Group Policy Preferences Troubleshooting and Debug


Group Policy Preferences is a wonderful addition and extremely valuable piece of Group Policy.  They are available in Windows XP (with an update) and later by default.

In your Computer Configuration group policy, browse to Administrative Templates, System, Group Policy, Logging and Tracing and configure the necessary policies.  I have found it the tracing overhead to be minimal, so we enable it on all preferences we use.

  

Be sure when you ‘enable’ the policy to ensure that tracing is set to ‘On’

By default, the path will log to %COMMONAPPDATA%\GroupPolicy\Preference\Trace\User.log or Computer.Log.  I recommend splitting these logs into individual logs, such as %COMMONAPPDATA%\GroupPolicy\Preference\Trace\User-Drivemaps.log

%COMMONAPPDATA% refers to all users “Application Data”.  On Windows XP, this is C:\documents and settings\all users\application data or on Windows Vista/7/8, C:\ProgramData\

 

You’ll see a ton of information in these logs, but don’t be afraid.  It is extremely helpful once you begin to understand what is happening.   When you get into more advanced functionality like targeting, it is extremely helpful to analyze the processing chain.

2012-08-15 13:30:07.168 [pid=0x3e4,tid=0x33c] {935D1B74-9CB8-4e3c-9914-7DD559B7A417}

2012-08-15 13:30:07.184 [pid=0x3e4,tid=0x33c] Starting class – U:.

2012-08-15 13:30:07.184 [pid=0x3e4,tid=0x33c] Starting filter [AND FilterCollection].

2012-08-15 13:30:07.184 [pid=0x3e4,tid=0x33c] Adding child elements to RSOP.

2012-08-15 13:30:07.184 [pid=0x3e4,tid=0x33c] Starting filter [AND FilterCollection].

2012-08-15 13:30:07.184 [pid=0x3e4,tid=0x33c] Adding child elements to RSOP.

2012-08-15 13:30:07.184 [pid=0x3e4,tid=0x33c] Starting filter [AND FilterGroup].

2012-08-15 13:30:07.184 [pid=0x3e4,tid=0x33c] Adding child elements to RSOP.

2012-08-15 13:30:07.184 [pid=0x3e4,tid=0x33c] Set user security context.

2012-08-15 13:30:07.184 [pid=0x3e4,tid=0x33c] Set system security context.

2012-08-15 13:30:07.184 [pid=0x3e4,tid=0x33c] Failed filter [FilterGroup].

2012-08-15 13:30:07.184 [pid=0x3e4,tid=0x33c] Starting filter [AND NOT FilterGroup].

2012-08-15 13:30:07.184 [pid=0x3e4,tid=0x33c] Adding child elements to RSOP.

2012-08-15 13:30:07.184 [pid=0x3e4,tid=0x33c] Set user security context.

2012-08-15 13:30:07.200 [pid=0x3e4,tid=0x33c] Set system security context.

2012-08-15 13:30:07.200 [pid=0x3e4,tid=0x33c] Passed filter [FilterGroup].

2012-08-15 13:30:07.200 [pid=0x3e4,tid=0x33c] Failed filter [FilterCollection].

2012-08-15 13:30:07.200 [pid=0x3e4,tid=0x33c] Starting filter [OR FilterGroup].

2012-08-15 13:30:07.200 [pid=0x3e4,tid=0x33c] Adding child elements to RSOP.

2012-08-15 13:30:07.200 [pid=0x3e4,tid=0x33c] Set user security context.

2012-08-15 13:30:07.200 [pid=0x3e4,tid=0x33c] Set system security context.

2012-08-15 13:30:07.200 [pid=0x3e4,tid=0x33c] Failed filter [FilterGroup].

2012-08-15 13:30:07.200 [pid=0x3e4,tid=0x33c] Failed filter [FilterCollection].

2012-08-15 13:30:07.200 [pid=0x3e4,tid=0x33c] Starting filter [AND FilterCollection].

2012-08-15 13:30:07.200 [pid=0x3e4,tid=0x33c] Adding child elements to RSOP.

2012-08-15 13:30:07.200 [pid=0x3e4,tid=0x33c] Starting filter [AND NOT FilterGroup].

2012-08-15 13:30:07.200 [pid=0x3e4,tid=0x33c] Adding child elements to RSOP.

2012-08-15 13:30:07.215 [pid=0x3e4,tid=0x33c] Set user security context.

2012-08-15 13:30:07.215 [pid=0x3e4,tid=0x33c] Set system security context.

2012-08-15 13:30:07.215 [pid=0x3e4,tid=0x33c] Passed filter [FilterGroup].

2012-08-15 13:30:07.215 [pid=0x3e4,tid=0x33c] Starting filter [AND NOT FilterGroup].

2012-08-15 13:30:07.215 [pid=0x3e4,tid=0x33c] Adding child elements to RSOP.

2012-08-15 13:30:07.215 [pid=0x3e4,tid=0x33c] Set user security context.

2012-08-15 13:30:07.215 [pid=0x3e4,tid=0x33c] Set system security context.

2012-08-15 13:30:07.215 [pid=0x3e4,tid=0x33c] Failed filter [FilterGroup].

2012-08-15 13:30:07.215 [pid=0x3e4,tid=0x33c] Failed filter [FilterCollection].

2012-08-15 13:30:07.215 [pid=0x3e4,tid=0x33c] Filters not passed.

2012-08-15 13:30:07.215 [pid=0x3e4,tid=0x33c] Completed class – U:.

Leave a Comment

Your email address will not be published. Required fields are marked *

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code lang=""> <del datetime=""> <em> <i> <q cite=""> <strike> <strong> <pre lang="" extra="">