Dear Experts,

I would like to take your advice, that the mentioned GPOs have been mapped for Windows 10 Machines and the GPO is making some conflict and does not allowing us to use the Left Click Options and Start Search is not working.

Attaching the GPO's Customization...

Please suggest...

Before getting into the Investigation.. I want to highlight few more points...

1 - Packaged App Rules to create the Local Policy

2 - Updating XML file, Which is to restrict the usage of Provisioned Application on Windows 10 Machine

3. Missing packaged App Rule from GPO

So, I am looking for your inputs...How to Bring the Missing Rule..

What are the GPO's are not required to be Select to make the Right Click (Windows) to work.

Hi, 

on domain server 2012 r2 I have configured in:

but If I connect using admin account to any computer it will waiting for user approval and very ofter user deny my incoming connection and I cannot login. My second problem is that if I'm RDP connected to any computer user can login and disconnect my session - how to prevent this using GPO ?

Hi Team,

Anyone else have any ideas? Nothing worked for me either so far. Password box disappears after computer wakes up from sleep . Restarting brings it back, but I have to restart every time this happens (several times daily). 

this was happening entire my office systems kindly give me a solution.

Regards

Vinay

Microsoft technet

Hi,

I have 300 Windows 7 pc's and plan on upgrading them to Windows 10 Enterprise. Our DC's are Windows Server 2016. I need to apply the Windows 10 group policy admin template.

1. what is the latest template for Windows 10 Enterprise?
2. how do I apply it? Do I copy it to \\dc\SYSVOL\xxx.local\Policies\PolicyDefinitions? Do I just copy the contents over? Will it break any existing Windows 7 GPOS?

Thanks.

Wave~Chaser

Hi all.

I am new to windows server managment.

Created a 2012 R2 domain controller with AD and a few group policies for test purposes.

Adding windows 7 clients to the domain and all the policies got applied without any problems.

Tried adding a windows 10 (1803) client but the policies do not apply with a event id 1030 error

After running gpresult

"INFO: The user "Domain\user" does not have RSOP data".

GPSVC log from the client:

