GPO Computer Configurations not being applied

  • Thread starter Thread starter Geoff
  • Start date Start date
G

Geoff

I am having an issue at a client site where:
3 Citrix servers are in a seperate OU called "Citrix"
Loopback processing has been enabled on all 3 servers
Two GPOs have been created to service the OU
User configurations are being applied from both GPOs
Only the Local Group Policy is being applied for the Computer
Configuration

I have attached a copy of Group Policy Results.

Any ideas why the Computer Configuration of any/both OU GPOs is not
being applied.

Regards,

Geoff.

GPRESULTS.EXE - Output:

Microsoft (R) Windows (R) 2000 Operating System Group Policy Result
tool
Copyright (C) Microsoft Corp. 1981-1999


Created on 04 August 2003 at 5:12:28


Operating System Information:

Operating System Type: Server
Operating System Version: 5.0.2195.Service Pack 3
Terminal Server Mode: Application Server

###############################################################

User Group Policy results for:

CN=citrix,OU=HBCCStaff,DC=hobsonsbay,DC=vic,DC=gov,DC=au

Domain Name: CORP-CENTRE
Domain Type: Windows 2000
Site Name: Default-First-Site-Name

Roaming profile: (None)
Local profile: C:\Documents and Settings\citrix

The user is a member of the following security groups:

CORP-CENTRE\HBCCStaff
\Everyone
BUILTIN\Users
BUILTIN\Administrators
NT AUTHORITY\INTERACTIVE
NT AUTHORITY\Authenticated Users
\LOCAL
CORP-CENTRE\ctron
CORP-CENTRE\Domain Users
CORP-CENTRE\BM2000
CORP-CENTRE\Domain Admins
CORP-CENTRE\VM2000
CORP-CENTRE\AADMS
CORP-CENTRE\AppsMABS2000

The user has the following security privileges:

Bypass traverse checking
Remove computer from docking station
Manage auditing and security log
Back up files and directories
Restore files and directories
Change the system time
Shut down the system
Force shutdown from a remote system
Take ownership of files or other objects
Debug programs
Modify firmware environment values
Profile system performance
Profile single process
Increase scheduling priority
Load and unload device drivers
Create a pagefile
Increase quotas


###############################################################

Last time Group Policy was applied: 04 August 2003 at 5:10:33
Group Policy was applied from: altona-dc-01.hobsonsbay.vic.gov.au



###############################################################

Computer Group Policy results for:

CN=CITRIX02,OU=Citrix,DC=hobsonsbay,DC=vic,DC=gov,DC=au

Domain Name: CORP-CENTRE
Domain Type: Windows 2000
Site Name: Default-First-Site-Name


The computer is a member of the following security groups:

BUILTIN\Administrators
\Everyone
BUILTIN\Users
NT AUTHORITY\NETWORK
NT AUTHORITY\Authenticated Users
CORP-CENTRE\CITRIX02$
CORP-CENTRE\Domain Computers

###############################################################

Last time Group Policy was applied: 04 August 2003 at 5:09:53
Group Policy was applied from: altona-dc-01.hobsonsbay.vic.gov.au


===============================================================


The computer received "Registry" settings from these GPOs:

Local Group Policy
Revision Number: 8 (Active Directory) 8 (Sysvol)
Unique Name: Local Group Policy
Domain Name:
Linked to: Local computer




The following settings were applied from: Local Group Policy

KeyName: Software\Policies\Microsoft\SystemCertificates\EFS
ValueName: EFSBlob
ValueType: REG_BINARY
Value:

