[ActiveDir] Stupid Group Policy CSE behavior

[Kamlesh Parmar]

I had high hopes for group policy, but now it has started waning...

 

Simply stated, what happens is ... you have different policies applying to machine.

And say all policies contain different registry or security related settings.

Now, when at workstation registry or security CSE tries to process these settings...

It will just stop processing at first error it encountered and never process settings from remaining policies.

 

so if registry CSE found that it has 10 values in registry to set and if it encountered error at 5th, it will never go ahead and process 6 to 10.

 

here is my case:

 

I had set deny permission on one registry key in one policy and I was trying to change that setting from another policy.

One would guess that, 2nd policy would simply fail and CSE would continue processing other polices which are no way related to this setting. But it doesn't.

 

I have seen this for Registry and Security CSE.

 

Thanks for listening :-)
--

Kamlesh
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
"Be the change you want to see in the World"
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~