GPSVC(5e4.600) 18:37:15:403 EnterCriticalPolicySectionEx: User sid S-1-5-18 from process 1508.
GPSVC(5e4.600) 18:37:15:403 Client_LockPolicySection: Entering with usersid = S-1-5-18, timeout 600000 and flags 0x30000000
GPSVC(5e4.600) 18:37:15:403 Client_LockPolicySection: Making Aync RPC LockPolicySection call
GPSVC(5e4.600) 18:37:15:403 Client_LockPolicySection: Beginning WaitForSingleObject.
GPSVC(28a4.2b8c) 18:37:15:419 LockPolicySection[User] from session 0. Requesting console lock.
GPSVC(5e4.600) 18:37:15:419 Client_LockPolicySection: Completed WaitForSingleObject.
GPSVC(5e4.600) 18:37:15:419 Client_LockPolicySection: User critical section has been claimed.  Handle = 0x000001636728BE10
GPSVC(5e4.600) 18:37:15:419 Client_LockPolicySection: Leaving successfully.
GPSVC(5e4.600) 18:37:15:419 Client_UnLockPolicySection: Starting UnLock Call
GPSVC(28a4.2b8c) 18:37:15:419 Setting lock state as notLocked
GPSVC(5e4.600) 18:37:15:435 Client_UnLockPolicySection: Unlocked successfully
GPSVC(5e4.600) 18:37:15:435 LeaveCriticalPolicySectionInternal: Critical section 000001636728BE10 has been released.
GPSVC(28a4.2b8c) 18:37:16:528 CGPEventSubSystem::GroupPolicyEndShell::++ (SessionId: 3)
GPSVC(28a4.2b8c) 18:37:16:544 CGPApplicationService::HandleEndShellNotification::++ (SessionId: 3)
GPSVC(28a4.2b8c) 18:37:16:544 User SID = <S-1-5-21-3252097651-3095764660-3574788348-1117>
GPSVC(28a4.2b8c) 18:37:16:544 CGPApplicationService::HandleEndShellNotification ExecuteGPOScriptsForThePrincipal for session 3.
GPSVC(28a4.2b8c) 18:37:16:544 CGroupPolicySession::ExecuteGPOScriptsForThePrincipal (WaitForTheApplyGroupPolicyEventCompletedToBeSignaled) started.
GPSVC(28a4.2b8c) 18:37:16:544 CGroupPolicySession::ExecuteGPOScriptsForThePrincipal (WaitForTheApplyGroupPolicyEventCompletedToBeSignaled) completed.
GPSVC(28a4.2b8c) 18:37:16:544 CGroupPolicySession::ExecuteGPOScriptsForThePrincipal - User started.
GPSVC(28a4.2b8c) 18:37:16:544 CGroupPolicySession::ExecuteGPOScriptsForThePrincipal - get token for session 3 - 0.
GPSVC(28a4.2b8c) 18:37:16:544 CGroupPolicySession::ExecuteGPOScriptsForThePrincipal - processing user scripts.
GPSVC(28a4.2b8c) 18:37:16:544 CGPApplicationService::HandleEndShellNotification::-- (Status: 0)
GPSVC(28a4.2b8c) 18:37:16:544 CGPEventSubSystem::GroupPolicyOnEndShell::-- (Status: 0)
GPSVC(28a4.2b8c) 18:37:16:622 CGPEventSubSystem::GroupPolicyOnLogoff::++ (SessionId: 3)
GPSVC(28a4.2b8c) 18:37:16:622 CGPApplicationService::UserLogoffEvent::++ (SessionId: 3)
GPSVC(28a4.2b8c) 18:37:16:637 CGroupPolicySession::DeleteSession: Beginning WaitForSingleObject.
GPSVC(28a4.2b8c) 18:37:16:637 CGroupPolicySession::DeleteSession: Completed WaitForSingleObject.
GPSVC(28a4.2b8c) 18:37:16:637 CGPUserCollection::DeleteUserFromUserList WaitForGroupPolicySessionThreadsToTerminate Starting.
GPSVC(28a4.2b8c) 18:37:16:637 WaitForGroupPolicySessionThreadsToTerminate() checked.
GPSVC(28a4.2b8c) 18:37:16:637 WaitForGroupPolicySessionThreadsToTerminate() WaitForSingleObject released.
GPSVC(28a4.2b8c) 18:37:16:637 CGPUserCollection::DeleteUserFromUserList WaitForGroupPolicySessionThreadsToTerminate Completed.
GPSVC(28a4.e2c) 18:37:16:653 GPOThread(User): Done waiting, shutdown
GPSVC(28a4.2b8c) 18:37:16:653 CGroupPolicySession::CleanupEnvironment: Beginning WaitForSingleObject.
GPSVC(28a4.2b8c) 18:37:16:653 CGroupPolicySession::CleanupEnvironment: Completed WaitForSingleObject.
GPSVC(28a4.2b8c) 18:37:16:653 User group policy thread has terminated.
GPSVC(28a4.2b8c) 18:37:16:653 CGroupPolicySession::CleanupEnvironment:--
GPSVC(28a4.2b8c) 18:37:16:653 User SID = <S-1-5-21-3252097651-3095764660-3574788348-1117>
GPSVC(28a4.2b8c) 18:37:16:653 CGPApplicationService::CheckAndDeleteCriticalPolicySection.
GPSVC(28a4.2b8c) 18:37:16:653 User SID = <S-1-5-21-3252097651-3095764660-3574788348-1117>
GPSVC(28a4.2b8c) 18:37:16:653 Setting GPsession state = 0
GPSVC(28a4.2b8c) 18:37:16:653 CPolicyCriticalSectionCollection: Deleting critical section for UserSid <S-1-5-21-3252097651-3095764660-3574788348-1117>
GPSVC(28a4.2b8c) 18:37:16:653 Deleting sidString <S-1-5-21-3252097651-3095764660-3574788348-1117>
GPSVC(28a4.2b8c) 18:37:16:653 CGPApplicationService::UserLogoffEvent::-- (Status: 0)
GPSVC(28a4.2b8c) 18:37:16:653 CGPEventSubSystem::GroupPolicyOnLogoff::-- (Status: 0)
GPSVC(5e4.67c) 18:37:16:669 EnterCriticalPolicySectionEx: User sid S-1-5-18 from process 1508.
GPSVC(5e4.67c) 18:37:16:669 Client_LockPolicySection: Entering with usersid = S-1-5-18, timeout 600000 and flags 0x30000000
GPSVC(5e4.67c) 18:37:16:669 Client_LockPolicySection: Making Aync RPC LockPolicySection call
GPSVC(5e4.67c) 18:37:16:669 Client_LockPolicySection: Beginning WaitForSingleObject.
GPSVC(28a4.2b8c) 18:37:16:669 LockPolicySection[User] from session 0. Requesting console lock.
GPSVC(5e4.67c) 18:37:16:669 Client_LockPolicySection: Completed WaitForSingleObject.
GPSVC(5e4.67c) 18:37:16:669 Client_LockPolicySection: User critical section has been claimed.  Handle = 0x0000016367285B90
GPSVC(5e4.67c) 18:37:16:669 Client_LockPolicySection: Leaving successfully.
GPSVC(5e4.67c) 18:37:16:669 Client_UnLockPolicySection: Starting UnLock Call
GPSVC(28a4.2b8c) 18:37:16:669 Setting lock state as notLocked
GPSVC(5e4.67c) 18:37:16:669 Client_UnLockPolicySection: Unlocked successfully
GPSVC(5e4.67c) 18:37:16:669 LeaveCriticalPolicySectionInternal: Critical section 0000016367285B90 has been released.
GPSVC(28a4.2318) 18:37:16:731 CGPService::GPServiceHandlerEx: SERVICE_CONTROL_PRESHUTDOWN
GPSVC(28a4.2724) 18:37:16:731 CGPService::Stop
GPSVC(28a4.2b8c) 18:37:16:731 CGPEventSubSystem::GroupPolicyOnMachinePreShutdown fired.
GPSVC(28a4.2b8c) 18:37:16:731 CGPApplicationService::MachineShutdownEvent fired.
GPSVC(28a4.2b8c) 18:37:16:731 CGPApplicationService::HandleEndShellNotification ExecuteGPOScriptsForThePrincipal for session 0.
GPSVC(28a4.2b8c) 18:37:16:731 CGroupPolicySession::ExecuteGPOScriptsForThePrincipal (WaitForTheApplyGroupPolicyEventCompletedToBeSignaled) started.
GPSVC(28a4.2b8c) 18:37:16:731 CGroupPolicySession::ExecuteGPOScriptsForThePrincipal (WaitForTheApplyGroupPolicyEventCompletedToBeSignaled) completed.
GPSVC(28a4.2b8c) 18:37:16:731 CGroupPolicySession::ExecuteGPOScriptsForThePrincipal - Machine started.
GPSVC(28a4.2b8c) 18:37:16:731 CGroupPolicySession::ExecuteGPOScriptsForThePrincipal - Machine shutdown.
GPSVC(28a4.2b8c) 18:37:16:731 CGroupPolicySession::ExecuteGPOScriptsForThePrincipal - processing user scripts.
GPSVC(28a4.2b8c) 18:37:16:731 CGPUserCollection::DeleteUserFromUserList WaitForGroupPolicySessionThreadsToTerminate Starting.
GPSVC(28a4.2b8c) 18:37:16:747 WaitForGroupPolicySessionThreadsToTerminate() checked.
GPSVC(28a4.2b8c) 18:37:16:747 WaitForGroupPolicySessionThreadsToTerminate() WaitForSingleObject released.
GPSVC(28a4.2b8c) 18:37:16:747 CGPUserCollection::DeleteUserFromUserList WaitForGroupPolicySessionThreadsToTerminate Completed.
GPSVC(28a4.2b8c) 18:37:16:747 CGroupPolicySession::CleanupEnvironment:++
GPSVC(28a4.2b8c) 18:37:16:747 Waiting for machine group policy thread to terminate.
GPSVC(28a4.2b8c) 18:37:16:747 CGPService::KeepServiceAlive (pending status): Beginning WaitForSingleObject.
GPSVC(28a4.2b8c) 18:37:16:747 CGPService::KeepServiceAlive (pending status): Completed WaitForSingleObject.
GPSVC(28a4.2b8c) 18:37:16:747 machine group policy thread has terminated.
GPSVC(28a4.2b8c) 18:37:16:747 CGroupPolicySession::CleanupEnvironment:--
GPSVC(28a4.2b8c) 18:37:16:747 CGPApplicationService::CheckAndDeleteCriticalPolicySection.
GPSVC(28a4.2b8c) 18:37:16:747 User SID = MACHINE SID
GPSVC(28a4.2b8c) 18:37:16:747 CPolicyCriticalSectionCollection: Did not find the critical section
GPSVC(28a4.2b8c) 18:37:16:747 CGPService::CleanupGPSubSystem RejectNewCallers()
GPSVC(28a4.2b8c) 18:37:16:747 CGPService::CleanupGPSubSystem GPUnRegisterForWinLogonEventNotification()
GPSVC(28a4.2b8c) 18:37:16:747 CGPEventSubSystem::GroupPolicyOnServiceStop fired.
GPSVC(28a4.2b8c) 18:37:16:747 CGPApplicationService::ServiceShutdownEvent fired.
GPSVC(28a4.2b8c) 18:37:16:747 CPolicyCriticalSectionCollection: Calling AbortWaitingCallers
GPSVC(28a4.2b8c) 18:37:16:747 CGPApplicationService::AbortSubscriptions. Sending status 1722 to subscribers.
