Brief overview of our scenario.
2008 R2 domain, windows 7 environment.
We currently have a number of machines we have locked down with GP to remove certain drives, create a standard desktop and apply restrictions to IE for use is specific locations i.e. open areas. The profile for any user logging onto these machines is set as a mandatory profile and has loopback processing enabled.
All the group policies work fine EXCEPT the policy for setting the proxy settings in IE.
We have tried through "Internet Explorer maintenance" and "preferences" but to no avail, the strange thing is if you run a GPResult /V the proxy settings are listed, if you leave the machine with the user logged in they will eventually be assigned and if you run a GPUPDATE after the user is logged in the they also work straight away.
Because the profile is a mandatory profile the settings are obviously not saved and the next user who logs in has same issue, we have even set the proxy settings in the registry of the mandatory profile but they still don't apply straight away.
We presumed it was some sort of "slow link" processing but this has been disabled in GP (checking for), and changed to synchronous processing and tried asynchronous with no joy.
There doesn't seem to be anything in the logs or eventvwr so have switched on logging in the preferences in GP (see below), this is the only error I can find.
Any help would be greatly received - Error highlighted (---------> ERROR ------------>)
"2013-02-15 10:47:35.645 [pid=0x380,tid=0xedc] lParam : 0x00000000
2013-02-15 10:47:35.645 [pid=0x380,tid=0xedc] Prev GPO : No
2013-02-15 10:47:35.645 [pid=0x380,tid=0xedc] Next GPO : No
2013-02-15 10:47:35.645 [pid=0x380,tid=0xedc] Extensions : [{00000000-0000-0000-0000-000000000000}{BEE07A6A-EC9F-4659-B8C9-0B1937907C83}][{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{D02B1F72-3407-48AE-BA88-E8213C6761F1}][{4CFB60C1-FAA6-47F1-89AA-0B18730C9FD3}{D02B1F72-3407-48AE-BA88-E8213C6761F1}][{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}][{B087BE9D-ED37-454F-AF9C-04291E351182}{BEE07A6A-EC9F-4659-B8C9-0B1937907C83}]
2013-02-15 10:47:35.645 [pid=0x380,tid=0xedc] lParam2 : 0x0191c03c
2013-02-15 10:47:35.645 [pid=0x380,tid=0xedc] Link : LDAP://OU=Win7_Comp,OU=!GP_Testing,OU=XXX,DC=XXX,DC=XX,DC=XX
2013-02-15 10:47:35.660 [pid=0x380,tid=0xedc] RunOnce value created [SUCCEEDED(S_FALSE)]
2013-02-15 10:47:35.676 [pid=0x380,tid=0xedc] Read GPE XML data file (571 bytes total).
2013-02-15 10:47:35.676 [pid=0x380,tid=0xedc] RunOnce value created [SUCCEEDED(S_FALSE)]
2013-02-15 10:47:35.676 [pid=0x380,tid=0xedc] RunOnce value created [SUCCEEDED(S_FALSE)]
2013-02-15 10:47:35.738 [pid=0x380,tid=0xedc] Completed get next GPO. [SUCCEEDED(S_FALSE)]
2013-02-15 10:47:35.738 [pid=0x380,tid=0xedc] Completed get GPO list. [SUCCEEDED(S_FALSE)]
2013-02-15 10:47:35.754 [pid=0x380,tid=0xedc] Leaving ProcessGroupPolicyExRegistry() returned 0x00000000
2013-02-15 10:56:37.651 [pid=0x380,tid=0xedc] Entering ProcessGroupPolicyExRegistry()
2013-02-15 10:56:37.651 [pid=0x380,tid=0xedc] SOFTWARE\Policies\Microsoft\Windows\Group Policy\{B087BE9D-ED37-454f-AF9C-04291E351182}
2013-02-15 10:56:37.651 [pid=0x380,tid=0xedc] BackgroundPriorityLevel ( 3 )
2013-02-15 10:56:37.651 [pid=0x380,tid=0xedc] DisableRSoP ( 0 )
2013-02-15 10:56:37.651 [pid=0x380,tid=0xedc] LogLevel ( 2 )
2013-02-15 10:56:37.651 [pid=0x380,tid=0xedc] Command subsystem initialized. [SUCCEEDED(S_FALSE)]
2013-02-15 10:56:37.713 [pid=0x380,tid=0xedc] Background priority set to 3 (Normal).
