Re: [NTSysADM] RE: mapped drives GPO

[Susan Bradley]

These guys local admin on their machines?

As mapped drives do not persist/show up unless you do a reg entry or map 
as that admin if the person is a local admin.

Susan Bradley
 

On 4/2/2015 10:10 AM, Charles F Sullivan wrote:

I can only ask……”Why?!!”

*From:* listsad...@lists.myitforum.com 
<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com 
<mailto:listsad...@lists.myitforum.com>] *On Behalf Of *David McSpadden
*Sent:* Thursday, April 2, 2015 12:55 PM
*To:* ntsysadm@lists.myitforum.com <mailto:ntsysadm@lists.myitforum.com>
*Subject:* [NTSysADM] RE: mapped drives GPO

Thanks for playing everyone.

There is no winner today but you get this sparkly brand new pc logon 
script for playing

In startup on the machines that are not playing nicely here is what I 
have found:

@echo on

net use * /d /y

stuff…

stuff…

Now to all of us playing at home what will this do to the user of this 
machine?

If you guessed it will make the Network Admin loose if freaking mind 
chasing Group Policies that are actually working as they should you 
would have won.

Again thanks for playing because this has to be a game.

No one should be working this hard to chase the

*From:*listsad...@lists.myitforum.com 
<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] *On Behalf Of *David McSpadden
*Sent:* Thursday, April 02, 2015 10:52 AM
*To:* ntsysadm@lists.myitforum.com <mailto:ntsysadm@lists.myitforum.com>
*Subject:* [NTSysADM] RE: mapped drives GPO

This is the log I am getting.

Everything appears to run, no errors.

But the user does not have the T:, G:, or Q: that this logs says has 
completed successfully:

-registry had no extra entries.

-using update instead of replace now.

-user can ‘map the drive’ exactly like it shows in the policy manually 
with no issue.

2015-04-01 10:02:46.193 [pid=0x5a4,tid=0xf24] Entering 
ProcessGroupPolicyExDrives()

2015-04-01 10:02:46.193 [pid=0x5a4,tid=0xf24] 
SOFTWARE\Policies\Microsoft\Windows\Group 
Policy\{5794DAFD-BE60-433f-88A2-1A31939AC01F}

2015-04-01 10:02:46.193 [pid=0x5a4,tid=0xf24] BackgroundPriorityLevel 
( 0 )

2015-04-01 10:02:46.209 [pid=0x5a4,tid=0xf24] DisableRSoP ( 0 )

2015-04-01 10:02:46.209 [pid=0x5a4,tid=0xf24] LogLevel ( 3 )

2015-04-01 10:02:46.209 [pid=0x5a4,tid=0xf24] Command subsystem 
initialized. [SUCCEEDED(S_FALSE)]

2015-04-01 10:02:46.209 [pid=0x5a4,tid=0xf24] Set user security context.

2015-04-01 10:02:46.209 [pid=0x5a4,tid=0xf24] Set system security context.

2015-04-01 10:02:46.209 [pid=0x5a4,tid=0xf24] User impersonation 
initialized.

2015-04-01 10:02:46.209 [pid=0x5a4,tid=0xf24] Client context subsystem 
initialized.

2015-04-01 10:02:46.209 [pid=0x5a4,tid=0xf24] Configuration subsystem 
initialized.

2015-04-01 10:02:46.209 [pid=0x5a4,tid=0xf24] Licensing subsystem 
initialized.

2015-04-01 10:02:46.209 [pid=0x5a4,tid=0xf24] Set user security context.

2015-04-01 10:02:46.256 [pid=0x5a4,tid=0xf24] User information 
initialized.

2015-04-01 10:02:46.302 [pid=0x5a4,tid=0xf24] Variable %Admin% = 
"10.0.50.205"

2015-04-01 10:02:46.302 [pid=0x5a4,tid=0xf24] Variable %Branch% = 
"10.0.50.205"

2015-04-01 10:02:46.302 [pid=0x5a4,tid=0xf24] Variable %ComSpec% = 
"C:\Windows\system32\cmd.exe"

2015-04-01 10:02:46.318 [pid=0x5a4,tid=0xf24] Variable %DDW% = "10"

2015-04-01 10:02:46.318 [pid=0x5a4,tid=0xf24] Variable %Doc% = "25_data"

2015-04-01 10:02:46.318 [pid=0x5a4,tid=0xf24] Variable %EDC% = "10.0.50.4"

2015-04-01 10:02:46.318 [pid=0x5a4,tid=0xf24] Variable %Exchange% = 
"10.0.50.4"

2015-04-01 10:02:46.318 [pid=0x5a4,tid=0xf24] Variable 
%FP_NO_HOST_CHECK% = "NO"

2015-04-01 10:02:46.318 [pid=0x5a4,tid=0xf24] Variable %Institution% = 
"IN01"

2015-04-01 10:02:46.334 [pid=0x5a4,tid=0xf24] Variable %Location% = 
"Teller X"

2015-04-01 10:02:46.334 [pid=0x5a4,tid=0xf24] Variable %Mrnode% = 
"XX_tel_XX"

2015-04-01 10:02:46.334 [pid=0x5a4,tid=0xf24] Variable 
%NUMBER_OF_PROCESSORS% = "8"

2015-04-01 10:02:46.334 [pid=0x5a4,tid=0xf24] Variable %OS% = "Windows_NT"

2015-04-01 10:02:46.334 [pid=0x5a4,tid=0xf24] Variable %OTG% = 
"10.0.50.18"

2015-04-01 10:02:46.334 [pid=0x5a4,tid=0xf24] Variable %Path% = 
"C:\Program Files\Intel\iCLS 
Client\;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program 
Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program 
Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program 
Files\Card Scanning Solutions\SDK"

2015-04-01 10:02:46.349 [pid=0x5a4,tid=0xf24] Variable %PATHEXT% = 
".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC"

2015-04-01 10:02:46.349 [pid=0x5a4,tid=0xf24] Variable 
%PROCESSOR_ARCHITECTURE% = "x86"

2015-04-01 10:02:46.349 [pid=0x5a4,tid=0xf24] Variable 
%PROCESSOR_IDENTIFIER% = "x86 Family 6 Model 60 Stepping 3, GenuineIntel"

2015-04-01 10:02:46.349 [pid=0x5a4,tid=0xf24] Variable 
%PROCESSOR_LEVEL% = "6"

2015-04-01 10:02:46.349 [pid=0x5a4,tid=0xf24] Variable 
%PROCESSOR_REVISION% = "3c03"

2015-04-01 10:02:46.349 [pid=0x5a4,tid=0xf24] Variable %Production% = 
"10.0.50.8"

2015-04-01 10:02:46.365 [pid=0x5a4,tid=0xf24] Variable %PSModulePath% 
= "C:\Windows\system32\WindowsPowerShell\v1.0\Modules\"

2015-04-01 10:02:46.365 [pid=0x5a4,tid=0xf24] Variable %TEMP% = 
"C:\Users\shannont\AppData\Local\Temp"

2015-04-01 10:02:46.365 [pid=0x5a4,tid=0xf24] Variable %TMP% = 
"C:\Users\shannont\AppData\Local\Temp"

2015-04-01 10:02:46.365 [pid=0x5a4,tid=0xf24] Variable %USERNAME% = 
"shannont"

2015-04-01 10:02:46.365 [pid=0x5a4,tid=0xf24] Variable %windir% = 
"C:\Windows"

2015-04-01 10:02:46.380 [pid=0x5a4,tid=0xf24] Variable 
%windows_tracing_flags% = "3"

2015-04-01 10:02:46.380 [pid=0x5a4,tid=0xf24] Variable 
%windows_tracing_logfile% = 
"C:\BVTBin\Tests\installpackage\csilogfile.log"

2015-04-01 10:02:46.380 [pid=0x5a4,tid=0xf24] Variable 
%ALLUSERSPROFILE% = "C:\ProgramData"

2015-04-01 10:02:46.380 [pid=0x5a4,tid=0xf24] Variable %APPDATA% = 
"C:\Users\shannont\AppData\Roaming"

2015-04-01 10:02:46.380 [pid=0x5a4,tid=0xf24] Variable 
%CommonProgramFiles% = "C:\Program Files\Common Files"

2015-04-01 10:02:46.380 [pid=0x5a4,tid=0xf24] Variable %COMPUTERNAME% 
= "W7050315382NN4"

2015-04-01 10:02:46.396 [pid=0x5a4,tid=0xf24] Variable %HOMEDRIVE% = "U:"

2015-04-01 10:02:46.396 [pid=0x5a4,tid=0xf24] Variable %HOMEPATH% = "\"

2015-04-01 10:02:46.396 [pid=0x5a4,tid=0xf24] Variable %HOMESHARE% = 
"\\10.0.50.205\users\ShannonT 
<file:///%5C%5C10.0.50.205%5Cusers%5CShannonT>"

2015-04-01 10:02:46.396 [pid=0x5a4,tid=0xf24] Variable %LOCALAPPDATA% 
= "C:\Users\shannont\AppData\Local"

2015-04-01 10:02:46.396 [pid=0x5a4,tid=0xf24] Variable %LOGONSERVER% = 
"\\120314VMDC1201 <file:///%5C%5C120314VMDC1201>"

2015-04-01 10:02:46.412 [pid=0x5a4,tid=0xf24] Variable %ProgramData% = 
"C:\ProgramData"

2015-04-01 10:02:46.412 [pid=0x5a4,tid=0xf24] Variable %ProgramFiles% 
= "C:\Program Files"

2015-04-01 10:02:46.412 [pid=0x5a4,tid=0xf24] Variable %PUBLIC% = 
"C:\Users\Public"

2015-04-01 10:02:46.412 [pid=0x5a4,tid=0xf24] Variable %SystemDrive% = 
"C:"

2015-04-01 10:02:46.412 [pid=0x5a4,tid=0xf24] Variable %SystemRoot% = 
"C:\Windows"

2015-04-01 10:02:46.427 [pid=0x5a4,tid=0xf24] Variable %USERDNSDOMAIN% 
= "IMCU.LOCAL"

2015-04-01 10:02:46.427 [pid=0x5a4,tid=0xf24] Variable %USERDOMAIN% = 
"IM_DOM1"

2015-04-01 10:02:46.427 [pid=0x5a4,tid=0xf24] Variable %USERPROFILE% = 
"C:\Users\shannont"

2015-04-01 10:02:46.427 [pid=0x5a4,tid=0xf24] Variable %LogonUser% = 
"ShannonT"

2015-04-01 10:02:46.427 [pid=0x5a4,tid=0xf24] Variable %LogonDomain% = 
"IM_DOM1"

2015-04-01 10:02:46.443 [pid=0x5a4,tid=0xf24] Variable %LogonUserSid% 
= "S-1-5-21-1859328528-735127382-1221738049-10987"

2015-04-01 10:02:46.443 [pid=0x5a4,tid=0xf24] Variable %BinaryUserSid% 
= "00002AEB48D23E412BD127566ED31A10000000150500000000000501"

2015-04-01 10:02:46.443 [pid=0x5a4,tid=0xf24] Variable %LdapUserSid% = 
"\01\05\00\00\00\00\00\05\15\00\00\00\10\1A\D3\6E\56\27\D1\2B\41\3E\D2\48\EB\2A\00\00"

2015-04-01 10:02:46.443 [pid=0x5a4,tid=0xf24] Variable 
%ReversedUserSid% = 
"010500000000000515000000101AD36E5627D12B413ED248EB2A0000"

2015-04-01 10:02:46.443 [pid=0x5a4,tid=0xf24] Variable 
%BinaryComputerSid% = 
"0000367D48D23E412BD127566ED31A10000000150500000000000501"

2015-04-01 10:02:46.458 [pid=0x5a4,tid=0xf24] Variable 
%ReversedComputerSid% = 
"010500000000000515000000101AD36E5627D12B413ED2487D360000"

2015-04-01 10:02:46.458 [pid=0x5a4,tid=0xf24] Variable 
%LdapComputerSid% = 
"\01\05\00\00\00\00\00\05\15\00\00\00\10\1A\D3\6E\56\27\D1\2B\41\3E\D2\48\7D\36\00\00"

2015-04-01 10:02:46.458 [pid=0x5a4,tid=0xf24] Variable %OsVersion% = 
"Windows 7"

2015-04-01 10:02:46.458 [pid=0x5a4,tid=0xf24] Variable %LocalTimeEx% = 
"2015-04-01 10:02:46.271"

2015-04-01 10:02:46.474 [pid=0x5a4,tid=0xf24] Variable %LocalTime% = 
"2015-04-01 10:02:46"

2015-04-01 10:02:46.474 [pid=0x5a4,tid=0xf24] Variable 
%LocalTimeXmlEx% = "2015-04-01T10:02:46.271"

2015-04-01 10:02:46.474 [pid=0x5a4,tid=0xf24] Variable %LocalTimeXml% 
= "2015-04-01T10:02:46"

2015-04-01 10:02:46.474 [pid=0x5a4,tid=0xf24] Variable %DateTimeEx% = 
"2015-04-01 14:02:46.271"

2015-04-01 10:02:46.474 [pid=0x5a4,tid=0xf24] Variable %DateTime% = 
"2015-04-01 14:02:46"

2015-04-01 10:02:46.490 [pid=0x5a4,tid=0xf24] Variable %MacAddress% = 
"0c-d2-20-52-41-53"

2015-04-01 10:02:46.490 [pid=0x5a4,tid=0xf24] Variable %TempDir% = 
"C:\Users\shannont\AppData\Local\Temp"

2015-04-01 10:02:46.490 [pid=0x5a4,tid=0xf24] Variable %WindowsDir% = 
"C:\Windows"

2015-04-01 10:02:46.490 [pid=0x5a4,tid=0xf24] Variable %SystemDir% = 
"C:\Windows\system32"

2015-04-01 10:02:46.490 [pid=0x5a4,tid=0xf24] Variable %DomainName% = 
"IM_DOM1"

2015-04-01 10:02:46.490 [pid=0x5a4,tid=0xf24] Variable 
%ProgramFilesDir% = "C:\Program Files"

2015-04-01 10:02:46.505 [pid=0x5a4,tid=0xf24] Variable %AppDataDir% = 
"C:\Users\shannont\AppData\Roaming"

2015-04-01 10:02:46.505 [pid=0x5a4,tid=0xf24] Variable %DesktopDir% = 
"C:\Users\shannont\Desktop"

2015-04-01 10:02:46.505 [pid=0x5a4,tid=0xf24] Variable %StartMenuDir% 
= "C:\Users\shannont\AppData\Roaming\Microsoft\Windows\Start Menu"

2015-04-01 10:02:46.505 [pid=0x5a4,tid=0xf24] Variable %ProgramsDir% = 
"C:\Users\shannont\AppData\Roaming\Microsoft\Windows\Start Menu\Programs"

2015-04-01 10:02:46.505 [pid=0x5a4,tid=0xf24] Variable %StartUpDir% = 
"C:\Users\shannont\AppData\Roaming\Microsoft\Windows\Start 
Menu\Programs\Startup"

2015-04-01 10:02:46.505 [pid=0x5a4,tid=0xf24] Variable %FavoritesDir% 
= "C:\Users\shannont\Favorites"

2015-04-01 10:02:46.505 [pid=0x5a4,tid=0xf24] Variable %SendToDir% = 
"C:\Users\shannont\AppData\Roaming\Microsoft\Windows\SendTo"

2015-04-01 10:02:46.521 [pid=0x5a4,tid=0xf24] Variable 
%RecentDocumentsDir% = 
"C:\Users\shannont\AppData\Roaming\Microsoft\Windows\Recent"

2015-04-01 10:02:46.521 [pid=0x5a4,tid=0xf24] Variable %NetPlacesDir% 
= "C:\Users\shannont\AppData\Roaming\Microsoft\Windows\Network Shortcuts"

2015-04-01 10:02:46.521 [pid=0x5a4,tid=0xf24] Variable 
%CommonAppdataDir% = "C:\ProgramData"

2015-04-01 10:02:46.521 [pid=0x5a4,tid=0xf24] Variable 
%CommonDesktopDir% = "C:\Users\Public\Desktop"

2015-04-01 10:02:46.521 [pid=0x5a4,tid=0xf24] Variable 
%CommonStartMenuDir% = "C:\ProgramData\Microsoft\Windows\Start Menu"

2015-04-01 10:02:46.521 [pid=0x5a4,tid=0xf24] Variable 
%CommonProgramsDir% = "C:\ProgramData\Microsoft\Windows\Start 
Menu\Programs"

2015-04-01 10:02:46.536 [pid=0x5a4,tid=0xf24] Variable 
%CommonStartUpDir% = "C:\ProgramData\Microsoft\Windows\Start 
Menu\Programs\Startup"

2015-04-01 10:02:46.536 [pid=0x5a4,tid=0xf24] Variable 
%CommonFavoritesDir% = "C:\Users\shannont\Favorites"

2015-04-01 10:02:46.536 [pid=0x5a4,tid=0xf24] Variable 
%CurrentProcessId% = "1444"

2015-04-01 10:02:46.536 [pid=0x5a4,tid=0xf24] Variable 
%CurrentThreadId% = "3876"

2015-04-01 10:02:46.536 [pid=0x5a4,tid=0xf24] Variable 
%GroupPolicyVersion% = "6.1.7601.17514"

2015-04-01 10:02:46.536 [pid=0x5a4,tid=0xf24] Variable %TraceFile% = 
"C:\ProgramData\GroupPolicy\Preference\Trace\User.log"

2015-04-01 10:02:46.552 [pid=0x5a4,tid=0xf24] Variable %LastError% = 
"0x00000000"

2015-04-01 10:02:46.552 [pid=0x5a4,tid=0xf24] Variable %LastErrorText% 
= "The operation completed successfully."

2015-04-01 10:02:46.552 [pid=0x5a4,tid=0xf24] Variables subsystem 
initialized.

2015-04-01 10:02:46.552 [pid=0x5a4,tid=0xf24] Set system security context.

2015-04-01 10:02:46.552 [pid=0x5a4,tid=0xf24] ----- Parameters

2015-04-01 10:02:46.552 [pid=0x5a4,tid=0xf24] CSE GUID : 
{5794DAFD-BE60-433f-88A2-1A31939AC01F}

2015-04-01 10:02:46.568 [pid=0x5a4,tid=0xf24] Flags : (   ) 
GPO_INFO_FLAG_MACHINE - Apply machine policy rather than user policy

2015-04-01 10:02:46.568 [pid=0x5a4,tid=0xf24]         (   ) 
GPO_INFO_FLAG_BACKGROUND - Background refresh of policy (ok to do slow 
stuff)

2015-04-01 10:02:46.568 [pid=0x5a4,tid=0xf24]         (   ) 
GPO_INFO_FLAG_SLOWLINK - Policy is being applied across a slow link

2015-04-01 10:02:46.568 [pid=0x5a4,tid=0xf24]         (   ) 
GPO_INFO_FLAG_VERBOSE - Verbose output to the eventlog

2015-04-01 10:02:46.568 [pid=0x5a4,tid=0xf24]         ( X ) 
GPO_INFO_FLAG_NOCHANGES - No changes were detected to the Group Policy 
Objects

2015-04-01 10:02:46.568 [pid=0x5a4,tid=0xf24]         (   ) 
GPO_INFO_FLAG_LINKTRANSITION - A change in link speed was detected 
between previous policy application and current policy application

2015-04-01 10:02:46.583 [pid=0x5a4,tid=0xf24]         (   ) 
GPO_INFO_FLAG_LOGRSOP_TRANSITION - A change in RSoP logging was 
detected between the application of the previous policy and the 
application of the current policy.

2015-04-01 10:02:46.583 [pid=0x5a4,tid=0xf24]         (   ) 
GPO_INFO_FLAG_FORCED_REFRESH - Forced Refresh is being applied. redo 
policies.

2015-04-01 10:02:46.583 [pid=0x5a4,tid=0xf24]         (   ) 
GPO_INFO_FLAG_SAFEMODE_BOOT - windows safe mode boot flag

2015-04-01 10:02:46.583 [pid=0x5a4,tid=0xf24]         (   ) 
GPO_INFO_FLAG_ASYNC_FOREGROUND - Asynchronous foreground refresh of policy

2015-04-01 10:02:46.583 [pid=0x5a4,tid=0xf24] Token (computer or user 
SID): S-1-5-21-1859328528-735127382-1221738049-10987

2015-04-01 10:02:46.583 [pid=0x5a4,tid=0xf24] Abort Flag : Yes 
(0x0200a9c0)

2015-04-01 10:02:46.599 [pid=0x5a4,tid=0xf24] HKey Root : Yes (0x000002d8)

2015-04-01 10:02:46.599 [pid=0x5a4,tid=0xf24] Deleted GPO List : No

2015-04-01 10:02:46.599 [pid=0x5a4,tid=0xf24] Changed GPO List : Yes

2015-04-01 10:02:46.599 [pid=0x5a4,tid=0xf24] Asynchronous Processing 
: Yes

2015-04-01 10:02:46.599 [pid=0x5a4,tid=0xf24] Status Callback : Yes 
(0x738d2448)

2015-04-01 10:02:46.599 [pid=0x5a4,tid=0xf24] WMI namespace : No 
(0x00000000)

2015-04-01 10:02:46.614 [pid=0x5a4,tid=0xf24] RSoP Status : Yes 
(0x0104fc50)

2015-04-01 10:02:46.614 [pid=0x5a4,tid=0xf24] Planning Mode Site : (none)

2015-04-01 10:02:46.614 [pid=0x5a4,tid=0xf24] Computer Target : No 
(0x00000000)

2015-04-01 10:02:46.614 [pid=0x5a4,tid=0xf24] User Target : No 
(0x00000000)

2015-04-01 10:02:46.614 [pid=0x5a4,tid=0xf24] Calculated session 
relevance.

