The user 'xlsx' preference item in the 'USER-Microsoft-Office  Group Policy object did not apply because it failed with error code '0x80070005 Access is denied.' This error was suppressed.

I have a problem with GPP that should make a program (Libreoffce or Microsoft office) the default opening option for certain file-types (.doc, xls, .ppt etc...)

But the GPP runs in system account even tho I have set the policy to "Run in user's security context"

Hi,

Thanks for your posting.

Have you configure Common Options?

"Run in logged-on user's security context (user policy option)" changes the default user context. Normally preferences are processed using the Local System account (SYSTEM), selecting this option will make sure the user context is used instead. Network Drive and Printer Mappings ignore this setting as they always use the user context anyway.

More detail information, please check this MS article:

Configure Common Options

http://technet.microsoft.com/en-us/library/cc772371.aspx

Regards.

But the GPP runs in system account even tho I have set the policy to "Run in user's security context"

I will quote my previous comment to answer your question...

Am 27.05.2013 14:59, schrieb Ping_the_one: > > *But the GPP runs in system account even tho I have set the policy to > "Run in user's security context"* > > I will quote my previous comment to answer your question... >   That's not the root cause of your problem... Enable GPP debug logging and check the log for additional information, maybe it will reveal what exactly causes it to fail. http://blogs.technet.com/b/askds/archive/2008/07/18/enabling-group-policy-preferences-debug-logging-using-the-rsat.aspx   regards, Martin  

Okay this is the output and it said nothing to me...

I have check the XML of the GPP and it said "userContext=1" so I don't see the problem with the GPP

