Solved

Server 2008 GPO Help

Posted on 2010-11-26
7
1,131 Views
Last Modified: 2012-05-10
I had help from some members here to setup GPO to user accounts on Server 2008 back in February of this year. We setup a restriction so one account no matter what PC it logged into could only run certain exe files. In my GPO Management console when I edit the GPO assigned to that login I cannot find where we did this and in software restrictions it says nothing has been defined. I know its enforced since its been used and the PC's tell me its enforced. Where do I look to add a few exe files ?
0
Comment
Question by:sraley
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 5
7 Comments
 
LVL 23

Expert Comment

by:Stelian Stan
ID: 34219489
To find out the settings run Group Policy Management tool > Select the GPO you assigned and on the right side click on "Settings". It should show you all the settings for that GPO.
0
 
LVL 5

Expert Comment

by:Seth_McCauley
ID: 34219544
Perhaps this restriction was added to a different policy. You could try running the Group Policy Modeling wizard to find out which policy the software restriction was added to. From the GP management console, right-click on the OU your test user resides in, then select "Group Policy Modeling". You can pretty much hit "next" all the way through the wizard. Once it's finished, click the "Settings" tab and you should see all the settings that apply to that user, plus the policy they were applied in. You might also need to do this for the OU the computer resides in.
0
 

Author Comment

by:sraley
ID: 34220197
yes I used GPMC and clicked settings and get

Security Settingshide
An error has occurred while collecting data for Software Restriction Policies.

This error impacts the following settings:
Software Restriction Policies
Software Restriction Policies/Security Levels
Software Restriction Policies/Additional Rules  
The following errors apply to all of the above settings:
An unknown error occurred while data was gathered for this extension. Details: Unable to cast object of type 'System.String[]' to type 'Microsoft.GroupPolicy.Reporting.Extensions.Registry.UnknownType'.
0
Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

 

Author Comment

by:sraley
ID: 34220201
running the model wizard, the results say because of security filtering my 3 GPO's are all showing up in the denied applied GPO's.
0
 

Author Comment

by:sraley
ID: 34222793
the wizard still gives me the security filtering errors but I found the hotfix that I can see the settings tab correctly so I know that the GPO is in effect that all exe files are blocked but I can not find the location of where I have a list of what is allowed, like msword.exe and excel.exe. Where do i get to this list?
0
 

Accepted Solution

by:
sraley earned 0 total points
ID: 34222808
nevermind foudn the list under user->administrative templates-> system
0
 

Author Closing Comment

by:sraley
ID: 34255740
Figured it out.
0

Featured Post

Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

I was supporting a handful of Windows 2008 (non-R2) 2 node clusters with shared quorum disks. Some had SQL 2008 installed and some were just a vendor application that we supported. For the purposes of this article it doesn’t really matter which so w…
OfficeMate Freezes on login or does not load after login credentials are input.
This tutorial will walk an individual through locating and launching the BEUtility application and how to execute it on the appropriate database. Log onto the server running the Backup Exec database. In a larger environment, this would generally be …
This tutorial will walk an individual through configuring a drive on a Windows Server 2008 to perform shadow copies in order to quickly recover deleted files and folders. Click on Start and then select Computer to view the available drives on the se…

740 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question