Re: XP SP2 and Group Policy
From: Russ (Russ.Cooper_at_RC.ON.CA)
Date: Tue, 17 Aug 2004 11:09:19 -0400 To: NTBUGTRAQ@LISTSERV.NTBUGTRAQ.COM
Ok, this one has me really confused, and somewhat miffed at Microsoft. I've tried to call them on it, but that didn't work out very well.
Cenk Kulacoglu reported that MS acknowledged a problem with the new GPO elements for XP SP2 when loaded for editing on systems other than XP SP2 according to KB 842933. He provided a link to the download site for the fix (see the NTBugtraq archive.)
1. The KB states the problem exists with Windows 2000, XP (pre-SP2), and Windows Server 2003. However, the fix page says the fix is only for Windows 2000. The installer seems to only detect Windows 2000 also.
2. I called Microsoft Support yesterday about this fix (since, after all, the KB still says the only way to get this fix is by calling them), and they politely reminded me that it is a *Hotfix*. That means it shouldn't be run on a production system (which they said), and should be thoroughly tested.
So, a couple of issues come to mind;
a) What the heck is going on when the only way to implement the new GPO features of XP SP2 (which are many) is via a *Hotfix* that's not supposed to be run in a production environment!!! Heck, there are new IE settings which used to be set via the IE Administrators Kit which can now only be edited via GPO! This hotfix won't be officially supported until Windows 2000 SP5 I was told by MS Support!
b) Does Windows Server 2003 and XP (pre-SP2) have a problem editing the new inetres.adm or not? If it does, then why do I need to copy the nearly 6MB SP3res.dll to those machines?
Reports about whether you've had any problems with this hotfix, or if you've installed it on non-Windows 2000 systems, would be appreciated. Getting MS to officially support this now (and make it available to WU/SUS/AU) would be better.
Russ - NTBugtraq Editor
NTBugtraq Editor's Note:
Want to reply to the person who sent this message? This list is configured such that just hitting reply is going to result in the message coming to the list, not to the individual who sent the message. This was done to help reduce the number of Out of Office messages posters received. So if you want to send a reply just to the poster, you'll have to copy their email address out of the message and place it in your TO: field.