 Options : (   ) GPO_FLAG_DISABLE - This GPO is disabled.
2013-06-14 21:50:36.564            (   ) GPO_FLAG_FORCE - Do not override the settings in this GPO with settings in a subsequent GPO.
2013-06-14 21:50:36.564  Options (raw) : 0x00000000
2013-06-14 21:50:36.564  Version : 12386493 (0x00bd00bd)
2013-06-14 21:50:36.564  GPC : LDAP://CN=User,cn={F45570D0-E3E9-4C02-B471-11E5708EC6F8},cn=policies,cn=system,DC=domain,DC=net
2013-06-14 21:50:36.564  GPT : \\domain\SysVol\domain\Policies\{F45570D0-E3E9-4C02-B471-11E5708EC6F8}\User
2013-06-14 21:50:36.565  GPO Display Name : USER-Microsoft-Office
2013-06-14 21:50:36.565  GPO Name : {F45570D0-E3E9-4C02-B471-11E5708EC6F8}
2013-06-14 21:50:36.565             ( X ) GPLinkOrganizationalUnit - The GPO is linked to an organizational unit.
2013-06-14 21:50:36.565  lParam : 0x00000000
2013-06-14 21:50:36.565  Prev GPO : Yes
2013-06-14 21:50:36.565  Next GPO : No
2013-06-14 21:50:36.566  Extensions : [{00000000-0000-0000-0000-000000000000}{3BFAE46A-7F3A-467B-8CEA-6AA34DC71F53}{CEFFA6E2-E3BD-421B-852C-6F6A79A59BC1}][{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{D02B1F73-3407-48AE-BA88-E8213C6761F1}][{A3F3E39B-5D83-4940-B954-28315B82F0A8}{3BFAE46A-7F3A-467B-8CEA-6AA34DC71F53}][{C418DD9D-0D14-4EFB-8FBF-CFE535C8FAC7}{CEFFA6E2-E3BD-421B-852C-6F6A79A59BC1}]
2013-06-14 21:50:36.566  lParam2 : 0x2f3b82d8
2013-06-14 21:50:36.566  Link : LDAP://OU=,DC=domain,DC=net
2013-06-14 21:50:36.731  RunOnce value created [SUCCEEDED(S_FALSE)]
2013-06-14 21:50:36.735  Read GPE XML data file (2192 bytes total).
2013-06-14 21:50:36.735  RunOnce value created [SUCCEEDED(S_FALSE)]
2013-06-14 21:50:36.735  Starting filter [AND FilterRunOnce].
2013-06-14 21:50:36.767  RunOnce value created [SUCCEEDED(S_FALSE)]
2013-06-14 21:50:36.773  RunOnce value created [SUCCEEDED(S_FALSE)]
2013-06-14 21:50:36.779  RunOnce value created [SUCCEEDED(S_FALSE)]
2013-06-14 21:50:36.786  Completed get next GPO. [SUCCEEDED(S_FALSE)]
2013-06-14 21:50:36.786  Completed get GPO list. [SUCCEEDED(S_FALSE)]
2013-06-14 21:50:36.818  Leaving ProcessGroupPolicyExShortcuts() returned 0x00000000
2013-06-14 22:21:04.978  Entering ProcessGroupPolicyExShortcuts()
2013-06-14 22:21:04.978  SOFTWARE\Policies\Microsoft\Windows\Group Policy\{C418DD9D-0D14-4efb-8FBF-CFE535C8FAC7}
2013-06-14 22:21:04.978  BackgroundPriorityLevel ( 0 )
2013-06-14 22:21:04.978  DisableRSoP ( 0 )
2013-06-14 22:21:04.979  LogLevel ( 2 )
2013-06-14 22:21:04.979  Command subsystem initialized. [SUCCEEDED(S_FALSE)]
2013-06-14 22:21:04.996  Background priority set to 0 (Idle).
2013-06-14 22:21:04.996  ----- Parameters
2013-06-14 22:21:04.996  CSE GUID : {C418DD9D-0D14-4efb-8FBF-CFE535C8FAC7}
2013-06-14 22:21:04.996  Flags : (   ) GPO_INFO_FLAG_MACHINE - Apply machine policy rather than user policy
2013-06-14 22:21:04.996          ( X ) GPO_INFO_FLAG_BACKGROUND - Background refresh of policy (ok to do slow stuff)
2013-06-14 22:21:04.996          (   ) GPO_INFO_FLAG_SLOWLINK - Policy is being applied across a slow link
2013-06-14 22:21:04.996          (   ) GPO_INFO_FLAG_VERBOSE - Verbose output to the eventlog
2013-06-14 22:21:04.996          ( X ) GPO_INFO_FLAG_NOCHANGES - No changes were detected to the Group Policy Objects
2013-06-14 22:21:04.996          (   ) GPO_INFO_FLAG_LINKTRANSITION - A change in link speed was detected between previous policy application and current policy application
2013-06-14 22:21:04.996          (   ) GPO_INFO_FLAG_LOGRSOP_TRANSITION - A change in RSoP logging was detected between the application of the previous policy and the application of the current policy.
2013-06-14 22:21:04.996          (   ) GPO_INFO_FLAG_FORCED_REFRESH - Forced Refresh is being applied. redo policies.
2013-06-14 22:21:04.997          (   ) GPO_INFO_FLAG_SAFEMODE_BOOT - windows safe mode boot flag
2013-06-14 22:21:04.997          (   ) GPO_INFO_FLAG_ASYNC_FOREGROUND - Asynchronous foreground refresh of policy
2013-06-14 22:21:04.997  Token (computer or user SID): S-1-5-21-12274134-3790255997-3512378605-1640
2013-06-14 22:21:04.997  Abort Flag : Yes (0x02c88a70)
2013-06-14 22:21:04.997  HKey Root : Yes (0x00001bec)
2013-06-14 22:21:04.997  Deleted GPO List : No
2013-06-14 22:21:04.997  Changed GPO List : Yes
2013-06-14 22:21:04.997  Asynchronous Processing : Yes
2013-06-14 22:21:04.997  Status Callback : No (0x00000000)
2013-06-14 22:21:04.997  WMI namespace : No (0x00000000)
2013-06-14 22:21:04.997  RSoP Status : Yes (0x0536eee8)
2013-06-14 22:21:04.997  Planning Mode Site : (none)
2013-06-14 22:21:04.998  Computer Target : No (0x00000000)
2013-06-14 22:21:04.998  User Target : No (0x00000000)
2013-06-14 22:21:04.998  Calculated list relevance. [SUCCEEDED(S_FALSE)]

Should also mention that this issue doesn't effect all users

This debug log doesn't show the error... I think we should have a log from an affected account.

