I have a GPO applying policy-based QoS to mark DFSR.exe (replication traffic).

The policy shows up in GPRESULT output but netmon shows the packets being marked DSCP 0 in the IP header.     The server has been rebooted.  I don't see any errors in the log.   I use the same technique to mark Lync voice traffic and it works.    

I wondered if the difference could be that DFSR.exe is a system process, not a user process.   To test, I tried marking ping.exe - no difference.  The packet scheduler is enabled in the NIC.    We have manually (not GPO-enabled) the same on our Lync VMs.

Where else should I look?

This the policy:

QoS Policies
Policy Name                           DSCP   
DFS Replication (server-to-server)    10               
Protocol: TCP
Application: DFSR.exe
Source IP: Any
Destination IP: Any
Source Port: Any
Destination Port: Any

 DO-CC-QosSettings-v0.2

The Netmon trace shows this:

Ipv4: Src = xxxxx, Dest = yyyy, Next Protocol = TCP, Packet ID = 25497, Total IP Length = 176+ Versions: IPv4, Internet Protocol; Header Length = 20
  - DifferentiatedServicesField: DSCP: 0, ECN: 0
     DSCP: (000000..) Differentiated services codepoint 0
     ECT:  (......0.) ECN-Capable Transport not set
     CE:   (.......0) ECN-CE not set
    TotalLength: 176 (0xB0)
    Identification: 25497 (0x6399)+ FragmentFlags: 16384 (0x4000)
    TimeToLive: 128 (0x80)
    NextProtocol: TCP, 6(0x6)
    Checksum: 0 (0x0)
    SourceAddress: 10.240.0.184
    DestinationAddress: 10.126.11.55+ Tcp: Flags=...AP..., SrcPort=49241, DstPort=57336, PayloadLen=124, Seq=184338446 - 184338570, Ack=1214281947, Win=511

Hi,

I am trying to export the Group Policy from one Windows 8.1 PC, and import it to another Windows 8.1 PC. The command I used to use it was "cscript LocalGPO.wsf" for export and import. On Windows 8 and 8.1, this command no longer works. What is the replacement for it?

This is a standalone PC, no Domain environment.

Thanks in advance for your help.

JC

I am working on an issue where Folder Redirection has been applied using the Defualt Domain Policy. I want to keep Folder Redirection but am trying to figure the best way to get it from the DDP GPO to a new GPO without affecting all users. The issue is that we have several remote users and removing the GPO will affect all users at once. What is the best practice on this? Can I move the Folder Redirection settings to a new Policy that I can then create a group called "everyone except users a,b,c?" and have it only affect a few users at a time? Will the Folder Redirection Policy work by moving it to a new GPO even if it has all the same settings? My first thought was to have everyone log in then have them reboot one at a time till everyone is done but that would be TIME CONSUMING.

Thanks

1 of my servers is having slow boot up issue. I have enabled user environment debugging and the gpsvc.log file has been generated. I have also used the Windows Performance Analyzer to capture logs and results came back that the GP Client is taking a long time in the boot process. So, I reckoned the slow boot is due to GPO but I am not sure where to look from this log file.

I have only paste part of the gpsvc.log file here due to limitation in the number of characters allowed to be posted. Would appreciate some good advise on this issue that I am facing.

GPSVC(34c.408) 04:03:30:109 ReadExtStatus: Reading Previous Status for extension {FB2CA36D-0B40-4307-821B-A13B252DE56C}
GPSVC(34c.408) 04:03:30:109 ReadExtStatus: Reading Previous Status for extension {fbf687e6-f063-4d9f-9f4f-fd9a26acdd5f}
GPSVC(34c.408) 04:03:30:109 GetMachineToken:  Looping for authentication again.
GPSVC(34c.408) 04:03:30:109 ProcessGPOs: Logging Data for Target <SW01E772>.
GPSVC(34c.408) 04:03:30:109 GPLockPolicySection: Sid = (null), dwTimeout= 30000, dwFlags= 0
GPSVC(34c.408) 04:03:30:109 LockPolicySectioncalled for user <Machine>
GPSVC(34c.408) 04:03:30:109 Sync Lock Called
GPSVC(34c.408) 04:03:30:109 Writer Lock got immediately.
GPSVC(34c.408) 04:03:30:109 Lock taken successfully
GPSVC(34c.408) 04:03:30:109 UnLockPolicySectioncalled for user <Machine>
GPSVC(34c.408) 04:03:30:109 UnLockedsuccessfully
GPSVC(34c.408) 04:03:30:109 ProcessGPOs: OpenThreadTokenfailed with error 1008, assuming thread is not impersonating
GPSVC(34c.408) 04:03:30:109 ProcessGPOs: -----------------------
GPSVC(34c.408) 04:03:30:109 ProcessGPOs: Processing extension Registry
GPSVC(34c.408) 04:03:30:125 ReadStatus: Read Extension's Previous status successfully.
GPSVC(34c.408) 04:03:30:125 CompareGPOLists:  The lists are the same.
GPSVC(34c.408) 04:03:30:125 CheckGPOs: No GPO changes and nosecurity group membership change and extension Registry has NoGPOChangesset.
GPSVC(34c.408) 04:03:30:125 ProcessGPOs: -----------------------
GPSVC(34c.408) 04:03:30:125 ProcessGPOs: -----------------------
GPSVC(34c.408) 04:03:30:125 ProcessGPOs: Processing extension Wireless Group Policy
GPSVC(34c.408) 04:03:30:125CompareGPOLists:  The lists are the same.
GPSVC(34c.408) 04:03:30:125 CheckGPOs: No GPO changes but couldn't read extension Wireless Group Policy's status or policy time.
GPSVC(34c.408) 04:03:30:125 ProcessGPOs: Extension Wireless Group Policy skipped because both deleted and changed GPO lists are empty.
GPSVC(34c.408) 04:03:30:125 ProcessGPOs: -----------------------
GPSVC(34c.408) 04:03:30:125 ProcessGPOs: Processing extension Group Policy Environment
GPSVC(34c.408) 04:03:30:125 CompareGPOLists:  The lists are the same.
GPSVC(34c.408) 04:03:30:125 CheckGPOs: No GPO changes but couldn't read extension Group Policy Environment's status or policy time.
GPSVC(34c.408) 04:03:30:125 ProcessGPOs: Extension Group Policy Environment skipped because both deleted and changed GPO lists are empty.
GPSVC(34c.408) 04:03:30:125 ProcessGPOs: -----------------------
GPSVC(34c.408) 04:03:30:125 ProcessGPOs: Processing extension Group Policy Local Users and Groups
GPSVC(34c.408) 04:03:30:125 ReadStatus: Read Extension's Previous status successfully.
GPSVC(34c.408) 04:03:30:125 CompareGPOLists:  The lists are the same.
GPSVC(34c.408) 04:03:30:156 GPLockPolicySection: Sid = (null), dwTimeout= 30000, dwFlags= 0
GPSVC(34c.408) 04:03:30:156 LockPolicySectioncalled for user <Machine>
GPSVC(34c.408) 04:03:30:156 Sync Lock Called
GPSVC(34c.408)04:03:30:156 Writer Lock got immediately.
GPSVC(34c.408) 04:03:30:156 Lock taken successfully
GPSVC(34c.408) 04:03:30:156 ProcessGPOList: Entering for extension Group Policy Local Users and Groups
GPSVC(34c.408) 04:03:30:156 MachinePolicyCallback: Settingstatus UI to Applying Group Policy Local Users and Groups policy...
GPSVC(34c.408) 04:03:30:156 ProcessGPOList: No changes. CSEwill not be passed in the IwbemServicesintfptr
GPSVC(34c.364)04:03:30:156 Message Status = <Applying Group Policy Local Users and Groups policy...>
GPSVC(34c.364) 04:03:30:156 Setting GPsessionstate = 1
GPSVC(34c.408) 04:03:31:796 ProcessGroupPolicyCompletedExInternal: Entering. Extension = {17D89FEC-5C44-4972-B12D-241CAEF74509}, dwStatus= 0x0
GPSVC(34c.408) 04:03:31:953 GetWbemServices: CoCreateInstancesucceeded
GPSVC(34c.408) 04:03:36:031 ConnectToNameSpace: ConnectServerreturned 0x0
GPSVC(34c.408) 04:03:36:140 ProcessGroupPolicyCompletedExInternal: Extension {17D89FEC-5C44-4972-B12D-241CAEF74509} was able to log data. Error = 0x0, dwRet= 0. Clearing the dirty bit
GPSVC(34c.408) 04:03:36:500 ProcessGroupPolicyCompletedExInternal: Finished processing extension <Group Policy Local Users and Groups> at 44203 ticks (ms)
GPSVC(34c.408) 04:03:36:500 ProcessGroupPolicyCompletedExInternal: Leaving. Extension = {17D89FEC-5C44-4972-B12D-241CAEF74509}, Return status dwRet= 0x0
GPSVC(34c.408) 04:03:36:500 ProcessGPOList: Extension Group Policy Local Users and Groups returned 0x0.
GPSVC(34c.408) 04:03:36:500 ProcessGPOList: Extension Group Policy Local Users and Groups status was not updated because there was no changes and no transition or rsopwasn't enabled
GPSVC(34c.408) 04:03:36:500 UnLockPolicySectioncalled for user <Machine>
GPSVC(34c.408) 04:03:36:500 UnLockedsuccessfully
GPSVC(34c.408) 04:03:36:531 ProcessGPOs: -----------------------
GPSVC(34c.408) 04:03:36:531 ProcessGPOs: -----------------------
GPSVC(34c.408) 04:03:36:531 ProcessGPOs: Processing extension Group Policy Device Settings
GPSVC(34c.408) 04:03:36:531 CompareGPOLists:  The lists are the same.
GPSVC(34c.408) 04:03:36:531 CheckGPOs: No GPO changes but couldn't read extension Group Policy Device Settings'sstatus or policy time.
GPSVC(34c.408) 04:03:36:531 ProcessGPOs: Extension Group Policy Device Settings skipped because both deleted and changed GPO lists are empty.
GPSVC(34c.408) 04:03:36:531 ProcessGPOs: -----------------------
GPSVC(34c.408) 04:03:36:531 ProcessGPOs: Processing extension Folder Redirection
GPSVC(34c.408) 04:03:36:531 CompareGPOLists:  The lists are the same.
GPSVC(34c.408) 04:03:36:531 CheckGPOs: No GPO changes but couldn't read extension Folder Redirection's status or policy time.
GPSVC(34c.408) 04:03:36:531 ProcessGPOs: Extension Folder Redirection skipped with flags 0x7.
GPSVC(34c.408) 04:03:36:531 ProcessGPOs: -----------------------
GPSVC(34c.408) 04:03:36:531 ProcessGPOs: Processing extension Microsoft Disk Quota
GPSVC(34c.408) 04:03:36:531 CompareGPOLists:  The lists are the same.
GPSVC(34c.408) 04:03:36:531 CheckGPOs: No GPO changes but couldn't read extension Microsoft Disk Quota's status or policy time.
GPSVC(34c.408) 04:03:36:531 ProcessGPOs: Extension Microsoft Disk Quota skipped because both deleted and changed GPO lists are empty.
GPSVC(34c.408) 04:03:36:531 ProcessGPOs: -----------------------
GPSVC(34c.408) 04:03:36:531 ProcessGPOs: Processing extension Group Policy Network Options
GPSVC(34c.408) 04:03:36:531CompareGPOLists:  The lists are the same.
GPSVC(34c.408) 04:03:36:546 CheckGPOs: No GPO changes but couldn't read extension Group Policy Network Options'sstatus or policy time.
GPSVC(34c.408) 04:03:36:546 ProcessGPOs: Extension Group Policy Network Options skipped because both deleted and changed GPO lists are empty.
