Group Policy Center

Microsoft have now released hotfix (KB980356) to resolve an issues with configuring a scheduled task described as “Incorrect start dates are displayed for the scheduled tasks that are deployed by Group Policy preferences in Windows Server 2008 or in Windows Vista”. This issues results a problem with the schedule task being configured to run on the wrong date (e.g. a day early) due to the way “the Group Policy preferences engine handles the date incorrectly”.

For more information check on the issue and for a link to the download go to KB980356

Source Aug. 27 – Sep. 2 Hot-Fix KB articles Weekly Release – Windows 6/7 – The Hot Blog – Site Home – TechNet Blogs

In the July 29 to August 12th Hot-fix release for Windows 6/7 there have been a number of Group Policy related hotfixes released. As far as I can tell none of these hotfixes are listed as being in Windows 7 Service Pack 1 that is currently in beta (see The complete list of Group Policy Hotfix’s in Windows 7/2008 R2 Service Pack 1) so if you are experiencing any of the above hotfixes it will be some time before you will be able to deploy them as part of a service pack.

• KB2250489 You cannot turn off the screen saver in the Windows Mobility Center when the "Prevent changing wallpaper" Group Policy setting is enabled on a computer that is running Windows Vista SP2
• KB2261826 You cannot find a network drive in the "Browse For Folder" dialog box in the GPMC MMC snap-in on a computer that is running Windows Server 2008 or Windows Vista
• KB2096902 Virtual machines in a VDI environment are not rolled back as expected if the disconnected Remote Desktop connections on the virtual machines are stopped by Group Policy
• KB2254754 You experience a GPO report-generation issue in the GPMC window when you try to generate the report in a localized version of Windows 7 or of Windows Server 2008 R2
• KB2258620 You cannot find the "Find Now," "Stop," and "Clear All" buttons in the GPMC snap-in on a computer that is running Windows 7 or Windows Server 2008 R2
• KB2275315 You cannot read the GPO in the SYSVOL directory in Windows 7 or in Windows Server 2008 R2 if you enable the "Deny write" permission of the GPO
• KB2284538 Apply once and do not reapply Group Policy setting is never applied after the first GPO deployment fails on a client computer that is running Windows 7 or Windows Server 2008 R2

Source: Jul. 29 – Aug. 12 Hot-Fix KB articles Weekly Release – Windows 6/7 – The Hot Blog – Site Home – TechNet Blogs

A new hotfix (KB2171141) is out from Microsoft that resolves an issues with the IE8 search provider when applying the “Prevent Internet Explore Search box from displaying” is enabled (see image below).

This policy will remove remove the search box from Internet Explorer (see image below).

But then when a user logs on to the computer for the first time they are prompted to setup their default IE setting and then they will get this error message (see image below).

It also looks like this hotfix is also probably not going to be in Windows 7 Service Pack 1 as it is not listed in the complete list of hotfixes.

To download the hotfix and to get more info visit Internet Explorer 8 restores the search provider settings when the “Prevent Internet Explorer Search box from displaying” Group Policy setting is enabled

The beta of Windows 7/Server 2008 R2 Service Pack 1 beta has now been released to the public for testing. For your benefit I have parsed through the complete list of hotfixes and I have listed out all the group policy specific setting. If you just want the service pack right now you can download it here http://technet.microsoft.com/en-us/evalcenter/ff183870.aspx

I have highlighted the two hotfixes that stand out it my mind as the issues that have been most annoying bugs with group policy with Windows 7 RTM.

I have also posted an installation screenshot walk though on my other blog here http://www.smartergeek.info/2010/07/install-screenshots-windows-7-service-pack-1-beta/

Just a single new hot fix has come out this week that affects group policy…

981704 The file name of an ADM file is displayed incorrectly in the GPMC report in Windows Vista or in Windows Server 2008

This hotfix resolves a problem with a GPO report in the Group Policy Management Console showing as “Extra Registry Settings” if you have imported a ADM file and then moved it to another location. For more info see http://support.microsoft.com/kb/981704

Just found out about a few more hot fixes that Microsoft recently released for Group Policy.

KB979621 A removable storage device is disabled when you enable a Group Policy to deny write access or to deny read access to the device on a computer that is running Windows Vista or Windows Server 2008

Fixes an issues with removable storage devices being totally disabled when you configure the “Deny write” option for removable devices. This will happen when configure the option and shutdown the computer. You will also get the following error message “The device is disabled. (Code 22)” when you go to the properties of the device.  This applies to the following types of devices:

• CD and DVD
• Floppy Drives
• Removable Disks
• Tape Drives
• WPD Devices

For more info see http://support.microsoft.com/?kbid=979621

KB980628 The “Load a specific theme” Group Policy setting is not applied correctly on a computer that is running Windows 7 or Windows Server 2008 R2

Fixes a problem with specifying a them to load when you also enable the Prevent changing desktop background option. For more info see http://support.microsoft.com/?kbid=980628

KB979731 Some Group Policy preferences are not applied successfully on computers that are running Windows 7 or Windows Server 2008 R2

For more info see http://support.microsoft.com/?kbid=980628

KB981877 You cannot open an HTML GPO report that is created by the German version of Windows Server 2008 R2 or of Windows 7

This hot fixe resolves a problem creating a HTML report with a German version of GPMC. For more info see http://support.microsoft.com/kb/981877 

Thanks to Aaron Parker for the heads up on the KB981877

Last week Microsoft released a few new Group Policy hot fixes for Windows 7 and Windows Server 2008 R2, below is a link to each KB article and my own short description hotfix.

KB981054 The Group Policy preference settings for the “Terminal Session” item-level targeting item are not applied in Windows 7 or in Windows Server 2008 R2.”

This is a fix for a really cool feature of Group Policy Preferences which allow IT administrator to target settings based on the IP address of the RDP client. For more info see http://support.microsoft.com/kb/981054 

KB981177 You can still unpin a program from the taskbar unexpectedly when you enable the “Do not allow pinning programs to the Taskbar” Group Policy on a computer that is running Windows 7 or Windows Server 2008 R2.

This hot fix is just a minor UI bug. For more info see http://support.microsoft.com/kb/981177 

KB981265 You cannot create a software installation Group Policy setting on a read-only domain controller in Windows Server 2008 R2.

This fixes a problem with GPMC trying to make a policy change against a read-only domain controller when someone tries to create and “assigned” software deployment. For more info see http://support.microsoft.com/kb/981265 

KB981750 Error message occurs when you use GPMC to view a software restriction Group Policy setting in Windows 7 and in Windows Server 2008 R2: “An error has occurred while collecting data for Software Restriction Policies”.

This fixes the following error message when you error message when you access Computer Configuration > Windows Setting > Security Settings > Software Restriction Policies due to a bug in GPMC calling an incorrect function when reading multiple string type registry key. For more info see http://support.microsoft.com/kb/981750 

Hope you find these users but as always make sure you thoroughly test any hotfix before you deploy them into production.