Re: Applying zone settings on Pop-up Blocker

Tom:

Thanks for replying again.

I checked the registry and the settings is there! I am confused. Shouldn't
I see it in IE when I look at the exceptions list? I guess it is working.
I will test.

Harrison Midkiff

"Tom Che [MSFT]" <v-tomche@xxxxxxxxxxxxxxxxxxxx> wrote in message
news:qonk%23gtYFHA.2476@xxxxxxxxxxxxxxxxxxxxxxxx
> Hi Harrison,
>
> Thanks for reply.
>
> From your gpresult.txt log file, I found the following lines:
>
> GPO: Default Domain Policy
> Setting: SOFTWARE\Policies\Microsoft\Internet Explorer\New Windows\Allow
> State: Enabled
>
> It seems that the Pop-up policy has been enabled successfully from DC, but
> we cannot make sure whether the policy has been applied on the client i.e.
> the related registry value has been modified.
>
> Therefore, please check the registry key as my last reply, I also
> duplicate
> as below just for your convenience:
> ++++++++++++++++++++++++
> Also, to verify if the policy apply, you may open registry editor and
> check
>
> HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Internet Explorer\New
> Windows\Allow
>
> The website should be listed here if the GPO is applied.
> ++++++++++++++++++++++++
>
> If you cannot find the registry key, please try to enable the local Pop-up
> policy, add some sites, and then check the registry key again. If it is
> listed in registry, please open IE to test whether the Pop-up can be
> showed
> up normally. If it still cannot work, please on the problematic client
> try
> to change IE setting directly as below, to see whether the Pop-up can be
> showed up normally:
>
> 1. Open IE, and then click Tools -> Pop-up Blocker Settings.
>
> 2. Edit the allowed sites list.
>
> Regarding the error message of rsop.msc, I never see "Unspecified error"
> and I cannot find any similar case both in our internal database or
> internet. However, you may try to logon the client with administrator
> permission to test the issue again, since it is possible that the user has
> not the permission to apply the specific policy. Furthermore, you may
> change the GPO to "User Configuration\Administrative Templates\Windows
> Components\Internet Explorer\Pop-up allow list", and then try to deploy it
> to all clients again.
>
> If the issue persists, please let me know the following information for
> further assistance:
>
> 1. Does the "Unspecified error" of rsop.msc occur on all clients?
>
> 2. If you use NSLOOKUP to test DC and / or DNS Server, what is the result?
>
> For more information, please refer to the following Microsoft Web site:
>
> Troubleshooting Group Policy in Microsoft? Windows? Server
> <http://download.microsoft.com/download/5/f/9/5f949309-c0f8-4a92-bd65-64ce31
> 2e2a92/gp_troubleshooting.doc>
>
> Microsoft Windows XP - Nslookup subcommands
> <http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en
> -us/nslookup__subcommands.mspx>
>
> Have a nice weekend!
>
> Sincerely,
>
> Tom Che
>
> Microsoft Online Partner Support
> Get Secure! - www.microsoft.com/security
> =====================================================
> When responding to posts, please "Reply to Group" via your newsreader so
> that others may learn and benefit from your issue.
> =====================================================
> This posting is provided "AS IS" with no warranties, and confers no
> rights.
>
> --------------------
>>Reply-To: "Harrison Midkiff" <HMidkiff@xxxxxxxxxx>
>>From: "Harrison Midkiff" <HMidkiff@xxxxxxxxxx>
>>References: <OOrDwvTYFHA.252@xxxxxxxxxxxxxxxxxxxx>
> <GJbBnVdYFHA.388@xxxxxxxxxxxxxxxxxxxxx>
>>Subject: Re: Applying zone settings on Pop-up Blocker
>>Date: Thu, 26 May 2005 17:59:37 -0400
>>Lines: 1608
>>Organization: Audio Visual Innovations, Inc.
