Top menu

Topic: «"Use Group Policy" greyed out», I can´t enable "Use Group Policy"

« Previous topic | Next topic »

Laureano Guarin


User profile

Posts: 23
Joined: 11/21/2007
I have used Enterprise Manager to enable "Use Group Policy", but it did not work, although it reported no error.
After using Enterprise Manager, I use Management Console to set the settings of one computer, then I see that "Use Group Policy" is disabled and greyed out, so I can´t enable it.
What am I doing wrong?
Posted: 11/21/2007 12:46:44

Top

Ashot Oganesyan
Chief Technology Officer
Administrator


User profile

Posts: 701
Joined: 06/08/2004
This is a qoute from the documentation:

If DeviceLock Service was not configured to work with Group Policy, the Use Group Policy parameter is disabled and unavailable for changing.

If the Use Group Policy parameter is enabled but unavailable for changing, it means that the Group Policy mode always has a priority (the Override Local Policy parameter was enabled in DeviceLock Group Policy Manager) and the Local Policy mode can’t be enabled for this DeviceLock Service.


In your case seems that GPOs don't come to computers.

With best wishes, Ashot.
Posted: 11/21/2007 12:53:45

Top

Laureano Guarin


User profile

Posts: 23
Joined: 11/21/2007
This is not true, GPOs are coming to computers, except for Devicelock policies.
Posted: 11/21/2007 18:32:40

Top

Roman Gaditskiy
Guest



What happens when you check Override Local Policy in GPO that comes to that machine. Does it enable Use Group Policy option?
Posted: 11/23/2007 13:51:13

Top

Laureano Guarin


User profile

Posts: 23
Joined: 11/21/2007
If I check Override Local Policy in GPO then it does nothing, Use Group Policy option is still disabled and Devicelock policies don´t work at all.

Anyway, that would not be a good solution, cause I need to deploy Devicelock service by means os AD (via GPOs) and I need also to set the proper settings that will allow a non-domain-administrator user to manage Devicelock via Enterprise Manager an Management Console.

We need that the person who manages Devicelock doesn't belong to any administrator group, so we need that AD automatically set his name as Devicelock administrator.
Posted: 11/23/2007 16:24:22

Top

Roman Gaditskiy
Guest



What is the version and build number of DeviceLock that you use?
Posted: 11/26/2007 12:26:24

Top

Laureano Guarin


User profile

Posts: 23
Joined: 11/21/2007
Devicelock
Version 6.2
Build 11337
-----------

What we need to do is to deploy Devicelock service via AD and send basic settings (also via AD) in order to allow some non administrator users to manage Devicelock server and change service settings via Enterprise Manager.

We need automatic devicelock service installation and basic configuration (devicelock administrator, certificates, devicelock enterprise server), so we think AD would be a good solution if it worked correctly.
Posted: 11/27/2007 12:06:08

Top

Roman Gaditskiy
Guest



Generate RSoP and see where the policy comes from.
Also, check the registry:

HKEY_LOCAL_MACHINE\SOFTWARE\SmartLine Vision\DeviceLock\GroupPolicy

What key do you find there?
Posted: 11/27/2007 12:43:39

Top

Laureano Guarin


User profile

Posts: 23
Joined: 11/21/2007
Now Group Policy is enabled.

We have applied devicelock policies in the default GPO of the Domain, and it works. Until now we were trying to apply the GPO to an OU.

But, is it possible to do what I asked you before? can we use AD and Enterprise manager altogether?
Posted: 11/27/2007 12:50:55

Top

Ekaterina Vavilova
Technical Support Engineer
Editor


User profile

Posts: 568
Joined: 06/27/2007
Yes, you can, but for this you should have parameter "Override Local Policy" in GPO disabled.
Posted: 11/27/2007 13:24:39

Top

Live Chat