GPSVC(34c.408) 04:03:36:546 ProcessGPOs: -----------------------
GPSVC(34c.408) 04:03:36:546 ProcessGPOs: Processing extension QoSPacket Scheduler
GPSVC(34c.408) 04:03:36:546 CompareGPOLists:  The lists are the same.
GPSVC(34c.408) 04:03:36:546 CheckGPOs: No GPO changes but couldn't read extension QoSPacket Scheduler's status or policy time.
GPSVC(34c.408) 04:03:36:546 ProcessGPOs: Extension QoSPacket Scheduler skipped because both deleted and changed GPO lists are empty.
GPSVC(34c.408) 04:03:36:546 ProcessGPOs: -----------------------
GPSVC(34c.408) 04:03:36:546 ProcessGPOs: Processing extension Scripts
GPSVC(34c.408) 04:03:36:546 ReadStatus: Read Extension's Previous status successfully.
GPSVC(34c.408) 04:03:36:546 CompareGPOLists:  The lists are the same.
GPSVC(34c.408) 04:03:36:546 CheckGPOs: No GPO changes and no security group membership change and extension Scripts has NoGPOChangesset.
GPSVC(34c.408) 04:03:36:546 ProcessGPOs: -----------------------
GPSVC(34c.408) 04:03:36:546 ProcessGPOs: -----------------------
GPSVC(34c.408) 04:03:36:546 ProcessGPOs: Processing extension Remote Desktop USB Redirection
GPSVC(34c.408) 04:03:36:546 CompareGPOLists:  The lists are the same.
GPSVC(34c.408) 04:03:36:546 CheckGPOs: No GPO changes but couldn't read extension Remote Desktop USB Redirection's status or policy time.
GPSVC(34c.408) 04:03:36:546 ProcessGPOs: Extension Remote Desktop USB Redirection skipped because both deleted and changed GPO lists are empty.
GPSVC(34c.408) 04:03:36:546 ProcessGPOs: -----------------------
GPSVC(34c.408) 04:03:36:546 ProcessGPOs: Processing extension Internet Explorer Zonemapping
GPSVC(34c.408) 04:03:36:562 CompareGPOLists:  The lists are the same.
GPSVC(34c.408) 04:03:36:562 CheckGPOs: No GPO changes but couldn't read extension Internet Explorer Zonemapping'sstatus or policy time.
GPSVC(34c.408) 04:03:36:562 ProcessGPOs: Extension Internet Explorer Zonemappingskipped because both deleted and changed GPO lists are empty.
GPSVC(34c.408) 04:03:36:562 ProcessGPOs: -----------------------
GPSVC(34c.408) 04:03:36:562 ProcessGPOs: Processing extension Group Policy Drive Maps
GPSVC(34c.408) 04:03:36:562 CompareGPOLists:  The lists are the same.
GPSVC(34c.408) 04:03:36:562 CheckGPOs: No GPO changes but couldn't read extension Group Policy Drive Maps'sstatus or policy time.
GPSVC(34c.408) 04:03:36:562 ProcessGPOs: Extension Group Policy Drive Maps skipped withflags 0x7.
GPSVC(34c.408) 04:03:36:562 ProcessGPOs: -----------------------
GPSVC(34c.408) 04:03:36:562 ProcessGPOs: Processingextension Group Policy Folders
GPSVC(34c.408) 04:03:36:562 CompareGPOLists:  The lists are the same.
GPSVC(34c.408) 04:03:36:562 CheckGPOs: No GPO changes but couldn't read extension Group Policy Folders'sstatus or policy time.
GPSVC(34c.408) 04:03:36:562 ProcessGPOs: Extension Group Policy Folders skipped because both deleted and changed GPO lists are empty.
GPSVC(34c.408) 04:03:36:562 ProcessGPOs: -----------------------
GPSVC(34c.408) 04:03:36:562 ProcessGPOs: Processing extension Group Policy Network Shares
GPSVC(34c.408) 04:03:36:562 CompareGPOLists:  The lists are the same.
GPSVC(34c.408) 04:03:36:562 CheckGPOs: No GPO changes but couldn't read extension Group Policy Network Shares's status or policy time.
GPSVC(34c.408) 04:03:36:562 ProcessGPOs: Extension Group Policy Network Shares skipped because both deleted and changed GPO lists are empty.
GPSVC(34c.408) 04:03:36:562 ProcessGPOs: -----------------------
GPSVC(34c.408) 04:03:36:562 ProcessGPOs: Processing extension Group Policy Files
GPSVC(34c.408) 04:03:36:562 CompareGPOLists:  The lists are the same.
GPSVC(34c.408) 04:03:36:562 CheckGPOs: No GPO changes but couldn't readextension Group Policy Files's status or policy time.
GPSVC(34c.408) 04:03:36:562 ProcessGPOs: Extension Group Policy Files skipped because both deleted and changed GPO lists are empty.
GPSVC(34c.408) 04:03:36:562 ProcessGPOs: -----------------------
GPSVC(34c.408) 04:03:36:562 ProcessGPOs: Processing extension Group Policy Data Sources
GPSVC(34c.408) 04:03:36:562 CompareGPOLists:  The lists are the same.
GPSVC(34c.408) 04:03:36:578 CheckGPOs:No GPO changes but couldn't read extension Group Policy Data Sources's status or policy time.
GPSVC(34c.408) 04:03:36:578 ProcessGPOs: Extension Group Policy Data Sources skipped because bothdeleted and changed GPO lists are empty.
GPSVC(34c.408) 04:03:36:578 ProcessGPOs: -----------------------
GPSVC(34c.408) 04:03:36:578 ProcessGPOs: Processing extension Group Policy Ini Files
GPSVC(34c.408) 04:03:36:578 CompareGPOLists:  The lists are the same.
GPSVC(34c.408) 04:03:36:578 CheckGPOs: No GPO changes but couldn't read extension Group Policy Ini Files's status or policy time.
GPSVC(34c.408) 04:03:36:578 ProcessGPOs: Extension GroupPolicy Ini Files skipped because both deleted and changed GPO lists are empty.
GPSVC(34c.408) 04:03:36:578 ProcessGPOs: -----------------------
GPSVC(34c.408) 04:03:36:578 ProcessGPOs: Processing extension Internet Explorer User Accelerators
GPSVC(34c.408) 04:03:36:578 CompareGPOLists:  The lists are the same.
GPSVC(34c.408) 04:03:36:578 CheckGPOs: No GPO changes but couldn't readextension Internet Explorer User Accelerators's status or policy time.
GPSVC(34c.408) 04:03:36:578 ProcessGPOs: Extension Internet Explorer User Accelerators skipped because both deleted and changed GPO lists are empty.
GPSVC(34c.408) 04:03:36:578 ProcessGPOs: -----------------------
GPSVC(34c.408) 04:03:36:578 ProcessGPOs: Processing extension Security
GPSVC(34c.408) 04:03:36:578ReadStatus: Read Extension's Previous status successfully.
GPSVC(34c.408) 04:03:36:578 CompareGPOLists:  The lists are the same.
GPSVC(34c.408) 04:03:36:578 CheckGPOs: No GPO changes and no security group membership change and extension Security has NoGPOChanges set.
GPSVC(34c.408) 04:03:36:578 ProcessGPOs: -----------------------
GPSVC(34c.408) 04:03:36:578 ProcessGPOs: -----------------------
GPSVC(34c.408) 04:03:36:578 ProcessGPOs: Processing extension Deployed Printer Connections
GPSVC(34c.408) 04:03:36:578 CompareGPOLists:  The lists are the same.
GPSVC(34c.408) 04:03:36:578 CheckGPOs: No GPO changes but couldn't read extension Deployed Printer Connections's status or policy time.
GPSVC(34c.408) 04:03:36:578 ProcessGPOs: Extension Deployed Printer Connections skipped because both deleted and changed GPO lists are empty.
GPSVC(34c.408) 04:03:36:578 ProcessGPOs: -----------------------
GPSVC(34c.408) 04:03:36:593 ProcessGPOs: Processing extension Group Policy Services
GPSVC(34c.408) 04:03:36:593 CompareGPOLists:  The lists are the same.