GPSVC(28a4.2b8c) 18:37:16:747 CGPService::CleanupGPSubSystem GroupPolicyOnServiceStop()
GPSVC(28a4.2b8c) 18:37:16:747 CGPService::CleanupGPSubSystem StopRPCServer()
GPSVC(28a4.2b8c) 18:37:16:747 CGPService::CleanupGPSubSystem - Not waiting for network connectivity
GPSVC(28a4.2b8c) 18:37:16:747 CGPService::CleanupGPSubSystem StopSendingResourceReachableEvent()
GPSVC(28a4.2b8c) 18:37:16:747 Deleting machine
GPSVC(28a4.2b8c) 18:37:16:747 Passive Network activation handle is NULL.
GPSVC(5e4.62c) 18:38:51:700 CGPNotify::UnregisterNotification: Entering with event 00000000000001BC
GPSVC(5e4.62c) 18:38:51:715 CGPNotify::UnregisterNotification: Exiting with dwStatus = 0x0
GPSVC(e34.2478) 18:38:51:809 CGPNotify::UnregisterNotification: Entering with event 0000000000000280
GPSVC(e34.2478) 18:38:51:809 CGPNotify::UnregisterNotification: Exiting with dwStatus = 0x0
GPSVC(ba4.c04) 18:38:51:825 CGPNotify::UnregisterNotification: Entering with event 0000000000000430
GPSVC(ba4.c04) 18:38:51:825 CGPNotify::UnregisterNotification: Exiting with dwStatus = 0x0
GPSVC(d28.e24) 18:38:51:887 CGPNotify::UnregisterNotification: Entering with event 000000000000052C
GPSVC(d28.e24) 18:38:51:887 CGPNotify::UnregisterNotification: Exiting with dwStatus = 0x0
GPSVC(d28.e24) 18:38:51:887 CGPNotify::UnregisterNotification: Entering with event 000000000000055C
GPSVC(d28.e24) 18:38:51:887 CGPNotify::UnregisterNotification: Exiting with dwStatus = 0x0
GPSVC(f94.17e4) 18:38:52:278 CGPNotify::UnregisterNotification: Entering with event 00000000000001A0
GPSVC(f94.17e4) 18:38:52:278 CGPNotify::UnregisterNotification: Exiting with dwStatus = 0x0
GPSVC(3f0.4c) 18:39:07:956 CGPNotify::RegisterForNotification: Entering with target Machine and event 00000000000001C0
GPSVC(3f0.4c) 18:39:07:956 CGPNotify::RegisterForNotification: Exiting with status = 0
GPSVC(66c.6ec) 18:39:08:595 GroupPolicyClientServiceMain
GPSVC(66c.6ec) 18:39:08:600 CGPService::Start with flags = 0x0.
GPSVC(66c.6ec) 18:39:08:602 CGPService::Start: InstantiateGPEngine
GPSVC(66c.6ec) 18:39:08:606 CGPService::Start: GetAOACConfig
GPSVC(66c.6ec) 18:39:08:617 GetAOACConfig: dwAOACConfig was 0, setting to 600.
GPSVC(66c.6ec) 18:39:08:625 CGPService::Start: RegisterServiceCtrlHandlerEx
GPSVC(66c.6ec) 18:39:08:626 CGPService::Start: InitializeGPSubSystem
GPSVC(66c.6ec) 18:39:08:627 bMachine = 1
GPSVC(66c.6ec) 18:39:08:629 CGPEventSubSystem::GPRegisterForWinLogonEventNotification::++
GPSVC(66c.6ec) 18:39:08:630 CGPEventSubSystem::GPRegisterForWinLogonEventNotification::--
GPSVC(66c.6ec) 18:39:08:631 CGPService::InitializeRPCServer starting RPCServer.
GPSVC(684.6f4) 18:39:08:631 CGPNotify::RegisterForNotification: Exiting with status = 0
GPSVC(66c.6ec) 18:39:08:631 Created a New Instance of CGPRPCServerBase
GPSVC(66c.6ec) 18:39:08:632 Setting Singleton Instance of CGPRPCServerBase
GPSVC(66c.6ec) 18:39:08:634 CGPService::InitializeRPCServer finished starting RPCServer. status 0x0
GPSVC(66c.6ec) 18:39:08:634 CGPService::Start: CreateGPSessions
GPSVC(66c.6ec) 18:39:08:634 Detected that this is machine Startup
GPSVC(66c.6ec) 18:39:08:635 CGPService::CreateGPSessionsAtMachineStartup()
GPSVC(66c.6ec) 18:39:08:636 CGPApplicationService::CreateGPMachineSession.
GPSVC(66c.6ec) 18:39:08:639 CGroupPolicySession::InitializeGPSession ::(dwTimeOut: 3600000)
GPSVC(66c.6ec) 18:39:08:639 CGroupPolicySession::SetForegroundPolicyApplicationState::++ (bMachine= 1, bServiceRestart= 0)
GPSVC(66c.6ec) 18:39:08:646 GetFgPolicySettingImpl (bSync: 0)
GPSVC(66c.6ec) 18:39:08:646 gpGetFgPolicyRefreshInfo (Machine): Mode: Asynchronous, Reason: 0
GPSVC(66c.6ec) 18:39:08:647 GetFgPolicySettingImpl (bSync: 0)
GPSVC(66c.6ec) 18:39:08:647 CGroupPolicySession::SetForegroundPolicyApplicationState::-- (Machine, m_PolicyProcessingMode = Async)
GPSVC(66c.6ec) 18:39:08:648 Updating the service status to be RUNNING.
GPSVC(66c.6ec) 18:39:08:649 CGPService::Start: SetThreadpoolTimer 600. seconds for idle timer
GPSVC(66c.698) 18:39:08:652 CGPService::DoAsyncInitialization started.
GPSVC(66c.698) 18:39:08:653 CGPService::DoAsyncInitialization: CDefaultPolicyApplier::InitializeClass
GPSVC(66c.698) 18:39:08:653 InitializeProductType: Product Type: 1
GPSVC(66c.698) 18:39:08:656 CGPService::DoAsyncInitialization: GetDomainMembershipOfMachine.
GPSVC(66c.698) 18:39:08:657 CGPService::DoAsyncInitialization: GetVersionEx.
GPSVC(66c.698) 18:39:08:658 CGPService::DoAsyncInitialization Not a Domain Controller.
GPSVC(66c.698) 18:39:08:658 CGPService::DoAsyncInitialization Not a Terminal Server.
GPSVC(66c.698) 18:39:08:658 CGPService::DoAsyncInitialization: CConnectivityManager::InitializeClass.
GPSVC(66c.698) 18:39:08:659 Register for connectivity notification is Enabled.
GPSVC(66c.698) 18:39:08:661 Connectivity manager class initialized for IntranetAuth connectivity
GPSVC(66c.698) 18:39:08:661 Connectivity manager class initialize AOAC.
GPSVC(66c.698) 18:39:08:662 Connectivity manager class initialize: Created the policy apply success event 0000000000000224.
GPSVC(66c.698) 18:39:08:662 Connectivity manager class initialize: Created the policy apply failure event 0000000000000228.
GPSVC(66c.698) 18:39:08:662 CConnectivityManager::InitializeClass succeeded.
GPSVC(66c.698) 18:39:08:663 CGPService::DoAsyncInitialization: CGPSqm::Initialize.
GPSVC(66c.698) 18:39:08:663 CGPService::DoAsyncInitialization m_hAsyncInitializationCompletedEvent set.
GPSVC(66c.698) 18:39:08:663 Updating the service status to be RUNNING and processing triggers.
GPSVC(66c.698) 18:39:08:664 CGPService::DoAsyncInitialization UpdateServiceStatusAsRunning(TRUE).
GPSVC(66c.698) 18:39:08:664 CGPService::DoAsyncInitialization pGPService->SetServiceInitialized().
GPSVC(66c.7d0) 18:39:08:664 bMachine = 1
GPSVC(66c.698) 18:39:08:664 CGPService::DoAsyncInitialization SetEvent( s_hEventInitialized ).
GPSVC(66c.698) 18:39:08:665 CGPService::DoAsyncInitialization: DeletePolicyTask.
GPSVC(66c.7d0) 18:39:08:684 Setting lock state as notLocked
GPSVC(66c.7d0) 18:39:08:684 CPolicyCriticalSectionCollection: Deleting critical section for UserSid <(null)>
GPSVC(66c.7d0) 18:39:08:685 Deleting machine
GPSVC(66c.698) 18:39:08:745 StartTaskScheduler status: 0x0
GPSVC(66c.698) 18:39:08:764 DeletePolicyTask Microsoft\Windows\GroupPolicy folder does not exist. No tasks to delete.
GPSVC(66c.698) 18:39:08:764 Cleanup Machine Background Task 0x0.
GPSVC(66c.698) 18:39:08:772 StartTaskScheduler status: 0x0
GPSVC(66c.698) 18:39:08:773 DeletePolicyTask Microsoft\Windows\GroupPolicy folder does not exist. No tasks to delete.
GPSVC(66c.698) 18:39:08:774 Cleanup User Background Task 0x0.
GPSVC(66c.698) 18:39:08:798 CGPService::DoAsyncInitialization CGPServiceConfiguration::Initialize().
GPSVC(66c.698) 18:39:08:799 CGPService::DoAsyncInitialization CGPServiceState::Initialize().
GPSVC(66c.698) 18:39:08:799 CGPService::DoAsyncInitialization CGPExtensionExecutionState::Initialize().
GPSVC(66c.698) 18:39:08:799 CGPService::DoAsyncInitialization completed.
GPSVC(66c.698) 18:39:08:947 bMachine = 1
GPSVC(66c.7d0) 18:39:08:950 Setting lock state as notLocked
GPSVC(66c.7d0) 18:39:08:951 CPolicyCriticalSectionCollection: Deleting critical section for UserSid <(null)>
GPSVC(66c.7d0) 18:39:08:951 Deleting machine
GPSVC(a0c.a10) 18:39:10:129 CGPNotify::RegisterForNotification: Entering with target Machine and event 0000000000000474
GPSVC(a0c.a10) 18:39:10:135 CGPNotify::RegisterForNotification: Exiting with status = 0
GPSVC(a0c.a10) 18:39:10:137 CGPNotify::RegisterForNotification: Entering with target User and event 00000000000004C0
GPSVC(a0c.a10) 18:39:10:138 CGPNotify::RegisterForNotification: Exiting with status = 0
GPSVC(66c.990) 18:39:10:622 bMachine = 1
GPSVC(66c.990) 18:39:10:719 Setting lock state as notLocked
GPSVC(66c.990) 18:39:10:722 CPolicyCriticalSectionCollection: Deleting critical section for UserSid <(null)>
GPSVC(66c.990) 18:39:10:723 Deleting machine
GPSVC(d9c.db0) 18:39:11:719 CGPNotify::RegisterForNotification: Entering with target Machine and event 000000000000042C
GPSVC(d9c.db0) 18:39:11:719 CGPNotify::RegisterForNotification: Exiting with status = 0
