Re: Applying zone settings on Pop-up Blocker

Hi Harrison,

You are always welcome. Thanks for reply!

If you can find the registry key, and it was set correctly (including the
Web site(s) you edited), it should work normally. If the Pop-up still
cannot showed up, this issue should not be related to GPO, and we may need
troubleshooting on other ways.

I'm waiting for your test result. Please let me know if there is anything
that I can do for you on it.

Have a nice week!

-------------------------------------------------------
Please note that the newsgroups are staffed weekdays by Microsoft Support
professionals to answer your non-urgent, break/fix systems and applications
questions. Our goal is to provide 24 hour response to all questions.

If this response time does not meet your needs, please contact Customer
Service and Support (CSS) for more immediate assistance. For more
information on available CSS services, please click here:
http://support.microsoft.com/default.aspx?scid=fh;EN-US;OfferProPhone#faq607


If you are outside the United States, please visit our International
Support page: http://support.microsoft.com/common/international.aspx
-------------------------------------------------------

Sincerely,

Tom Che

Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security
=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.


--------------------
>Reply-To: "Harrison Midkiff" <HMidkiff@xxxxxxxxxx>
>From: "Harrison Midkiff" <HMidkiff@xxxxxxxxxx>
>References: <OOrDwvTYFHA.252@xxxxxxxxxxxxxxxxxxxx>
<GJbBnVdYFHA.388@xxxxxxxxxxxxxxxxxxxxx>
<eoUm24jYFHA.2796@xxxxxxxxxxxxxxxxxxxx>
<qonk#gtYFHA.2476@xxxxxxxxxxxxxxxxxxxxx>
>Subject: Re: Applying zone settings on Pop-up Blocker
>Date: Fri, 27 May 2005 14:53:56 -0400
>Lines: 1129
>Organization: Audio Visual Innovations, Inc.
>X-Priority: 3
>X-MSMail-Priority: Normal
>X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
>X-RFC2646: Format=Flowed; Original
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
>Message-ID: <uDR9w1uYFHA.2664@xxxxxxxxxxxxxxxxxxxx>
>Newsgroups: microsoft.public.windows.group_policy
>NNTP-Posting-Host: 208.5.55.190
>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP15.phx.gbl
>Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.group_policy:8612
>X-Tomcat-NG: microsoft.public.windows.group_policy
>
>Tom:
>
>Thanks for replying again.
>
>I checked the registry and the settings is there! I am confused.
Shouldn't
>I see it in IE when I look at the exceptions list? I guess it is working.
>I will test.
>
>Harrison Midkiff
>
>"Tom Che [MSFT]" <v-tomche@xxxxxxxxxxxxxxxxxxxx> wrote in message
>news:qonk%23gtYFHA.2476@xxxxxxxxxxxxxxxxxxxxxxxx
>> Hi Harrison,
>>
>> Thanks for reply.
>>
>> From your gpresult.txt log file, I found the following lines:
>>
>> GPO: Default Domain Policy
>> Setting: SOFTWARE\Policies\Microsoft\Internet Explorer\New Windows\Allow
>> State: Enabled
>>
>> It seems that the Pop-up policy has been enabled successfully from DC,
but
>> we cannot make sure whether the policy has been applied on the client
i.e.
>> the related registry value has been modified.
>>
>> Therefore, please check the registry key as my last reply, I also
>> duplicate
>> as below just for your convenience:
>> ++++++++++++++++++++++++
>> Also, to verify if the policy apply, you may open registry editor and
>> check
>>
>> HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Internet Explorer\New
>> Windows\Allow
>>
>> The website should be listed here if the GPO is applied.
>> ++++++++++++++++++++++++
>>
>> If you cannot find the registry key, please try to enable the local
Pop-up
>> policy, add some sites, and then check the registry key again. If it is
>> listed in registry, please open IE to test whether the Pop-up can be
>> showed
>> up normally. If it still cannot work, please on the problematic client
>> try
>> to change IE setting directly as below, to see whether the Pop-up can be
>> showed up normally:
>>
>> 1. Open IE, and then click Tools -> Pop-up Blocker Settings.
>>
>> 2. Edit the allowed sites list.
>>
>> Regarding the error message of rsop.msc, I never see "Unspecified error"
>> and I cannot find any similar case both in our internal database or
>> internet. However, you may try to logon the client with administrator
>> permission to test the issue again, since it is possible that the user
has
>> not the permission to apply the specific policy. Furthermore, you may
>> change the GPO to "User Configuration\Administrative Templates\Windows
>> Components\Internet Explorer\Pop-up allow list", and then try to deploy
it
>> to all clients again.
>>
>> If the issue persists, please let me know the following information for
>> further assistance:
>>
>> 1. Does the "Unspecified error" of rsop.msc occur on all clients?
>>
>> 2. If you use NSLOOKUP to test DC and / or DNS Server, what is the
result?
