dazza007

I did it !!! Totally forgot about files being blocked automatically! Used the command prompt to copy the files over to the central store from the local store to the central store %systemroot%\PolicyDefinitions\* %logonserver%\sysvol\%userdnsdomain%\policies\PolicyDefinitions\ Never again!

Thanks mate. No support here so you are my life line! What a day this is turning out to be! I tried another and the Group policy management console is still loading I tried the local group policy editor and it loads fine!! this is me atm>>>

I put the adml file in to the en-US folder and the en-GB folder no difference Also tried putting it in the same folder policy definitions

[ATTACH=CONFIG]27893[/ATTACH] Thanks alot I am getting Group Policy Management Loading after saving the files to the local policy definition folder on the DPC witht the adml language files. I have tried several fixed. Removing the chrome.admx and chrome.adml files from the folder allows GPM to load straight away Putting just chrome.admx file causes the issue. Having language files makes no difference. Do I need to delete the central store and recreate the folder?

having a little trouble importing Admx files into group policy manager and would love to have someones opinion I have Created a central repository at \\domain\SYSVOL\site.local\Policies\PolicyDefinitions and replicated the 3 domain controllers I uploaded the admx files to the central store and the language files to \\domain\SYSVOL\site.local\Policies\PolicyDefinitions\EN-GB The domain controller I am working on has a copy of the admx and adml language file in the c:\Windows\Policy Definitions folder too The templates are for chrome from google and the chromium project. Our domain controllers have Server 2012 I get the error "chrome.admx is not a valid template file. Only files that end with the .adm file extension can be added to this Group Policy Object " when Add/removing templates from the central repository.

I am having fun with implementing SCUP at the moment and have an error when trying to update the catalog. I am following Kent Agerlunds instructions form Coretech (which everyone else has) When updating the catalogue I get the following: "the file specified has certificate but signature check failed, will be treated as unsigned" The WSUS server is not local (to the SCCM server) I have applied the patch update KB2530678 to the SCCM server and the WSUS server. The import catalogue is the Adobe Flash Player Updates Catalog I have imported the certificate to the WSUS server successfully Help is very much appreciated! Update......... I used the certificate generated in the SCCM SCUP Publisher 2011, further reading this afternoon indicates that I may need to generate the certificate on our cert authority server and distribute the certificates from there?????? has anyone done this or can point me in the right direction? Here is the scup log file. Import: Verify catalog trust for C:\Users\administrator\AppData\Local\Temp\2\\xz5kt5gd.hjc\AdobeFlashPlayerCatalog_SCUP.cab$$ File C:\Users\administrator\AppData\Local\Temp\2\\xz5kt5gd.hjc\AdobeFlashPlayerCatalog_SCUP.cab appears to be signed, retrieved certificate, checking signature...$$ File C:\Users\administrator\AppData\Local\Temp\2\\xz5kt5gd.hjc\AdobeFlashPlayerCatalog_SCUP.cab has certificate but signature check failed, will be treated as unsigned.$$ TrustChecker: User does NOT trust file.$$ Import: Catalog C:\Users\administrator\AppData\Local\Temp\2\\xz5kt5gd.hjc\AdobeFlashPlayerCatalog_SCUP.cab is not trusted and will not be processed.$$ 1 results from import added to wizard.$$

Deployed the MSI using SCCM ........ can anyone spot the problem!! Looks like the msi will install with SCCM. Product: Java 8 Update 25 -- Error 1722. There is a problem with this Windows Installer package. A program run as part of the setup did not finish as expected. Contact your support personnel or package vendor. Action installexe, location: C:\windows\Installer\MSIB4D0.tmp, command: /s INSTALLDIR="C:\Program Files\Java\jre1.8.0_25\\" WEB_JAVA=1 WEB_JAVA_SECURITY_LEVEL=H WEB_ANALYTICS=0 EULA=0 NOSTARTMENU=1 AUTO_UPDATE=0 SPONSORS=0 REPAIRMODE=0

