| Author | Messages | |
r00tb00t
Posts:27
 | | 10/15/2008 8:20 AM |
| Hey Guys,
I have just set another domain up, just a single domain/single forest set
up.
I have a problem with group policy. After going through and setting every
single setting nearly (which took hours!) I have made some errors somewhere
but can't find where exactly and wondered if anyone knew off the top of
their head where I had made the mistake?
The following issues are occurring on my client machines:
- Explorer opens in a new window constantly, ever folder a use clicks is
a new explorer window opens?
- .swf file extensions are not recognised by Internet Explorer; for some
reason, both flash and shockwave plugins are working correctly and users can
visit say youtube for example and flash is working fine. But one site we use
opens a link and take the user to a page this is just
somesite.com/some_flash_page.swf and IE doesn't know what to do with a
.swf? But disable the User Configuration part of the GP and it works?
- Also, I am using the Start Menu redirect features, is it possible to do
this on a per-computer basis rather than a user basis as software is
installed in one of two different places depending on the computer?
Any help with these will be greatly appreciated as I don't use GPOs that
often but would really like to implement them here. Thanks for reading guys
& gals 
Regards,
Bensley.
-----BEGIN GEEK CODE BLOCK-----
Version: 3.1
GIT/MU/U dpu s: a--> C++>$ U+> L++> B-> P+> E?> W+++>$ N K W++ O M++>$ V-
PS+++ PE++ Y+ PGP t 5 X+ R- tv+ b+> DI D+++ G+ e(+++++) h--(++) r++ z++
------END GEEK CODE BLOCK------
| | | |
| Ravi.Sabharanjak@barclaysglobal.com
Posts:72
| | 10/15/2008 3:56 PM |
| Using GPMC, you can extract a list of all the settings that you have
configured in the group policy. From that you should see if you have
enabled any settings that control how activex controls are handled by
IE. (these can be different per zone, so look into the appropriate
zone). For example, you may have set the option to allow only
administrator specified controls to run.
Darren had sent a link to spreadsheet listing all the group policy
settings earlier (Microsoft download). This should be in the archives.
-Ravi
________________________________
From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of James Bensley
Sent: Wednesday, October 15, 2008 2:11 AM
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] Group Policy Mistakes!
Hey Guys,
I have just set another domain up, just a single domain/single forest
set up.
I have a problem with group policy. After going through and setting
every single setting nearly (which took hours!) I have made some errors
somewhere but can't find where exactly and wondered if anyone knew off
the top of their head where I had made the mistake?
The following issues are occurring on my client machines:
* Explorer opens in a new window constantly, ever folder a use
clicks is a new explorer window opens?
* .swf file extensions are not recognised by Internet Explorer;
for some reason, both flash and shockwave plugins are working correctly
and users can visit say youtube for example and flash is working fine.
But one site we use opens a link and take the user to a page this is
just somesite.com/some_flash_page.swf and IE doesn't know what to do
with a .swf? But disable the User Configuration part of the GP and it
works?
* Also, I am using the Start Menu redirect features, is it
possible to do this on a per-computer basis rather than a user basis as
software is installed in one of two different places depending on the
computer?
Any help with these will be greatly appreciated as I don't use GPOs that
often but would really like to implement them here. Thanks for reading
guys & gals
Regards,
Bensley.
-----BEGIN GEEK CODE BLOCK-----
Version: 3.1
GIT/MU/U dpu s: a--> C++>$ U+> L++> B-> P+> E?> W+++>$ N K W++ O M++>$
V-
PS+++ PE++ Y+ PGP t 5 X+ R- tv+ b+> DI D+++ G+ e(+++++) h--(++) r++ z++
------END GEEK CODE BLOCK------
--
This message and any attachments are confidential, proprietary, and may be privileged. If this message was misdirected, Barclays Global Investors (BGI) does not waive any confidentiality or privilege. If you are not the intended recipient, please notify us immediately and destroy the message without disclosing its contents to anyone. Any distribution, use or copying of this e-mail or the information it contains by other than an intended recipient is unauthorized. The views and opinions expressed in this e-mail message are the author's own and may not reflect the views and opinions of BGI, unless the author is authorized by BGI to express such views or opinions on its behalf. All email sent to or from this address is subject to electronic storage and review by BGI. Although BGI operates anti-virus programs, it does not accept responsibility for any damage whatsoever caused by viruses being passed.
