Forum Search:
Forum.Brain-Cluster.com: Brain Cluster Technical Forum
Ultimate forum for Technical Discussions

Home » Microsoft » Windows Server » Windows Server General Help » GPO in mixed enviroment
GPO in mixed enviroment [message #164183] Wed, 17 June 2009 09:01 Go to next message
Tom  is currently offline Tom  United States
Messages: 210
Registered: July 2009
Senior Member
Hi all,

All DC are windows 2003.

I have GPO the runs bat file to install Office 2007 on computer startup. The
GPO runs great on XP machines.

For some reason it does not run on Vista.

Is there a way to fix this?

Thank you,

Tom
Re: GPO in mixed enviroment [message #164184 is a reply to message #164183] Wed, 17 June 2009 09:30 Go to previous messageGo to next message
meiweb(nospam)  is currently offline meiweb(nospam)  Germany
Messages: 1307
Registered: July 2009
Senior Member
Hello tom,

The exact error message will be helpful. Are the Vista machines in the same
OU where the GPO is linked to?

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Hi all,
>
> All DC are windows 2003.
>
> I have GPO the runs bat file to install Office 2007 on computer
> startup. The GPO runs great on XP machines.
>
> For some reason it does not run on Vista.
>
> Is there a way to fix this?
>
> Thank you,
>
> Tom
>
Re: GPO in mixed enviroment [message #164189 is a reply to message #164184] Wed, 17 June 2009 09:44 Go to previous messageGo to next message
Tom  is currently offline Tom  United States
Messages: 210
Registered: July 2009
Senior Member
Thank you for the quick response.
There is no error, it seems that the Vista machine just ignores the GPO.
I placed the Vista machine in the designated OU for the installation.

Thanks,

Tom
"Meinolf Weber [MVP-DS]" <meiweb(nospam)@gmx.de> wrote in message
news:ff16fb6627cc58cbbd77ac02e404@msnews.microsoft.com...
> Hello tom,
>
> The exact error message will be helpful. Are the Vista machines in the
> same OU where the GPO is linked to?
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and
> confers no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>> Hi all,
>>
>> All DC are windows 2003.
>>
>> I have GPO the runs bat file to install Office 2007 on computer
>> startup. The GPO runs great on XP machines.
>>
>> For some reason it does not run on Vista.
>>
>> Is there a way to fix this?
>>
>> Thank you,
>>
>> Tom
>>
>
>
Re: GPO in mixed enviroment [message #164190 is a reply to message #164189] Wed, 17 June 2009 09:51 Go to previous messageGo to next message
meiweb(nospam)  is currently offline meiweb(nospam)  Germany
Messages: 1307
Registered: July 2009
Senior Member
Hello tom,

Check with rsop or gpresult /v on the Vista machine to see if the policy
is applied.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Thank you for the quick response.
> There is no error, it seems that the Vista machine just ignores the
> GPO.
> I placed the Vista machine in the designated OU for the installation.
> Thanks,
>
> Tom
> "Meinolf Weber [MVP-DS]" <meiweb(nospam)@gmx.de> wrote in message
> news:ff16fb6627cc58cbbd77ac02e404@msnews.microsoft.com...
>> Hello tom,
>>
>> The exact error message will be helpful. Are the Vista machines in
>> the same OU where the GPO is linked to?
>>
>> Best regards
>>
>> Meinolf Weber
>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>> confers no rights.
>> ** Please do NOT email, only reply to Newsgroups
>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>> Hi all,
>>>
>>> All DC are windows 2003.
>>>
>>> I have GPO the runs bat file to install Office 2007 on computer
>>> startup. The GPO runs great on XP machines.
>>>
>>> For some reason it does not run on Vista.
>>>
>>> Is there a way to fix this?
>>>
>>> Thank you,
>>>
>>> Tom
>>>
Re: GPO in mixed enviroment [message #164191 is a reply to message #164190] Wed, 17 June 2009 10:31 Go to previous messageGo to next message
Tom  is currently offline Tom  United States
Messages: 210
Registered: July 2009
Senior Member
No, it was not applied. Actually, it was not mentioned in gpresults.

Thanks,

Tom
"Meinolf Weber [MVP-DS]" <meiweb(nospam)@gmx.de> wrote in message
news:ff16fb6627cde8cbbd7a94ae4444@msnews.microsoft.com...
> Hello tom,
>
> Check with rsop or gpresult /v on the Vista machine to see if the policy
> is applied.
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and
> confers no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>> Thank you for the quick response.
>> There is no error, it seems that the Vista machine just ignores the
>> GPO.
>> I placed the Vista machine in the designated OU for the installation.
>> Thanks,
>>
>> Tom
>> "Meinolf Weber [MVP-DS]" <meiweb(nospam)@gmx.de> wrote in message
>> news:ff16fb6627cc58cbbd77ac02e404@msnews.microsoft.com...
>>> Hello tom,
>>>
>>> The exact error message will be helpful. Are the Vista machines in
>>> the same OU where the GPO is linked to?
>>>
>>> Best regards
>>>
>>> Meinolf Weber
>>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>>> confers no rights.
>>> ** Please do NOT email, only reply to Newsgroups
>>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>>> Hi all,
>>>>
>>>> All DC are windows 2003.
>>>>
>>>> I have GPO the runs bat file to install Office 2007 on computer
>>>> startup. The GPO runs great on XP machines.
>>>>
>>>> For some reason it does not run on Vista.
>>>>
>>>> Is there a way to fix this?
>>>>
>>>> Thank you,
>>>>
>>>> Tom
>>>>
>
>
Re: GPO in mixed enviroment [message #164193 is a reply to message #164191] Wed, 17 June 2009 10:53 Go to previous messageGo to next message
aceman  is currently offline aceman  United States
Messages: 5816
Registered: July 2009
Senior Member
"Tom" <partner1973@yahoo.com> wrote in message
news:u$Cc$g17JHA.3592@TK2MSFTNGP02.phx.gbl...
> No, it was not applied. Actually, it was not mentioned in gpresults.
>
> Thanks,

