asked on

GPPs not applying to XP SP3 due to slow link detection

I am having an issue with GPO and slow link. I am trying to apply some GPP’s to XP SP3 but they are not applying even after running gpupdate /force. If I do a gpresult, I get “INFO: The policy object does not exist.” When I run RSOP.msc, I get “RSoP data is invalid” with details of “Invalid namespace”. I have set the gpo to change the slow link detection to “0” for both computer side and client side in the administrative templates but it is still not applying. I’m thinking it is not applying because of the fact that the settings to update the slow link detection to 0 aren’t being passed down because of the slow link. If I add the GroupPolicyMinTransferRate change in the registry, then I can go back and run gpupdate /force and everything will work fine but only for that 1 user. The problem is I need a way to accomplish this without having to log onto for each user and make the change to HKEY_Current_User. Can someone help me with any way to get the GPP to apply or disable Slow Link Detection for each user that logs in?

gurutc

Yes it's a Catch 22, but you can manually fix it at the remote end with a registry edit:

Per Microsoft's Link explaining this exact problem at http://technet.microsoft.com/en-us/library/cc759191%28v=ws.10%29.aspx

If you are trying to disable slow link detection when Group Policy is not applying (and therefore, you cannot configure the policy setting), you can manually create the registry value "GroupPolicyMinTransferRate" (DWORD) under the following keys and set each of them to 0.

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon

HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon

This should get you going!
We had the same issue and this fix really fixed the problem.

Good Luck,
- gurutc

gurutc

My bad, the above was for Server 2003, the following is for XP Machines

Per MS KB910206 - Troubleshooting GPO Replication: http://support.microsoft.com/kb/910206

To disable slow link detection on the Windows XP client computer, set the following registry values:

Registry subkey: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System
Value name: GroupPolicyMinTransferRate
Value type: DWORD
Value Data: 0

Registry subkey: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\System
Value name: GroupPolicyMinTransferRate
Value type: DWORD
Value Data: 0

doveop1018

ASKER

First, thank you for your time.

I've made those edits in the registry and it does work. However, if new user logs in, it appears that I have to repeat the process at least under HKEY_CURRENT_USER. I would think that if I could make the registry edits, then gpupdate /force, the policy settings would take effect (for all users) but that is not happening or I'm missing something.

gurutc

Change it under all the defined USER Keys in the Registry. One of those is default user which is copied whenever a new user logs in.

- gurutc

gurutc

Yes, it's HKEY_USERS and DEFAULT under that.

- gurutc

doveop1018

ASKER

I deleted the profile of the user and added the GroupPolicyMinTransferRate dword=0 to HKEY_USERS\Default\Software\Policies\Windows\System. I then logged back in as the user, ran gpupdate /force with no changes and nothing when I run gpresult. I then tried a user that has never touched that computer and same result.

gurutc

Hmmm that. could export the registry keys that are changed and run them in a regedit /merge login script.

- gurutc

doveop1018

ASKER

I will have to look into this. I am new to scripting so not sure the best way to go about it.

gurutc

Thinking on this end also.

- gurutc

gurutc

I'd also change the setting on all defined users under HKEY_USERS

doveop1018

ASKER

But if a new users comes along, I would have to make the change yet again. Anyone familliar with C:\Documents and Settings\Default User\ntuser.dat? If I understand, HKEY_USERS\.Default is not going to copy over but if you load the hive for C:\Documents and Settings\Default User\ntuser.dat, it will act as a template. Can anyone confirm this?

gurutc

I believe this is true, just back things up before giving it a shot.

- gurutc

Sandesh Dubey

If the registry change has worked you can create GPO apply the same for registry change.http://www.unidesk.com/blog/gpos-set-custom-registry-entries-virtual-desktops-disabling-machine-password

doveop1018

ASKER

The problem that I think I'll run into with that, is the GPP won't apply for the new users because of the initial slow link detection. If I could just set it on the machine side, that would be great but so far I've found that I have to change it under HKEY_CURRENT_USER for each person that logs in.

ASKER CERTIFIED SOLUTION

gurutc

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

doveop1018

ASKER

It appears that I'm going to have to do something along those lines. I'll still have to touch each machine but that will make it quick. We ware planning our move away from XP anyways so hopefully it won't go on too long.

gurutc

Yes, it's Curse You Windows XP!

Thanks,
-gurutc