01 00 01 00 01 00 00 00 79 02 00 00 75 02 00 00
.........y...u...
1c 00 00 00 02 00 00 00 3d 02 00 00 38 00 00 00
.........=...8...
88 68 23 00 f8 68 23 00 01 05 00 00 00 00 00 05
..h#..h#.........
15 00 00 00 07 e5 3b 2b bb 8c 33 5e 15 e1 f9 7f
.......;+..3^....
f4 01 00 00 30 82 02 39 30 82 01 a6 a0 03 02 01
.....0..90.......
02 02 10 28 c4 cc 5d 9d 20 68 88 4c f5 e2 11 b7
....(..]..h.L....
8e 6c 5c 30 09 06 05 2b 0e 03 02 1d 05 00 30 50
..l\0...+......0P
31 16 30 14 06 03 55 04 03 13 0d 41 64 6d 69 6e
1.0...U....Admin
69 73 74 72 61 74 6f 72 31 0c 30 0a 06 03 55 04
istrator1.0...U.
07 13 03 45 46 53 31 28 30 26 06 03 55 04 0b 13
....EFS1(0&..U...
1f 45 46 53 20 46 69 6c 65 20 45 6e 63 72 79 70
..EFS.File.Encryp
74 69 6f 6e 20 43 65 72 74 69 66 69 63 61 74 65
tion.Certificate
30 20 17 0d 30 33 30 37 31 37 30 35 34 30 32 39
0...030717054029
5a 18 0f 32 31 30 33 30 36 32 33 30 35 34 30 32
Z..2103062305402
39 5a 30 50 31 16 30 14 06 03 55 04 03 13 0d 41
9Z0P1.0...U....A
64 6d 69 6e 69 73 74 72 61 74 6f 72 31 0c 30 0a
dministrator1.0.
06 03 55 04 07 13 03 45 46 53 31 28 30 26 06 03
...U....EFS1(0&..
55 04 0b 13 1f 45 46 53 20 46 69 6c 65 20 45 6e
U....EFS.File.En
63 72 79 70 74 69 6f 6e 20 43 65 72 74 69 66 69
cryption.Certifi
63 61 74 65 30 81 9f 30 0d 06 09 2a 86 48 86 f7
cate0..0...*.H..
0d 01 01 01 05 00 03 81 8d 00 30 81 89 02 81 81
...........0.....
00 9c 9f 45 70 b4 10 71 e9 25 e4 af e2 f9 26 6c
....Ep..q.%....&l
ac 53 98 71 9b 80 90 81 4f 7f bd 88 df dd 5e 02
..S.q....O.....^.
84 35 35 6d 1b 9a f4 5c 1a 27 05 11 c4 21 89 5d
..55m...\.'...!.]
e5 17 1d 87 17 e3 ca b7 1f 15 00 d3 7f f2 d6 15
.................
f6 2c a6 1e cf 5c a5 29 52 5f 19 64 5f b3 17 25
..,...\.)R_.d_..%
15 e1 17 14 ec 08 1d cf d8 3b ac 84 99 10 27 23
..........;....'#
e5 8d 35 d7 57 48 4a d0 c8 57 db df 7f 4e 34 f4
...5.WHJ..W...N4.
fb b3 ba 89 51 08 03 9e 29 7b 02 ef 20 85 e9 21
.....Q...){.....!
d3 02 03 01 00 01 a3 1a 30 18 30 16 06 03 55 1d
.........0.0...U.
25 04 0f 30 0d 06 0b 2b 06 01 04 01 82 37 0a 03
%..0...+.....7..
04 01 30 09 06 05 2b 0e 03 02 1d 05 00 03 81 81
...0...+.........
00 6c 34 af 37 a1 6f e6 06 0c 5e 84 aa 3c 97 51
..l4.7.o...^..<.Q
1a 0f 6c 51 cc a4 bd e0 f3 50 20 c0 74 8e 65 a1
...lQ.....P..t.e.
8d 06 71 a0 4d 04 2e a6 e2 47 c8 6d b8 f7 db 06
...q.M....G.m....
92 86 aa 30 65 98 51 b3 3c e3 26 9e 84 f4 d2 7e
....0e.Q.<.&....~
35 00 c2 89 ed e7 33 92 40 a8 f8 cd e2 1f 13 41
[email protected]
5b d5 67 19 bc c7 3f 9b 51 70 3a 00 fc a6 38 61
[.g...?.Qp:...8a
ec 97 15 aa ef 33 38 34 a9 28 eb 0e 2f 1e 8d 6b
......384.(../..k
27 50 db 99 7c 0d 57 3f ef 3f f9 96 40 f3 b1 f6
'P..|.W?.?..@...
a9 00 ..


KeyName: Software\Policies\Microsoft\SystemCertificates\EFS\Certificates\3E2D6C71CB31D9D448BA920D7FD06F034A761FE1
ValueName: Blob
ValueType: REG_BINARY
Value:

03 00 00 00 01 00 00 00 14 00 00 00 3e 2d 6c 71
.............>-lq
cb 31 d9 d4 48 ba 92 0d 7f d0 6f 03 4a 76 1f e1
..1..H.....o.Jv..
02 00 00 00 01 00 00 00 c4 00 00 00 1c 00 00 00
.................
6c 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00
l...............
00 00 00 00 01 00 00 00 62 00 66 00 33 00 30 00
.........b.f.3.0.
61 00 64 00 34 00 30 00 2d 00 30 00 38 00 39 00
a.d.4.0.-.0.8.9.
31 00 2d 00 34 00 35 00 35 00 63 00 2d 00 38 00
1.-.4.5.5.c.-.8.
64 00 31 00 31 00 2d 00 36 00 30 00 30 00 39 00
d.1.1.-.6.0.0.9.
36 00 39 00 37 00 31 00 64 00 37 00 38 00 31 00
6.9.7.1.d.7.8.1.
00 00 00 00 00 00 00 00 4d 00 69 00 63 00 72 00
.........M.i.c.r.
6f 00 73 00 6f 00 66 00 74 00 20 00 42 00 61 00
o.s.o.f.t...B.a.
73 00 65 00 20 00 43 00 72 00 79 00 70 00 74 00
s.e...C.r.y.p.t.
6f 00 67 00 72 00 61 00 70 00 68 00 69 00 63 00
o.g.r.a.p.h.i.c.
20 00 50 00 72 00 6f 00 76 00 69 00 64 00 65 00
...P.r.o.v.i.d.e.
72 00 20 00 76 00 31 00 2e 00 30 00 00 00 00 00
r...v.1...0.....
20 00 00 00 01 00 00 00 3d 02 00 00 30 82 02 39
.........=...0..9
30 82 01 a6 a0 03 02 01 02 02 10 28 c4 cc 5d 9d
0..........(..].
20 68 88 4c f5 e2 11 b7 8e 6c 5c 30 09 06 05 2b
..h.L.....l\0...+
0e 03 02 1d 05 00 30 50 31 16 30 14 06 03 55 04
.......0P1.0...U.
03 13 0d 41 64 6d 69 6e 69 73 74 72 61 74 6f 72
....Administrator
31 0c 30 0a 06 03 55 04 07 13 03 45 46 53 31 28
1.0...U....EFS1(
30 26 06 03 55 04 0b 13 1f 45 46 53 20 46 69 6c
0&..U....EFS.Fil
65 20 45 6e 63 72 79 70 74 69 6f 6e 20 43 65 72
e.Encryption.Cer
74 69 66 69 63 61 74 65 30 20 17 0d 30 33 30 37
tificate0...0307
31 37 30 35 34 30 32 39 5a 18 0f 32 31 30 33 30
17054029Z..21030
36 32 33 30 35 34 30 32 39 5a 30 50 31 16 30 14
623054029Z0P1.0.
06 03 55 04 03 13 0d 41 64 6d 69 6e 69 73 74 72
...U....Administr
61 74 6f 72 31 0c 30 0a 06 03 55 04 07 13 03 45
ator1.0...U....E
46 53 31 28 30 26 06 03 55 04 0b 13 1f 45 46 53
FS1(0&..U....EFS
20 46 69 6c 65 20 45 6e 63 72 79 70 74 69 6f 6e
..File.Encryption
20 43 65 72 74 69 66 69 63 61 74 65 30 81 9f 30
..Certificate0..0
0d 06 09 2a 86 48 86 f7 0d 01 01 01 05 00 03 81
....*.H..........
8d 00 30 81 89 02 81 81 00 9c 9f 45 70 b4 10 71
...0........Ep..q
e9 25 e4 af e2 f9 26 6c ac 53 98 71 9b 80 90 81
..%....&l.S.q....
4f 7f bd 88 df dd 5e 02 84 35 35 6d 1b 9a f4 5c
O.....^..55m...\
1a 27 05 11 c4 21 89 5d e5 17 1d 87 17 e3 ca b7
..'...!.]........
1f 15 00 d3 7f f2 d6 15 f6 2c a6 1e cf 5c a5 29
..........,...\.)
52 5f 19 64 5f b3 17 25 15 e1 17 14 ec 08 1d cf
R_.d_..%........
d8 3b ac 84 99 10 27 23 e5 8d 35 d7 57 48 4a d0
..;....'#..5.WHJ.
c8 57 db df 7f 4e 34 f4 fb b3 ba 89 51 08 03 9e
..W...N4.....Q...
29 7b 02 ef 20 85 e9 21 d3 02 03 01 00 01 a3 1a
){.....!........
30 18 30 16 06 03 55 1d 25 04 0f 30 0d 06 0b 2b
0.0...U.%..0...+
06 01 04 01 82 37 0a 03 04 01 30 09 06 05 2b 0e
......7....0...+.
03 02 1d 05 00 03 81 81 00 6c 34 af 37 a1 6f e6
..........l4.7.o.
06 0c 5e 84 aa 3c 97 51 1a 0f 6c 51 cc a4 bd e0
...^..<.Q..lQ....
f3 50 20 c0 74 8e 65 a1 8d 06 71 a0 4d 04 2e a6
..P..t.e...q.M...
e2 47 c8 6d b8 f7 db 06 92 86 aa 30 65 98 51 b3
..G.m.......0e.Q.
3c e3 26 9e 84 f4 d2 7e 35 00 c2 89 ed e7 33 92
<.&....~5.....3.
40 a8 f8 cd e2 1f 13 41 5b d5 67 19 bc c7 3f 9b
@......A[.g...?.
51 70 3a 00 fc a6 38 61 ec 97 15 aa ef 33 38 34
Qp:...8a.....384
a9 28 eb 0e 2f 1e 8d 6b 27 50 db 99 7c 0d 57 3f
..(../..k'P..|.W?
ef 3f f9 96 40 f3 b1 f6 a9 00 .?..@.....


KeyName: Software\Policies\Microsoft\SystemCertificates\EFS\CRLs
ValueName:
ValueType: REG_NONE
Value: This key contains no values

KeyName: Software\Policies\Microsoft\SystemCertificates\EFS\CTLs
ValueName:
ValueType: REG_NONE
Value: This key contains no values

KeyName: Software\Policies\Microsoft\Windows\System
ValueName: **del.UserPolicyMode
ValueType: REG_SZ
Value:


===============================================================
The computer received "EFS recovery" settings from these GPOs:

Local Group Policy
Revision Number: 8 (Active Directory) 8 (Sysvol)
Unique Name: Local Group Policy
Domain Name:
Linked to: Local computer


Additional information is not available for this type of policy
setting.
 
Hi Geoff-

Do the terminal server machine objects, or a security group they are a
member of, have Read and Apply Group Policy Allow ACEs on the GPOs which
have loopback processing enabled?

--
Tim Springston
Microsoft Corporation

This posting is provided "AS IS" with no warranties, and confers no rights.
Geoff said:
I am having an issue at a client site where:
3 Citrix servers are in a seperate OU called "Citrix"
Loopback processing has been enabled on all 3 servers
Two GPOs have been created to service the OU
User configurations are being applied from both GPOs
Only the Local Group Policy is being applied for the Computer
Configuration

I have attached a copy of Group Policy Results.

Any ideas why the Computer Configuration of any/both OU GPOs is not
being applied.

Regards,

Geoff.

GPRESULTS.EXE - Output:

Microsoft (R) Windows (R) 2000 Operating System Group Policy Result
tool
Copyright (C) Microsoft Corp. 1981-1999


Created on 04 August 2003 at 5:12:28


Operating System Information:

Operating System Type: Server
Operating System Version: 5.0.2195.Service Pack 3
Terminal Server Mode: Application Server

###############################################################

User Group Policy results for:

CN=citrix,OU=HBCCStaff,DC=hobsonsbay,DC=vic,DC=gov,DC=au

Domain Name: CORP-CENTRE
Domain Type: Windows 2000
Site Name: Default-First-Site-Name

Roaming profile: (None)
Local profile: C:\Documents and Settings\citrix

The user is a member of the following security groups:

CORP-CENTRE\HBCCStaff
\Everyone
BUILTIN\Users
BUILTIN\Administrators
NT AUTHORITY\INTERACTIVE
NT AUTHORITY\Authenticated Users
\LOCAL
CORP-CENTRE\ctron
CORP-CENTRE\Domain Users
CORP-CENTRE\BM2000
CORP-CENTRE\Domain Admins
CORP-CENTRE\VM2000
CORP-CENTRE\AADMS
CORP-CENTRE\AppsMABS2000

The user has the following security privileges:

Bypass traverse checking
Remove computer from docking station
Manage auditing and security log
Back up files and directories
Restore files and directories
Change the system time
Shut down the system
Force shutdown from a remote system
Take ownership of files or other objects
Debug programs
Modify firmware environment values
Profile system performance
Profile single process
Increase scheduling priority
Load and unload device drivers
Create a pagefile
Increase quotas


###############################################################

Last time Group Policy was applied: 04 August 2003 at 5:10:33
Group Policy was applied from: altona-dc-01.hobsonsbay.vic.gov.au



###############################################################

Computer Group Policy results for:

CN=CITRIX02,OU=Citrix,DC=hobsonsbay,DC=vic,DC=gov,DC=au

Domain Name: CORP-CENTRE
Domain Type: Windows 2000
Site Name: Default-First-Site-Name


The computer is a member of the following security groups:

BUILTIN\Administrators
\Everyone
BUILTIN\Users
NT AUTHORITY\NETWORK
NT AUTHORITY\Authenticated Users
CORP-CENTRE\CITRIX02$
CORP-CENTRE\Domain Computers

###############################################################

Last time Group Policy was applied: 04 August 2003 at 5:09:53
Group Policy was applied from: altona-dc-01.hobsonsbay.vic.gov.au


===============================================================


The computer received "Registry" settings from these GPOs:

Local Group Policy
Revision Number: 8 (Active Directory) 8 (Sysvol)
Unique Name: Local Group Policy
Domain Name:
Linked to: Local computer




The following settings were applied from: Local Group Policy

KeyName: Software\Policies\Microsoft\SystemCertificates\EFS
ValueName: EFSBlob
ValueType: REG_BINARY
Value:

01 00 01 00 01 00 00 00 79 02 00 00 75 02 00 00
........y...u...
1c 00 00 00 02 00 00 00 3d 02 00 00 38 00 00 00
........=...8...
88 68 23 00 f8 68 23 00 01 05 00 00 00 00 00 05
.h#..h#.........
15 00 00 00 07 e5 3b 2b bb 8c 33 5e 15 e1 f9 7f
......;+..3^....
f4 01 00 00 30 82 02 39 30 82 01 a6 a0 03 02 01
....0..90.......
02 02 10 28 c4 cc 5d 9d 20 68 88 4c f5 e2 11 b7
...(..]..h.L....
8e 6c 5c 30 09 06 05 2b 0e 03 02 1d 05 00 30 50
.l\0...+......0P
31 16 30 14 06 03 55 04 03 13 0d 41 64 6d 69 6e
1.0...U....Admin
69 73 74 72 61 74 6f 72 31 0c 30 0a 06 03 55 04
istrator1.0...U.
07 13 03 45 46 53 31 28 30 26 06 03 55 04 0b 13
...EFS1(0&..U...
1f 45 46 53 20 46 69 6c 65 20 45 6e 63 72 79 70
.EFS.File.Encryp
74 69 6f 6e 20 43 65 72 74 69 66 69 63 61 74 65
tion.Certificate
30 20 17 0d 30 33 30 37 31 37 30 35 34 30 32 39
0...030717054029
5a 18 0f 32 31 30 33 30 36 32 33 30 35 34 30 32
Z..2103062305402
39 5a 30 50 31 16 30 14 06 03 55 04 03 13 0d 41
9Z0P1.0...U....A
64 6d 69 6e 69 73 74 72 61 74 6f 72 31 0c 30 0a
dministrator1.0.
06 03 55 04 07 13 03 45 46 53 31 28 30 26 06 03
..U....EFS1(0&..
55 04 0b 13 1f 45 46 53 20 46 69 6c 65 20 45 6e
U....EFS.File.En
63 72 79 70 74 69 6f 6e 20 43 65 72 74 69 66 69
cryption.Certifi
63 61 74 65 30 81 9f 30 0d 06 09 2a 86 48 86 f7
cate0..0...*.H..
0d 01 01 01 05 00 03 81 8d 00 30 81 89 02 81 81
..........0.....
00 9c 9f 45 70 b4 10 71 e9 25 e4 af e2 f9 26 6c
...Ep..q.%....&l
ac 53 98 71 9b 80 90 81 4f 7f bd 88 df dd 5e 02
.S.q....O.....^.
84 35 35 6d 1b 9a f4 5c 1a 27 05 11 c4 21 89 5d
.55m...\.'...!.]
e5 17 1d 87 17 e3 ca b7 1f 15 00 d3 7f f2 d6 15
................
f6 2c a6 1e cf 5c a5 29 52 5f 19 64 5f b3 17 25
.,...\.)R_.d_..%
15 e1 17 14 ec 08 1d cf d8 3b ac 84 99 10 27 23
.........;....'#
e5 8d 35 d7 57 48 4a d0 c8 57 db df 7f 4e 34 f4
..5.WHJ..W...N4.
fb b3 ba 89 51 08 03 9e 29 7b 02 ef 20 85 e9 21
....Q...){.....!
d3 02 03 01 00 01 a3 1a 30 18 30 16 06 03 55 1d
........0.0...U.
25 04 0f 30 0d 06 0b 2b 06 01 04 01 82 37 0a 03
%..0...+.....7..
04 01 30 09 06 05 2b 0e 03 02 1d 05 00 03 81 81
..0...+.........
00 6c 34 af 37 a1 6f e6 06 0c 5e 84 aa 3c 97 51
.l4.7.o...^..<.Q
1a 0f 6c 51 cc a4 bd e0 f3 50 20 c0 74 8e 65 a1
..lQ.....P..t.e.
8d 06 71 a0 4d 04 2e a6 e2 47 c8 6d b8 f7 db 06
..q.M....G.m....
92 86 aa 30 65 98 51 b3 3c e3 26 9e 84 f4 d2 7e
...0e.Q.<.&....~
35 00 c2 89 ed e7 33 92 40 a8 f8 cd e2 1f 13 41
[email protected]
5b d5 67 19 bc c7 3f 9b 51 70 3a 00 fc a6 38 61
[.g...?.Qp:...8a
ec 97 15 aa ef 33 38 34 a9 28 eb 0e 2f 1e 8d 6b
.....384.(../..k
27 50 db 99 7c 0d 57 3f ef 3f f9 96 40 f3 b1 f6
'P..|.W?.?..@...
a9 00 ..


KeyName: Software\Policies\Microsoft\SystemCertificates\EFS\Certificates\3E2D6C71CB31
D9D448BA920D7FD06F034A761FE1
ValueName: Blob
ValueType: REG_BINARY
Value:

03 00 00 00 01 00 00 00 14 00 00 00 3e 2d 6c 71
............>-lq
cb 31 d9 d4 48 ba 92 0d 7f d0 6f 03 4a 76 1f e1
.1..H.....o.Jv..
02 00 00 00 01 00 00 00 c4 00 00 00 1c 00 00 00
................
6c 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00
l...............
00 00 00 00 01 00 00 00 62 00 66 00 33 00 30 00
........b.f.3.0.
61 00 64 00 34 00 30 00 2d 00 30 00 38 00 39 00
a.d.4.0.-.0.8.9.
31 00 2d 00 34 00 35 00 35 00 63 00 2d 00 38 00
1.-.4.5.5.c.-.8.
64 00 31 00 31 00 2d 00 36 00 30 00 30 00 39 00
d.1.1.-.6.0.0.9.
36 00 39 00 37 00 31 00 64 00 37 00 38 00 31 00
6.9.7.1.d.7.8.1.
00 00 00 00 00 00 00 00 4d 00 69 00 63 00 72 00
........M.i.c.r.
6f 00 73 00 6f 00 66 00 74 00 20 00 42 00 61 00
o.s.o.f.t...B.a.
73 00 65 00 20 00 43 00 72 00 79 00 70 00 74 00
s.e...C.r.y.p.t.
6f 00 67 00 72 00 61 00 70 00 68 00 69 00 63 00
o.g.r.a.p.h.i.c.
20 00 50 00 72 00 6f 00 76 00 69 00 64 00 65 00
..P.r.o.v.i.d.e.
72 00 20 00 76 00 31 00 2e 00 30 00 00 00 00 00
r...v.1...0.....
20 00 00 00 01 00 00 00 3d 02 00 00 30 82 02 39
........=...0..9
30 82 01 a6 a0 03 02 01 02 02 10 28 c4 cc 5d 9d
0..........(..].
20 68 88 4c f5 e2 11 b7 8e 6c 5c 30 09 06 05 2b
.h.L.....l\0...+
0e 03 02 1d 05 00 30 50 31 16 30 14 06 03 55 04
......0P1.0...U.
03 13 0d 41 64 6d 69 6e 69 73 74 72 61 74 6f 72
...Administrator
31 0c 30 0a 06 03 55 04 07 13 03 45 46 53 31 28
1.0...U....EFS1(
30 26 06 03 55 04 0b 13 1f 45 46 53 20 46 69 6c
0&..U....EFS.Fil
65 20 45 6e 63 72 79 70 74 69 6f 6e 20 43 65 72
e.Encryption.Cer
74 69 66 69 63 61 74 65 30 20 17 0d 30 33 30 37
tificate0...0307
31 37 30 35 34 30 32 39 5a 18 0f 32 31 30 33 30
17054029Z..21030
36 32 33 30 35 34 30 32 39 5a 30 50 31 16 30 14
623054029Z0P1.0.
06 03 55 04 03 13 0d 41 64 6d 69 6e 69 73 74 72
..U....Administr
61 74 6f 72 31 0c 30 0a 06 03 55 04 07 13 03 45
ator1.0...U....E
46 53 31 28 30 26 06 03 55 04 0b 13 1f 45 46 53
FS1(0&..U....EFS
20 46 69 6c 65 20 45 6e 63 72 79 70 74 69 6f 6e
.File.Encryption
20 43 65 72 74 69 66 69 63 61 74 65 30 81 9f 30
.Certificate0..0
0d 06 09 2a 86 48 86 f7 0d 01 01 01 05 00 03 81
...*.H..........