GPSVC(e9c.ecc) 18:39:12:122 CGPNotify::RegisterForNotification: Entering with target Machine and event 000000000000030C
GPSVC(e9c.ecc) 18:39:12:122 CGPNotify::RegisterForNotification: Exiting with status = 0
GPSVC(e9c.ecc) 18:39:12:123 CGPNotify::RegisterForNotification: Entering with target User and event 0000000000000358
GPSVC(e9c.ecc) 18:39:12:124 CGPNotify::RegisterForNotification: Exiting with status = 0
GPSVC(34c.eb4) 18:39:12:157 CGPNotify::RegisterForNotification: Entering with target Machine and event 0000000000000AA0
GPSVC(34c.eb4) 18:39:12:158 CGPNotify::RegisterForNotification: Exiting with status = 0
GPSVC(c8c.10ec) 18:39:12:266 CGPNotify::RegisterForNotification: Entering with target Machine and event 00000000000001A0
GPSVC(c8c.10ec) 18:39:12:267 CGPNotify::RegisterForNotification: Exiting with status = 0
GPSVC(e04.fe0) 18:39:12:268 CGPNotify::RegisterForNotification: Entering with target Machine and event 000000000000052C
GPSVC(e04.fe0) 18:39:12:269 CGPNotify::RegisterForNotification: Exiting with status = 0
GPSVC(e04.fe0) 18:39:12:270 CGPNotify::RegisterForNotification: Entering with target User and event 000000000000056C
GPSVC(e04.fe0) 18:39:12:270 CGPNotify::RegisterForNotification: Exiting with status = 0
GPSVC(c3c.c6c) 18:39:14:019 CGPNotify::RegisterForNotification: Entering with target Machine and event 0000000000000308
GPSVC(c3c.c6c) 18:39:14:020 CGPNotify::RegisterForNotification: Exiting with status = 0
GPSVC(34c.3c4) 18:39:14:132 CGPNotify::RegisterForNotification: Entering with target Machine and event 00000000000010C8
GPSVC(34c.3c4) 18:39:14:132 CGPNotify::RegisterForNotification: Exiting with status = 0
GPSVC(34c.3c4) 18:39:14:298 CGPNotify::RegisterForNotification: Entering with target Machine and event 000000000000117C
GPSVC(34c.3c4) 18:39:14:298 CGPNotify::RegisterForNotification: Exiting with status = 0
GPSVC(16d4.16d8) 18:39:16:536 CGPNotify::RegisterForNotification: Entering with target Machine and event 0000000000000474
GPSVC(16d4.16d8) 18:39:16:537 CGPNotify::RegisterForNotification: Exiting with status = 0
GPSVC(16d4.16d8) 18:39:16:538 CGPNotify::RegisterForNotification: Entering with target User and event 00000000000004C0
GPSVC(16d4.16d8) 18:39:16:538 CGPNotify::RegisterForNotification: Exiting with status = 0
GPSVC(66c.990) 18:39:21:471 CGPEventSubSystem::GroupPolicyCreateSession::++ (SessionId: 1)
GPSVC(66c.990) 18:39:21:472 CGPApplicationService::CreateSessionEvent::++ (SessionId: 1)
GPSVC(66c.990) 18:39:21:472 CGPApplicationService::CheckAndCreateCriticalPolicySection.
GPSVC(66c.990) 18:39:21:472 User SID = MACHINE SID
GPSVC(66c.990) 18:39:21:473 bMachine = 1
GPSVC(66c.990) 18:39:21:473 Setting GPsession state = 1
GPSVC(66c.990) 18:39:21:473 User SID = MACHINE SID
GPSVC(66c.990) 18:39:21:474 CGroupPolicySession::QueueItemForPolicyApplication::++ (bTriggered: 0, bConsole: 0)
GPSVC(66c.990) 18:39:21:474 PolicyApplicationState is False.
GPSVC(66c.990) 18:39:21:474 AsyncThreadsProcessing is False.
GPSVC(66c.990) 18:39:21:475 PolicyApplicationState is False.
GPSVC(66c.990) 18:39:21:475 AsyncThreadsProcessing is False.
GPSVC(66c.990) 18:39:21:475 CGroupPolicySession::QueueItemForPolicyApplication::Applying policy in Async.
GPSVC(66c.1714) 18:39:21:475 CGroupPolicySession::ApplyGroupPolicyForPrincipal::++ (bTriggered: 0, bConsole: 0)
GPSVC(66c.990) 18:39:21:476 CGroupPolicySession::QueueItemForPolicyApplication::-- (Status: 0, Thread: 000000000000022C)
GPSVC(66c.990) 18:39:21:476 CGPApplicationService::CreateSessionEvent::-- (Status: 0)
GPSVC(66c.990) 18:39:21:476 CGPEventSubSystem::GroupPolicyCreateSession::-- (Status: 0)
GPSVC(66c.1714) 18:39:21:481 CanStartFromLocalDataStore:++
GPSVC(66c.1714) 18:39:21:481 CanLoadGPOsFromLocalCache:++
GPSVC(66c.1714) 18:39:21:485 GetFgPolicySettingImpl (bSync: 0)
GPSVC(66c.1714) 18:39:21:487 CanLoadGPOsFromLocalCache: Not in Sync process mode.
GPSVC(66c.1714) 18:39:21:488 CanLoadGPOsFromLocalCache:-- (FALSE)
GPSVC(66c.1714) 18:39:21:488 CanStartFromLocalDataStore:-- (FALSE)
GPSVC(66c.1714) 18:39:21:489 CGroupPolicySession::ApplyGroupPolicyForPrincipal: Beginning Wait AsyncInitializationCompletedEvent.
GPSVC(66c.1714) 18:39:21:489 CGroupPolicySession::ApplyGroupPolicyForPrincipal: Ending Wait AsyncInitializationCompletedEvent.
GPSVC(66c.1714) 18:39:21:489 GetAOACConfig: dwAOACConfig was 0, setting to 600.
GPSVC(66c.1714) 18:39:21:490 CGroupPolicySession::ApplyGroupPolicyForPrincipal: Check if machine is a domain controller starts.
GPSVC(66c.1714) 18:39:21:491 Waiting for connectivity before applying policies
GPSVC(66c.1714) 18:39:21:492 CGPApplicationService::MachinePolicyStartedWaitingOnNetwork.
GPSVC(66c.1714) 18:39:21:492 CGPMachineStartupConnectivity::CalculateWaitTimeoutFromHistory: Average is 4325.
GPSVC(66c.1714) 18:39:21:492 CGPMachineStartupConnectivity::CalculateWaitTimeoutFromHistory: Current is 3796.
GPSVC(66c.1714) 18:39:21:493 CGPMachineStartupConnectivity::CalculateWaitTimeoutFromHistory: Taking min of 8650 and 600000.
GPSVC(66c.1714) 18:39:21:493 Waiting for SamSs with timeout 8650
GPSVC(66c.1714) 18:39:21:494 Waiting for NTDS.IndexRecreateEvent with timeout 8650
GPSVC(66c.1714) 18:39:21:495 Waiting for NlaSvc with timeout 8650
GPSVC(66c.1714) 18:39:21:496 Waiting for NETLOGON with timeout 8650
GPSVC(66c.1714) 18:39:21:499 Waiting for MUP with timeout 8635
GPSVC(66c.1714) 18:39:21:499 Waiting for wkssvc to signal MUP event
GPSVC(66c.1714) 18:39:21:499 WaitForMUP: Beginning WaitForSingleObject.
GPSVC(66c.1714) 18:39:21:499 WaitForMUP: Completed WaitForSingleObject.
GPSVC(66c.1714) 18:39:21:500 Done waiting for MUP
GPSVC(66c.1714) 18:39:21:500 Waiting for DS with timeout 8635
GPSVC(66c.db4) 18:39:21:502 Wait For Connectivity: Before attempting to retrieve appropriate connectivity watcher instance
GPSVC(66c.db4) 18:39:21:503 Wait For Connectivity: Retrieved the appropriate connectivity watcher instance
GPSVC(66c.db4) 18:39:21:506 Registered for NLA notification successfully
GPSVC(66c.db4) 18:39:21:509 CConnectivityWatcher::WaitForConnectivity: Beginning WaitForSingleObject.
GPSVC(66c.db4) 18:39:21:509 CConnectivityWatcher::WaitForConnectivity: Completed WaitForSingleObject.
GPSVC(66c.db4) 18:39:21:509 There is connectivity.
GPSVC(66c.1714) 18:39:21:512 We have network connectivity... proceeding to apply policy.
GPSVC(66c.db4) 18:39:21:513 Wait For Connectivity: Succeeded
GPSVC(66c.1714) 18:39:21:514 CGroupPolicySession::ApplyGroupPolicyForPrincipal::ApplyGroupPolicy (dwFlags: 79).
GPSVC(66c.1714) 18:39:21:514 ApplyGroupPolicy: flags=0x4f, Tick=18281., ResumeTick=0.
GPSVC(66c.1714) 18:39:21:515 CanStartFromLocalDataStore:++
GPSVC(66c.1714) 18:39:21:515 CanLoadGPOsFromLocalCache:++
GPSVC(66c.1714) 18:39:21:515 GetFgPolicySettingImpl (bSync: 0)
GPSVC(66c.1714) 18:39:21:516 CanLoadGPOsFromLocalCache: Not in Sync process mode.
GPSVC(66c.1714) 18:39:21:516 CanLoadGPOsFromLocalCache:-- (FALSE)
GPSVC(66c.1714) 18:39:21:516 CanStartFromLocalDataStore:-- (FALSE)
GPSVC(66c.1714) 18:39:21:517 ResetDfsClientInfoIfRequired: dwResetDfsClientInfo is 0 (RegGetValue status was 2).
GPSVC(66c.1714) 18:39:21:518 NlaQueryNetSignatures returned 1 networks
GPSVC(66c.1714) 18:39:21:518 NSI Information (Network GUID)  : {AA742379-4B36-11E8-A3DE-806E6F6E6963}
GPSVC(66c.1714) 18:39:21:521 NSI Information (CompartmentId) : 1
GPSVC(66c.1714) 18:39:21:522 NSI Information (SiteId)        : 134217728
GPSVC(66c.1714) 18:39:21:522 NSI Information (Network Name)  :
GPSVC(66c.1714) 18:39:21:522 Found a intranet+auth network
GPSVC(66c.1714) 18:39:21:523 # of interfaces : 1
GPSVC(66c.1714) 18:39:21:523 Interface ID: {D358A3F4-5AA9-476C-91B6-905216928367}
GPSVC(66c.1714) 18:39:21:524 Compartment ID: 1 selected
GPSVC(66c.1714) 18:39:21:524 Setting the CompartmentId [1] on the current thread
GPSVC(66c.1714) 18:39:21:543 Opened Existing Registry key
GPSVC(66c.1714) 18:39:21:547 UncPath :'\\domain.com\SYSVOL'
GPSVC(66c.1714) 18:39:21:547 UncPath :'\\domain.com\NETLOGON'
GPSVC(66c.1714) 18:39:21:552 GetDomainControllerConnectionInfo: Enabling bandwidth estimate.
GPSVC(66c.1714) 18:39:21:563 Started bandwidth estimation successfully
GPSVC(66c.1714) 18:39:21:563 GetDomainControllerConnectionInfo: Getting Ldap Handles.
