Posts tagged ‘GPO’

Updated: Group Policy Hotfix’s in Windows 7 and Windows Server 2008 Service Pack 1

Microsoft today  announced (after what seems to be a very long time) they have RTM’d Windows 7 / Windows Server 2008 R2 Service Pack 1 and it will be released to the public on February 22nd.

Update: Service Pack 1 is now available for download for TechNet and MSDN subscribers.

image

Previously I had listed the hotfixes in the beta version of the service pack, so I have again combed through the hotfix list for you convenience and I have updated the list to include the release candidate hotfixes. While this is not the final list of hotfixes Ned Pyle [MSFT] says “it’s very doubtful that the lists below will be altered much” so you can pretty much take the following list as final. In any case I will review the list when the final list of fixes is out but for now here is the list of issues.

Updated: The final list of hotfixes is now out ( Here ) and after a quick look they appear to be the same as expected.

If you have anything to do with supporting group policy in your organisation then I recommend that you at least take a look at the articles to see if you have encountered any of the problem described.

KB Article / Link KB Description

http://support.microsoft.com/kb/969867

FIX: You cannot import or paste some group policies across domains by using the "Group Policy Management" MMC snap-in

http://support.microsoft.com/kb/970840

Some settings in Group Policy Preferences for Internet Explorer 7 do not deploy correctly to computers that are running Windows Server 2008 or Windows Vista

http://support.microsoft.com/kb/972069

A terminal server that is running Windows Server 2008 cannot obtain terminal licenses from a Terminal Server license server that is running Windows Server 2008 after you enable the "License Server Security Group" Group Policy setting

http://support.microsoft.com/kb/976398

LDAP filters in the Group Policy preference settings do not take effect on a computer that is running Windows Server 2008 R2 or Windows 7

http://support.microsoft.com/kb/976399

FIX: You cannot apply Group Policy settings on a computer that is running Windows 7 or Windows Server 2008 R2 when security group filters are used in Group Policy preference settings

http://support.microsoft.com/kb/977353

A Group Policy Immediate Task preference item does not run on a client computer that is running Windows 7 or Windows Server 2008 R2

http://support.microsoft.com/kb/977695

The SceCli 1202 events are logged when some Group Policy settings are refreshed in Windows Server 2008 R2 and in Windows 7

http://support.microsoft.com/kb/977944

The "Desktop Wallpaper" Group Policy setting is not applied in Windows 7 or in Windows Server 2008 R2

http://support.microsoft.com/kb/978489

Logoff process stops responding after you create a logoff Group Policy script on a client computer that is running Windows Vista or Windows Server 2008

http://support.microsoft.com/kb/978837

The Group Policy Management Editor window crashes when you apply some changes for NRPT policy settings

http://support.microsoft.com/kb/979039

Error message when you view or modify the migrated Group Policy objects in Windows Server 2008 R2: "Attribute cannot be empty"

http://support.microsoft.com/kb/979731

Some Group Policy preferences are not applied successfully on computers that are running Windows Vista, Windows Server 2008, Windows 7 or Windows Server 2008 R2

http://support.microsoft.com/kb/980259

The SNMP service does not respond to any SNMP requests after a Group Policy refresh in Windows Vista or in Windows Server 2008

http://support.microsoft.com/kb/980628

The "Load a specific theme" Group Policy setting is not applied correctly on a computer that is running Windows 7 or Windows Server 2008 R2

http://support.microsoft.com/kb/981054

The Group Policy preference settings for the "Terminal Session" item-level targeting item are not applied in Windows 7 or in Windows Server 2008 R2

http://support.microsoft.com/kb/981177

You can still unpin a program from the taskbar unexpectedly when you enable the "Do not allow pinning programs to the Taskbar" Group Policy on a computer that is running Windows 7 or Windows Server 2008 R2

http://support.microsoft.com/kb/981265

You cannot create a software installation Group Policy setting on a read-only domain controller in Windows Server 2008 R2

http://support.microsoft.com/kb/981750

Error message occurs when you use GPMC to view a software restriction Group Policy setting in Windows 7 and in Windows Server 2008 R2: "An error has occurred while collecting data for Software Restriction Policies"

http://support.microsoft.com/kb/982606

The value of the "State" registry item is changed after a Group Policy preferences setting is applied in Windows Server 2008, in Windows Vista or in Windows Server 2008 R2

http://support.microsoft.com/kb/982709

Only the first search term is searched for when you configure the "Pin Internet search sites to the ‘Search again’ links and the Start menu" Group Policy setting in Windows 7 or Windows Server 2008 R2

http://support.microsoft.com/kb/983618

Some Group Policy settings are not displayed in the Group Policy Results report in Windows Server 2008, in Windows Vista, in Windows Server 2008 R2, or in Windows 7

http://support.microsoft.com/kb/2096902

Virtual machines in a VDI environment are not rolled back as expected if the disconnected Remote Desktop connections on the virtual machines are stopped by Group Policy

http://support.microsoft.com/kb/2284538

"Apply once and do not reapply" Group Policy setting is never applied after the first GPO deployment fails on a client computer that is running Windows 7 or Windows Server 2008 R2

http://support.microsoft.com/kb/2254754

You experience a GPO report-generation issue in the GPMC window when you try to generate the report in a localized version of Windows 7 or of Windows Server 2008 R2

http://support.microsoft.com/kb/2258620

You cannot find the "Find Now," "Stop," and "Clear All" buttons in the GPMC snap-in on a computer that is running Windows 7 or Windows Server 2008 R2

http://support.microsoft.com/kb/979383

After you apply a WMI filter, the GPO does not take effect on a client computer that is running Windows 7 or Windows Server 2008 R2

http://support.microsoft.com/kb/2028960

The Offline Files Disk Usage Limits settings do not reflect the settings that are defined in the GPO in Windows 7

 

You can also see the complete list of Active Directory Hotfix’s at Ask the Directory Services Team blog posting SP1 and Directory Services: What’s New .

