This issue exists on a Windows 7 Pro x64 machine (Dell Inspiron E6420). I am trying to adjust a setting using
gpedit.msc, but the change never seems to take effect. By that, I mean the setting that is changed never shows up in
The exact setting is called
Prevent installation of devices not described by other policy settings which is currently reported as
Enabled in RSOP/gpresult.
Even if I set this to
not configured or
gpedit.msc, the change never shows in a
gpresult query. Not even after a
gpupdate or reboot.
However it will show the updated setting in
gpedit (not that it makes a difference at that point if it can't apply).
A few points of concern:
This error happens when running
Updating Policy... User Policy update has completed successfully. Computer Policy update has completed successfully.
The following warnings were encountered during computer policy processing:
Windows failed to apply the Scripts settings. Scripts settings might have its own log file. Please click on the "More information" link.
For more detailed information, review the event log or run GPRESULT /H GPReport.html from the command line to access information about Group Policy results.
When running an
GPresult, there is a yellow exclamation point on the
Component Status, these two errors are showing, but I haven't been able to figure out a way to clear them:
Component Status Component Name Status Last Process Time Group Policy Infrastructure Success 6/14/2013 3:46:11 PM Internet Explorer Zonemapping Success (no data) 2/6/2013 10:29:33 AM Registry Failed 6/14/2013 3:46:11 PM Registry failed due to the error listed below.
Additional information may have been logged. Review the Policy Events tab in the console or the application event log for events between 6/14/2013 3:46:10 PM and 6/14/2013 3:46:11 PM.
Scripts Failed 6/14/2013 3:46:11 PM Scripts failed due to the error listed below.
Access is denied.
Additional information may have been logged. Review the Policy Events tab in the console or the application event log for events between 6/14/2013 3:46:11 PM and 6/14/2013 3:46:11 PM.
Security Success 6/14/2013 3:46:11 PM
Things that didn't work
So far I've tried:
Resetting local group policy:
secedit /configure /cfg %windir%\inf\defltbase.inf /db defltbase.sdb /verbose
Another method I found to try and reset local group policy:
c:\Windows\System32\GroupPolicyand forced a
Copying group policy settings from a known working computer with similar config:
Deleting Registry key, but after reboot it just comes right back:
Anyone have any other ideas on how to fix this?