>>
>> For more information, please refer to the following Microsoft Web site:
>>
>> Troubleshooting Group Policy in Microsoft? Windows? Server
>>
<http://download.microsoft.com/download/5/f/9/5f949309-c0f8-4a92-bd65-64ce31
>> 2e2a92/gp_troubleshooting.doc>
>>
>> Microsoft Windows XP - Nslookup subcommands
>>
<http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en
>> -us/nslookup__subcommands.mspx>
>>
>> Have a nice weekend!
>>
>> Sincerely,
>>
>> Tom Che
>>
>> Microsoft Online Partner Support
>> Get Secure! - www.microsoft.com/security
>> =====================================================
>> When responding to posts, please "Reply to Group" via your newsreader so
>> that others may learn and benefit from your issue.
>> =====================================================
>> This posting is provided "AS IS" with no warranties, and confers no
>> rights.
>>
>> --------------------
>>>Reply-To: "Harrison Midkiff" <HMidkiff@xxxxxxxxxx>
>>>From: "Harrison Midkiff" <HMidkiff@xxxxxxxxxx>
>>>References: <OOrDwvTYFHA.252@xxxxxxxxxxxxxxxxxxxx>
>> <GJbBnVdYFHA.388@xxxxxxxxxxxxxxxxxxxxx>
>>>Subject: Re: Applying zone settings on Pop-up Blocker
>>>Date: Thu, 26 May 2005 17:59:37 -0400
>>>Lines: 1608
>>>Organization: Audio Visual Innovations, Inc.
>>>X-Priority: 3
>>>X-MSMail-Priority: Normal
>>>X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
>>>X-RFC2646: Format=Flowed; Original
>>>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
>>>Message-ID: <eoUm24jYFHA.2796@xxxxxxxxxxxxxxxxxxxx>
>>>Newsgroups: microsoft.public.windows.group_policy
>>>NNTP-Posting-Host: 208.5.55.190
>>>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP09.phx.gbl
>>>Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.group_policy:8598
>>>X-Tomcat-NG: microsoft.public.windows.group_policy
>>>
>>>Tom:
>>>
>>>Here is the "gpresult /v" I ran. The policy which has the settings for
>> the
>>>Pop-up Blocker is called "Default Domain policy". It is applied at the
>> root
>>>so everyone has it. Below is a copy/paste. I also attached the file as a
>>>txt.
>>>
>>>
>>>Microsoft (R) Windows (R) XP Operating System Group Policy Result tool
>>>v2.0
>>>Copyright (C) Microsoft Corp. 1981-2001
>>>
>>>Created On 5/26/2005 at 5:56:13 PM
>>>
>>>
>>>
>>>RSOP results for AVIINC\HMidkiff on TPA-HMIDKIFF : Logging Mode
>>>----------------------------------------------------------------
>>>
>>>OS Type: Microsoft Windows XP Professional
>>>OS Configuration: Member Workstation
>>>OS Version: 5.1.2600
>>>Domain Name: AVIINC
>>>Domain Type: Windows 2000
>>>Site Name: Tampa
>>>Roaming Profile:
>>>Local Profile: C:\Documents and Settings\HMidkiff
>>>Connected over a slow link?: No
>>>
>>>
>>>COMPUTER SETTINGS
>>>------------------
>>> CN=TPA-HMIDKIFF,OU=TPA,OU=Workstations -
>>>ITS,OU=Workstations,DC=AVIINC,DC=LOCAL
>>> Last time Group Policy was applied: 5/26/2005 at 4:25:21 PM
>>> Group Policy was applied from: tpadc1.AVIINC.LOCAL
>>> Group Policy slow link threshold: 500 kbps
>>>
>>> Applied Group Policy Objects
>>> -----------------------------
>>> Default Domain Policy
>>> Blocked Applications
>>> Software Update Services - (SUS)
>>> WinXP SP2 Settings
>>> Office 2003 and Redemption
>>> Software Installation - AntiVirus 9.0
>>> Software Installation - Adobe Reader 7.0.1
>>> Local Group Policy
>>>
>>> The following GPOs were not applied because they were filtered out
>>> -------------------------------------------------------------------
>>> Software Installation - Visio 2003
>>> Filtering: Denied (Security)
>>>
>>> MS Outlook 2003 Template
>>> Filtering: Not Applied (Empty)
>>>
>>> The computer is a part of the following security groups:
>>> --------------------------------------------------------
>>> BUILTIN\Administrators
>>> Everyone
>>> Debugger Users
>>> BUILTIN\Users
>>> NT AUTHORITY\NETWORK
>>> NT AUTHORITY\Authenticated Users
>>> TPA-HMIDKIFF$
>>> Software Installation - AntiVirus 9.0
>>> Domain Computers
>>> Software Installation - Adobe Reader 7.0.1
>>> Software Installation - Office 2003 with Redemption
>>>
>>> Resultant Set Of Policies for Computer:
>>> ----------------------------------------
>>>
>>> Software Installations
>>> ----------------------
>>> GPO: Software Installation - Adobe Reader 7.0.1
>>> Name: Adobe Reader 7.0
>>> Version: 7.0
>>> Deployment State: Assigned
>>> Source: \\tpadc1\Packages\Acrobat
>>>7.0\packages\Acrobat7\adobe reader 7.0.msi
>>> AutoInstall: True
>>> Origin: Applied Application
>>>
>>> GPO: Office 2003 and Redemption
>>> Name: Microsoft Office Professional Edition
>> 2003
>>> Version: 11.0
>>> Deployment State: Assigned
>>> Source:
>>>\\tpadc1\Packages\Office2003\AVIOffice-1.msi
>>> AutoInstall: True
>>> Origin: Applied Application
>>>
>>> GPO: Software Installation - AntiVirus 9.0
>>> Name: Symantec AntiVirus
>>> Version: 9.0
>>> Deployment State: Assigned
>>> Source:
\\tpadc1\Packages\NAV_9.0\WIN32\Symantec
>>>AntiVirus.msi
>>> AutoInstall: True
>>> Origin: Applied Application
>>>
>>> Startup Scripts
>>> ---------------
>>> N/A
>>>
>>> Shutdown Scripts
>>> ----------------
>>> N/A
>>>
>>> Account Policies
>>> ----------------
>>> GPO: Default Domain Policy
>>> Policy: MinimumPasswordAge
>>> Computer Setting: N/A
>>>
>>> GPO: Default Domain Policy
>>> Policy: PasswordHistorySize
>>> Computer Setting: 10
>>>
>>> GPO: Default Domain Policy
>>> Policy: LockoutDuration
>>> Computer Setting: 60
>>>
>>> GPO: Default Domain Policy
>>> Policy: ResetLockoutCount
>>> Computer Setting: 60
>>>
>>> GPO: Default Domain Policy
>>> Policy: MinimumPasswordLength
>>> Computer Setting: 5
>>>
>>> GPO: Default Domain Policy
>>> Policy: LockoutBadCount
>>> Computer Setting: 4
>>>
>>> GPO: Default Domain Policy
>>> Policy: MaximumPasswordAge
>>> Computer Setting: 60
>>>
>>> Audit Policy
>>> ------------
>>> GPO: Default Domain Policy
>>> Policy: AuditPolicyChange
>>> Computer Setting: Failure
>>>
>>> GPO: Default Domain Policy
>>> Policy: AuditDSAccess
>>> Computer Setting: Failure
>>>
>>> GPO: Default Domain Policy
>>> Policy: AuditAccountLogon
>>> Computer Setting: Failure
>>>
>>> GPO: Default Domain Policy
>>> Policy: AuditLogonEvents
>>> Computer Setting: Failure
>>>
>>> GPO: Default Domain Policy
>>> Policy: AuditProcessTracking
>>> Computer Setting: Failure
>>>
>>> User Rights
>>> -----------
>>> N/A
>>>
>>> Security Options
>>> ----------------
>>> N/A
>>>
>>> Event Log Settings
>>> ------------------
>>> N/A
>>>
>>> Restricted Groups
>>> -----------------
>>> N/A
>>>
>>> System Services
>>> ---------------
>>> N/A
>>>
>>> Registry Settings
>>> -----------------
>>> N/A
>>>
>>> File System Settings
>>> --------------------
>>> N/A
>>>
>>> Public Key Policies
>>> -------------------
>>> N/A
>>>
>>> Administrative Templates
>>> ------------------------
>>> GPO: WinXP SP2 Settings
>>> Setting:
>>>SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings
>>> State: Enabled
>>>
>>> GPO: WinXP SP2 Settings
>>> Setting:
>>>SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Logging
>>> State: Enabled
>>>
>>> GPO: WinXP SP2 Settings
>>> Setting:
>>>SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\IcmpSettings
>>> State: Enabled
>>>
>>> GPO: WinXP SP2 Settings
>>> Setting:
>>>SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\AuthorizedAppli
ca
>> tions\List
>>> State: Enabled
>>>
>>> GPO: WinXP SP2 Settings
>>> Setting:
>>>SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings
>>> State: Enabled
>>>
>>> GPO: Local Group Policy
>>> Setting:
>>>Software\Policies\Microsoft\Windows\CurrentVersion\Internet
>> Settings\Zones\1
>>> State: Enabled
>>>
>>> GPO: Blocked Applications
>>> Setting:
Software\Policies\Microsoft\Windows\WindowsUpdate
>>> State: Enabled
>>>
>>> GPO: WinXP SP2 Settings
>>> Setting:
>>>SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\IcmpSettings
>>> State: Enabled
>>>
>>> GPO: WinXP SP2 Settings
>>> Setting:
>>>SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile
>>> State: Enabled
>>>
>>> GPO: WinXP SP2 Settings
>>> Setting:
>>>SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\AuthorizedApp
li
>> cations\List
>>> State: Enabled
>>>
>>> GPO: WinXP SP2 Settings
>>> Setting:
>>>SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\GloballyOpenP
or
>> ts
>>> State: Enabled
>>>
>>> GPO: Software Update Services - (SUS)
>>> Setting:
>>>Software\Policies\Microsoft\Windows\WindowsUpdate\AU
>>> State: Enabled
>>>
>>> GPO: WinXP SP2 Settings
>>> Setting:
>>>SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\AuthorizedApp
li
>> cations\List
>>> State: Enabled
>>>
>>> GPO: WinXP SP2 Settings
>>> Setting:
>>>SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Services\Remote
De
>> sktop
>>> State: Enabled
>>>
>>> GPO: WinXP SP2 Settings
>>> Setting:
>>>SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\AuthorizedAppli
ca
>> tions\List
>>> State: Enabled
>>>
>>> GPO: WinXP SP2 Settings
>>> Setting:
>>>SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\AuthorizedAppli
ca
>> tions
>>> State: Enabled
>>>
>>> GPO: WinXP SP2 Settings
>>> Setting:
>>>SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\IcmpSettings
>>> State: Enabled
>>>
>>> GPO: WinXP SP2 Settings
>>> Setting:
>>>SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\Services\File
An
>> dPrint
>>> State: Enabled
>>>
>>> GPO: WinXP SP2 Settings
>>> Setting:
>>>SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings
>>> State: Enabled
>>>
>>> GPO: WinXP SP2 Settings
>>> Setting:
>>>SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Logging
>>> State: Enabled
>>>
>>> GPO: WinXP SP2 Settings
>>> Setting:
>>>SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings
>>> State: Enabled
>>>
>>> GPO: WinXP SP2 Settings
>>> Setting:
>>>SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\IcmpSettings
>>> State: Enabled
>>>
>>> GPO: WinXP SP2 Settings
>>> Setting:
>>>SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\IcmpSettings
>>> State: Enabled
>>>
>>> GPO: WinXP SP2 Settings
>>> Setting:
>>>SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\GloballyOpenPor
ts
>>> State: Enabled
>>>
>>> GPO: WinXP SP2 Settings
>>> Setting:
>>>SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings
>>> State: Enabled
>>>
>>> GPO: WinXP SP2 Settings
>>> Setting:
>>>SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile
>>> State: Enabled
>>>
>>> GPO: WinXP SP2 Settings
>>> Setting:
>>>SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\Logging
>>> State: Enabled
>>>
>>> GPO: WinXP SP2 Settings
>>> Setting:
>>>SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings
>>> State: Enabled
>>>
>>> GPO: WinXP SP2 Settings
>>> Setting:
>>>SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings
>>> State: Enabled
>>>
>>> GPO: WinXP SP2 Settings
>>> Setting:
>>>SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\AuthorizedApp
li
>> cations\List
>>> State: Enabled
>>>
>>> GPO: WinXP SP2 Settings
>>> Setting:
>>>SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\IcmpSettings
>>> State: Enabled
>>>
>>> GPO: WinXP SP2 Settings
>>> Setting:
>>>SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings
>>> State: Enabled
>>>
>>> GPO: Software Update Services - (SUS)
>>> Setting:
>>>Software\Policies\Microsoft\Windows\WindowsUpdate\AU
>>> State: Enabled
>>>
>>> GPO: WinXP SP2 Settings
>>> Setting:
>>>SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings
>>> State: Enabled
>>>
>>> GPO: WinXP SP2 Settings
>>> Setting:
>>>SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\AuthorizedApp
li
>> cations
>>> State: Enabled
>>>
>>> GPO: Local Group Policy
>>> Setting:
>>>Software\Policies\Microsoft\Windows\CurrentVersion\Internet
>> Settings\Zones\3
>>> State: Enabled
>>>
>>> GPO: WinXP SP2 Settings
>>> Setting:
>>>SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\Logging
>>> State: Enabled
>>>
>>> GPO: WinXP SP2 Settings
>>> Setting:
>>>SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\Logging
>>> State: Enabled
>>>
>>> GPO: Local Group Policy
>>> Setting:
>>>Software\Policies\Microsoft\Windows\CurrentVersion\Internet
>> Settings\Zones\0
>>> State: Enabled
>>>
>>> GPO: WinXP SP2 Settings
>>> Setting:
>>>SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\Services\File
An
>> dPrint
>>> State: Enabled
>>>
>>> GPO: Default Domain Policy
>>> Setting: SOFTWARE\Policies\Microsoft\Internet
Explorer\New
>>>Windows\Allow
>>> State: Enabled
>>>
>>> GPO: WinXP SP2 Settings
>>> Setting:
>>>SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\AuthorizedApp
li
>> cations
>>> State: Enabled
>>>
>>> GPO: WinXP SP2 Settings
>>> Setting:
>>>SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\Services\Remo
te
>> Desktop
>>> State: Enabled
>>>
>>> GPO: WinXP SP2 Settings
>>> Setting:
>>>SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\AuthorizedApp
li
>> cations\List
>>> State: Enabled
>>>
>>> GPO: WinXP SP2 Settings
>>> Setting:
>>>SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\AuthorizedAppli
ca
>> tions
>>> State: Enabled
>>>
>>> GPO: WinXP SP2 Settings
>>> Setting:
>>>SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile
>>> State: Enabled
>>>
>>> GPO: WinXP SP2 Settings
>>> Setting:
>>>SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Logging
>>> State: Enabled
>>>
>>> GPO: Default Domain Policy
>>> Setting: SOFTWARE\Policies\Microsoft\Internet
Explorer\New
>>>Windows
>>> State: Enabled
>>>
>>> GPO: Default Domain Policy
>>> Setting: SOFTWARE\Policies\Microsoft\Internet
Explorer\New
>>>Windows\Allow
>>> State: Enabled
>>>
>>> GPO: Software Update Services - (SUS)
>>> Setting:
>>>Software\Policies\Microsoft\Windows\WindowsUpdate\AU
>>> State: Enabled
>>>
>>> GPO: WinXP SP2 Settings
>>> Setting:
>>>SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings
>>> State: Enabled
>>>
>>> GPO: WinXP SP2 Settings
>>> Setting:
>>>SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\IcmpSettings
>>> State: Enabled
>>>
>>> GPO: WinXP SP2 Settings
>>> Setting:
>>>SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\IcmpSettings
>>> State: Enabled
>>>
>>> GPO: Software Update Services - (SUS)
>>> Setting:
>>>Software\Policies\Microsoft\Windows\WindowsUpdate\AU
>>> State: Enabled
>>>
>>> GPO: Local Group Policy
>>> Setting:
>>>Software\Policies\Microsoft\Windows\CurrentVersion\Internet
>>>Settings\Lockdown_Zones\0
>>> State: Enabled
>>>
>>> GPO: WinXP SP2 Settings
>>> Setting:
>>>SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile
>>> State: Enabled
>>>
>>> GPO: WinXP SP2 Settings
>>> Setting:
>>>SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Services\Remote
De
>> sktop
>>> State: Enabled
>>>
>>> GPO: WinXP SP2 Settings
>>> Setting:
>>>SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\IcmpSettings
>>> State: Enabled
>>>
>>> GPO: WinXP SP2 Settings
>>> Setting:
>>>SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Services\FileAn
dP
>> rint
>>> State: Enabled
>>>
>>> GPO: WinXP SP2 Settings
>>> Setting:
>>>SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\AuthorizedAppli
ca
>> tions\List
>>> State: Enabled
>>>
>>> GPO: Software Update Services - (SUS)
>>> Setting:
>>>Software\Policies\Microsoft\Windows\WindowsUpdate\AU
>>> State: Enabled
>>>
>>> GPO: Local Group Policy
>>> Setting:
>>>Software\Policies\Microsoft\Windows\CurrentVersion\Internet
>> Settings\Zones\2
>>> State: Enabled
>>>
>>> GPO: WinXP SP2 Settings
>>> Setting:
>>>SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\Services\Remo
te
>> Desktop
>>> State: Enabled
>>>
>>> GPO: WinXP SP2 Settings
>>> Setting:
>>>SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Services\FileAn
dP
>> rint
>>> State: Enabled
>>>
>>> GPO: WinXP SP2 Settings
>>> Setting:
>>>SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\AuthorizedAppli
ca
>> tions\List
>>> State: Enabled
>>>
>>> GPO: Local Group Policy
>>> Setting:
>>>Software\Policies\Microsoft\Windows\CurrentVersion\Internet
>> Settings\Zones\4
>>> State: Enabled
>>>
>>> GPO: WinXP SP2 Settings
>>> Setting:
>>>SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\Logging
>>> State: Enabled
>>>
>>> GPO: Software Update Services - (SUS)
>>> Setting:
Software\Policies\Microsoft\Windows\WindowsUpdate
>>> State: Enabled
>>>
>>> GPO: WinXP SP2 Settings
>>> Setting:
>>>SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Logging
>>> State: Enabled
>>>
>>> GPO: Software Update Services - (SUS)
>>> Setting:
>>>Software\Policies\Microsoft\Windows\WindowsUpdate\AU
>>> State: Enabled
>>>
>>> GPO: WinXP SP2 Settings
>>> Setting:
>>>SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\AuthorizedAppli
ca
>> tions\List
>>> State: Enabled
>>>
>>> GPO: Software Update Services - (SUS)
>>> Setting:
Software\Policies\Microsoft\Windows\WindowsUpdate
>>> State: Enabled
>>>
>>> GPO: Default Domain Policy
>>> Setting:
>>>Software\Microsoft\Windows\CurrentVersion\Policies\System
>>> State: Enabled
>>>
>>> GPO: WinXP SP2 Settings
>>> Setting:
>>>SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\IcmpSettings
>>> State: Enabled
>>>
>>>
>>>USER SETTINGS
>>>--------------
>>> CN=Harrison Midkiff,OU=TPA,OU=ITS,DC=AVIINC,DC=LOCAL
>>> Last time Group Policy was applied: 5/26/2005 at 5:54:03 PM
>>> Group Policy was applied from: tpadc1.AVIINC.LOCAL
>>> Group Policy slow link threshold: 500 kbps
>>>
>>> Applied Group Policy Objects
>>> -----------------------------
>>> Default Domain Policy
>>> Blocked Applications
>>> MS Outlook 2003 Template
>>> ITS - TPA Default Group Policy
>>> ITS Web Settings
>>> ITS Default Group Policy
>>> Local Group Policy
>>>
>>> The user is a part of the following security groups:
>>> ----------------------------------------------------
>>> Domain Users
>>> Everyone
>>> Debugger Users
>>> BUILTIN\Administrators
>>> Remote Desktop Users
>>> BUILTIN\Users
>>> NT AUTHORITY\INTERACTIVE
>>> NT AUTHORITY\Authenticated Users
>>> LOCAL
>>> avi mis global
>>> SBT Users Group
>>> TPA ITS - Tier - 1
>>> ADV - Intranet PEOPLE Editors
>>> ADV - Wiki - IT
>>> ITS-ALL-ALL
>>> Exchange Admins
>>> SMSMSE Admins
>>> AVI Wireless Users Group
>>> ADV - ITWeb Admins
>>> AVI Terminal Server R2-n-SBT Users
>>> TPA ITS - Tier - 2
>>> IPrism
>>> ITS-TPA-ALL
>>> RAS Users
>>> Everyone Group
>>> avi mis global
>>> Exchange Admins
>>> IPrism
>>> TPA ITS - Tier - 1
>>> TPA ITS - Tier - 2
>>> HMidkiff
>>> avi mis local
>>> avi mis local
>>>
>>> Resultant Set Of Policies for User:
>>> ------------------------------------
>>>
>>> Software Installations
>>> ----------------------
>>> N/A
>>>
>>> Public Key Policies
>>> -------------------
>>> N/A
>>>
>>> Administrative Templates
>>> ------------------------
>>> GPO: MS Outlook 2003 Template
>>> Setting:
>>>Software\Policies\Microsoft\Office\11.0\Outlook\Options\Mail
>>> State: Enabled
>>>
>>> GPO: Blocked Applications
>>> Setting:
>>>Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun
>>> State: Enabled
>>>
>>> GPO: Local Group Policy
>>> Setting:
>>>Software\Policies\Microsoft\Windows\CurrentVersion\Internet
>> Settings\Zones\4
>>> State: Enabled
>>>
>>> GPO: Blocked Applications
>>> Setting:
>>>Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun
>>> State: Enabled
>>>
>>> GPO: MS Outlook 2003 Template
>>> Setting:
>>>Software\Policies\Microsoft\Office\11.0\Outlook\Webview\Contacts
>>> State: Enabled
>>>
>>> GPO: Blocked Applications
>>> Setting:
>>>Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun
>>> State: Enabled
>>>
>>> GPO: Blocked Applications
>>> Setting:
>>>Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
>>> State: Enabled
>>>
>>> GPO: Local Group Policy
>>> Setting:
>>>Software\Policies\Microsoft\Windows\CurrentVersion\Internet
>>>Settings\Lockdown_Zones\0
>>> State: Enabled
>>>
>>> GPO: Blocked Applications
>>> Setting:
>>>Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
>>> State: Enabled
>>>
>>> GPO: Blocked Applications
>>> Setting:
>>>Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun
>>> State: Enabled
>>>
>>> GPO: Local Group Policy
>>> Setting:
>>>Software\Policies\Microsoft\Windows\CurrentVersion\Internet
>> Settings\Zones\0
>>> State: Enabled
>>>
>>> GPO: Local Group Policy
>>> Setting:
>>>Software\Policies\Microsoft\Windows\CurrentVersion\Internet
>> Settings\Zones\3
>>> State: Enabled
>>>
>>> GPO: MS Outlook 2003 Template
>>> Setting:
>>>Software\Policies\Microsoft\Office\11.0\Outlook\Webview\Contacts
>>> State: Enabled
>>>
>>> GPO: MS Outlook 2003 Template
>>> Setting:
>>>Software\Policies\Microsoft\Office\11.0\Outlook\Webview\Contacts
>>> State: Enabled
>>>
>>> GPO: Local Group Policy
>>> Setting:
>>>Software\Policies\Microsoft\Windows\CurrentVersion\Internet
>> Settings\Zones\1
>>> State: Enabled
>>>
>>> GPO: Blocked Applications
>>> Setting:
>>>Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun
>>> State: Enabled
>>>
>>> GPO: Blocked Applications
>>> Setting:
>>>Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun
>>> State: Enabled
>>>
>>> GPO: Blocked Applications
>>> Setting:
>>>Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun
>>> State: Enabled
>>>
>>> GPO: Blocked Applications
>>> Setting:
>>>Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun
>>> State: Enabled
>>>
>>> GPO: Blocked Applications
>>> Setting: Software\Policies\Microsoft\Conferencing
>>> State: Enabled
>>>
>>> GPO: Blocked Applications
>>> Setting:
>>>Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun
>>> State: Enabled
>>>
>>> GPO: Blocked Applications
>>> Setting:
>>>Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun
>>> State: Enabled
>>>
>>> GPO: Local Group Policy
>>> Setting:
>>>Software\Policies\Microsoft\Windows\CurrentVersion\Internet
>> Settings\Zones\2
>>> State: Enabled
>>>
>>> GPO: Blocked Applications
>>> Setting:
>>>Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun
>>> State: Enabled
>>>
>>> GPO: Blocked Applications
>>> Setting:
>>>Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun
>>> State: Enabled
>>>
>>> GPO: Blocked Applications
>>> Setting:
>>>Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun
>>> State: Enabled
>>>
>>> Folder Redirection
>>> ------------------
>>> N/A
>>>
>>> Internet Explorer Browser User Interface
>>> ----------------------------------------
>>> GPO: Default Domain Policy
>>> Large Animated Bitmap Name: N/A
>>> Large Custom Logo Bitmap Name: N/A
>>> Title BarText: Audio Visual
Innovations,
>>>Inc.
>>> UserAgent Text: N/A
>>> Delete existing toolbar buttons: No
>>>
>>> Internet Explorer Connection
>>> ----------------------------
>>> HTTP Proxy Server: N/A
>>> Secure Proxy Server: N/A
>>> FTP Proxy Server: N/A
>>> Gopher Proxy Server: N/A
>>> Socks Proxy Server: N/A
>>> Auto Config Enable: No
>>> Enable Proxy: Yes
>>> Use same Proxy: No
>>>
>>> HTTP Proxy Server: N/A
>>> Secure Proxy Server: N/A
>>> FTP Proxy Server: N/A
>>> Gopher Proxy Server: N/A
>>> Socks Proxy Server: N/A
>>> Auto Config Enable: No
>>> Enable Proxy: Yes
>>> Use same Proxy: No
>>>
>>> HTTP Proxy Server: N/A
>>> Secure Proxy Server: N/A
>>> FTP Proxy Server: N/A
>>> Gopher Proxy Server: N/A
>>> Socks Proxy Server: N/A
>>> Auto Config Enable: No
>>> Enable Proxy: Yes
>>> Use same Proxy: No
>>>
>>> Internet Explorer URLs
>>> ----------------------
>>> GPO: Default Domain Policy
>>> Home page URL: http://intranet.aviinc.local
>>> Search page URL: N/A
>>> Online support page URL: N/A
>>>
>>> URL: https://email.aviinc.com
>>> Make Available Offline: No
>>>
>>> URL: http://janis/genifax
>>> Make Available Offline: No
>>>
>>> URL: http://email.aviinc.com
>>> Make Available Offline: No
>>>
>>> URL: http://it.corp.aviinc.com/wiki
>>> Make Available Offline: No
>>>
>>> URL: http://intranet.aviinc.local
>>> Make Available Offline: No
>>>
>>> URL: http://BKR.aviinc.local
>>> Make Available Offline: No
>>>
>>> URL: http://it.aviinc.local/wiki
>>> Make Available Offline: No
>>>
>>> Internet Explorer Security
>>> --------------------------
>>> Always Viewable Sites: N/A
>>> Password Override Enabled: False
>>>
>>> Always Viewable Sites: N/A
>>> Password Override Enabled: False
>>>
>>> Always Viewable Sites: N/A
>>> Password Override Enabled: False
>>>
>>> GPO: Default Domain Policy
>>> Import the current Content Ratings Settings: No
>>> Import the current Security Zones Settings: Yes
>>> Import current Authenticode Security Information: No
>>> Enable trusted publisher lockdown: No
>>>
>>> Internet Explorer Programs
>>> --------------------------
>>> GPO: Default Domain Policy
>>> Import the current Program Settings: No
>>>
>>>
>>>
>>>
>>>
>>>
>>>"Tom Che [MSFT]" <v-tomche@xxxxxxxxxxxxxxxxxxxx> wrote in message
>>>news:GJbBnVdYFHA.388@xxxxxxxxxxxxxxxxxxxxxxxx
>>>> Hi Harrison,
>>>>
>>>> Thanks for posting here.