Did you run an RSOP?

Also, how did you create the GPO? Did you create it on a Vista or 2008 box?
It will need to be becaues of the differences in GPOs. I supplied a link
concerning that.

Ace
Re: GPO in mixed enviroment [message #164194 is a reply to message #164189] Wed, 17 June 2009 10:31 Go to previous messageGo to next message
aceman  is currently offline aceman  United States
Messages: 5816
Registered: July 2009
Senior Member
"Tom" <partner1973@yahoo.com> wrote in message
news:%23i5FFH17JHA.3804@TK2MSFTNGP02.phx.gbl...
> Thank you for the quick response.
> There is no error, it seems that the Vista machine just ignores the GPO.
> I placed the Vista machine in the designated OU for the installation.
>
> Thanks,
>
> Tom

It's the UAC causing it to not run. Running a bat file on a Vista machine
may need to have it run with elevated privledges. You would have to use the
runas command in the batch, but the problem with that is it exposes the
credentials. Maybe an MSI file would be better off?

See if this helps:

Use a VBScript to launch the .BAT file elevated. Example:
http://www.winhelponline.com/articles/185/1/VBScripts-and-UA C-elevation.html

Deploying Group Policy Using Windows Vista (search for 'elevated')
http://technet.microsoft.com/en-us/library/cc766208(WS.10).aspx

Deploying Group Policy Using Windows Vista: (Look for the Launchapp.wsf code
to launch .BAT files as logon script.)
http://technet2.microsoft.com/WindowsVista/en/library/5ae8da 2a-878e-48db-a3c1-4be6ac7cf7631033.mspx

More info
http://www.experts-exchange.com/OS/Microsoft_Operating_Syste ms/Windows/Q_23462188.html

--
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSA Messaging, MCT
Microsoft Certified Trainer
aceman@mvps.RemoveThisPart.org

For urgent issues, you may want to contact Microsoft PSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

"Efficiency is doing things right; effectiveness is doing the right
things." - Peter F. Drucker
http://twitter.com/acefekay
Re: GPO in mixed enviroment [message #164200 is a reply to message #164194] Wed, 17 June 2009 14:15 Go to previous messageGo to next message
Tom  is currently offline Tom  United States
Messages: 210
Registered: July 2009
Senior Member
Thank you,
I created the GPO on server 2003.
Is the UAC relevant when the the GPO was designed to run before user login?
Is there a way to disable it?

Thanks,

Tom

"Ace Fekay [Microsoft Certified Trainer]" <aceman@mvps.RemoveThisPart.org>
wrote in message news:udlUWh17JHA.1564@TK2MSFTNGP06.phx.gbl...
> "Tom" <partner1973@yahoo.com> wrote in message
> news:%23i5FFH17JHA.3804@TK2MSFTNGP02.phx.gbl...
>> Thank you for the quick response.
>> There is no error, it seems that the Vista machine just ignores the GPO.
>> I placed the Vista machine in the designated OU for the installation.
>>
>> Thanks,
>>
>> Tom
>
> It's the UAC causing it to not run. Running a bat file on a Vista machine
> may need to have it run with elevated privledges. You would have to use
> the runas command in the batch, but the problem with that is it exposes
> the credentials. Maybe an MSI file would be better off?
>
> See if this helps:
>
> Use a VBScript to launch the .BAT file elevated. Example:
> http://www.winhelponline.com/articles/185/1/VBScripts-and-UA C-elevation.html
>
> Deploying Group Policy Using Windows Vista (search for 'elevated')
> http://technet.microsoft.com/en-us/library/cc766208(WS.10).aspx
>
> Deploying Group Policy Using Windows Vista: (Look for the Launchapp.wsf
> code to launch .BAT files as logon script.)
> http://technet2.microsoft.com/WindowsVista/en/library/5ae8da 2a-878e-48db-a3c1-4be6ac7cf7631033.mspx
>
> More info
> http://www.experts-exchange.com/OS/Microsoft_Operating_Syste ms/Windows/Q_23462188.html
>
> --
> Ace
>
> This posting is provided "AS-IS" with no warranties or guarantees and
> confers no rights.
>
> Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSA Messaging, MCT
> Microsoft Certified Trainer
> aceman@mvps.RemoveThisPart.org
>
> For urgent issues, you may want to contact Microsoft PSS directly. Please
> check http://support.microsoft.com for regional support phone numbers.
>
> "Efficiency is doing things right; effectiveness is doing the right
> things." - Peter F. Drucker
> http://twitter.com/acefekay
>
>
>
>
>
>
>
Re: GPO in mixed enviroment [message #164210 is a reply to message #164200] Wed, 17 June 2009 20:22 Go to previous messageGo to next message
aceman  is currently offline aceman  United States
Messages: 5816
Registered: July 2009
Senior Member
"Tom" <partner1973@yahoo.com> wrote in message
news:unTwNe37JHA.1196@TK2MSFTNGP03.phx.gbl...
> Thank you,
> I created the GPO on server 2003.
> Is the UAC relevant when the the GPO was designed to run before user
> login?
> Is there a way to disable it?

