• Hi, I'm using computer based,WSUS client targeting policies on our Servers OU and I've split the servers into 4 security groups (from UAT to critical) and have set the policies at the root of the Servers OU, with the filtering set on the Policy according to the respective GPO, so GPU - UAT, has the filtering for security group UAT, which has all the appropriate computer accounts for that group (and yes the computers do exist in the servers OU)

    However, regardless of whether I use a deny or accept  (obviously the preference), on the security groups in the Delegation Tab, the only way I can get the computer policy to apply, is to explicitly add the computer account, in the security filtering scope tab (that works every time). So for some reason the GPO doesn't like the security group (I have made sure I keep the "Authenticated users" referenced in the Delegation Tab as read only and tried the "Domain Computers" group as Read only) but nothing helps to recognise the group.

    +1
  • Thanks very much Michael, Yes I tried deleting the two manually created accounts (as well as the profiles) but no joy.

    Which entry are you referring to that shows that situation, please ?

    +1
  • Hi, Thanks very much for all the detailed information here. Despite trying all the various command shown here and ones recommended in other forums (like the one shown below),

    Get-AppxPackage -AllUsers | where-object {$_.name –notlike “*store*”} | Remove-AppxPackage
    Get-appxprovisionedpackage –online | where-object {$_.packagename –notlike “*store*”} | Remove-AppxProvisionedPackage -online

    which is very powerful and removes all apps (except Windows store), including Provisioned ones) for ALL users, I still cannot get passed the Sysprep process of MDT.

    I have managed to capture an earlier revision of my Gold Image  but whatever I try now I get the same error

    SYSPRP Failed to remove apps for the current user: 0x80073cf2.

    SYSPRP Exit code of RemoveAllApps thread was 0x3cf2.

    When I run the command below

    Get-AppxPackage -AllUser | Where PublisherId -eq 8wekyb3d8bbwe | Format-List -Property PackageFullName,PackageUserInformation.

    I can see that there are still a great many applications are still showing as installed but they appear to uninstallable ??

    I have even tried deleting the local accounts associated with the apps but still no joy

    PS C:windowssystem32> Get-AppxPackage -AllUser | Where PublisherId -eq 8wekyb3d8bbwe | Format-List -Property PackageFullName,PackageUserInformation
    PackageFullName : Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe
    PackageUserInformation : {S-1-5-21-4268636132-2605224068-2860058039-500 [Admin-JG]: Installed, S-1-5-21-1106070979-359232129-1136263860-9524
    [S-1-5-21-1106070979-359232129-1136263860-9524]: Installed, S-1-5-21-4268636132-2605224068-2860058039-1002 [User-bkp]: Installed,
    S-1-5-21-4268636132-2605224068-2860058039-1003 [Admin-BKP]: Installed}

    PackageFullName : Microsoft.NET.Native.Runtime.1.3_1.3.23901.0_x86__8wekyb3d8bbwe
    PackageUserInformation : {S-1-5-21-1106070979-359232129-1136263860-9524 [S-1-5-21-1106070979-359232129-1136263860-9524]: Installed,
    S-1-5-21-4268636132-2605224068-2860058039-1002 [User-bkp]: Installed, S-1-5-21-4268636132-2605224068-2860058039-1003 [Admin-BKP]: Installed}

    PackageFullName : Microsoft.NET.Native.Runtime.1.3_1.3.23901.0_x64__8wekyb3d8bbwe
    PackageUserInformation : {S-1-5-21-1106070979-359232129-1136263860-9524 [S-1-5-21-1106070979-359232129-1136263860-9524]: Installed,
    S-1-5-21-4268636132-2605224068-2860058039-1002 [User-bkp]: Installed, S-1-5-21-4268636132-2605224068-2860058039-1003 [Admin-BKP]: Installed}

    PackageFullName : Microsoft.NET.Native.Framework.1.3_1.3.23901.0_x86__8wekyb3d8bbwe
    PackageUserInformation : {S-1-5-21-1106070979-359232129-1136263860-9524 [S-1-5-21-1106070979-359232129-1136263860-9524]: Installed,
    S-1-5-21-4268636132-2605224068-2860058039-1002 [User-bkp]: Installed}

    PackageFullName : Microsoft.NET.Native.Framework.1.3_1.3.23901.0_x64__8wekyb3d8bbwe
    PackageUserInformation : {S-1-5-21-1106070979-359232129-1136263860-9524 [S-1-5-21-1106070979-359232129-1136263860-9524]: Installed,
    S-1-5-21-4268636132-2605224068-2860058039-1002 [User-bkp]: Installed}

    PackageFullName : Microsoft.VCLibs.140.00_14.0.23816.0_x86__8wekyb3d8bbwe
    PackageUserInformation : {S-1-5-21-1106070979-359232129-1136263860-9524 [S-1-5-21-1106070979-359232129-1136263860-9524]: Installed,
    S-1-5-21-4268636132-2605224068-2860058039-1002 [User-bkp]: Installed}

    PackageFullName : Microsoft.VCLibs.140.00_14.0.23816.0_x64__8wekyb3d8bbwe
    PackageUserInformation : {S-1-5-21-1106070979-359232129-1136263860-9524 [S-1-5-21-1106070979-359232129-1136263860-9524]: Installed,
    S-1-5-21-4268636132-2605224068-2860058039-1002 [User-bkp]: Installed}

    PackageFullName : Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe
    PackageUserInformation : {S-1-5-21-1106070979-359232129-1136263860-9524 [S-1-5-21-1106070979-359232129-1136263860-9524]: Installed,
    S-1-5-21-4268636132-2605224068-2860058039-1002 [User-bkp]: Installed}

    PackageFullName : Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe
    PackageUserInformation : {S-1-5-21-1106070979-359232129-1136263860-9524 [S-1-5-21-1106070979-359232129-1136263860-9524]: Installed,
    S-1-5-21-4268636132-2605224068-2860058039-1002 [User-bkp]: Installed}

    +1
  • John Philipson became a registered member 4 years, 9 months ago

    +1
© 4sysops 2006 - 2021

CONTACT US

Please ask IT administration questions in the forums. Any other messages are welcome.

Sending

Log in with your credentials

or    

Forgot your details?

Create Account