none
Some Policy Settings Not Applying

    Question

  • Hello,
    We have an issue with Group Policy (2008 R2 Enterprise, Windows 8.1 & Windows 10)

    Scenario:
    -Helpdesk images the computer, no issues present.
    -User logs in (first login), notices the IE home page and laptop power settings, are not being applied. (there may be other settings not being applied, this is what we've identified)

    The bulk of the policy settings are applied, however some minor settings like the IE Homepage & power settings do not apply until:
    - User Log Off/On
    - User Restart
    - Manual gpupdate /force
    - Login and Wait 90 minutes

    If I login and check the registry, the key is defaulted to microsoft.com, until the log off/on or restart or gpupdate in which case it does update to the companies homepage url and power settings are populated.

    Background Info:
    We want the user to be able to modify the homepage, so we are using a registry key deployment via GPO
    User Config - Preferences - Window Settings - Registry

    When running gpresult - it shows no errors with User or Computer policy.

    Computer Configuration\Administrative Templates\System\Logon\Always wait for the network at computer startup and logon (We have this enabled already)

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GpNetworkStartTimeoutPolicyValue
    - No difference using this method, delaying it 60 seconds.  Checking the registry, the file does not exist until 
    doing a gpupdate /force, reboot, log off/on or waiting 90 minutes.  
    Ref: https://support.microsoft.com/en-us/kb/2421599

    Delegation Tab of User includes: 
    Authenticated Users - Read (from security filtering)
    Domain Admins- Edit settings, delete, modify security
    Enterprise Admins - Edit settings, delete, modify security
    Enterprise Domain Controllers - Read
    System - Edit settings, delete, modify security

    Please Help
    • Edited by Daniel9311 Monday, August 22, 2016 7:48 PM
    Monday, August 22, 2016 2:17 PM

Answers

  • Hi,
     
    Am 22.08.2016 um 16:17 schrieb Daniel9311:
    > -User logs in (first login), notices the IE home page and laptop power
    > settings, are not being applied.
     
    GP process runs first, your GPP PReferences IE homepage, because it´s a
    preference, it can be changed. Secound, the IE firstrun runs ... and
    sets the Homepage to "microsoft.com".
     
    After secound login, GPP sets homepage value again and it stays.
     
    Your problem is the IE FirstRun. You can only solve it by "deal with it"
    or deploy IE with the IEAK and a customized install.ins
     
    You can deploy a custom install.ins to %programfiles%\Internet
    Explorer\SIGNUP / %programfiles (x86)%\Internet Explorer\SIGNUP aswell.
     
    Powersettings need a Reboot to apply.
     
    Both problems can be solved by moving the configuration to your OS
    deployment aswell.
     
    Mark
    --
    Mark Heitbrink - MVP Group Policy - Cloud and Datacenter Management
     
    Homepage:  http://www.gruppenrichtlinien.de - deutsch
     
    Monday, August 22, 2016 7:22 PM

All replies

  • Hi,
     
    Am 22.08.2016 um 16:17 schrieb Daniel9311:
    > -User logs in (first login), notices the IE home page and laptop power
    > settings, are not being applied.
     
    GP process runs first, your GPP PReferences IE homepage, because it´s a
    preference, it can be changed. Secound, the IE firstrun runs ... and
    sets the Homepage to "microsoft.com".
     
    After secound login, GPP sets homepage value again and it stays.
     
    Your problem is the IE FirstRun. You can only solve it by "deal with it"
    or deploy IE with the IEAK and a customized install.ins
     
    You can deploy a custom install.ins to %programfiles%\Internet
    Explorer\SIGNUP / %programfiles (x86)%\Internet Explorer\SIGNUP aswell.
     
    Powersettings need a Reboot to apply.
     
    Both problems can be solved by moving the configuration to your OS
    deployment aswell.
     
    Mark
    --
    Mark Heitbrink - MVP Group Policy - Cloud and Datacenter Management
     
    Homepage:  http://www.gruppenrichtlinien.de - deutsch
     
    Monday, August 22, 2016 7:22 PM
  • Makes sense.

    I used IEAK to create a customization package, attached it to the SCCM OSD T/S.

    Working beautifully now.

    Thank you Mark

    Tuesday, August 23, 2016 3:06 PM