2015-04-01 10:02:46.614 [pid=0x5a4,tid=0xf24] Completed CSE 
pre-processing.

2015-04-01 10:02:46.630 [pid=0x5a4,tid=0xf24] Calculated list 
relevance. [SUCCEEDED(S_FALSE)]

2015-04-01 10:02:46.630 [pid=0x5a4,tid=0xf24] Deleted GPO list is not 
relevant to the CSE.

2015-04-01 10:02:46.630 [pid=0x5a4,tid=0xf24] Calculated list relevance.

2015-04-01 10:02:46.630 [pid=0x5a4,tid=0xf24] Planning mode not detected.

2015-04-01 10:02:46.630 [pid=0x5a4,tid=0xf24] Processing changed list.

2015-04-01 10:02:46.630 [pid=0x5a4,tid=0xf24] Processing user policy.

2015-04-01 10:02:46.646 [pid=0x5a4,tid=0xf24] Got WMI namespace for 
logging mode.

2015-04-01 10:02:46.646 [pid=0x5a4,tid=0xf24] Completed get GPO list.

2015-04-01 10:02:46.646 [pid=0x5a4,tid=0xf24] Initialized internal 
RSoP storage.

2015-04-01 10:02:46.646 [pid=0x5a4,tid=0xf24] Completed GPO list 
pre-processing.

2015-04-01 10:02:46.646 [pid=0x5a4,tid=0xf24] ----- Changed - 0

2015-04-01 10:02:46.646 [pid=0x5a4,tid=0xf24] Options : (   ) 
GPO_FLAG_DISABLE - This GPO is disabled.

2015-04-01 10:02:46.661 [pid=0x5a4,tid=0xf24]           (   ) 
GPO_FLAG_FORCE - Do not override the settings in this GPO with 
settings in a subsequent GPO.

2015-04-01 10:02:46.661 [pid=0x5a4,tid=0xf24] Options (raw) : 0x00000000

2015-04-01 10:02:46.661 [pid=0x5a4,tid=0xf24] Version : 1114129 
(0x00110011)

2015-04-01 10:02:46.661 [pid=0x5a4,tid=0xf24] GPC : 
LDAP://CN=User,cn={41EAE7F3-5D61-4775-9B58-4D34ED47C834},cn=policies,cn=system,DC=IMCU,DC=local

2015-04-01 10:02:46.661 [pid=0x5a4,tid=0xf24] GPT : 
\\IMCU.local\sysvol\IMCU.local\Policies\{41EAE7F3-5D61-4775-9B58-4D34ED47C834}\User 
<file:///%5C%5CIMCU.local%5Csysvol%5CIMCU.local%5CPolicies%5C%7b41EAE7F3-5D61-4775-9B58-4D34ED47C834%7d%5CUser>

2015-04-01 10:02:46.661 [pid=0x5a4,tid=0xf24] GPO Display Name : 
Mapped Drives Branch 05

2015-04-01 10:02:46.661 [pid=0x5a4,tid=0xf24] GPO Name : 
{41EAE7F3-5D61-4775-9B58-4D34ED47C834}

2015-04-01 10:02:46.677 [pid=0x5a4,tid=0xf24] GPO Link : (   ) 
GPLinkUnknown - No link information is available.

2015-04-01 10:02:46.677 [pid=0x5a4,tid=0xf24]            (   ) 
GPLinkMachine - The GPO is linked to a computer (local or remote).

2015-04-01 10:02:46.677 [pid=0x5a4,tid=0xf24]            (   ) 
GPLinkSite - The GPO is linked to a site.

2015-04-01 10:02:46.677 [pid=0x5a4,tid=0xf24]            (   ) 
GPLinkDomain - The GPO is linked to a domain.

2015-04-01 10:02:46.677 [pid=0x5a4,tid=0xf24]            ( X ) 
GPLinkOrganizationalUnit - The GPO is linked to an organizational unit.

2015-04-01 10:02:46.677 [pid=0x5a4,tid=0xf24]            (   ) GP Link 
Error

2015-04-01 10:02:46.692 [pid=0x5a4,tid=0xf24] lParam : 0x00000000

2015-04-01 10:02:46.692 [pid=0x5a4,tid=0xf24] Prev GPO : No

2015-04-01 10:02:46.692 [pid=0x5a4,tid=0xf24] Next GPO : Yes

2015-04-01 10:02:46.692 [pid=0x5a4,tid=0xf24] Extensions : 
[{00000000-0000-0000-0000-000000000000}{2EA1A81B-48E5-45E9-8BB7-A6E3AC170006}][{5794DAFD-BE60-433F-88A2-1A31939AC01F}{2EA1A81B-48E5-45E9-8BB7-A6E3AC170006}]

2015-04-01 10:02:46.692 [pid=0x5a4,tid=0xf24] lParam2 : 0x012fd004

2015-04-01 10:02:46.692 [pid=0x5a4,tid=0xf24] Link : LDAP://OU=Branch 
05 - Beech Grove,DC=IMCU,DC=local

2015-04-01 10:02:46.708 [pid=0x5a4,tid=0xf24] Variable %GPHPATH% = 
"C:\ProgramData\Microsoft\Group 
Policy\History\{41EAE7F3-5D61-4775-9B58-4D34ED47C834}\S-1-5-21-1859328528-735127382-1221738049-10987"

2015-04-01 10:02:46.708 [pid=0x5a4,tid=0xf24] Completed get GPH path.

2015-04-01 10:02:46.708 [pid=0x5a4,tid=0xf24] Completed set extensions.

2015-04-01 10:02:46.708 [pid=0x5a4,tid=0xf24] Completed get GPO is 
relevant.

2015-04-01 10:02:46.708 [pid=0x5a4,tid=0xf24] Variable %GPTPATH% = 
"\\IMCU.local\sysvol\IMCU.local\Policies\{41EAE7F3-5D61-4775-9B58-4D34ED47C834}\User 
<file:///%5C%5CIMCU.local%5Csysvol%5CIMCU.local%5CPolicies%5C%7b41EAE7F3-5D61-4775-9B58-4D34ED47C834%7d%5CUser>"

2015-04-01 10:02:46.708 [pid=0x5a4,tid=0xf24] Completed get GPT path.

2015-04-01 10:02:46.724 [pid=0x5a4,tid=0xf24] Completed RSoP init.

2015-04-01 10:02:46.724 [pid=0x5a4,tid=0xf24] Completed get next GPO.

2015-04-01 10:02:46.724 [pid=0x5a4,tid=0xf24] Completed check GPO 
license usage.

2015-04-01 10:02:46.724 [pid=0x5a4,tid=0xf24] Completed GPO 
pre-processing.

2015-04-01 10:02:46.724 [pid=0x5a4,tid=0xf24] Started removing policy.

2015-04-01 10:02:46.724 [pid=0x5a4,tid=0xf24] Read GPH data file.

2015-04-01 10:02:46.739 [pid=0x5a4,tid=0xf24] Completed parse of GPH XML.

2015-04-01 10:02:46.739 [pid=0x5a4,tid=0xf24] Completed get tree root.

2015-04-01 10:02:46.739 [pid=0x5a4,tid=0xf24] Deleted GPH data file.

2015-04-01 10:02:46.739 [pid=0x5a4,tid=0xf24] Started package execution.

2015-04-01 10:02:46.739 [pid=0x5a4,tid=0xf24] Set package timestamp 
variable (2015-04-01 14:02:46).

2015-04-01 10:02:46.755 [pid=0x5a4,tid=0xf24] Starting class <Drives>.

2015-04-01 10:02:46.755 [pid=0x5a4,tid=0xf24] RunOnce value created 
[SUCCEEDED(S_FALSE)]

2015-04-01 10:02:46.755 [pid=0x5a4,tid=0xf24] Handle Children.

2015-04-01 10:02:46.755 [pid=0x5a4,tid=0xf24] 
{935D1B74-9CB8-4e3c-9914-7DD559B7A417}

2015-04-01 10:02:46.755 [pid=0x5a4,tid=0xf24] Starting class <Drive> - Q:.

2015-04-01 10:02:46.755 [pid=0x5a4,tid=0xf24] Policy is not flagged 
for removal.

2015-04-01 10:02:46.770 [pid=0x5a4,tid=0xf24] Completed class <Drive> 
- Q:.

2015-04-01 10:02:46.770 [pid=0x5a4,tid=0xf24] 
{935D1B74-9CB8-4e3c-9914-7DD559B7A417}

2015-04-01 10:02:46.770 [pid=0x5a4,tid=0xf24] Starting class <Drive> - G:.

2015-04-01 10:02:46.770 [pid=0x5a4,tid=0xf24] Policy is not flagged 
for removal.

2015-04-01 10:02:46.770 [pid=0x5a4,tid=0xf24] Completed class <Drive> 
- G:.

2015-04-01 10:02:46.770 [pid=0x5a4,tid=0xf24] Completed class <Drives>.

2015-04-01 10:02:46.786 [pid=0x5a4,tid=0xf24] Completed package execution.

2015-04-01 10:02:46.786 [pid=0x5a4,tid=0xf24] Completed execution of 
removal package.

2015-04-01 10:02:46.786 [pid=0x5a4,tid=0xf24] Completed remove GPH.

2015-04-01 10:02:46.786 [pid=0x5a4,tid=0xf24] Started applying policy.

2015-04-01 10:02:46.786 [pid=0x5a4,tid=0xf24] Set user security context.

2015-04-01 10:02:46.802 [pid=0x5a4,tid=0xf24] Opened file.

2015-04-01 10:02:46.817 [pid=0x5a4,tid=0xf24] Got file size.

2015-04-01 10:02:46.817 [pid=0x5a4,tid=0xf24] Created file buffer.

2015-04-01 10:02:46.833 [pid=0x5a4,tid=0xf24] Completed read file data.

2015-04-01 10:02:46.833 [pid=0x5a4,tid=0xf24] Terminated file buffer.

2015-04-01 10:02:46.833 [pid=0x5a4,tid=0xf24] Closed file handle.

2015-04-01 10:02:46.833 [pid=0x5a4,tid=0xf24] Read GPE XML data file 
(824 bytes total).

2015-04-01 10:02:46.848 [pid=0x5a4,tid=0xf24] Set system security context.

2015-04-01 10:02:46.848 [pid=0x5a4,tid=0xf24] Completed parse of GPE 
XML data.

2015-04-01 10:02:46.848 [pid=0x5a4,tid=0xf24] Completed loading of 
package.

2015-04-01 10:02:46.848 [pid=0x5a4,tid=0xf24] Completed get tree root.

2015-04-01 10:02:46.848 [pid=0x5a4,tid=0xf24] Started package execution.

2015-04-01 10:02:46.864 [pid=0x5a4,tid=0xf24] Set package timestamp 
variable (2015-04-01 14:02:46).

2015-04-01 10:02:46.864 [pid=0x5a4,tid=0xf24] Starting class <Drives>.

2015-04-01 10:02:46.864 [pid=0x5a4,tid=0xf24] RunOnce value created 
[SUCCEEDED(S_FALSE)]

2015-04-01 10:02:46.864 [pid=0x5a4,tid=0xf24] Handle Children.

2015-04-01 10:02:46.864 [pid=0x5a4,tid=0xf24] 
{935D1B74-9CB8-4e3c-9914-7DD559B7A417}

2015-04-01 10:02:46.880 [pid=0x5a4,tid=0xf24] Starting class <Drive> - Q:.

2015-04-01 10:02:46.880 [pid=0x5a4,tid=0xf24] Adding child elements to 
RSOP.

2015-04-01 10:02:46.880 [pid=0x5a4,tid=0xf24] Set user security context.

2015-04-01 10:02:47.738 [pid=0x5a4,tid=0xf24] Set system security context.

2015-04-01 10:02:47.738 [pid=0x5a4,tid=0xf24] Properties handled.

2015-04-01 10:02:47.753 [pid=0x5a4,tid=0xf24] RunOnce value created 
[SUCCEEDED(S_FALSE)]

2015-04-01 10:02:47.769 [pid=0x5a4,tid=0xf24] Handle Children.

2015-04-01 10:02:47.784 [pid=0x5a4,tid=0xf24] EVENT : The user 'Q:' 
preference item in the 'Mapped Drives Branch 05 
{41EAE7F3-5D61-4775-9B58-4D34ED47C834}' Group Policy object applied 
successfully.

2015-04-01 10:02:47.800 [pid=0x5a4,tid=0xf24] Completed class <Drive> 
- Q:.

2015-04-01 10:02:47.800 [pid=0x5a4,tid=0xf24] 
{935D1B74-9CB8-4e3c-9914-7DD559B7A417}

2015-04-01 10:02:47.800 [pid=0x5a4,tid=0xf24] Starting class <Drive> - G:.

2015-04-01 10:02:47.816 [pid=0x5a4,tid=0xf24] Adding child elements to 
RSOP.

2015-04-01 10:02:47.816 [pid=0x5a4,tid=0xf24] Set user security context.

2015-04-01 10:02:48.018 [pid=0x5a4,tid=0xf24] Set system security context.

2015-04-01 10:02:48.018 [pid=0x5a4,tid=0xf24] Properties handled.

2015-04-01 10:02:48.034 [pid=0x5a4,tid=0xf24] RunOnce value created 
[SUCCEEDED(S_FALSE)]

2015-04-01 10:02:48.050 [pid=0x5a4,tid=0xf24] Handle Children.

2015-04-01 10:02:48.065 [pid=0x5a4,tid=0xf24] EVENT : The user 'G:' 
preference item in the 'Mapped Drives Branch 05 
{41EAE7F3-5D61-4775-9B58-4D34ED47C834}' Group Policy object applied 
successfully.

2015-04-01 10:02:48.081 [pid=0x5a4,tid=0xf24] Completed class <Drive> 
- G:.

2015-04-01 10:02:48.081 [pid=0x5a4,tid=0xf24] Completed class <Drives>.

2015-04-01 10:02:48.096 [pid=0x5a4,tid=0xf24] Completed package execution.

2015-04-01 10:02:48.096 [pid=0x5a4,tid=0xf24] Completed execution of 
apply package.

2015-04-01 10:02:48.112 [pid=0x5a4,tid=0xf24] Update GPH : 
apmCreateFoldersEx

2015-04-01 10:02:48.112 [pid=0x5a4,tid=0xf24] Update GPH : 
xmlRemovalPackage

2015-04-01 10:02:48.128 [pid=0x5a4,tid=0xf24] Update GPH : apmWriteFile

2015-04-01 10:02:48.128 [pid=0x5a4,tid=0xf24] Updated GPH.

2015-04-01 10:02:48.128 [pid=0x5a4,tid=0xf24] Completed apply GPO.

2015-04-01 10:02:48.143 [pid=0x5a4,tid=0xf24] Completed GPO 
post-processing.

2015-04-01 10:02:48.143 [pid=0x5a4,tid=0xf24] ----- Changed - 1

2015-04-01 10:02:48.143 [pid=0x5a4,tid=0xf24] Options : (   ) 
GPO_FLAG_DISABLE - This GPO is disabled.

2015-04-01 10:02:48.143 [pid=0x5a4,tid=0xf24]           (   ) 
GPO_FLAG_FORCE - Do not override the settings in this GPO with 
settings in a subsequent GPO.

2015-04-01 10:02:48.143 [pid=0x5a4,tid=0xf24] Options (raw) : 0x00000000

2015-04-01 10:02:48.143 [pid=0x5a4,tid=0xf24] Version : 458759 
(0x00070007)

2015-04-01 10:02:48.159 [pid=0x5a4,tid=0xf24] GPC : 
LDAP://CN=User,cn={E000461B-9DE3-47A6-8966-1A85F18FDC1D},cn=policies,cn=system,DC=IMCU,DC=local

2015-04-01 10:02:48.159 [pid=0x5a4,tid=0xf24] GPT : 
\\IMCU.local\sysvol\IMCU.local\Policies\{E000461B-9DE3-47A6-8966-1A85F18FDC1D}\User 
<file:///%5C%5CIMCU.local%5Csysvol%5CIMCU.local%5CPolicies%5C%7bE000461B-9DE3-47A6-8966-1A85F18FDC1D%7d%5CUser>

2015-04-01 10:02:48.159 [pid=0x5a4,tid=0xf24] GPO Display Name : 
Mapped Drive EDCServer

2015-04-01 10:02:48.159 [pid=0x5a4,tid=0xf24] GPO Name : 
{E000461B-9DE3-47A6-8966-1A85F18FDC1D}

2015-04-01 10:02:48.159 [pid=0x5a4,tid=0xf24] GPO Link : (   ) 
GPLinkUnknown - No link information is available.

2015-04-01 10:02:48.174 [pid=0x5a4,tid=0xf24]            (   ) 
GPLinkMachine - The GPO is linked to a computer (local or remote).

2015-04-01 10:02:48.174 [pid=0x5a4,tid=0xf24]            (   ) 
GPLinkSite - The GPO is linked to a site.

2015-04-01 10:02:48.174 [pid=0x5a4,tid=0xf24]            (   ) 
GPLinkDomain - The GPO is linked to a domain.

2015-04-01 10:02:48.174 [pid=0x5a4,tid=0xf24]            ( X ) 
GPLinkOrganizationalUnit - The GPO is linked to an organizational unit.

2015-04-01 10:02:48.174 [pid=0x5a4,tid=0xf24]            (   ) GP Link 
Error

2015-04-01 10:02:48.174 [pid=0x5a4,tid=0xf24] lParam : 0x00000000

2015-04-01 10:02:48.190 [pid=0x5a4,tid=0xf24] Prev GPO : Yes

2015-04-01 10:02:48.190 [pid=0x5a4,tid=0xf24] Next GPO : No

2015-04-01 10:02:48.190 [pid=0x5a4,tid=0xf24] Extensions : 
[{00000000-0000-0000-0000-000000000000}{2EA1A81B-48E5-45E9-8BB7-A6E3AC170006}][{5794DAFD-BE60-433F-88A2-1A31939AC01F}{2EA1A81B-48E5-45E9-8BB7-A6E3AC170006}]

2015-04-01 10:02:48.190 [pid=0x5a4,tid=0xf24] lParam2 : 0x01293474

2015-04-01 10:02:48.190 [pid=0x5a4,tid=0xf24] Link : LDAP://OU=Branch 
05 - Beech Grove,DC=IMCU,DC=local

2015-04-01 10:02:48.206 [pid=0x5a4,tid=0xf24] Variable %GPHPATH% = 
"C:\ProgramData\Microsoft\Group 
Policy\History\{E000461B-9DE3-47A6-8966-1A85F18FDC1D}\S-1-5-21-1859328528-735127382-1221738049-10987"

2015-04-01 10:02:48.206 [pid=0x5a4,tid=0xf24] Completed get GPH path.

2015-04-01 10:02:48.206 [pid=0x5a4,tid=0xf24] Completed set extensions.

2015-04-01 10:02:48.206 [pid=0x5a4,tid=0xf24] Completed get GPO is 
relevant.

2015-04-01 10:02:48.206 [pid=0x5a4,tid=0xf24] Variable %GPTPATH% = 
"\\IMCU.local\sysvol\IMCU.local\Policies\{E000461B-9DE3-47A6-8966-1A85F18FDC1D}\User 
<file:///%5C%5CIMCU.local%5Csysvol%5CIMCU.local%5CPolicies%5C%7bE000461B-9DE3-47A6-8966-1A85F18FDC1D%7d%5CUser>"

2015-04-01 10:02:48.206 [pid=0x5a4,tid=0xf24] Completed get GPT path.

2015-04-01 10:02:48.221 [pid=0x5a4,tid=0xf24] Completed RSoP init.

2015-04-01 10:02:48.221 [pid=0x5a4,tid=0xf24] Completed get next GPO.

2015-04-01 10:02:48.221 [pid=0x5a4,tid=0xf24] Completed check GPO 
license usage.

2015-04-01 10:02:48.221 [pid=0x5a4,tid=0xf24] Completed GPO 
pre-processing.

2015-04-01 10:02:48.221 [pid=0x5a4,tid=0xf24] Started removing policy.