>>X-Priority: 3
>>X-MSMail-Priority: Normal
>>X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
>>X-RFC2646: Format=Flowed; Original
>>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
>>Message-ID: <eoUm24jYFHA.2796@xxxxxxxxxxxxxxxxxxxx>
>>Newsgroups: microsoft.public.windows.group_policy
>>NNTP-Posting-Host: 208.5.55.190
>>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP09.phx.gbl
>>Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.group_policy:8598
>>X-Tomcat-NG: microsoft.public.windows.group_policy
>>
>>Tom:
>>
>>Here is the "gpresult /v" I ran. The policy which has the settings for
> the
>>Pop-up Blocker is called "Default Domain policy". It is applied at the
> root
>>so everyone has it. Below is a copy/paste. I also attached the file as a
>>txt.
>>
>>
>>Microsoft (R) Windows (R) XP Operating System Group Policy Result tool
>>v2.0
>>Copyright (C) Microsoft Corp. 1981-2001
>>
>>Created On 5/26/2005 at 5:56:13 PM
>>
>>
>>
>>RSOP results for AVIINC\HMidkiff on TPA-HMIDKIFF : Logging Mode
>>----------------------------------------------------------------
>>
>>OS Type: Microsoft Windows XP Professional
>>OS Configuration: Member Workstation
>>OS Version: 5.1.2600
>>Domain Name: AVIINC
>>Domain Type: Windows 2000
>>Site Name: Tampa
>>Roaming Profile:
>>Local Profile: C:\Documents and Settings\HMidkiff
>>Connected over a slow link?: No
>>
>>
>>COMPUTER SETTINGS
>>------------------
>> CN=TPA-HMIDKIFF,OU=TPA,OU=Workstations -
>>ITS,OU=Workstations,DC=AVIINC,DC=LOCAL
>> Last time Group Policy was applied: 5/26/2005 at 4:25:21 PM
>> Group Policy was applied from: tpadc1.AVIINC.LOCAL
>> Group Policy slow link threshold: 500 kbps
>>
>> Applied Group Policy Objects
>> -----------------------------
>> Default Domain Policy
>> Blocked Applications
>> Software Update Services - (SUS)
>> WinXP SP2 Settings
>> Office 2003 and Redemption
>> Software Installation - AntiVirus 9.0
>> Software Installation - Adobe Reader 7.0.1
>> Local Group Policy
>>
>> The following GPOs were not applied because they were filtered out
>> -------------------------------------------------------------------
>> Software Installation - Visio 2003
>> Filtering: Denied (Security)
>>
>> MS Outlook 2003 Template
>> Filtering: Not Applied (Empty)
>>
>> The computer is a part of the following security groups:
>> --------------------------------------------------------
>> BUILTIN\Administrators
>> Everyone
>> Debugger Users
>> BUILTIN\Users
>> NT AUTHORITY\NETWORK
>> NT AUTHORITY\Authenticated Users
>> TPA-HMIDKIFF$
>> Software Installation - AntiVirus 9.0
>> Domain Computers
>> Software Installation - Adobe Reader 7.0.1
>> Software Installation - Office 2003 with Redemption
>>
>> Resultant Set Of Policies for Computer:
>> ----------------------------------------
>>
>> Software Installations
>> ----------------------
>> GPO: Software Installation - Adobe Reader 7.0.1
>> Name: Adobe Reader 7.0
>> Version: 7.0
>> Deployment State: Assigned
>> Source: \\tpadc1\Packages\Acrobat
>>7.0\packages\Acrobat7\adobe reader 7.0.msi
>> AutoInstall: True
>> Origin: Applied Application
>>
>> GPO: Office 2003 and Redemption
>> Name: Microsoft Office Professional Edition
> 2003
>> Version: 11.0
>> Deployment State: Assigned
>> Source:
>>\\tpadc1\Packages\Office2003\AVIOffice-1.msi
>> AutoInstall: True
>> Origin: Applied Application
>>
>> GPO: Software Installation - AntiVirus 9.0
>> Name: Symantec AntiVirus
>> Version: 9.0
>> Deployment State: Assigned
>> Source: \\tpadc1\Packages\NAV_9.0\WIN32\Symantec
>>AntiVirus.msi
>> AutoInstall: True
>> Origin: Applied Application
>>
>> Startup Scripts
>> ---------------
>> N/A
>>
>> Shutdown Scripts
>> ----------------
>> N/A
>>
>> Account Policies
>> ----------------
>> GPO: Default Domain Policy
>> Policy: MinimumPasswordAge
>> Computer Setting: N/A
>>
>> GPO: Default Domain Policy
>> Policy: PasswordHistorySize
>> Computer Setting: 10
>>
>> GPO: Default Domain Policy
>> Policy: LockoutDuration
>> Computer Setting: 60
>>
>> GPO: Default Domain Policy