Tom,

For Vista, you would need to create the GPO from a 2008 machine, or a Vista
workstation with the GPMC installed. Windows 2003 doesn't have the
additional features for the newer operating systems, as the link I've posted
indicated.

As for the UAC, yes it is relevant because as you've read in the links I've
provided, it's Vista's security feature stopping the run. That was why I
suggested using credentials with the runas, or an MSI file.

If you want to disable the UAC, and decide to do it with a GPO, that would
NEED to be created using 2008 or Vista, as well. But honestly, IMHO, I
wouldn't disable it. It's a security feature. I would design my software
rollout accordingly instead of compromising security.

Disable User Account Control in Windows VistaHow can I disable the User
Account Control (UAC) feature on my Windows ... Anyway, if required, you can
disable UAC by using one of the following methods: ...
www.petri.co.il/disable_uac_in_windows_vista.htm

Ace
Re: GPO in mixed enviroment [message #164242 is a reply to message #164210] Thu, 18 June 2009 08:51 Go to previous messageGo to next message
Tom  is currently offline Tom  United States
Messages: 210
Registered: July 2009
Senior Member
Ace,

Thank you for your patience.

I craeted a lab enviroment with server 2008.
I recreated the GPO in the new server and added one vista machine and on xp
machine to that domain.
Still the GPO would be ignored by the vista machine and it will run on the
xp.

Thanks,

Tom

"Ace Fekay [Microsoft Certified Trainer]" <aceman@mvps.RemoveThisPart.org>
wrote in message news:eJmYQr67JHA.2388@TK2MSFTNGP06.phx.gbl...
> "Tom" <partner1973@yahoo.com> wrote in message
> news:unTwNe37JHA.1196@TK2MSFTNGP03.phx.gbl...
>> Thank you,
>> I created the GPO on server 2003.
>> Is the UAC relevant when the the GPO was designed to run before user
>> login?
>> Is there a way to disable it?
>
> Tom,
>
> For Vista, you would need to create the GPO from a 2008 machine, or a
> Vista workstation with the GPMC installed. Windows 2003 doesn't have the
> additional features for the newer operating systems, as the link I've
> posted indicated.
>
> As for the UAC, yes it is relevant because as you've read in the links
> I've provided, it's Vista's security feature stopping the run. That was
> why I suggested using credentials with the runas, or an MSI file.
>
> If you want to disable the UAC, and decide to do it with a GPO, that would
> NEED to be created using 2008 or Vista, as well. But honestly, IMHO, I
> wouldn't disable it. It's a security feature. I would design my software
> rollout accordingly instead of compromising security.
>
> Disable User Account Control in Windows VistaHow can I disable the User
> Account Control (UAC) feature on my Windows ... Anyway, if required, you
> can disable UAC by using one of the following methods: ...
> www.petri.co.il/disable_uac_in_windows_vista.htm
>
> Ace
>
>
Re: GPO in mixed enviroment [message #164272 is a reply to message #164242] Thu, 18 June 2009 22:47 Go to previous message
aceman  is currently offline aceman  United States
Messages: 5816
Registered: July 2009
Senior Member
"Tom" <partner1973@yahoo.com> wrote in message
news:ex$VROB8JHA.4632@TK2MSFTNGP02.phx.gbl...
> Ace,
>
> Thank you for your patience.
>
> I craeted a lab enviroment with server 2008.
> I recreated the GPO in the new server and added one vista machine and on
> xp machine to that domain.
> Still the GPO would be ignored by the vista machine and it will run on the
> xp.
>
> Thanks,
>
> Tom

Hi Tom,

You are still testing it with a bat file? Did you supply runas credentials
in the bat? The UAC is probably preventing it. Or did you create an MSI file
for it?

Ace
Previous Topic:Overcoming the 256 Character limit for DIR\FILE names
Next Topic:licence 32 bits and licences 64 bits
Goto Forum:
  


Current Time: Tue Aug 22 14:50:36 EDT 2017

Total time taken to generate the page: 0.03951 seconds
.:: Contact :: Home ::Sitemap::.

Powered by: FUDforum 3.0.0RC2.
Copyright ©2001-2009 FUDforum Bulletin Board Software