GPSVC(66c.1714) 18:39:21:564 GetLdapHandle:  Getting ldap handle for host: server.domain.com in domain: domain.com.
GPSVC(66c.1714) 18:39:21:567 GetLdapHandle:  Server connection established.
GPSVC(66c.1714) 18:39:21:571 GetLdapHandle:  Binding using only kerberos.
GPSVC(66c.1714) 18:39:21:577 GetLdapHandle:  Bound successfully.
GPSVC(66c.1714) 18:39:21:581 ProcessGPOs:  Network Name = domain.com.
GPSVC(66c.1714) 18:39:21:582 ProcessGPOs:  DC IP Address = x.x.x.x.
GPSVC(66c.1714) 18:39:21:582 ReadGPExtensions: Rsop entry point not found for AppManagementConfiguration.dll.
GPSVC(66c.1714) 18:39:21:585 ReadGPExtensions: Rsop entry point not found for C:\Windows\System32\gpprefcl.dll.
GPSVC(66c.1714) 18:39:21:586 ReadGPExtensions: Rsop entry point not found for AppManagementConfiguration.dll.
GPSVC(66c.1714) 18:39:21:586 ReadGPExtensions: Rsop entry point not found for C:\WINDOWS\System32\dskquota.dll.
GPSVC(66c.1714) 18:39:21:587 ReadGPExtensions: Rsop entry point not found for gptext.dll.
GPSVC(66c.1714) 18:39:21:587 ReadGPExtensions: Rsop entry point not found for C:\Windows\System32\gpprefcl.dll.
GPSVC(66c.1714) 18:39:21:588 ReadGPExtensions: Rsop entry point not found for C:\WINDOWS\System32\TsUsbRedirectionGroupPolicyExtension.dll.
GPSVC(66c.1714) 18:39:21:588 ReadGPExtensions: Rsop entry point not found for C:\Windows\System32\iedkcs32.dll.
GPSVC(66c.1714) 18:39:21:589 ReadGPExtensions: Rsop entry point not found for C:\Windows\System32\tsworkspace.dll.
GPSVC(66c.1714) 18:39:21:589 ReadGPExtensions: Rsop entry point not found for WorkFoldersGPExt.dll.
GPSVC(66c.1714) 18:39:21:590 ReadGPExtensions: Rsop entry point not found for dmenrollengine.dll.
GPSVC(66c.1714) 18:39:21:590 ReadGPExtensions: Rsop entry point not found for C:\WINDOWS\System32\srchadmin.dll.
GPSVC(66c.1714) 18:39:21:591 ReadGPExtensions: Rsop entry point not found for C:\Windows\System32\iedkcs32.dll.
GPSVC(66c.1714) 18:39:21:591 ReadGPExtensions: Rsop entry point not found for hvsigpext.dll.
GPSVC(66c.1714) 18:39:21:592 ReadGPExtensions: Rsop entry point not found for pwlauncher.dll.
GPSVC(66c.1714) 18:39:21:593 ReadGPExtensions: Rsop entry point not found for pwlauncher.dll.
GPSVC(66c.1714) 18:39:21:593 ReadGPExtensions: Rsop entry point not found for C:\WINDOWS\System32\cscobj.dll.
GPSVC(66c.1714) 18:39:21:594 ReadGPExtensions: Rsop entry point not found for gptext.dll.
GPSVC(66c.1714) 18:39:21:594 ReadGPExtensions: Rsop entry point not found for C:\Windows\System32\iedkcs32.dll.
GPSVC(66c.1714) 18:39:21:595 ReadGPExtensions: Rsop entry point not found for dggpext.dll.
GPSVC(66c.1714) 18:39:21:596 ReadGPExtensions: Rsop entry point not found for gptext.dll.
GPSVC(66c.1714) 18:39:21:596 ReadGPExtensions: Rsop entry point not found for gptext.dll.
GPSVC(66c.1714) 18:39:21:596 ReadGPExtensions: Rsop entry point not found for dggpext.dll.
GPSVC(66c.1714) 18:39:21:599 GetGPOInfo:  ********************************
GPSVC(66c.1714) 18:39:21:600 GetGPOInfo:  Entering...
GPSVC(66c.1714) 18:39:21:609 GetMachineToken:  Looping for authentication again.
GPSVC(66c.1714) 18:39:21:615 SearchDSObject:  Searching <OU=Computers,OU=XXX,DC=domain,DC=com>
GPSVC(66c.1714) 18:39:21:615 SearchDSObject:  No GPO(s) for this object.
GPSVC(66c.1714) 18:39:21:615 SearchDSObject:  Searching <OU=XXX,DC=domain,DC=com>
GPSVC(66c.1714) 18:39:21:616 SearchDSObject:  Found GPO(s):  <[LDAP://cn={F20B1582-E82C-40FB-8C0A-0945373EF049},cn=policies,cn=system,DC=domain,DC=com;0]>
GPSVC(66c.1714) 18:39:21:616 ProcessGPO(Machine):  ==============================
GPSVC(66c.1714) 18:39:21:616 ProcessGPO(Machine):  Deferring search for <LDAP://cn={F20B1582-E82C-40FB-8C0A-0945373EF049},cn=policies,cn=system,DC=domain,DC=com>
GPSVC(66c.1714) 18:39:21:617 SearchDSObject:  Searching <DC=domain,DC=com>
GPSVC(66c.1714) 18:39:21:617 SearchDSObject:  Found GPO(s):  <[LDAP://cn={21056196-7D4D-400A-91E8-CDB79406BD3F},cn=policies,cn=system,DC=domain,DC=com;0][LDAP://CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=domain,DC=com;0]>
GPSVC(66c.1714) 18:39:21:617 ProcessGPO(Machine):  ==============================
GPSVC(66c.1714) 18:39:21:618 ProcessGPO(Machine):  Deferring search for <LDAP://cn={21056196-7D4D-400A-91E8-CDB79406BD3F},cn=policies,cn=system,DC=domain,DC=com>
GPSVC(66c.1714) 18:39:21:618 ProcessGPO(Machine):  ==============================
GPSVC(66c.1714) 18:39:21:618 ProcessGPO(Machine):  Deferring search for <LDAP://CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=domain,DC=com>
GPSVC(66c.1714) 18:39:21:621 GetMachineDomainDS:  Failed to connect with 81
GPSVC(66c.1714) 18:39:21:622 GetGPOInfo:  Leaving with 0
GPSVC(66c.1714) 18:39:21:622 GetGPOInfo:  ********************************
GPSVC(66c.1714) 18:39:21:622 ProcessGPOs(Machine): GetGPOInfo failed.
GPSVC(66c.1714) 18:39:21:623 GetFgPolicySettingImpl (bSync: 0)
GPSVC(66c.1714) 18:39:21:624 gpGetFgPolicyRefreshInfo (Machine): Mode: Asynchronous, Reason: 0
GPSVC(66c.1714) 18:39:21:624 gpSetFgPolicyRefreshInfo (bPrev: 1, szUserSid: Machine, info.mode: Asynchronous)
GPSVC(66c.1714) 18:39:21:624 SetFgRefreshInfo: Previous Machine Fg policy Asynchronous, Reason: NoNeedForSync.
GPSVC(66c.1714) 18:39:21:625 ProcessGPOs(Machine): No WMI logging done in this policy cycle.
GPSVC(66c.1714) 18:39:21:627 ProcessGPOs(Machine): Boot/Logon Policy processing - checking if UBPM trigger events need to be fired
GPSVC(66c.1714) 18:39:21:627 CheckAndFireGPTriggerEvent: Applied GPO list is empty. Not firing UBPM trigger events.
GPSVC(66c.1714) 18:39:21:628 OnPolicyApplicationComplete: Application complete with bConnectivityFailure = 0.
GPSVC(66c.1714) 18:39:21:629 ApplyGroupPolicy: Getting ready to create background thread GPOThread.
GPSVC(66c.d0c) 18:39:21:629 GPOThread(Machine)
GPSVC(66c.d0c) 18:39:21:629 GPOThread: registering for NLA when GPService is running
GPSVC(66c.d0c) 18:39:21:630 GPOThread(Machine): Waiting 0.
GPSVC(66c.1714) 18:39:21:629 CGroupPolicySession::ExecuteGPOScriptsForThePrincipal - Machine started.
GPSVC(66c.1714) 18:39:21:631 CGroupPolicySession::ExecuteGPOScriptsForThePrincipal - Machine startup.
GPSVC(66c.1714) 18:39:21:631 CGroupPolicySession::ExecuteGPOScriptsForThePrincipal - processing user scripts.
GPSVC(66c.1714) 18:39:21:631 CGroupPolicySession::ApplyGroupPolicyForPrincipal Setting m_pPolicyInfoReadyEvent
GPSVC(66c.1714) 18:39:21:632 OnPolicyApplicationComplete: Application complete with bConnectivityFailure = 0.
GPSVC(66c.1714) 18:39:21:632 GPOThread(Machine): dwOffset=0., dwTimeout=5400000.
GPSVC(66c.1714) 18:39:21:632 GetProcessingIntervals() returned 90.
GPSVC(66c.1714) 18:39:21:633 CreatePolicyTask called : bMachine = 1, nInterval = 90
GPSVC(66c.1714) 18:39:21:691 CreatePolicyTask succeeded.
GPSVC(66c.1714) 18:39:21:692 Setting m_hApplyGroupPolicyCompletedEvent via SUCCESS.
GPSVC(66c.1714) 18:39:21:692 CGroupPolicySession::ApplyGroupPolicyForPrincipal::-- (Status: 0)
GPSVC(34c.3c0) 18:39:31:803 GetFgPolicySettingImpl (bSync: 0)
GPSVC(34c.3c0) 18:39:31:804 gpGetFgPolicyRefreshInfo (User): Mode: Asynchronous, Reason: 0
GPSVC(34c.3c0) 18:39:31:805 gpGetFgPolicyRefreshInfo (User): Mode: Asynchronous, Reason: 0
GPSVC(66c.698) 18:39:32:108 CGPEventSubSystem::GroupPolicyOnLogon::++ (SessionId: 1)
GPSVC(66c.698) 18:39:32:109 CGPApplicationService::UserLogonEvent::++ (SessionId: 1, ServiceRestart: 0)
GPSVC(66c.698) 18:39:32:109 CGPApplicationService::CheckAndCreateCriticalPolicySection.
GPSVC(66c.698) 18:39:32:110 User SID = <S-1-5-21-3252097651-3095764660-3574788348-1117>
GPSVC(66c.698) 18:39:32:110 SID = S-1-5-21-3252097651-3095764660-3574788348-1117
GPSVC(66c.698) 18:39:32:110 bMachine = 0
GPSVC(66c.698) 18:39:32:111 Setting GPsession state = 1
GPSVC(66c.698) 18:39:32:111 CGroupPolicySession::InitializeGPSession ::(dwTimeOut: 3600000)
GPSVC(66c.698) 18:39:32:112 CGroupPolicySession::SetForegroundPolicyApplicationState::++ (bMachine= 0, bServiceRestart= 0)
GPSVC(66c.698) 18:39:32:112 GetFgPolicySettingImpl (bSync: 0)
GPSVC(66c.698) 18:39:32:113 gpGetFgPolicyRefreshInfo (User): Mode: Asynchronous, Reason: 0
GPSVC(66c.698) 18:39:32:113 GetFgPolicySettingImpl (bSync: 0)
GPSVC(66c.698) 18:39:32:114 CGroupPolicySession::SetForegroundPolicyApplicationState::-- (User, m_PolicyProcessingMode = Async)
GPSVC(66c.698) 18:39:32:114 User SID = <S-1-5-21-3252097651-3095764660-3574788348-1117>
GPSVC(66c.698) 18:39:32:115 CGPApplicationService::GetMachinePolicyProcessingCompletionEvent.
GPSVC(66c.698) 18:39:32:115 CGPApplicationService::GetMachinePolicyWaitForNetworkCompletionEvent.
GPSVC(66c.698) 18:39:32:115 CGroupPolicySession::QueueItemForPolicyApplication::++ (bTriggered: 0, bConsole: 1)
GPSVC(66c.698) 18:39:32:116 PolicyApplicationState is False.
GPSVC(66c.698) 18:39:32:116 AsyncThreadsProcessing is False.
GPSVC(66c.698) 18:39:32:117 PolicyApplicationState is False.
GPSVC(66c.698) 18:39:32:117 AsyncThreadsProcessing is False.
GPSVC(66c.698) 18:39:32:118 CGroupPolicySession::QueueItemForPolicyApplication::Applying policy in Async.
GPSVC(66c.1b30) 18:39:32:118 CanStartFromLocalDataStore:++
GPSVC(66c.698) 18:39:32:119 CGPEventSubSystem::GroupPolicyOnLogon::-- (Status: 0)
GPSVC(66c.1b30) 18:39:32:119 CanLoadGPOsFromLocalCache: Not in Sync process mode.
GPSVC(66c.1b30) 18:39:32:120 CanLoadGPOsFromLocalCache:-- (FALSE)
GPSVC(66c.1b30) 18:39:32:121 CanStartFromLocalDataStore:-- (FALSE)
GPSVC(66c.1b30) 18:39:32:121 CGroupPolicySession::ApplyGroupPolicyForPrincipal: Beginning Wait AsyncInitializationCompletedEvent.
GPSVC(66c.1b30) 18:39:32:122 CGroupPolicySession::ApplyGroupPolicyForPrincipal: Ending Wait AsyncInitializationCompletedEvent.
GPSVC(66c.1b30) 18:39:32:123 UserPolicy: Waiting for machine policy complete event with timeout 600000 ms
GPSVC(66c.1b30) 18:39:32:124 CGroupPolicySession::WaitForMachinePolicyEventsToBeSignaled: Beginning WaitForSingleObject.
GPSVC(66c.1b30) 18:39:32:125 CGroupPolicySession::WaitForMachinePolicyEventsToBeSignaled: Completed WaitForSingleObject.
GPSVC(66c.1b30) 18:39:32:126 GetAOACConfig: dwAOACConfig was 0, setting to 600.
GPSVC(66c.1b30) 18:39:32:126 CGroupPolicySession::ApplyGroupPolicyForPrincipal: Check if machine is a domain controller starts.
GPSVC(66c.1b30) 18:39:32:127 CGroupPolicySession::ApplyGroupPolicyForPrincipal::ApplyGroupPolicy (dwFlags: 110).
GPSVC(66c.1b30) 18:39:32:128 ApplyGroupPolicy: flags=0x6e, Tick=28890., ResumeTick=0.
GPSVC(66c.1b30) 18:39:32:129 CanStartFromLocalDataStore:++
GPSVC(66c.1b30) 18:39:32:130 CanLoadGPOsFromLocalCache:++
GPSVC(66c.1b30) 18:39:32:130 GetFgPolicySettingImpl (bSync: 0)
GPSVC(66c.1b30) 18:39:32:132 CanLoadGPOsFromLocalCache: Not in Sync process mode.
GPSVC(66c.1b30) 18:39:32:133 CanLoadGPOsFromLocalCache:-- (FALSE)
GPSVC(66c.1b30) 18:39:32:134 CanStartFromLocalDataStore:-- (FALSE)
GPSVC(66c.1b30) 18:39:32:134 ResetDfsClientInfoIfRequired: dwResetDfsClientInfo is 0 (RegGetValue status was 2).
GPSVC(66c.1b30) 18:39:32:136 NlaQueryNetSignatures returned 1 networks
GPSVC(66c.1b30) 18:39:32:137 NSI Information (Network GUID)  : {AA742379-4B36-11E8-A3DE-806E6F6E6963}
GPSVC(66c.1b30) 18:39:32:139 NSI Information (CompartmentId) : 1
GPSVC(66c.1b30) 18:39:32:140 NSI Information (SiteId)        : 134217728
GPSVC(66c.1b30) 18:39:32:142 NSI Information (Network Name)  :
GPSVC(66c.1b30) 18:39:32:143 Found a intranet+auth network
GPSVC(66c.1b30) 18:39:32:145 # of interfaces : 1
GPSVC(66c.1b30) 18:39:32:146 Interface ID: {D358A3F4-5AA9-476C-91B6-905216928367}
GPSVC(66c.1b30) 18:39:32:147 Compartment ID: 1 selected
GPSVC(66c.1b30) 18:39:32:148 Setting the CompartmentId [1] on the current thread
GPSVC(66c.1b30) 18:39:32:192 GPLockPolicySection: Sid = (null), dwTimeout = 30000, dwFlags = 0x12
GPSVC(66c.1b30) 18:39:32:197 Registry Sync Lock Called
GPSVC(66c.1b30) 18:39:32:197 Registry Lock taken successfully
GPSVC(66c.1b30) 18:39:32:198 Setting lock state as notLocked
GPSVC(66c.1b30) 18:39:32:199 CPolicyCriticalSectionCollection: Deleting critical section for UserSid <(null)>
GPSVC(66c.1b30) 18:39:32:199 Deleting machine
GPSVC(66c.1b30) 18:39:32:200 Failed to query GP Kerberos Armoring in Registry = 0x80070002
GPSVC(66c.1b30) 18:39:32:203 Failed to query EnableCbacAndArmor in Manual Kerberos Armoring in Registry = 0x80070002
GPSVC(66c.1b30) 18:39:32:204 Failed to query RequireFast in Manual Kerberos Armoring in Registry = 0x80070002
GPSVC(66c.1b30) 18:39:32:206 Opened Existing Registry key
GPSVC(66c.1b30) 18:39:32:207 UncPath :'\\domain.com\SYSVOL'
GPSVC(66c.1b30) 18:39:32:208 UncPath :'\\domain.com\NETLOGON'
GPSVC(66c.1b30) 18:39:32:209 GetDomainControllerConnectionInfo: Enabling bandwidth estimate.
GPSVC(66c.698) 18:39:32:213 CGPEventSubSystem::GroupPolicyOnStartShell::++ (SessionId: 1)
GPSVC(66c.698) 18:39:32:214 CGPApplicationService::HandleStartShellNotification::++ (SessionId: 1)
GPSVC(66c.698) 18:39:32:215 User SID = <S-1-5-21-3252097651-3095764660-3574788348-1117>
GPSVC(66c.698) 18:39:32:215 CGPApplicationService::HandleStartShellNotification ExecuteLogonGPOScriptsForUser for session 1.
GPSVC(66c.698) 18:39:32:220 CGroupPolicySession::ExecuteLogonGPOScriptsForUser - Async.
GPSVC(66c.698) 18:39:32:222 CGroupPolicySession::ExecuteLogonGPOScriptsForUser - LogonScriptDelay policy disabled.
GPSVC(66c.698) 18:39:32:222 CGroupPolicySession::ExecuteLogonGPOScriptsForUser - GetSetting ASYNC_SCRIPT_DELAY value:0 minutes.
GPSVC(66c.698) 18:39:32:223 CGPApplicationService::HandleStartShellNotification::-- (Status: 0)
GPSVC(66c.698) 18:39:32:224 CGPEventSubSystem::GroupPolicyOnStartShell::-- (Status: 0)
GPSVC(66c.1b80) 18:39:32:224 CGroupPolicySession::ExecuteGPOScriptsForThePrincipal (WaitForTheApplyGroupPolicyEventCompletedToBeSignaled) started.
GPSVC(66c.1b30) 18:39:32:226 ReadGPExtensions: Rsop entry point not found for gptext.dll.
GPSVC(66c.1b30) 18:39:32:227 ReadGPExtensions: Rsop entry point not found for C:\Windows\System32\gpprefcl.dll.
GPSVC(66c.1b30) 18:39:32:228 ReadGPExtensions: Rsop entry point not found for C:\WINDOWS\System32\TsUsbRedirectionGroupPolicyExtension.dll.
GPSVC(66c.1b30) 18:39:32:228 ReadGPExtensions: Rsop entry point not found for C:\Windows\System32\iedkcs32.dll.
GPSVC(66c.1b30) 18:39:32:229 ReadGPExtensions: Rsop entry point not found for C:\Windows\System32\tsworkspace.dll.
GPSVC(66c.1b30) 18:39:32:230 ReadGPExtensions: Rsop entry point not found for WorkFoldersGPExt.dll.
GPSVC(66c.1b30) 18:39:32:231 ReadGPExtensions: Rsop entry point not found for dmenrollengine.dll.
GPSVC(66c.1b30) 18:39:32:232 ReadGPExtensions: Rsop entry point not found for C:\WINDOWS\System32\srchadmin.dll.
GPSVC(66c.1b30) 18:39:32:233 ReadGPExtensions: Rsop entry point not found for C:\Windows\System32\iedkcs32.dll.
GPSVC(66c.1b30) 18:39:32:235 ReadGPExtensions: Rsop entry point not found for hvsigpext.dll.
GPSVC(66c.1b30) 18:39:32:236 ReadGPExtensions: Rsop entry point not found for pwlauncher.dll.
GPSVC(66c.1b30) 18:39:32:238 ReadGPExtensions: Rsop entry point not found for pwlauncher.dll.
GPSVC(66c.1b30) 18:39:32:240 ReadGPExtensions: Rsop entry point not found for C:\WINDOWS\System32\cscobj.dll.
GPSVC(66c.1b30) 18:39:32:244 ReadGPExtensions: Rsop entry point not found for gptext.dll.
GPSVC(66c.1b30) 18:39:32:249 ReadGPExtensions: Rsop entry point not found for C:\Windows\System32\iedkcs32.dll.
GPSVC(66c.1b30) 18:39:32:253 ReadGPExtensions: Rsop entry point not found for dggpext.dll.
GPSVC(66c.1b30) 18:39:32:256 ReadGPExtensions: Rsop entry point not found for gptext.dll.
GPSVC(66c.1b30) 18:39:32:258 ReadGPExtensions: Rsop entry point not found for gptext.dll.
GPSVC(66c.1b30) 18:39:32:261 ReadGPExtensions: Rsop entry point not found for dggpext.dll.
GPSVC(66c.1b30) 18:39:32:294 GetFgPolicySettingImpl (bSync: 0)
GPSVC(66c.1b30) 18:39:32:304 gpGetFgPolicyRefreshInfo (User): Mode: Asynchronous, Reason: 0
GPSVC(66c.1b30) 18:39:32:314 gpSetFgPolicyRefreshInfo (bPrev: 1, szUserSid: S-1-5-21-3252097651-3095764660-3574788348-1117, info.mode: Asynchronous)
GPSVC(66c.1b30) 18:39:32:320 SetFgRefreshInfo: Previous User Fg policy Asynchronous, Reason: NoNeedForSync.
GPSVC(66c.1b30) 18:39:32:323 ProcessGPOs(User): No WMI logging done in this policy cycle.
GPSVC(66c.1b30) 18:39:32:327 ProcessGPOs(User): Boot/Logon Policy processing - checking if UBPM trigger events need to be fired
GPSVC(66c.1b30) 18:39:32:332 CheckAndFireGPTriggerEvent: Applied GPO list is empty. Not firing UBPM trigger events.