2015-04-01 10:02:48.237 [pid=0x5a4,tid=0xf24] Read GPH data file.

2015-04-01 10:02:48.237 [pid=0x5a4,tid=0xf24] Completed parse of GPH XML.

2015-04-01 10:02:48.237 [pid=0x5a4,tid=0xf24] Completed get tree root.

2015-04-01 10:02:48.237 [pid=0x5a4,tid=0xf24] Deleted GPH data file.

2015-04-01 10:02:48.252 [pid=0x5a4,tid=0xf24] Started package execution.

2015-04-01 10:02:48.252 [pid=0x5a4,tid=0xf24] Set package timestamp 
variable (2015-04-01 14:02:46).

2015-04-01 10:02:48.252 [pid=0x5a4,tid=0xf24] Starting class <Drives>.

2015-04-01 10:02:48.252 [pid=0x5a4,tid=0xf24] RunOnce value created 
[SUCCEEDED(S_FALSE)]

2015-04-01 10:02:48.252 [pid=0x5a4,tid=0xf24] Handle Children.

2015-04-01 10:02:48.252 [pid=0x5a4,tid=0xf24] 
{935D1B74-9CB8-4e3c-9914-7DD559B7A417}

2015-04-01 10:02:48.268 [pid=0x5a4,tid=0xf24] Starting class <Drive> - T:.

2015-04-01 10:02:48.268 [pid=0x5a4,tid=0xf24] Policy is not flagged 
for removal.

2015-04-01 10:02:48.268 [pid=0x5a4,tid=0xf24] Completed class <Drive> 
- T:.

2015-04-01 10:02:48.268 [pid=0x5a4,tid=0xf24] Completed class <Drives>.

2015-04-01 10:02:48.268 [pid=0x5a4,tid=0xf24] Completed package execution.

2015-04-01 10:02:48.284 [pid=0x5a4,tid=0xf24] Completed execution of 
removal package.

2015-04-01 10:02:48.284 [pid=0x5a4,tid=0xf24] Completed remove GPH.

2015-04-01 10:02:48.284 [pid=0x5a4,tid=0xf24] Started applying policy.

2015-04-01 10:02:48.284 [pid=0x5a4,tid=0xf24] Set user security context.

2015-04-01 10:02:48.299 [pid=0x5a4,tid=0xf24] Opened file.

2015-04-01 10:02:48.299 [pid=0x5a4,tid=0xf24] Got file size.

2015-04-01 10:02:48.315 [pid=0x5a4,tid=0xf24] Created file buffer.

2015-04-01 10:02:48.330 [pid=0x5a4,tid=0xf24] Completed read file data.

2015-04-01 10:02:48.330 [pid=0x5a4,tid=0xf24] Terminated file buffer.

2015-04-01 10:02:48.330 [pid=0x5a4,tid=0xf24] Closed file handle.

2015-04-01 10:02:48.330 [pid=0x5a4,tid=0xf24] Read GPE XML data file 
(464 bytes total).

2015-04-01 10:02:48.330 [pid=0x5a4,tid=0xf24] Set system security context.

2015-04-01 10:02:48.346 [pid=0x5a4,tid=0xf24] Completed parse of GPE 
XML data.

2015-04-01 10:02:48.346 [pid=0x5a4,tid=0xf24] Completed loading of 
package.

2015-04-01 10:02:48.346 [pid=0x5a4,tid=0xf24] Completed get tree root.

2015-04-01 10:02:48.346 [pid=0x5a4,tid=0xf24] Started package execution.

2015-04-01 10:02:48.346 [pid=0x5a4,tid=0xf24] Set package timestamp 
variable (2015-04-01 14:02:46).

2015-04-01 10:02:48.361 [pid=0x5a4,tid=0xf24] Starting class <Drives>.

2015-04-01 10:02:48.361 [pid=0x5a4,tid=0xf24] RunOnce value created 
[SUCCEEDED(S_FALSE)]

2015-04-01 10:02:48.361 [pid=0x5a4,tid=0xf24] Handle Children.

2015-04-01 10:02:48.361 [pid=0x5a4,tid=0xf24] 
{935D1B74-9CB8-4e3c-9914-7DD559B7A417}

2015-04-01 10:02:48.361 [pid=0x5a4,tid=0xf24] Starting class <Drive> - T:.

2015-04-01 10:02:48.377 [pid=0x5a4,tid=0xf24] Adding child elements to 
RSOP.

2015-04-01 10:02:48.377 [pid=0x5a4,tid=0xf24] Set user security context.

2015-04-01 10:02:48.642 [pid=0x5a4,tid=0xf24] Set system security context.

2015-04-01 10:02:48.658 [pid=0x5a4,tid=0xf24] Properties handled.

2015-04-01 10:02:48.658 [pid=0x5a4,tid=0xf24] RunOnce value created 
[SUCCEEDED(S_FALSE)]

2015-04-01 10:02:48.658 [pid=0x5a4,tid=0xf24] Handle Children.

2015-04-01 10:02:48.673 [pid=0x5a4,tid=0xf24] EVENT : The user 'T:' 
preference item in the 'Mapped Drive EDCServer 
{E000461B-9DE3-47A6-8966-1A85F18FDC1D}' Group Policy object applied 
successfully.

2015-04-01 10:02:48.673 [pid=0x5a4,tid=0xf24] Completed class <Drive> 
- T:.

2015-04-01 10:02:48.673 [pid=0x5a4,tid=0xf24] Completed class <Drives>.

2015-04-01 10:02:48.689 [pid=0x5a4,tid=0xf24] Completed package execution.

2015-04-01 10:02:48.689 [pid=0x5a4,tid=0xf24] Completed execution of 
apply package.

2015-04-01 10:02:48.689 [pid=0x5a4,tid=0xf24] Update GPH : 
apmCreateFoldersEx

2015-04-01 10:02:48.705 [pid=0x5a4,tid=0xf24] Update GPH : 
xmlRemovalPackage

2015-04-01 10:02:48.705 [pid=0x5a4,tid=0xf24] Update GPH : apmWriteFile

2015-04-01 10:02:48.705 [pid=0x5a4,tid=0xf24] Updated GPH.

2015-04-01 10:02:48.705 [pid=0x5a4,tid=0xf24] Completed apply GPO.

2015-04-01 10:02:48.720 [pid=0x5a4,tid=0xf24] Completed GPO 
post-processing.

2015-04-01 10:02:48.720 [pid=0x5a4,tid=0xf24] Completed get next GPO. 
[SUCCEEDED(S_FALSE)]

2015-04-01 10:02:48.720 [pid=0x5a4,tid=0xf24] RSoP namespace not 
initialized.

2015-04-01 10:02:48.720 [pid=0x5a4,tid=0xf24] Completed GPO list 
post-processing.

2015-04-01 10:02:48.736 [pid=0x5a4,tid=0xf24] Completed get GPO list. 
[SUCCEEDED(S_FALSE)]

2015-04-01 10:02:48.736 [pid=0x5a4,tid=0xf24] Completed CSE 
post-processing.

2015-04-01 10:02:48.736 [pid=0x5a4,tid=0xf24] User impersonation 
uninitialized.

2015-04-01 10:02:48.783 [pid=0x5a4,tid=0xf24] Leaving 
ProcessGroupPolicyExDrives() returned 0x00000000

2015-04-01 10:02:48.783 [pid=0x5a4,tid=0xf24]

2015-04-02 08:26:57.445 [pid=0x5ac,tid=0x5b4] Entering 
ProcessGroupPolicyExDrives()

2015-04-02 08:26:57.461 [pid=0x5ac,tid=0x5b4] 
SOFTWARE\Policies\Microsoft\Windows\Group 
Policy\{5794DAFD-BE60-433f-88A2-1A31939AC01F}

2015-04-02 08:26:57.461 [pid=0x5ac,tid=0x5b4] BackgroundPriorityLevel 
( 0 )

2015-04-02 08:26:57.461 [pid=0x5ac,tid=0x5b4] DisableRSoP ( 0 )

2015-04-02 08:26:57.461 [pid=0x5ac,tid=0x5b4] LogLevel ( 3 )

2015-04-02 08:26:57.461 [pid=0x5ac,tid=0x5b4] Command subsystem 
initialized. [SUCCEEDED(S_FALSE)]

2015-04-02 08:26:57.477 [pid=0x5ac,tid=0x5b4] Set user security context.

2015-04-02 08:26:57.477 [pid=0x5ac,tid=0x5b4] Set system security context.

2015-04-02 08:26:57.477 [pid=0x5ac,tid=0x5b4] User impersonation 
initialized.

2015-04-02 08:26:57.477 [pid=0x5ac,tid=0x5b4] Client context subsystem 
initialized.

2015-04-02 08:26:57.477 [pid=0x5ac,tid=0x5b4] Configuration subsystem 
initialized.

2015-04-02 08:26:57.477 [pid=0x5ac,tid=0x5b4] Licensing subsystem 
initialized.

2015-04-02 08:26:57.492 [pid=0x5ac,tid=0x5b4] Set user security context.

2015-04-02 08:26:57.570 [pid=0x5ac,tid=0x5b4] User information 
initialized.

2015-04-02 08:26:57.601 [pid=0x5ac,tid=0x5b4] Variable %Admin% = 
"10.0.50.205"

2015-04-02 08:26:57.601 [pid=0x5ac,tid=0x5b4] Variable %Branch% = 
"10.0.50.205"

2015-04-02 08:26:57.601 [pid=0x5ac,tid=0x5b4] Variable %ComSpec% = 
"C:\Windows\system32\cmd.exe"

2015-04-02 08:26:57.601 [pid=0x5ac,tid=0x5b4] Variable %DDW% = "10"

2015-04-02 08:26:57.601 [pid=0x5ac,tid=0x5b4] Variable %Doc% = "25_data"

2015-04-02 08:26:57.617 [pid=0x5ac,tid=0x5b4] Variable %EDC% = "10.0.50.4"

2015-04-02 08:26:57.617 [pid=0x5ac,tid=0x5b4] Variable %Exchange% = 
"10.0.50.4"

2015-04-02 08:26:57.617 [pid=0x5ac,tid=0x5b4] Variable 
%FP_NO_HOST_CHECK% = "NO"

2015-04-02 08:26:57.617 [pid=0x5ac,tid=0x5b4] Variable %Institution% = 
"IN01"

2015-04-02 08:26:57.617 [pid=0x5ac,tid=0x5b4] Variable %Location% = 
"Teller X"

2015-04-02 08:26:57.633 [pid=0x5ac,tid=0x5b4] Variable %Mrnode% = 
"XX_tel_XX"

2015-04-02 08:26:57.633 [pid=0x5ac,tid=0x5b4] Variable 
%NUMBER_OF_PROCESSORS% = "8"

2015-04-02 08:26:57.633 [pid=0x5ac,tid=0x5b4] Variable %OS% = "Windows_NT"

2015-04-02 08:26:57.633 [pid=0x5ac,tid=0x5b4] Variable %OTG% = 
"10.0.50.18"

2015-04-02 08:26:57.633 [pid=0x5ac,tid=0x5b4] Variable %Path% = 
"C:\Program Files\Intel\iCLS 
Client\;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program 
Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program 
Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program 
Files\Card Scanning Solutions\SDK"

2015-04-02 08:26:57.633 [pid=0x5ac,tid=0x5b4] Variable %PATHEXT% = 
".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC"

2015-04-02 08:26:57.648 [pid=0x5ac,tid=0x5b4] Variable 
%PROCESSOR_ARCHITECTURE% = "x86"

2015-04-02 08:26:57.648 [pid=0x5ac,tid=0x5b4] Variable 
%PROCESSOR_IDENTIFIER% = "x86 Family 6 Model 60 Stepping 3, GenuineIntel"

2015-04-02 08:26:57.648 [pid=0x5ac,tid=0x5b4] Variable 
%PROCESSOR_LEVEL% = "6"

2015-04-02 08:26:57.648 [pid=0x5ac,tid=0x5b4] Variable 
%PROCESSOR_REVISION% = "3c03"

2015-04-02 08:26:57.648 [pid=0x5ac,tid=0x5b4] Variable %Production% = 
"10.0.50.8"

2015-04-02 08:26:57.664 [pid=0x5ac,tid=0x5b4] Variable %PSModulePath% 
= "C:\Windows\system32\WindowsPowerShell\v1.0\Modules\"

2015-04-02 08:26:57.664 [pid=0x5ac,tid=0x5b4] Variable %TEMP% = 
"C:\Users\shannont\AppData\Local\Temp"

2015-04-02 08:26:57.664 [pid=0x5ac,tid=0x5b4] Variable %TMP% = 
"C:\Users\shannont\AppData\Local\Temp"

2015-04-02 08:26:57.664 [pid=0x5ac,tid=0x5b4] Variable %USERNAME% = 
"shannont"

2015-04-02 08:26:57.664 [pid=0x5ac,tid=0x5b4] Variable %windir% = 
"C:\Windows"

2015-04-02 08:26:57.679 [pid=0x5ac,tid=0x5b4] Variable 
%windows_tracing_flags% = "3"

2015-04-02 08:26:57.679 [pid=0x5ac,tid=0x5b4] Variable 
%windows_tracing_logfile% = 
"C:\BVTBin\Tests\installpackage\csilogfile.log"

2015-04-02 08:26:57.679 [pid=0x5ac,tid=0x5b4] Variable 
%ALLUSERSPROFILE% = "C:\ProgramData"

2015-04-02 08:26:57.679 [pid=0x5ac,tid=0x5b4] Variable %APPDATA% = 
"C:\Users\shannont\AppData\Roaming"

2015-04-02 08:26:57.679 [pid=0x5ac,tid=0x5b4] Variable 
%CommonProgramFiles% = "C:\Program Files\Common Files"

2015-04-02 08:26:57.695 [pid=0x5ac,tid=0x5b4] Variable %COMPUTERNAME% 
= "W7050315382NN4"

2015-04-02 08:26:57.695 [pid=0x5ac,tid=0x5b4] Variable %HOMEDRIVE% = "U:"

2015-04-02 08:26:57.695 [pid=0x5ac,tid=0x5b4] Variable %HOMEPATH% = "\"

2015-04-02 08:26:57.695 [pid=0x5ac,tid=0x5b4] Variable %HOMESHARE% = 
"\\10.0.50.205\users\ShannonT 
<file:///%5C%5C10.0.50.205%5Cusers%5CShannonT>"

2015-04-02 08:26:57.695 [pid=0x5ac,tid=0x5b4] Variable %LOCALAPPDATA% 
= "C:\Users\shannont\AppData\Local"

2015-04-02 08:26:57.711 [pid=0x5ac,tid=0x5b4] Variable %LOGONSERVER% = 
"\\120314VMDC1201 <file:///%5C%5C120314VMDC1201>"

2015-04-02 08:26:57.711 [pid=0x5ac,tid=0x5b4] Variable %ProgramData% = 
"C:\ProgramData"

2015-04-02 08:26:57.711 [pid=0x5ac,tid=0x5b4] Variable %ProgramFiles% 
= "C:\Program Files"

2015-04-02 08:26:57.711 [pid=0x5ac,tid=0x5b4] Variable %PUBLIC% = 
"C:\Users\Public"

2015-04-02 08:26:57.711 [pid=0x5ac,tid=0x5b4] Variable %SystemDrive% = 
"C:"

2015-04-02 08:26:57.726 [pid=0x5ac,tid=0x5b4] Variable %SystemRoot% = 
"C:\Windows"

2015-04-02 08:26:57.726 [pid=0x5ac,tid=0x5b4] Variable %USERDNSDOMAIN% 
= "IMCU.LOCAL"

2015-04-02 08:26:57.726 [pid=0x5ac,tid=0x5b4] Variable %USERDOMAIN% = 
"IM_DOM1"

2015-04-02 08:26:57.726 [pid=0x5ac,tid=0x5b4] Variable %USERPROFILE% = 
"C:\Users\shannont"

2015-04-02 08:26:57.726 [pid=0x5ac,tid=0x5b4] Variable %LogonUser% = 
"ShannonT"

2015-04-02 08:26:57.726 [pid=0x5ac,tid=0x5b4] Variable %LogonDomain% = 
"IM_DOM1"

2015-04-02 08:26:57.742 [pid=0x5ac,tid=0x5b4] Variable %LogonUserSid% 
= "S-1-5-21-1859328528-735127382-1221738049-10987"

2015-04-02 08:26:57.742 [pid=0x5ac,tid=0x5b4] Variable %BinaryUserSid% 
= "00002AEB48D23E412BD127566ED31A10000000150500000000000501"

2015-04-02 08:26:57.742 [pid=0x5ac,tid=0x5b4] Variable %LdapUserSid% = 
"\01\05\00\00\00\00\00\05\15\00\00\00\10\1A\D3\6E\56\27\D1\2B\41\3E\D2\48\EB\2A\00\00"

2015-04-02 08:26:57.742 [pid=0x5ac,tid=0x5b4] Variable 
%ReversedUserSid% = 
"010500000000000515000000101AD36E5627D12B413ED248EB2A0000"

2015-04-02 08:26:57.742 [pid=0x5ac,tid=0x5b4] Variable 
%BinaryComputerSid% = 
"0000367D48D23E412BD127566ED31A10000000150500000000000501"

2015-04-02 08:26:57.757 [pid=0x5ac,tid=0x5b4] Variable 
%ReversedComputerSid% = 
"010500000000000515000000101AD36E5627D12B413ED2487D360000"

2015-04-02 08:26:57.757 [pid=0x5ac,tid=0x5b4] Variable 
%LdapComputerSid% = 
"\01\05\00\00\00\00\00\05\15\00\00\00\10\1A\D3\6E\56\27\D1\2B\41\3E\D2\48\7D\36\00\00"

2015-04-02 08:26:57.757 [pid=0x5ac,tid=0x5b4] Variable %OsVersion% = 
"Windows 7"

2015-04-02 08:26:57.757 [pid=0x5ac,tid=0x5b4] Variable %LocalTimeEx% = 
"2015-04-02 08:26:57.586"

2015-04-02 08:26:57.757 [pid=0x5ac,tid=0x5b4] Variable %LocalTime% = 
"2015-04-02 08:26:57"

2015-04-02 08:26:57.773 [pid=0x5ac,tid=0x5b4] Variable 
%LocalTimeXmlEx% = "2015-04-02T08:26:57.586"

2015-04-02 08:26:57.773 [pid=0x5ac,tid=0x5b4] Variable %LocalTimeXml% 
= "2015-04-02T08:26:57"

2015-04-02 08:26:57.773 [pid=0x5ac,tid=0x5b4] Variable %DateTimeEx% = 
"2015-04-02 12:26:57.586"

2015-04-02 08:26:57.773 [pid=0x5ac,tid=0x5b4] Variable %DateTime% = 
"2015-04-02 12:26:57"

2015-04-02 08:26:57.773 [pid=0x5ac,tid=0x5b4] Variable %MacAddress% = 
"44-b6-20-52-41-53"

2015-04-02 08:26:57.789 [pid=0x5ac,tid=0x5b4] Variable %TempDir% = 
"C:\Users\shannont\AppData\Local\Temp"

2015-04-02 08:26:57.789 [pid=0x5ac,tid=0x5b4] Variable %WindowsDir% = 
"C:\Windows"

2015-04-02 08:26:57.789 [pid=0x5ac,tid=0x5b4] Variable %SystemDir% = 
"C:\Windows\system32"

2015-04-02 08:26:57.789 [pid=0x5ac,tid=0x5b4] Variable %DomainName% = 
"IM_DOM1"

2015-04-02 08:26:57.789 [pid=0x5ac,tid=0x5b4] Variable 
%ProgramFilesDir% = "C:\Program Files"

2015-04-02 08:26:57.804 [pid=0x5ac,tid=0x5b4] Variable %AppDataDir% = 
"C:\Users\shannont\AppData\Roaming"

2015-04-02 08:26:57.804 [pid=0x5ac,tid=0x5b4] Variable %DesktopDir% = 
"C:\Users\shannont\Desktop"

2015-04-02 08:26:57.804 [pid=0x5ac,tid=0x5b4] Variable %StartMenuDir% 
= "C:\Users\shannont\AppData\Roaming\Microsoft\Windows\Start Menu"

2015-04-02 08:26:57.804 [pid=0x5ac,tid=0x5b4] Variable %ProgramsDir% = 
"C:\Users\shannont\AppData\Roaming\Microsoft\Windows\Start Menu\Programs"

2015-04-02 08:26:57.804 [pid=0x5ac,tid=0x5b4] Variable %StartUpDir% = 
"C:\Users\shannont\AppData\Roaming\Microsoft\Windows\Start 
Menu\Programs\Startup"

2015-04-02 08:26:57.820 [pid=0x5ac,tid=0x5b4] Variable %FavoritesDir% 
= "C:\Users\shannont\Favorites"

2015-04-02 08:26:57.820 [pid=0x5ac,tid=0x5b4] Variable %SendToDir% = 
"C:\Users\shannont\AppData\Roaming\Microsoft\Windows\SendTo"

2015-04-02 08:26:57.820 [pid=0x5ac,tid=0x5b4] Variable 
%RecentDocumentsDir% = 
"C:\Users\shannont\AppData\Roaming\Microsoft\Windows\Recent"

2015-04-02 08:26:57.820 [pid=0x5ac,tid=0x5b4] Variable %NetPlacesDir% 
= "C:\Users\shannont\AppData\Roaming\Microsoft\Windows\Network Shortcuts"

2015-04-02 08:26:57.820 [pid=0x5ac,tid=0x5b4] Variable 
%CommonAppdataDir% = "C:\ProgramData"

2015-04-02 08:26:57.835 [pid=0x5ac,tid=0x5b4] Variable 
%CommonDesktopDir% = "C:\Users\Public\Desktop"

2015-04-02 08:26:57.835 [pid=0x5ac,tid=0x5b4] Variable 
%CommonStartMenuDir% = "C:\ProgramData\Microsoft\Windows\Start Menu"

2015-04-02 08:26:57.835 [pid=0x5ac,tid=0x5b4] Variable 
%CommonProgramsDir% = "C:\ProgramData\Microsoft\Windows\Start 
Menu\Programs"

2015-04-02 08:26:57.835 [pid=0x5ac,tid=0x5b4] Variable 
%CommonStartUpDir% = "C:\ProgramData\Microsoft\Windows\Start 
Menu\Programs\Startup"

2015-04-02 08:26:57.835 [pid=0x5ac,tid=0x5b4] Variable 
%CommonFavoritesDir% = "C:\Users\shannont\Favorites"

2015-04-02 08:26:57.851 [pid=0x5ac,tid=0x5b4] Variable 
%CurrentProcessId% = "1452"

2015-04-02 08:26:57.851 [pid=0x5ac,tid=0x5b4] Variable 
%CurrentThreadId% = "1460"

2015-04-02 08:26:57.851 [pid=0x5ac,tid=0x5b4] Variable 
%GroupPolicyVersion% = "6.1.7601.17514"

2015-04-02 08:26:57.851 [pid=0x5ac,tid=0x5b4] Variable %TraceFile% = 
"C:\ProgramData\GroupPolicy\Preference\Trace\User.log"

2015-04-02 08:26:57.851 [pid=0x5ac,tid=0x5b4] Variable %LastError% = 
"0x00000000"

2015-04-02 08:26:57.867 [pid=0x5ac,tid=0x5b4] Variable %LastErrorText% 
= "The operation completed successfully."