>> Policy: ResetLockoutCount
>> Computer Setting: 60
>>
>> GPO: Default Domain Policy
>> Policy: MinimumPasswordLength
>> Computer Setting: 5
>>
>> GPO: Default Domain Policy
>> Policy: LockoutBadCount
>> Computer Setting: 4
>>
>> GPO: Default Domain Policy
>> Policy: MaximumPasswordAge
>> Computer Setting: 60
>>
>> Audit Policy
>> ------------
>> GPO: Default Domain Policy
>> Policy: AuditPolicyChange
>> Computer Setting: Failure
>>
>> GPO: Default Domain Policy
>> Policy: AuditDSAccess
>> Computer Setting: Failure
>>
>> GPO: Default Domain Policy
>> Policy: AuditAccountLogon
>> Computer Setting: Failure
>>
>> GPO: Default Domain Policy
>> Policy: AuditLogonEvents
>> Computer Setting: Failure
>>
>> GPO: Default Domain Policy
>> Policy: AuditProcessTracking
>> Computer Setting: Failure
>>
>> User Rights
>> -----------
>> N/A
>>
>> Security Options
>> ----------------
>> N/A
>>
>> Event Log Settings
>> ------------------
>> N/A
>>
>> Restricted Groups
>> -----------------
>> N/A
>>
>> System Services
>> ---------------
>> N/A
>>
>> Registry Settings
>> -----------------
>> N/A
>>
>> File System Settings
>> --------------------
>> N/A
>>
>> Public Key Policies
>> -------------------
>> N/A
>>
>> Administrative Templates
>> ------------------------
>> GPO: WinXP SP2 Settings
>> Setting:
>>SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings
>> State: Enabled
>>
>> GPO: WinXP SP2 Settings
>> Setting:
>>SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Logging
>> State: Enabled
>>
>> GPO: WinXP SP2 Settings
>> Setting:
>>SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\IcmpSettings
>> State: Enabled
>>
>> GPO: WinXP SP2 Settings
>> Setting:
>>SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\AuthorizedApplica
> tions\List
>> State: Enabled
>>
>> GPO: WinXP SP2 Settings
>> Setting:
>>SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings
>> State: Enabled
>>
>> GPO: Local Group Policy
>> Setting:
>>Software\Policies\Microsoft\Windows\CurrentVersion\Internet
> Settings\Zones\1
>> State: Enabled
>>
>> GPO: Blocked Applications
>> Setting: Software\Policies\Microsoft\Windows\WindowsUpdate
>> State: Enabled
>>
>> GPO: WinXP SP2 Settings
>> Setting:
>>SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\IcmpSettings
>> State: Enabled
>>
>> GPO: WinXP SP2 Settings
>> Setting:
>>SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile
>> State: Enabled
>>
>> GPO: WinXP SP2 Settings
>> Setting:
>>SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\AuthorizedAppli
> cations\List
>> State: Enabled
>>
>> GPO: WinXP SP2 Settings
>> Setting:
>>SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\GloballyOpenPor
> ts
>> State: Enabled
>>
>> GPO: Software Update Services - (SUS)
>> Setting:
>>Software\Policies\Microsoft\Windows\WindowsUpdate\AU
>> State: Enabled
>>
>> GPO: WinXP SP2 Settings
>> Setting:
>>SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\AuthorizedAppli
> cations\List
>> State: Enabled
>>
>> GPO: WinXP SP2 Settings
>> Setting:
>>SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Services\RemoteDe
> sktop
>> State: Enabled
>>
>> GPO: WinXP SP2 Settings
>> Setting:
>>SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\AuthorizedApplica
> tions\List
>> State: Enabled
>>
>> GPO: WinXP SP2 Settings
>> Setting:
>>SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\AuthorizedApplica
> tions
>> State: Enabled
>>
>> GPO: WinXP SP2 Settings
>> Setting:
>>SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\IcmpSettings
>> State: Enabled
>>
>> GPO: WinXP SP2 Settings
>> Setting:
>>SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\Services\FileAn
> dPrint
>> State: Enabled
>>
>> GPO: WinXP SP2 Settings
>> Setting:
>>SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings
>> State: Enabled
>>
>> GPO: WinXP SP2 Settings
>> Setting:
>>SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Logging
>> State: Enabled
>>
>> GPO: WinXP SP2 Settings
>> Setting:
>>SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings
>> State: Enabled
>>
