Tuesday 25 June 2013

re-install a package installed by group policy

Seems I cannot reinstall a program using group policy when the program has been originally rolled out by group policy, even when it has been uninstalled on the machine by an admin user

see here

http://www.frickelsoft.net/blog/?p=103

seems I must delete registry key to allow for the package to be reinstalled via group policy

Simply delete corresponding key from:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Group Policy\AppMgmt

NOTE: Don't delete the actual AppMgmt key, explode the key to see the GUIDs, if you click on one it will then give you the details so you can ascertain which GUID relates to which software. Then delete the whole key relevant.

And another example here http://www.mysysadmintips.com/windows/active-directory/210-force-applications-to-be-re-installed-by-group-policy

Copy file to multiple PCs with group policy

I used this example:
http://www.silentcrash.com/2012/06/copy-files-multiple-computers-group-policy-gpo/

main thing being that the file needed to be a .cmd extension

I also changed the switch to overwrite current file without prompting
Xcopy \\server\netlogon\scratch.ini "C:\Program Files\Scratch\" /Y

I used netlogon but not sure its needed, had a few issues trying to use a .vbs file initially.

Monday 17 June 2013

how to view group policy preferences on local machine - rsop.msc

I was wondering what to use to view settings applied in the group policy preferences section of group policy. I liked rsop.msc :-(

The preferences section is not on show.

I read some stuff here : rsop.msc and gpresult not including preferences

I briefly tried GPRESULT /H rsop.html (if ran from run command the output of this seemed to go to my users root e.g. c:\users\username) but still didn't see the group policy preferences section (which is under Computer) displayed.

Then elevated rights worked, see here: http://answers.microsoft.com/en-us/windows/forum/windows_7-networking/why-doesnt-gpresult-r-display-computer-settings/597f945c-1be4-4af5-9bed-622e54c82b1e

Therefore open a cmd prompt to run, "GPRESULT /H rsop.html" and change to suitable file path for generated output

The Computer section of group policy needed administrative rights to display.

Addendum

I adding another point to this post so its all together.

Regarding running rsop.msc as a restricted user and being unable to view 'Computer' policies due to being a restricted user.

I would like to right click command prompt and run as an elevated user, but the right click context menu is disabled....errr...

A workaround for this is to use type command into search box and instead of clicking enter click Ctrl+Shift + Enter this brings up the UAC asking for admin login.

I can then navigate to a user folder, as I cannot seem to change drives??? Run "GPRESULT /H rsop.html", then run rsop.html all from command prompt. This fires up the browser with my results.

All stated here: http://www.howtogeek.com/howto/windows-vista/run-a-command-as-administrator-from-the-windows-vista-run-box/



Thursday 6 June 2013

IE 10 proxy settings group policy not being applied

Same as this issue: http://www.edugeek.net/forums/windows-8/114433-ie-proxy-windows-8-server-2008r2.html#post979207

Had to start using Group Policy Preferences , the bottom part of group policy editor 'user configuration->preferences->control panel settings->internet settings'


I tried this and it worked:

I searched google and used this extra info:
http://social.technet.microsoft.com/Forums/en-US/winserverGP/thread/58939ec8-1396-453e-af54-f03603e10723

the post timestamped Wednesday, April 17, 2013 4:57 PM by Babylon78.

This is what I did:
Open up the policy, and create an IE8 Preference: User Configuration --> Preferences --> Control Panel Settings --> Internet Settings --> New --> Internet Explorer 8.
Set my proxy settings.

Navigate to C:\Windows\SYSVOL\domain\Policies was an easier route, then sort by date for the recently created IE entry.
Navigate to User\Preferences\InternetSettings 
"Open up the "InternetSettings.xml" file, and change the MAX value to something above 10.0.0.0 (I usually put 10.5.0.0). This way, the policy won't trip up later on if IE 11 comes out and doesn't support any of these policies, but at least you'll be safe until 10.5.0, or until a hotfix is available. " -babylon78

max="10.5.0.0"

Tuesday 21 May 2013

User not receiving proxy settings. precedence disabled win 7

This issue seems to suggest that the precedence of GPO rules is at fault, that some entry is overriding something else, but this is not the case I do not think. After reading a million nonsensical posts by microsoft pros i end up none the wiser.

I eventually opt to delete the locally cached profile for the user, and its solves the issue.

On the affected machine, right click my computer-> properties,->advanced system settings->user profiles

Tuesday 15 January 2013

IE certificate . Continue to this website. Not working


Internet Explorer Certificate Security Warning, cannot continue (blocked)

But even if we click on "Continue to this website (not recommended).", nothing happens. totally blocked!

Because of the latest updates : KB2661254

IE prevents  connection to any website that use a certificate with less than 1024 bits key

To fix it, you can add a dword key in the registry :

HKEY_LOCAL_MACHINE\Software\Microsoft\Cryptography\OID\EncodingType 0\CertDLLCreateCertificateChainEngine\Config\
DWORD (32 bit) : MinRsaPubKeyBitLength
value : 512 (decimal)

Thanks: berneyi  of experts exchange