Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

Evt ID 1085 GP client-side extension IE ZoneMapping failed to exec

1,961 views
Skip to first unread message

Scott

unread,
May 22, 2008, 8:27:00 AM5/22/08
to
We are seeing the following userenv id 1085 errors on all domain XP Pro SP2
computers:
The Group Policy client-side extension Internet Explorer Zonemapping failed
to execute.
Within a group policy applicable to the computers we ahve configured a
number of websites within the the Computer Config - Admin Tmplates - Windows
Components - Internet Explorer - Internet Control Panel - Security Page: Site
to Zone Assignment List. I have included a sampling of the entries below on
the theory that perhaps there is a syntax error??
*.windowsupdate.com
*.windowsupdate.microsoft.com
http://*.update.microsoft.com
http://10.0.1.24
http://download.windowsupdate.com
http://v5.windowsupdate.microsoft.com
https://*.update.microsoft.com
https://v5.windowsupdate.microsoft.com
There are also numerous other entries in the format www.domainname.com.

Additonally, here is an excerpt from a userenv logfile from one of the
computers:
USERENV(2d0.7cc) 08:41:28:187 GetGPOInfo: Local GPO's gpt.ini is not
accessible, assuming default state.
USERENV(2d0.7cc) 08:41:28:265 ProcessGPOs: Extension Internet Explorer
Zonemapping ProcessGroupPolicy failed, status 0xd.
USERENV(2d0.5ec) 10:19:19:711 GetGPOInfo: Local GPO's gpt.ini is not
accessible, assuming default state.
USERENV(2d0.5ec) 10:19:19:774 ProcessGPOs: Extension Internet Explorer
Zonemapping ProcessGroupPolicy failed, status 0xd.
USERENV(2d0.5ec) 11:57:19:867 GetGPOInfo: Local GPO's gpt.ini is not
accessible, assuming default state.
USERENV(2d0.5ec) 11:57:19:929 ProcessGPOs: Extension Internet Explorer
Zonemapping ProcessGroupPolicy failed, status 0xd.
USERENV(2d0.5ec) 13:30:20:166 GetGPOInfo: Local GPO's gpt.ini is not
accessible, assuming default state.
USERENV(2d0.5ec) 13:30:20:229 ProcessGPOs: Extension Internet Explorer
Zonemapping ProcessGroupPolicy failed, status 0xd.
USERENV(2d0.5ec) 15:01:20:346 GetGPOInfo: Local GPO's gpt.ini is not
accessible, assuming default state.
USERENV(2d0.5ec) 15:01:20:408 ProcessGPOs: Extension Internet Explorer
Zonemapping ProcessGroupPolicy failed, status 0xd.
USERENV(2d0.5e8) 16:50:39:682 GetGPOInfo: Local GPO's gpt.ini is not
accessible, assuming default state.
USERENV(2d0.438) 16:51:01:291 PolicyChangedThread: UpdateUser failed with
1008.
USERENV(a34.a38) 16:51:10:885 LoadUserProfile: Failed to enable the restore
privilege. error = c0000061
USERENV(2d0.f4c) 16:53:52:694 GetGPOInfo: Local GPO's gpt.ini is not
accessible, assuming default state.
USERENV(2d0.390) 16:54:13:506 PolicyChangedThread: UpdateUser failed with
1008.
USERENV(8cc.8c8) 16:54:17:272 LoadUserProfile: Failed to enable the restore
privilege. error = c0000061
USERENV(2d0.a48) 16:56:17:754 GetGPOInfo: Local GPO's gpt.ini is not
accessible, assuming default state.
USERENV(ed0.ed4) 16:56:18:691 LoadUserProfile: Failed to enable the restore
privilege. error = c0000061
USERENV(2d0.5ec) 16:57:20:331 GetGPOInfo: Local GPO's gpt.ini is not
accessible, assuming default state.
USERENV(2d0.5ec) 16:57:20:393 ProcessGPOs: Extension Internet Explorer
Zonemapping ProcessGroupPolicy failed, status 0xd.
USERENV(2d0.5ec) 18:43:28:120 GetGPOInfo: Local GPO's gpt.ini is not
accessible, assuming default state.
USERENV(2d0.5ec) 18:43:28:182 ProcessGPOs: Extension Internet Explorer
Zonemapping ProcessGroupPolicy failed, status 0xd.
USERENV(2d0.5ec) 20:14:35:882 GetGPOInfo: Local GPO's gpt.ini is not
accessible, assuming default state.
USERENV(2d0.5ec) 20:14:35:944 ProcessGPOs: Extension Internet Explorer
Zonemapping ProcessGroupPolicy failed, status 0xd.
USERENV(2d0.5ec) 21:59:36:739 GetGPOInfo: Local GPO's gpt.ini is not
accessible, assuming default state.
USERENV(2d0.5ec) 21:59:36:879 ProcessGPOs: Extension Internet Explorer
Zonemapping ProcessGroupPolicy failed, status 0xd.
USERENV(2d0.5ec) 23:54:37:061 GetGPOInfo: Local GPO's gpt.ini is not
accessible, assuming default state.
USERENV(2d0.5ec) 23:54:37:108 ProcessGPOs: Extension Internet Explorer
Zonemapping ProcessGroupPolicy failed, status 0xd.
USERENV(2d0.5ec) 01:52:37:117 GetGPOInfo: Local GPO's gpt.ini is not
accessible, assuming default state.
USERENV(2d0.5ec) 01:52:37:196 ProcessGPOs: Extension Internet Explorer
Zonemapping ProcessGroupPolicy failed, status 0xd.
USERENV(2d0.5ec) 03:45:43:216 GetGPOInfo: Local GPO's gpt.ini is not
accessible, assuming default state.
USERENV(2d0.5ec) 03:45:43:263 ProcessGPOs: Extension Internet Explorer
Zonemapping ProcessGroupPolicy failed, status 0xd.
USERENV(2d0.5ec) 05:40:43:264 GetGPOInfo: Local GPO's gpt.ini is not
accessible, assuming default state.
USERENV(2d0.5ec) 05:40:43:326 ProcessGPOs: Extension Internet Explorer
Zonemapping ProcessGroupPolicy failed, status 0xd.
USERENV(2d0.5ec) 07:33:44:002 GetGPOInfo: Local GPO's gpt.ini is not
accessible, assuming default state.
USERENV(2d0.5ec) 07:33:44:049 ProcessGPOs: Extension Internet Explorer
Zonemapping ProcessGroupPolicy failed, status 0xd.


What is the fix for this error?


Jorge Silva

unread,
May 22, 2008, 8:31:09 AM5/22/08
to
Hi
check
http://www.eventid.net/display.asp?eventid=1085&eventno=1412&source=Userenv&phase=1

--
I hope that the information above helps you.
Have a Nice day.

Jorge Silva
MCSE, MVP Directory Services

Scott

unread,
May 22, 2008, 8:42:01 AM5/22/08
to
Jorge,

Thanks for the response, but I had already checked that source since
typically eventid.net is my 'first stop' for troubleshooting. However, the
guidance did not fit our situation. We have no IP address wildcard syntax
issues.

Scott

unread,
May 28, 2008, 8:37:00 AM5/28/08
to
Here is more verbose info from userenv log. This issue has not gone away, so
any comments assisting me in determining how to correct this issue would be
appreciated:

USERENV(324.a80) 11:38:04:557 ProcessGPOs: Processing extension Internet
Explorer Zonemapping
USERENV(324.a80) 11:38:04:557 ReadStatus: Read Extension's Previous status
successfully.
USERENV(324.a80) 11:38:04:557 CompareGPOLists: Different version numbers
found
USERENV(324.a80) 11:38:04:557 ProcessGPOList: Entering for extension
Internet Explorer Zonemapping
USERENV(324.a80) 11:38:04:557 GetWbemServices: CoCreateInstance succeeded
USERENV(324.a80) 11:38:04:573 ConnectToNameSpace: ConnectServer returned 0x0
USERENV(324.a80) 11:38:04:573 LogExtSessionStatus: Successfully logged
Extension Session data
USERENV(324.a80) 11:38:04:604 ProcessGPOList: Extension Internet Explorer
Zonemapping returned 0xd.
USERENV(324.a80) 11:38:04:604 ProcessGPOList: Extension Internet Explorer
Zonemapping doesn't support rsop logging
USERENV(324.a80) 11:38:04:604 ProcessGPOs: Extension Internet Explorer

Zonemapping ProcessGroupPolicy failed, status 0xd.

knightly

unread,
Jun 12, 2008, 5:52:37 PM6/12/08
to
Same issue here, seems to be all over the place. i've seen it for several
customers...any MVP's or MS PSS people with some light to shine?

Razn

unread,
Jun 17, 2008, 2:46:02 PM6/17/08
to
Have you tried KB898062 ?
http://support.microsoft.com/kb/898062/en-us

knightly

unread,
Jun 17, 2008, 3:23:01 PM6/17/08
to
nope; the error is IEzonemapping not IPSEC, and there are no restricted
groups in use.

Razn

unread,
Jul 5, 2008, 9:37:00 PM7/5/08
to
Sorry for the late reply. I was away for a while. We had the same issue, and
it turned to be someone had put http://<hostname> instead of FQDN name. when
that entry was removed the error disappeared.

Scott

unread,
Jul 9, 2008, 12:54:02 PM7/9/08
to
Thanks...we will try that since we did have a mixture of FQDN's and web URL's
in the site to zone mapping list. Question: Is it acceptable to have IP
addresses in the mapping list? I have a couple of iSCSI SAN storage processor
management interfaces which require relaxed security functions to enable the
Java management utility to run, but I have not set up those interfaces in DNS.

Razn

unread,
Jul 9, 2008, 10:06:04 PM7/9/08
to
I believe the following link might answer your question

http://blogcastrepository.com/blogs/mattbro/archive/2006/09/07/2183.aspx

Cheers!

Scott

unread,
Jul 14, 2008, 12:48:02 PM7/14/08
to
Hi Razn,

I changed every instance of 'http://' to an FQDN and made sure that the
specific IP addresses are in the form specified in the blogcast repository
you provided. I am still getting the same errors. Any other workarounds you
can suggest? If not, how can we get a fix for this?
Thnx,
Scott

Razn

unread,
Jul 15, 2008, 11:34:02 AM7/15/08
to
Hi Scott,

Well, I guess you have to look into more logs, providing that sysvol
replication is working fine between your DCs

Enable client side extension logging on client

Key: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon

Enter the following:

Value: GPTextDebugLevel

Value Type: REG_DWORD

Value Data: 10002 (Hexadecimal)

Brndlog.txt log will be under either of the following directories

%USERPROFILE%\Application Data\Microsoft\Internet Explorer

%USERPROFILE%\Local Settings\Application Data\Microsoft\Internet Explorer


I would suggest you run gpresult /v on the workstation and pipe it to text
file (or RSOP, I use the 1st one), it is part of support tools

Take alook at this link

http://technet2.microsoft.com/windowsserver/en/library/8fe9f51a-ac45-4213-85c7-1bf5aaa5bd9b1033.mspx?mfr=true


Cheers!

Scott

unread,
Jul 16, 2008, 8:25:27 AM7/16/08
to
Razn,
Pasted below are results of brndlog.txt. Due to limits on # of characters in
post, I will paste the output of verbose gpupdate in a 2nd reply:
07/14/2008 07:18:58 COM initialized on a second attempt with S_FALSE
success code!

07/14/2008 07:18:58 Processing Group Policy...
07/14/2008 07:18:58 Starting Internet Explorer group policy processing
part 1 (copying files) ...
07/14/2008 07:18:58 Done.

07/14/2008 07:18:58 Clearing policies set by a previous list of GPOs...
07/14/2008 07:18:58 Done.

07/14/2008 07:18:58 Starting Internet Explorer group policy processing
part 2 ...

07/14/2008 07:18:58 Branding Internet Explorer...
07/14/2008 07:18:58 Command line is "BrandInternetExplorer /mode:gp
/ins:"C:\Documents and Settings\mcintoshs\Local Settings\Application
Data\Microsoft\Internet Explorer\Custom Settings\Custom0\INSTALL.INS"
/flags:eriu=1,favo=1,qlo=1,chl=1,chlb=1".

07/14/2008 07:18:58 Global branding settings are:
07/14/2008 07:18:58 Context is (0x00800200) "Group Policy";
07/14/2008 07:18:58 Settings file is "C:\Documents and
Settings\mcintoshs\Local Settings\Application Data\Microsoft\Internet
Explorer\Custom Settings\Custom0\INSTALL.INS";
07/14/2008 07:18:58 Target folder path is "C:\Documents and
Settings\mcintoshs\Local Settings\Application Data\Microsoft\Internet
Explorer\Custom Settings\Custom0".
07/14/2008 07:18:58 Done.

07/14/2008 07:18:58 About to clear previous branding...
07/14/2008 07:18:58 Done.

07/14/2008 07:18:58 Processing migration of old settings...
07/14/2008 07:18:58 Done.

07/14/2008 07:18:58 Processing wininet setup...
07/14/2008 07:18:58 Done.

07/14/2008 07:18:58 Processing deletion of connection settings...
07/14/2008 07:18:58 Existing connection settings weren't
specified to be deleted!
07/14/2008 07:18:58 Done.

07/14/2008 07:18:58 Processing zones HKCU settings...
07/14/2008 07:18:58 Done.

07/14/2008 07:18:58 Processing local machine policies and
restrictions...
07/14/2008 07:18:58 GP context. Not processing the HKLM sections.!
07/14/2008 07:18:58 Done.

07/14/2008 07:18:58 Processing current user policies and
restrictions...
07/14/2008 07:18:58 ! processExtRegInfSectionHelper for
section"ExtRegInf.Hkcu".
07/14/2008 07:18:58 ! Key is "SOFTWARE\Microsoft\Active
Setup\Installed Components\{A509B1A7-37EF-4b3f-8CFC-4F3A74704073}".
07/14/2008 07:18:58 Not Delaying executing C:\Documents and
Settings\mcintoshs\Local Settings\Application Data\Microsoft\Internet
Explorer\Custom Settings\Custom0\seczones.inf.
07/14/2008 07:18:59 "seczones.inf" processed successfully.
07/14/2008 07:18:59 ! Key is "SOFTWARE\Microsoft\Active
Setup\Installed Components\{A509B1A7-37EF-4b3f-8CFC-4F3A74704073}".
07/14/2008 07:18:59 Machine is not hardened

07/14/2008 07:18:59 Done.

07/14/2008 07:18:59 Processing legacy policies and restrictions...
07/14/2008 07:18:59 There are no legacy *.inf files to process!
07/14/2008 07:18:59 Done.

07/14/2008 07:18:59 Processing general customizations...
07/14/2008 07:18:59 Done.

07/14/2008 07:18:59 Processing Help->About customization...
07/14/2008 07:18:59 Done.

07/14/2008 07:18:59 Processing browser toolbar buttons...
07/14/2008 07:18:59 There are no toolbar buttons to process!
07/14/2008 07:18:59 Done.

07/14/2008 07:18:59 Processing root certificates...
07/14/2008 07:18:59 This feature is for ISPs only!
07/14/2008 07:18:59 Done.

07/14/2008 07:18:59 Processing default favorites and/or quick
links...
07/14/2008 07:18:59 There are no favorites to add!
07/14/2008 07:18:59 There are no quick links to add!
07/14/2008 07:18:59 Done.

07/14/2008 07:18:59 Processing deletion of favorites and/or quick
links...
07/14/2008 07:18:59 None of the favorites folders were specified
to be deleted!
07/14/2008 07:18:59 Done.

07/14/2008 07:18:59 Processing favorites...
07/14/2008 07:18:59 There are no favorites to add!
07/14/2008 07:18:59 Done.

07/14/2008 07:18:59 Processing ordering of favorites...
07/14/2008 07:18:59 There are no favorites to process!
07/14/2008 07:18:59 Done.

07/14/2008 07:18:59 Processing quick links...
07/14/2008 07:18:59 There are no quick links to add!
07/14/2008 07:18:59 Done.

07/14/2008 07:18:59 Processing ordering of quick links...
07/14/2008 07:18:59 There are no links to process!
07/14/2008 07:18:59 Done.

07/14/2008 07:18:59 Processing connection settings...

07/14/2008 07:18:59 Settings from the *.ins file will be
applied to LAN connection!

07/14/2008 07:18:59 Processing autoconfig settings from the
ins file...
07/14/2008 07:18:59 Autoconfiguration settings are not
customized!
07/14/2008 07:18:59 Done.

07/14/2008 07:18:59 Processing proxy settings from the ins
file...
07/14/2008 07:18:59 "Flags" is set to 0x1.
07/14/2008 07:18:59 "ProxyServer" is set to "".
07/14/2008 07:18:59 "ProxyBypass" is set to "<local>".
07/14/2008 07:18:59 Done.
07/14/2008 07:18:59 Notified ICW that connection to the Internet
is configured.
07/14/2008 07:18:59 Done.

07/14/2008 07:18:59 Processing TrustedPublisherLockdown
restriction...
07/14/2008 07:18:59 This restriction is not set!
07/14/2008 07:18:59 Done.

07/14/2008 07:18:59 Registering download URLs as safe for
updating IE...
07/14/2008 07:18:59 Done.

07/14/2008 07:18:59 Deleting links...
07/14/2008 07:18:59 No links to delete!
07/14/2008 07:18:59 Done.

07/14/2008 07:18:59 Creating feeds...
07/14/2008 07:18:59 Done.

07/14/2008 07:18:59 Creating start pages...
07/14/2008 07:18:59 There are no start pages to add!
07/14/2008 07:18:59 Done.

07/14/2008 07:18:59 Creating search providers...
07/14/2008 07:18:59 There are no search providers to add!
07/14/2008 07:18:59 Done.

07/14/2008 07:18:59 Processing active desktop customizations...
07/14/2008 07:18:59 No desktop customizations to process!
07/14/2008 07:18:59 Done.

07/14/2008 07:18:59 Processing channels and their categories (if
any)...
07/14/2008 07:18:59 There are no channels to process!
07/14/2008 07:18:59 Done.

07/14/2008 07:18:59 Processing software update channels...
07/14/2008 07:18:59 There are no software update channels to add!
07/14/2008 07:18:59 Done.

07/14/2008 07:18:59 Actual processing of channels by calling
webcheck.dll "DllInstall" API...
07/14/2008 07:18:59 There is no webcheck processing necessary!
07/14/2008 07:18:59 Done.

07/14/2008 07:18:59 Showing channel bar on the desktop...
07/14/2008 07:18:59 Done.

07/14/2008 07:18:59 Processing subscriptions...
07/14/2008 07:18:59 There are no subscriptions to process!
07/14/2008 07:18:59 Done.

07/14/2008 07:18:59 Refreshing browser settings...
07/14/2008 07:18:59 Skipping browser refresh at login time!
07/14/2008 07:18:59 Done.
07/14/2008 07:18:59 Done.
07/14/2008 07:18:59 There are no channels to process!

07/14/2008 07:18:59 Branding Internet Explorer...
07/14/2008 07:18:59 Command line is "BrandInternetExplorer /mode:gp
/ins:"C:\Documents and Settings\mcintoshs\Local Settings\Application
Data\Microsoft\Internet Explorer\Custom Settings\Custom1\INSTALL.INS"
/flags:eriu=1,favo=1,qlo=1,chl=1,chlb=1".

07/14/2008 07:18:59 Global branding settings are:
07/14/2008 07:18:59 Context is (0x00800200) "Group Policy";
07/14/2008 07:18:59 Settings file is "C:\Documents and
Settings\mcintoshs\Local Settings\Application Data\Microsoft\Internet
Explorer\Custom Settings\Custom1\INSTALL.INS";
07/14/2008 07:18:59 Target folder path is "C:\Documents and
Settings\mcintoshs\Local Settings\Application Data\Microsoft\Internet
Explorer\Custom Settings\Custom1".
07/14/2008 07:18:59 Done.

07/14/2008 07:18:59 About to clear previous branding...
07/14/2008 07:18:59 Done.

07/14/2008 07:18:59 Processing migration of old settings...
07/14/2008 07:18:59 Done.

07/14/2008 07:18:59 Processing wininet setup...
07/14/2008 07:18:59 There are no connection settings to process!
07/14/2008 07:18:59 Done.

07/14/2008 07:18:59 Processing deletion of connection settings...
07/14/2008 07:18:59 Existing connection settings weren't
specified to be deleted!
07/14/2008 07:18:59 Done.

07/14/2008 07:18:59 Processing zones HKCU settings...
07/14/2008 07:18:59 Done.

07/14/2008 07:18:59 Processing local machine policies and
restrictions...
07/14/2008 07:18:59 There are no local machine *.inf files to
process!
07/14/2008 07:18:59 Done.

07/14/2008 07:18:59 Processing current user policies and
restrictions...
07/14/2008 07:18:59 There are no current user *.inf files to
process!
07/14/2008 07:18:59 Done.

07/14/2008 07:18:59 Processing legacy policies and restrictions...
07/14/2008 07:18:59 There are no local machine *.inf files to
process!
07/14/2008 07:18:59 There are no current user *.inf files to
process!
07/14/2008 07:18:59 There are no legacy *.inf files to process!
07/14/2008 07:18:59 Done.

07/14/2008 07:18:59 Processing general customizations...
07/14/2008 07:18:59 Done.

07/14/2008 07:18:59 Processing Help->About customization...
07/14/2008 07:18:59 Done.

07/14/2008 07:18:59 Processing browser toolbar buttons...
07/14/2008 07:18:59 There are no toolbar buttons to process!
07/14/2008 07:18:59 Done.

07/14/2008 07:18:59 Processing root certificates...
07/14/2008 07:18:59 This feature is for ISPs only!
07/14/2008 07:18:59 Done.

07/14/2008 07:18:59 Processing default favorites and/or quick
links...
07/14/2008 07:18:59 Creating separate thread for processing
default favorites...

07/14/2008 07:18:59 COM initialized with S_OK success code.
07/14/2008 07:18:59 Determining favorites attributes...
07/14/2008 07:18:59 <Favorites> folder location is
"C:\Documents and Settings\mcintoshs\Favorites".
07/14/2008 07:18:59 marked as Low Integrity,
07/14/2008 07:18:59 Title - "Microsoft Websites\Welcome
to IE7",
07/14/2008 07:18:59 URL -
"http://go.microsoft.com/fwlink/?linkid=68919",
07/14/2008 07:18:59 with a default icon,
07/14/2008 07:18:59 marked IEAK created,
07/14/2008 07:18:59 Done.
07/14/2008 07:18:59 Determining favorites attributes...
07/14/2008 07:18:59 marked as Low Integrity,
07/14/2008 07:18:59 Title - "Microsoft Websites\IE site
on Microsoft.com.url",
07/14/2008 07:18:59 URL -
"http://go.microsoft.com/fwlink/?linkid=44661",
07/14/2008 07:18:59 with a default icon,
07/14/2008 07:18:59 marked IEAK created,
07/14/2008 07:18:59 Done.
07/14/2008 07:18:59 Determining favorites attributes...
07/14/2008 07:18:59 marked as Low Integrity,
07/14/2008 07:18:59 Title - "Microsoft Websites\IE Add-on
site",
07/14/2008 07:18:59 URL -
"http://go.microsoft.com/fwlink/?LinkId=50893",
07/14/2008 07:18:59 with a default icon,
07/14/2008 07:18:59 marked IEAK created,
07/14/2008 07:18:59 Done.
07/14/2008 07:18:59 Determining favorites attributes...
07/14/2008 07:18:59 marked as Low Integrity,
07/14/2008 07:18:59 Title - "Microsoft Websites\Microsoft
At Home",
07/14/2008 07:18:59 URL -
"http://go.microsoft.com/fwlink/?linkid=55424",
07/14/2008 07:18:59 with a default icon,
07/14/2008 07:18:59 marked IEAK created,
07/14/2008 07:18:59 Done.
07/14/2008 07:18:59 Determining favorites attributes...
07/14/2008 07:18:59 marked as Low Integrity,
07/14/2008 07:18:59 Title - "Microsoft Websites\Microsoft
At Work",
07/14/2008 07:18:59 URL -
"http://go.microsoft.com/fwlink/?linkid=68920",
07/14/2008 07:18:59 with a default icon,
07/14/2008 07:18:59 marked IEAK created,
07/14/2008 07:18:59 Done.
07/14/2008 07:18:59 Determining favorites attributes...
07/14/2008 07:18:59 marked as Low Integrity,
07/14/2008 07:18:59 Title - "Microsoft
Websites\Marketplace",
07/14/2008 07:18:59 URL -
"http://go.microsoft.com/fwlink/?linkid=69151",
07/14/2008 07:18:59 with a default icon,
07/14/2008 07:18:59 marked IEAK created,
07/14/2008 07:18:59 Done.
07/14/2008 07:18:59 Determining favorites attributes...
07/14/2008 07:18:59 marked as Low Integrity,
07/14/2008 07:18:59 Title - "Links\Customize Links",
07/14/2008 07:18:59 URL -
"http://go.microsoft.com/fwlink/?LinkId=53540",
07/14/2008 07:18:59 with a default icon,
07/14/2008 07:18:59 marked IEAK created,
07/14/2008 07:18:59 Done.
07/14/2008 07:18:59 Done.

07/14/2008 07:18:59 Processing deletion of favorites and/or quick
links...
07/14/2008 07:18:59 None of the favorites folders were specified
to be deleted!
07/14/2008 07:18:59 Done.

07/14/2008 07:18:59 Processing favorites...
07/14/2008 07:18:59 Creating separate thread for processing
favorites...

07/14/2008 07:18:59 COM initialized with S_OK success code.
07/14/2008 07:18:59 Using [FavoritesEx] section...

07/14/2008 07:18:59 Preprocessing "Title1" title key...
07/14/2008 07:18:59 Preprocessing "URL1" URL key...
07/14/2008 07:18:59 Adding this favorite:
07/14/2008 07:18:59 Determining favorites attributes...
07/14/2008 07:18:59 marked as Low Integrity,
07/14/2008 07:18:59 Title - "GPS WebMail.url",
07/14/2008 07:18:59 URL -
"http://mail.glastonburyus.org",
07/14/2008 07:18:59 with a default icon,
07/14/2008 07:18:59 marked IEAK created,
07/14/2008 07:18:59 Done.
07/14/2008 07:18:59 Done.

07/14/2008 07:18:59 Preprocessing "Title2" title key...
07/14/2008 07:18:59 This key doesn't exist indicating that
there are no more favorites.
07/14/2008 07:18:59 Done.

07/14/2008 07:18:59 Processing ordering of favorites...
07/14/2008 07:18:59 ! Ordering favorites failed with E_NOINTERFACE
07/14/2008 07:18:59 Done.

07/14/2008 07:18:59 Processing quick links...
07/14/2008 07:18:59 There are no quick links to add!
07/14/2008 07:18:59 Done.

07/14/2008 07:18:59 Processing ordering of quick links...
07/14/2008 07:18:59 There are no links to process!
07/14/2008 07:18:59 Done.

07/14/2008 07:18:59 Processing connection settings...
07/14/2008 07:18:59 There are no connection settings to process!
07/14/2008 07:18:59 Done.

07/14/2008 07:18:59 Processing TrustedPublisherLockdown
restriction...
07/14/2008 07:18:59 This restriction is not set!
07/14/2008 07:18:59 Done.

07/14/2008 07:18:59 Registering download URLs as safe for
updating IE...
07/14/2008 07:18:59 Done.

07/14/2008 07:18:59 Deleting links...
07/14/2008 07:18:59 No links to delete!
07/14/2008 07:18:59 Done.

07/14/2008 07:18:59 Creating feeds...
07/14/2008 07:18:59 Done.

07/14/2008 07:18:59 Creating start pages...
07/14/2008 07:18:59 There are no start pages to add!
07/14/2008 07:18:59 Done.

07/14/2008 07:18:59 Creating search providers...
07/14/2008 07:18:59 There are no search providers to add!
07/14/2008 07:18:59 Done.

07/14/2008 07:18:59 Processing active desktop customizations...
07/14/2008 07:18:59 No desktop customizations to process!
07/14/2008 07:18:59 Done.

07/14/2008 07:18:59 Processing channels and their categories (if
any)...
07/14/2008 07:18:59 There are no channels to process!
07/14/2008 07:18:59 Done.

07/14/2008 07:18:59 Processing software update channels...
07/14/2008 07:18:59 There are no software update channels to add!
07/14/2008 07:18:59 Done.

07/14/2008 07:18:59 Actual processing of channels by calling
webcheck.dll "DllInstall" API...
07/14/2008 07:18:59 There is no webcheck processing necessary!
07/14/2008 07:18:59 Done.

07/14/2008 07:18:59 Showing channel bar on the desktop...
07/14/2008 07:18:59 Done.

07/14/2008 07:18:59 Processing subscriptions...
07/14/2008 07:18:59 There are no subscriptions to process!
07/14/2008 07:18:59 Done.

07/14/2008 07:18:59 Refreshing browser settings...
07/14/2008 07:18:59 Skipping browser refresh at login time!
07/14/2008 07:18:59 Done.
07/14/2008 07:18:59 Done.
07/14/2008 07:18:59 There are no current user *.inf files to process!
07/14/2008 07:18:59 There are no channels to process!


07/14/2008 07:19:00 COM initialized with S_OK success code.

07/14/2008 07:19:00 Branding Internet Explorer...
07/14/2008 07:19:00 Command line is "/mode:gp /ins:"C:\Documents and
Settings\mcintoshs\Local Settings\Application Data\Microsoft\Internet
Explorer\Custom Settings\Custom0\install.ins" /disable
/flags:eriu=0,favo=0,qlo=0,chl=0,chlb=0,znu=0,ref=1".

07/14/2008 07:19:00 Global branding settings are:
07/14/2008 07:19:00 Context is (0x04800200) "Group Policy, spawned in
a child process";
07/14/2008 07:19:00 Settings file is "C:\Documents and
Settings\mcintoshs\Local Settings\Application Data\Microsoft\Internet
Explorer\Custom Settings\Custom0\install.ins";
07/14/2008 07:19:00 Target folder path is "C:\Documents and
Settings\mcintoshs\Local Settings\Application Data\Microsoft\Internet
Explorer\Custom Settings\Custom0".
07/14/2008 07:19:00 Done.

07/14/2008 07:19:00 Processing wininet setup...
07/14/2008 07:19:00 Done.

07/14/2008 07:19:00 Processing current user policies and
restrictions...
07/14/2008 07:19:00 ! processExtRegInfSectionHelper for
section"ExtRegInf.Hkcu".
07/14/2008 07:19:00 ! Key is "SOFTWARE\Microsoft\Active
Setup\Installed Components\{A509B1A7-37EF-4b3f-8CFC-4F3A74704073}".
07/14/2008 07:19:00 Not Delaying executing C:\Documents and
Settings\mcintoshs\Local Settings\Application Data\Microsoft\Internet
Explorer\Custom Settings\Custom0\seczones.inf.
07/14/2008 07:19:00 "seczones.inf" processed successfully.
07/14/2008 07:19:00 ! Key is "SOFTWARE\Microsoft\Active
Setup\Installed Components\{A509B1A7-37EF-4b3f-8CFC-4F3A74704073}".
07/14/2008 07:19:00 Machine is not hardened

07/14/2008 07:19:00 Done.

07/14/2008 07:19:00 Registering download URLs as safe for updating
IE...
07/14/2008 07:19:00 Done.

07/14/2008 07:19:00 Refreshing browser settings...
07/14/2008 07:19:00 Broadcasting "Windows settings change" to all top
level windows...
07/14/2008 07:19:20 Done.
07/14/2008 07:19:20 Done.


07/14/2008 07:19:20 COM initialized with S_OK success code.

07/14/2008 07:19:20 Branding Internet Explorer...
07/14/2008 07:19:20 Command line is "/mode:gp /ins:"C:\Documents and
Settings\mcintoshs\Local Settings\Application Data\Microsoft\Internet
Explorer\Custom Settings\Custom1\install.ins" /disable
/flags:eriu=0,favo=0,qlo=0,chl=0,chlb=0,ref=1".

07/14/2008 07:19:20 Global branding settings are:
07/14/2008 07:19:20 Context is (0x04800200) "Group Policy, spawned in
a child process";
07/14/2008 07:19:20 Settings file is "C:\Documents and
Settings\mcintoshs\Local Settings\Application Data\Microsoft\Internet
Explorer\Custom Settings\Custom1\install.ins";
07/14/2008 07:19:20 Target folder path is "C:\Documents and
Settings\mcintoshs\Local Settings\Application Data\Microsoft\Internet
Explorer\Custom Settings\Custom1".
07/14/2008 07:19:20 Done.

07/14/2008 07:19:20 Processing wininet setup...
07/14/2008 07:19:20 Done.

07/14/2008 07:19:20 Processing current user policies and
restrictions...
07/14/2008 07:19:20 There are no current user *.inf files to process!
07/14/2008 07:19:20 Done.

07/14/2008 07:19:20 Registering download URLs as safe for updating
IE...
07/14/2008 07:19:20 Done.

07/14/2008 07:19:20 Refreshing browser settings...
07/14/2008 07:19:20 Broadcasting "Windows settings change" to all top
level windows...
07/14/2008 07:19:21 Done.
07/14/2008 07:19:21 Done.
07/14/2008 07:19:21 Done processing group policy.

Scott

unread,
Jul 16, 2008, 8:35:07 AM7/16/08
to
The output from gpupdate is too long for the stated maximum characters per
posting. How can I transmit the verbose gpupdate to you? I've just pasted a
truncated version for now:

Microsoft (R) Windows (R) XP Operating System Group Policy Result tool v2.0
Copyright (C) Microsoft Corp. 1981-2001

Created On 7/15/2008 at 11:48:43 AM

RSOP results for GLASTONBURYUS\mcintoshs on NETCO-11712 : Logging Mode
-----------------------------------------------------------------------

OS Type: Microsoft Windows XP Professional
OS Configuration: Member Workstation
OS Version: 5.1.2600
Domain Name: GLASTONBURYUS
Domain Type: Windows 2000
Site Name: GHS
Roaming Profile:
Local Profile: C:\Documents and Settings\mcintoshs
Connected over a slow link?: No


COMPUTER SETTINGS
------------------
CN=NETCO-11712,OU=NC,OU=TIS Computers
OU,OU=TIS,OU=Administrative,DC=GLASTONBURYUS,DC=ORG
Last time Group Policy was applied: 7/15/2008 at 11:18:29 AM
Group Policy was applied from: GHSADS2.GLASTONBURYUS.ORG
Group Policy slow link threshold: 500 kbps

Applied Group Policy Objects
-----------------------------
Remote Exception
Interactive Logon Test
GHS-SMS-BUS WSUS Computer
Support Staff Policy
Default Domain Policy

The following GPOs were not applied because they were filtered out
-------------------------------------------------------------------
TIS Staff Policy
Filtering: Not Applied (Empty)

Disable Network Browse
Filtering: Not Applied (Empty)

GHS Audit Wizard Scanner
Filtering: Disabled (GPO)

Local Group Policy
Filtering: Not Applied (Empty)

The computer is a part of the following security groups:
--------------------------------------------------------
BUILTIN\Administrators
Everyone
SophosAdministrator
SophosUser
BUILTIN\Users
NT AUTHORITY\NETWORK
NT AUTHORITY\Authenticated Users
NETCO-11712$
Domain Computers
CERTSVC_DCOM_ACCESS

Resultant Set Of Policies for Computer:
----------------------------------------

Administrative Templates
------------------------
GPO: Default Domain Policy
Setting:
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4
State: Enabled

GPO: GHS-SMS-BUS WSUS Computer
Setting: Software\Policies\Microsoft\Windows\WindowsUpdate\AU
State: Enabled

GPO: GHS-SMS-BUS WSUS Computer
Setting: Software\Policies\Microsoft\Windows\WindowsUpdate\AU
State: disabled

GPO: Default Domain Policy
Setting:
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4
State: Enabled

GPO: Default Domain Policy
Setting:
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4
State: Enabled

GPO: Default Domain Policy
Setting:
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4
State: Enabled

GPO: Support Staff Policy
Setting: Software\Policies\Microsoft\Internet
Explorer\Control Panel
State: disabled

GPO: Default Domain Policy
Setting:
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2
State: Enabled

GPO: Support Staff Policy
Setting: Software\Policies\Microsoft\Internet
Explorer\Control Panel
State: disabled

GPO: Default Domain Policy
Setting:
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2
State: Enabled

GPO: Default Domain Policy
Setting: Software\Policies\Microsoft\Internet
Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN\Settings
State: Enabled

GPO: Default Domain Policy
Setting:
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4
State: Enabled

GPO: Default Domain Policy
Setting:
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2
State: Enabled

GPO: Default Domain Policy
Setting: Software\Policies\Microsoft\Windows\System
State: Enabled

GPO: Default Domain Policy
Setting:
Software\Policies\Microsoft\Windows\CurrentVersion\Internet
Settings\ZoneMapKey
State: Enabled

GPO: Default Domain Policy
Setting:
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4
State: Enabled

GPO: Default Domain Policy
Setting:
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4
State: Enabled

GPO: Default Domain Policy
Setting:
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4
State: Enabled

GPO: Default Domain Policy
Setting:
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2
State: Enabled

GPO: Default Domain Policy
Setting:
Software\Policies\Microsoft\Windows\CurrentVersion\Internet
Settings\ZoneMapKey
State: Enabled

GPO: Default Domain Policy
Setting:
Software\Policies\Microsoft\Windows\CurrentVersion\Internet
Settings\ZoneMapKey
State: Enabled

GPO: Support Staff Policy
Setting:
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2
State: Enabled

GPO: Default Domain Policy
Setting:
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4
State: Enabled

GPO: Default Domain Policy
Setting:
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4
State: Enabled

GPO: Default Domain Policy
Setting:
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2
State: Enabled

GPO: Default Domain Policy
Setting:
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings
State: Enabled

GPO: Default Domain Policy
Setting:
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2
State: Enabled

GPO: Default Domain Policy
Setting:
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2
State: Enabled

GPO: Default Domain Policy
Setting:
Software\Policies\Microsoft\Windows\CurrentVersion\Internet
Settings\ZoneMapKey
State: Enabled

GPO: Default Domain Policy
Setting:
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2
State: Enabled

GPO: Default Domain Policy
Setting:
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2
State: Enabled

GPO: Default Domain Policy
Setting:
Software\Policies\Microsoft\Windows\CurrentVersion\Internet
Settings\ZoneMapKey
State: Enabled

GPO: Default Domain Policy
Setting:
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4
State: Enabled

GPO: Default Domain Policy
Setting:
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2
State: Enabled

GPO: Default Domain Policy
Setting:
Software\Policies\Microsoft\Windows\CurrentVersion\Restricted Sites
Settings\Template Policies
State: Enabled

GPO: GHS-SMS-BUS WSUS Computer
Setting: Software\Policies\Microsoft\Windows\WindowsUpdate
State: Enabled

GPO: Support Staff Policy
Setting:
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3
State: Enabled

GPO: Default Domain Policy
Setting:
Software\Policies\Microsoft\Windows\CurrentVersion\Internet
Settings\ZoneMapKey
State: Enabled

GPO: Default Domain Policy
Setting:
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2
State: Enabled

GPO: GHS-SMS-BUS WSUS Computer
Setting: Software\Policies\Microsoft\Windows\WindowsUpdate\AU
State: Enabled

GPO: Remote Exception
Setting: Software\Policies\Microsoft\Windows NT\Terminal
Services
State: Enabled

GPO: Default Domain Policy
Setting:
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4
State: Enabled

GPO: Default Domain Policy
Setting:
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3
State: Enabled

GPO: Default Domain Policy
Setting:
Software\Policies\Microsoft\Windows\CurrentVersion\Internet
Settings\ZoneMapKey
State: Enabled

GPO: Default Domain Policy
Setting:
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4
State: Enabled

GPO: Default Domain Policy
Setting:
Software\Policies\Microsoft\Windows\CurrentVersion\Internet
Settings\ZoneMapKey
State: Enabled

GPO: GHS-SMS-BUS WSUS Computer
Setting: Software\Policies\Microsoft\Windows\WindowsUpdate\AU
State: Enabled

GPO: Default Domain Policy
Setting:
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2
State: Enabled

GPO: Default Domain Policy
Setting:
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4
State: Enabled

GPO: Default Domain Policy
Setting:
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4
State: Enabled

GPO: Default Domain Policy
Setting: Software\Policies\Microsoft\Windows\Group Policy
State: Enabled

GPO: Support Staff Policy
Setting: Software\Policies\Microsoft\Windows NT\Terminal
Services
State: Enabled

GPO: Default Domain Policy
Setting:
Software\Policies\Microsoft\Windows\CurrentVersion\Trusted Sites
Settings\Template Policies
State: Enabled

GPO: Default Domain Policy
Setting: Software\Policies\Microsoft\Internet
Explorer\Download
State: Enabled

GPO: Default Domain Policy
Setting:
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4
State: Enabled

GPO: Default Domain Policy
Setting:
Software\Policies\Microsoft\Windows\CurrentVersion\Internet
Settings\ZoneMapKey
State: Enabled

GPO: Default Domain Policy
Setting:
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4
State: Enabled

GPO: Support Staff Policy
Setting: Software\Policies\Microsoft\Windows NT\Terminal
Services
State: Enabled

GPO: Default Domain Policy
Setting:
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2
State: Enabled

GPO: Default Domain Policy
Setting:
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2
State: Enabled

GPO: Default Domain Policy
Setting:
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4
State: Enabled

GPO: Default Domain Policy
Setting:
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4
State: Enabled

GPO: Default Domain Policy
Setting:
Software\Policies\Microsoft\Windows\CurrentVersion\Internet
Settings\ZoneMapKey
State: Enabled

GPO: Default Domain Policy
Setting:
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4
State: Enabled

GPO: Default Domain Policy
Setting:
Software\Policies\Microsoft\Windows\CurrentVersion\Internet
Settings\ZoneMapKey
State: Enabled

GPO: Default Domain Policy
Setting: Software\Policies\Microsoft\Windows\Network
Connections
State: Enabled

GPO: Default Domain Policy
Setting:
Software\Policies\Microsoft\Windows\CurrentVersion\Internet
Settings\ZoneMapKey
State: Enabled

GPO: Default Domain Policy
Setting:
Software\Policies\Microsoft\Windows\CurrentVersion\Internet
Settings\ZoneMapKey
State: Enabled

GPO: Support Staff Policy
Setting: Software\Policies\Microsoft\Windows\System
State: Enabled

GPO: Default Domain Policy
Setting:
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4
State: Enabled

GPO: Default Domain Policy
Setting:
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2
State: Enabled

GPO: Default Domain Policy
Setting:
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4
State: Enabled

GPO: Default Domain Policy
Setting:
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4
State: Enabled

GPO: Default Domain Policy
Setting:
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4
State: Enabled

GPO: Default Domain Policy
Setting:
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4
State: Enabled

GPO: Default Domain Policy
Setting: Software\Policies\Microsoft\Windows\System
State: Enabled

GPO: Default Domain Policy
Setting:
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2
State: Enabled

GPO: Default Domain Policy
Setting:
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4
State: Enabled

GPO: Default Domain Policy
Setting:
Software\Policies\Microsoft\Windows\CurrentVersion\Trusted Sites
Settings\Template Policies
State: Enabled

GPO: Default Domain Policy
Setting:
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4
State: Enabled

GPO: Default Domain Policy
Setting:
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4
State: Enabled

GPO: Default Domain Policy
Setting:
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4
State: Enabled

GPO: GHS-SMS-BUS WSUS Computer
Setting: Software\Policies\Microsoft\Windows\WindowsUpdate
State: Enabled


USER SETTINGS
--------------
CN=McIntosh\, Scott,OU=TIS Staff
OU,OU=TIS,OU=Administrative,DC=GLASTONBURYUS,DC=ORG
Last time Group Policy was applied: 7/15/2008 at 10:38:34 AM
Group Policy was applied from: GHSADS2.GLASTONBURYUS.ORG
Group Policy slow link threshold: 500 kbps

Applied Group Policy Objects
-----------------------------
Support Staff Policy
TIS Staff Policy
GHS Audit Wizard Scanner
Default Domain Policy
Local Group Policy

The following GPOs were not applied because they were filtered out
-------------------------------------------------------------------
Remote Exception
Filtering: Not Applied (Empty)

Disable Network Browse
Filtering: Denied (Security)

GHS-SMS-BUS WSUS Computer
Filtering: Not Applied (Empty)

Interactive Logon Test
Filtering: Disabled (GPO)

The user is a part of the following security groups:
----------------------------------------------------
Domain Users
Everyone
Debugger Users
SophosUser
SophosPowerUser
SophosAdministrator
BUILTIN\Administrators
BUILTIN\Users
Remote Desktop Users
NT AUTHORITY\INTERACTIVE
NT AUTHORITY\Authenticated Users
LOCAL
Group Policy Creator Owners
MOSS_SSP&Portal_Admins
SophosDomainPowerUser
Exchange Services
DDI
TIS Senior Staff
InfoServices
Exchange Admins
Software Installers
PMX_ADMIN
ELEM COMPUTER PARAS
Sophos PureMessage Administrators
TIS
Exchange Domain Servers
GHS Staff Email Access
MOSS_Training_Editors
Domain Admins
BudgetSense Users SG
MOSS_ServerFarm_Admins
Sophos Console Administrators
ITT
Enterprise Admins
All GPS
Schema Admins
$DUPLICATE-c04f
$DUPLICATE-d5f7
Double-Take Admin
SophosAdministrator
SophosPowerUser
$DUPLICATE-d5f6
CERTSVC_DCOM_ACCESS
$DUPLICATE-c050
$DUPLICATE-d295
$DUPLICATE-d296
Exchange Enterprise Servers

Resultant Set Of Policies for User:
------------------------------------

Software Installations
----------------------
N/A

Public Key Policies
-------------------
N/A

Administrative Templates
------------------------
GPO: Support Staff Policy
Setting: Software\Policies\TerraNovum\EZ_GPO\Simple
State: disabled

GPO: Default Domain Policy
Setting:
Software\Policies\Microsoft\Office\11.0\Outlook\Preferences
State: Enabled

GPO: Default Domain Policy
Setting:
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2
State: Enabled

GPO: Support Staff Policy
Setting: Software\Policies\TerraNovum\EZ_GPO\Simple
State: disabled

GPO: Default Domain Policy
Setting:
Software\Policies\Microsoft\Office\11.0\Outlook\Preferences
State: Enabled

GPO: Support Staff Policy
Setting: Software\Policies\Microsoft\Internet
Explorer\Control Panel
State: disabled

GPO: Default Domain Policy
Setting:
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2
State: Enabled

GPO: Default Domain Policy
Setting:
Software\Policies\Microsoft\Office\11.0\Outlook\Preferences
State: Enabled

GPO: Default Domain Policy
Setting:
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2
State: Enabled

GPO: Default Domain Policy
Setting:
Software\Microsoft\Windows\CurrentVersion\Policies\System
State: disabled

GPO: Default Domain Policy
Setting:
Software\Policies\Microsoft\Office\11.0\Outlook\Preferences
State: disabled

GPO: Support Staff Policy
Setting: Software\Policies\TerraNovum\EZ_GPO\Simple
State: disabled

GPO: Default Domain Policy
Setting:
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2
State: Enabled

GPO: Default Domain Policy
Setting:
Software\Policies\Microsoft\Windows\CurrentVersion\Trusted Sites
Settings\Template Policies
State: Enabled

GPO: Default Domain Policy
Setting: Software\Policies\Microsoft\Internet Explorer\Main
State: Enabled

GPO: Default Domain Policy
Setting: Software\Policies\Microsoft\Windows\Group Policy
Editor
State: Enabled

GPO: Support Staff Policy
Setting: Software\Policies\TerraNovum\EZ_GPO\Simple
State: disabled

GPO: Default Domain Policy
Setting:
Software\Policies\Microsoft\Office\11.0\Outlook\Preferences
State: Enabled

GPO: Default Domain Policy
Setting:
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2
State: Enabled

GPO: Default Domain Policy
Setting:
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2
State: Enabled

GPO: Default Domain Policy
Setting:
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2
State: Enabled

GPO: Default Domain Policy
Setting:
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2
State: Enabled

GPO: Support Staff Policy
Setting: Software\Policies\Microsoft\Internet
Explorer\Control Panel
State: disabled

GPO: Default Domain Policy
Setting: Software\Policies\Microsoft\Windows\System
State: Enabled

GPO: Default Domain Policy
Setting:
Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2
State: Enabled

GPO: Support Staff Policy
Setting: Software\Policies\Microsoft\Internet
Explorer\Control Panel
State: disabled

GPO: Default Domain Policy
Setting:
Software\Policies\Microsoft\Office\11.0\Outlook\Preferences
State: Enabled

Scott

unread,
Aug 1, 2008, 8:23:01 AM8/1/08
to
Is there some reason I cannot get closure on this domain-wide issue which
seems to be affecting other MS customers besides us?

Scott

unread,
Aug 26, 2008, 12:04:11 PM8/26/08
to
It is highly disappointing that no solution has been proposed for this
Windows bug.

Darren Mar-Elia

unread,
Aug 26, 2008, 12:15:37 PM8/26/08
to
Scott-
I was unable to see the early parts of this thread, but IE Zonemapping
errors usually occur because there is a syntax error in the configuration of
a site-to-zone assignment list under Administrative Templates (specifically
Computer (or User) Configuration\Admin. Templates\Windows
Components\Internet Explorer\Internet Control Panel\Security
Page\Site-to-Zone Assignment List.

In fact, someone on the DS team just blogged about this recently:
http://blogs.technet.com/askds/archive/2008/08/21/a-test-case-for-troubleshooting-group-policy-application-event-id-1085-and-7016.aspx

This might help you narrow and eventually solve the problem. Just an FYI
because I saw it in this thread and its a common misunderstanding.
Brndlog.txt is only applicable if the problem policy is related to IE
Maintenance Policy. IE Zonemapping is a different Client Side Extension,
under Admin. Templates, that is specifically responsible for processing
these site-to-zone assignment lists.

Darren

--
Darren Mar-Elia
MS-MVP-Windows Server--Group Policy

*******************************
Secure and configure your Windows desktops accurately every time without
having to learn or install new technology.
Find out more about Desktop Policy Manager at
http://www.sdmsoftware.com/desktop_management
*******************************
"Scott" <Sc...@discussions.microsoft.com> wrote in message
news:9E0C54B2-BF17-484D...@microsoft.com...

0 new messages