>> GPO: WinXP SP2 Settings
>> Setting:
>>SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\IcmpSettings
>> State: Enabled
>>
>> GPO: WinXP SP2 Settings
>> Setting:
>>SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\IcmpSettings
>> State: Enabled
>>
>> GPO: WinXP SP2 Settings
>> Setting:
>>SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\GloballyOpenPorts
>> State: Enabled
>>
>> GPO: WinXP SP2 Settings
>> Setting:
>>SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings
>> State: Enabled
>>
>> GPO: WinXP SP2 Settings
>> Setting:
>>SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile
>> State: Enabled
>>
>> GPO: WinXP SP2 Settings
>> Setting:
>>SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\Logging
>> State: Enabled
>>
>> GPO: WinXP SP2 Settings
>> Setting:
>>SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings
>> State: Enabled
>>
>> GPO: WinXP SP2 Settings
>> Setting:
>>SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings
>> State: Enabled
>>
>> GPO: WinXP SP2 Settings
>> Setting:
>>SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\AuthorizedAppli
> cations\List
>> State: Enabled
>>
>> GPO: WinXP SP2 Settings
>> Setting:
>>SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\IcmpSettings
>> State: Enabled
>>
>> GPO: WinXP SP2 Settings
>> Setting:
>>SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings
>> State: Enabled
>>
>> GPO: Software Update Services - (SUS)
>> Setting:
>>Software\Policies\Microsoft\Windows\WindowsUpdate\AU
>> State: Enabled
>>
>> GPO: WinXP SP2 Settings
>> Setting:
>>SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings
>> State: Enabled
>>
>> GPO: WinXP SP2 Settings
>> Setting:
>>SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\AuthorizedAppli
> cations
>> State: Enabled
>>
>> GPO: Local Group Policy
>> Setting:
>>Software\Policies\Microsoft\Windows\CurrentVersion\Internet
> Settings\Zones\3
>> State: Enabled
>>
>> GPO: WinXP SP2 Settings
>> Setting:
>>SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\Logging
>> State: Enabled
>>
>> GPO: WinXP SP2 Settings
>> Setting:
>>SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\Logging
>> State: Enabled
>>
>> GPO: Local Group Policy
>> Setting:
>>Software\Policies\Microsoft\Windows\CurrentVersion\Internet
> Settings\Zones\0
>> State: Enabled
>>
>> GPO: WinXP SP2 Settings
>> Setting:
>>SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\Services\FileAn
> dPrint
>> State: Enabled
>>
>> GPO: Default Domain Policy
>> Setting: SOFTWARE\Policies\Microsoft\Internet Explorer\New
>>Windows\Allow
>> State: Enabled
>>
>> GPO: WinXP SP2 Settings
>> Setting:
>>SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\AuthorizedAppli
> cations
>> State: Enabled
>>
>> GPO: WinXP SP2 Settings
>> Setting:
>>SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\Services\Remote
> Desktop
>> State: Enabled
>>
>> GPO: WinXP SP2 Settings
>> Setting:
>>SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\AuthorizedAppli
> cations\List
>> State: Enabled
>>
>> GPO: WinXP SP2 Settings
>> Setting:
>>SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\AuthorizedApplica
> tions
>> State: Enabled
>>
>> GPO: WinXP SP2 Settings
>> Setting:
>>SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile
>> State: Enabled
>>
>> GPO: WinXP SP2 Settings
>> Setting:
>>SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Logging
>> State: Enabled
>>
>> GPO: Default Domain Policy
>> Setting: SOFTWARE\Policies\Microsoft\Internet Explorer\New
>>Windows
>> State: Enabled
>>
>> GPO: Default Domain Policy
>> Setting: SOFTWARE\Policies\Microsoft\Internet Explorer\New
>>Windows\Allow
>> State: Enabled
>>
>> GPO: Software Update Services - (SUS)
>> Setting:
>>Software\Policies\Microsoft\Windows\WindowsUpdate\AU
>> State: Enabled
>>
>> GPO: WinXP SP2 Settings
>> Setting:
>>SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings
>> State: Enabled
>>
>> GPO: WinXP SP2 Settings
>> Setting:
>>SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\IcmpSettings
>> State: Enabled