2013-02-15 10:56:37.713 [pid=0x380,tid=0xedc] ----- Parameters
2013-02-15 10:56:37.713 [pid=0x380,tid=0xedc] CSE GUID : {B087BE9D-ED37-454f-AF9C-04291E351182}
2013-02-15 10:56:37.713 [pid=0x380,tid=0xedc] Flags : ( X ) GPO_INFO_FLAG_MACHINE - Apply machine policy rather than user policy
2013-02-15 10:56:37.713 [pid=0x380,tid=0xedc] ( X ) GPO_INFO_FLAG_BACKGROUND - Background refresh of policy (ok to do slow stuff)
2013-02-15 10:56:37.713 [pid=0x380,tid=0xedc] ( ) GPO_INFO_FLAG_SLOWLINK - Policy is being applied across a slow link
2013-02-15 10:56:37.713 [pid=0x380,tid=0xedc] ( ) GPO_INFO_FLAG_VERBOSE - Verbose output to the eventlog
2013-02-15 10:56:37.713 [pid=0x380,tid=0xedc] ( X ) GPO_INFO_FLAG_NOCHANGES - No changes were detected to the Group Policy Objects
2013-02-15 10:56:37.713 [pid=0x380,tid=0xedc] ( ) GPO_INFO_FLAG_LINKTRANSITION - A change in link speed was detected between previous policy application and current policy application
2013-02-15 10:56:37.713 [pid=0x380,tid=0xedc] ( ) GPO_INFO_FLAG_LOGRSOP_TRANSITION - A change in RSoP logging was detected between the application of the previous policy and the application of the
current policy.
2013-02-15 10:56:37.713 [pid=0x380,tid=0xedc] ( ) GPO_INFO_FLAG_FORCED_REFRESH - Forced Refresh is being applied. redo policies.
2013-02-15 10:56:37.713 [pid=0x380,tid=0xedc] ( ) GPO_INFO_FLAG_SAFEMODE_BOOT - windows safe mode boot flag
2013-02-15 10:56:37.713 [pid=0x380,tid=0xedc] ( ) GPO_INFO_FLAG_ASYNC_FOREGROUND - Asynchronous foreground refresh of policy
2013-02-15 10:56:37.713 [pid=0x380,tid=0xedc] Token (computer or user SID): S-1-5-18
2013-02-15 10:56:37.713 [pid=0x380,tid=0xedc] Abort Flag : Yes (0x001b5ff8)
2013-02-15 10:56:37.713 [pid=0x380,tid=0xedc] HKey Root : Yes (0x80000002)
2013-02-15 10:56:37.713 [pid=0x380,tid=0xedc] Deleted GPO List : No
2013-02-15 10:56:37.713 [pid=0x380,tid=0xedc] Changed GPO List : Yes
2013-02-15 10:56:37.713 [pid=0x380,tid=0xedc] Asynchronous Processing : Yes
2013-02-15 10:56:37.713 [pid=0x380,tid=0xedc] Status Callback : No (0x00000000)
2013-02-15 10:56:37.713 [pid=0x380,tid=0xedc] WMI namespace : No (0x00000000)
2013-02-15 10:56:37.713 [pid=0x380,tid=0xedc] RSoP Status : Yes (0x05f5fa3c)
2013-02-15 10:56:37.713 [pid=0x380,tid=0xedc] Planning Mode Site : (none)
2013-02-15 10:56:37.729 [pid=0x380,tid=0xedc] Computer Target : No (0x00000000)
2013-02-15 10:56:37.729 [pid=0x380,tid=0xedc] User Target : No (0x00000000)
2013-02-15 10:56:37.729 [pid=0x380,tid=0xedc] Calculated list relevance. [SUCCEEDED(S_FALSE)]
2013-02-15 10:56:37.729 [pid=0x380,tid=0xedc] ----- Changed - 0
2013-02-15 10:56:37.729 [pid=0x380,tid=0xedc] Options : ( ) GPO_FLAG_DISABLE - This GPO is disabled.
2013-02-15 10:56:37.729 [pid=0x380,tid=0xedc] ( ) GPO_FLAG_FORCE - Do not override the settings in this GPO with settings in a subsequent GPO.