GPSVC(34c.408) 04:03:36:593 CheckGPOs: No GPO changes but couldn't read extension Group Policy Services's status or policy time.
GPSVC(34c.408) 04:03:36:593 ProcessGPOs: Extension Group Policy Services skipped because both deleted and changed GPO lists are empty.
GPSVC(34c.408) 04:03:36:593 ProcessGPOs: -----------------------
GPSVC(34c.408) 04:03:36:593 ProcessGPOs: Processing extension Internet Explorer Branding
GPSVC(34c.408) 04:03:36:593 CompareGPOLists:  The lists are the same.
GPSVC(34c.408) 04:03:36:593 CheckGPOs: No GPO changes but couldn't read extension Internet Explorer Branding's status or policy time.
GPSVC(34c.408) 04:03:36:593 ProcessGPOs: Extension Internet Explorer Branding skipped with flags 0x7.
GPSVC(34c.408) 04:03:36:593 ProcessGPOs: -----------------------
GPSVC(34c.408) 04:03:36:593 ProcessGPOs: Processing extension Group PolicyFolder Options
GPSVC(34c.408) 04:03:36:593 CompareGPOLists:  The lists are the same.
GPSVC(34c.408) 04:03:36:593 CheckGPOs: No GPO changes but couldn't read extension Group Policy Folder Options's status or policy time.
GPSVC(34c.408) 04:03:36:593 ProcessGPOs: Extension Group Policy Folder Options skipped because bothdeleted and changed GPO lists are empty.
GPSVC(34c.408) 04:03:36:593 ProcessGPOs: -----------------------
GPSVC(34c.408) 04:03:36:593 ProcessGPOs: Processing extension Group Policy Scheduled Tasks
GPSVC(34c.408) 04:03:36:593 CompareGPOLists:  The lists are the same.
GPSVC(34c.408) 04:03:36:593 CheckGPOs: No GPO changes but couldn't read extension Group Policy Scheduled Tasks's status or policy time.
GPSVC(34c.408) 04:03:36:593 ProcessGPOs: Extension Group Policy Scheduled Tasks skipped because both deletedand changed GPO lists are empty.
GPSVC(34c.408) 04:03:36:593 ProcessGPOs: -----------------------
GPSVC(34c.408) 04:03:36:593 ProcessGPOs: Processing extension Group Policy Registry
GPSVC(34c.408) 04:03:36:593 ReadStatus: Read Extension's Previous status successfully.
GPSVC(34c.408) 04:03:36:593 CompareGPOLists:  The lists are the same.
GPSVC(34c.408) 04:03:36:625 GPLockPolicySection: Sid = (null), dwTimeout = 30000, dwFlags = 0
GPSVC(34c.408)04:03:36:625 LockPolicySection called for user <Machine>
GPSVC(34c.408) 04:03:36:625 Sync Lock Called
GPSVC(34c.408) 04:03:36:625 Writer Lock got immediately.
GPSVC(34c.408) 04:03:36:625 Locktaken successfully
GPSVC(34c.408) 04:03:36:625 ProcessGPOList: Entering for extension Group Policy Registry
GPSVC(34c.408) 04:03:36:625 MachinePolicyCallback: Setting status UI to Applying Group Policy Registry policy...
GPSVC(34c.408) 04:03:36:625 ProcessGPOList: No changes. CSE will not be passed in the IwbemServices intf ptr
GPSVC(34c.364) 04:03:36:625 Setting GPsession state =1
GPSVC(34c.408) 04:03:36:765 ProcessGroupPolicyCompletedExInternal: Entering. Extension = {B087BE9D-ED37-454F-AF9C-04291E351182}, dwStatus = 0x0
GPSVC(34c.408) 04:03:36:796 GetWbemServices: CoCreateInstance succeeded
GPSVC(34c.408) 04:03:36:812 ConnectToNameSpace: ConnectServer returned 0x0
GPSVC(34c.408) 04:03:36:812 ProcessGroupPolicyCompletedExInternal: Extension {B087BE9D-ED37-454F-AF9C-04291E351182} was able to log data. Error = 0x0, dwRet = 0. Clearing the dirty bit
GPSVC(34c.408) 04:03:36:843 ProcessGroupPolicyCompletedExInternal: Finished processing extension <Group Policy Registry> at 44546 ticks (ms)
GPSVC(34c.408) 04:03:36:843 ProcessGroupPolicyCompletedExInternal: Leaving. Extension = {B087BE9D-ED37-454F-AF9C-04291E351182}, Return status dwRet = 0x0
GPSVC(34c.408) 04:03:36:843 ProcessGPOList: Extension Group Policy Registry returned 0x0.
GPSVC(34c.408) 04:03:36:843 ProcessGPOList: Extension Group Policy Registry status was not updated because there was no changes and no transition or rsop wasn'tenabled
GPSVC(34c.408) 04:03:36:843 UnLockPolicySection called for user <Machine>
GPSVC(34c.408) 04:03:36:843 UnLocked successfully
GPSVC(34c.408) 04:03:36:875 ProcessGPOs: -----------------------
GPSVC(34c.408) 04:03:36:875 ProcessGPOs: -----------------------
GPSVC(34c.408) 04:03:36:875 ProcessGPOs: Processing extension 802.3 Group Policy
GPSVC(34c.408) 04:03:36:875 CompareGPOLists:  The lists are the same.
GPSVC(34c.408) 04:03:36:875 CheckGPOs: No GPO changes but couldn't read extension 802.3 Group Policy's status or policy time.
GPSVC(34c.408) 04:03:36:875 ProcessGPOs: Extension 802.3 Group Policy skipped because both deleted and changed GPO lists are empty.
GPSVC(34c.408) 04:03:36:875 ProcessGPOs: -----------------------
GPSVC(34c.408) 04:03:36:875 ProcessGPOs: Processing extension Group Policy Printers
GPSVC(34c.408) 04:03:36:875 CompareGPOLists:  The lists are the same.
GPSVC(34c.408) 04:03:36:875 CheckGPOs: No GPO changes but couldn't read extension Group Policy Printers's status or policy time.
GPSVC(34c.408) 04:03:36:875 ProcessGPOs: Extension Group Policy Printers skipped because both deleted and changed GPO lists are empty.
GPSVC(34c.408) 04:03:36:875 ProcessGPOs: -----------------------
GPSVC(34c.408) 04:03:36:875 ProcessGPOs: Processing extension Group Policy Shortcuts
GPSVC(34c.408) 04:03:36:875 CompareGPOLists:  The lists are the same.
GPSVC(34c.408) 04:03:36:875 CheckGPOs: No GPO changes but couldn't read extension Group Policy Shortcuts's status or policy time.
GPSVC(34c.408) 04:03:36:875 ProcessGPOs: Extension Group Policy Shortcuts skipped because both deleted and changed GPO lists are empty.
GPSVC(34c.408) 04:03:36:875 ProcessGPOs: -----------------------
GPSVC(34c.408) 04:03:36:890 ProcessGPOs: Processing extension Software Installation
GPSVC(34c.408) 04:03:36:890 ReadStatus: Read Extension's Previous status successfully.
GPSVC(34c.408) 04:03:36:890 CompareGPOLists:  The lists are the same.
GPSVC(34c.408) 04:03:36:890 GPLockPolicySection: Sid = (null), dwTimeout = 30000, dwFlags = 0
GPSVC(34c.408) 04:03:36:890 LockPolicySection called for user <Machine>
GPSVC(34c.408) 04:03:36:890 Sync Lock Called
GPSVC(34c.408) 04:03:36:890 Writer Lock got immediately.
GPSVC(34c.408) 04:03:36:890 Lock taken successfully
GPSVC(34c.408) 04:03:36:890 ProcessGPOList: Entering for extension Software Installation
GPSVC(34c.408) 04:03:36:890 MachinePolicyCallback: Setting status UI to Applying Software Installation policy...
GPSVC(34c.408) 04:03:36:890ProcessGPOList: No changes. CSE will not be passed in the IwbemServices intf ptr
GPSVC(34c.364) 04:03:36:890 Message Status = <Applying Software Installation policy...>
GPSVC(34c.364) 04:03:36:890 Setting GPsession state = 1
GPSVC(34c.408) 04:03:37:312 ProcessGPOList: Extension Software Installation returned 0x0.
GPSVC(34c.408) 04:03:37:312 ProcessGPOList: Extension Software Installation status was not updated because there was no changes and no transition or rsop wasn't enabled
