none
Error while updating Group Policy

    Question

  • Hello All,

    I get the below error while updating the group policy on the user machin.

    C:\Users\905288>gpupdate /force
    Updating Policy...

    User Policy update has completed successfully.

    The following warnings were encountered during user policy processing:

    Windows failed to apply the Internet Explorer Zonemapping settings. Internet Exp
    lorer Zonemapping settings might have its own log file. Please click on the "Mor
    e information" link.
    Computer Policy update has completed successfully.

    For more detailed information, review the event log or run GPRESULT /H GPReport.
    html from the command line to access information about Group Policy results.

    Is there a way I can find which group policy is causing this issue?

    Tuesday, February 10, 2015 10:16 AM

Answers

  • Hi All,

    Thanks I found the Group policy that is causing the issue.

    Now I am not sure what is causing the problem in that policy. When I try with gpresult /H gpresult.html

    I see the below error:

    Internet Explorer Zonemapping Failed (no data) 2/10/2015 9:03:34 AM

    Internet Explorer Zonemapping failed due to the error listed below.

    The parameter is incorrect.

    Additional information may have been logged.  Review the Policy Events tab in the console or the application event log for events between 2/10/2015 9:03:34 AM and 2/10/2015 9:03:34 AM.

    Is there anything to isolate this issue.

    Regards,

    Suman Rout

    • Marked as answer by Suman Rout Thursday, October 1, 2015 11:50 AM
    Tuesday, February 10, 2015 1:51 PM
  • This contains the truested sites for the domain users.

    And this is applied at user configuration. 

    • Marked as answer by Suman Rout Thursday, October 1, 2015 11:51 AM
    Tuesday, February 10, 2015 3:01 PM

All replies

  • > Is there a way I can find which group policy is causing this issue?
     
    Yes :)
     
    dsquery * -filter
    "(&(objectclass=grouppolicycontainer)(gpcuserextensionnames=*4CFB60C1-FAA6-47f1-89AA-0B18730C9FD3*))"
    -attr displayname
     

    Martin

    Mal ein GUTES Buch über GPOs lesen?

    NO THEY ARE NOT EVIL, if you know what you are doing: Good or bad GPOs?
    And if IT bothers me - coke bottle design refreshment :))
    • Proposed as answer by Calin Liviu Tuesday, February 10, 2015 11:55 AM
    Tuesday, February 10, 2015 11:05 AM
  • Run "gpresult /h c:\gpresult.html" and post the result.

    Thanks,

    Umesh.S.K

    Tuesday, February 10, 2015 11:36 AM
  • Hi,

    I believe it works if you put ....)(cn=*4CFB60C1-FAA6-47f1-89AA-0B18730C9FD3*))" as well.

    Regards,

    Calin

    Tuesday, February 10, 2015 11:58 AM
  • > I believe it works if you put
    > ....)(cn=*4CFB60C1-FAA6-47f1-89AA-0B18730C9FD3*))" as well.
     
    No. This GUID is the CSE GUID for IE Zonemapping, and it is listed in
    the gPCUserExtensionNames attribute as soon as the GPO contains zone
    mappings. It has nothing to do with the CN of the GPO or with the (AD
    internal) objectGUID attribute :)
     

    Martin

    Mal ein GUTES Buch über GPOs lesen?

    NO THEY ARE NOT EVIL, if you know what you are doing: Good or bad GPOs?
    And if IT bothers me - coke bottle design refreshment :))
    Tuesday, February 10, 2015 12:37 PM
  • Hi,

    where should I run this command?

    dsquery * -filter

    "(&(objectclass=grouppolicycontainer)(gpcuserextensionnames=*4CFB60C1-FAA6-47f1-89AA-0B18730C9FD3*))"

    On user machin or server?

    And just to update its on all the machin in the domain.

    Regards,

    Suman Rout

    Tuesday, February 10, 2015 1:20 PM
  • Hi All,

    Thanks I found the Group policy that is causing the issue.

    Now I am not sure what is causing the problem in that policy. When I try with gpresult /H gpresult.html

    I see the below error:

    Internet Explorer Zonemapping Failed (no data) 2/10/2015 9:03:34 AM

    Internet Explorer Zonemapping failed due to the error listed below.

    The parameter is incorrect.

    Additional information may have been logged.  Review the Policy Events tab in the console or the application event log for events between 2/10/2015 9:03:34 AM and 2/10/2015 9:03:34 AM.

    Is there anything to isolate this issue.

    Regards,

    Suman Rout

    • Marked as answer by Suman Rout Thursday, October 1, 2015 11:50 AM
    Tuesday, February 10, 2015 1:51 PM
  • > Thanks I found the Group policy that is causing the issue.
     
    And what's the content of that GPO?
     

    Martin

    Mal ein GUTES Buch über GPOs lesen?

    NO THEY ARE NOT EVIL, if you know what you are doing: Good or bad GPOs?
    And if IT bothers me - coke bottle design refreshment :))
    Tuesday, February 10, 2015 2:39 PM
  • This contains the truested sites for the domain users.

    And this is applied at user configuration. 

    • Marked as answer by Suman Rout Thursday, October 1, 2015 11:51 AM
    Tuesday, February 10, 2015 3:01 PM
  • Can you remove and re-configure IE settings in your GPO?

    Thanks,

    Umesh.S.K

    Tuesday, February 10, 2015 3:30 PM
  • No removing and reconfiguring is not possible.

    Tuesday, February 10, 2015 3:47 PM
  • > This contains the truested sites for the domain users.
     
    Dude, we already know that it contains site to zone assignments - you
    identified this GPO shortly before :)
     
    What I'm asking for is "WHAT exact site names did you specify here"?
     

    Martin

    Mal ein GUTES Buch über GPOs lesen?

    NO THEY ARE NOT EVIL, if you know what you are doing: Good or bad GPOs?
    And if IT bothers me - coke bottle design refreshment :))
    Tuesday, February 10, 2015 4:59 PM
  • There was about 116 sites added to it. some of them belongs to domain itself and some outside links.

    Do you want me to give you those site details as well?

    Regards,

    Suman Rout

    Wednesday, February 11, 2015 7:40 AM
  • > Do you want me to give you those site details as well?
     
    Hm - not really, I have no error with zone assignments. It's you with
    the error :)
     
    Verify your site entries against http://support.microsoft.com/kb/184456
    - most probably, some of them do not adhere to the allowed wildcard rules.
     

    Martin

    Mal ein GUTES Buch über GPOs lesen?

    NO THEY ARE NOT EVIL, if you know what you are doing: Good or bad GPOs?
    And if IT bothers me - coke bottle design refreshment :))
    Wednesday, February 11, 2015 12:37 PM