2015-04-02 08:26:57.867 [pid=0x5ac,tid=0x5b4] Variables subsystem 
initialized.

2015-04-02 08:26:57.867 [pid=0x5ac,tid=0x5b4] Set system security context.

2015-04-02 08:26:57.867 [pid=0x5ac,tid=0x5b4] ----- Parameters

2015-04-02 08:26:57.867 [pid=0x5ac,tid=0x5b4] CSE GUID : 
{5794DAFD-BE60-433f-88A2-1A31939AC01F}

2015-04-02 08:26:57.867 [pid=0x5ac,tid=0x5b4] Flags : (   ) 
GPO_INFO_FLAG_MACHINE - Apply machine policy rather than user policy

2015-04-02 08:26:57.882 [pid=0x5ac,tid=0x5b4]         (   ) 
GPO_INFO_FLAG_BACKGROUND - Background refresh of policy (ok to do slow 
stuff)

2015-04-02 08:26:57.882 [pid=0x5ac,tid=0x5b4]         (   ) 
GPO_INFO_FLAG_SLOWLINK - Policy is being applied across a slow link

2015-04-02 08:26:57.882 [pid=0x5ac,tid=0x5b4]         (   ) 
GPO_INFO_FLAG_VERBOSE - Verbose output to the eventlog

2015-04-02 08:26:57.882 [pid=0x5ac,tid=0x5b4]         (   ) 
GPO_INFO_FLAG_NOCHANGES - No changes were detected to the Group Policy 
Objects

2015-04-02 08:26:57.882 [pid=0x5ac,tid=0x5b4]         (   ) 
GPO_INFO_FLAG_LINKTRANSITION - A change in link speed was detected 
between previous policy application and current policy application

2015-04-02 08:26:57.898 [pid=0x5ac,tid=0x5b4]         (   ) 
GPO_INFO_FLAG_LOGRSOP_TRANSITION - A change in RSoP logging was 
detected between the application of the previous policy and the 
application of the current policy.

2015-04-02 08:26:57.898 [pid=0x5ac,tid=0x5b4]         (   ) 
GPO_INFO_FLAG_FORCED_REFRESH - Forced Refresh is being applied. redo 
policies.

2015-04-02 08:26:57.898 [pid=0x5ac,tid=0x5b4]         (   ) 
GPO_INFO_FLAG_SAFEMODE_BOOT - windows safe mode boot flag

2015-04-02 08:26:57.898 [pid=0x5ac,tid=0x5b4]         (   ) 
GPO_INFO_FLAG_ASYNC_FOREGROUND - Asynchronous foreground refresh of policy

2015-04-02 08:26:57.898 [pid=0x5ac,tid=0x5b4] Token (computer or user 
SID): S-1-5-21-1859328528-735127382-1221738049-10987

2015-04-02 08:26:57.913 [pid=0x5ac,tid=0x5b4] Abort Flag : Yes 
(0x003079a0)

2015-04-02 08:26:57.913 [pid=0x5ac,tid=0x5b4] HKey Root : Yes (0x00000178)

2015-04-02 08:26:57.913 [pid=0x5ac,tid=0x5b4] Deleted GPO List : No

2015-04-02 08:26:57.913 [pid=0x5ac,tid=0x5b4] Changed GPO List : Yes

2015-04-02 08:26:57.913 [pid=0x5ac,tid=0x5b4] Asynchronous Processing 
: Yes

2015-04-02 08:26:57.929 [pid=0x5ac,tid=0x5b4] Status Callback : Yes 
(0x739b2448)

2015-04-02 08:26:57.929 [pid=0x5ac,tid=0x5b4] WMI namespace : Yes 
(0x00a4e0cc)

2015-04-02 08:26:57.929 [pid=0x5ac,tid=0x5b4] RSoP Status : Yes 
(0x015df864)

2015-04-02 08:26:57.929 [pid=0x5ac,tid=0x5b4] Planning Mode Site : (none)

2015-04-02 08:26:57.929 [pid=0x5ac,tid=0x5b4] Computer Target : No 
(0x00000000)

2015-04-02 08:26:57.945 [pid=0x5ac,tid=0x5b4] User Target : No 
(0x00000000)

2015-04-02 08:26:57.945 [pid=0x5ac,tid=0x5b4] Calculated session 
relevance.

2015-04-02 08:26:57.945 [pid=0x5ac,tid=0x5b4] Completed CSE 
pre-processing.

2015-04-02 08:26:57.945 [pid=0x5ac,tid=0x5b4] Calculated list 
relevance. [SUCCEEDED(S_FALSE)]

2015-04-02 08:26:57.945 [pid=0x5ac,tid=0x5b4] Deleted GPO list is not 
relevant to the CSE.

2015-04-02 08:26:57.960 [pid=0x5ac,tid=0x5b4] Calculated list relevance.

2015-04-02 08:26:57.960 [pid=0x5ac,tid=0x5b4] Planning mode not detected.

2015-04-02 08:26:57.960 [pid=0x5ac,tid=0x5b4] Processing changed list.

2015-04-02 08:26:57.960 [pid=0x5ac,tid=0x5b4] Processing user policy.

2015-04-02 08:26:57.960 [pid=0x5ac,tid=0x5b4] Got WMI namespace for 
logging mode.

2015-04-02 08:26:57.960 [pid=0x5ac,tid=0x5b4] Completed get GPO list.

2015-04-02 08:26:57.976 [pid=0x5ac,tid=0x5b4] Initialized internal 
RSoP storage.

2015-04-02 08:26:57.976 [pid=0x5ac,tid=0x5b4] Completed GPO list 
pre-processing.

2015-04-02 08:26:57.976 [pid=0x5ac,tid=0x5b4] ----- Changed - 0

2015-04-02 08:26:57.976 [pid=0x5ac,tid=0x5b4] Options : (   ) 
GPO_FLAG_DISABLE - This GPO is disabled.

2015-04-02 08:26:57.976 [pid=0x5ac,tid=0x5b4]           (   ) 
GPO_FLAG_FORCE - Do not override the settings in this GPO with 
settings in a subsequent GPO.

2015-04-02 08:26:57.991 [pid=0x5ac,tid=0x5b4] Options (raw) : 0x00000000

2015-04-02 08:26:57.991 [pid=0x5ac,tid=0x5b4] Version : 1638425 
(0x00190019)

2015-04-02 08:26:57.991 [pid=0x5ac,tid=0x5b4] GPC : 
LDAP://CN=User,cn={41EAE7F3-5D61-4775-9B58-4D34ED47C834},cn=policies,cn=system,DC=IMCU,DC=local

2015-04-02 08:26:57.991 [pid=0x5ac,tid=0x5b4] GPT : 
\\IMCU.local\sysvol\IMCU.local\Policies\{41EAE7F3-5D61-4775-9B58-4D34ED47C834}\User 
<file:///%5C%5CIMCU.local%5Csysvol%5CIMCU.local%5CPolicies%5C%7b41EAE7F3-5D61-4775-9B58-4D34ED47C834%7d%5CUser>

2015-04-02 08:26:57.991 [pid=0x5ac,tid=0x5b4] GPO Display Name : 
Mapped Drives Branch 05

2015-04-02 08:26:57.991 [pid=0x5ac,tid=0x5b4] GPO Name : 
{41EAE7F3-5D61-4775-9B58-4D34ED47C834}

2015-04-02 08:26:58.007 [pid=0x5ac,tid=0x5b4] GPO Link : (   ) 
GPLinkUnknown - No link information is available.

2015-04-02 08:26:58.007 [pid=0x5ac,tid=0x5b4]            (   ) 
GPLinkMachine - The GPO is linked to a computer (local or remote).

2015-04-02 08:26:58.007 [pid=0x5ac,tid=0x5b4]            (   ) 
GPLinkSite - The GPO is linked to a site.

2015-04-02 08:26:58.007 [pid=0x5ac,tid=0x5b4]            (   ) 
GPLinkDomain - The GPO is linked to a domain.

2015-04-02 08:26:58.007 [pid=0x5ac,tid=0x5b4]            ( X ) 
GPLinkOrganizationalUnit - The GPO is linked to an organizational unit.

2015-04-02 08:26:58.007 [pid=0x5ac,tid=0x5b4]            (   ) GP Link 
Error

2015-04-02 08:26:58.023 [pid=0x5ac,tid=0x5b4] lParam : 0x00000000

2015-04-02 08:26:58.023 [pid=0x5ac,tid=0x5b4] Prev GPO : No

2015-04-02 08:26:58.023 [pid=0x5ac,tid=0x5b4] Next GPO : Yes

2015-04-02 08:26:58.023 [pid=0x5ac,tid=0x5b4] Extensions : 
[{00000000-0000-0000-0000-000000000000}{2EA1A81B-48E5-45E9-8BB7-A6E3AC170006}][{5794DAFD-BE60-433F-88A2-1A31939AC01F}{2EA1A81B-48E5-45E9-8BB7-A6E3AC170006}]

2015-04-02 08:26:58.023 [pid=0x5ac,tid=0x5b4] lParam2 : 0x0128f1fc

2015-04-02 08:26:58.038 [pid=0x5ac,tid=0x5b4] Link : LDAP://OU=Branch 
05 - Beech Grove,DC=IMCU,DC=local

2015-04-02 08:26:58.038 [pid=0x5ac,tid=0x5b4] Variable %GPHPATH% = 
"C:\ProgramData\Microsoft\Group 
Policy\History\{41EAE7F3-5D61-4775-9B58-4D34ED47C834}\S-1-5-21-1859328528-735127382-1221738049-10987"

2015-04-02 08:26:58.038 [pid=0x5ac,tid=0x5b4] Completed get GPH path.

2015-04-02 08:26:58.038 [pid=0x5ac,tid=0x5b4] Completed set extensions.

2015-04-02 08:26:58.038 [pid=0x5ac,tid=0x5b4] Completed get GPO is 
relevant.

2015-04-02 08:26:58.038 [pid=0x5ac,tid=0x5b4] Variable %GPTPATH% = 
"\\IMCU.local\sysvol\IMCU.local\Policies\{41EAE7F3-5D61-4775-9B58-4D34ED47C834}\User 
<file:///%5C%5CIMCU.local%5Csysvol%5CIMCU.local%5CPolicies%5C%7b41EAE7F3-5D61-4775-9B58-4D34ED47C834%7d%5CUser>"

2015-04-02 08:26:58.054 [pid=0x5ac,tid=0x5b4] Completed get GPT path.

2015-04-02 08:26:58.054 [pid=0x5ac,tid=0x5b4] Completed RSoP init.

2015-04-02 08:26:58.054 [pid=0x5ac,tid=0x5b4] Completed get next GPO.

2015-04-02 08:26:58.054 [pid=0x5ac,tid=0x5b4] Completed check GPO 
license usage.

2015-04-02 08:26:58.054 [pid=0x5ac,tid=0x5b4] Completed GPO 
pre-processing.

2015-04-02 08:26:58.069 [pid=0x5ac,tid=0x5b4] Started removing policy.

2015-04-02 08:26:58.069 [pid=0x5ac,tid=0x5b4] Read GPH data file.

2015-04-02 08:26:58.069 [pid=0x5ac,tid=0x5b4] Completed parse of GPH XML.

2015-04-02 08:26:58.085 [pid=0x5ac,tid=0x5b4] Completed get tree root.

2015-04-02 08:26:58.085 [pid=0x5ac,tid=0x5b4] Deleted GPH data file.

2015-04-02 08:26:58.085 [pid=0x5ac,tid=0x5b4] Started package execution.

2015-04-02 08:26:58.085 [pid=0x5ac,tid=0x5b4] Set package timestamp 
variable (2015-04-02 12:26:57).

2015-04-02 08:26:58.085 [pid=0x5ac,tid=0x5b4] Starting class <Drives>.

2015-04-02 08:26:58.101 [pid=0x5ac,tid=0x5b4] RunOnce value created 
[SUCCEEDED(S_FALSE)]

2015-04-02 08:26:58.101 [pid=0x5ac,tid=0x5b4] Handle Children.

2015-04-02 08:26:58.101 [pid=0x5ac,tid=0x5b4] 
{935D1B74-9CB8-4e3c-9914-7DD559B7A417}

2015-04-02 08:26:58.101 [pid=0x5ac,tid=0x5b4] Starting class <Drive> - Q:.

2015-04-02 08:26:58.101 [pid=0x5ac,tid=0x5b4] Policy is not flagged 
for removal.

2015-04-02 08:26:58.116 [pid=0x5ac,tid=0x5b4] Completed class <Drive> 
- Q:.

2015-04-02 08:26:58.116 [pid=0x5ac,tid=0x5b4] 
{935D1B74-9CB8-4e3c-9914-7DD559B7A417}

2015-04-02 08:26:58.116 [pid=0x5ac,tid=0x5b4] Starting class <Drive> - G:.

2015-04-02 08:26:58.116 [pid=0x5ac,tid=0x5b4] Policy is not flagged 
for removal.

2015-04-02 08:26:58.116 [pid=0x5ac,tid=0x5b4] Completed class <Drive> 
- G:.

2015-04-02 08:26:58.116 [pid=0x5ac,tid=0x5b4] Completed class <Drives>.

2015-04-02 08:26:58.132 [pid=0x5ac,tid=0x5b4] Completed package execution.

2015-04-02 08:26:58.132 [pid=0x5ac,tid=0x5b4] Completed execution of 
removal package.

2015-04-02 08:26:58.132 [pid=0x5ac,tid=0x5b4] Completed remove GPH.

2015-04-02 08:26:58.132 [pid=0x5ac,tid=0x5b4] Started applying policy.

2015-04-02 08:26:58.132 [pid=0x5ac,tid=0x5b4] Set user security context.

2015-04-02 08:26:58.147 [pid=0x5ac,tid=0x5b4] Opened file.

2015-04-02 08:26:58.147 [pid=0x5ac,tid=0x5b4] Got file size.

2015-04-02 08:26:58.163 [pid=0x5ac,tid=0x5b4] Created file buffer.

2015-04-02 08:26:58.179 [pid=0x5ac,tid=0x5b4] Completed read file data.

2015-04-02 08:26:58.179 [pid=0x5ac,tid=0x5b4] Terminated file buffer.

2015-04-02 08:26:58.179 [pid=0x5ac,tid=0x5b4] Closed file handle.

2015-04-02 08:26:58.179 [pid=0x5ac,tid=0x5b4] Read GPE XML data file 
(824 bytes total).

2015-04-02 08:26:58.179 [pid=0x5ac,tid=0x5b4] Set system security context.

2015-04-02 08:26:58.179 [pid=0x5ac,tid=0x5b4] Completed parse of GPE 
XML data.

2015-04-02 08:26:58.194 [pid=0x5ac,tid=0x5b4] Completed loading of 
package.

2015-04-02 08:26:58.194 [pid=0x5ac,tid=0x5b4] Completed get tree root.

2015-04-02 08:26:58.194 [pid=0x5ac,tid=0x5b4] Started package execution.

2015-04-02 08:26:58.194 [pid=0x5ac,tid=0x5b4] Set package timestamp 
variable (2015-04-02 12:26:57).

2015-04-02 08:26:58.194 [pid=0x5ac,tid=0x5b4] Starting class <Drives>.

2015-04-02 08:26:58.210 [pid=0x5ac,tid=0x5b4] RunOnce value created 
[SUCCEEDED(S_FALSE)]

2015-04-02 08:26:58.210 [pid=0x5ac,tid=0x5b4] Handle Children.

2015-04-02 08:26:58.210 [pid=0x5ac,tid=0x5b4] 
{935D1B74-9CB8-4e3c-9914-7DD559B7A417}

2015-04-02 08:26:58.210 [pid=0x5ac,tid=0x5b4] Starting class <Drive> - Q:.

2015-04-02 08:26:58.210 [pid=0x5ac,tid=0x5b4] Adding child elements to 
RSOP.

2015-04-02 08:26:58.225 [pid=0x5ac,tid=0x5b4] Set user security context.

2015-04-02 08:26:58.600 [pid=0x5ac,tid=0x5b4] Set system security context.

2015-04-02 08:26:58.615 [pid=0x5ac,tid=0x5b4] Properties handled.

2015-04-02 08:26:58.631 [pid=0x5ac,tid=0x5b4] RunOnce value created 
[SUCCEEDED(S_FALSE)]

2015-04-02 08:26:58.631 [pid=0x5ac,tid=0x5b4] Handle Children.

2015-04-02 08:26:58.647 [pid=0x5ac,tid=0x5b4] EVENT : The user 'Q:' 
preference item in the 'Mapped Drives Branch 05 
{41EAE7F3-5D61-4775-9B58-4D34ED47C834}' Group Policy object applied 
successfully.

2015-04-02 08:26:58.662 [pid=0x5ac,tid=0x5b4] Completed class <Drive> 
- Q:.

2015-04-02 08:26:58.662 [pid=0x5ac,tid=0x5b4] 
{935D1B74-9CB8-4e3c-9914-7DD559B7A417}

2015-04-02 08:26:58.662 [pid=0x5ac,tid=0x5b4] Starting class <Drive> - G:.

2015-04-02 08:26:58.678 [pid=0x5ac,tid=0x5b4] Adding child elements to 
RSOP.

2015-04-02 08:26:58.678 [pid=0x5ac,tid=0x5b4] Set user security context.

2015-04-02 08:26:58.818 [pid=0x5ac,tid=0x5b4] Set system security context.

2015-04-02 08:26:58.834 [pid=0x5ac,tid=0x5b4] Properties handled.

2015-04-02 08:26:58.849 [pid=0x5ac,tid=0x5b4] RunOnce value created 
[SUCCEEDED(S_FALSE)]

2015-04-02 08:26:58.865 [pid=0x5ac,tid=0x5b4] Handle Children.

2015-04-02 08:26:58.881 [pid=0x5ac,tid=0x5b4] EVENT : The user 'G:' 
preference item in the 'Mapped Drives Branch 05 
{41EAE7F3-5D61-4775-9B58-4D34ED47C834}' Group Policy object applied 
successfully.

2015-04-02 08:26:58.896 [pid=0x5ac,tid=0x5b4] Completed class <Drive> 
- G:.

2015-04-02 08:26:58.912 [pid=0x5ac,tid=0x5b4] Completed class <Drives>.

2015-04-02 08:26:58.912 [pid=0x5ac,tid=0x5b4] Completed package execution.

2015-04-02 08:26:58.927 [pid=0x5ac,tid=0x5b4] Completed execution of 
apply package.

