Problems Upgrading to Windows 2000 Using Group Policies
Microsoft Knowledge Base Article: 255106 - After an administrator publishes the Winnt32.msi file using group policies, you may receive the following error message when you use the Add/Remove Programs tool to upgrade your computer to Windows 2000:
Troubleshooting Group Policy Application Problems
Microsoft Knowledge Base Article: 250842 - This article describes troubleshooting procedures for Group Policy processing on a Windows 2000 client computer. This might include incorrect or incomplete policy settings or the lack of policy application to the computer or
user.
Troubleshooting Program Deployment By Using Verbose Logging
Microsoft Knowledge Base Article: 246509 - When a program that is deployed through Group Policy is not installed correctly on a client computer, a log file can be generated that records the steps of the Group Policy Application Deployment component leading up to the unsuccessful
installation. This information, in conjunction with logging from the Windows Installer service, can be very helpful in determining the cause of the problem.
A Security Policy Does Not Process Restricted Groups Correctly
Microsoft Knowledge Base Article: 320099 - If you configure a restricted group by using Group Policy, the membership list is incomplete when the group is processed by the client. This problem is indicated by events from the SceCle and Userenv sources in the Application event log.
Administrator May Be Unable to Edit Group Policy in Windows 2000 Domain
Microsoft Knowledge Base Article: 263166 - If you are an administrator, you may be unable to modify Group Policy in a Windows 2000 domain. In addition, if you attempt to start any tool located in Administrative Tools (including Group Policy Editor or saved custom consoles for Microsoft
Cannot Select Local Groups in Snap-in on Member Computer
Microsoft Knowledge Base Article: 267582 - When you are using the Security Group Policy editor to configure a restricted group from a computer that is a member of a domain (rather than a domain controller), you cannot select domain local groups.
Disabled Programs Are Displayed in the Software Installation Section of Group Policy Object
Microsoft Knowledge Base Article: 274269 - When you open a Group Policy object (GPO) and examine its Software Installation values, some entries that are displayed in the result pane may be disabled (a red-colored icon is
displayed).
Error 1711: "An error occurred while writing installation information to disk"
Microsoft Knowledge Base Article: 275869 - If you deploy a program through Group Policy in Windows 2000 without having sufficient free disk space on the domain controller's partition (which holds the Sysvol folder), the Application Deployment Editor may stop responding (hang).
Error Messages After Importing Basicdc.inf into Group Policy
Microsoft Knowledge Base Article: 256000 - After you import the Basicdc.inf file into the Default Domain Controllers Group Policy object (GPO), the following error messages may be generated.
Error Message When Opening or Editing a Domain Group Policy Object
Microsoft Knowledge Base Article: 257435 -
When you attempt to open or edit a domain Group Policy Object (GPO) on a computer running Windows 2000 Server, you may receive the following error
message: (updated 11/29/2000)
GPO Changes Can Be Written to Different Domain Controllers If the User Is Not a Local Administrator
Microsoft Knowledge Base Article: 243430 - If a user creates a new Group Policy Object (GPO - and then immediately tries to open the GPO to edit it, the follow error message may
occur:
Group Policy Does Not Disable All Windows Update Components
Microsoft Knowledge Base Article: 279006 - If the Group Policy setting that disables Windows Update functionality is enabled, the Windows Update link is removed from
the Start menu, but Device Manager and Printer wizards still
provide access to the Microsoft Windows Update Web site.
Group Policy Hides Both Add/Remove Programs and Folder Options Tools for Roaming Profiles
Microsoft Knowledge Base Article: 296962 - After the Folder Options tool in Control Panel is hidden by using Group Policy, the Add/Remove Programs tool also disappears from Control Panel for users with roaming profiles, even though it is not restricted by a policy.
Group Policy May Not Be Applied to Users Belonging to Many Groups
Microsoft Knowledge Base Article: 263693 - If a user is a member of many groups (the number of groups varies, but is around 70 to 80 groups) either directly or by membership in other groups, the Group Policy object (GPO) may not be applied to the user.
Group Policy Not Applied with Many Domain Controllers in Domain
Microsoft Knowledge Base Article: 276516 - When you run Windows 2000 Professional as a member of a Windows 2000-based domain with many domain controllers, the application of Group Policy may not work. The most notable error is event 1001 by SceCli in the Application event
log: (updated 4/24/2001)
Group Policy for Slow Network Detection May Not Work as Expected in a LAN Environment
Microsoft Knowledge Base Article: 262324 - If the policy for a slow network connection for user profiles is enabled and the connection speed is set to 4,294,967,196 Kbps (maximum), the connection may not be treated as a slow connection in a LAN environment.
Group Policy Snap-ins Display Many Different Languages
Microsoft Knowledge Base Article: 280113 - If you use a multilanguage version of Microsoft Windows 2000 and open a Group Policy snap-in to administer a domain with a different localized version than the one that you are using, you may see multiple languages displayed in the
snap-in.
Inconsistent Group Membership State after a Restricted Group Policy Is Enabled
Microsoft Knowledge Base Article: 306100 - After you establish a Group Policy object (GPO) that defines restricted groups, and then apply the group policy, the resulting group membership on the destination computer may be
incomplete.
