Issue:
When you run "gpresult.exe /z" on a Windows XP machine, the RSOP may not complete processing.
Symptoms:
The GPResult.exe output is incomplete.
Cause:
A GPO contains the percent ("%") sign character. When the GPResult.exe encounters a % sign in the Group Policy Object, processing is terminated. The version of GPResult.exe with this issue is 5.1.2600.2180.
Typically, the % character may have been used in a Group Policy Computer startup/shutdown script or User Logon/Logoff script, to reference a local environment variable such as %SystemDrive%.
Workaround:
Use the Windows 2003 version of GPResult.exe, this tool is able to parse the % character successfully and completes the RSOP report. Version 5.2.3790.1830 or later of the GPResult.exe tool successfully parses the % character.
Alternatively, the GPMC console is able to generate the RSOP report successfully.
Blog Index
Wednesday, June 4, 2008
GPResult.exe may not complete Group policy report
Wednesday, April 16, 2008
Windows Path issues may prevent Group Policy from applying correctly
Issue:
Even though the event log displays EventID 1704 "Security policy in the Group policy objects are applied successfully. ", group policy still has not applied successfully;
Resolution:
Check the Windows Path; it should contain at a minimum the following locations and be less than 1024 characters in length.
C:\Windows;C:\Windows\System32;C:\Windows\System32\WBEM
Hiding or Displaying Default Desktop icons
The default desktop icons can be hidden or displayed using the registry or Group policy. However, before they can be managed using Group Policy the icons must have the following registry keys present.
{20D04FE0-3AEA-1069-A2D8-08002B30309D} - My Computer
{450D8FBA-AD25-11D0-98A8-0800361B1103} - My Documents
{208D2C60-3AEA-1069-A2D7-08002B30309D} - My Network Places
{871C5380-42A0-1069-A2EA-08002B30309D} - Internet Explorer
{645FF040-5081-101B-9F08-00AA002F954E} - Recycle Bin
A DWORD value of 0 displays the icon, 1 hides the icon.
Setting this value in HKCU takes precedence over HKLM.
To hide the icons from the Start Menu add the Key and value to - \Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\ClassicStartMenu To hide the icons from the Desktop add the Key and value to - \Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel
ImportGPO.wsf may not import GPO's using a Migration Table on Windows Server 2003
The ImportGPO.wsf script doesn't correctly test for null values at Line 162.
Cause: Incorrect testing of null value on Line 162
Resolution: See KB911800
http://support.microsoft.com/kb/911800