GPSVC(34c.408) 04:03:37:312UnLockPolicySection called for user <Machine>
GPSVC(34c.408) 04:03:37:312 UnLocked successfully
GPSVC(34c.408) 04:03:37:328 ProcessGPOs: -----------------------
GPSVC(34c.408) 04:03:37:328 ProcessGPOs: -----------------------
GPSVC(34c.408) 04:03:37:328 ProcessGPOs: Processing extension TCPIP
GPSVC(34c.408) 04:03:37:328 CompareGPOLists:  The lists are the same.
GPSVC(34c.408) 04:03:37:328 CheckGPOs: No GPO changes but couldn't read extension TCPIP's status or policy time.
GPSVC(34c.408) 04:03:37:328 ProcessGPOs: Extension TCPIP skipped because both deleted and changed GPO lists are empty.
GPSVC(34c.408) 04:03:37:328 ProcessGPOs: -----------------------
GPSVC(34c.408) 04:03:37:328 ProcessGPOs: Processing extension Internet Explorer Machine Accelerators
GPSVC(34c.408) 04:03:37:328 CompareGPOLists:  The lists are the same.
GPSVC(34c.408) 04:03:37:328 CheckGPOs: No GPO changes but couldn't read extension Internet Explorer Machine Accelerators's status or policy time.
GPSVC(34c.408) 04:03:37:328 ProcessGPOs: Extension Internet Explorer Machine Accelerators skipped because both deleted and changed GPO lists are empty.
GPSVC(34c.408) 04:03:37:328 ProcessGPOs: -----------------------
GPSVC(34c.408) 04:03:37:328 ProcessGPOs: Processing extension IP Security
GPSVC(34c.408) 04:03:37:328 CompareGPOLists:  The lists are the same.
GPSVC(34c.408) 04:03:37:328 CheckGPOs: No GPO changes but couldn't read extension IP Security's status or policy time.
GPSVC(34c.408) 04:03:37:328 ProcessGPOs: Extension IP Security skipped because both deleted and changed GPO lists are empty.
GPSVC(34c.408) 04:03:37:328 ProcessGPOs: -----------------------
GPSVC(34c.408) 04:03:37:328 ProcessGPOs: Processing extension Group Policy Internet Settings
GPSVC(34c.408) 04:03:37:343 CompareGPOLists:  The lists are the same.
GPSVC(34c.408) 04:03:37:343 CheckGPOs: No GPO changes but couldn't read extension Group Policy Internet Settings's status or policy time.
GPSVC(34c.408) 04:03:37:343 ProcessGPOs: Extension Group Policy Internet Settings skipped with flags 0x7.
GPSVC(34c.408) 04:03:37:343 ProcessGPOs: -----------------------
GPSVC(34c.408) 04:03:37:343 ProcessGPOs: Processing extension Group Policy Start Menu Settings
GPSVC(34c.408) 04:03:37:343 CompareGPOLists:  The lists are the same.
GPSVC(34c.408) 04:03:37:343 CheckGPOs: No GPO changes but couldn't read extension Group Policy Start Menu Settings's status or policy time.
GPSVC(34c.408) 04:03:37:343 ProcessGPOs: Extension Group Policy Start Menu Settings skipped because both deleted and changed GPO listsare empty.
GPSVC(34c.408) 04:03:37:343 ProcessGPOs: -----------------------
GPSVC(34c.408) 04:03:37:343 ProcessGPOs: Processingextension Group Policy Regional Options
GPSVC(34c.408) 04:03:37:343 CompareGPOLists:  The lists are the same.
GPSVC(34c.408) 04:03:37:343 CheckGPOs: No GPO changes but couldn't read extensionGroup Policy Regional Options's status or policy time.
GPSVC(34c.408) 04:03:37:343 ProcessGPOs: Extension Group Policy RegionalOptions skipped because both deleted and changed GPO lists are empty.
GPSVC(34c.408) 04:03:37:343 ProcessGPOs: -----------------------
GPSVC(34c.408) 04:03:37:343 ProcessGPOs: Processing extension Group Policy Power Options
GPSVC(34c.408) 04:03:37:343 CompareGPOLists:  The lists are the same.
GPSVC(34c.408) 04:03:37:343 CheckGPOs: No GPO changes but couldn't read extension Group Policy Power Options's status or policy time.
GPSVC(34c.408) 04:03:37:343 ProcessGPOs: Extension Group Policy Power Options skipped because both deleted and changed GPO lists are empty.
GPSVC(34c.408) 04:03:37:343 ProcessGPOs: -----------------------
GPSVC(34c.408) 04:03:37:343 ProcessGPOs: Processing extension Audit Policy Configuration
GPSVC(34c.408) 04:03:37:343 CompareGPOLists: The lists are the same.
GPSVC(34c.408) 04:03:37:343 CheckGPOs: No GPO changes but couldn't read extension Audit Policy Configuration's status or policy time.
GPSVC(34c.408) 04:03:37:343 ProcessGPOs: Extension Audit Policy Configuration skipped because both deleted and changed GPO lists are empty.
GPSVC(34c.408) 04:03:37:343 ProcessGPOs: -----------------------
GPSVC(34c.408) 04:03:37:343 ProcessGPOs: Processing extension Group Policy Applications
GPSVC(34c.408) 04:03:37:359 CompareGPOLists:  The lists are the same.
GPSVC(34c.408) 04:03:37:359 CheckGPOs: No GPO changes but couldn't read extension Group Policy Applications's status or policy time.
GPSVC(34c.408) 04:03:37:359 ProcessGPOs: Extension Group Policy Applications skipped with flags 0x7.
GPSVC(34c.408) 04:03:37:359 ProcessGPOs: -----------------------
GPSVC(34c.408) 04:03:37:359 ProcessGPOs: Processing extension Enterprise QoS
GPSVC(34c.408) 04:03:37:359 CompareGPOLists:  The lists are the same.
GPSVC(34c.408) 04:03:37:359 CheckGPOs: No GPO changes but couldn't read extension Enterprise QoS's status or policy time.
GPSVC(34c.408) 04:03:37:359 ProcessGPOs: Extension Enterprise QoS skipped because both deleted and changed GPO lists are empty.
GPSVC(34c.408) 04:03:37:359 ProcessGPOs: -----------------------
GPSVC(34c.408) 04:03:37:359 ProcessGPOs: Processing extensionCP
GPSVC(34c.408) 04:03:37:359 CompareGPOLists:  The lists are the same.
GPSVC(34c.408) 04:03:37:359 CheckGPOs: No GPO changes but couldn't read extension CP's status or policy time.
GPSVC(34c.408) 04:03:37:359 ProcessGPOs: Extension CP skipped because both deleted and changed GPO lists are empty.
GPSVC(34c.408) 04:03:37:359 gpGetFgPolicyRefreshInfo: Mode: 1, Reason: 7
GPSVC(34c.408) 04:03:37:359 SetFgRefreshInfo: Previous Machine Fg policy Synchronous, Reason: SKU.
GPSVC(34c.408) 04:03:37:359 SetFgRefreshInfo: Next Machine Fg policy Synchronous, Reason: SKU.
GPSVC(34c.408) 04:03:37:359 ProcessGPOs: No WMI logging done in this policy cycle.
GPSVC(34c.408) 04:03:37:359 ProcessGPOs: Boot/Logon Policy processing - checking if UBPM trigger events need to be fired
GPSVC(34c.408) 04:03:37:375 CheckAndFireGPTriggerEvent: FiredPolicy present UBPM trigger event for Machine.
GPSVC(34c.408) 04:03:37:375 Application complete with bConnectivityFailure = 0.
GPSVC(34c.79c) 04:03:40:546 CGPNotify::RegisterForNotification: Entering with target Machine and event 0xc8c
GPSVC(34c.79c) 04:03:40:546 Client_InitialRegisterForNotification: User = machine, changenumber = 0
GPSVC(34c.3a0) 04:03:40:546 Target = Machine
GPSVC(34c.79c) 04:03:40:546 Client_RegisterForNotification: User =machine, changenumber = 0
GPSVC(34c.79c) 04:03:40:546 CGPNotify::RegisterForNotification: Exiting with status = 0
GPSVC(3bc.ac8) 04:03:59:296 CGPNotify::RegisterForNotification: Entering withtarget Machine and event 0x1ac
