installed KB943729 from SOE v1 and ran an SCCM scan, the update is not
recognised and reports as applicable.
- Installed KB943729 from SOE v2 and ran an SCCM scan, the update is
recognised and reports as not applicable.
- Ran an MD5 hash check against the two hotfixes, they are different.
- Manually downloaded the copy of KB943729 that SCCM would deploy as an
update and compared it to the copy used in SOE v2, they are the same.
- Installed KB943729 from SOE v1, followed by KB974266 and ran an SCCM
scan, the update is recognised and reports as not applicable.

So now it appears that a new version of KB943729 has emerged at some point,
and the tests above would imply that it incorporates the changes made in
rollup hotfix KB974266. Weird thing is if I install KB943729 from SOE v2,
SCCM recognises it and is happy, but the version of Gpprefcl.dll does not
match what is described in the rollup hotfix article
http://support.microsoft.com/kb/974266. I also can install the rollup
hotfix without any complaint that it's already installed. This implies to
me the new version of KB943729 doesn't actually contain the rollup hotfix
after all.

Is anyone able to tell me what the deal is with this hotfix? Is the rollup
hotfix still required? What I'm planning to do is deploy the rollup hotfix
to all computers that have KB943729 installed to make them compliant in
SCCM and then deploy KB943729 to computers without it, followed by the
rollup hotfix.

Daniel.

You are not authorized to post a reply.
Forums >GPTalk >GPTalk Mailing List > [gptalk] Help with deploying GPP CSE



ActiveForums 3.7

Members

MembershipMembership:
Latest New UserLatest:carmicklec
New TodayNew Today:0
New YesterdayNew Yesterday:0
User CountOverall:1399

People OnlinePeople Online:
VisitorsVisitors:0
MembersMembers:0
TotalTotal:0

Online NowOnline Now:

Ads

Banner Inv
Copyright 2009 by GPOGUY.COM
Terms Of Use