>>
>> GPO: WinXP SP2 Settings
>> Setting:
>>SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\IcmpSettings
>> State: Enabled
>>
>> GPO: Software Update Services - (SUS)
>> Setting:
>>Software\Policies\Microsoft\Windows\WindowsUpdate\AU
>> State: Enabled
>>
>> GPO: Local Group Policy
>> Setting:
>>Software\Policies\Microsoft\Windows\CurrentVersion\Internet
>>Settings\Lockdown_Zones\0
>> State: Enabled
>>
>> GPO: WinXP SP2 Settings
>> Setting:
>>SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile
>> State: Enabled
>>
>> GPO: WinXP SP2 Settings
>> Setting:
>>SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Services\RemoteDe
> sktop
>> State: Enabled
>>
>> GPO: WinXP SP2 Settings
>> Setting:
>>SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\IcmpSettings
>> State: Enabled
>>
>> GPO: WinXP SP2 Settings
>> Setting:
>>SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Services\FileAndP
> rint
>> State: Enabled
>>
>> GPO: WinXP SP2 Settings
>> Setting:
>>SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\AuthorizedApplica
> tions\List
>> State: Enabled
>>
>> GPO: Software Update Services - (SUS)
>> Setting:
>>Software\Policies\Microsoft\Windows\WindowsUpdate\AU
>> State: Enabled
>>
>> GPO: Local Group Policy
>> Setting:
>>Software\Policies\Microsoft\Windows\CurrentVersion\Internet
> Settings\Zones\2
>> State: Enabled
>>
>> GPO: WinXP SP2 Settings
>> Setting:
>>SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\Services\Remote
> Desktop
>> State: Enabled
>>
>> GPO: WinXP SP2 Settings
>> Setting:
>>SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Services\FileAndP
> rint
>> State: Enabled
>>
>> GPO: WinXP SP2 Settings
>> Setting:
>>SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\AuthorizedApplica
> tions\List
>> State: Enabled
>>
>> GPO: Local Group Policy
>> Setting:
>>Software\Policies\Microsoft\Windows\CurrentVersion\Internet
> Settings\Zones\4
>> State: Enabled
>>
>> GPO: WinXP SP2 Settings
>> Setting:
>>SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\Logging
>> State: Enabled
>>
>> GPO: Software Update Services - (SUS)
>> Setting: Software\Policies\Microsoft\Windows\WindowsUpdate
>> State: Enabled
>>
>> GPO: WinXP SP2 Settings
>> Setting:
>>SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Logging
>> State: Enabled
>>
>> GPO: Software Update Services - (SUS)
>> Setting:
>>Software\Policies\Microsoft\Windows\WindowsUpdate\AU
>> State: Enabled
>>
>> GPO: WinXP SP2 Settings
>> Setting:
>>SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\AuthorizedApplica
> tions\List
>> State: Enabled
>>
>> GPO: Software Update Services - (SUS)
>> Setting: Software\Policies\Microsoft\Windows\WindowsUpdate
>> State: Enabled
>>
>> GPO: Default Domain Policy
>> Setting:
>>Software\Microsoft\Windows\CurrentVersion\Policies\System
>> State: Enabled
>>
>> GPO: WinXP SP2 Settings
>> Setting:
>>SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\IcmpSettings
>> State: Enabled
>>
>>
>>USER SETTINGS
>>--------------
>> CN=Harrison Midkiff,OU=TPA,OU=ITS,DC=AVIINC,DC=LOCAL
>> Last time Group Policy was applied: 5/26/2005 at 5:54:03 PM
>> Group Policy was applied from: tpadc1.AVIINC.LOCAL
>> Group Policy slow link threshold: 500 kbps
>>
>> Applied Group Policy Objects
>> -----------------------------
>> Default Domain Policy
>> Blocked Applications
>> MS Outlook 2003 Template
>> ITS - TPA Default Group Policy
>> ITS Web Settings
>> ITS Default Group Policy
>> Local Group Policy
>>
>> The user is a part of the following security groups:
>> ----------------------------------------------------
>> Domain Users
>> Everyone
>> Debugger Users
>> BUILTIN\Administrators
>> Remote Desktop Users
>> BUILTIN\Users
>> NT AUTHORITY\INTERACTIVE
>> NT AUTHORITY\Authenticated Users
>> LOCAL
>> avi mis global
>> SBT Users Group
>> TPA ITS - Tier - 1
>> ADV - Intranet PEOPLE Editors
>> ADV - Wiki - IT
>> ITS-ALL-ALL
>> Exchange Admins
>> SMSMSE Admins
>> AVI Wireless Users Group
>> ADV - ITWeb Admins
>> AVI Terminal Server R2-n-SBT Users
>> TPA ITS - Tier - 2