GPSVC(3bc.ac8) 04:03:59:296 Client_InitialRegisterForNotification: User = machine, changenumber = 0
GPSVC(34c.748) 04:03:59:296 Target = Machine
GPSVC(3bc.ac8) 04:03:59:296 Client_RegisterForNotification: User = machine, changenumber = 0
GPSVC(3bc.ac8) 04:03:59:296 CGPNotify::RegisterForNotification: Exiting with status = 0
GPSVC(34c.748) 04:03:59:343 Target = Machine
GPSVC(34c.748) 04:03:59:343 Target = Machine,ChangeNumber 0
GPSVC(34c.3ac) 04:03:59:515 Target = Machine
GPSVC(34c.3ac) 04:03:59:531 Target = Machine, ChangeNumber 0
GPSVC(34c.3ac) 04:03:59:531 Sid = (null), dwTimeout = 600000, dwFlags = 268435456
GPSVC(34c.3ac) 04:03:59:531 LockPolicySection calledfor user <Machine>
GPSVC(34c.3ac) 04:03:59:546 Async Lock called
GPSVC(34c.3ac) 04:03:59:546 Reader Lock got immediately. m_cReadersInLock : 1
GPSVC(34c.3ac) 04:03:59:546 Sid = (null)
GPSVC(34c.3ac) 04:03:59:546 UnLockPolicySection called for user <Machine>
GPSVC(34c.3ac) 04:03:59:546 Found the caller in the ReaderHavingLock List. Removing it...
GPSVC(34c.3ac) 04:03:59:546 Settinglock state as notLocked
GPSVC(34c.3ac) 04:03:59:546 UnLocked successfully
GPSVC(34c.bdc) 04:04:00:000 CGPNotify::RegisterForNotification: Entering with target Machine and event 0xd04
GPSVC(34c.bdc) 04:04:00:000 Client_InitialRegisterForNotification: User = machine, changenumber = 0
GPSVC(34c.3ac) 04:04:00:000 Target =Machine
GPSVC(34c.bdc) 04:04:00:000 Client_RegisterForNotification: User = machine, changenumber = 0
GPSVC(34c.bdc) 04:04:00:000 CGPNotify::RegisterForNotification: Exiting with status = 0
GPSVC(34c.3ac) 04:04:00:000 Target = Machine, ChangeNumber 0
GPSVC(34c.748) 04:04:01:140 Target = Machine
GPSVC(34c.748) 04:04:01:140 Target = Machine, ChangeNumber 0
GPSVC(154.41c) 04:05:25:509CGPNotify::RegisterForNotification: Entering with target Machine and event 0x458
GPSVC(154.41c) 04:05:25:509 Client_InitialRegisterForNotification: User = machine, changenumber = 0
GPSVC(34c.3ac) 04:05:25:509 Target = Machine
GPSVC(154.41c) 04:05:25:525 Client_RegisterForNotification: User = machine, changenumber = 0
GPSVC(34c.3ac) 04:05:25:525 Target = Machine, ChangeNumber 0
GPSVC(154.41c) 04:05:25:525 CGPNotify::RegisterForNotification: Exiting with status = 0
GPSVC(154.41c) 04:05:25:759 CGPNotify::RegisterForNotification: Entering with target Machine and event 0x4e8
GPSVC(154.41c) 04:05:25:759 Client_InitialRegisterForNotification: User = machine, changenumber = 0
GPSVC(34c.3ac) 04:05:25:759 Target = Machine
GPSVC(154.41c) 04:05:25:775 Client_RegisterForNotification: User = machine, changenumber = 0
GPSVC(154.41c) 04:05:25:775 CGPNotify::RegisterForNotification: Exiting with status = 0
GPSVC(34c.3ac) 04:05:25:775 Target = Machine, ChangeNumber 0
GPSVC(34c.3ac) 04:05:59:217 Target = Machine
GPSVC(34c.3ac)04:05:59:233 Target = Machine, ChangeNumber 0
GPSVC(3bc.3cc) 04:05:59:389 CGPNotify::UnregisterNotification: Entering with event 0x1ac
GPSVC(3bc.3cc) 04:05:59:389 CGPNotify::AbortAsyncRegistration: No asyn registration is pending
GPSVC(3bc.3cc) 04:05:59:405 CGPNotify::UnregisterNotification: Canceling pending calls
GPSVC(3bc.3cc) 04:05:59:420 Client_CompleteNotificationCall: failed with 0x4c7
GPSVC(3bc.3cc) 04:05:59:420 CGPNotify::UnregisterNotification: Cancelled pending calls
GPSVC(3bc.3cc) 04:05:59:420 CGPNotify::UnregisterNotification: Exiting with dwStatus = 0x0
GPSVC(34c.360) 04:06:00:827 Target = Machine
GPSVC(34c.360) 04:06:00:827 Target = Machine, ChangeNumber 0
GPSVC(34c.360) 04:06:01:155 Target = Machine
GPSVC(34c.360) 04:06:01:171 Target = Machine, ChangeNumber 0
GPSVC(34c.fe8) 04:06:02:124 CGPNotify::RegisterForNotification: Entering with target Machine and event 0x218
GPSVC(34c.fe8) 04:06:02:140 Client_InitialRegisterForNotification: User = machine, changenumber = 0
GPSVC(34c.360) 04:06:02:155 Target = Machine
GPSVC(34c.fe8) 04:06:02:155 Client_RegisterForNotification: User = machine, changenumber = 0
GPSVC(34c.fe8) 04:06:02:171 CGPNotify::RegisterForNotification: Exiting with status = 0
GPSVC(34c.da4) 05:06:16:856 Target = Machine
GPSVC(34c.da4) 05:06:16:856 Target = Machine, ChangeNumber 0
GPSVC(34c.da4) 05:06:16:856 Target = S-1-5-20
GPSVC(34c.da4) 05:06:16:856 Could not find user by sid, finding user by session id
GPSVC(34c.da4) 05:06:16:856 Caller requesting for user notification/lock is from session 0
GPSVC(34c.da4) 05:06:16:856 Target = S-1-5-20, ChangeNumber 0
GPSVC(34c.da4) 05:06:16:856 Could not find user by sid, finding user by session id
GPSVC(34c.de8) 05:06:16:856 Target = S-1-5-20
GPSVC(34c.de8) 05:06:16:856 Could not find user by sid, finding user by session id
GPSVC(34c.de8) 05:06:16:872 Callerrequesting for user notification/lock is from session 0
GPSVC(34c.de8) 05:06:16:872 Target = S-1-5-20, ChangeNumber 0
GPSVC(34c.de8) 05:06:16:872 Could not find user by sid, finding user by session id
GPSVC(34c.de8) 05:06:16:872 Caller requesting for usernotification/lock is from session 0
GPSVC(34c.da4) 05:06:16:872Target = S-1-5-20
GPSVC(34c.da4) 05:06:16:872 Could not find user by sid, finding user by session id
GPSVC(34c.da4) 05:06:16:872 Caller requesting for user notification/lock is from session 0
GPSVC(34c.da4) 05:06:16:872 Target = S-1-5-20, ChangeNumber 0
GPSVC(34c.da4) 05:06:16:872 Could not find user by sid, finding user by session id
GPSVC(34c.da4) 05:06:16:872 Caller requesting for user notification/lock is from session 0
GPSVC(34c.de8) 05:06:16:887 Target = S-1-5-20
GPSVC(34c.de8) 05:06:16:887 Could notfind user by sid, finding user by session id
GPSVC(34c.de8) 05:06:16:887 Caller requesting for user notification/lock is from session 0
GPSVC(34c.de8) 05:06:16:887 Target = S-1-5-20, ChangeNumber 0
GPSVC(34c.de8) 05:06:16:887 Could not find user by sid, finding user by session id
GPSVC(34c.de8) 05:06:16:887 Caller requesting for user notification/lock is from session 0
GPSVC(34c.da4) 05:06:26:981 Setting GPsession state = 1
GPSVC(34c.de8) 05:06:32:341 SID = S-1-5-21-206128196-3657029889-627342018-7757
GPSVC(34c.de8) 05:06:32:356 bMachine = 0
GPSVC(34c.de8) 05:06:32:356 Setting GPsession state = 1
GPSVC(34c.de8) 05:06:32:356 Message Status = <Applying user settings...>
GPSVC(34c.778) 05:06:32:356 StartTime For network wait: 32140ms
GPSVC(34c.778) 05:06:32:356 Current Time: 3819953ms
GPSVC(34c.de8) 05:06:32:356 Setting GPsession state = 1
GPSVC(34c.778) 05:06:32:356 MaxTimeToWaitForNetwork: 5212ms
GPSVC(34c.778) 05:06:32:356 TimeRemainingToWaitForNetwork: 0ms
GPSVC(34c.778) 05:06:32:356 UserPolicy: Waiting for machine policy wait for network event with timeout 0 ms
GPSVC(34c.778) 05:06:32:388 GPLockPolicySection: Sid = (null), dwTimeout = 30000, dwFlags = 65538
GPSVC(34c.778) 05:06:32:388 LockPolicySection called for user <Machine>