GPSVC(66c.1b30) 18:39:32:336 OnPolicyApplicationComplete: Application complete with bConnectivityFailure = 0.
GPSVC(66c.1b30) 18:39:32:338 ApplyGroupPolicy: Getting ready to create background thread GPOThread.
GPSVC(66c.1b30) 18:39:32:338 CGroupPolicySession::ApplyGroupPolicyForPrincipal Setting m_pPolicyInfoReadyEvent
GPSVC(66c.1b30) 18:39:32:339 OnPolicyApplicationComplete: Application complete with bConnectivityFailure = 0.
GPSVC(66c.13b4) 18:39:32:341 GPOThread(User): Waiting 0.
GPSVC(66c.1b30) 18:39:32:342 GPOThread(User): dwOffset=1380000., dwTimeout=6780000.
GPSVC(66c.1b30) 18:39:32:343 GetProcessingIntervals() returned 113.
GPSVC(66c.1b30) 18:39:32:343 CreatePolicyTask called : bMachine = 0, nInterval = 113
GPSVC(66c.1b30) 18:39:32:367 CreatePolicyTask succeeded.
GPSVC(66c.1b30) 18:39:32:368 Setting m_hApplyGroupPolicyCompletedEvent via SUCCESS.
GPSVC(66c.1b30) 18:39:32:369 CGroupPolicySession::ApplyGroupPolicyForPrincipal::-- (Status: 0)
GPSVC(66c.1b80) 18:39:32:370 CGroupPolicySession::ExecuteGPOScriptsForThePrincipal - get token for session 1 - 0.
GPSVC(66c.1b80) 18:39:32:370 CGroupPolicySession::ExecuteGPOScriptsForThePrincipal - processing user scripts.
GPSVC(e5c.e98) 18:39:34:899 CGPNotify::RegisterForNotification: Entering with target Machine and event 00000000000003A4
GPSVC(e5c.e98) 18:39:34:904 CGPNotify::RegisterForNotification: Exiting with status = 0
GPSVC(e5c.e98) 18:39:34:920 CGPNotify::RegisterForNotification: Entering with target Machine and event 0000000000000680
GPSVC(e5c.e98) 18:39:34:923 CGPNotify::RegisterForNotification: Exiting with status = 0
GPSVC(2784.279c) 18:39:46:136 CGPNotify::RegisterForNotification: Entering with target Machine and event 000000000000027C
GPSVC(2784.279c) 18:39:46:137 CGPNotify::RegisterForNotification: Exiting with status = 0
GPSVC(fec.11bc) 18:39:46:763 CGPNotify::RegisterForNotification: Entering with target Machine and event 000000000000029C
GPSVC(fec.11bc) 18:39:46:765 CGPNotify::RegisterForNotification: Exiting with status = 0
GPSVC(66c.698) 18:39:46:855 bMachine = 1
GPSVC(66c.698) 18:39:46:857 Setting lock state as notLocked
GPSVC(66c.698) 18:39:46:858 CPolicyCriticalSectionCollection: Deleting critical section for UserSid <(null)>
GPSVC(66c.698) 18:39:46:859 Deleting machine
GPSVC(66c.698) 18:39:46:864 bMachine = 1
GPSVC(66c.990) 18:39:46:868 Setting lock state as notLocked
GPSVC(66c.990) 18:39:46:869 CPolicyCriticalSectionCollection: Deleting critical section for UserSid <(null)>
GPSVC(66c.990) 18:39:46:870 Deleting machine
GPSVC(66c.990) 18:39:46:875 bMachine = 1
GPSVC(66c.990) 18:39:46:878 Setting lock state as notLocked
GPSVC(66c.990) 18:39:46:879 CPolicyCriticalSectionCollection: Deleting critical section for UserSid <(null)>
GPSVC(66c.990) 18:39:46:880 Deleting machine
GPSVC(66c.990) 18:39:47:251 bMachine = 1
GPSVC(66c.990) 18:39:47:253 Setting lock state as notLocked
GPSVC(66c.990) 18:39:47:254 CPolicyCriticalSectionCollection: Deleting critical section for UserSid <(null)>
GPSVC(66c.990) 18:39:47:255 Deleting machine
GPSVC(66c.990) 18:39:47:260 bMachine = 1
GPSVC(66c.990) 18:39:47:261 Setting lock state as notLocked
GPSVC(66c.990) 18:39:47:262 CPolicyCriticalSectionCollection: Deleting critical section for UserSid <(null)>
GPSVC(66c.990) 18:39:47:262 Deleting machine
GPSVC(66c.990) 18:39:47:266 bMachine = 1
GPSVC(66c.990) 18:39:47:269 Setting lock state as notLocked
GPSVC(66c.990) 18:39:47:269 CPolicyCriticalSectionCollection: Deleting critical section for UserSid <(null)>
GPSVC(66c.990) 18:39:47:270 Deleting machine
GPSVC(fec.f64) 18:39:47:276 CGPNotify::RegisterForNotification: Entering with target Machine and event 000000000000047C
GPSVC(fec.f64) 18:39:47:277 CGPNotify::RegisterForNotification: Exiting with status = 0
GPSVC(66c.990) 18:39:47:284 bMachine = 1
GPSVC(66c.990) 18:39:47:286 Setting lock state as notLocked
GPSVC(66c.990) 18:39:47:287 CPolicyCriticalSectionCollection: Deleting critical section for UserSid <(null)>
GPSVC(66c.990) 18:39:47:288 Deleting machine
GPSVC(66c.990) 18:39:47:292 bMachine = 1
GPSVC(66c.990) 18:39:47:294 Setting lock state as notLocked
GPSVC(66c.990) 18:39:47:294 CPolicyCriticalSectionCollection: Deleting critical section for UserSid <(null)>
GPSVC(66c.990) 18:39:47:295 Deleting machine
GPSVC(66c.990) 18:39:47:299 bMachine = 1
GPSVC(66c.990) 18:39:47:301 Setting lock state as notLocked
GPSVC(66c.990) 18:39:47:302 CPolicyCriticalSectionCollection: Deleting critical section for UserSid <(null)>
GPSVC(66c.990) 18:39:47:302 Deleting machine
GPSVC(2784.26e4) 18:39:53:223 CGPNotify::RegisterForNotification: Entering with target Machine and event 00000000000007D0
GPSVC(2784.26e4) 18:39:53:223 CGPNotify::RegisterForNotification: Exiting with status = 0
GPSVC(2784.26e4) 18:39:53:224 CGPNotify::RegisterForNotification: Entering with target User and event 000000000000080C
GPSVC(2784.26e4) 18:39:53:225 CGPNotify::RegisterForNotification: Exiting with status = 0
GPSVC(103c.1780) 18:40:22:211 CGPNotify::RegisterForNotification: Entering with target Machine and event 0000000000000458
GPSVC(103c.1780) 18:40:22:212 CGPNotify::RegisterForNotification: Exiting with status = 0
GPSVC(103c.1780) 18:40:22:213 CGPNotify::RegisterForNotification: Entering with target User and event 00000000000004A4
GPSVC(103c.1780) 18:40:22:214 CGPNotify::RegisterForNotification: Exiting with status = 0
GPSVC(19cc.1fb8) 18:41:14:738 CGPNotify::RegisterForNotification: Entering with target Machine and event 000000000000078C
GPSVC(19cc.1fb8) 18:41:14:740 CGPNotify::RegisterForNotification: Exiting with status = 0
GPSVC(66c.698) 18:41:14:937 Server_GetAppliedGroupPolicyObjectList: Entering. Extension = {35378EAC-683F-11D2-A89A-00C04FBBCFA2}
GPSVC(34c.37c) 18:41:15:555 CGPNotify::RegisterForNotification: Entering with target User and event 00000000000009B8
GPSVC(34c.37c) 18:41:15:556 CGPNotify::RegisterForNotification: Exiting with status = 0
GPSVC(34c.37c) 18:41:15:557 CGPNotify::RegisterForNotification: Entering with target User and event 0000000000001780
GPSVC(34c.37c) 18:41:15:559 CGPNotify::RegisterForNotification: Exiting with status = 0
GPSVC(34c.37c) 18:41:15:560 CGPNotify::RegisterForNotification: Entering with target User and event 000000000000149C
GPSVC(34c.37c) 18:41:15:561 CGPNotify::RegisterForNotification: Exiting with status = 0
GPSVC(34c.37c) 18:41:15:563 CGPNotify::RegisterForNotification: Entering with target User and event 00000000000015F0
GPSVC(34c.37c) 18:41:15:564 CGPNotify::RegisterForNotification: Exiting with status = 0
GPSVC(19cc.1fb8) 18:41:15:641 CGPNotify::RegisterForNotification: Entering with target User and event 00000000000008FC
GPSVC(19cc.1fb8) 18:41:15:643 CGPNotify::RegisterForNotification: Exiting with status = 0
GPSVC(25e8.5b8) 18:42:06:675 CGPNotify::RegisterForNotification: Entering with target Machine and event 00000000000003C4
GPSVC(25e8.5b8) 18:42:06:676 CGPNotify::RegisterForNotification: Exiting with status = 0
GPSVC(25e8.5b8) 18:42:06:678 CGPNotify::RegisterForNotification: Entering with target User and event 000000000000040C
GPSVC(25e8.5b8) 18:42:06:679 CGPNotify::RegisterForNotification: Exiting with status = 0
GPSVC(25e8.5b8) 18:42:06:681 CGPNotify::RegisterForNotification: Entering with target User and event 000000000000044C
GPSVC(25e8.5b8) 18:42:06:682 CGPNotify::RegisterForNotification: Exiting with status = 0
GPSVC(25e8.5b8) 18:42:06:684 CGPNotify::RegisterForNotification: Entering with target User and event 000000000000048C
GPSVC(25e8.5b8) 18:42:06:685 CGPNotify::RegisterForNotification: Exiting with status = 0
GPSVC(25e8.5b8) 18:42:06:687 CGPNotify::RegisterForNotification: Entering with target User and event 00000000000004D0
GPSVC(25e8.5b8) 18:42:06:688 CGPNotify::RegisterForNotification: Exiting with status = 0
GPSVC(25e8.5b8) 18:42:06:712 CGPNotify::RegisterForNotification: Entering with target User and event 0000000000000548
GPSVC(25e8.5b8) 18:42:06:713 CGPNotify::RegisterForNotification: Exiting with status = 0
GPSVC(25e8.5b8) 18:42:06:714 CGPNotify::UnregisterNotification: Entering with event 0000000000000548
GPSVC(25e8.5b8) 18:42:06:715 CGPNotify::UnregisterNotification: Exiting with dwStatus = 0x0

