Saturday, June 11, 2011

Updating the GPO with "Apply once and do not reapply" option

By default, when the content of a group policy preference which is checked "Apply once do not reapply" is modified,  it also will be applied to the computers. However, if it doesn't be applied to the computers, you have to delete the registry key of the group policy preference to make it reapply to the computers.

The "Apply once and do not reapply" settings are stored at the following registry key.

Computer Configuration:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Group Policy\Client\RunOnce


User Configuration:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Group Policy\Client\RunOnce


If you want to reapply the Group Policy Preference to a computer, delete the GUID.

Tracing the GUID
You may assign a lot of Group Policy Preference with "Apply once and do not reapply". However, you don't know the GUID. I'm going to show you how to find the GUID of Group Policy Preference.

Assuming I have some services of Group Policy Preference with "Apply once and do not reapply".



1. At Domain Controller, log in as Domain Administrator.
2. Launch "Group Policy Management Console".
3. Right-click a group policy which you will modify, select "Edit".
4. Expand "Computer Configuration > Preferences > Control Panel Settings > Services".
5. At right pane, right-click the name of the service, select "All Tasks > Display Xml".


The GUID of this group policy preference shows in Internet Explorer. Then, I can delete the GUID in the registry.

Reference:
http://support.microsoft.com/kb/2284538

This posting is provided “AS IS” with no warranties, and confers no rights!

1 comment:

  1. Thank you for the information, it solved my issues with the Run Once GPO

    ReplyDelete