We need to move redirected folders, which include documents, desktop and favorites, from server 2003 to server 2008

I understand updating GPO to the new location, will I need to manually create folders and permissions on the new server and copy existing folders?

Dennis

We have two Windows 2008 R2 Domain Controllers.

We have only Windows 7 SP1 clients.

We have a mix of IE 9, 10 ,11 on the clients.

We moved to using GPP to control IE Proxy settings some considerable time ago.

We recently needed add a site the the proxy exceptions list. This appeared to work. However we discovered that for IE 10+ the setting was not effective. So we spun up a Windows 8.1 VM with RSAT and added a new IE Settings object into GP targeting IE 11. This appeared to have the desired effect.

After a while some  (and it appears only some) IE9 machines, found their proxy settings reverting. This could be resolved by closing IE down and issuing a gpupdate /force command. However the issue would re-occur for these users, and they would be required to close their browser and re-issue update /force again.

Furthermore (this may or may not be linked) we have been seeing JavaScript disabled warnings from OWA from some machines running IE11.

Any thoughts on troubleshooting this would be appreciated.

Nick

Whenever users logon on remotely from home their default home printer is redirected which allows them to print which is fine.  The only issue is that when they get back to the office, their default printer is now lost and the first one on the list of printers (Adobe PDF is now chosen as the default.  It seems that the default printer reg. key from the remote session is being saved in their roaming profile.  We also use Citrix to logon remotely and this is not an issue because Citrix has their own printer policy that prevents his from happening.  Is there a log off script or a GP setting that can be used to fix the issue that I am having? 

Thanks

Environment

200+ users

RDS - server 2008 R2

I have several client machines running Windows 8. The client boxes receive printers via group policy. The printers are on a Windows 2008 RT server. Lately on at least one client, I've been seeing the following:

The user '<myprintername>' preference item in the '<Printers>' Group Policy did not apply because it failed with code "0x80070057." The parameter is incorrect. This error was suppressed. 

Any suggestions on what could be wrong?

Hello,

I am deploying Forefront Client Security by GPOs but I still not receive anything on the client:

The keys to verify during the test are located in

HKLM > Software > Policies > Microsoft > Microsoft Forefront > Client Security > 1.0 

The GPO is enforced and OU is linked, it has been verified

Inheritance not blocked

Any idea?

Thanks,

Dom

System Center Operations Manager 2007 / System Center Configuration Manager 2007 R2 / Forefront Client Security / Forefront Identity Manager

I have a client that has 1 main site and 3 smaller satellite sites. They only have one (yes 1) server for all of their clients. There is a 100MB connection between so bandwidth is not an issue. The server is 2008 R2, clients are a mix of XP and Windows 7. I have deployed client side extensions to the XP clients.

My project: Install a new network printer in each site (its the same printer for all 4 sites), configure clients to use printer in their site via GPO.

Each site has its own OU with users in their respective site OU. Normally, if this were a single site I could add the print services role, install the drivers for the printer on the print server, and use GP preferences; User config -> Preferences -> Control Panel -> Printers -> add new TCP/IP and then apply this to the users OU. The problem is that it requires a local name and local path, which would require a local print server in each site. 

Is there a way to use GP to add a printer to each client computer (and set as default) throughout multiple sites, while only having the One server in 1 out of 4 sites? 

All help is greatly appreciated! 

NOTE: when I say site, I mean physical location, it is all one domain. 

Hi,

I need to add out local domain to the Sites section in the Internet Explorer.

Sites section is located at: (run Internet Explorer) -> Internet Options -> Security (tab) -> Local Intranet (icon) -> Sites -> advanced... At this setting I need to add our  intranet, because the client machines run applications which are installed at the terminal server, and each time one of this applications has to run, the users receive annoying windows warning message.

How can I perform this change only to one place, so it is reflected to all the users? We have one main server, one terminal server (for applications) and the rest are the clients. I don't want to make the change to every client machine, as there are many of them.

Maybe there is some group policy solution, or can I do the change to the internet explorer that is installed at the server (main server, or terminal server) and might apply to all the other machines?

Thanks in advance,

Best

Hi,

I'm stuck at troubleshooting the group policy processing on a W2k8 R2 Terminal Server. On this machine the CSE Group Policy Registry Component is failing with ErrorCode 11. (I'm sorry but the editor does not allow me to insert xml yet)

I was not able to find any source in technet or msdn regarding Group Policy Registry ErrorCode 11 nor able to get any further debugging operable, that gives me more hands-on-details on this problem. Furthermore I was not able to determine the GPO causing the CSE failing, neither with RSOP nor Eventlogs.... With the group policy modeling wizard i just get "GP Registry failed" listed in Component State Overview with the subtle message "An attempt was made to load a file with an incorrect format."

How can i get to the bottom of this?

I have the Problems described in KB 292827 with Riverbed Steelhead WAN Optimizer configured as  Active Directory Integrated mode enabled, on a Windows Server 2012 R2. The Hotfix in KB 292827 is only for Windows 2012 and Windows 8. Is there a Hotfix for Windows 2012 R2 / Windows 8.1?

Hi there

I have server 2003 with Windows 7 desktops and I want lock all the desktops DVD.

I want to keep one desktop for admin users. I see in the 2008 GPO you can lock desktops, but, if a user has local admin rights on the desktop, are they able to run the DVD?  I am avoiding restricting desktop DVD by BIOS

Thanks

Hi all,

I just want to confirm something.  Based on what I've read, it appears that the Group Policy password complexity requirements hasn't changed from Server 2003 to 2008 to 2012 -- it requires the use of 3 of the 5 character classes (upper case alpha, lower case alpha, digit, special character, Unicode).  Our organization wants to make the complexity requirements more stringent (for example - require upper case, lower case, digit, AND special character).  Is this true?  I was hoping that Server 2012 offers more flexibility, but it looks like the complexity requirements are the same as before.

It seems like our options are 1) a third-party solution, or 2) modify the Windows password filter (passfilt.dll).  What are some good third-party solutions for this?  Is there any documentation out there that shows how to modify the password filter, if we chose to go that route?

Thanks in advance for any assistance.

I have read just about everything on the web about drive mapping GPO and permissions and still having a problem.

I have a Windows Server 2008 Standard as the DC.  I have a Windows Server 2012 that will be used for DirectAccess and File Server.  On the Windows Server 2012, I have created a Data directory that is not shared.  Underneath this directory, are the folders to be shared.  Each one is Shared with Everybody Read/Write Permission.  Then each folder is disabled from inheritance and the actual Security Group(s) are give Full Control access and Everybody group is removed from NTFS Security.  NOTE: One Group has access to all folders.

On the Windows Server 2008, I created a new GPO called Drive Maps.  There will be about 12 mappings in this GPO.  They are set to Replace under Action, given the location of \\server\Share$, Reconnect is checked and a Label is given, then a drive letter is assigned and Show this drive is checked under Hide/Show this drive.  Under the Common tab,  I have checked Item-level targeting and selected the Security Group(s) that will have access.

The two issues are, not all the drives map for the users that have permissions to the drive(s).   The second is if someone was smart enough to know the shares URL and was not part of the group assigned permissions to that share, can gain access to the share by entering the URL under Map Network Drive.

Not sure why the drives are not mapping when the user has the correct permissions for that share and everything is spelled correctly.  And obviously to prevent them access to the Share, I would need to create a Deny group and add that to the share with the Deny option.  Is that they correct solution?

Any suggestions?

Could someone please tell me how to set up deploying printers in Server 2008? I have the Print Management installed as well as the printers I want however I do not know how to set up the policies. 

I want to deploy them based on computer. How do I make a group of computers? For example: computers 1-5 would be one group/department, then I would add certain printers to that group.

Also, is there a way to delete existing printers on their machine? How about setting as default?

Sorry but I've never had to deploy policies by group since all settings we have apply to all users (we work on Terminal Servers for the most part but this is for local printers).

Hello everyone,

We have pretty big farm of Citrix server on Windows 2008 R2.
Everything is working as expected and our launch times are considered really fast.

What worries me is some logs we see on every server in the farm. These logs are flagged by Citrix monitoring solution EdgeSight as something not good.

In GroupPolicy logs I see EventID 6314 warnings:
Group policy bandwidth estimation failed. Group policy processing will continue. Assuming fast link.

In Application logs I see EventID 6005 warnings:
The winlogon notification subscriber <Profiles> is taking long time to handle the notification event (Logon).

In Systems logs I see many Warnings from GroupPolicy source, EventID 1112:
The Group Policy Client Side Extension Group Policy Drive Maps was unable to apply one or more settings because the changes must be processed before system startup or user logon. The system will wait for Group Policy processing to finish completely before the next startup or logon for this user, and this may result in slow startup and boot performance.

Can someone please point me to maybe an article, tools or any tips that would help me troubleshoot, maybe capture logon times and pinpoint why we see these slower logons are occurring?

I would appreciate any help.

Thanks !