Best Practice: Group Policy Design Guidelines – Part 2

In my previous article In this article Best Practice:Active Directory Structure Guidelines – Part 1 I spoke about some of the guidelines I personally use when developing an Active Directory OU structure. In this next part I will discuss some guidelines I use when designing a Group Policy Object infrastructure.

Ideally you should make the the Active Directory OU and GPO design decision together to best ensure that you have the most efficient design possible. However if you have an existing OU structure designed a lot of these guidelines can still be applied to most existing environments.

As in Part 1 these are simply guidelines that I use and should not be taken as hard an fast rules. I quite often finding myself having to break these rules due to real world conflicts or just because one rule might conflict with the other rule. If you do find your self in a situation where you are not sure which path to take try to chose the option that will result in the least administrative effort in the long term.

Continue reading ‘Best Practice: Group Policy Design Guidelines – Part 2’ »

The complete list of Group Policy Hotfix’s in Windows 7/2008 R2 Service Pack 1

windows-7-logoThe beta of Windows 7/Server 2008 R2 Service Pack 1 beta has now been released to the public for testing. For your benefit I have parsed through the complete list of hotfixes and I have listed out all the group policy specific setting. If you just want the service pack right now you can download it here http://technet.microsoft.com/en-us/evalcenter/ff183870.aspx

I have highlighted the two hotfixes that stand out it my mind as the issues that have been most annoying bugs with group policy with Windows 7 RTM.

I have also posted an installation screenshot walk though on my other blog here http://www.smartergeek.info/2010/07/install-screenshots-windows-7-service-pack-1-beta/

Hotfix Description Link to support article
After Internet Explorer Maintenance Group Policy settings are configured in a domain, a 20-second delay occurs when you log on to the domain from a client computer that has Internet Explorer 7 or Internet Explorer 8 installed http://support.microsoft.com/kb/941158
FIX: You cannot import or paste some group policies across domains by using the “Group Policy Management” MMC snap-in http://support.microsoft.com/kb/969867
SceCli 1202 events are logged every time Computer Group Policy settings are refreshed on a computer that is running Windows Server 2008 R2 or Windows 7 http://support.microsoft.com/kb/974639
Roaming user profile cache is not deleted from a Windows Server 2003-based computer if Group Policy preferences and Internet Explorer Maintenance Group Policy settings are used http://support.microsoft.com/kb/975619
LDAP filters in the Group Policy preference settings do not take effect on a computer that is running Windows Server 2008 R2 or Windows 7 http://support.microsoft.com/kb/976398
FIX: You cannot apply Group Policy settings on a computer that is running Windows 7 or Windows Server 2008 R2 when security group filters are used in Group Policy preference settings http://support.microsoft.com/kb/976399
A Group Policy Immediate Task preference item does not run on a client computer that is running Windows 7 or Windows Server 2008 R2 http://support.microsoft.com/kb/977353
The SceCli 1202 events are logged when some Group Policy settings are refreshed in Windows Server 2008 R2 and in Windows 7 http://support.microsoft.com/kb/977695
The “Desktop Wallpaper” Group Policy setting is not applied in Windows 7 or in Windows Server 2008 R2 http://support.microsoft.com/kb/977944
Logoff process stops responding after you create a logoff Group Policy script on a client computer that is running Windows Vista or Windows Server 2008 http://support.microsoft.com/kb/978489
The Group Policy Management Editor window crashes when you apply some changes for NRPT policy settings http://support.microsoft.com/kb/978837
Error message when you view or modify the migrated Group Policy objects in Windows Server 2008 R2: “Attribute cannot be empty” http://support.microsoft.com/kb/979039
After you apply a WMI filter, the GPO does not take effect on a client computer that is running Windows 7 or Windows Server 2008 R2 http://support.microsoft.com/kb/979383
Some Group Policy preferences are not applied successfully on computers that are running Windows 7 or Windows Server 2008 R2 http://support.microsoft.com/kb/979731
The “Allow the printing of background colors and images” Group Policy setting does not take effect on a computer that has Internet Explorer 8 installed http://support.microsoft.com/kb/980077
The “Load a specific theme” Group Policy setting is not applied correctly on a computer that is running Windows 7 or Windows Server 2008 R2 http://support.microsoft.com/kb/980628
The “Configure new tab page default behavior” Group Policy setting does not work on a computer that is running Windows 7 or Windows Server 2008 R2 and that has Internet Explorer 8 installed http://support.microsoft.com/kb/980959
The Group Policy preference settings for the “Terminal Session” item-level targeting item are not applied in Windows 7 or in Windows Server 2008 R2 http://support.microsoft.com/kb/981054
You can still unpin a program from the taskbar unexpectedly when you enable the “Do not allow pinning programs to the Taskbar” Group Policy on a computer that is running Windows 7 or Windows Server 2008 R2 http://support.microsoft.com/kb/981177
You cannot create a software installation Group Policy setting on a read-only domain controller in Windows Server 2008 R2 http://support.microsoft.com/kb/981265
Error message occurs when you use GPMC to view a software restriction Group Policy setting in Windows 7 and in Windows Server 2008 R2: “An error has occurred while collecting data for Software Restriction Policies” http://support.microsoft.com/kb/981750
You cannot open an HTML GPO report that is created by the German version of Windows Server 2008 R2 or of Windows 7 http://support.microsoft.com/kb/981877