And, of course, "gpupdate /force /target:user" :-)

Hi Martin,

Thank for your patiences!

Here is another log of a user that I'm certain that it is a failure on

2013-07-04 08:06:04.800  Entering ProcessGroupPolicyExFolderOptions()
2013-07-04 08:06:04.800  SOFTWARE\Policies\Microsoft\Windows\Group Policy\{A3F3E39B-5D83-4940-B954-28315B82F0A8}
2013-07-04 08:06:04.801  BackgroundPriorityLevel ( 0 )
2013-07-04 08:06:04.801  DisableRSoP ( 0 )
2013-07-04 08:06:04.801  LogLevel ( 2 )
2013-07-04 08:06:04.801  Command subsystem initialized. [SUCCEEDED(S_FALSE)]
2013-07-04 08:06:04.818  Background priority set to 0 (Idle).
2013-07-04 08:06:04.819  ----- Parameters
2013-07-04 08:06:04.819  CSE GUID : {A3F3E39B-5D83-4940-B954-28315B82F0A8}
2013-07-04 08:06:04.819  Flags : (   ) GPO_INFO_FLAG_MACHINE - Apply machine policy rather than user policy
2013-07-04 08:06:04.819          ( X ) GPO_INFO_FLAG_BACKGROUND - Background refresh of policy (ok to do slow stuff)
2013-07-04 08:06:04.819          (   ) GPO_INFO_FLAG_SLOWLINK - Policy is being applied across a slow link
2013-07-04 08:06:04.819          (   ) GPO_INFO_FLAG_VERBOSE - Verbose output to the eventlog
2013-07-04 08:06:04.819          ( X ) GPO_INFO_FLAG_NOCHANGES - No changes were detected to the Group Policy Objects
2013-07-04 08:06:04.819          (   ) GPO_INFO_FLAG_LINKTRANSITION - A change in link speed was detected between previous policy application and current policy application
2013-07-04 08:06:04.819          (   ) GPO_INFO_FLAG_LOGRSOP_TRANSITION - A change in RSoP logging was detected between the application of the previous policy and the application of the current policy.
2013-07-04 08:06:04.819          (   ) GPO_INFO_FLAG_FORCED_REFRESH - Forced Refresh is being applied. redo policies.
2013-07-04 08:06:04.820          (   ) GPO_INFO_FLAG_SAFEMODE_BOOT - windows safe mode boot flag
2013-07-04 08:06:04.820          (   ) GPO_INFO_FLAG_ASYNC_FOREGROUND - Asynchronous foreground refresh of policy
2013-07-04 08:06:04.820  Abort Flag : Yes (0x003967d0)
2013-07-04 08:06:04.820  HKey Root : Yes (0x000015e0)
2013-07-04 08:06:04.820  Deleted GPO List : No
2013-07-04 08:06:04.820  Changed GPO List : Yes
2013-07-04 08:06:04.820  Asynchronous Processing : Yes
2013-07-04 08:06:04.820  Status Callback : No (0x00000000)
2013-07-04 08:06:04.821  WMI namespace : No (0x00000000)
2013-07-04 08:06:04.821  RSoP Status : Yes (0x068ced48)
2013-07-04 08:06:04.821  Planning Mode Site : (none)
2013-07-04 08:06:04.821  Computer Target : No (0x00000000)
2013-07-04 08:06:04.821  User Target : No (0x00000000)
2013-07-04 08:06:04.821  Calculated list relevance. [SUCCEEDED(S_FALSE)]
2013-07-04 08:06:04.822  ----- Changed - 0
