Windows Tip: Troubleshooting group policy in Windows Vista
Send your Windows question to Mitch today! | See other Windows tips
Group Policy is a key technology for managing computers on Windows-based networks where Active Directory is deployed. But Group Policy has been considerably enhanced in Windows Vista, and also in the soon-to-come Windows Server Code-Name "Longhorn." And of course, changes mean more learning for those who are going to administer these platforms, so this tip deals with one of these changes, namely how to troubleshooting Group Policy processing in Windows Vista.
In previous versions of Microsoft Windows, an important tool for troubleshooting Group Policy processing is the userenv.log file. This verbose log, which is generated by Userenv.dll (part of the core Group Policy engine) can be used by administrators to determine what is happening in the background when a user logs on to his or her computer and Group Policy is applied. If you search the Knowledge Base on Microsoft TechNet you can find lots of information on how to enable Userenv.dll logging and interpret the resulting logs. In Windows Vista however, Userenv.dll can no longer be configured to generate a userenv.log. How can you troubleshooting Group Policy processing issues then on this new platform?
The simple answer is, by using Event Viewer! In Windows Vista, Group Policy events are logged in two channels:
* Group Policy Operational Log. The events logged here are verbose Group Policy processing events that are similar to those that could formerly be found in userenv.log.
* System Log. Events with source "Group Policy" logged here are more general events concerning the success or failure of Group Policy processing.
That's not all though. There's yet another way in Windows Vista that you can troubleshoot Group Policy issues, and this is to enable debug logging for the Group Policy Object Editor (Gpedit.msc). When you enable debug logging, Gpedit.msc generates a GpEdit.log that can be used for resolving issues involving malformed ADMX files. To enable Gpedit.msc debug logging, create the following REG_DWORD registry value:
HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\GPEditDebugLevel
You should normally set this value to 0x10002 for troubleshooting purposes, and the result will be a GpEdit.log located in the %SystemRoot%\debug\usermode folder on the local machine.
You'll find lots of information in the upcoming Windows Vista Resource Kit concerning how Group Policy has changed in Windows Vista, and if you haven't pre-ordered this terrific book yet, you should do so today. I know, that's another shameless plug for a book that I was involved in, but hey, we geeks gotta eat!
ITworld.com
Symantec Backup Exec 12 and Backup Exec System Recovery 8 deliver industry leading Windows data protection and system recovery. Download this whitepaper to find out the top reasons to upgrade and how to get continuous data protection and complete system recovery.
Data and system loss — from a hard drive failure, malicious attack, natural disaster, or simple human error — can happen anytime. Don’t leave your business vulnerable. Make sure you have a secure recovery strategy in place. Symantec's latest backup and system recovery technology can efficiently restore critical applications, individual emails and documents and even restore your entire system in minutes in the event of a loss.
Businesses face a growing challenge to ensure that the IT environment is properly protected. Backup Exec 12 integrates with other applications in the Symantec family of products, to complement your current data protection strategy, keep your data securely backed up and make it recoverable when you need it most.
