+ Post New Thread
Results 1 to 6 of 6
Windows 7 Thread, Phantom policy! in Technical; Some of our recently imaged PCs are logging an error (which relates to login scripts running) that seems to show ...
  1. #1
    Sheridan's Avatar
    Join Date
    Oct 2010
    Posts
    1,160
    Thank Post
    89
    Thanked 84 Times in 56 Posts
    Rep Power
    28

    Phantom policy!

    Some of our recently imaged PCs are logging an error (which relates to login scripts running) that seems to show that a group policy is preventing access to the cmd.exe:

    Code:
    Access to C:\Windows\System32\cmd.exe has been restricted by your Administrator by location with policy rule {GUID} placed on path C:\Windows\system32\cmd.exe.
    Now, the weird thing is that GUID does not link to any Group Policy in our organisation, and I can't find a reference to it on the local machine! Its only on a certain batch of PCs which were created with the same image, but I can't find a trace of that phantom guid anywhere!

    Anyone got any ideas where this could be hiding?

  2. #2


    Join Date
    Mar 2009
    Location
    Leeds
    Posts
    6,207
    Thank Post
    218
    Thanked 812 Times in 694 Posts
    Rep Power
    274
    its not a local gp rather than a network gp?

  3. #3
    Sheridan's Avatar
    Join Date
    Oct 2010
    Posts
    1,160
    Thank Post
    89
    Thanked 84 Times in 56 Posts
    Rep Power
    28
    I can't see any local GPO's! The GroupPolicy folder is empty on the local machine as well.

  4. #4

    3s-gtech's Avatar
    Join Date
    Mar 2009
    Location
    Wales
    Posts
    2,484
    Thank Post
    133
    Thanked 488 Times in 436 Posts
    Rep Power
    138
    Does the GUID still exist in the sysvol policies folder?

  5. #5
    Sheridan's Avatar
    Join Date
    Oct 2010
    Posts
    1,160
    Thank Post
    89
    Thanked 84 Times in 56 Posts
    Rep Power
    28
    No, its not a valid policy GUID as far as I can see on both the AD servers and the local clients themselves.

  6. #6
    Cache's Avatar
    Join Date
    Apr 2008
    Location
    Cumbria
    Posts
    1,116
    Thank Post
    414
    Thanked 149 Times in 147 Posts
    Blog Entries
    3
    Rep Power
    59
    rsop.msc run as administrator should give you a list of all the policies and their linked OU's/locations and you might be able to work it out from there?

    I had a few machines, not newly built mind you, which were pulling an old GPO I removed a month or 2 earlier at one point for some unknown reason. Runnning gpupdate /force fixed that though.

SHARE:
+ Post New Thread

Similar Threads

  1. School ICT policy
    By catbert in forum School ICT Policies
    Replies: 16
    Last Post: 28th May 2006, 10:52 PM
  2. What is your school policy for pupils who access porn?
    By woody in forum School ICT Policies
    Replies: 24
    Last Post: 8th November 2005, 10:47 PM
  3. Blocking Batch Files using Group Policy in Server 2003
    By markwilliamson2001 in forum Windows
    Replies: 13
    Last Post: 4th October 2005, 05:28 PM
  4. Group Policy Settings Examples
    By mattpant in forum Wireless Networks
    Replies: 20
    Last Post: 17th September 2005, 11:12 PM
  5. Scottish ICT Policies
    By RobC in forum School ICT Policies
    Replies: 4
    Last Post: 20th June 2005, 10:45 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •