Publishing Software...

From: Ken Gardner (Gardner_at_discussions.microsoft.com)
Date: 02/23/05


Date: Wed, 23 Feb 2005 13:37:05 -0800

I'm running SBS 2k3 Prem. Ed., I have setup a few .zap files to publish a few
apps. at my users leisure. However, I have one app that does not install on
a few machines. It will install on some and not on others. All other apps
install w/o a hitch. I looked in the event log the one that doesn't install
records a successful event. There is nothing signifcantly different about
these machines except hardware. All software is the same and all are up to
date.
I do get an error recorded in the Event Viewer as follows:

Event Type: Information
Event Source: Application Management
Event Category: None
Event ID: 307
Date: 2/23/2005
Time: 4:31:26 PM
User: SSA\bdr
Computer: BDR01
Description:
The launch of the setup command for application RAM Base Plate from policy
RAM Software succeeded.

Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1085
Date: 2/23/2005
Time: 4:07:13 PM
User: NT AUTHORITY\SYSTEM
Computer: BDR01
Description:
The Group Policy client-side extension Security failed to execute. Please
look for any errors reported earlier by that extension.
 
Event Type: Warning
Event Source: SceCli
Event Category: None
Event ID: 1202
Date: 2/23/2005
Time: 4:07:13 PM
User: N/A
Computer: BDR01
Description:
Security policies were propagated with warning. 0x4b8 : An extended error
has occurred.
Please review the detailed log security\logs\winlogon.log under Windows root
to troubleshoot the application of security policy.

The clients security logs show this:

Wednesday, February 23, 2005 4:23:05 PM
----Configuration engine was initialized successfully.----
----Reading Configuration Template info...
----Configure User Rights...
        Configure S-1-5-32-551.
        Configure S-1-5-32-544.
        Configure S-1-5-21-1409082233-1757981266-725345543-1002.
        Configure S-1-5-21-1409082233-1757981266-725345543-1004.
Error 1168: Element not found.
 Some user rights are not defined in SecEdit.
Error 1168: Element not found.
         Error configuring S-1-5-21-1409082233-1757981266-725345543-1004.
        Configure S-1-5-21-1409082233-1757981266-725345543-501.
        Configure S-1-5-21-676007611-3719988184-361589459-512.
        Configure S-1-5-21-676007611-3719988184-361589459-513.
        Configure S-1-1-0.
        Configure S-1-5-21-676007611-3719988184-361589459-1123.
        User Rights configuration was completed with one or more errors.

----Configure Security Policy...
        Configure password information.
        Guest account is disabled.
        System Access configuration was completed successfully.
        Audit/Log configuration was completed successfully.
        Configure machine\software\microsoft\windows
nt\currentversion\winlogon\passwordexpirywarning.
        Configure
machine\system\currentcontrolset\services\netlogon\parameters\maximumpasswordage.
        Configuration of Registry Values was completed successfully.
----Configure available attachment engines...
        Configuration of attachment engines was completed successfully.
----Un-initialize configuration engine...
this is the last GPO.
 



Relevant Pages

  • Re: Newbie FAQ #2: Wheres the GUI?
    ... Windows is so insecure you can't download and run ... suggesting that most of the windows security features are ... install shrink-wrapped software. ... and zero-install web apps solve that. ...
    (comp.lang.lisp)
  • Re: ZA Trojans & Hijackers
    ... Best thing is to setup a the system again from CD. ... Any security software does never provide 100% protection. ... because in particular personal firewalls need a lot of assistence of the ... Only install the software which is absolutely ...
    (comp.security.firewalls)
  • Re: Security in WinCE4.2
    ... CE4.2 enables you to setup a secured environment where only sgned binaries ... can run (so you can't install any other DLL/EXE without having them signed). ... your custom security requirements, on top of the security implemented by CE ...
    (microsoft.public.windowsce.platbuilder)
  • RE: Mass deployment of security tools
    ... Active Directory can push these apps for you. ... If you have a legacy app without an .MSI, ... I have been tasked with a project of installing various security ... I want to install a number of security applications to windows PC's ...
    (Security-Basics)
  • Re: bitten nails
    ... > Are there any particular hints, tips, etc on performing a first ever install ... > up as soon as the OS and major apps are installed and appear to be running ... May want to utilize System Restore in between program installations. ... read the setup documentation. ...
    (microsoft.public.windowsxp.newusers)