Group Policies 1

[maxthedork]

We're starting to use ZEN to hand out a Group Policy Object to configure the workstations to use our WSUS server. The ONLY thing we have configured is the Windows Update section which looks like this:

Group Policy config

I've looked through each entry and everything else is set to Not Configured.

Now, the problem we're having is that, when users log in, all their desktop icons are being re-arranged to the left side of their screen, as if using Auto Arrange. We've been receiving complaints about this, otherwise I wouldn't care. But is there anything at all I'm overlooking? Why would it be behaving this way?

By the way, here's the configuration for how the GPO is handed out. The workstation policy is associated with workstation objects, not with users.

Group Policy settings

Any ideas at all are welcome.

 

[marvhuffaker]

Does that behavior (the icons) happen when you're not using this Group Policy object?

Marvin Huffaker, MCNE

http://www.redjuju.com

 

[maxthedork]

No, it doesn't.

By the way, the users are all using local policies, not roaming or mandatory. Just figured you'd want to know.

 

[Provogeek]

Great visual on the issue, wish more people would do that to make it easier to figure out what they are talking about.

Put the policy in merge mode, not replace mode.

Basically, your building a new user profile when you do this, and this will reset the desktop enviroment when you do this

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
Brent Schmidt Certified nut case
Senior Network Engineer
Keep IT Simple

http://www.kiscc.com

 

[maxthedork]

I was thinking that might be the solution, my only stumbling block was that not everyone is having this issue, only a few 2000 pro boxes. However, I'll try that and get back to you.

As far as painting a full picture, I work helpdesk and I know the frustration of NEI (as opposed to TMI). (-:

 

[maxthedork]

Apparently, changing the policy mode to Merge worked. Thanks!

 

[maxthedork]

I spoke too soon.

The user I was testing this on, when she restarted her computer her icons were in the same place she left them. However, when she shut her PC off, then turned it back on, they rearranged themselves on the left side. Any other thoughts?

 

[maxthedork]

Anyone? Anyone?

 

[Provogeek]

was this the first policy you placed on these systems, or was there another policy in place at one point in time?


it also sounds like you have somthing set in this policy to not save the user enviroment on shut down. it's buried, hard to find.

delete the policy and start over.

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
Brent Schmidt Certified nut case
Senior Network Engineer
Keep IT Simple

http://www.kiscc.com

 

[maxthedork]

I checked where it says "Do Not Save on shutdown" which, if enabled, does not save settings when you logoff. That setting is set to "Not configured." On the workstations in question it's set to "Not configured." According to MS documentation, "Not Configured" is the same as "Disabled" in this case, meaning that it will save settings on logoff.

Other than that...

Originally these PCs were configured one by one with a group policy that set the environment for SUS (Software Update Service). We've since replaced the SUS server with a WSUS (Windows Server Update Services) server, and are trying to migrate to a private IP address. Long before I came here, they set up the SUS server with a public IP address, not knowing that it was unneccessary, but then set up everyone to point to that. Now I'd like to change the policy to point to the new IP address. I'm assuming by your tenor that I can't do that with ZENworks? I was really hoping I could avoid visiting every workstation.

 

[Provogeek]

if it's a registry settings, ZEN can do it

if it's an INI setting, ZEN can do it

if it's a text file settings, ZEN can do it

If it's just somthing totally wacky but can be easily done at the workstation, then a script can do it and ZEN can deploy that script.

BTW, you bought ZEN, have you looked at the Patch Managment function that it comes with? Your ZEN license gives you a 100PC 90 eval of the software, check it out ... it is pretty nice to manage windows patches (as well as other major software patches).

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
Brent Schmidt Certified nut case
Senior Network Engineer
Keep IT Simple

http://www.kiscc.com

 

[maxthedork]

I know all that, but it still doesn't answer my question.

And it doesn't answer why, even when I change the IP address of the WSUS server in group policy manually at the PC, it still sets it back to the original IP address on the next reboot, despite the fact that the GPO I'm trying to push out has the NEW IP address in it. All the other settings I'm pushing out apply on the PC. That one does not.

And a 100 PC 90-day eval doesn't help me any. We've got over 500 PCs here. Plus our budget got cut by the college. We've got over 200 PCs that are past end-of-life and we only have the budget to replace 80, so we're not going to spend any extra money on a product to replace something we're already using and that works. We're using WSUS, it works fine, and in fact it works fine with the public IP address, I'm just trying to free that address up for a resource that might actually need a public IP address.

So. Rather than telling me what ZEN can do and how much better it is than any Microsoft Product (which I'm not debating), all I want to know is, is there a solution to my orignal issue, which is that users' icons are being re-arranged when they boot up.

 

[maxthedork]

The issue of moving icons (auto-aligning to the left) has to do with a disconnect between ZFD agent 7 and Active desktop, as described in the following article from Novell:

NAL desktop icons do not remain where placed

Apparently the issue is addressed in SP1 for Zen7, due out soon. Thanks again for all your advice.