+ Post New Thread
Results 1 to 6 of 6
Windows 7 Thread, Phantom policy! in Technical; Some of our recently imaged PCs are logging an error (which relates to login scripts running) that seems to show ...
  1. #1
    Sheridan's Avatar
    Join Date
    Oct 2010
    Posts
    1,317
    Thank Post
    115
    Thanked 90 Times in 60 Posts
    Rep Power
    29

    Phantom policy!

    Some of our recently imaged PCs are logging an error (which relates to login scripts running) that seems to show that a group policy is preventing access to the cmd.exe:

    Code:
    Access to C:\Windows\System32\cmd.exe has been restricted by your Administrator by location with policy rule {GUID} placed on path C:\Windows\system32\cmd.exe.
    Now, the weird thing is that GUID does not link to any Group Policy in our organisation, and I can't find a reference to it on the local machine! Its only on a certain batch of PCs which were created with the same image, but I can't find a trace of that phantom guid anywhere!

    Anyone got any ideas where this could be hiding?

  2. #2


    Join Date
    Mar 2009
    Location
    Leeds
    Posts
    6,588
    Thank Post
    228
    Thanked 856 Times in 735 Posts
    Rep Power
    296
    its not a local gp rather than a network gp?

  3. #3
    Sheridan's Avatar
    Join Date
    Oct 2010
    Posts
    1,317
    Thank Post
    115
    Thanked 90 Times in 60 Posts
    Rep Power
    29
    I can't see any local GPO's! The GroupPolicy folder is empty on the local machine as well.

  4. #4

    3s-gtech's Avatar
    Join Date
    Mar 2009
    Location
    Wales
    Posts
    2,762
    Thank Post
    145
    Thanked 560 Times in 504 Posts
    Rep Power
    152
    Does the GUID still exist in the sysvol policies folder?

  5. #5
    Sheridan's Avatar
    Join Date
    Oct 2010
    Posts
    1,317
    Thank Post
    115
    Thanked 90 Times in 60 Posts
    Rep Power
    29
    No, its not a valid policy GUID as far as I can see on both the AD servers and the local clients themselves.

  6. #6
    Cache's Avatar
    Join Date
    Apr 2008
    Location
    Cumbria
    Posts
    1,214
    Thank Post
    454
    Thanked 176 Times in 173 Posts
    Blog Entries
    3
    Rep Power
    64
    rsop.msc run as administrator should give you a list of all the policies and their linked OU's/locations and you might be able to work it out from there?

    I had a few machines, not newly built mind you, which were pulling an old GPO I removed a month or 2 earlier at one point for some unknown reason. Runnning gpupdate /force fixed that though.

SHARE:
+ Post New Thread

Similar Threads

  1. School ICT policy
    By catbert in forum School ICT Policies
    Replies: 16
    Last Post: 28th May 2006, 10:52 PM
  2. What is your school policy for pupils who access porn?
    By woody in forum School ICT Policies
    Replies: 24
    Last Post: 8th November 2005, 10:47 PM
  3. Blocking Batch Files using Group Policy in Server 2003
    By markwilliamson2001 in forum Windows
    Replies: 13
    Last Post: 4th October 2005, 05:28 PM
  4. Group Policy Settings Examples
    By mattpant in forum Wireless Networks
    Replies: 20
    Last Post: 17th September 2005, 11:12 PM
  5. Scottish ICT Policies
    By RobC in forum School ICT Policies
    Replies: 4
    Last Post: 20th June 2005, 10:45 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •