Hello All,

I get the below error while updating the group policy on the user machin.

C:\Users\905288>gpupdate /force
Updating Policy...

User Policy update has completed successfully.

The following warnings were encountered during user policy processing:

Windows failed to apply the Internet Explorer Zonemapping settings. Internet Exp
lorer Zonemapping settings might have its own log file. Please click on the "Mor
e information" link.
Computer Policy update has completed successfully.

For more detailed information, review the event log or run GPRESULT /H GPReport.
html from the command line to access information about Group Policy results.

Is there a way I can find which group policy is causing this issue?

> Is there a way I can find which group policy is causing this issue?   Yes :)   dsquery * -filter "(&(objectclass=grouppolicycontainer)(gpcuserextensionnames=*4CFB60C1-FAA6-47f1-89AA-0B18730C9FD3*))" -attr displayname  

Run "gpresult /h c:\gpresult.html" and post the result.

Thanks,

Umesh.S.K

Hi,

I believe it works if you put ....)(cn=*4CFB60C1-FAA6-47f1-89AA-0B18730C9FD3*))" as well.

Regards,

Calin

> I believe it works if you put > ....)(cn=*4CFB60C1-FAA6-47f1-89AA-0B18730C9FD3*))" as well.   No. This GUID is the CSE GUID for IE Zonemapping, and it is listed in the gPCUserExtensionNames attribute as soon as the GPO contains zone mappings. It has nothing to do with the CN of the GPO or with the (AD internal) objectGUID attribute :)  

Hi,

where should I run this command?

dsquery * -filter

"(&(objectclass=grouppolicycontainer)(gpcuserextensionnames=*4CFB60C1-FAA6-47f1-89AA-0B18730C9FD3*))"

On user machin or server?

And just to update its on all the machin in the domain.

Regards,

Suman Rout

Hi All,

Thanks I found the Group policy that is causing the issue.

Now I am not sure what is causing the problem in that policy. When I try with gpresult /H gpresult.html

I see the below error:

Internet Explorer Zonemapping	Failed (no data)	2/10/2015 9:03:34 AM
Internet Explorer Zonemapping failed due to the error listed below. The parameter is incorrect. Additional information may have been logged.  Review the Policy Events tab in the console or the application event log for events between 2/10/2015 9:03:34 AM and 2/10/2015 9:03:34 AM. Is there anything to isolate this issue. Regards, Suman Rout

> Thanks I found the Group policy that is causing the issue.   And what's the content of that GPO?  

This contains the truested sites for the domain users.

And this is applied at user configuration. 

Can you remove and re-configure IE settings in your GPO?

Thanks,

Umesh.S.K

No removing and reconfiguring is not possible.

> This contains the truested sites for the domain users.   Dude, we already know that it contains site to zone assignments - you identified this GPO shortly before :)   What I'm asking for is "WHAT exact site names did you specify here"?  

There was about 116 sites added to it. some of them belongs to domain itself and some outside links.

Do you want me to give you those site details as well?

Regards,

Suman Rout