GPO Issue, "Run these programs at user logon" - Weird issue.


Recommended Posts

Ok weird issue here, have a GPO applied to group of computers and "Authenticated Users". GPO is working fine for the most part, except the contents of the GPO.

Computer Config>Policies>Administrative Templates>System>Logon is there "Run these programs at user logon" resides. I have 1 program already there, it basically launches a 3rd party app with a disclaimer with an "I accept" and "I decline" button. That works fine, I can edit that line in the GPO at the server, do a GPUPDATE /FORCE on server and client and see the changes. It is entry: 1

Entry 2: is a second app. I can add it to GPO, do a GPUPDATE /FORCE on server and client. It never shows in the registry at HKLM>Software>Wow6432Node\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run in the list with "1" above

It was previously in there, we took it out because of some issues, fixed the issues, added it back.

Now the weird part, if I add it twice to the GPO list, it will show up in the registry area above once I go the GPUPDATE /FORCE. But it is entry "3". It totally skips over entry "2". See this pic: https://dl.dropboxusercontent.com/u/111413/gpo-issue.jpg

Any ideas anyone?

  On 19/11/2015 at 15:44, Daedroth said:

Try running RSOP against the client machine/user to see what's going on with the policies that are being applied.

Yeah RSOP looks good. see: https://dl.dropboxusercontent.com/u/111413/gpo-issue-rsop.jpg

Interesting, so I change a filename to make the entry different then the previously used one

From: \\srv-dc01\netlogon\cc\runasspc.exe /cryptfile:\\srv-dc01\netlogon\cc\crypt.spc /quiet

To: \\srv-dc01\netlogon\cc\runasspc.exe /cryptfile:\\srv-dc01\netlogon\cc\crypt1.spc /quiet

And it took :/ that's really weird....

  On 19/11/2015 at 16:12, xendrome said:

Interesting, so I change a filename to make the entry different then the previously used one

From: \\srv-dc01\netlogon\cc\runasspc.exe /cryptfile:\\srv-dc01\netlogon\cc\crypt.spc /quiet

To: \\srv-dc01\netlogon\cc\runasspc.exe /cryptfile:\\srv-dc01\netlogon\cc\crypt1.spc /quiet

And it took :/ that's really weird....

I noticed that you are using the Computer Configuration side of the GPO for this. Is there a reason you're using that instead of the User Configuration? From my (limited/brief) experience with GP, Computer Configuration is applied when the computer starts up, using system credentials. If I want something to apply to a user account, or start something when the user logs on, I use the User Configuration side of the GPO.

Out of curiosity, what happens if you stick it in the User Configuration?

  On 20/11/2015 at 08:17, Daedroth said:

I noticed that you are using the Computer Configuration side of the GPO for this. Is there a reason you're using that instead of the User Configuration? From my (limited/brief) experience with GP, Computer Configuration is applied when the computer starts up, using system credentials. If I want something to apply to a user account, or start something when the user logs on, I use the User Configuration side of the GPO.

Out of curiosity, what happens if you stick it in the User Configuration?

Well according to Microsoft the different is, Computer Config applies to Computers and User Config appies to users, so HKLM (All users) vs (HKCU). The danger for a setting like this in using it under the User Config is, there will be an entry in every users registry hive, so if you remove something via GPO and it fails, you'll have to automate a script to clean up that reg entry for every user at logon or run on demand. By running it under Computer Config it puts it in HKLM and is 1 settings for all/any user.

