Re: Publishing Software...

From: Ken Gardner (KenGardner_at_discussions.microsoft.com)
Date: 02/24/05 

Date: Thu, 24 Feb 2005 11:17:02 -0800

I may have to recant my thoughts about it being a permissions issue, but I'm
still wary about that being the sole issue though. Basically this is what I
get when I do a RSOP.msc on the client machines having trouble installing the
single published application:

the latest versions of the ADM files below are not available. This can be
due to insufficient permissions or unavailable network resources. The local
copy of these ADM files will be used.
 
wmplayer.adm
Location -
"\\ssastructural.local\SysVol\ssastructural.local\Policies\{2723BE82-5554-4A36-BAF1-8FAE906B4812}\Adm\wmplayer.adm"
Error - Access is denied.
 
Thursday, February 24, 2005 10:28:51 AM

Security failed due to the error listed below.

An extended error has occurred.

Additional Information:

Security policies were propagated with warning.

0x4b8 : An extended error has occurred.

Please review the detailed log security\logs\winlogon.log under Windows root
to troubleshoot the application of security policy.

I'm not getting this on all clients either. Is their a way to reinitialize
the security policies on my problem clients without changing the policies
domain wide? I guess I'm trying to save myself from having to reset the
domain workstation security policy and then lock it down and reapply that.
Any help at all will be greatly appreciated.

Thanks.

"Tony Su" wrote:

> Actually, based on the error I'm not so sure the problem might be related to
> being a member of the Administrators' Group... It seems to be an error
> applying GPO during initial logon.
>
> Could this machine not have been added to the Domain properly?
> ie. Check to make sure the machine is listed properly in SBS Manager and ADUC.
>
> Tony Su
>
> "Cris Hanna [SBS-MVP]" wrote:
>
> > my first thought is that this is a permissions issue
> > Are the users on the machines in question, members of the local Administrators group??
> >
> > --
> > Cris Hanna [SBS-MVP]
> > Small Business Server Specialist
> > The Trinity Companies - Microsoft Gold Partner
> > St. Louis, MO
> > www.trinitycos.com
> > ------------------------------------------------------------------
> > Please only respond in the newsgoup and not to me directly so that all can benefit from the information
> > SBS 2003 - microsoft.public.windows.server.sbs
> > SBS 2000 - microsoft.public.backoffice.smallbiz2000
> > SBS 4.5 - microsoft.public.backoffice.smallbiz
> > "Ken Gardner" <Ken Gardner@discussions.microsoft.com> wrote in message news:C8C44576-19CF-40DE-B654-7E2E1DE841EF@microsoft.com...
> > I'm running SBS 2k3 Prem. Ed., I have setup a few .zap files to publish a few
> > apps. at my users leisure. However, I have one app that does not install on
> > a few machines. It will install on some and not on others. All other apps
> > install w/o a hitch. I looked in the event log the one that doesn't install
> > records a successful event. There is nothing signifcantly different about
> > these machines except hardware. All software is the same and all are up to
> > date.
> > I do get an error recorded in the Event Viewer as follows:
> >
> > Event Type: Information
> > Event Source: Application Management
> > Event Category: None
> > Event ID: 307
> > Date: 2/23/2005
> > Time: 4:31:26 PM
> > User: SSA\bdr
> > Computer: BDR01
> > Description:
> > The launch of the setup command for application RAM Base Plate from policy
> > RAM Software succeeded.
> >
> > Event Type: Error
> > Event Source: Userenv
> > Event Category: None
> > Event ID: 1085
> > Date: 2/23/2005
> > Time: 4:07:13 PM
> > User: NT AUTHORITY\SYSTEM
> > Computer: BDR01
> > Description:
> > The Group Policy client-side extension Security failed to execute. Please
> > look for any errors reported earlier by that extension.
> >
> > Event Type: Warning
> > Event Source: SceCli
> > Event Category: None
> > Event ID: 1202
> > Date: 2/23/2005
> > Time: 4:07:13 PM
> > User: N/A
> > Computer: BDR01
> > Description:
> > Security policies were propagated with warning. 0x4b8 : An extended error
> > has occurred.
> > Please review the detailed log security\logs\winlogon.log under Windows root
> > to troubleshoot the application of security policy.
> >
> > The clients security logs show this:
> >
> > Wednesday, February 23, 2005 4:23:05 PM
> > ----Configuration engine was initialized successfully.----
> > ----Reading Configuration Template info...
> > ----Configure User Rights...
> > Configure S-1-5-32-551.
> > Configure S-1-5-32-544.
> > Configure S-1-5-21-1409082233-1757981266-725345543-1002.
> > Configure S-1-5-21-1409082233-1757981266-725345543-1004.
> > Error 1168: Element not found.
> > Some user rights are not defined in SecEdit.
> > Error 1168: Element not found.
> > Error configuring S-1-5-21-1409082233-1757981266-725345543-1004.
> > Configure S-1-5-21-1409082233-1757981266-725345543-501.
> > Configure S-1-5-21-676007611-3719988184-361589459-512.
> > Configure S-1-5-21-676007611-3719988184-361589459-513.
> > Configure S-1-1-0.
> > Configure S-1-5-21-676007611-3719988184-361589459-1123.
> > User Rights configuration was completed with one or more errors.
> >
> > ----Configure Security Policy...
> > Configure password information.
> > Guest account is disabled.
> > System Access configuration was completed successfully.
> > Audit/Log configuration was completed successfully.
> > Configure machine\software\microsoft\windows
> > nt\currentversion\winlogon\passwordexpirywarning.
> > Configure
> > machine\system\currentcontrolset\services\netlogon\parameters\maximumpasswordage.
> > Configuration of Registry Values was completed successfully.
> > ----Configure available attachment engines...
> > Configuration of attachment engines was completed successfully.
> > ----Un-initialize configuration engine...
> > this is the last GPO

Relevant Pages

  • Group Policy
    ... This directory DOES exist, however several machines ... The machines that can't see it have a separate ... for that security policy, ... We have explicitly added permissions to the directory ...
    (microsoft.public.win2000.security)
  • Re: How to modify program files in Vista?
    ... create it within HKLM and change the permissions. ... INI files have the advantage that most users with access to notepad can ... Security policies ... We were writing a module that validated device drivers found on target machines against ...
    (microsoft.public.vc.mfc)
  • Re: Windows user controls in a web page: Security
    ... I then tried on more machines (I was using 3 real ... Create a windows user control, ... Select the permissions your control will need and then click "Add ... use "URL", for example, to only authorize assemblies coming from one URL. ...
    (microsoft.public.dotnet.security)
  • Re: ubuntu xp vmware cluster f...er...filesharing
    ... virtual machines. ... The common workspace should be accessible no matter ... I've tried the built-in file sharing but it fails because permissions ... I tried Samba but I could not get ubuntu to consistently ...
    (Ubuntu)
  • Re: Access Denied and Lack of Permission in XP Pro Home Network
    ... >There is a problem with access and permissions with our home netwrok. ... After installing through the XP network wizard, all machines may see the ... Are you entering "ping othercomputer" in a command window? ...
    (microsoft.public.windowsxp.network_web)