17.4 Limitations with Group Policy Management

17.4.1 Group Policy Update Failure on Workstation When Installation of Software is Performed Through GPO

The installation of software through GPO on the existing DSfW domain controllers with OES 2015 SP1 fails because of insufficient ACLs for certain attributes on the domain root partition. This causes the failure of the group policy update performed on a workstation.

To resolve this issue, update the ACLs by executing the script software_gpo_setup.pl on the OES 2015 SP1 domain controller as follows. This script is made available with Update 30 - OES 2015 SP1 maintenance release.

ADM_PASSWD=<domain admin password> perl /opt/novell/xad/sbin/software_gpo_setup.pl

Or

perl /opt/novell/xad/sbin/software_gpo_setup.pl with the domain admin password as input.

After successful execution of the script on the domain controller, the group policy update performed on the workstation should be successful.

17.4.2 Users Cannot Log In if They Are Moved From a Non-Domain Partition to a DSfW Domain Partition

If a user with a Universal password policy is moved from non-domain partition to a DSfW partition, the user will not be able to login into the DSfW domain.

To resolve this issue, delete the old password policy using iManager. After this step is done, the user will be able to login to the workstation.

17.4.3 Members of GroupPolicy Creator Owner group cannot change the active DFS Referral

If a member of the GroupPolicy Creator Owner group tries editing the group policy through the Group Policy Management Console(GPMC), and if the GPMC is referring the ADC, the user will not be permitted to change the DFS referral to make it point to the first domain controller. To make changes, you will require administrator privileges

17.4.4 Ignore Warnings while Backing up Group Policies

You might get 'access denied' warnings while backing up Group Policies in XP and Vista clients connected to DSfW. It is safe to ignore them.

17.4.5 WMI Filters Cannot be Applied for Processing GPOs

WMI filters are not supported in this release.