none
what is gPCUserExtensionName?

    Question

  • hello,

    a while back I we overwrote the ie admx files with ie 11 admx. however, there still seems to be some IEM residue left over which has resulted in some funny behaviour. I can see 'apply internet zone branding' when logging onto our servers even though we don't have any policies which use IEM applied.

    used info from https://support.microsoft.com/en-us/kb/2722241 to identify we had some GPOs with CSE left over.

    1. how do these CSEs get in there in the first place? is it because someone at some point used IEM in these GPOs?

    2. what is the gPCUserExtensionName attribute and what does it do?

    3. if I were to perform the actions suggested in the above link, is there any way to backup the GPO / attribute to restore in case of any issue?

    regards,

    Elroy

    Tuesday, March 1, 2016 4:37 PM

Answers

  • > 2 entries in gPCUserExtensionName. in this case, should I leave the
    > square brackets since there are other CSEs referenced?
     
    The attribute contains something like a sequence of GUID pairs, grouped
    in []:
     
    [{00000000-0000-0000-0000-000000000000}{BEE07A6A-EC9F-4659-B8C9-0B1937907C83}][{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{D02B1F73-3407-48AE-BA88-E8213C6761F1}][{42B5FAAE-6536-11D2-AE5A-0000F87571E3}{40B66650-4972-11D1-A7CA-0000F87571E3}][{B087BE9D-ED37-454F-AF9C-04291E351182}{BEE07A6A-EC9F-4659-B8C9-0B1937907C83}]
     
    Identify the one [] that contains the IEM GUID and remove it - including
    the surrounding []. Of course, leave the rest in place :)
     
    [{00000000-0000-0000-0000-000000000000}{BEE07A6A-EC9F-4659-B8C9-0B1937907C83}][{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{D02B1F73-3407-48AE-BA88-E8213C6761F1}][{B087BE9D-ED37-454F-AF9C-04291E351182}{BEE07A6A-EC9F-4659-B8C9-0B1937907C83}]
     
    (Here i removed the {42be... CSE )
     
    • Marked as answer by Elroy86 Wednesday, March 2, 2016 1:16 PM
    Wednesday, March 2, 2016 11:47 AM

All replies

  • > 1. how do these CSEs get in there in the first place? is it because
    > someone at some point used IEM in these GPOs?
     
    Yes.
     
    > 2. what is the gPCUserExtensionName attribute and what does it do?
     
    It stores the CSEs that you configured within the GPO and the required
    MMC Snapin Extensions to edit them. The CSEs are required at client side
    processing - only CSEs on the client are invoked that have configuration
    data in a GPO.
     
    All CSE/Snapin pairs in the attribute are enclosed in [].
     
    Here's the complete GUID list based on Server 2012:
     
    And here's a nice english explanation about them:
     
    If you wonder why the Snapin Extension is required: Windows Firewall and
    some other CSEs have chosen to store their configuration data in
    registry.pol - this is the store for "Administrative Templates" also. To
    present you with a nice GUI, the extensions are called and then told
    that there's configuration data for them :) (Simply spoken - I'm not a
    master of MMC programming)
     
    > 3. if I were to perform the actions suggested in the above link, is
    > there any way to backup the GPO / attribute to restore in case of any issue?
     
    Yes. Simply use notepad - it is barely a string :)
     
    AND BE AWARE: The KB is partially wrong. Do NOT remove only the curly
    braces {} GUID, but the whole square braces [] block - most probably it
    will contain 2 GUIDs.
     
    Tuesday, March 1, 2016 5:00 PM
  • Martin,

    that's brilliant, thank you.

    I have a GPO which has multiple user preferences and therefore more than 2 entries in gPCUserExtensionName. in this case, should I leave the square brackets since there are other CSEs referenced?

    regards,

    Elroy

    Tuesday, March 1, 2016 5:19 PM
  • > 2 entries in gPCUserExtensionName. in this case, should I leave the
    > square brackets since there are other CSEs referenced?
     
    The attribute contains something like a sequence of GUID pairs, grouped
    in []:
     
    [{00000000-0000-0000-0000-000000000000}{BEE07A6A-EC9F-4659-B8C9-0B1937907C83}][{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{D02B1F73-3407-48AE-BA88-E8213C6761F1}][{42B5FAAE-6536-11D2-AE5A-0000F87571E3}{40B66650-4972-11D1-A7CA-0000F87571E3}][{B087BE9D-ED37-454F-AF9C-04291E351182}{BEE07A6A-EC9F-4659-B8C9-0B1937907C83}]
     
    Identify the one [] that contains the IEM GUID and remove it - including
    the surrounding []. Of course, leave the rest in place :)
     
    [{00000000-0000-0000-0000-000000000000}{BEE07A6A-EC9F-4659-B8C9-0B1937907C83}][{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{D02B1F73-3407-48AE-BA88-E8213C6761F1}][{B087BE9D-ED37-454F-AF9C-04291E351182}{BEE07A6A-EC9F-4659-B8C9-0B1937907C83}]
     
    (Here i removed the {42be... CSE )
     
    • Marked as answer by Elroy86 Wednesday, March 2, 2016 1:16 PM
    Wednesday, March 2, 2016 11:47 AM
  • Legend, thank you!
    Wednesday, March 2, 2016 1:16 PM