Here is our policy My first thought is to change and test the setting. Allow Automatic Updates immediate installation Enabled to Disabled This is the only setting that looks suspect in our WSUS policy MS explaination is This policy specifies whether Automatic Updates should automatically install certain updates that neither interrupt Windows services nor restart Windows.If the status is set to Enabled, Automatic Updates will immediately install these updates after they have been downloaded and are ready to install. If the status is set to Disabled, such updates will not be installed immediately. The issues causing disruption is when users restart the client, a quick review shows that the installation will download and schedule installation at 3 o clock with a 15 minute delay. I am starting to get a grip on the WSUS GPO, however how do I stop installation of the update on restart during lessons? Computer Configuration (Enabled)hide Policieshide Administrative Templateshide Policy definitions (ADMX files) retrieved from the local machine.Windows Components/Windows Update Policy Setting Comment Allow Automatic Updates immediate installation Enabled Allow non-administrators to receive update notifications Disabled Automatic Updates detection frequency Enabled Check for updates at the following interval (hours): 2 Policy Setting Comment Configure Automatic Updates Enabled Configure automatic updating: 4 - Auto download and schedule the install The following settings are only required and applicable if 4 is selected. Scheduled install day: 0 - Every day Scheduled install time: 15:00 Policy Setting Comment Delay Restart for scheduled installations Enabled Wait the following period before proceeding with a scheduled restart (minutes): 15 Policy Setting Comment No auto-restart with logged on users for scheduled automatic updates installations Enabled Re-prompt for restart with scheduled installations Enabled Wait the following period before prompting again with a scheduled restart (minutes): 60 Policy Setting Comment Reschedule Automatic Updates scheduled installations Enabled Wait after system startup (minutes): 30 Policy Setting Comment Specify intranet Microsoft update service location Enabled Set the intranet update service for detecting updates: Set the intranet statistics server: (example: http://IntranetUpd01)

Hi I just wanted to scope how people manage releasing Windows updates to clients on site. Our site has WSUS to install all what Microsoft release as critical updates, definition updates, security updates and update rollups to be pushed out on Patch Tuesday to the client machines. I have noticed that some machines are out of action during lesson time for 10-15 minutes when the computer is restarted by a user. Machines onsite are not restarted, but go to sleep overnight. What is the best way that I can manage the windows updates being release and installed on client machines to prevent downtime during lessons. Thanks Darren

Hi I have a service desk software that requires the use of IMAP to call mail On our exchange 2003 sp2 server we have owa and use smtp , pop3 and imap is disabled. As all mailboxes have imap and pop3 disabled could i enable the imap service in esm and disable the protocol on the mailbox. Ie by selecting all mailboxes in ESM and disabling the protocol Then I could enable the protocol for the only mailbox connecting to the service desk software.... Would this be the best way to go about enabling IMAP on one mailbox on the server. Thanks, D

I have been looking at an issue when a MS Mouse is plugged in on our domain computers and a UAC appears. I have enabled not administrators to install the device class of mouse and used pnputil to install various drivers. I used setupapi.log to find when I plugged in the mouse the device downloads automatically from windows update a package. I downloaded this package and staged all the inf files using pnputil and the cat files importing the certificates to the trusted publishers store on the local computer. I still get searching windows update and the mouse brings up the UAC prompt. I have pasted the setupapi for diagnosis at the technet article below #it has been fun and games Microsoft Mouse and Keyboard Center UAC Prompts

Forgot to stage the inf files.... oops! works now

Hi I have been looking at a problem in that when users plug in a MS Mouse a newdevice is detected and UAC prompts for credentials I have enabled Group Policy Objects to allow device installation Computer Configuration/Administrative Templates/System/Device Installation Restrictions for mice however the device still calls up a UAC prompt If I enter my credentials as an admin I get MS Mouse and Keyboard Centre installing. I looked though setupapi.log and the software is being called from microsoft. I tried installing the software using SCCM however the installation is not an msi and won't work silently. Is there any way that I can prevent a UAC prompt for this mouse in Group Policy / Registry Setting Totally stumped on this! Cheers, Darren

It works ok mate just as long as the users restart their computer. We had a few hiccups with one of the dns servers going down during staging however overall it is getting there Staff have to sync their computers I transfer the data to a temp backup and the process is then put into action for the next morning I had to remove the quota limits on the receiving drive as the process threw up errors. Thanks for your help

Thanks I copied the local cached data onto a drive and binned the csc. I had to delete the user profile to get the new policy loaded... slowly getting there!

