Quantcast
Channel: Group Policy forum
Viewing all articles
Browse latest Browse all 19997

Chinese keyboard GP does NOT work for non-admin domain users

$
0
0

Hello. I've created a group policy that adds two Chinese keyboard layouts and the policy is linked AND enforced for a specific OU. Next, I run 'gpupdate /force /boot' on one of the PCs and wait for it reboot. At the login window, I properly see the language bar icon in the upper-left corner of the screen, allowing the user to choose between ENG and CHI (and if Chinese, pick the layout). So far, so good.

If I logon as a domain or local admin, the language bar is visible. I can launch Word, select a Chinese keyboard layout, type and it's appropriately translated into the Chinese characters. Again so far, so good.

BUT if a standard domain user logs on, the language bar is never visible, thus the user can't choose between ENG and CHI keyboards. Any suggestions what I'm missing?

Here's a little more info about what I have done so far. In this group policy, I have it running two scripts, one a startup script, the other a logon script. The startup script is inComputer Configuration > Policies > Windows Settings > Scripts > Startup. It's a VBS script as shown below:

' *
' * VBS script to load CTFMON in prep for added keyboard/input languages.
' *
Dim WshShell
Set WshShell = WScript.CreateObject("WScript.Shell")
'
' CTFMON is needed running in order for additional keyboard/input languages to work.
WshShell.RegWrite "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\ctfmon","c:\windows\system32\ctfmon.exe","REG_SZ"
'
' * END OF SCRIPT

The logon script is located at User Configuration > Policies > Windows Settings > Scripts > Logon. It's a VBS script as shown below:

' *
' * VBS script to add the Chinese Simple/Microsoft Pinyin keyboard.
' *
Dim WshShell
Set WshShell = WScript.CreateObject("WScript.Shell")
'
' POTENTIALLY LOAD CTFMON under user profile.
' WshShell.RegWrite "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\ctfmon","c:\windows\system32\ctfmon.exe","REG_SZ"
'
' ADD KEYBOARD LAYOUTS
WshShell.RegWrite "HKEY_CURRENT_USER\Software\Microsoft\CTF\LangBar\ShowStatus","0x00000004","REG_DWORD"
WshShell.RegWrite "HKEY_CURRENT_USER\Software\Microsoft\CTF\LangBar\Transparency","0x00000000","REG_DWORD"
WshShell.RegWrite "HKEY_CURRENT_USER\Software\Microsoft\CTF\LangBar\Label","0x00000001","REG_DWORD"
WshShell.RegWrite "HKEY_CURRENT_USER\Software\Microsoft\CTF\LangBar\ExtraIconsOnMinimized","0x000000FF","REG_DWORD"
'
WshShell.RegWrite "HKEY_CURRENT_USER\Keyboard Layout\Preload\",,"REG_SZ"
WshShell.RegWrite "HKEY_CURRENT_USER\Keyboard Layout\Preload\1","00000409","REG_SZ"
WshShell.RegWrite "HKEY_CURRENT_USER\Keyboard Layout\Preload\2","00000404","REG_SZ"
WshShell.RegWrite "HKEY_CURRENT_USER\Keyboard Layout\Preload\3","00000804","REG_SZ"
WshShell.RegWrite "HKEY_CURRENT_USER\Keyboard Layout\Preload\4","d0010409","REG_SZ"
'
WshShell.RegWrite "HKEY_CURRENT_USER\Keyboard Layout\Substitutes\",,"REG_SZ"
WshShell.RegWrite "HKEY_CURRENT_USER\Keyboard Layout\Substitutes\d0010409","00010409","REG_SZ"
'
WshShell.RegWrite "HKEY_CURRENT_USER\Keyboard Layout\Toggle\",,"REG_SZ"
'
' * END OF SCRIPT

This group policy is linked and enabled for three different OUs. One of the OUs is for testing (as in testing out "things" before deployment) and once the group policy is linked and enabled, I run 'gpupdate /force /boot' on a test PC. It refreshes computer and user config, reboots, but the Chinese keyboard is available ONLY for local or domain administrators. If I log on as any user, the Chinese keyboard isn't available.

In the Group Policy Management app, looking at the policy, under the Scope tab, underSecurity Filtering, Authenticated Users is listed. Under theDelegation tab, the five groups listed are Authenticated Users (Read from Security Filtering),Domain Admins (Edit settings, delete, modify security), Enterprise Admins (Edit settings, delete, modify security),Enterprise Domain Controllers (Read), and System (Edit settings, delete, modify security). The contents of both theScope and Delegation tabs match what I see under other, different policies that do work just fine.

In the end, this Group Policy works fine for local and domain admins, but NOT for any non-admin domain user. What am I doing wrong? or missing?

-- David


Viewing all articles
Browse latest Browse all 19997

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>