2015-04-02 08:26:58.943 [pid=0x5ac,tid=0x5b4] Update GPH : 
apmCreateFoldersEx

2015-04-02 08:26:58.959 [pid=0x5ac,tid=0x5b4] Update GPH : 
xmlRemovalPackage

2015-04-02 08:26:58.974 [pid=0x5ac,tid=0x5b4] Update GPH : apmWriteFile

2015-04-02 08:26:58.974 [pid=0x5ac,tid=0x5b4] Updated GPH.

2015-04-02 08:26:58.990 [pid=0x5ac,tid=0x5b4] Completed apply GPO.

2015-04-02 08:26:58.990 [pid=0x5ac,tid=0x5b4] Completed GPO 
post-processing.

2015-04-02 08:26:59.005 [pid=0x5ac,tid=0x5b4] ----- Changed - 1

2015-04-02 08:26:59.005 [pid=0x5ac,tid=0x5b4] Options : (   ) 
GPO_FLAG_DISABLE - This GPO is disabled.

2015-04-02 08:26:59.021 [pid=0x5ac,tid=0x5b4]           (   ) 
GPO_FLAG_FORCE - Do not override the settings in this GPO with 
settings in a subsequent GPO.

2015-04-02 08:26:59.021 [pid=0x5ac,tid=0x5b4] Options (raw) : 0x00000000

2015-04-02 08:26:59.021 [pid=0x5ac,tid=0x5b4] Version : 720907 
(0x000b000b)

2015-04-02 08:26:59.037 [pid=0x5ac,tid=0x5b4] GPC : 
LDAP://CN=User,cn={E000461B-9DE3-47A6-8966-1A85F18FDC1D},cn=policies,cn=system,DC=IMCU,DC=local

2015-04-02 08:26:59.037 [pid=0x5ac,tid=0x5b4] GPT : 
\\IMCU.local\sysvol\IMCU.local\Policies\{E000461B-9DE3-47A6-8966-1A85F18FDC1D}\User

2015-04-02 08:26:59.052 [pid=0x5ac,tid=0x5b4] GPO Display Name : 
Mapped Drive EDCServer

2015-04-02 08:26:59.052 [pid=0x5ac,tid=0x5b4] GPO Name : 
{E000461B-9DE3-47A6-8966-1A85F18FDC1D}

2015-04-02 08:26:59.068 [pid=0x5ac,tid=0x5b4] GPO Link : (   ) 
GPLinkUnknown - No link information is available.

2015-04-02 08:26:59.068 [pid=0x5ac,tid=0x5b4]            (   ) 
GPLinkMachine - The GPO is linked to a computer (local or remote).

2015-04-02 08:26:59.083 [pid=0x5ac,tid=0x5b4]            (   ) 
GPLinkSite - The GPO is linked to a site.

2015-04-02 08:26:59.083 [pid=0x5ac,tid=0x5b4]            (   ) 
GPLinkDomain - The GPO is linked to a domain.

2015-04-02 08:26:59.099 [pid=0x5ac,tid=0x5b4]            ( X ) 
GPLinkOrganizationalUnit - The GPO is linked to an organizational unit.

2015-04-02 08:26:59.099 [pid=0x5ac,tid=0x5b4]            (   ) GP Link 
Error

2015-04-02 08:26:59.099 [pid=0x5ac,tid=0x5b4] lParam : 0x00000000

2015-04-02 08:26:59.099 [pid=0x5ac,tid=0x5b4] Prev GPO : Yes

2015-04-02 08:26:59.115 [pid=0x5ac,tid=0x5b4] Next GPO : No

2015-04-02 08:26:59.115 [pid=0x5ac,tid=0x5b4] Extensions : 
[{00000000-0000-0000-0000-000000000000}{2EA1A81B-48E5-45E9-8BB7-A6E3AC170006}][{5794DAFD-BE60-433F-88A2-1A31939AC01F}{2EA1A81B-48E5-45E9-8BB7-A6E3AC170006}]

2015-04-02 08:26:59.115 [pid=0x5ac,tid=0x5b4] lParam2 : 0x0128f5dc

2015-04-02 08:26:59.115 [pid=0x5ac,tid=0x5b4] Link : LDAP://OU=Branch 
05 - Beech Grove,DC=IMCU,DC=local

2015-04-02 08:26:59.130 [pid=0x5ac,tid=0x5b4] Variable %GPHPATH% = 
"C:\ProgramData\Microsoft\Group 
Policy\History\{E000461B-9DE3-47A6-8966-1A85F18FDC1D}\S-1-5-21-1859328528-735127382-1221738049-10987"

2015-04-02 08:26:59.130 [pid=0x5ac,tid=0x5b4] Completed get GPH path.

2015-04-02 08:26:59.130 [pid=0x5ac,tid=0x5b4] Completed set extensions.

2015-04-02 08:26:59.130 [pid=0x5ac,tid=0x5b4] Completed get GPO is 
relevant.

2015-04-02 08:26:59.130 [pid=0x5ac,tid=0x5b4] Variable %GPTPATH% = 
"\\IMCU.local\sysvol\IMCU.local\Policies\{E000461B-9DE3-47A6-8966-1A85F18FDC1D}\User"

2015-04-02 08:26:59.146 [pid=0x5ac,tid=0x5b4] Completed get GPT path.

2015-04-02 08:26:59.146 [pid=0x5ac,tid=0x5b4] Completed RSoP init.

2015-04-02 08:26:59.146 [pid=0x5ac,tid=0x5b4] Completed get next GPO.

2015-04-02 08:26:59.146 [pid=0x5ac,tid=0x5b4] Completed check GPO 
license usage.

2015-04-02 08:26:59.146 [pid=0x5ac,tid=0x5b4] Completed GPO 
pre-processing.

2015-04-02 08:26:59.146 [pid=0x5ac,tid=0x5b4] Started removing policy.

2015-04-02 08:26:59.161 [pid=0x5ac,tid=0x5b4] Read GPH data file.

2015-04-02 08:26:59.161 [pid=0x5ac,tid=0x5b4] Completed parse of GPH XML.

2015-04-02 08:26:59.161 [pid=0x5ac,tid=0x5b4] Completed get tree root.

2015-04-02 08:26:59.161 [pid=0x5ac,tid=0x5b4] Deleted GPH data file.

2015-04-02 08:26:59.177 [pid=0x5ac,tid=0x5b4] Started package execution.

2015-04-02 08:26:59.177 [pid=0x5ac,tid=0x5b4] Set package timestamp 
variable (2015-04-02 12:26:57).

2015-04-02 08:26:59.177 [pid=0x5ac,tid=0x5b4] Starting class <Drives>.

2015-04-02 08:26:59.177 [pid=0x5ac,tid=0x5b4] RunOnce value created 
[SUCCEEDED(S_FALSE)]

2015-04-02 08:26:59.177 [pid=0x5ac,tid=0x5b4] Handle Children.

2015-04-02 08:26:59.177 [pid=0x5ac,tid=0x5b4] 
{935D1B74-9CB8-4e3c-9914-7DD559B7A417}

2015-04-02 08:26:59.193 [pid=0x5ac,tid=0x5b4] Starting class <Drive> - T:.

2015-04-02 08:26:59.193 [pid=0x5ac,tid=0x5b4] Policy is not flagged 
for removal.

2015-04-02 08:26:59.193 [pid=0x5ac,tid=0x5b4] Completed class <Drive> 
- T:.

2015-04-02 08:26:59.193 [pid=0x5ac,tid=0x5b4] Completed class <Drives>.

2015-04-02 08:26:59.193 [pid=0x5ac,tid=0x5b4] Completed package execution.

2015-04-02 08:26:59.193 [pid=0x5ac,tid=0x5b4] Completed execution of 
removal package.

2015-04-02 08:26:59.208 [pid=0x5ac,tid=0x5b4] Completed remove GPH.

2015-04-02 08:26:59.208 [pid=0x5ac,tid=0x5b4] Started applying policy.

2015-04-02 08:26:59.208 [pid=0x5ac,tid=0x5b4] Set user security context.

2015-04-02 08:26:59.224 [pid=0x5ac,tid=0x5b4] Opened file.

2015-04-02 08:26:59.224 [pid=0x5ac,tid=0x5b4] Got file size.

2015-04-02 08:26:59.224 [pid=0x5ac,tid=0x5b4] Created file buffer.

2015-04-02 08:26:59.239 [pid=0x5ac,tid=0x5b4] Completed read file data.

2015-04-02 08:26:59.239 [pid=0x5ac,tid=0x5b4] Terminated file buffer.

2015-04-02 08:26:59.239 [pid=0x5ac,tid=0x5b4] Closed file handle.

2015-04-02 08:26:59.239 [pid=0x5ac,tid=0x5b4] Read GPE XML data file 
(464 bytes total).

2015-04-02 08:26:59.255 [pid=0x5ac,tid=0x5b4] Set system security context.

2015-04-02 08:26:59.255 [pid=0x5ac,tid=0x5b4] Completed parse of GPE 
XML data.

2015-04-02 08:26:59.255 [pid=0x5ac,tid=0x5b4] Completed loading of 
package.

2015-04-02 08:26:59.255 [pid=0x5ac,tid=0x5b4] Completed get tree root.

2015-04-02 08:26:59.255 [pid=0x5ac,tid=0x5b4] Started package execution.

2015-04-02 08:26:59.255 [pid=0x5ac,tid=0x5b4] Set package timestamp 
variable (2015-04-02 12:26:57).

2015-04-02 08:26:59.271 [pid=0x5ac,tid=0x5b4] Starting class <Drives>.

2015-04-02 08:26:59.271 [pid=0x5ac,tid=0x5b4] RunOnce value created 
[SUCCEEDED(S_FALSE)]

2015-04-02 08:26:59.271 [pid=0x5ac,tid=0x5b4] Handle Children.

2015-04-02 08:26:59.271 [pid=0x5ac,tid=0x5b4] 
{935D1B74-9CB8-4e3c-9914-7DD559B7A417}

2015-04-02 08:26:59.271 [pid=0x5ac,tid=0x5b4] Starting class <Drive> - T:.

2015-04-02 08:26:59.271 [pid=0x5ac,tid=0x5b4] Adding child elements to 
RSOP.

2015-04-02 08:26:59.286 [pid=0x5ac,tid=0x5b4] Set user security context.

2015-04-02 08:26:59.551 [pid=0x5ac,tid=0x5b4] Set system security context.

2015-04-02 08:26:59.567 [pid=0x5ac,tid=0x5b4] Properties handled.

2015-04-02 08:26:59.583 [pid=0x5ac,tid=0x5b4] RunOnce value created 
[SUCCEEDED(S_FALSE)]

2015-04-02 08:26:59.598 [pid=0x5ac,tid=0x5b4] Handle Children.

2015-04-02 08:26:59.614 [pid=0x5ac,tid=0x5b4] EVENT : The user 'T:' 
preference item in the 'Mapped Drive EDCServer 
{E000461B-9DE3-47A6-8966-1A85F18FDC1D}' Group Policy object applied 
successfully.

2015-04-02 08:26:59.614 [pid=0x5ac,tid=0x5b4] Completed class <Drive> 
- T:.

2015-04-02 08:26:59.614 [pid=0x5ac,tid=0x5b4] Completed class <Drives>.

2015-04-02 08:26:59.629 [pid=0x5ac,tid=0x5b4] Completed package execution.

2015-04-02 08:26:59.629 [pid=0x5ac,tid=0x5b4] Completed execution of 
apply package.

2015-04-02 08:26:59.645 [pid=0x5ac,tid=0x5b4] Update GPH : 
apmCreateFoldersEx

2015-04-02 08:26:59.661 [pid=0x5ac,tid=0x5b4] Update GPH : 
xmlRemovalPackage

2015-04-02 08:26:59.661 [pid=0x5ac,tid=0x5b4] Update GPH : apmWriteFile

2015-04-02 08:26:59.661 [pid=0x5ac,tid=0x5b4] Updated GPH.

2015-04-02 08:26:59.661 [pid=0x5ac,tid=0x5b4] Completed apply GPO.

2015-04-02 08:26:59.676 [pid=0x5ac,tid=0x5b4] Completed GPO 
post-processing.

2015-04-02 08:26:59.676 [pid=0x5ac,tid=0x5b4] Completed get next GPO. 
[SUCCEEDED(S_FALSE)]

2015-04-02 08:26:59.676 [pid=0x5ac,tid=0x5b4] Completed calculate 
precedence.

2015-04-02 08:26:59.676 [pid=0x5ac,tid=0x5b4] Completed get RSoP class.

2015-04-02 08:26:59.692 [pid=0x5ac,tid=0x5b4] Completed initialize 
namespace.

2015-04-02 08:26:59.692 [pid=0x5ac,tid=0x5b4] WQL : SELECT * FROM 
RSOP_PolmkrSetting WHERE polmkrBaseCseGuid = 
"{5794DAFD-BE60-433f-88A2-1A31939AC01F}"

2015-04-02 08:26:59.770 [pid=0x5ac,tid=0x5b4] Executed WQL query.

2015-04-02 08:26:59.801 [pid=0x5ac,tid=0x5b4] Purged 3 old RSoP entries.

2015-04-02 08:26:59.801 [pid=0x5ac,tid=0x5b4] Logging 3 new RSoP entries.

2015-04-02 08:26:59.817 [pid=0x5ac,tid=0x5b4] RSoP Entry 0

2015-04-02 08:26:59.817 [pid=0x5ac,tid=0x5b4]  <INSTANCE 
CLASSNAME="RSOP_PolmkrDriveSetting">

<PROPERTY NAME="name">

<VALUE>Q:</VALUE></PROPERTY>

<PROPERTY NAME="GPOID">

<VALUE>cn={41EAE7F3-5D61-4775-9B58-4D34ED47C834},cn=policies,cn=system,DC=IMCU,DC=local</VALUE></PROPERTY>

<PROPERTY NAME="SOMID">

<VALUE>OU=Branch 05 - Beech Grove,DC=IMCU,DC=local</VALUE></PROPERTY>

<PROPERTY NAME="polmkrBaseGpeGuid">

<VALUE>{2EA1A81B-48E5-45E9-8BB7-A6E3AC170006}</VALUE></PROPERTY>

<PROPERTY NAME="polmkrBaseCseGuid">

<VALUE>{5794DAFD-BE60-433f-88A2-1A31939AC01F}</VALUE></PROPERTY>

<PROPERTY NAME="polmkrBaseGpoDisplayName">

<VALUE>Mapped Drives Branch 05</VALUE></PROPERTY>

<PROPERTY NAME="polmkrBaseGpoGuid">

<VALUE>{41EAE7F3-5D61-4775-9B58-4D34ED47C834}</VALUE></PROPERTY>

<PROPERTY NAME="id">

<VALUE>{60D4766B-063F-41EF-A1E5-BBB0110A351F}</VALUE></PROPERTY>

<PROPERTY NAME="precedence" CHANGETYPE="3">

<VALUE>1</VALUE></PROPERTY>

<PROPERTY NAME="creationTime">

<VALUE>20150402122658.210000+000</VALUE></PROPERTY>

<INSTANCE CLASSNAME="RSOP_PolmkrDriveItem">

<PROPERTY NAME="polmkrClassClsid">

<VALUE>{935D1B74-9CB8-4e3c-9914-7DD559B7A417}</VALUE></PROPERTY>

<PROPERTY NAME="polmkrClassName">

<VALUE>Q:</VALUE></PROPERTY>

<PROPERTY NAME="polmkrClassStatus">

<VALUE>Q:</VALUE></PROPERTY>

<PROPERTY NAME="polmkrClassImage">

<VALUE>2</VALUE></PROPERTY>

<PROPERTY NAME="polmkrClassChanged">

<VALUE>2015-04-02 11:09:03</VALUE></PROPERTY>

<PROPERTY NAME="polmkrClassUid">

<VALUE>{1FB3B5C5-DB7E-441F-948E-FDC6DDC262C7}</VALUE></PROPERTY>

<PROPERTY NAME="polmkrClassBypassErrors">

<VALUE>1</VALUE></PROPERTY>

<PROPERTY NAME="polmkrAction">

<VALUE>U</VALUE></PROPERTY>

<PROPERTY NAME="polmkrThisDrive">

<VALUE>SHOW</VALUE></PROPERTY>

<PROPERTY NAME="polmkrAllDrives">

<VALUE>SHOW</VALUE></PROPERTY>

<PROPERTY NAME="polmkrUserName">

<VALUE></VALUE></PROPERTY>

<PROPERTY NAME="polmkrPath">

<VALUE>\\10.0.100.5\cube</VALUE></PROPERTY>

<PROPERTY NAME="polmkrLabel">

<VALUE>SYMITAR FILES</VALUE></PROPERTY>

<PROPERTY NAME="polmkrPersistent">

<VALUE>1</VALUE></PROPERTY>

<PROPERTY NAME="polmkrUseLetter">

<VALUE>1</VALUE></PROPERTY>

<PROPERTY NAME="polmkrLetter">

<VALUE>Q</VALUE></PROPERTY>

<PROPERTY NAME="polmkrActionResolved">

<VALUE>U</VALUE></PROPERTY>

<PROPERTY NAME="polmkrLetterResolved">

<VALUE>q:</VALUE></PROPERTY>

<PROPERTY NAME="polmkrClassResultCodeValue">

<VALUE>0</VALUE></PROPERTY>

<PROPERTY NAME="polmkrClassResultCode">

<VALUE>0x00000000</VALUE></PROPERTY>

<PROPERTY NAME="polmkrClassResultText">

<VALUE>The operation completed successfully.</VALUE></PROPERTY></INSTANCE>

<PROPERTY NAME="polmkrBaseHash">

<VALUE>RSOP_PolmkrDriveSetting.polmkrLetter=&quot;Q&quot;</VALUE></PROPERTY></INSTANCE>

2015-04-02 08:26:59.848 [pid=0x5ac,tid=0x5b4] RSoP Entry 1

2015-04-02 08:26:59.848 [pid=0x5ac,tid=0x5b4]  <INSTANCE 
CLASSNAME="RSOP_PolmkrDriveSetting">

<PROPERTY NAME="name">

<VALUE>G:</VALUE></PROPERTY>

<PROPERTY NAME="GPOID">

<VALUE>cn={41EAE7F3-5D61-4775-9B58-4D34ED47C834},cn=policies,cn=system,DC=IMCU,DC=local</VALUE></PROPERTY>

<PROPERTY NAME="SOMID">

<VALUE>OU=Branch 05 - Beech Grove,DC=IMCU,DC=local</VALUE></PROPERTY>

<PROPERTY NAME="polmkrBaseGpeGuid">

<VALUE>{2EA1A81B-48E5-45E9-8BB7-A6E3AC170006}</VALUE></PROPERTY>

<PROPERTY NAME="polmkrBaseCseGuid">

<VALUE>{5794DAFD-BE60-433f-88A2-1A31939AC01F}</VALUE></PROPERTY>

<PROPERTY NAME="polmkrBaseGpoDisplayName">

<VALUE>Mapped Drives Branch 05</VALUE></PROPERTY>

<PROPERTY NAME="polmkrBaseGpoGuid">

<VALUE>{41EAE7F3-5D61-4775-9B58-4D34ED47C834}</VALUE></PROPERTY>

<PROPERTY NAME="id">

<VALUE>{7912E1C7-953E-4EBC-94C5-C4BA211E0B94}</VALUE></PROPERTY>

<PROPERTY NAME="precedence" CHANGETYPE="3">

<VALUE>1</VALUE></PROPERTY>

<PROPERTY NAME="creationTime">

<VALUE>20150402122658.678000+000</VALUE></PROPERTY>

<INSTANCE CLASSNAME="RSOP_PolmkrDriveItem">

<PROPERTY NAME="polmkrClassClsid">

<VALUE>{935D1B74-9CB8-4e3c-9914-7DD559B7A417}</VALUE></PROPERTY>

<PROPERTY NAME="polmkrClassName">

<VALUE>G:</VALUE></PROPERTY>

<PROPERTY NAME="polmkrClassStatus">

<VALUE>G:</VALUE></PROPERTY>

<PROPERTY NAME="polmkrClassImage">

<VALUE>2</VALUE></PROPERTY>

<PROPERTY NAME="polmkrClassChanged">

<VALUE>2015-04-02 11:08:54</VALUE></PROPERTY>

<PROPERTY NAME="polmkrClassUid">

<VALUE>{14F3B417-E59B-4483-BA92-9707C9258377}</VALUE></PROPERTY>

<PROPERTY NAME="polmkrClassBypassErrors">

<VALUE>1</VALUE></PROPERTY>

<PROPERTY NAME="polmkrAction">

<VALUE>U</VALUE></PROPERTY>

<PROPERTY NAME="polmkrThisDrive">

<VALUE>SHOW</VALUE></PROPERTY>

<PROPERTY NAME="polmkrAllDrives">

<VALUE>SHOW</VALUE></PROPERTY>

<PROPERTY NAME="polmkrUserName">

<VALUE></VALUE></PROPERTY>

<PROPERTY NAME="polmkrPath">

<VALUE>\\10.0.100.5\FIles</VALUE></PROPERTY>

<PROPERTY NAME="polmkrLabel">

<VALUE>Installation Files</VALUE></PROPERTY>

<PROPERTY NAME="polmkrPersistent">

<VALUE>1</VALUE></PROPERTY>

<PROPERTY NAME="polmkrUseLetter">

<VALUE>1</VALUE></PROPERTY>

<PROPERTY NAME="polmkrLetter">

<VALUE>G</VALUE></PROPERTY>

<PROPERTY NAME="polmkrActionResolved">

<VALUE>U</VALUE></PROPERTY>

<PROPERTY NAME="polmkrLetterResolved">

<VALUE>g:</VALUE></PROPERTY>

<PROPERTY NAME="polmkrClassResultCodeValue">

<VALUE>0</VALUE></PROPERTY>

<PROPERTY NAME="polmkrClassResultCode">

<VALUE>0x00000000</VALUE></PROPERTY>

<PROPERTY NAME="polmkrClassResultText">

<VALUE>The operation completed successfully.</VALUE></PROPERTY></INSTANCE>

<PROPERTY NAME="polmkrBaseHash">

<VALUE>RSOP_PolmkrDriveSetting.polmkrLetter=&quot;G&quot;</VALUE></PROPERTY></INSTANCE>

