RE: [ActiveDir] Group Policy and IE Zone Security

[Darren Mar-Elia]

Title: Message

Try turning that off (make it synchronous). -----Original Message----- From: Charles Campbell [mailto:[EMAIL PROTECTED] Sent: Wednesday, August 13, 2003 12:46 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Group Policy and IE Zone Security These are all 2000 machines… Under the GPO, I have Apply Group Policy Asynchronously for Users enabled.     Charles   -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darren Mar-Elia Sent: Wednesday, August 13, 2003 13:47 To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Group Policy and IE Zone Security   Well it doesn't give a lot of info but the RegOpenKey failing on GetHKeyCU (Get a handle to the user's profile in HKEY_CURRENT_USER) looks like a problem. The policy extension can't access the user's profile. The strange thing is that it returns a 0x0, which usually means everything worked just fine. Here's a thought. Are these XP machines? If so, can you try something? On one of these machines thats having a problem, try enabling the following administrative template policy:   Computer Configuration|Administrative Templates|System|Logon|Always wait for the network at computer startup and logon   This ensures that policy processes synchronously rather than asynchronously. It would be interesting to see if this makes a difference.         -----Original Message----- From: Charles Campbell [mailto:[EMAIL PROTECTED] Sent: Wednesday, August 13, 2003 10:09 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Group Policy and IE Zone Security Okay… This is what I have found in the userenv.log so far:   ProcessGPOs: Processing extension Internet Explorer Branding ProcessGPOs: Extension Internet Explorer Branding skipped with flags 0x7 (Which should be fine since I don’t use the GP to brand IE) ProcessGPOs: Processing extension Internet Explorer Branding CompareGPOLists:  Different version numbers found ProcessGPOList: Entering for extension Internet Explorer Branding UserPolicyCallback: Setting status UI to Applying Internet Explorer Branding policy... GetHkeyCU: RegOpenKey failed with error 2 LibMain: Process Name:  C:\WINNT\system32\rundll32.exe UserPolicyCallback: Setting status UI to Applying your personal settings... ProcessGPOList: Extension Internet Explorer Branding returned 0x0. ProcessGPOs: ----------------------- 734 ProcessGPOs: -----------------------   Those are the only lines that mention Internet Explorer… Charles     -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darren Mar-Elia Sent: Wednesday, August 13, 2003 12:15 To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Group Policy and IE Zone Security   What you're looking for is any log items from the IE Maintenance extension as it tries to process the policy during user logon. Look for messages as to whether it skipped processing for some reason or couldn't process the policy.