>>>>
>>>> From your post, my understanding of this issue is: You want to deploy a
>>>> GPO
>>>> "Pop-up allow list" to all Windows XP SP2 clients, but it is not
applied
>>>> on
>>>> any client. If this is not correct, please feel free to let me know.
>>>>
>>>> Based on my experience, in this case, you may refer to the following
>> steps
>>>> to troubleshoot this issue:
>>>>
>>>> 1. On one client, run "rsop.msc" to check whether the GPO has been
>>>> applied.
>>>> If it is applied successfully, you should find it from "Computer
>>>> Configuration\Administrative Templates\Windows Components\Internet
>>>> Explorer\Pop-up allow list". If you cannot find it, it seems that
there
>>>> is
>>>> something wrong during deployment. You may right-click "Computer
>>>> Configuration" and then click Properties in "Resultant Set of Policy",
>>>> then
>>>> select "Error Information" tab to check what happened.
>>>>
>>>> Also, to verify if the policy apply, you may open registry editor and
>>>> check
>>>> HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Internet Explorer\New
>>>> Windows\Allow
>>>> The website should be listed here if the GPO is applied.
>>>>
>>>> 2. This GPO needs restart computer possibly, so you may restart the
>>>> clients
>>>> to check it again.
>>>>
>>>> 3. More information about GPO "Pop-up allow list":
>>>>
>>>> This policy setting allows you to manage a list of web sites that will
>>>> be
>>>> allowed to open pop-up windows regardless of the Internet Explorer
>>>> process's Pop-Up Blocker settings. the domain name is allowed, so
>>>> www.test.com is valid, but not http://www.test.com. Wildcards are
>> allowed,
>>>> so *.test.com is also valid.
>>>>
>>>> RELATED KNOWLEDGE BASE ARTICLES
>>>> =================================
>>>> Pop-Up Blocker documentation
>>>>
>>
http://www.microsoft.com/technet/prodtechnol/winxppro/maintain/sp2brows.mspx
>>>>
>>>> 843015 Pop-up windows appear with Pop-up Blocker turned on in Windows
XP
>>>> http://support.microsoft.com/kb/843015
>>>>
>>>> 843016 How to configure the Pop-up Blocker in Internet Explorer
>>>> http://support.microsoft.com/kb/843016
>>>>
>>>> 4. If this issue persists, you may run "gpresult /v > Result.txt" on
one
>>>> client and then send the Result.txt file to me: v-tomche@xxxxxxxxxxxxxx
>>>>
>>>> Have a nice day!
>>>>
>>>> Sincerely,
>>>>
>>>> Tom Che
>>>>
>>>> Microsoft Online Partner Support
>>>> Get Secure! - www.microsoft.com/security
>>>> =====================================================
>>>> When responding to posts, please "Reply to Group" via your newsreader
so
>>>> that others may learn and benefit from your issue.
>>>> =====================================================
>>>> This posting is provided "AS IS" with no warranties, and confers no
>>>> rights.
>>>>
>>>> --------------------
>>>>>Reply-To: "Harrison Midkiff" <HMidkiff@xxxxxxxxxx>
>>>>>From: "Harrison Midkiff" <HMidkiff@xxxxxxxxxx>
>>>>>Subject: Applying zone settings on Pop-up Blocker
>>>>>Date: Wed, 25 May 2005 11:10:48 -0400
>>>>>Lines: 14
>>>>>Organization: Audio Visual Innovations, Inc.
>>>>>X-Priority: 3
>>>>>X-MSMail-Priority: Normal
>>>>>X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
>>>>>X-RFC2646: Format=Flowed; Original
>>>>>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
>>>>>Message-ID: <OOrDwvTYFHA.252@xxxxxxxxxxxxxxxxxxxx>
>>>>>Newsgroups: microsoft.public.windows.group_policy
>>>>>NNTP-Posting-Host: 208.5.55.190
>>>>>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP12.phx.gbl
>>>>>Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.group_policy:8569
>>>>>X-Tomcat-NG: microsoft.public.windows.group_policy
>>>>>
>>>>>Hello:
>>>>>
>>>>>I am trying to apply a setting for the Pop-up Blocker in the new
Windows
>>>> XP
>>>>>sp2. I have added it to the GPO option for "Computer
>>>>>Configuration\Administrative Templates\Internet Explorer\Pop-up allow
>>>> list",
>>>>>but it does not show up on my client computers. I have tried doing a
>>>>>"gpupdate /force" but it still does not show up.
>>>>>
>>>>>Does anyone know why this is not applying or if there are any TechNet
>>>>>articles which cover the pop-up blocker?
>>>>>
>>>>>Harrison Midkiff
>>>>>
>>>>>
>>>>>
>>>>
>>>
>>>
>>>
>>
>
>
>

.