2015-04-02 08:26:59.879 [pid=0x5ac,tid=0x5b4] RSoP Entry 2

2015-04-02 08:26:59.879 [pid=0x5ac,tid=0x5b4]  <INSTANCE 
CLASSNAME="RSOP_PolmkrDriveSetting">

<PROPERTY NAME="name">

<VALUE>T:</VALUE></PROPERTY>

<PROPERTY NAME="GPOID">

<VALUE>cn={E000461B-9DE3-47A6-8966-1A85F18FDC1D},cn=policies,cn=system,DC=IMCU,DC=local</VALUE></PROPERTY>

<PROPERTY NAME="SOMID">

<VALUE>OU=Branch 05 - Beech Grove,DC=IMCU,DC=local</VALUE></PROPERTY>

<PROPERTY NAME="polmkrBaseGpeGuid">

<VALUE>{2EA1A81B-48E5-45E9-8BB7-A6E3AC170006}</VALUE></PROPERTY>

<PROPERTY NAME="polmkrBaseCseGuid">

<VALUE>{5794DAFD-BE60-433f-88A2-1A31939AC01F}</VALUE></PROPERTY>

<PROPERTY NAME="polmkrBaseGpoDisplayName">

<VALUE>Mapped Drive EDCServer</VALUE></PROPERTY>

<PROPERTY NAME="polmkrBaseGpoGuid">

<VALUE>{E000461B-9DE3-47A6-8966-1A85F18FDC1D}</VALUE></PROPERTY>

<PROPERTY NAME="id">

<VALUE>{AFDC7C02-72B7-49AB-83C3-7F1D4BD0AACA}</VALUE></PROPERTY>

<PROPERTY NAME="precedence" CHANGETYPE="3">

<VALUE>1</VALUE></PROPERTY>

<PROPERTY NAME="creationTime">

<VALUE>20150402122659.271000+000</VALUE></PROPERTY>

<INSTANCE CLASSNAME="RSOP_PolmkrDriveItem">

<PROPERTY NAME="polmkrClassClsid">

<VALUE>{935D1B74-9CB8-4e3c-9914-7DD559B7A417}</VALUE></PROPERTY>

<PROPERTY NAME="polmkrClassName">

<VALUE>T:</VALUE></PROPERTY>

<PROPERTY NAME="polmkrClassStatus">

<VALUE>T:</VALUE></PROPERTY>

<PROPERTY NAME="polmkrClassImage">

<VALUE>2</VALUE></PROPERTY>

<PROPERTY NAME="polmkrClassChanged">

<VALUE>2015-04-02 11:34:35</VALUE></PROPERTY>

<PROPERTY NAME="polmkrClassUid">

<VALUE>{6D00FE65-5097-42BF-B423-FA8B263DB298}</VALUE></PROPERTY>

<PROPERTY NAME="polmkrClassBypassErrors">

<VALUE>1</VALUE></PROPERTY>

<PROPERTY NAME="polmkrAction">

<VALUE>U</VALUE></PROPERTY>

<PROPERTY NAME="polmkrThisDrive">

<VALUE>SHOW</VALUE></PROPERTY>

<PROPERTY NAME="polmkrAllDrives">

<VALUE>SHOW</VALUE></PROPERTY>

<PROPERTY NAME="polmkrUserName">

<VALUE></VALUE></PROPERTY>

<PROPERTY NAME="polmkrPath">

<VALUE>\\EDCServer\EDC</VALUE></PROPERTY>

<PROPERTY NAME="polmkrLabel">

<VALUE>EDC Compare Files</VALUE></PROPERTY>

<PROPERTY NAME="polmkrPersistent">

<VALUE>1</VALUE></PROPERTY>

<PROPERTY NAME="polmkrUseLetter">

<VALUE>1</VALUE></PROPERTY>

<PROPERTY NAME="polmkrLetter">

<VALUE>T</VALUE></PROPERTY>

<PROPERTY NAME="polmkrActionResolved">

<VALUE>U</VALUE></PROPERTY>

<PROPERTY NAME="polmkrLetterResolved">

<VALUE>t:</VALUE></PROPERTY>

<PROPERTY NAME="polmkrClassResultCodeValue">

<VALUE>0</VALUE></PROPERTY>

<PROPERTY NAME="polmkrClassResultCode">

<VALUE>0x00000000</VALUE></PROPERTY>

<PROPERTY NAME="polmkrClassResultText">

<VALUE>The operation completed successfully.</VALUE></PROPERTY></INSTANCE>

<PROPERTY NAME="polmkrBaseHash">

<VALUE>RSOP_PolmkrDriveSetting.polmkrLetter=&quot;T&quot;</VALUE></PROPERTY></INSTANCE>

2015-04-02 08:26:59.895 [pid=0x5ac,tid=0x5b4] Completed logging of 
RSoP data.

2015-04-02 08:26:59.895 [pid=0x5ac,tid=0x5b4] Completed commit reporting.

2015-04-02 08:26:59.910 [pid=0x5ac,tid=0x5b4] Completed GPO list 
post-processing.

2015-04-02 08:26:59.910 [pid=0x5ac,tid=0x5b4] Completed get GPO list. 
[SUCCEEDED(S_FALSE)]

2015-04-02 08:26:59.926 [pid=0x5ac,tid=0x5b4] Completed CSE 
post-processing.

2015-04-02 08:26:59.926 [pid=0x5ac,tid=0x5b4] User impersonation 
uninitialized.

2015-04-02 08:26:59.957 [pid=0x5ac,tid=0x5b4] Leaving 
ProcessGroupPolicyExDrives() returned 0x00000000

2015-04-02 08:26:59.957 [pid=0x5ac,tid=0x5b4]

2015-04-02 10:34:11.359 [pid=0x5b4,tid=0xfd8] Entering 
ProcessGroupPolicyExDrives()

2015-04-02 10:34:11.421 [pid=0x5b4,tid=0xfd8] 
SOFTWARE\Policies\Microsoft\Windows\Group 
Policy\{5794DAFD-BE60-433f-88A2-1A31939AC01F}

2015-04-02 10:34:11.421 [pid=0x5b4,tid=0xfd8] BackgroundPriorityLevel 
( 0 )

2015-04-02 10:34:11.437 [pid=0x5b4,tid=0xfd8] DisableRSoP ( 0 )

2015-04-02 10:34:11.437 [pid=0x5b4,tid=0xfd8] LogLevel ( 3 )

2015-04-02 10:34:11.437 [pid=0x5b4,tid=0xfd8] Command subsystem 
initialized. [SUCCEEDED(S_FALSE)]

2015-04-02 10:34:11.437 [pid=0x5b4,tid=0xfd8] Set user security context.

2015-04-02 10:34:11.437 [pid=0x5b4,tid=0xfd8] Set system security context.

2015-04-02 10:34:11.452 [pid=0x5b4,tid=0xfd8] User impersonation 
initialized.

2015-04-02 10:34:11.452 [pid=0x5b4,tid=0xfd8] Client context subsystem 
initialized.

2015-04-02 10:34:11.452 [pid=0x5b4,tid=0xfd8] Configuration subsystem 
initialized.

2015-04-02 10:34:11.452 [pid=0x5b4,tid=0xfd8] Licensing subsystem 
initialized.

2015-04-02 10:34:11.452 [pid=0x5b4,tid=0xfd8] Set user security context.

2015-04-02 10:34:11.468 [pid=0x5b4,tid=0xfd8] User information 
initialized.

2015-04-02 10:34:11.530 [pid=0x5b4,tid=0xfd8] Variable %Admin% = 
"10.0.50.205"

2015-04-02 10:34:11.530 [pid=0x5b4,tid=0xfd8] Variable %Branch% = 
"10.0.50.205"

2015-04-02 10:34:11.530 [pid=0x5b4,tid=0xfd8] Variable %ComSpec% = 
"C:\Windows\system32\cmd.exe"

2015-04-02 10:34:11.530 [pid=0x5b4,tid=0xfd8] Variable %DDW% = "10"

2015-04-02 10:34:11.530 [pid=0x5b4,tid=0xfd8] Variable %Doc% = "25_data"

2015-04-02 10:34:11.546 [pid=0x5b4,tid=0xfd8] Variable %EDC% = "10.0.50.4"

2015-04-02 10:34:11.546 [pid=0x5b4,tid=0xfd8] Variable %Exchange% = 
"10.0.50.4"

2015-04-02 10:34:11.546 [pid=0x5b4,tid=0xfd8] Variable 
%FP_NO_HOST_CHECK% = "NO"

2015-04-02 10:34:11.546 [pid=0x5b4,tid=0xfd8] Variable %Institution% = 
"IN01"

2015-04-02 10:34:11.546 [pid=0x5b4,tid=0xfd8] Variable %Location% = 
"Teller X"

2015-04-02 10:34:11.561 [pid=0x5b4,tid=0xfd8] Variable %Mrnode% = 
"XX_tel_XX"

2015-04-02 10:34:11.561 [pid=0x5b4,tid=0xfd8] Variable 
%NUMBER_OF_PROCESSORS% = "8"

2015-04-02 10:34:11.561 [pid=0x5b4,tid=0xfd8] Variable %OS% = "Windows_NT"

2015-04-02 10:34:11.561 [pid=0x5b4,tid=0xfd8] Variable %OTG% = 
"10.0.50.18"

2015-04-02 10:34:11.561 [pid=0x5b4,tid=0xfd8] Variable %Path% = 
"C:\Program Files\Intel\iCLS 
Client\;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program 
Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program 
Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program 
Files\Card Scanning Solutions\SDK"

2015-04-02 10:34:11.577 [pid=0x5b4,tid=0xfd8] Variable %PATHEXT% = 
".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC"

2015-04-02 10:34:11.577 [pid=0x5b4,tid=0xfd8] Variable 
%PROCESSOR_ARCHITECTURE% = "x86"

2015-04-02 10:34:11.577 [pid=0x5b4,tid=0xfd8] Variable 
%PROCESSOR_IDENTIFIER% = "x86 Family 6 Model 60 Stepping 3, GenuineIntel"

2015-04-02 10:34:11.577 [pid=0x5b4,tid=0xfd8] Variable 
%PROCESSOR_LEVEL% = "6"

2015-04-02 10:34:11.577 [pid=0x5b4,tid=0xfd8] Variable 
%PROCESSOR_REVISION% = "3c03"

2015-04-02 10:34:11.592 [pid=0x5b4,tid=0xfd8] Variable %Production% = 
"10.0.50.8"

2015-04-02 10:34:11.592 [pid=0x5b4,tid=0xfd8] Variable %PSModulePath% 
= "C:\Windows\system32\WindowsPowerShell\v1.0\Modules\"

2015-04-02 10:34:11.592 [pid=0x5b4,tid=0xfd8] Variable %TEMP% = 
"C:\Users\shannont\AppData\Local\Temp"

2015-04-02 10:34:11.592 [pid=0x5b4,tid=0xfd8] Variable %TMP% = 
"C:\Users\shannont\AppData\Local\Temp"

2015-04-02 10:34:11.608 [pid=0x5b4,tid=0xfd8] Variable %USERNAME% = 
"shannont"

2015-04-02 10:34:11.608 [pid=0x5b4,tid=0xfd8] Variable %windir% = 
"C:\Windows"

2015-04-02 10:34:11.608 [pid=0x5b4,tid=0xfd8] Variable 
%windows_tracing_flags% = "3"

2015-04-02 10:34:11.608 [pid=0x5b4,tid=0xfd8] Variable 
%windows_tracing_logfile% = 
"C:\BVTBin\Tests\installpackage\csilogfile.log"

2015-04-02 10:34:11.608 [pid=0x5b4,tid=0xfd8] Variable 
%ALLUSERSPROFILE% = "C:\ProgramData"

2015-04-02 10:34:11.623 [pid=0x5b4,tid=0xfd8] Variable %APPDATA% = 
"C:\Users\shannont\AppData\Roaming"

2015-04-02 10:34:11.623 [pid=0x5b4,tid=0xfd8] Variable 
%CommonProgramFiles% = "C:\Program Files\Common Files"

2015-04-02 10:34:11.623 [pid=0x5b4,tid=0xfd8] Variable %COMPUTERNAME% 
= "W7050315382NN4"

2015-04-02 10:34:11.623 [pid=0x5b4,tid=0xfd8] Variable %HOMEDRIVE% = "U:"

2015-04-02 10:34:11.623 [pid=0x5b4,tid=0xfd8] Variable %HOMEPATH% = "\"

2015-04-02 10:34:11.639 [pid=0x5b4,tid=0xfd8] Variable %HOMESHARE% = 
"\\10.0.50.205\users\ShannonT"

2015-04-02 10:34:11.639 [pid=0x5b4,tid=0xfd8] Variable %LOCALAPPDATA% 
= "C:\Users\shannont\AppData\Local"

2015-04-02 10:34:11.639 [pid=0x5b4,tid=0xfd8] Variable %LOGONSERVER% = 
"\\120314VMDC1201"

2015-04-02 10:34:11.639 [pid=0x5b4,tid=0xfd8] Variable %ProgramData% = 
"C:\ProgramData"

2015-04-02 10:34:11.639 [pid=0x5b4,tid=0xfd8] Variable %ProgramFiles% 
= "C:\Program Files"

2015-04-02 10:34:11.654 [pid=0x5b4,tid=0xfd8] Variable %PUBLIC% = 
"C:\Users\Public"

2015-04-02 10:34:11.654 [pid=0x5b4,tid=0xfd8] Variable %SystemDrive% = 
"C:"

2015-04-02 10:34:11.654 [pid=0x5b4,tid=0xfd8] Variable %SystemRoot% = 
"C:\Windows"

2015-04-02 10:34:11.654 [pid=0x5b4,tid=0xfd8] Variable %USERDNSDOMAIN% 
= "IMCU.LOCAL"

2015-04-02 10:34:11.654 [pid=0x5b4,tid=0xfd8] Variable %USERDOMAIN% = 
"IM_DOM1"

2015-04-02 10:34:11.670 [pid=0x5b4,tid=0xfd8] Variable %USERPROFILE% = 
"C:\Users\shannont"

2015-04-02 10:34:11.670 [pid=0x5b4,tid=0xfd8] Variable %LogonUser% = 
"ShannonT"

2015-04-02 10:34:11.670 [pid=0x5b4,tid=0xfd8] Variable %LogonDomain% = 
"IM_DOM1"

2015-04-02 10:34:11.670 [pid=0x5b4,tid=0xfd8] Variable %LogonUserSid% 
= "S-1-5-21-1859328528-735127382-1221738049-10987"

2015-04-02 10:34:11.670 [pid=0x5b4,tid=0xfd8] Variable %BinaryUserSid% 
= "00002AEB48D23E412BD127566ED31A10000000150500000000000501"

2015-04-02 10:34:11.686 [pid=0x5b4,tid=0xfd8] Variable %LdapUserSid% = 
"\01\05\00\00\00\00\00\05\15\00\00\00\10\1A\D3\6E\56\27\D1\2B\41\3E\D2\48\EB\2A\00\00"

2015-04-02 10:34:11.686 [pid=0x5b4,tid=0xfd8] Variable 
%ReversedUserSid% = 
"010500000000000515000000101AD36E5627D12B413ED248EB2A0000"

2015-04-02 10:34:11.686 [pid=0x5b4,tid=0xfd8] Variable 
%BinaryComputerSid% = 
"0000367D48D23E412BD127566ED31A10000000150500000000000501"

2015-04-02 10:34:11.686 [pid=0x5b4,tid=0xfd8] Variable 
%ReversedComputerSid% = 
"010500000000000515000000101AD36E5627D12B413ED2487D360000"

2015-04-02 10:34:11.701 [pid=0x5b4,tid=0xfd8] Variable 
%LdapComputerSid% = 
"\01\05\00\00\00\00\00\05\15\00\00\00\10\1A\D3\6E\56\27\D1\2B\41\3E\D2\48\7D\36\00\00"

2015-04-02 10:34:11.701 [pid=0x5b4,tid=0xfd8] Variable %OsVersion% = 
"Windows 7"

2015-04-02 10:34:11.701 [pid=0x5b4,tid=0xfd8] Variable %LocalTimeEx% = 
"2015-04-02 10:34:11.468"

2015-04-02 10:34:11.701 [pid=0x5b4,tid=0xfd8] Variable %LocalTime% = 
"2015-04-02 10:34:11"

2015-04-02 10:34:11.701 [pid=0x5b4,tid=0xfd8] Variable 
%LocalTimeXmlEx% = "2015-04-02T10:34:11.468"

2015-04-02 10:34:11.717 [pid=0x5b4,tid=0xfd8] Variable %LocalTimeXml% 
= "2015-04-02T10:34:11"

2015-04-02 10:34:11.717 [pid=0x5b4,tid=0xfd8] Variable %DateTimeEx% = 
"2015-04-02 14:34:11.468"

2015-04-02 10:34:11.717 [pid=0x5b4,tid=0xfd8] Variable %DateTime% = 
"2015-04-02 14:34:11"

2015-04-02 10:34:11.717 [pid=0x5b4,tid=0xfd8] Variable %MacAddress% = 
"e8-13-20-52-41-53"

2015-04-02 10:34:11.717 [pid=0x5b4,tid=0xfd8] Variable %TempDir% = 
"C:\Users\shannont\AppData\Local\Temp"

2015-04-02 10:34:11.732 [pid=0x5b4,tid=0xfd8] Variable %WindowsDir% = 
"C:\Windows"

2015-04-02 10:34:11.732 [pid=0x5b4,tid=0xfd8] Variable %SystemDir% = 
"C:\Windows\system32"

2015-04-02 10:34:11.732 [pid=0x5b4,tid=0xfd8] Variable %DomainName% = 
"IM_DOM1"

2015-04-02 10:34:11.732 [pid=0x5b4,tid=0xfd8] Variable 
%ProgramFilesDir% = "C:\Program Files"

2015-04-02 10:34:11.732 [pid=0x5b4,tid=0xfd8] Variable %AppDataDir% = 
"C:\Users\shannont\AppData\Roaming"

2015-04-02 10:34:11.748 [pid=0x5b4,tid=0xfd8] Variable %DesktopDir% = 
"C:\Users\shannont\Desktop"

2015-04-02 10:34:11.748 [pid=0x5b4,tid=0xfd8] Variable %StartMenuDir% 
= "C:\Users\shannont\AppData\Roaming\Microsoft\Windows\Start Menu"

2015-04-02 10:34:11.748 [pid=0x5b4,tid=0xfd8] Variable %ProgramsDir% = 
"C:\Users\shannont\AppData\Roaming\Microsoft\Windows\Start Menu\Programs"

2015-04-02 10:34:11.748 [pid=0x5b4,tid=0xfd8] Variable %StartUpDir% = 
"C:\Users\shannont\AppData\Roaming\Microsoft\Windows\Start 
Menu\Programs\Startup"

2015-04-02 10:34:11.748 [pid=0x5b4,tid=0xfd8] Variable %FavoritesDir% 
= "C:\Users\shannont\Favorites"

2015-04-02 10:34:11.763 [pid=0x5b4,tid=0xfd8] Variable %SendToDir% = 
"C:\Users\shannont\AppData\Roaming\Microsoft\Windows\SendTo"

2015-04-02 10:34:11.763 [pid=0x5b4,tid=0xfd8] Variable 
%RecentDocumentsDir% = 
"C:\Users\shannont\AppData\Roaming\Microsoft\Windows\Recent"

2015-04-02 10:34:11.763 [pid=0x5b4,tid=0xfd8] Variable %NetPlacesDir% 
= "C:\Users\shannont\AppData\Roaming\Microsoft\Windows\Network Shortcuts"

2015-04-02 10:34:11.763 [pid=0x5b4,tid=0xfd8] Variable 
%CommonAppdataDir% = "C:\ProgramData"

2015-04-02 10:34:11.763 [pid=0x5b4,tid=0xfd8] Variable 
%CommonDesktopDir% = "C:\Users\Public\Desktop"

2015-04-02 10:34:11.779 [pid=0x5b4,tid=0xfd8] Variable 
%CommonStartMenuDir% = "C:\ProgramData\Microsoft\Windows\Start Menu"

2015-04-02 10:34:11.779 [pid=0x5b4,tid=0xfd8] Variable 
%CommonProgramsDir% = "C:\ProgramData\Microsoft\Windows\Start 
Menu\Programs"

2015-04-02 10:34:11.779 [pid=0x5b4,tid=0xfd8] Variable 
%CommonStartUpDir% = "C:\ProgramData\Microsoft\Windows\Start 
Menu\Programs\Startup"

2015-04-02 10:34:11.779 [pid=0x5b4,tid=0xfd8] Variable 
%CommonFavoritesDir% = "C:\Users\shannont\Favorites"

2015-04-02 10:34:11.779 [pid=0x5b4,tid=0xfd8] Variable 
%CurrentProcessId% = "1460"

2015-04-02 10:34:11.794 [pid=0x5b4,tid=0xfd8] Variable 
%CurrentThreadId% = "4056"

2015-04-02 10:34:11.794 [pid=0x5b4,tid=0xfd8] Variable 
%GroupPolicyVersion% = "6.1.7601.17514"

2015-04-02 10:34:11.794 [pid=0x5b4,tid=0xfd8] Variable %TraceFile% = 
"C:\ProgramData\GroupPolicy\Preference\Trace\User.log"

2015-04-02 10:34:11.794 [pid=0x5b4,tid=0xfd8] Variable %LastError% = 
"0x00000000"

2015-04-02 10:34:11.794 [pid=0x5b4,tid=0xfd8] Variable %LastErrorText% 
= "The operation completed successfully."

