Search the Community

Hi, I needed to get which of the following settings, and with which values, are applied live on a server. The needed settings are : SeInteractiveLogonRight SeRemoteInteractiveLogonRight SeDenyInteractiveLogonright SeDenyRemoteInteractiveLogonRight It seems I'm achieving it by doing : Secedit /Export /Areas User_Rights /cfgSecedit /Export /Areas User_Rights /cfg c:\undirectorio\gpo.txt Later by checking the file I achieve my goal. I normally check too this other command file generated : Secedit /Export /Areas SECURITYPOLICY /cfg Secedit /Export /Areas SECURITYPOLICY /cfg c:\undirectorio\gpo.txt They seem to give me what I need even when for instance "SeDenyInteractiveLogonright" is set in the local gpo and set too in a gpo applied to the OU where the server belongs. The behavior is the expected one. I get in the secedit output the value set in active directory GPO in the OU. So, my question basically is... is this way the correct one of achieving my goal of getting dump in a plain text file the live settings of the policy applied to the virtual machine?. I can have only a local gpo or could have a local gpo (with default values or not) and later n number of gpo applied at different levels in active directory (site, domain, ou... etc...). So the real question is, my secedit command should give me what I'm trying to get and then to have live seetings in the machine (after all gpo at differrent levels are applied) ?. I have seen too that there is a flag /mergedpolicy but it seems to just output then those values that I have applied at local policy and too at active directory policy?. Am I wrong?. Best regards Thank you so much,

Half their websites seem to only work in IE, so just use that. Go to https://www.autodesk.com/education/free-software/all Click on a product and Create Account Select School IT Administrator Install the server licence manager https://knowledge.autodesk.com/customer-service/network-license-administration/install-and-configure-network-license/windows/install-the-network-license-manager-windows#Download%20from%20Autodesk%20and%20Install You'll need the server name and ethernet mac address which is in the LMTools System Settings tab Go back to a product, eg https://www.autodesk.com/education/free-software/3ds-max Select Licemse type as School: Deploy with network server Normal download will try to use a download manager that ignores proxies. If you can't bypass your proxy use IE and Browser Download. Go to https://registeronce.autodesk.com in IE (Might need compatibility mode), log in with your username, which isn't your email address, it can be found in https://accounts.autodesk.com/Profile/Security same password. At this point I created a "Account" for with the school name and address, and then selected that. It then asks for Product Information, under that should be a form, if not, your browser is too new. Copy the serial number from the email you got when trying to download. Select Single server and copy the hostname and mac address, with no :s or 's You'll get an email, or save from the webpage the .lic file, copy that to the server. At https://manage.autodesk.com you'll find the downloads, filter by network licence, don't click Install now, click View All then pick Browser Download. If your software is not there, eg 3ds, click Download Proudcts at the bottom, select the software, click the arrow to the right of Download Now and select Browser download. Check it's fully downloaded as the exe will run even if it's not, and complain there's files missing. Some downloads are in multiple parts, IE seems to cope with that better than Chrome, needs popups disabling for those sites. While waiting install the licence file on the server. Open LMTools, Config Services, set a service name, eg Flexlm Service Autodesk Path to lmgrd.exe is by default C:\Autodesk\Network License Manager\lmgrd.exe Select the licence file you copied. Click Use Services and Start Server at Power Up Click Save Service Click Start/Stop/Reread Select your server Click Start If you want to add more products, stop the service, edit the .lic file, and combine them https://knowledge.autodesk.com/customer-service/network-license-administration/managing-network-licenses/combining-license-files/combining-license-files-for-multiple-autodesk-products Copy all of the lines from the new license file starting after the VENDOR line. You do not need to copy the SERVER, USE_SERVER or VENDOR lines from the new license as these only need to appear once in a license file. Do not alter the contents of the license information; only copy and paste from one file to another. Then restart the service in the Start/Stop/Reread tab. Run the GB sized exe on a computer, extract to a folder (often fails if it's a USB stick, asking for discs to be inserted, assume it thinks it's on multiple DVDs), from that folder run Setup.exe, click Create Deployment, give it a name, anything will do, give a writable folder to copy the actual install files to. For License Access select network, put in your serial number and product ID from the email, and the network license server, and it will generate an msi and mst for your gpo. There's an SCCM.txt file with some more details. You'll also have to install the CLIC licence manager (one msi and one gpo), and maybe some VC++ redistributables (run the exes and then extract the MSIs from C:\programdata\Package Cache) So far I've done this for Maya (Worked), Motionbuilder (Worked), AutoCAD (creating admin install Worked, but GPO deploy not working yet), Sketchbook (Installed, but won't run), Stingray (Installed, but wants activating with serial number, something about a licence feature not being found), 3D Studio Max (Installed, but won't run, log file says licencing error)

Hello, Can anyone offer advice on the following please ? I am looking to run a batch file to install software at logon using GPO. I do not wish to use msi, wrapper or zap files; the program to be installed is huge 15 gb and contains multiple msi's. The batch file should run the following - Img\Setup.exe /W /q /I Img\ECS 2015.ini /language en-us I understand I can have a batch file containing "%~dp0Img\Setup.exe /W /q /I Img\ECS 2015.ini /language en-us" Is this written correctly ? I am also looking to run this batch file just once; can I incorporate within the batch file commands to check that the program has installed and prevent the installer from running again ? Thanks...

I am after some advice and best practises for mapping printers Currently we use a print server and deploy printers using the right click and deploy to group policy method under print management, this maps the printer at computer GPO configuration level Often it works fine but sometimes it doesn't, usually when a member of staff or student comes to us saying they don't have any printers available a simple reboot can fix the issue When I map the printers via GPP however it seems to work every time - the issue here is that it then does not register via PaperCut, even though I have set the port IP type to a PaperCut port Arena, our PaperCut support company themselves say that this method of GPP is not supported with PaperCut It's getting to be an annoying problem I would like to fix once and for all, we are running windows 10 1709 for client desktops and server 2016 for the print server

Hi, So I have been asked to enable the sound options for Year 7 & 8 students at our school (for 'yesterday' as per usual!)- we have RM CC4 and 'somewhere' in one of the 47 GPO's there is a restriction on staff & students from being able to see the "Sound & Multimedia" option in control panel or indeed see the volume icon on their taskbars. Is there any way to see which group policy is being applied / takes precedence? It has been a very long time since I played with group policy and the policy I can see within the RM Management Console are less than the group policies within the usual group policy management panel on the server. If memory serves, I would have to enable access globally and then restrict it to individual groups? Is that right? Many thanks for any help in advance!

I have FINALLY found where MS hid the settings for Edgeium favorites!! I was trying to find "managed favourites" as in the Chrome ADMX it is called "mananged bookmarks" but MS renamed it to "CONFIGURE favorites". It uses the same JSON format as the Chrome ADMX. This website was usefull in helping me find the correct ADMX files for Edge Chromium. MS refers to this as Edge versions later than version 77. https://www.techrepublic.com/article/how-to-manage-the-new-microsoft-edge-through-group-policy/ also https://osddeployment.dk/2020/02/02/how-to-leveraged-managed-favorites-for-edge-on-windows/

I'm following the deploy for GPO guide. I've done the "setup.exe /a" and created a basic admin image. I'm now trying to install the resulting draw.msi from the image and I'm getting: Error 2803.Dialog View did not find a record for the dialog SetupError. The photoshop also errors but the shell install worked fine. ideas? I've re-done the admin files to a local drive and tried the msi files from there and it doesn't work. if I run the files from the mounted iso it installs fine. (but I can't deploy that as it has no license info) The procedure hasn't changed from older versions of CorelDraw so I'm hoping someone has run into this before..

Hi All, Windows 10 PC network. Printers are mapped using a script called by GPO. Everything works fine on most machines but for one machine today that has stopped. Whenever the script calls this line: WshNetwork.SetDefaultPrinter Printerpath It throws up "The Environment is Incorrect". Problem is this only happens when it tries to map the default printer. Our two follow me queues for colour and mono printing map fine. Another computer in the same office mapping to the same printer works fine. The user can print to the requested printer via her ID card and follow me but her computer will just not map that printer as the default so she can print directly to it. I googled and found two answers but both are behind the experts.exchange paywall - can't afford £178!! Any ideas?

I'm running Win10 Education (the enterprise version) I have a set of laptops I wan't the store and its apps disabled on. I've set the "Computer Configuration > Administrative Templates > Windows Components > Store" disable the store and apps unfortunately the store is disabled but the apps still work. are these appx programs not considered store apps? (I've tried app locker but it keeps crashing when I use it) I want to disable the windows remote desktop (NOT mstsc, but the appx version with the same name) and windows mail specifically.

Hi all Has anyone managed actually install office 2021 via GPO? Quite helpfully there is no msi for it... Im currently using the following script; setup.exe /configure "Server\software\NETWORK\Office 2021\Configuration.txt" I've tried booting from the network and I've tried booting locally. I've tried bat and powershell. Frustratingly the scripts run for other software packages and if I click them manually. And help would be greatly appreciated Chris

I'm fed up with the useless favourites bar prompt for every user on every PC asking you to set up the bar and eating up page space. All users ignore the thing! I'd setup the (computer setting?!?) to disable the favourites bar it states that the bar will be hidden and users can't change it...Great but it doesn't work. I've confirmed with a GPO results that the GPO is configured and set on the target PC but new users still get the promp and can change the settings.... ideas?

Hello everyone, After using RM CC3 with Windows 2003 and XP for the last 14 years, we are now about the start building a brand new network! Applause!!!! We are awaiting licences for Windows Server 2012 R2, and will be building the virtual server/s very soon. We cannot start the big change over until the summer (which gives us 5 weeks to install the network, change over PC's to Win7 about 210, 80 of these will be brand new) but some things we can get started with. One thing we want to get done now are the Group Policies, we obviously have our current ones for 2003 and XP (Not sure if I could export these to 2012) which may not include some policy settings but does anyone know where you can get pre-configured GPO's for schools/education from Microsoft or similar for Windows 7? We have decided not to go for Windows 8 just yet! I have started to create my own, but I am unsure for some settings and would like to at least compare my own to someone else's as I go along as this is the first time I have ever done anything like this. Ideally if Microsoft provide one that is pre-configured for schools that does the basics to stop the students changing settings etc that you can tweak to your own need that would be awesome. Any help would be greatly received.

Hi geekers, Please, as a last resort, I am appealing to you for help. having spectacularly failed to deploy Java 5.0.52 2 weeks ago for a controlled assessment for AQA, I had to do the suite manually with less than an hour to sort it! i have read and read over the last 6 months and have yet to have a definitive way to sort Java, (flash+reader too), but mainly java gives me the stress. Last time I tried this, The offline installer msi that i grabbed from the %appdata%locallow folder appeared to deploy on computerstartup as I have verbose mode enable and could see it installing. However, when going into control panel to check the version, Java is completely destroyed saying that there is no version at all; Java icon is replaced with the unknown file icon... the really annoying thing is that this damned online test (the same one that worked with .52 three weeks ago was now demanding v.55!!!! Please could someone give me a good guide? Everyone goes on about simply deploying Java as the msi but why EVERYTIME I try this, it NEVER works? DO I need to uninstall every java on every machine to deploy this way and if so, how can i easily do it? I have spent enough hours on this and am sure there must be many ways you guys never have to worry about it like this. Please help me over this once and for all........ If it the last thing I do, I want it done and done right :-/

Hey all! I am trying to setup a redirected start menu and yes it is pulling the shortcuts down that it is supposed to. However, it is still displaying the local machine shortcuts too! Does anyone know what gpo can stop this? Thanks in advance! Matt

Hi All I am trying to set my target location of my folders etc so that they are set to my network drive and not locally, but the target part under the location tab is not editable, i also do not see the 3 boxes underneath, is this a GPO setting that i'm not sure of? any ideas of it's location?

Hi Guys Just want to pick your brains on this one. Three of us have installed Win 8.1 Enterprise on our machines to test various things out, however our redirected documents folder is failing to redirect. Previously we had Win 8 Enterprise on and it worked fine, no GPO changes have been made since. The event log says... Event ID: 1112 "The Group Policy Client Side Extension Folder Redirection was unable to apply one or more settings because the changes must be processed before system start up or user log on. The system will wait for Group Policy processing to finish completely before the next start up or log on for this user, and this may result in slow start up and boot performance." Then just above... Event ID: 1085 "Windows failed to apply the Folder Redirection settings. Folder Redirection settings might have its own log file. Please click on the "More information" link." I have tried (numerous times!) running gpupdate /force from an elevated command prompt, then logging off and back on and it's not applying the redirections. This is what the general advice to solve this issue seems to be. I am a bit of a loss as to why it's not working, it worked fine in Windows 8. Any suggestions would be most welcome.