I have applied a GPO to disable sleep on our domain machines. We have laptops and a few Surface Pros both running Windows 10. The GPO works on the laptops but does not work on the Surface Pros. The settings that are disabled are:

But the option to Sleep is still present:

This is not the case on the laptops where there is no longer any option for sleep. Why would the Surface Pro not respond/accept the group policy change even when it is applied?

Now we use windows server 2012, Win2012 don't have GPO of Internet Explorer Maintenance, But this GPO export from win 2008 r2 , when i want to remove that policy don't have option , Please help to advise or suggest to me . Thanks

Good evening everyone!

I've ran over an issue in my AD environment

When I run GPRESULT /R on the target machine , not all the gpos are applying to the machine(windows 10 enterprise) 7/20

I ran the GP results in the gpmc console (on my admin machine) and the all the policies applied show 20/20

i then ran rsop.msc (on the target machine)and the polices appear there as well(all of them) 20/20

It is a computer policy that will disable the HDD to go to sleep.

I have tried to add the workstation name in the delegation - not working either

gpupdate /force doesn't do the trick either

checked the rights in the delegation and it shows that the gpo should be applying.

If it's worth mentioning I have 5 domain controller and a central store implemented.

Does any of you have any ideas why it would act this weird?

Hello All,

We have Multiple Sites in the AD which, In Each site, we have Administrator groups for the helpdesk team which is added in Local Administrator groups during <g class="gr_ gr_267 gr-alert gr_gramm gr_inline_cards gr_run_anim Grammar only-ins replaceWithoutSep" data-gr-id="267" id="267">OSD</g> process.

We have multiple tickets were the Helpdesk groups are not added in during <g class="gr_ gr_314 gr-alert gr_gramm gr_inline_cards gr_run_anim Grammar only-ins replaceWithoutSep" data-gr-id="314" id="314">OSD</g> process, Hence we are exploring GPO options by which we can push the Administrator helpdesk groups to the workstation.

Since these groups are Sites specific, We might end up creating 100+ GPO to push these groups only and we can't create a single group by adding all the Administrator helpdesk groups which will gain access to all the machines.

Is it possible where we can restrict the only specific helpdesk group to the specifc site?

Thanks HA

Engineer.Sherif

Engineer.Sherif

hi gaus

how can Prevent users delete or cut any thing (file- shortcut) from his profiles , just can create and copy and past

i  need do this thugh GPO 

Hi

I've a need to capture a user’s mapped drives per session and hopefully use this data to restore said drives to any PC they log into. (We dont use roaming profiles) I can’t use GP Prefs’s targeted to file share access groups as usaers are in most groups (they shouldnt be).

So .. I thought a logout script running a vbs file to enumerate the drives and dump to a text file on their homee drive. I could then use this info via a login script to restore the drives to any PC.

My VBS script works well when ran manually, However when added to a logoff GPO it does not enumerate the users drives. To test the issue I added a cmd logoff file to the GPO that just says

@echo off
Net Use
Pause

This comes back as “There are no entries in the list”

So i’m assuming a logoff script runs after terminating the explorer shell.
Is there any way around this or am I wrong in this thought process?

Kind Regards

We working with Folder Redirection

The App Data Roaming will be redireted but i missing some folder like sendTo folder.

WinServer 2016 1607

Anybody a idea?

We have a hospital emergency program where we need a local account created (non admin) to run emergency software when the domain is not available.

We have always used the Preferences - Add Local Account.

However with Windows 10 it is now greyed out?

I get there was a security issue but why not just FIX the issue and encrypt the passwords in Group Policy rather than just block the ability to create local accounts with Group Policy.

Yes we can do a script but that is LESS SECURE because then we cannot change the password regularly without redeploying another script.

Now we do use LAPS for Local Admin but that cannot be leveraged to create non-admin local accounts because it is NOT an option.

lforbes

Hello All,

I would like to have one specific domain user account to auto logon to one specific server (Windows Server 2012 R2) after whenever server startup/reboot. I searched from Google and I configured the server registry like below.

• AutoAdminLogon
• DefaultDomainName
• DefaultPassword
• DefaultUserName

Unfortunately, it's not working. Then I checked the Group Policy deployed to this server and I found the below. Do you have any suggestions?

Thanks,
高麻雀

Hi,

We are trying to block powershell for users but when we try to block powershell entire windows system is getting crashed and few other settings were also getting blocked ex: Windows key not working, can't able to open display settings on desktop.

https://www.sevecek.com/EnglishPages/Lists/Posts/Post.aspx?ID=75

Please let me know, How to resolve this issue what is the reason of Windows system improper behavior because of this Powershell block.

Sugandh