2015-04-02 10:34:11.810 [pid=0x5b4,tid=0xfd8] Variables subsystem 
initialized.

2015-04-02 10:34:11.810 [pid=0x5b4,tid=0xfd8] Set system security context.

2015-04-02 10:34:11.810 [pid=0x5b4,tid=0xfd8] ----- Parameters

2015-04-02 10:34:11.810 [pid=0x5b4,tid=0xfd8] CSE GUID : 
{5794DAFD-BE60-433f-88A2-1A31939AC01F}

2015-04-02 10:34:11.810 [pid=0x5b4,tid=0xfd8] Flags : (   ) 
GPO_INFO_FLAG_MACHINE - Apply machine policy rather than user policy

2015-04-02 10:34:11.826 [pid=0x5b4,tid=0xfd8]         (   ) 
GPO_INFO_FLAG_BACKGROUND - Background refresh of policy (ok to do slow 
stuff)

2015-04-02 10:34:11.826 [pid=0x5b4,tid=0xfd8]         (   ) 
GPO_INFO_FLAG_SLOWLINK - Policy is being applied across a slow link

2015-04-02 10:34:11.826 [pid=0x5b4,tid=0xfd8]         (   ) 
GPO_INFO_FLAG_VERBOSE - Verbose output to the eventlog

2015-04-02 10:34:11.826 [pid=0x5b4,tid=0xfd8]         ( X ) 
GPO_INFO_FLAG_NOCHANGES - No changes were detected to the Group Policy 
Objects

2015-04-02 10:34:11.826 [pid=0x5b4,tid=0xfd8]         (   ) 
GPO_INFO_FLAG_LINKTRANSITION - A change in link speed was detected 
between previous policy application and current policy application

2015-04-02 10:34:11.841 [pid=0x5b4,tid=0xfd8]         (   ) 
GPO_INFO_FLAG_LOGRSOP_TRANSITION - A change in RSoP logging was 
detected between the application of the previous policy and the 
application of the current policy.

2015-04-02 10:34:11.841 [pid=0x5b4,tid=0xfd8]         (   ) 
GPO_INFO_FLAG_FORCED_REFRESH - Forced Refresh is being applied. redo 
policies.

2015-04-02 10:34:11.841 [pid=0x5b4,tid=0xfd8]         (   ) 
GPO_INFO_FLAG_SAFEMODE_BOOT - windows safe mode boot flag

2015-04-02 10:34:11.841 [pid=0x5b4,tid=0xfd8]         (   ) 
GPO_INFO_FLAG_ASYNC_FOREGROUND - Asynchronous foreground refresh of policy

2015-04-02 10:34:11.841 [pid=0x5b4,tid=0xfd8] Token (computer or user 
SID): S-1-5-21-1859328528-735127382-1221738049-10987

2015-04-02 10:34:11.857 [pid=0x5b4,tid=0xfd8] Abort Flag : Yes 
(0x001455e0)

2015-04-02 10:34:11.857 [pid=0x5b4,tid=0xfd8] HKey Root : Yes (0x00000264)

2015-04-02 10:34:11.857 [pid=0x5b4,tid=0xfd8] Deleted GPO List : No

2015-04-02 10:34:11.857 [pid=0x5b4,tid=0xfd8] Changed GPO List : Yes

2015-04-02 10:34:11.857 [pid=0x5b4,tid=0xfd8] Asynchronous Processing 
: Yes

2015-04-02 10:34:11.872 [pid=0x5b4,tid=0xfd8] Status Callback : Yes 
(0x73d32448)

2015-04-02 10:34:11.872 [pid=0x5b4,tid=0xfd8] WMI namespace : No 
(0x00000000)

2015-04-02 10:34:11.872 [pid=0x5b4,tid=0xfd8] RSoP Status : Yes 
(0x012ffca0)

2015-04-02 10:34:11.872 [pid=0x5b4,tid=0xfd8] Planning Mode Site : (none)

2015-04-02 10:34:11.872 [pid=0x5b4,tid=0xfd8] Computer Target : No 
(0x00000000)

2015-04-02 10:34:11.888 [pid=0x5b4,tid=0xfd8] User Target : No 
(0x00000000)

2015-04-02 10:34:11.888 [pid=0x5b4,tid=0xfd8] Calculated session 
relevance.

2015-04-02 10:34:11.888 [pid=0x5b4,tid=0xfd8] Completed CSE 
pre-processing.

2015-04-02 10:34:11.888 [pid=0x5b4,tid=0xfd8] Calculated list 
relevance. [SUCCEEDED(S_FALSE)]

2015-04-02 10:34:11.888 [pid=0x5b4,tid=0xfd8] Deleted GPO list is not 
relevant to the CSE.

2015-04-02 10:34:11.903 [pid=0x5b4,tid=0xfd8] Calculated list relevance.

2015-04-02 10:34:11.903 [pid=0x5b4,tid=0xfd8] Planning mode not detected.

2015-04-02 10:34:11.903 [pid=0x5b4,tid=0xfd8] Processing changed list.

2015-04-02 10:34:11.903 [pid=0x5b4,tid=0xfd8] Processing user policy.

2015-04-02 10:34:11.903 [pid=0x5b4,tid=0xfd8] Got WMI namespace for 
logging mode.

2015-04-02 10:34:11.919 [pid=0x5b4,tid=0xfd8] Completed get GPO list.

2015-04-02 10:34:11.919 [pid=0x5b4,tid=0xfd8] Initialized internal 
RSoP storage.

2015-04-02 10:34:11.919 [pid=0x5b4,tid=0xfd8] Completed GPO list 
pre-processing.

2015-04-02 10:34:11.919 [pid=0x5b4,tid=0xfd8] ----- Changed - 0

2015-04-02 10:34:11.919 [pid=0x5b4,tid=0xfd8] Options : (   ) 
GPO_FLAG_DISABLE - This GPO is disabled.

2015-04-02 10:34:11.935 [pid=0x5b4,tid=0xfd8]           (   ) 
GPO_FLAG_FORCE - Do not override the settings in this GPO with 
settings in a subsequent GPO.

2015-04-02 10:34:11.935 [pid=0x5b4,tid=0xfd8] Options (raw) : 0x00000000

2015-04-02 10:34:11.935 [pid=0x5b4,tid=0xfd8] Version : 1638425 
(0x00190019)

2015-04-02 10:34:11.935 [pid=0x5b4,tid=0xfd8] GPC : 
LDAP://CN=User,cn={41EAE7F3-5D61-4775-9B58-4D34ED47C834},cn=policies,cn=system,DC=IMCU,DC=local

2015-04-02 10:34:11.935 [pid=0x5b4,tid=0xfd8] GPT : 
\\IMCU.local\sysvol\IMCU.local\Policies\{41EAE7F3-5D61-4775-9B58-4D34ED47C834}\User

2015-04-02 10:34:11.950 [pid=0x5b4,tid=0xfd8] GPO Display Name : 
Mapped Drives Branch 05

2015-04-02 10:34:11.950 [pid=0x5b4,tid=0xfd8] GPO Name : 
{41EAE7F3-5D61-4775-9B58-4D34ED47C834}

2015-04-02 10:34:11.950 [pid=0x5b4,tid=0xfd8] GPO Link : (   ) 
GPLinkUnknown - No link information is available.

2015-04-02 10:34:11.950 [pid=0x5b4,tid=0xfd8]            (   ) 
GPLinkMachine - The GPO is linked to a computer (local or remote).

2015-04-02 10:34:11.950 [pid=0x5b4,tid=0xfd8]            (   ) 
GPLinkSite - The GPO is linked to a site.

2015-04-02 10:34:11.966 [pid=0x5b4,tid=0xfd8]            (   ) 
GPLinkDomain - The GPO is linked to a domain.

2015-04-02 10:34:11.966 [pid=0x5b4,tid=0xfd8]            ( X ) 
GPLinkOrganizationalUnit - The GPO is linked to an organizational unit.

2015-04-02 10:34:11.966 [pid=0x5b4,tid=0xfd8]            (   ) GP Link 
Error

2015-04-02 10:34:11.966 [pid=0x5b4,tid=0xfd8] lParam : 0x00000000

2015-04-02 10:34:11.966 [pid=0x5b4,tid=0xfd8] Prev GPO : No

2015-04-02 10:34:11.981 [pid=0x5b4,tid=0xfd8] Next GPO : Yes

2015-04-02 10:34:11.981 [pid=0x5b4,tid=0xfd8] Extensions : 
[{00000000-0000-0000-0000-000000000000}{2EA1A81B-48E5-45E9-8BB7-A6E3AC170006}][{5794DAFD-BE60-433F-88A2-1A31939AC01F}{2EA1A81B-48E5-45E9-8BB7-A6E3AC170006}]

2015-04-02 10:34:11.981 [pid=0x5b4,tid=0xfd8] lParam2 : 0x001572ac

2015-04-02 10:34:11.981 [pid=0x5b4,tid=0xfd8] Link : LDAP://OU=Branch 
05 - Beech Grove,DC=IMCU,DC=local

2015-04-02 10:34:11.997 [pid=0x5b4,tid=0xfd8] Variable %GPHPATH% = 
"C:\ProgramData\Microsoft\Group 
Policy\History\{41EAE7F3-5D61-4775-9B58-4D34ED47C834}\S-1-5-21-1859328528-735127382-1221738049-10987"

2015-04-02 10:34:11.997 [pid=0x5b4,tid=0xfd8] Completed get GPH path.

2015-04-02 10:34:11.997 [pid=0x5b4,tid=0xfd8] Completed set extensions.

2015-04-02 10:34:11.997 [pid=0x5b4,tid=0xfd8] Completed get GPO is 
relevant.

2015-04-02 10:34:12.012 [pid=0x5b4,tid=0xfd8] Variable %GPTPATH% = 
"\\IMCU.local\sysvol\IMCU.local\Policies\{41EAE7F3-5D61-4775-9B58-4D34ED47C834}\User"

2015-04-02 10:34:12.012 [pid=0x5b4,tid=0xfd8] Completed get GPT path.

2015-04-02 10:34:12.012 [pid=0x5b4,tid=0xfd8] Completed RSoP init.

2015-04-02 10:34:12.012 [pid=0x5b4,tid=0xfd8] Completed get next GPO.

2015-04-02 10:34:12.012 [pid=0x5b4,tid=0xfd8] Completed check GPO 
license usage.

2015-04-02 10:34:12.028 [pid=0x5b4,tid=0xfd8] Completed GPO 
pre-processing.

2015-04-02 10:34:12.028 [pid=0x5b4,tid=0xfd8] Started removing policy.

2015-04-02 10:34:12.043 [pid=0x5b4,tid=0xfd8] Read GPH data file.

2015-04-02 10:34:12.059 [pid=0x5b4,tid=0xfd8] Completed parse of GPH XML.

2015-04-02 10:34:12.059 [pid=0x5b4,tid=0xfd8] Completed get tree root.

2015-04-02 10:34:12.059 [pid=0x5b4,tid=0xfd8] Deleted GPH data file.

2015-04-02 10:34:12.059 [pid=0x5b4,tid=0xfd8] Started package execution.

2015-04-02 10:34:12.075 [pid=0x5b4,tid=0xfd8] Set package timestamp 
variable (2015-04-02 14:34:11).

2015-04-02 10:34:12.075 [pid=0x5b4,tid=0xfd8] Starting class <Drives>.

2015-04-02 10:34:12.075 [pid=0x5b4,tid=0xfd8] RunOnce value created 
[SUCCEEDED(S_FALSE)]

2015-04-02 10:34:12.075 [pid=0x5b4,tid=0xfd8] Handle Children.

2015-04-02 10:34:12.090 [pid=0x5b4,tid=0xfd8] 
{935D1B74-9CB8-4e3c-9914-7DD559B7A417}

2015-04-02 10:34:12.090 [pid=0x5b4,tid=0xfd8] Starting class <Drive> - Q:.

2015-04-02 10:34:12.090 [pid=0x5b4,tid=0xfd8] Policy is not flagged 
for removal.

2015-04-02 10:34:12.090 [pid=0x5b4,tid=0xfd8] Completed class <Drive> 
- Q:.

2015-04-02 10:34:12.106 [pid=0x5b4,tid=0xfd8] 
{935D1B74-9CB8-4e3c-9914-7DD559B7A417}

2015-04-02 10:34:12.106 [pid=0x5b4,tid=0xfd8] Starting class <Drive> - G:.

2015-04-02 10:34:12.106 [pid=0x5b4,tid=0xfd8] Policy is not flagged 
for removal.

2015-04-02 10:34:12.106 [pid=0x5b4,tid=0xfd8] Completed class <Drive> 
- G:.

2015-04-02 10:34:12.106 [pid=0x5b4,tid=0xfd8] Completed class <Drives>.

2015-04-02 10:34:12.121 [pid=0x5b4,tid=0xfd8] Completed package execution.

2015-04-02 10:34:12.121 [pid=0x5b4,tid=0xfd8] Completed execution of 
removal package.

2015-04-02 10:34:12.121 [pid=0x5b4,tid=0xfd8] Completed remove GPH.

2015-04-02 10:34:12.121 [pid=0x5b4,tid=0xfd8] Started applying policy.

2015-04-02 10:34:12.137 [pid=0x5b4,tid=0xfd8] Set user security context.

2015-04-02 10:34:12.199 [pid=0x5b4,tid=0xfd8] Opened file.

2015-04-02 10:34:12.199 [pid=0x5b4,tid=0xfd8] Got file size.

2015-04-02 10:34:12.199 [pid=0x5b4,tid=0xfd8] Created file buffer.

2015-04-02 10:34:12.199 [pid=0x5b4,tid=0xfd8] Completed read file data.

2015-04-02 10:34:12.215 [pid=0x5b4,tid=0xfd8] Terminated file buffer.

2015-04-02 10:34:12.215 [pid=0x5b4,tid=0xfd8] Closed file handle.

2015-04-02 10:34:12.215 [pid=0x5b4,tid=0xfd8] Read GPE XML data file 
(824 bytes total).

2015-04-02 10:34:12.215 [pid=0x5b4,tid=0xfd8] Set system security context.

2015-04-02 10:34:12.215 [pid=0x5b4,tid=0xfd8] Completed parse of GPE 
XML data.

2015-04-02 10:34:12.230 [pid=0x5b4,tid=0xfd8] Completed loading of 
package.

2015-04-02 10:34:12.230 [pid=0x5b4,tid=0xfd8] Completed get tree root.

2015-04-02 10:34:12.230 [pid=0x5b4,tid=0xfd8] Started package execution.

2015-04-02 10:34:12.230 [pid=0x5b4,tid=0xfd8] Set package timestamp 
variable (2015-04-02 14:34:11).

2015-04-02 10:34:12.246 [pid=0x5b4,tid=0xfd8] Starting class <Drives>.

2015-04-02 10:34:12.246 [pid=0x5b4,tid=0xfd8] RunOnce value created 
[SUCCEEDED(S_FALSE)]

2015-04-02 10:34:12.246 [pid=0x5b4,tid=0xfd8] Handle Children.

2015-04-02 10:34:12.246 [pid=0x5b4,tid=0xfd8] 
{935D1B74-9CB8-4e3c-9914-7DD559B7A417}

2015-04-02 10:34:12.261 [pid=0x5b4,tid=0xfd8] Starting class <Drive> - Q:.

2015-04-02 10:34:12.261 [pid=0x5b4,tid=0xfd8] Adding child elements to 
RSOP.

2015-04-02 10:34:12.261 [pid=0x5b4,tid=0xfd8] Set user security context.

2015-04-02 10:34:13.164 [pid=0x5b4,tid=0xfd8] Set system security context.

2015-04-02 10:34:13.179 [pid=0x5b4,tid=0xfd8] Properties handled.

2015-04-02 10:34:13.179 [pid=0x5b4,tid=0xfd8] RunOnce value created 
[SUCCEEDED(S_FALSE)]

2015-04-02 10:34:13.179 [pid=0x5b4,tid=0xfd8] Handle Children.

2015-04-02 10:34:13.195 [pid=0x5b4,tid=0xfd8] EVENT : The user 'Q:' 
preference item in the 'Mapped Drives Branch 05 
{41EAE7F3-5D61-4775-9B58-4D34ED47C834}' Group Policy object applied 
successfully.

2015-04-02 10:34:13.195 [pid=0x5b4,tid=0xfd8] Completed class <Drive> 
- Q:.

2015-04-02 10:34:13.195 [pid=0x5b4,tid=0xfd8] 
{935D1B74-9CB8-4e3c-9914-7DD559B7A417}

2015-04-02 10:34:13.195 [pid=0x5b4,tid=0xfd8] Starting class <Drive> - G:.

2015-04-02 10:34:13.210 [pid=0x5b4,tid=0xfd8] Adding child elements to 
RSOP.

2015-04-02 10:34:13.210 [pid=0x5b4,tid=0xfd8] Set user security context.

2015-04-02 10:34:13.444 [pid=0x5b4,tid=0xfd8] Set system security context.

2015-04-02 10:34:13.444 [pid=0x5b4,tid=0xfd8] Properties handled.

2015-04-02 10:34:13.444 [pid=0x5b4,tid=0xfd8] RunOnce value created 
[SUCCEEDED(S_FALSE)]

2015-04-02 10:34:13.444 [pid=0x5b4,tid=0xfd8] Handle Children.

2015-04-02 10:34:13.459 [pid=0x5b4,tid=0xfd8] EVENT : The user 'G:' 
preference item in the 'Mapped Drives Branch 05 
{41EAE7F3-5D61-4775-9B58-4D34ED47C834}' Group Policy object applied 
successfully.

2015-04-02 10:34:13.459 [pid=0x5b4,tid=0xfd8] Completed class <Drive> 
- G:.

2015-04-02 10:34:13.459 [pid=0x5b4,tid=0xfd8] Completed class <Drives>.

2015-04-02 10:34:13.459 [pid=0x5b4,tid=0xfd8] Completed package execution.

2015-04-02 10:34:13.475 [pid=0x5b4,tid=0xfd8] Completed execution of 
apply package.

2015-04-02 10:34:13.475 [pid=0x5b4,tid=0xfd8] Update GPH : 
apmCreateFoldersEx

2015-04-02 10:34:13.475 [pid=0x5b4,tid=0xfd8] Update GPH : 
xmlRemovalPackage

2015-04-02 10:34:13.490 [pid=0x5b4,tid=0xfd8] Update GPH : apmWriteFile

2015-04-02 10:34:13.490 [pid=0x5b4,tid=0xfd8] Updated GPH.

2015-04-02 10:34:13.490 [pid=0x5b4,tid=0xfd8] Completed apply GPO.

2015-04-02 10:34:13.490 [pid=0x5b4,tid=0xfd8] Completed GPO 
post-processing.

