Re: WMI missing security settings

Hi JH,

Thanks for your feedback.

Yes, I can reproduce this problem with the code.

In fact, the rsop (MMC snap-in and WMI class) shows the finally result view
of the GPOs (domain/OU/Local/etc.) applying. So the problem is if the
setting (for example the Guest Account Status) are "Not configured" in
every effective GPO, it will be hidden in the rsop view. The 4 items we
have retrieved with the script
(ClearTextPassword/PasswordComplexity/RequireLogonToChangePassword/ForceLogo
ffWhenHourExpire) are shown with the script is because they are configured
by the "Default Domain Policy". An evidence is if you run this script on a
workgroup machine, it will show nothing at all.

So this behavior -- show only 4 items in a domain member machine with
default setting - is expected.

The other properties are not shown is just because of these setting are not
configured in any GPO. Can you ensure these settings are configured with
rsop and/or gpmc?

In my reproduce, if setting the "Computer Configuration -> Windows Settings
-> Security Settings -> Local Policies ->> Security Options ->
Accounts:Guest account status" to "Enabled" on Domain GPO (this setting is
not work on local GPO), the EnableGuestAccount will be shown with the
script.

Hope this helps.

Best regards,
Jeffrey Tan
Microsoft Online Community Support
=========================================
Delighting our customers is our #1 priority. We welcome your comments and
suggestions about how we can improve the support we provide to you. Please
feel free to let my manager know what you think of the level of service
provided. You can send feedback directly to my manager at:
msdnmg@xxxxxxxxxxxxxx

This posting is provided "AS IS" with no warranties, and confers no rights.

.

Relevant Pages

  • Re: Script is not working?
    ... think I should try the Comp Config Startup script? ... You should not adding the script to Comp config startup/shutdown script ... user configuration and not the computer configuration. ... you will come to know the exact error when script is executed using GPO. ...
    (microsoft.public.scripting.vbscript)
  • Re: Run login script on TS connection
    ... it means that the User Configuration is taken from any GPO ... However, I cannot seem to get the login script to execute, ...
    (microsoft.public.windows.terminal_services)
  • Re: Run batch file at shutdown?
    ... Configuration Logoff and/or Shutdown script. ... The GPO can be ...
    (microsoft.public.win2000.general)
  • Ghost start-up Script
    ... When we run rsop, we are getting a error on User Configuration for the script with file not found error. ... Found the file name as being "logonscript.bat" but when I looked for the file for all of GPO, even those that have not been applied, we are not able to locate that file any where. ... Can anyone have idea on how to troubleshoot this problem? ...
    (microsoft.public.windows.group_policy)
  • Re: Ghost start-up Script
    ... When we run rsop, we are getting a error on User Configuration for the ... script with file not found error. ... any script on any GPO. ... Also run gpupdate /force and reboot... ...
    (microsoft.public.windows.group_policy)