Re: GPO Problem with new SBS 2003 installation

Tech-Archive recommends: Fix windows errors by optimizing your registry

Lee,

I did the test in the first part of your message. The query returned what I
think is the correct message. When I used ServicePackMajorVersion<=1 it
returned 0 objects and max batch 0 (these are SP2 computers). When I used
ServicePackMajorVersion<=2 it returned 1 Objects and MaxBatch 1. It looks
like this is working properly. If these are SP2 boxes, why is it even trying
to apply this GPO in the first place. If the WMI is set for PreSP2,
shouldn't the unit just skip this?

I also looked at the permissions on the CIMv2 objects. All of them are as
follows:
Administrator for the local system full
Everyone, LOCAL SERVICE, and NETWORK SERVICE all have Execute Methods,
Provider Write and Enable Account.

I'll wait to recreate the GPO until you have a chance to clarify my question
about PostSp2 vs. PreSp2 in my previous post.

Lesa

I checked these against systems that are working and they look the same.
""Lee Li[MSFT]"" <leelili@xxxxxxxxxxxxxxxxxxxx> wrote in message
news:1sZK1ksVFHA.3336@xxxxxxxxxxxxxxxxxxxxxxxx
> Dear Lesa,
>
> Thank you for your update.
>
> The WMI filter used by the "Small Business Server Internet Connection
> Firewall" policy will query the Win32_OperatingSystem WMI instance on the
> client computer.
> Let us done the following steps to check the WMI on a problem client
> computer:
> 1. Click start => Run => enter "wbemtest"
> 2. Click "connect" from the dialog and enter "root\cimv2" and click
> "connect" button.
> 3. Click "query" and enter the following command in the dialog:
> Select * from WIN32_OperatingSystem where ServicePackMajorVersion<=1 and
> Version='5.1.2600'
> And then check if the result can be returned correctly or not.
>
> If not, please let me know the error message that you had got.
> Also please take a look at the WMI security on the client computer:
> Click "start" => click "run" => enter "wmimgmt.msc" => right click on
> WMIcontrol and properties => click "security" tab.
> Expand Right click on CIMv2 and click "security", make sure the Local
> system account had the full control permission on this entry and
subentreis.
>
> Also for the detail steps to export and recreate the policy, you can use
> the following steps:
> 1. In the "server management" console => expand "group policy management"
> => "group policy object"
> 2. Right click on the "Small Business Server Internet Connection Firewall"
> and choose backup.
> 3. Delete this policy object and create a new policy object.
> 4. Choose the new policy object and right click and choose "import
settings"
> 5. Select the original backup files and import the settings back.
> 6. In the WMI filter dialog choose "PostSp2"
> 7. Then create a new group policy with this group policy object and check
> the issue again.
>
> Please keep me posted on how things go. Have a nice day!
>
> Sincerely,
>
> Lee Li
> Microsoft Online Partner Support
>
> When responding to posts, please "Reply to Group" via your newsreader so
> that others may learn and benefit from your issue.
> =====================================================
> Business-Critical Phone Support (BCPS) provides you with technical phone
> support at no charge during critical LAN outages or "business down"
> situations. This benefit is available 24 hours a day, 7 days a week to all
> Microsoft technology partners in the United States and Canada.
>
> This and other support options are available here:
> BCPS:
> https://partner.microsoft.com/US/technicalsupport/supportoverview/40010469
> Others: https://partner.microsoft.com/US/technicalsupport/supportoverview/
>
> If you are outside the United States, please visit our International
> Support page:
> http://support.microsoft.com/default.aspx?scid=%2finternational.aspx.
>
> =====================================================
> This posting is provided "AS IS" with no warranties, and confers no
rights.
>


.

Quantcast