Re: Group Policy Setting Preventing OSD State Restore phase to not

It's a new fix, so the KB article isn't published yet. Microsoft support
personnel will be able to find it.

It is a COM security-related problem: when some GPOs are applied to the
machine, the GPO processing initializes COM security, which interferes with
OSD when it wants to also initialize COM security. With the fix,
OSDWinlogon properly deals with this situation.

-Michael Niehaus
Systems Design Engineer
mniehaus@xxxxxxxxxxxxx
This posting is provided "AS IS" with no warranties, and confers no rights.


"Chad Borsheim" <ChadBorsheim@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:23726841-3854-42C2-886C-FD4172D88E26@xxxxxxxxxxxxxxxx
>I cannot find any info on the hot fix you listed at microsoft.com. I'll
>call
> them but in the mean time can you give me a little more information about
> the
> problem.
>
> Thanks
> Chad B
>
> "Michael Niehaus [MS]" wrote:
>
>> Funny you should ask, as I was just exchanging e-mails earlier today
>> about
>> this exact problem. Contact Microsoft Support and request OSD hotfix
>> 903668, released a few weeks ago. This should take care of your problem.
>> (This hotfix replaces OSDWinlogon.dll. After applying it, you'll need to
>> recapture your image.)
>>
>> -Michael Niehaus
>> Systems Design Engineer
>> mniehaus@xxxxxxxxxxxxx
>> This posting is provided "AS IS" with no warranties, and confers no
>> rights.
>>
>>
>> "Chad Borsheim" <ChadBorsheim@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
>> news:F0E636C8-4ED8-413E-A4F3-A4BAFEE4EC69@xxxxxxxxxxxxxxxx
>> > Windows 2000 AD
>> > WIndows XP SP2 (OSD IMAGE)
>> >
>> > I have a image that works just fine under one Group Policy but when I
>> > move
>> > it to our new locked down group policy the state restore phase never
>> > happens.
>> >
>> > Does anyone know what group policy setting either in the computer or
>> > users
>> > settings could possibly prevent the OSD restore phase from not working.
>> >
>> > This is what happens.
>> > 1. Boot with OSD cd and OS gets copied to local computer.
>> > 2. Machine reboots and then OSD enrolls the computer into the domain.
>> > 3. Machine reboots and goes right into Windows Login. (should go into
>> > state
>> > restore phase before login prompt)
>> >
>> > I have looked and no osdstaterestore log file is in the MININT folder
>> > but
>> > the others are.
>> >
>> > Just wondering if anyone ran into this and could save me hours of
>> > troubleshooting whichn setting in group policy is doing this.
>> >
>> > Thanks
>> > Chad B.
>> >
>>
>>
>>


.

Relevant Pages

  • 2.6 upgrade left machine unbootable
    ... Non-maintainer upload by The Security Team. ... Fix buffer overflow in XCF parser, ... local users to escape chroot restrictions ... Fix local DoS vulnerability that allows local users to panic ...
    (Debian-User)
  • Re: [Full-Disclosure] Was: Full Disclosure = Exploit Release - No disclosure No Fix
    ... Quality of fix would ... I don't expect the vendors who suck at getting things out ... which is a rare small percentage of security ... english forums. ...
    (Full-Disclosure)
  • NT4 terminal server security fix delinquency
    ... Since that time the Windows NT Server 4.0, Terminal Server Edition ... Security Roll-Up has still not been released, ... TSE Fix Status: To be release shortly ... TSE Fix Status: To be released shortly ...
    (NT-Bugtraq)
  • Re: [SLE] KDE 3.1.4 ?
    ... > think it's a waste of resources..I am quite capable of typing startx. ... So a fix being put out can not be argued about. ... Security means assessing the risks and, if you have to make a choice, to ... INSTALL FIXES that's causing so much cruft in our logs. ...
    (SuSE)