This topic is now closed to further replies.
  • Posts

    • Something like this https://www.neowin.net/news/wi...ashes-when-launching-games/ you mean?
    • Valerion StreamMaster Plus2 4K Dolby Vision gaming projector is $300 off with promo coupon by Sayan Sen If you are in the market for a premium projector, you should have a look at the Valerion StreamMaster Plus2 4K Gaming Projector. The product is designed primarily for gaming and multimedia use and promises an excellent "smoother streaming experience" compared to other projectors in its class. The projector supports "true" 4K Ultra HD, which should provide clear images for detailed gaming environments and media playback. The brightness level of 2000 lumens intends to make the device usable in various ambient lighting conditions, from dim gaming rooms to brighter living areas. And in terms of audio, it packs an S/PDIF for digital audio out. The key technical specifications of the Valerion StreamMaster Plus2 4K Gaming Projector are given below: Brightness: 2000 ISO Lumens Light Source: RGB triple laser Contrast Ratio: 10000:1 with EBL Mode (EBL = enhanced black level) Color Gamut: 110% Rec.2020 Throw Ratio: Fixed 1.2:1 (supports screen sizes up to 300 inches) Dynamic Tone Mapping: Enabled HDR and 3D Support: Supports IMAX Enhanced, Dolby Vision, HDR10+, Active 3D, Filmmaker Mode Google TV OS AI-SoC MT9618, 4 GB RAM and 128 GB ROM Input Lag: 4ms at 1080P@240Hz, 8ms at 1080P@120Hz, 15ms at 4K@60Hz Wi-Fi 6e, Bluetooth 5.2 Typically, it is listed at $1999. However, the projector is currently available for $1699, thanks to a special promo code, making it an attractive option for those looking to upgrade their gaming or home cinema setup. Get it at the link below: StreamMaster Plus2 4K Gaming Projector - 300" IMAX Enhanced Home Theater, 3D & Dolby Vision, HDR10+: $1999 + $300 off with promo code "VALERION" at checkout => $1699.00 (Shipped by Amazon, Sold by Valerion) This Amazon deal is US-specific and not available in other regions unless specified. If you don't like it or want to look at more options, check out the Amazon US deals page here. Get Prime (SNAP), Prime Video, Audible Plus or Kindle / Music Unlimited. Free for 30 days. As an Amazon Associate, we earn from qualifying purchases.
    • Yeah you are reading different article. Does your article talk about Elon's big dong and has video him naked by any chance? I think the problem is you are commenting on the wrong tab you are actually viewing. Sorry the Telsa you buy is not the same product these robotaxi's will be. WTF? Funny how you didn't even reply to Steven's comment here. Thanks for playing but you are getting all worked up and saying ###### you wouldn't to anyone's face so we are done.
    • Nobody is saying this is fake news and nobody is claiming that self-driving technology is perfect. 🙄 Come back to reality... Based on your source, the number of autonomous vehicle incidents is on a downward trajectory. And that's compounded by the fact that there are more and more of them on the road every month. Since the tech is improving, the data is supporting that. Now also consider that there are 6 million auto accidents every year in the US and 40,000 deaths. Compare that to 1,000 self-driving accidents we're on track for this year sprinkled in with a few deaths. That's a drop in the bucket. It's not only crazy, but ignorant to still think that self-driving cars aren't the solution for saving lives on the road. It's just common sense. It's a shame that Tesla is the only company doing this well and everybody else needs to get their act together. What's more alarming is that Waymo has over 400 incidents in 5 years and they only have 1500 cars on the road. That just goes to show how mediocre their technology is.
    • the fact Mac OS could do this FOREVER and windows never did it natively was always a meh to me...
  • Recent Achievements

    • Apprentice
      Cole Multipass went up a rank
      Apprentice
    • Posting Machine
      David Uzondu earned a badge
      Posting Machine
    • One Month Later
      Stokenking earned a badge
      One Month Later
    • One Month Later
      Kevin Jones earned a badge
      One Month Later
    • Week One Done
      Kevin Jones earned a badge
      Week One Done
  • Popular Contributors

    1. 1
      +primortal
      536
    2. 2
      ATLien_0
      263
    3. 3
      +Edouard
      195
    4. 4
      +FloatingFatMan
      184
    5. 5
      snowy owl
      135
  • Tell a friend

    Love Neowin? Tell a friend!