2013-02-15 10:56:37.729 [pid=0x380,tid=0xedc] Options (raw) : 0x00000000
2013-02-15 10:56:37.729 [pid=0x380,tid=0xedc] Version : 917518 (0x000e000e)
2013-02-15 10:56:37.729 [pid=0x380,tid=0xedc] GPC : LDAP://CN=Machine,cn={742E1749-3089-4655-99BB-6814E93664E9},cn=policies,cn=system,DC=XXX,DC=XX,DC=XX
2013-02-15 10:56:37.729 [pid=0x380,tid=0xedc] GPT :
\\XXX.XX\sysvol\XXX.XX\Policies\{742E1749-3089-4655-99BB-6814E93664E9}\Machine
2013-02-15 10:56:37.729 [pid=0x380,tid=0xedc] GPO Display Name : !GP_Test_Thin - Nurse Station
2013-02-15 10:56:37.729 [pid=0x380,tid=0xedc] GPO Name : {742E1749-3089-4655-99BB-6814E93664E9}
2013-02-15 10:56:37.729 [pid=0x380,tid=0xedc] GPO Link : ( ) GPLinkUnknown - No link information is available.
2013-02-15 10:56:37.729 [pid=0x380,tid=0xedc] ( ) GPLinkMachine - The GPO is linked to a computer (local or remote).
2013-02-15 10:56:37.729 [pid=0x380,tid=0xedc] ( ) GPLinkSite - The GPO is linked to a site.
2013-02-15 10:56:37.729 [pid=0x380,tid=0xedc] ( ) GPLinkDomain - The GPO is linked to a domain.
2013-02-15 10:56:37.729 [pid=0x380,tid=0xedc] ( X ) GPLinkOrganizationalUnit - The GPO is linked to an organizational unit.
---------> ERROR ------------>2013-02-15 10:56:37.729 [pid=0x380,tid=0xedc] ( ) GP Link Error
2013-02-15 10:56:37.729 [pid=0x380,tid=0xedc] lParam : 0x00000000
2013-02-15 10:56:37.729 [pid=0x380,tid=0xedc] Prev GPO : No
2013-02-15 10:56:37.729 [pid=0x380,tid=0xedc] Next GPO : No
2013-02-15 10:56:37.729 [pid=0x380,tid=0xedc] Extensions : [{00000000-0000-0000-0000-000000000000}{BEE07A6A-EC9F-4659-B8C9-0B1937907C83}][{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{D02B1F72-3407-48AE-BA88-E8213C6761F1}][{4CFB60C1-FAA6-47F1-89AA-0B18730C9FD3}{D02B1F72-3407-48AE-BA88-E8213C6761F1}][{827D319E-6EAC-11D2-A4EA-00C04F79F83A}{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}][{B087BE9D-ED37-454F-AF9C-04291E351182}{BEE07A6A-EC9F-4659-B8C9-0B1937907C83}]
2013-02-15 10:56:37.729 [pid=0x380,tid=0xedc] lParam2 : 0x0191c03c
2013-02-15 10:56:37.729 [pid=0x380,tid=0xedc] Link : LDAP://OU=Win7_Comp,OU=!GP_Testing,OU=XXX,DC=XXX,DC=XX,DC=XX
2013-02-15 10:56:37.760 [pid=0x380,tid=0xedc] RunOnce value created [SUCCEEDED(S_FALSE)]
2013-02-15 10:56:37.760 [pid=0x380,tid=0xedc] Read GPE XML data file (571 bytes total).
2013-02-15 10:56:37.760 [pid=0x380,tid=0xedc] RunOnce value created [SUCCEEDED(S_FALSE)]
2013-02-15 10:56:37.760 [pid=0x380,tid=0xedc] RunOnce value created [SUCCEEDED(S_FALSE)]
2013-02-15 10:56:37.791 [pid=0x380,tid=0xedc] Completed get next GPO. [SUCCEEDED(S_FALSE)]
2013-02-15 10:56:37.791 [pid=0x380,tid=0xedc] Completed get GPO list. [SUCCEEDED(S_FALSE)]
2013-02-15 10:56:37.869 [pid=0x380,tid=0xedc] Leaving ProcessGroupPolicyExRegistry() returned 0x00000000
"
BTW Policy is set to apply even if no changes are detected.
Cheers
Jerry