>> IPrism
>> ITS-TPA-ALL
>> RAS Users
>> Everyone Group
>> avi mis global
>> Exchange Admins
>> IPrism
>> TPA ITS - Tier - 1
>> TPA ITS - Tier - 2
>> HMidkiff
>> avi mis local
>> avi mis local
>>
>> Resultant Set Of Policies for User:
>> ------------------------------------
>>
>> Software Installations
>> ----------------------
>> N/A
>>
>> Public Key Policies
>> -------------------
>> N/A
>>
>> Administrative Templates
>> ------------------------
>> GPO: MS Outlook 2003 Template
>> Setting:
>>Software\Policies\Microsoft\Office\11.0\Outlook\Options\Mail
>> State: Enabled
>>
>> GPO: Blocked Applications
>> Setting:
>>Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun
>> State: Enabled
>>
>> GPO: Local Group Policy
>> Setting:
>>Software\Policies\Microsoft\Windows\CurrentVersion\Internet
> Settings\Zones\4
>> State: Enabled
>>
>> GPO: Blocked Applications
>> Setting:
>>Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun
>> State: Enabled
>>
>> GPO: MS Outlook 2003 Template
>> Setting:
>>Software\Policies\Microsoft\Office\11.0\Outlook\Webview\Contacts
>> State: Enabled
>>
>> GPO: Blocked Applications
>> Setting:
>>Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun
>> State: Enabled
>>
>> GPO: Blocked Applications
>> Setting:
>>Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
>> State: Enabled
>>
>> GPO: Local Group Policy
>> Setting:
>>Software\Policies\Microsoft\Windows\CurrentVersion\Internet
>>Settings\Lockdown_Zones\0
>> State: Enabled
>>
>> GPO: Blocked Applications
>> Setting:
>>Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
>> State: Enabled
>>
>> GPO: Blocked Applications
>> Setting:
>>Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun
>> State: Enabled
>>
>> GPO: Local Group Policy
>> Setting:
>>Software\Policies\Microsoft\Windows\CurrentVersion\Internet
> Settings\Zones\0
>> State: Enabled
>>
>> GPO: Local Group Policy
>> Setting:
>>Software\Policies\Microsoft\Windows\CurrentVersion\Internet
> Settings\Zones\3
>> State: Enabled
>>
>> GPO: MS Outlook 2003 Template
>> Setting:
>>Software\Policies\Microsoft\Office\11.0\Outlook\Webview\Contacts
>> State: Enabled
>>
>> GPO: MS Outlook 2003 Template
>> Setting:
>>Software\Policies\Microsoft\Office\11.0\Outlook\Webview\Contacts
>> State: Enabled
>>
>> GPO: Local Group Policy
>> Setting:
>>Software\Policies\Microsoft\Windows\CurrentVersion\Internet
> Settings\Zones\1
>> State: Enabled
>>
>> GPO: Blocked Applications
>> Setting:
>>Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun
>> State: Enabled
>>
>> GPO: Blocked Applications
>> Setting:
>>Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun
>> State: Enabled
>>
>> GPO: Blocked Applications
>> Setting:
>>Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun
>> State: Enabled
>>
>> GPO: Blocked Applications
>> Setting:
>>Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun
>> State: Enabled
>>
>> GPO: Blocked Applications
>> Setting: Software\Policies\Microsoft\Conferencing
>> State: Enabled
>>
>> GPO: Blocked Applications
>> Setting:
>>Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun
>> State: Enabled
>>
>> GPO: Blocked Applications
>> Setting:
>>Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun
>> State: Enabled
>>
>> GPO: Local Group Policy
>> Setting:
>>Software\Policies\Microsoft\Windows\CurrentVersion\Internet
> Settings\Zones\2
>> State: Enabled
>>
>> GPO: Blocked Applications
>> Setting:
>>Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun
>> State: Enabled
>>
>> GPO: Blocked Applications
>> Setting:
>>Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun
>> State: Enabled
>>
>> GPO: Blocked Applications
>> Setting:
>>Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun
>> State: Enabled
>>
>> Folder Redirection
>> ------------------
>> N/A
>>
>> Internet Explorer Browser User Interface
>> ----------------------------------------
>> GPO: Default Domain Policy
>> Large Animated Bitmap Name: N/A
>> Large Custom Logo Bitmap Name: N/A
>> Title BarText: Audio Visual Innovations,
>>Inc.