| | | |
| darren
Posts:181
| | 10/15/2008 7:31 PM |
| James-
We have a tool called GP Spy. Think of it as like "regmon for Group
Policy". Email me off-list and I can send you a copy of it. You basically
run it on a system that is having problems, perform the operation that is
having issues, and it will show what, if any, Admin Template policies are
being queried during that operation. It only works for Admin Template
registry policy but it might help here.
Darren
****
Darren Mar-Elia
CTO & Founder
SDM Software, Inc.
"The Group Policy Experts"
www.sdmsoftware.com <http://www.sdmsoftware.com/>
Automate Group Policy audits and changes with the GPExpertT
Scripting Toolkit, http://www.sdmsoftware.com/group_policy_scripting
From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Sabharanjak, Ravi
BGI SF
Sent: Wednesday, October 15, 2008 12:52 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Group Policy Mistakes!
Using GPMC, you can extract a list of all the settings that you have
configured in the group policy. From that you should see if you have enabled
any settings that control how activex controls are handled by IE. (these can
be different per zone, so look into the appropriate zone). For example, you
may have set the option to allow only administrator specified controls to
run.
Darren had sent a link to spreadsheet listing all the group policy settings
earlier (Microsoft download). This should be in the archives.
-Ravi
_____
From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of James Bensley
Sent: Wednesday, October 15, 2008 2:11 AM
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] Group Policy Mistakes!
Hey Guys,
I have just set another domain up, just a single domain/single forest set
up.
I have a problem with group policy. After going through and setting every
single setting nearly (which took hours!) I have made some errors somewhere
but can't find where exactly and wondered if anyone knew off the top of
their head where I had made the mistake?
The following issues are occurring on my client machines:
* Explorer opens in a new window constantly, ever folder a use clicks
is a new explorer window opens?
* .swf file extensions are not recognised by Internet Explorer; for
some reason, both flash and shockwave plugins are working correctly and
users can visit say youtube for example and flash is working fine. But one
site we use opens a link and take the user to a page this is just
somesite.com/some_flash_page.swf and IE doesn't know what to do with a .swf?
But disable the User Configuration part of the GP and it works?
* Also, I am using the Start Menu redirect features, is it possible to
do this on a per-computer basis rather than a user basis as software is
installed in one of two different places depending on the computer?
Any help with these will be greatly appreciated as I don't use GPOs that
often but would really like to implement them here. Thanks for reading guys
& gals
Regards,
Bensley.
-----BEGIN GEEK CODE BLOCK-----
Version: 3.1
GIT/MU/U dpu s: a--> C++>$ U+> L++> B-> P+> E?> W+++>$ N K W++ O M++>$ V-
PS+++ PE++ Y+ PGP t 5 X+ R- tv+ b+> DI D+++ G+ e(+++++) h--(++) r++ z++
------END GEEK CODE BLOCK------
--
This message and any attachments are confidential, proprietary, and may be
privileged. If this message was misdirected, Barclays Global Investors
(BGI) does not waive any confidentiality or privilege. If you are not the
intended recipient, please notify us immediately and destroy the message
without disclosing its contents to anyone. Any distribution, use or copying
of this e-mail or the information it contains by other than an intended
recipient is unauthorized. The views and opinions expressed in this e-mail
message are the author's own and may not reflect the views and opinions of
BGI, unless the author is authorized by BGI to express such views or
opinions on its behalf. All email sent to or from this address is subject
to electronic storage and review by BGI. Although BGI operates anti-virus
programs, it does not accept responsibility for any damage whatsoever caused
by viruses being passed.
| | | |
|
|