wanman Absent Member.
Absent Member.
2814 views

ZCM DLU Policy Not Applying To Win7 Computer

I am running ZCM v10.3 and am preparing to migrate over to Active Directory. When I first setup ZCM, I created a DLU policy for my Windows 7 computers and its been working fine. However, its time to join my Windows 7 computers (running ZCM v10.3) to the AD Domain and I need to disable the DLU for the machines prior to joining the domain.

To do this I tried to exclude my test workstations from the DLU by adding the workstations to the exclusion list for the DLU Policy. My DLU policy is assigned to my Users so I used the "Excluded Workstation List" to attempt to prevent the DLU from applying to the workstation. This didn't work. I also tried the reverse by applying the DLU to the test workstation and adding users to the Exclusion list, but that didn't work either. I updated the version, ran "zac cc" and ran "zac ref bypasscache" but it didnt work.

I reassigned the DLU to all my Users and tried to use the registry to check for the existence and value of hklm\software\novell\zcm\zenlgn\domainlogin=1, but that didnt work either. I updated the version, ran "zac cc" and ran "zac ref bypasscache" but it didnt work.

Actually, the registry keys (DomainLogin and eDIRLogin) didn't exist so i had to manually add it using an AD GPO. I added DomainLogin and eDIRLogin and assign hexadecimal value of 1 to each DWORD via GPO (FYI). At this point I'm not even sure if the values of these keys are supposed to be set automatically upon login or if the admins manually control the values. Its not clear to me from the documentation on the Novell site. (http://www.novell.com/documentation/zcm10/pdfdoc/zcm10_system_admin/zcm10_system_admin.pdf, pg 274)
(DLU Policy Filters not working)

I turned on debug by issuing the command: "zac log level debug", and would've attached the log here, but I don't know how. If anyone needs to see the log, please send me a link on how to attach a log and I'll do so.

I've tried so many different settings and combinations but i'm still unable to get consistent results. At some point I was able to get the DLU Policy to show up in the ZCM Agent properties with the status of "Not Applied" or "Not Effective" or something to that effect. That was the first time I was able to log in without the DLU applying. However it wasn't consistent among other machines so i kept testing. As it stands now, I have removed any filters and exclusions and now my test machine is not receiving any DLU policy and it should because I assigned the DLU Policy to my entire user base. I am totally lost.

Any help is appreciated.
Labels (2)
0 Likes
5 Replies
Anonymous_User Absent Member.
Absent Member.

Re: ZCM DLU Policy Not Applying To Win7 Computer

wanman,

It appears that in the past few days you have not received a response to your
posting. That concerns us, and has triggered this automated reply.

Has your problem been resolved? If not, you might try one of the following options:

- Visit http://support.novell.com and search the knowledgebase and/or check all
the other self support options and support programs available.
- You could also try posting your message again. Make sure it is posted in the
correct newsgroup. (http://forums.novell.com)

Be sure to read the forum FAQ about what to expect in the way of responses:
http://forums.novell.com/faq.php

If this is a reply to a duplicate posting, please ignore and accept our apologies
and rest assured we will issue a stern reprimand to our posting bot.

Good luck!

Your Novell Product Support Forums Team
http://forums.novell.com/

0 Likes
bkeadle Absent Member.
Absent Member.

Re: ZCM DLU Policy Not Applying To Win7 Computer

I'd like to resurrect this - hoping Shaun Pond is listening...

I too have noticed that the DLU does not work for Windows 7. I have DLU working for Windows XP machines with Novell Client v4.91+ and ZCM (11.1) Agent. However, a Windows 7 machine with the same ZCM agent version and the Novell client v2 SP2 (IR1) does not populate the HKLM\Software\Novell\ZCM\ZenLgn DomainLogin or eDirLogin. It's unknown whether this is a function of the Novell client or the ZCM Agent. The fact that the registry is in a ZCM\ZenLgn subkey would suggest it's a ZCM Agent function, but since the ZCM Agent version hasn't change but the Novell client has, suggests it's a Novell client function.
0 Likes
shaunpond Absent Member.
Absent Member.

Re: ZCM DLU Policy Not Applying To Win7 Computer

Bkeadle,

I'm watching, but at the moment I won't have time to look at this. I
think it would be best for you to a) post this as a new root message,
to bring it to the attention of more people, or b) raise a SR as it
will be some time before I have any time (preparing for 11.2 launch...)

--

Shaun Pond


0 Likes
bkeadle Absent Member.
Absent Member.

Re: ZCM DLU Policy Not Applying To Win7 Computer

You're always watching...
🙂

I do have an SR open, but not getting much response. I'll open a new "root" topic.

Would you happen to know whether the ZenLgn DomainLogin and eDIRLogin keys are ZCM or the Novell client's "responsibility"?
0 Likes
shaunpond Absent Member.
Absent Member.

Re: ZCM DLU Policy Not Applying To Win7 Computer

Bkeadle,

I don't _know_ but if it's under zcm, I think it's ours...

--

Shaun Pond


0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.