Welcome Serena Central users! CLICK HERE
The migration of the Serena Central community is currently underway. Be sure to read THIS MESSAGE to get your new login set up to access your account.
jpardo Absent Member.
Absent Member.
2713 views

ZCM10.1.1 And Group Policy not effective

Hi all,

3 Primay Servers SLES10sp1 and 1 Data base server with Sysbase. Source eDirectory and ZCM10.1.1

When apply GPO to device all work fine, the problem is when apply de GPO to a user or container. In agent show that de polcy is effective and when execute zac pl and zac pr all is ok, no errors but de policy not is effective and can make changes in control panel...etc.
Then try run gpedt.msc and can see that the c:\windows\system32\ have the correct adm files and correct configuration. This is the problem, in system32 there are correct files but windows dont have efective policy setting.



This is de log file:

[DEBUG] [10/17/2008 08:35:34.281] [1504] [ZenworksWindowsService] [3] [] [PolicyManager] [] [ApplyPolicies: Applying policies for session ID = 999, realm = DeviceStartup, refreshType = PartialRefresh, forceApply = False, forceCall = False.] [] []
[DEBUG] [10/17/2008 08:35:34.281] [1504] [ZenworksWindowsService] [3] [] [PolicyManager] [] [ApplyPolicies: Either user session is null or Device-only mode is enabled or Zen logon module is not present; not applying user policies.] [] []
[DEBUG] [10/17/2008 08:35:34.296] [1504] [ZenworksWindowsService] [3] [] [ZenCache] [] [(Thread 3) GetObject(PREVIOUSLY_ENFORCED_LIST_1ed3a60d1007b0b2f0d3c0fe9104d389_DeviceStartup, UserContext{_LocalId=SYSTEM; _RemoteId=1ed3a60d1007b0b2f0d3c0fe9104d389}) called] [] []
[DEBUG] [10/17/2008 08:35:34.296] [1504] [ZenworksWindowsService] [3] [] [ZenCache] [] [(Thread 3) GetObject returning <not cached> in 0 ms] [] []
[DEBUG] [10/17/2008 08:35:34.296] [1504] [ZenworksWindowsService] [3] [] [ZenCache] [] [(Thread 3) GetObject(PARTIALLY_ENFORCED_LIST_1ed3a60d1007b0b2f0d3c0fe9104d389_DeviceStartup, UserContext{_LocalId=SYSTEM; _RemoteId=1ed3a60d1007b0b2f0d3c0fe9104d389}) called] [] []
[DEBUG] [10/17/2008 08:35:34.296] [1504] [ZenworksWindowsService] [3] [] [ZenCache] [] [(Thread 3) GetObject returning <not cached> in 0 ms] [] []
[DEBUG] [10/17/2008 08:35:34.296] [1504] [ZenworksWindowsService] [3] [] [PolicyManager] [] [Device assignment, user assignment, previously enforced and previously partially enforced lists are empty.] [] []
[DEBUG] [10/17/2008 08:35:34.296] [1504] [ZenworksWindowsService] [3] [] [Novell.Zenworks.Tess] [] [EventManager -- EventTrigger for POLICY_REFRESH_COMPLETED has been called.] [] []
[DEBUG] [10/17/2008 08:35:34.296] [1504] [ZenworksWindowsService] [3] [] [Novell.Zenworks.Tess] [] [EventManager -- EventTrigger for POLICY_REFRESH_COMPLETED has been called.] [] []
[DEBUG] [10/17/2008 08:35:34.296] [1504] [ZenworksWindowsService] [13] [] [ZIconMod] [] [Zicon Module: EventCallBack for policy refresh for ZECP policy: eventID = POLICY_REFRESH_COMPLETED, session = Novell.Zenworks.Zmd.Session.] [] []
[DEBUG] [10/17/2008 08:35:34.296] [1504] [ZenworksWindowsService] [13] [] [ZIconMod] [] [Zicon Module: Inside realm != null && realm.Length > 0] [] []
[DEBUG] [10/17/2008 08:35:34.312] [1504] [ZenworksWindowsService] [3] [] [PolicyManager] [] [JobList: Remove: GUID passed in is "1ed3a60d1007b0b2f0d3c0fe9104d389".] [] []
[DEBUG] [10/17/2008 08:35:34.312] [1504] [ZenworksWindowsService] [3] [] [PolicyManager] [] [JobList: Remove: Removing GUID "1ed3a60d1007b0b2f0d3c0fe9104d389".] [] []
[DEBUG] [10/17/2008 08:35:34.312] [1504] [ZenworksWindowsService] [3] [] [PolicyManager] [] [Refresh took 00:00:00.0468750 ((d.)hh:mm:ss(.ff)).] [] []
[DEBUG] [10/17/2008 08:35:34.312] [1504] [ZenworksWindowsService] [3] [] [RefreshMgr] [] [(Thread=3; SessionId=999; RefreshType=PartialRefresh) Finished Refreshing Policy Manager Module: 40 ms] [] []
[DEBUG] [10/17/2008 08:35:34.312] [1504] [ZenworksWindowsService] [24] [] [BundleManager] [] [Entering EventCallBack for eventId=POLICY_REFRESH_COMPLETED; sessionId=999] [] []
[DEBUG] [10/17/2008 08:35:34.312] [1504] [ZenworksWindowsService] [3] [] [RefreshMgr] [] [(Thread=3; SessionId=999; RefreshType=PartialRefresh) Calling Refresh Handler: QuickTaskRefresh] [] []
[DEBUG] [10/17/2008 08:35:34.312] [1504] [ZenworksWindowsService] [3] [] [ZMD] [] [Getting Session Capability] [] []


Thanks very much in avance,
Jose
Labels (2)
0 Likes
3 Replies
Anonymous_User Absent Member.
Absent Member.

Re: ZCM10.1.1 And Group Policy not effective

Jose,

It appears that in the past few days you have not received a response to your
posting. That concerns us, and has triggered this automated reply.

Has your problem been resolved? If not, you might try one of the following options:

- Visit http://support.novell.com and search the knowledgebase and/or check all
the other self support options and support programs available.
- You could also try posting your message again. Make sure it is posted in the
correct newsgroup. (http://forums.novell.com)

Be sure to read the forum FAQ about what to expect in the way of responses:
http://support.novell.com/forums/faq_general.html

If this is a reply to a duplicate posting, please ignore and accept our apologies
and rest assured we will issue a stern reprimand to our posting bot.

Good luck!

Your Novell Product Support Forums Team
http://support.novell.com/forums/

0 Likes
donasutton Absent Member.
Absent Member.

Re: ZCM10.1.1 And Group Policy not effective

What version of windows are you running?

Don
0 Likes
adrenaline_nz Absent Member.
Absent Member.

Re: ZCM10.1.1 And Group Policy not effective

I've had the same thing happen in our environment;

Server 2003
XP SP3 clients
ZCM 10.1.1

My work around was:
To apply a GP to a workstation that changed a computer config only. (I didn't do any security settings so set the GP in ZCC to not apply security settings)

Apply a GP to a user that changed the user settings only.

Result = GP applies for both.

I then found this:
Link

After apply it it went away, my problem was that the agent that was installed was not applying all 10.1.1 updates.

See if my work around works first then apply the patch.
0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.