Incorrect "Prevent Access to Drives from My Computer" Informational Message
Microsoft Knowledge Base Article: 315191 - There is a documentation error in the Windows 2000 Professional and Windows XP Professional "Prevent access to drives from My Computer" group policy informational message. The informational message for this group policy incorrectly
states:
Media Folder Favorites Are Installed When Made Unavailable in Group Policy
Microsoft Knowledge Base Article: 272351 - When you add the Wmp.adm file to Administrative Templates in a Group Policy, and you choose the Do not install the default Windows Media Player Favorites in Media folder policy, the policy does not take effect
Memory Leak When You Search for Group Policy Object Links
Microsoft Knowledge Base Article: 310605 - When you use the Microsoft Management Console (MMC) to search for Group Policy object (GPO) links, memory may be leaked. You can find this memory leak in the Active Directory User and Computers snap-in if you click
Properties for any GPO, and then click Find Now on the
Links tab to search for links. The memory is released when
you quit MMC.
Mobile Synchronization Runs Continuously for Non-Administrator
Microsoft Knowledge Base Article: 273838 - If a group policy is used to assign a desktop item (by URL), Mobsync.exe runs repeatedly when a non-administrative user logs on, endlessly synchronizing the Web page for offline use. If an administrator logs on, Mobsync.exe runs only once.
Organizational Unit Controller Cannot Edit Group Policy Objects
Microsoft Knowledge Base Article: 233548 - After you assign complete control of an Organizational Unit (OU) to a user or group using the Active Directory Users And Computers snap-in for Microsoft Management Console (MMC), that user or group may not be able to edit or create Group
Policies (updated 9/25/2000)
Packages Assigned to Computers with Group Policy Are Not Installed
Microsoft Knowledge Base Article: 278472 - You can use Windows 2000 Group Policy objects (GPOs) to assign .msi packages to a group of Windows 2000 Professional-based workstations based on their membership in an organizational unit.
When a workstation is rebooted and the computer policies are applied, the assigned programs may not be installed and
the following error messages may be logged in the Application event log on the Windows 2000 Professional-based workstation:
Policy Changing System Service Permissions Does Not Apply
Microsoft Knowledge Base Article: 257247 - When you implement service security settings in Group Policy, the Everyone group is granted Full Control by default. You may not want this setting for security purposes, however, when you use computer-based Group
Policy to change permission, the policy may not be applied and there is no way to change permissions on the service
Policy Restrictions on Drives Cause Unnecessary Error Message at Logon and in File Dialog Box
Microsoft Knowledge Base Article: 270037 - When the "Prevent access to drives from My Computer" policy is applied, you receive the following error message during the logon
process: This operation has been cancelled due
to restrictions in effect on this computer. Please contact your system administrator. Also, when this policy is applied, you
see the same error message twice if you click a drive in My Computer.
Race Condition May Lead to Loss of Group Policy Changes
Microsoft Knowledge Base Article: 272560 - If you are deploying a program on a large number of domain controllers, and that program changes the default domain controller group policy for each computer on which that program is installed by using Microsoft Windows NT 4.0-style
local security authority (LSA) application programming interface
(API), when you later try to start the service on all of the
computers, the account may not have the required privilege, and
therefore the service may not start or may experience errors while
the service is running.
"Run Only Allowed Applications" List in Organizational Unit GPO Becomes Corrupted
Microsoft Knowledge Base Article: 263179 - If you add long file names in the "Run Only Allowed Applications" list in an organizational unit group policy, the list becomes corrupted after the total number of characters exceeds
1,024.
Screen Saver Assigned from Group Policy on Windows 2000 Does Not Work
Microsoft Knowledge Base Article: 305357 - At your first logon to a Windows 2000 Professional-based computer to which a Windows 2000 Server-based computer has assigned a specific screen saver, the assigned screen saver may not work. The screen saver was assigned as part of a group policy
for clients.
Security Policy May Become Corrupted
Microsoft Knowledge Base Article: 290649 - A security group policy template may become empty or
corrupted.
Security Section of Group Policy Does Not Work if Domain Name Contains
"inf"
Microsoft Knowledge Base Article: 292315 - If you have a domain that contains the string "inf" in the fully qualified domain name, such as info.gov, the security settings section of the Group Policy Object (GPO) may not work correctly. In addition, you may not be able to open the
GPO "Security" section by using the MMC after you create a group policy.
Some Local Computer Policy Administrative Templates Do Not Work Properly
Microsoft Knowledge Base Article: 254331 - After an administrator uses the Group Policy snap-in to configure a local computer policy and enable various user policies (such as allowing users to make network configuration changes) under the "Network and Dial-up Connections"
administrative templates, the policy may not work.
A Security Policy Does Not Process Restricted Groups Correctly
Microsoft Knowledge Base Article: 320099 - If you configure a restricted group by using Group Policy, the membership list is incomplete when the group is processed by the client. This problem is indicated by events from the SceCle and Userenv sources in the Application event log.
The Windows 2000 Group Policy to Disable Services Does Not Take Effect
Microsoft Knowledge Base Article: 295687 - In Windows 2000, the Group Policy to disable "Services" does not take
effect.
Unexpected Results Occur If You Set File Security by Using Either Group Policy or Security Templates
Microsoft Knowledge Base Article: 321470 - If you try to set file system permissions by using either Group Policy or security templates on files and folders that have Microsoft Windows NT 4.0-style Access Control Lists (ACLs), you may experience unexpected results.
User Must Be the Local (Domain) Administrator to Deploy
.msi Package in GPO
Microsoft Knowledge Base Article: 262638 - When you give a user permission to edit a Group Policy object (GPO), they cannot deploy an .msi package to that GPO.
Web Folders Unavailable When You Use the "Disable Programs on Settings Menu" Policy
Microsoft Knowledge Base Article: 267938 - When you are using the "Disable Programs on Settings menu" policy in Group Policy Objects (GPO) to prevent clients from viewing the
|