>> UserAgent Text: N/A
>> Delete existing toolbar buttons: No
>>
>> Internet Explorer Connection
>> ----------------------------
>> HTTP Proxy Server: N/A
>> Secure Proxy Server: N/A
>> FTP Proxy Server: N/A
>> Gopher Proxy Server: N/A
>> Socks Proxy Server: N/A
>> Auto Config Enable: No
>> Enable Proxy: Yes
>> Use same Proxy: No
>>
>> HTTP Proxy Server: N/A
>> Secure Proxy Server: N/A
>> FTP Proxy Server: N/A
>> Gopher Proxy Server: N/A
>> Socks Proxy Server: N/A
>> Auto Config Enable: No
>> Enable Proxy: Yes
>> Use same Proxy: No
>>
>> HTTP Proxy Server: N/A
>> Secure Proxy Server: N/A
>> FTP Proxy Server: N/A
>> Gopher Proxy Server: N/A
>> Socks Proxy Server: N/A
>> Auto Config Enable: No
>> Enable Proxy: Yes
>> Use same Proxy: No
>>
>> Internet Explorer URLs
>> ----------------------
>> GPO: Default Domain Policy
>> Home page URL: http://intranet.aviinc.local
>> Search page URL: N/A
>> Online support page URL: N/A
>>
>> URL: https://email.aviinc.com
>> Make Available Offline: No
>>
>> URL: http://janis/genifax
>> Make Available Offline: No
>>
>> URL: http://email.aviinc.com
>> Make Available Offline: No
>>
>> URL: http://it.corp.aviinc.com/wiki
>> Make Available Offline: No
>>
>> URL: http://intranet.aviinc.local
>> Make Available Offline: No
>>
>> URL: http://BKR.aviinc.local
>> Make Available Offline: No
>>
>> URL: http://it.aviinc.local/wiki
>> Make Available Offline: No
>>
>> Internet Explorer Security
>> --------------------------
>> Always Viewable Sites: N/A
>> Password Override Enabled: False
>>
>> Always Viewable Sites: N/A
>> Password Override Enabled: False
>>
>> Always Viewable Sites: N/A
>> Password Override Enabled: False
>>
>> GPO: Default Domain Policy
>> Import the current Content Ratings Settings: No
>> Import the current Security Zones Settings: Yes
>> Import current Authenticode Security Information: No
>> Enable trusted publisher lockdown: No
>>
>> Internet Explorer Programs
>> --------------------------
>> GPO: Default Domain Policy
>> Import the current Program Settings: No
>>
>>
>>
>>
>>
>>
>>"Tom Che [MSFT]" <v-tomche@xxxxxxxxxxxxxxxxxxxx> wrote in message
>>news:GJbBnVdYFHA.388@xxxxxxxxxxxxxxxxxxxxxxxx
>>> Hi Harrison,
>>>
>>> Thanks for posting here.
>>>
>>> From your post, my understanding of this issue is: You want to deploy a
>>> GPO
>>> "Pop-up allow list" to all Windows XP SP2 clients, but it is not applied
>>> on
>>> any client. If this is not correct, please feel free to let me know.