8d 00 30 81 89 02 81 81 00 9c 9f 45 70 b4 10 71
..0........Ep..q
e9 25 e4 af e2 f9 26 6c ac 53 98 71 9b 80 90 81
.%....&l.S.q....
4f 7f bd 88 df dd 5e 02 84 35 35 6d 1b 9a f4 5c
O.....^..55m...\
1a 27 05 11 c4 21 89 5d e5 17 1d 87 17 e3 ca b7
.'...!.]........
1f 15 00 d3 7f f2 d6 15 f6 2c a6 1e cf 5c a5 29
.........,...\.)
52 5f 19 64 5f b3 17 25 15 e1 17 14 ec 08 1d cf
R_.d_..%........
d8 3b ac 84 99 10 27 23 e5 8d 35 d7 57 48 4a d0
.;....'#..5.WHJ.
c8 57 db df 7f 4e 34 f4 fb b3 ba 89 51 08 03 9e
.W...N4.....Q...
29 7b 02 ef 20 85 e9 21 d3 02 03 01 00 01 a3 1a
){.....!........
30 18 30 16 06 03 55 1d 25 04 0f 30 0d 06 0b 2b
0.0...U.%..0...+
06 01 04 01 82 37 0a 03 04 01 30 09 06 05 2b 0e
.....7....0...+.
03 02 1d 05 00 03 81 81 00 6c 34 af 37 a1 6f e6
.........l4.7.o.
06 0c 5e 84 aa 3c 97 51 1a 0f 6c 51 cc a4 bd e0
..^..<.Q..lQ....
f3 50 20 c0 74 8e 65 a1 8d 06 71 a0 4d 04 2e a6
.P..t.e...q.M...
e2 47 c8 6d b8 f7 db 06 92 86 aa 30 65 98 51 b3
.G.m.......0e.Q.
3c e3 26 9e 84 f4 d2 7e 35 00 c2 89 ed e7 33 92
<.&....~5.....3.
40 a8 f8 cd e2 1f 13 41 5b d5 67 19 bc c7 3f 9b
@......A[.g...?.
51 70 3a 00 fc a6 38 61 ec 97 15 aa ef 33 38 34
Qp:...8a.....384
a9 28 eb 0e 2f 1e 8d 6b 27 50 db 99 7c 0d 57 3f
.(../..k'P..|.W?
ef 3f f9 96 40 f3 b1 f6 a9 00 .?..@.....


KeyName: Software\Policies\Microsoft\SystemCertificates\EFS\CRLs
ValueName:
ValueType: REG_NONE
Value: This key contains no values

KeyName: Software\Policies\Microsoft\SystemCertificates\EFS\CTLs
ValueName:
ValueType: REG_NONE
Value: This key contains no values

KeyName: Software\Policies\Microsoft\Windows\System
ValueName: **del.UserPolicyMode
ValueType: REG_SZ
Value:


===============================================================
The computer received "EFS recovery" settings from these GPOs:

Local Group Policy
Revision Number: 8 (Active Directory) 8 (Sysvol)
Unique Name: Local Group Policy
Domain Name:
Linked to: Local computer


Additional information is not available for this type of policy
setting.
 
Tim,

Genius. I was under the impression that you only had to give the
SYSTEM account Read and Apply Policy permissions. However, I took
your advise and gave the Domain Computers group Apply Policy rights
and it is working perfectly - I'm happy.

Geoff.
 
Back
Top