GPO Problem when I use NTLite (Stable and Beta)

O

Oliver

Guest
Hi

I have a problem with GPO and NTLite. I use this GPO für a RDP Webfeed:
Code: 
User Configuration --> Policies --> Administrative Templates --> Windows Components --> Remote Desktop Services --> RemoteApp and Desktop Connections --> Specify default connection URL

I can set all settings, updates, software installation and other things in NTLite and all it's fine. But when I remove a component (i have try different), this GPO for Webfeed does not work. The eventlog say allways permission problem.
I have try to only remove Bing Weather.

Have you an idea to solve this problem?

Thank you for help

Oliver
 
Hi Oliver,

it's more likely a setting is responsible, as I'll debug another report these days which mentions that one or more of these is breaking their GPO:

Code: 
<Tweaks>
                                <Settings>
                                                <TweakGroup name="DesktopTweaks">
                                                                <Tweak name="Accent\AccentColorMenu">8014616</Tweak>
                                                                <Tweak name="Accent\StartColorMenu">8014616</Tweak>
                                                                <Tweak name="DWM\AccentColorInactive">5781266</Tweak>
                                                                <Tweak name="Personalize\AppsUseLightTheme">1</Tweak>
                                                                <Tweak name="NewStartPanel\{20D04FE0-3AEA-1069-A2D8-08002B30309D}">0</Tweak>
                                                                <Tweak name="ContentDeliveryManager\SoftLandingEnabled">0</Tweak>
                                                                <Tweak name="DWM\ColorPrevalence">1</Tweak>
                                                </TweakGroup>
                                                <TweakGroup name="Explorer">
                                                                <Tweak name="ControlPanel\StartupPage">1</Tweak>
                                                                <Tweak name="Explorer\DisableEdgeDesktopShortcutCreation">1</Tweak>
                                                </TweakGroup>
                                                <TweakGroup name="Privacy">
                                                                <Tweak name="System\AllowLocation">1</Tweak>
                                                                <Tweak name="CloudContent\DisableWindowsConsumerFeatures">1</Tweak>
                                                                <Tweak name="ContentDeliveryManager\SilentInstalledAppsEnabled">0</Tweak>
                                                                <Tweak name="ContentDeliveryManager\RotatingLockScreenOverlayEnabled">0</Tweak>
                                                                <Tweak name="ContentDeliveryManager\SystemPaneSuggestionsEnabled">0</Tweak>
                                                                <Tweak name="ContentDeliveryManager\PreInstalledAppsEnabled">0</Tweak>
                                                                <Tweak name="ContentDeliveryManager\OemPreInstalledAppsEnabled">0</Tweak>
                                                                <Tweak name="ContentDeliveryManager\RotatingLockScreenEnabled">0</Tweak>
                                                </TweakGroup>
                                </Settings>
                                <Services></Services>
                                <ExtraServices></ExtraServices>
                </Tweaks>
Can you compare or post your preset (edit private unattended data) to see if it matches any of these?

Removing Bing Weather alone is very unlikely to break anything.

Thanks.
 
Hi

Thank you for reply.