Can anyone advise? Is this a wise thing to do with user data? 1.Open up registry editor (WARNING: Only for Advanced Users) 2.Browse to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Csc 3.Add a new key (folder) called Parameters (Sometimes this already exists) 4.Under HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Csc\Parameters, add a new DWORD called FormatDatabase and set its value to 1

Figure that out... remove the quota on the receiving drive ...... no lockups so far. However when the computer syncs to the new share every document on the sync errors saying that a document on the server is the same on this computer with the same time and date stamp! Grrrr.

Hi James Testing not going so well . Problem with one of our test users! Do you have any ideas on this, I think it is the quotas on the new server as I have robocopied the data across and the group policy them moves the data. The user data was still on the old server when logging in ! and the folder redirection was still to the old server.thank god I had rollback this morning! Looking into it now - The following error occurred: "Failed to redirect because there is not enough disk space on the target folder "\\fs3\\Desktop".". Error details: "There is not enough space on the disk. Stressful morning it has been!

HI James, What can I say, you miss one check box. The policies are making perfect sense, I transferred some of the msi installation GPOs into SCCM. The redirection is transparent. I did some testing today, using robocopy, sharing the home drive and then just moving the user into a test ou with a copy of your w7 gpo with the redirected library settings and the check box ticked. I didn't change the home drive mapping in AD and worked. Changing the AD before interfered with the GPO migration, confusing! The GPO also moves the data from original file share, leaving it empty. The migrated file sync to the home share works flawlessly. I needed to reboot the laptops twice to ensure 100% of the laptops got the group policy Running a 10 user test group this weekend. Migrated all student users without a hiccup so hopefully this is the only hurdle to get over! Once this is done then its' setting up the new domain

James you are a star.... works a treat

Cheers James, We met once at my interview before you left ...lol I think you setup the GPO at your old workplace to get the settings from a admx file that is local for the offline file sync. So a the same user logs on to the same machine and gets the old and new mappings ...confusing! Despite searching I could not find where you set up the redirection to the user home drive other than in AD. I'll look into your suggestions... Thanks Darren

Hi I have been working on migrating 100plus user home drives who use laptops and have offline file sync I used this script in testing successfully the migration of users with offline file sync http://blogs.technet.com/b/filecab/archive/2007/03/29/cscrenameitem-vbs.aspx I used the syntax below for the script as I understand that offline files sync using wmi object not CscRenameItem.vbs /OldItemPath: /NewItemPath: [/Machine:value] [/user:value] [/Password:value] I managed to get a successful migration when logging onto the machine as an admin and running the script after data migration and an home folder update My thought was that a user can run a shortcut to call the script and migrate their offline file syncs. If a user logs on to the machine they get a new home drive url sync as well as an old home drive url sync. So I cannot get the user to run the script as it fails as the new home share sync already exist. Is there a way of automating the migration of users with offline files? Logging onto 100 users machines is going to be a big administrative task HELP!

Update - when we log the user out from an affected machine and login as an administrator the problem persists. This suggests that there is some trust problem between the server and this machine?

Helllo!! I have been busy diagnosing a problem and now my head is hurting after banging against a wall. We have a networked server 2003 with folders which are mapped as drive letters through group policy on clients. Clients have been loosing connectivity to the drives : " is not accessible The specified network location name is no longer available" The print server is hosted on the same server as are a few other mapped drive letters - connectivity is lost to these too. We have other network mapped drives on the server that do not loose connection and settings on the folder mapping is the same I can ping the server and dns can resolve the server name. There is a connection to the server after the session has been idle for 15 minutes (as the feature session disconnects after 15 min of idle) I disconnect from the mapping but cannot reconnect as the network name is not in use with the name "The specified name is no longer available" #Confused

Anyone had any luck in running this with msiexec?