Re: Can I Disable Error Messages Produced by Software Restriction Policies?

• Previous message: Carl Hilton: "Re: GPO Intelligence"
• In reply to: Bruce Sanderson: "Re: Can I Disable Error Messages Produced by Software Restriction Policies?"
• Messages sorted by: [ date ] [ thread ]

Date: Fri, 11 Feb 2005 16:29:50 -0500

Thanks, we've had a loopback GPO on that OU since day one. I can tell
that the SRP policy I've instated works by doing things like dumping a
copy of CALC.EXE on the root of C: and trying to run it from an
unprivileged logon, in which case an error dialogue does pop up. Yet
there's no evidence of that event either in the system event log or
the special log file!

This makes evaluating the success and troubleshooting the failures
rather difficult, when ALL you get is the events relating to processes
that were OK'd.

-Brad

On Thu, 10 Feb 2005 22:00:51 -0800, "Bruce Sanderson"
<bsanders@junk.junk> wrote:

>Well, I haven't actually tried this, but from what I've read it should work.
>
>Apply a GPO that has Loopback processing turned on to the OU containing the
>Terminal Servers .
>Apply a second GPO to the same OU (or perhaps in the same GPO that has the
>loopback setting) that specifies a Logon Script that runs an empty command
>file.
>
>With "Merge mode" loopback, the User settings applied by loopback processing
>are applied after other User settings, so, the Logon Script setting in the
>GPO applied by the loopback feature should be the "wining" GPO. With
>"Replace mode" loopback, GPOs that apply to the user's account are not
>processed at all.
>
>See http://support.microsoft.com/?kbid=231287 and
>http://support.microsoft.com/?kbid=260370

• Previous message: Carl Hilton: "Re: GPO Intelligence"
• In reply to: Bruce Sanderson: "Re: Can I Disable Error Messages Produced by Software Restriction Policies?"
• Messages sorted by: [ date ] [ thread ]