2015-04-02 10:34:13.506 [pid=0x5b4,tid=0xfd8] ----- Changed - 1

2015-04-02 10:34:13.506 [pid=0x5b4,tid=0xfd8] Options : (   ) 
GPO_FLAG_DISABLE - This GPO is disabled.

2015-04-02 10:34:13.506 [pid=0x5b4,tid=0xfd8]           (   ) 
GPO_FLAG_FORCE - Do not override the settings in this GPO with 
settings in a subsequent GPO.

2015-04-02 10:34:13.506 [pid=0x5b4,tid=0xfd8] Options (raw) : 0x00000000

2015-04-02 10:34:13.522 [pid=0x5b4,tid=0xfd8] Version : 720907 
(0x000b000b)

2015-04-02 10:34:13.522 [pid=0x5b4,tid=0xfd8] GPC : 
LDAP://CN=User,cn={E000461B-9DE3-47A6-8966-1A85F18FDC1D},cn=policies,cn=system,DC=IMCU,DC=local

2015-04-02 10:34:13.522 [pid=0x5b4,tid=0xfd8] GPT : 
\\IMCU.local\sysvol\IMCU.local\Policies\{E000461B-9DE3-47A6-8966-1A85F18FDC1D}\User

2015-04-02 10:34:13.522 [pid=0x5b4,tid=0xfd8] GPO Display Name : 
Mapped Drive EDCServer

2015-04-02 10:34:13.537 [pid=0x5b4,tid=0xfd8] GPO Name : 
{E000461B-9DE3-47A6-8966-1A85F18FDC1D}

2015-04-02 10:34:13.537 [pid=0x5b4,tid=0xfd8] GPO Link : (   ) 
GPLinkUnknown - No link information is available.

2015-04-02 10:34:13.537 [pid=0x5b4,tid=0xfd8]            (   ) 
GPLinkMachine - The GPO is linked to a computer (local or remote).

2015-04-02 10:34:13.537 [pid=0x5b4,tid=0xfd8]            (   ) 
GPLinkSite - The GPO is linked to a site.

2015-04-02 10:34:13.537 [pid=0x5b4,tid=0xfd8]            (   ) 
GPLinkDomain - The GPO is linked to a domain.

2015-04-02 10:34:13.553 [pid=0x5b4,tid=0xfd8]            ( X ) 
GPLinkOrganizationalUnit - The GPO is linked to an organizational unit.

2015-04-02 10:34:13.553 [pid=0x5b4,tid=0xfd8]            (   ) GP Link 
Error

2015-04-02 10:34:13.553 [pid=0x5b4,tid=0xfd8] lParam : 0x00000000

2015-04-02 10:34:13.553 [pid=0x5b4,tid=0xfd8] Prev GPO : Yes

2015-04-02 10:34:13.568 [pid=0x5b4,tid=0xfd8] Next GPO : No

2015-04-02 10:34:13.568 [pid=0x5b4,tid=0xfd8] Extensions : 
[{00000000-0000-0000-0000-000000000000}{2EA1A81B-48E5-45E9-8BB7-A6E3AC170006}][{5794DAFD-BE60-433F-88A2-1A31939AC01F}{2EA1A81B-48E5-45E9-8BB7-A6E3AC170006}]

2015-04-02 10:34:13.568 [pid=0x5b4,tid=0xfd8] lParam2 : 0x01557fcc

2015-04-02 10:34:13.568 [pid=0x5b4,tid=0xfd8] Link : LDAP://OU=Branch 
05 - Beech Grove,DC=IMCU,DC=local

2015-04-02 10:34:13.568 [pid=0x5b4,tid=0xfd8] Variable %GPHPATH% = 
"C:\ProgramData\Microsoft\Group 
Policy\History\{E000461B-9DE3-47A6-8966-1A85F18FDC1D}\S-1-5-21-1859328528-735127382-1221738049-10987"

2015-04-02 10:34:13.584 [pid=0x5b4,tid=0xfd8] Completed get GPH path.

2015-04-02 10:34:13.584 [pid=0x5b4,tid=0xfd8] Completed set extensions.

2015-04-02 10:34:13.584 [pid=0x5b4,tid=0xfd8] Completed get GPO is 
relevant.

2015-04-02 10:34:13.599 [pid=0x5b4,tid=0xfd8] Variable %GPTPATH% = 
"\\IMCU.local\sysvol\IMCU.local\Policies\{E000461B-9DE3-47A6-8966-1A85F18FDC1D}\User"

2015-04-02 10:34:13.599 [pid=0x5b4,tid=0xfd8] Completed get GPT path.

2015-04-02 10:34:13.599 [pid=0x5b4,tid=0xfd8] Completed RSoP init.

2015-04-02 10:34:13.599 [pid=0x5b4,tid=0xfd8] Completed get next GPO.

2015-04-02 10:34:13.615 [pid=0x5b4,tid=0xfd8] Completed check GPO 
license usage.

2015-04-02 10:34:13.615 [pid=0x5b4,tid=0xfd8] Completed GPO 
pre-processing.

2015-04-02 10:34:13.615 [pid=0x5b4,tid=0xfd8] Started removing policy.

2015-04-02 10:34:13.615 [pid=0x5b4,tid=0xfd8] Read GPH data file.

2015-04-02 10:34:13.630 [pid=0x5b4,tid=0xfd8] Completed parse of GPH XML.

2015-04-02 10:34:13.630 [pid=0x5b4,tid=0xfd8] Completed get tree root.

2015-04-02 10:34:13.630 [pid=0x5b4,tid=0xfd8] Deleted GPH data file.

2015-04-02 10:34:13.630 [pid=0x5b4,tid=0xfd8] Started package execution.

2015-04-02 10:34:13.646 [pid=0x5b4,tid=0xfd8] Set package timestamp 
variable (2015-04-02 14:34:11).

2015-04-02 10:34:13.646 [pid=0x5b4,tid=0xfd8] Starting class <Drives>.

2015-04-02 10:34:13.646 [pid=0x5b4,tid=0xfd8] RunOnce value created 
[SUCCEEDED(S_FALSE)]

2015-04-02 10:34:13.646 [pid=0x5b4,tid=0xfd8] Handle Children.

2015-04-02 10:34:13.662 [pid=0x5b4,tid=0xfd8] 
{935D1B74-9CB8-4e3c-9914-7DD559B7A417}

2015-04-02 10:34:13.662 [pid=0x5b4,tid=0xfd8] Starting class <Drive> - T:.

2015-04-02 10:34:13.662 [pid=0x5b4,tid=0xfd8] Policy is not flagged 
for removal.

2015-04-02 10:34:13.662 [pid=0x5b4,tid=0xfd8] Completed class <Drive> 
- T:.

2015-04-02 10:34:13.677 [pid=0x5b4,tid=0xfd8] Completed class <Drives>.

2015-04-02 10:34:13.677 [pid=0x5b4,tid=0xfd8] Completed package execution.

2015-04-02 10:34:13.677 [pid=0x5b4,tid=0xfd8] Completed execution of 
removal package.

2015-04-02 10:34:13.677 [pid=0x5b4,tid=0xfd8] Completed remove GPH.

2015-04-02 10:34:13.677 [pid=0x5b4,tid=0xfd8] Started applying policy.

2015-04-02 10:34:13.693 [pid=0x5b4,tid=0xfd8] Set user security context.

2015-04-02 10:34:13.755 [pid=0x5b4,tid=0xfd8] Opened file.

2015-04-02 10:34:13.755 [pid=0x5b4,tid=0xfd8] Got file size.

2015-04-02 10:34:13.755 [pid=0x5b4,tid=0xfd8] Created file buffer.

2015-04-02 10:34:13.771 [pid=0x5b4,tid=0xfd8] Completed read file data.

2015-04-02 10:34:13.771 [pid=0x5b4,tid=0xfd8] Terminated file buffer.

2015-04-02 10:34:13.771 [pid=0x5b4,tid=0xfd8] Closed file handle.

2015-04-02 10:34:13.771 [pid=0x5b4,tid=0xfd8] Read GPE XML data file 
(464 bytes total).

2015-04-02 10:34:13.786 [pid=0x5b4,tid=0xfd8] Set system security context.

2015-04-02 10:34:13.786 [pid=0x5b4,tid=0xfd8] Completed parse of GPE 
XML data.

2015-04-02 10:34:13.786 [pid=0x5b4,tid=0xfd8] Completed loading of 
package.

2015-04-02 10:34:13.802 [pid=0x5b4,tid=0xfd8] Completed get tree root.

2015-04-02 10:34:13.802 [pid=0x5b4,tid=0xfd8] Started package execution.

2015-04-02 10:34:13.802 [pid=0x5b4,tid=0xfd8] Set package timestamp 
variable (2015-04-02 14:34:11).

2015-04-02 10:34:13.802 [pid=0x5b4,tid=0xfd8] Starting class <Drives>.

2015-04-02 10:34:13.817 [pid=0x5b4,tid=0xfd8] RunOnce value created 
[SUCCEEDED(S_FALSE)]

2015-04-02 10:34:13.817 [pid=0x5b4,tid=0xfd8] Handle Children.

2015-04-02 10:34:13.817 [pid=0x5b4,tid=0xfd8] 
{935D1B74-9CB8-4e3c-9914-7DD559B7A417}

2015-04-02 10:34:13.817 [pid=0x5b4,tid=0xfd8] Starting class <Drive> - T:.

2015-04-02 10:34:13.833 [pid=0x5b4,tid=0xfd8] Adding child elements to 
RSOP.

2015-04-02 10:34:13.833 [pid=0x5b4,tid=0xfd8] Set user security context.

2015-04-02 10:34:14.440 [pid=0x5b4,tid=0xfd8] Set system security context.

2015-04-02 10:34:14.440 [pid=0x5b4,tid=0xfd8] Properties handled.

2015-04-02 10:34:14.440 [pid=0x5b4,tid=0xfd8] RunOnce value created 
[SUCCEEDED(S_FALSE)]

2015-04-02 10:34:14.440 [pid=0x5b4,tid=0xfd8] Handle Children.

2015-04-02 10:34:14.455 [pid=0x5b4,tid=0xfd8] EVENT : The user 'T:' 
preference item in the 'Mapped Drive EDCServer 
{E000461B-9DE3-47A6-8966-1A85F18FDC1D}' Group Policy object applied 
successfully.

2015-04-02 10:34:14.455 [pid=0x5b4,tid=0xfd8] Completed class <Drive> 
- T:.

2015-04-02 10:34:14.455 [pid=0x5b4,tid=0xfd8] Completed class <Drives>.

2015-04-02 10:34:14.471 [pid=0x5b4,tid=0xfd8] Completed package execution.

2015-04-02 10:34:14.471 [pid=0x5b4,tid=0xfd8] Completed execution of 
apply package.

2015-04-02 10:34:14.471 [pid=0x5b4,tid=0xfd8] Update GPH : 
apmCreateFoldersEx

2015-04-02 10:34:14.471 [pid=0x5b4,tid=0xfd8] Update GPH : 
xmlRemovalPackage

2015-04-02 10:34:14.486 [pid=0x5b4,tid=0xfd8] Update GPH : apmWriteFile

2015-04-02 10:34:14.486 [pid=0x5b4,tid=0xfd8] Updated GPH.

2015-04-02 10:34:14.486 [pid=0x5b4,tid=0xfd8] Completed apply GPO.

2015-04-02 10:34:14.502 [pid=0x5b4,tid=0xfd8] Completed GPO 
post-processing.

2015-04-02 10:34:14.502 [pid=0x5b4,tid=0xfd8] Completed get next GPO. 
[SUCCEEDED(S_FALSE)]

2015-04-02 10:34:14.502 [pid=0x5b4,tid=0xfd8] RSoP namespace not 
initialized.

2015-04-02 10:34:14.502 [pid=0x5b4,tid=0xfd8] Completed GPO list 
post-processing.

2015-04-02 10:34:14.517 [pid=0x5b4,tid=0xfd8] Completed get GPO list. 
[SUCCEEDED(S_FALSE)]

2015-04-02 10:34:14.517 [pid=0x5b4,tid=0xfd8] Completed CSE 
post-processing.

2015-04-02 10:34:14.517 [pid=0x5b4,tid=0xfd8] User impersonation 
uninitialized.

2015-04-02 10:34:14.564 [pid=0x5b4,tid=0xfd8] Leaving 
ProcessGroupPolicyExDrives() returned 0x00000000

2015-04-02 10:34:14.564 [pid=0x5b4,tid=0xfd8]

*From:*listsad...@lists.myitforum.com 
<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com 
<mailto:listsad...@lists.myitforum.com>] *On Behalf Of *Mayo, Bill
*Sent:* Wednesday, April 01, 2015 8:40 AM
*To:* ntsysadm@lists.myitforum.com <mailto:ntsysadm@lists.myitforum.com>
*Subject:* [NTSysADM] RE: mapped drives GPO

We always check “run in logged-in user’s context” when mapping drive 
letters via GPP.

*From:*listsad...@lists.myitforum.com 
<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] *On Behalf Of *David McSpadden
*Sent:* Tuesday, March 31, 2015 7:30 PM
*To:* ntsysadm@lists.myitforum.com <mailto:ntsysadm@lists.myitforum.com>
*Subject:* [NTSysADM] RE: mapped drives GPO

Group Policy Management

Setting Path:

Explanation

_P_rint

_C_lose

No explanation is available for this setting.

Supported On:

Not available

*Mapped Drives Branch 05*

Data collected on: 03/31/2015 3:41:59 PM

        

*_hide all_*

*Generalhide <about:blank>*

*Detailshide <about:blank>*

Domain

        

IMCU.local

Owner

        

IM_DOM1\Domain Admins

Created

        

03/24/2015 2:28:48 PM

Modified

        

03/31/2015 3:40:18 PM

User Revisions

        

17 (AD), 17 (sysvol)

Computer Revisions

        

2 (AD), 2 (sysvol)

Unique ID

        

{41EAE7F3-5D61-4775-9B58-4D34ED47C834}

GPO Status

        

Enabled

*Linkshide <about:blank>*

*Location*

        

*Enforced*

        

*Link Status*

        

*Path*

Branch 05 - Beech Grove

        

No

        

Enabled

        

IMCU.local/Branch 05 - Beech Grove


This list only includes links in the domain of the GPO.

*Security Filteringhide <about:blank>*

*The settings in this GPO can only apply to the following groups, 
users, and computers:*

*Name*

NT AUTHORITY\Authenticated Users

*Delegationhide <about:blank>*

*These groups and users have the specified permission for this GPO*

*Name*

        

*Allowed Permissions*

        

*Inherited*

IM_DOM1\Domain Admins

        

Edit settings, delete, modify security

        

No

IM_DOM1\Enterprise Admins

        

Edit settings, delete, modify security

        

No

NT AUTHORITY\Authenticated Users

        

Read (from Security Filtering)

        

No

NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS

        

Read

        

No

NT AUTHORITY\SYSTEM

        

Edit settings, delete, modify security

        

No

*Computer Configuration (Enabled)hide <about:blank>*

*Policieshide <about:blank>*

*Administrative Templateshide <about:blank>*

Policy definitions (ADMX files) retrieved from the central store.

*System/Group Policyhide <about:blank>*

*Policy*

        

*Setting*

        

*Comment*

Drive Maps preference extension policy processing <javascript:void();>

        

Enabled

        

Allow processing across a slow network connection

        

Enabled

Process even if the Group Policy objects have not changed

        

Enabled

Background priority

        

Idle

*Policy*

        

*Setting*

        

*Comment*

User Group Policy loopback processing mode <javascript:void();>

        

Enabled

        

Mode:

        

Replace

*System/Logonhide <about:blank>*

*Policy*

        

*Setting*

        

*Comment*

Always wait for the network at computer startup and logon 
<javascript:void();>

        

Enabled

        

*Preferenceshide <about:blank>*

*Windows Settingshide <about:blank>*

*Registryhide <about:blank>*

*EnableLinkedConnections (Order: 1)hide <about:blank>*

*Generalhide <about:blank>*

Action

        

Create

*Properties*

Hive

        

HKEY_LOCAL_MACHINE

Key path

        

SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System

Value name

        

EnableLinkedConnections

Value type

        

REG_DWORD

Value data

        

0x1 (1)

*Commonhide <about:blank>*

*Options*

Stop processing items on this extension if an error occurs on this item

        

No

Remove this item when it is no longer applied

        

No

Apply once and do not reapply

        

No

*User Configuration (Enabled)hide <about:blank>*

*Preferenceshide <about:blank>*

*Windows Settingshide <about:blank>*

*Drive Mapshide <about:blank>*

*Drive Map (Drive: Q)hide <about:blank>*

*Q: (Order: 1)hide <about:blank>*

*Generalhide <about:blank>*

Action

        

Replace

*Properties*

Letter

        

Q

Location

        

\\10.0.100.5\cube <file:///%5C%5C10.0.100.5%5Ccube>

Reconnect

        

Enabled

Label as

        

SYMITAR FILES

Use first available

        

Disabled

Hide/Show this drive

        

Show

Hide/Show all drives

        

Show

*Commonhide <about:blank>*

*Options*

Stop processing items on this extension if an error occurs on this item

        

No

Run in logged-on user's security context (user policy option)

        

No

Remove this item when it is no longer applied

        

No

Apply once and do not reapply

        

No

*Drive Map (Drive: G)hide <about:blank>*

*G: (Order: 2)hide <about:blank>*

*Generalhide <about:blank>*

Action

        

Replace

*Properties*

Letter

        

G

Location

        

\\10.0.100.5\FIles <file:///%5C%5C10.0.100.5%5CFIles>

Reconnect

        

Enabled

Label as

        

Installation Files

Use first available

        

Disabled

Hide/Show this drive

        

Show

Hide/Show all drives

        

Show

*Commonhide <about:blank>*

*Options*

Stop processing items on this extension if an error occurs on this item

        

No

Run in logged-on user's security context (user policy option)

        

No

Remove this item when it is no longer applied

        

No

Apply once and do not reapply

        

No

*From:*listsad...@lists.myitforum.com 
<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] *On Behalf Of *Brian Desmond
*Sent:* Tuesday, March 31, 2015 4:13 PM
*To:* ntsysadm@lists.myitforum.com <mailto:ntsysadm@lists.myitforum.com>
*Subject:* [NTSysADM] RE: mapped drives GPO

*How are you mapping the drives in the GPO? *

**

*Thanks,*

*Brian Desmond*

*br...@briandesmond.com <mailto:br...@briandesmond.com>*

**

*w – 312.625.1438 | c – 312.731.3132*

**

*From:* listsad...@lists.myitforum.com 
<mailto:listsad...@lists.myitforum.com> 
[mailto:listsad...@lists.myitforum.com] *On Behalf Of *David McSpadden
*Sent:* Tuesday, March 31, 2015 3:04 PM
*To:* 'ntsysadm@lists.myitforum.com <mailto:ntsysadm@lists.myitforum.com>'
*Subject:* [NTSysADM] mapped drives GPO

I have two PC’s in one OU our of 13 and they are not mapping their 
drives like all other PC’s

AD 2012 R2

Windows 7 32 bit

I have the gpsvc.log from the PC. It appears that these drives should 
be mapping but they do not appear in My Computer?

This e-mail and any files transmitted with it are property of Indiana 
Members Credit Union, are confidential, and are intended solely for 
the use of the individual or entity to whom this e-mail is addressed. 
If you are not one of the named recipient(s) or otherwise have reason 
to believe that you have received this message in error, please notify 
the sender and delete this message immediately from your computer. Any 
other use, retention, dissemination, forwarding, printing, or copying 
of this email is strictly prohibited.

Please consider the environment before printing this email.

This e-mail and any files transmitted with it are property of Indiana 
Members Credit Union, are confidential, and are intended solely for 
the use of the individual or entity to whom this e-mail is addressed. 
If you are not one of the named recipient(s) or otherwise have reason 
to believe that you have received this message in error, please notify 
the sender and delete this message immediately from your computer. Any 
other use, retention, dissemination, forwarding, printing, or copying 
of this email is strictly prohibited.

Please consider the environment before printing this email.

This e-mail and any files transmitted with it are property of Indiana 
Members Credit Union, are confidential, and are intended solely for 
the use of the individual or entity to whom this e-mail is addressed. 
If you are not one of the named recipient(s) or otherwise have reason 
to believe that you have received this message in error, please notify 
the sender and delete this message immediately from your computer. Any 
other use, retention, dissemination, forwarding, printing, or copying 
of this email is strictly prohibited.

Please consider the environment before printing this email.

This e-mail and any files transmitted with it are property of Indiana 
Members Credit Union, are confidential, and are intended solely for 
the use of the individual or entity to whom this e-mail is addressed. 
If you are not one of the named recipient(s) or otherwise have reason 
to believe that you have received this message in error, please notify 
the sender and delete this message immediately from your computer. Any 
other use, retention, dissemination, forwarding, printing, or copying 
of this email is strictly prohibited.

Please consider the environment before printing this email.