User associated Group Policy Object does not persist after logging out of the device
Favorites configured by using the Group policy are not cleared when the group policy is unenforced
Internet Explorer Settings configured in the Group policy are not applied on the Internet Explorer
Security settings of the Windows Group policy are not effective on the device
Unable to launch the Group Policy Helper tool on a Windows Vista or Windows 7 device
Scripts configured through Active Directory Group policy are not enforced on a device
The screen remains blank after logging into a terminal server
Security settings are not applied randomly for Group policies at device startup
While creating group policy, Failure importing group policy setting error message appears
Group Policy helper installed using Internet Explorer might not be enabled on Firefox
Group Policy Helper does not work on Internet Explorer 10 in Enable Protected Mode
On a Windows 8.1 machine, logon related group policy settings does not work as expected
User associated Group Policy Object does not persist after logging out of the device
Limitations of using the PersistPolicyatUserLogout key
The registry key can be set only on ZENworks 2017 Update 2 or later managed devices.
The Registry key cannot be applied to a Terminal Server.
NOTE:It is recommended that this registry key must be used only if same user logs into the device.
The Group Policy Helper tool is not backward compatible with the earlier versions of ZENworks Configuration Management releases
Favorites configured by using the Group policy are not cleared when the group policy is unenforced
Internet Explorer Settings configured in the Group policy are not applied on the Internet Explorer
Security settings of the Windows Group policy are not effective on the device
The Security settings configured in the Windows Group policy are not applied on a Windows XP SP1 or SP2 managed device
Unable to launch the Group Policy Helper tool on a Windows Vista or Windows 7 device
To configure Internet Explorer or Mozilla Firefox for a session, right-click the selected browser’s shortcut icon on the desktop, then select Run as administrator.
To configure the Internet Explorer or Mozilla Firefox browser permanently:
On the desktop, right-click the selected browser’s shortcut icon and select Properties. Click the Shortcut tab, then click the Advanced button. In the Advanced Properties dialog box, select Run as administrator.
or
In Windows Explorer, navigate to the Internet Explorer or Mozilla Firefox executable file, right-click the file, then select Properties. Click the Compatibility tab, then select Run this program as an administrator.
Restart the browser.
For more information, see TID 7013019 in the Novell Support Knowledgebase
Policy Enforcement status is not properly displayed
Unable to export Group policy content
In ZENworks Control Center, edit the policy you want to export.
Click Upload to upload the policy settings to the content server.
The Upload Confirm dialog box displays the name of the .zip file that stores the policy settings. Copy the .zip file to the required location, such as c:\.
Run the zman petf command to export the policy to an XML file, such as export.xml.
For example, zman petf \policies c:\export.xml.
Edit the export_actioncontentinfo.xml file to update the path of the .zip file.
Log-on and Log-off scripts that launch GUI applications do not functional properly on terminal server and Windows Vista devices
Create a Directive bundle.
Add a Launch Windows Executable action to launch a GUI application, such as mspaint.
Assign the bundle to a device.
Select Launch Schedule, then select the schedule type as Event.
Select the User Login or User Logout event to trigger the schedule.
Assigning an Active Directory Group policy to a user or a device might generate event logs on the device
Group policy created on a device with a specific operating system is not enforced on a device with a different operating system
However, the security settings are applied only if the operating system version of the device where the policy is applied is later than the operating system version of the device where the policy is created.
Scripts configured through Active Directory Group policy are not enforced on a device
Security settings that have not been configured in a ZENworks Group Policy are also enforced on a managed device when the ZENworks Group Policy is enforced on the managed device
secedit /configure /cfg %windir%\repair\secsetup.inf /db secsetup.sdb /verbose
The screen remains blank after logging into a terminal server
Press Ctrl+Shift+Esc to launch the Windows Task Manager.
Select File > New Task (Run)
In the Create New Task pane, enter explorer.
Click OK, to launch the Windows Explorer.
Partial failure of Group Policy unenforcement settings
Users need to log in again on a managed device, even though the setting for a forced login is not selected
For more information, see TID 7007600 in the Novell Support Knowledgebase.
Security settings are not applied randomly for Group policies at device startup
On a Windows managed device, open the Registry Editor.
Go to HKLM\Software\Novell\ZCM\GroupPolicy.
Configure the ReApplyPolicyatDeviceStartup registry key, with any string value other than Null.
If configured, the device assigned Group policy gets processed, even if the value of the Haspolicychanged parameter is False.
Group policy user settings are not always enforced for a user if there is no change in the user-assigned group policy from a previous login
On a Windows managed device, open the Registry Editor.
Go to HKLM\Software\Novell\ZCM\GroupPolicy.
Configure the ReApplyPolicyatUserPredeskTop registry key with any string value other than Null.
If you configure this registry key, logging in might be slow.
While creating group policy, Failure importing group policy setting error message appears
ZENworks plug-ins installed on a device do not show up in the Managed add-ons list in Internet Explorer 8
Group Policy helper installed using Internet Explorer might not be enabled on Firefox
When you try to launch Group Policy helper, it shows the error message, Another instance of Group Policy helper is running even if there is no running, instance of the Helper
Group Policy Helper does not work on Internet Explorer 10 in Enable Protected Mode
or
Configure the following:
Open Internet Explorer.
Go to Tools > Internet Options > Security > Local Intranet.
Set the Enable Protected Mode check box.
Ensure that the following ActiveX parameter settings under Tools > Internet Options > Security are as shown in the table below:
ActiveX Controls and Plug-ins |
Local Intranet |
Trusted Sites |
---|---|---|
Allow ActiveX Filtering |
Disable |
Disable |
Allow previously unused ActiveX controls to run without prompt |
Enable |
Enable |
Allow Scriptlets |
Enable |
Enable |
Automatic prompting for ActiveX controls |
Enable |
Enable |
Binary and script behaviours |
Enable |
Enable |
Display video and animation on a webpage that does not use external media player |
Disable |
Disable |
Download signed ActiveX controls |
Enable |
Enable |
Download unsigned ActiveX controls |
Enable |
Enable |
Only allow approved domains to use ActiveX without prompt |
Enable |
Enable |
Run ActiveX controls and plugins |
Enable |
Enable |
Script ActiveX controls marked safe for Scripting |
Enable |
Enable |
Enable Enhanced Protected Mode |
Enable |
Disable |
NOTE:Add the URLs to Trusted Sites. Ensure that you add URLs of all Primary Servers that are used to create group policies.
On a Windows 8.1 machine, logon related group policy settings does not work as expected
NOTE:Ensure that there is atleast a gap of 30 sec between log off and log on.