>>>
>>> Based on my experience, in this case, you may refer to the following
> steps
>>> to troubleshoot this issue:
>>>
>>> 1. On one client, run "rsop.msc" to check whether the GPO has been
>>> applied.
>>> If it is applied successfully, you should find it from "Computer
>>> Configuration\Administrative Templates\Windows Components\Internet
>>> Explorer\Pop-up allow list". If you cannot find it, it seems that there
>>> is
>>> something wrong during deployment. You may right-click "Computer
>>> Configuration" and then click Properties in "Resultant Set of Policy",
>>> then
>>> select "Error Information" tab to check what happened.
>>>
>>> Also, to verify if the policy apply, you may open registry editor and
>>> check
>>> HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Internet Explorer\New
>>> Windows\Allow
>>> The website should be listed here if the GPO is applied.
>>>
>>> 2. This GPO needs restart computer possibly, so you may restart the
>>> clients
>>> to check it again.
>>>
>>> 3. More information about GPO "Pop-up allow list":
>>>
>>> This policy setting allows you to manage a list of web sites that will
>>> be
>>> allowed to open pop-up windows regardless of the Internet Explorer
>>> process's Pop-Up Blocker settings. the domain name is allowed, so
>>> www.test.com is valid, but not http://www.test.com. Wildcards are
> allowed,
>>> so *.test.com is also valid.
>>>
>>> RELATED KNOWLEDGE BASE ARTICLES
>>> =================================
>>> Pop-Up Blocker documentation
>>>
> http://www.microsoft.com/technet/prodtechnol/winxppro/maintain/sp2brows.mspx
>>>
>>> 843015 Pop-up windows appear with Pop-up Blocker turned on in Windows XP
>>> http://support.microsoft.com/kb/843015
>>>
>>> 843016 How to configure the Pop-up Blocker in Internet Explorer
>>> http://support.microsoft.com/kb/843016
>>>
>>> 4. If this issue persists, you may run "gpresult /v > Result.txt" on one
>>> client and then send the Result.txt file to me: v-tomche@xxxxxxxxxxxxxx
>>>
>>> Have a nice day!
>>>
>>> Sincerely,
>>>
>>> Tom Che
>>>
>>> Microsoft Online Partner Support
>>> Get Secure! - www.microsoft.com/security
>>> =====================================================
>>> When responding to posts, please "Reply to Group" via your newsreader so
>>> that others may learn and benefit from your issue.
>>> =====================================================
>>> This posting is provided "AS IS" with no warranties, and confers no
>>> rights.
>>>
>>> --------------------
>>>>Reply-To: "Harrison Midkiff" <HMidkiff@xxxxxxxxxx>
>>>>From: "Harrison Midkiff" <HMidkiff@xxxxxxxxxx>
>>>>Subject: Applying zone settings on Pop-up Blocker
>>>>Date: Wed, 25 May 2005 11:10:48 -0400
>>>>Lines: 14
>>>>Organization: Audio Visual Innovations, Inc.
>>>>X-Priority: 3
>>>>X-MSMail-Priority: Normal
>>>>X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
>>>>X-RFC2646: Format=Flowed; Original
>>>>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
>>>>Message-ID: <OOrDwvTYFHA.252@xxxxxxxxxxxxxxxxxxxx>
>>>>Newsgroups: microsoft.public.windows.group_policy
>>>>NNTP-Posting-Host: 208.5.55.190
>>>>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP12.phx.gbl
>>>>Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.group_policy:8569
>>>>X-Tomcat-NG: microsoft.public.windows.group_policy
>>>>
>>>>Hello:
>>>>
>>>>I am trying to apply a setting for the Pop-up Blocker in the new Windows
>>> XP
>>>>sp2. I have added it to the GPO option for "Computer
>>>>Configuration\Administrative Templates\Internet Explorer\Pop-up allow
>>> list",
>>>>but it does not show up on my client computers. I have tried doing a
>>>>"gpupdate /force" but it still does not show up.
>>>>
>>>>Does anyone know why this is not applying or if there are any TechNet
>>>>articles which cover the pop-up blocker?
>>>>
>>>>Harrison Midkiff
>>>>
>>>>
>>>>
>>>
>>
>>
>>
>


.