Here are my Settings:
Code: 
<Tweaks>
        <Settings>
            <TweakGroup name="DesktopTweaks">
                <Tweak name="NewStartPanel\{20D04FE0-3AEA-1069-A2D8-08002B30309D}">0</Tweak>
                <Tweak name="NewStartPanel\{59031a47-3f72-44a7-89c5-5595fe6b30ee}">0</Tweak>
                <Tweak name="NewStartPanel\{F02C1A0D-BE21-4350-88B0-7367FC96EF3C}">1</Tweak>
                <Tweak name="NewStartPanel\{645FF040-5081-101B-9F08-00AA002F954E}">0</Tweak>
                <Tweak name="NewStartPanel\{5399E694-6CE5-4D6C-8FCE-1D8870FDCBA0}">1</Tweak>
                <Tweak name="ContentDeliveryManager\SoftLandingEnabled">0</Tweak>
                <Tweak name="Search\SearchboxTaskbarMode">0</Tweak>
                <Tweak name="Explorer\DisableNotificationCenter">1</Tweak>
                <Tweak name="ContentDeliveryManager\SubscribedContent-310093Enabled">0</Tweak>
            </TweakGroup>
            <TweakGroup name="Explorer">
                <Tweak name="Advanced\Hidden">2</Tweak>
                <Tweak name="Advanced\HideFileExt">1</Tweak>
                <Tweak name="Advanced\ShowSuperHidden">0</Tweak>
                <Tweak name="Advanced\EnableBalloonTips">0</Tweak>
                <Tweak name="Advanced\ShowInfoTip">0</Tweak>
                <Tweak name="Advanced\FolderContentsInfoTip">0</Tweak>
                <Tweak name="Advanced\StartButtonBalloonTip">0</Tweak>
                <Tweak name="Explorer\DisableEdgeDesktopShortcutCreation">1</Tweak>
                <Tweak name="People\PeopleBand">0</Tweak>
                <Tweak name="Advanced\MMTaskbarEnabled">1</Tweak>
                <Tweak name=".jpg\PhotoViewer.FileAssoc.Tiff">PhotoViewer.FileAssoc.Tiff</Tweak>
            </TweakGroup>
            <TweakGroup name="Privacy">
                <Tweak name="CloudContent\DisableWindowsConsumerFeatures">1</Tweak>
                <Tweak name="ContentDeliveryManager\SilentInstalledAppsEnabled">0</Tweak>
                <Tweak name="features\PaidWifi">0</Tweak>
                <Tweak name="features\WiFiSenseOpen">0</Tweak>
                <Tweak name="Windows Search\AllowCortana">0</Tweak>
                <Tweak name="Search\HistoryViewEnabled">0</Tweak>
                <Tweak name="Search\DeviceHistoryEnabled">0</Tweak>
                <Tweak name="ContentDeliveryManager\RotatingLockScreenOverlayEnabled">0</Tweak>
                <Tweak name="System\AllowExperimentation">0</Tweak>
                <Tweak name="ContentDeliveryManager\SystemPaneSuggestionsEnabled">0</Tweak>
                <Tweak name="System\EnableActivityFeed">0</Tweak>
                <Tweak name="Privacy\TailoredExperiencesWithDiagnosticDataEnabled">0</Tweak>
                <Tweak name="Advanced\Start_TrackProgs">0</Tweak>
                <Tweak name="Settings\AcceptedPrivacyPolicy">0</Tweak>
                <Tweak name="InputPersonalization\RestrictImplicitTextCollection">1</Tweak>
                <Tweak name="InputPersonalization\RestrictImplicitInkCollection">1</Tweak>
                <Tweak name="TrainedDataStore\HarvestContacts">0</Tweak>
                <Tweak name="TIPC\Enabled">0</Tweak>
                <Tweak name="DataCollection\AllowTelemetry">1</Tweak>
                <Tweak name="FlipAhead\FPEnabled">0</Tweak>
                <Tweak name="ContentDeliveryManager\SubscribedContent-338393Enabled">0</Tweak>
                <Tweak name="ContentDeliveryManager\PreInstalledAppsEnabled">0</Tweak>
                <Tweak name="ContentDeliveryManager\OemPreInstalledAppsEnabled">0</Tweak>
                <Tweak name="Advanced\Start_TrackDocs">0</Tweak>
            </TweakGroup>
            <TweakGroup name="WindowsUpdate">
                <Tweak name="Settings\HideMCTLink">1</Tweak>
                <Tweak name="DeliveryOptimization\DODownloadMode">0</Tweak>
            </TweakGroup>
        </Settings>
        <Services></Services>
        <ExtraServices></ExtraServices>
    </Tweaks>

If you want, I can try to use only unatended Settings and remove bing weather to see if it break from remove or from a other setting
But it is special, that the image is working fine, and when I remove Bing Weather it does break the GPO

Best regards

Oliver
 
Oliver said:
Here are my Settings:
<cut>

If you want, I can try to use only unatended Settings and remove bing weather to see if it break from remove or from a other setting
But it is special, that the image is working fine, and when I remove Bing Weather it does break the GPO
Click to expand...
Thanks Oliver, here are your settings minus the ones I had from the report, minus a few more suspicious ones:
Code: 
            <TweakGroup name="DesktopTweaks">
                <Tweak name="NewStartPanel\{59031a47-3f72-44a7-89c5-5595fe6b30ee}">0</Tweak>
                <Tweak name="NewStartPanel\{F02C1A0D-BE21-4350-88B0-7367FC96EF3C}">1</Tweak>
                <Tweak name="NewStartPanel\{645FF040-5081-101B-9F08-00AA002F954E}">0</Tweak>
                <Tweak name="NewStartPanel\{5399E694-6CE5-4D6C-8FCE-1D8870FDCBA0}">1</Tweak>
                <Tweak name="Search\SearchboxTaskbarMode">0</Tweak>
                <Tweak name="Explorer\DisableNotificationCenter">1</Tweak>
            </TweakGroup>
            <TweakGroup name="Explorer">
                <Tweak name="Advanced\Hidden">2</Tweak>
                <Tweak name="Advanced\HideFileExt">1</Tweak>
                <Tweak name="Advanced\ShowSuperHidden">0</Tweak>
                <Tweak name="Advanced\EnableBalloonTips">0</Tweak>
                <Tweak name="Advanced\ShowInfoTip">0</Tweak>
                <Tweak name="Advanced\FolderContentsInfoTip">0</Tweak>
                <Tweak name="Advanced\StartButtonBalloonTip">0</Tweak>
                <Tweak name="People\PeopleBand">0</Tweak>
                <Tweak name="Advanced\MMTaskbarEnabled">1</Tweak>
                <Tweak name=".jpg\PhotoViewer.FileAssoc.Tiff">PhotoViewer.FileAssoc.Tiff</Tweak>
            </TweakGroup>
            <TweakGroup name="Privacy">
                <Tweak name="features\PaidWifi">0</Tweak>
                <Tweak name="features\WiFiSenseOpen">0</Tweak>
                <Tweak name="Windows Search\AllowCortana">0</Tweak>
                <Tweak name="Search\HistoryViewEnabled">0</Tweak>
                <Tweak name="Search\DeviceHistoryEnabled">0</Tweak>
                <Tweak name="System\AllowExperimentation">0</Tweak>
                <Tweak name="System\EnableActivityFeed">0</Tweak>
                <Tweak name="Privacy\TailoredExperiencesWithDiagnosticDataEnabled">0</Tweak>
                <Tweak name="Advanced\Start_TrackProgs">0</Tweak>
                <Tweak name="Settings\AcceptedPrivacyPolicy">0</Tweak>
                <Tweak name="InputPersonalization\RestrictImplicitTextCollection">1</Tweak>
                <Tweak name="InputPersonalization\RestrictImplicitInkCollection">1</Tweak>
                <Tweak name="TrainedDataStore\HarvestContacts">0</Tweak>
                <Tweak name="TIPC\Enabled">0</Tweak>
                <Tweak name="DataCollection\AllowTelemetry">1</Tweak>
                <Tweak name="FlipAhead\FPEnabled">0</Tweak>
                <Tweak name="Advanced\Start_TrackDocs">0</Tweak>
            </TweakGroup>
            <TweakGroup name="WindowsUpdate">
                <Tweak name="Settings\HideMCTLink">1</Tweak>
                <Tweak name="DeliveryOptimization\DODownloadMode">0</Tweak>
            </TweakGroup>

Thanks for the offer, it would be great to test without any Settings, then if it works, if you want with these trimmed ones, I continue on finding which exactly from the difference it is.

However, you then mention "it is special, that the image is working fine, and when I remove Bing Weather it does break the GPO", which makes me wonder did you already try just the removal without these settings? If so, then please wait until I confirm that.
Now rechecked Bing Weather detailed removal list, nothing seems related.
 
Hi

Thank you. I have downloaded the newest W10 Iso. Now I had test the following steps:
  • Take only the unatended settings: The one GPO Rule works
  • Take the unatended settings and remove BingWeather: The one GPO Rule does not works
So this is not a problem with settings.

If you wish other tests pleace let me know

Best regards

Oliver
 
Last edited by a moderator:
Thanks for the feedback, I'll reply by tomorrow, testing both at the same time.
 
Oliver said:
  • Take only the unatended settings: The one GPO Rule works
  • Take the unatended settings and remove BingWeather: The one GPO Rule does not works
Click to expand...
OK, I have tested this, and since I don't see any issues I need more info. Attached picture how it looks.

How exactly do you check if that GPO works?
I see it in rsop.msc, and I can connect to an remoteapp (e.g. wordpad).
Also from that remote wordpad I can access C and D drive on the client machine.

Maybe a too basic of a question, but did you login with a domain or local account?
It's easy to make that mistake when using unattended settings, choose the domain account listed under the autologon Unattended options if it's not already.

After answering those two, if it's still an issue, best would be if you send me your exact preset minus the passwords via the private message (click on my name and start conversation).

Thanks.
 

Attachments

  • remoteapp.png
    remoteapp.png
    132.2 KB
Hi

Thank you I will be back in office on monday. But I will try to answer.

Im login with a domain user not with domain admin or local user. When I not remove a component, i can go to control panel and there to remote app. There I see my Work Resource. Additional I find the Work Resource in my start menu on Windows 10 (This rule not work in Windows 7).

When I remove BingWeather or other components, I don't see any entries in control panel -> RemoteApp. A gpupdate /force get me an error that the gpo not loaded, and the event log say permission denied.
The same rule, the same settings the same Feed URL (Azure URL with a Domain AD join for local domain)

When you need after this questions, I can send you my preset.

Oliver
 
Thanks Oliver, for me remote apps are not there even on intact ISO with unattended.

I think the certificate on the server IIS is the main problem, see attached screenshot from even when accessing the path directly from a non-edited Windows.

Will try to first workaround that, then continue testing once the intact Windows have what you state.
 

Attachments

  • cert.png
    cert.png
    115 KB
  • cert 2.png
    cert 2.png
    121.3 KB
Thank you. I will try next week to open the feed in Internet Explorer and look if I see an error.
 
Added the self-signed server certificate to the GPO, now it can access the path and was auto-logged on to RemoteApps with intact ISO.

Confirmed the issue!
Working on it.
 
Fix released in the build 7046+

Let me know if you still have any GPO issues, if so please attach or send me a preset demonstrating it (edit out the password if publicly posted).

Thanks.
 
Hi

Sorry for late answer. I had a few problems so I has test it yesterday. I have make 3 tests and all are great. My GPO Work with the Beta Build after remove components from ISO. THANK you for help
 
You must log in or register to reply here.
Back
Top