2013-07-04 08:06:04.822  Options : (   ) GPO_FLAG_DISABLE - This GPO is disabled.
2013-07-04 08:06:04.822            (   ) GPO_FLAG_FORCE - Do not override the settings in this GPO with settings in a subsequent GPO.
2013-07-04 08:06:04.822  Options (raw) : 0x00000000
2013-07-04 08:06:04.822  Version : 2293795 (0x00230023)
2013-07-04 08:06:04.822  GPC : LDAP://CN=User,cn={A357D87E-6F4D-4762-9F9A-6B5D3BE436F7},cn=policies,cn=system,DC=domain,DC=net
2013-07-04 08:06:04.822  GPT : \\domain.net\sysvol\domain.net\Policies\{A357D87E-6F4D-4762-9F9A-6B5D3BE436F7}\User
2013-07-04 08:06:04.822  GPO Name : {A357D87E-6F4D-4762-9F9A-6B5D3BE436F7}
2013-07-04 08:06:04.822  GPO Link : (   ) GPLinkUnknown - No link information is available.
2013-07-04 08:06:04.823             (   ) GPLinkMachine - The GPO is linked to a computer (local or remote).
2013-07-04 08:06:04.823             (   ) GPLinkSite - The GPO is linked to a site.
2013-07-04 08:06:04.823             (   ) GPLinkDomain - The GPO is linked to a domain.
2013-07-04 08:06:04.823             ( X ) GPLinkOrganizationalUnit - The GPO is linked to an organizational unit.
2013-07-04 08:06:04.823             (   ) GP Link Error
2013-07-04 08:06:04.823  lParam : 0x00000000
2013-07-04 08:06:04.823  Prev GPO : No
2013-07-04 08:06:04.823  Next GPO : Yes
2013-07-04 08:06:04.823  Extensions : [{00000000-0000-0000-0000-000000000000}{2EA1A81B-48E5-45E9-8BB7-A6E3AC170006}{3BFAE46A-7F3A-467B-8CEA-6AA34DC71F53}{BEE07A6A-EC9F-4659-B8C9-0B1937907C83}{CF848D48-888D-4F45-B530-6A201E62A605}][{25537BA6-77A8-11D2-9B6C-0000F8080861}{88E729D6-BDC1-11D1-BD2A-00C04FB9603F}][{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{D02B1F73-3407-48AE-BA88-E8213C6761F1}][{5794DAFD-BE60-433F-88A2-1A31939AC01F}{2EA1A81B-48E5-45E9-8BB7-A6E3AC170006}][{A2E30F80-D7DE-11D2-BBDE-00C04F86AE3B}{FC715823-C5FB-11D1-9EEF-00A0C90347FF}][{A3F3E39B-5D83-4940-B954-28315B82F0A8}{3BFAE46A-7F3A-467B-8CEA-6AA34DC71F53}][{B087BE9D-ED37-454F-AF9C-04291E351182}{BEE07A6A-EC9F-4659-B8C9-0B1937907C83}][{E4F48E54-F38D-4884-BFB9-D4D2E5729C18}{CF848D48-888D-4F45-B530-6A201E62A605}]
2013-07-04 08:06:04.823  lParam2 : 0x33d71cd8
2013-07-04 08:06:04.824  Link : LDAP://OU=ou,DC=domain,DC=net
2013-07-04 08:06:04.827  RunOnce value created [SUCCEEDED(S_FALSE)]
2013-07-04 08:06:04.830  Read GPE XML data file (1124 bytes total).
2013-07-04 08:06:04.831  RunOnce value created [SUCCEEDED(S_FALSE)]
2013-07-04 08:06:04.831  Starting filter [AND FilterCollection].
2013-07-04 08:06:04.831  Starting filter [AND NOT FilterOs].
2013-07-04 08:06:04.832  Starting filter [AND NOT FilterOs].
2013-07-04 08:06:04.832  Starting filter [AND NOT FilterOs].
2013-07-04 08:06:04.833  RunOnce value created [SUCCEEDED(S_FALSE)]
2013-07-04 08:06:04.841  ----- Changed - 1
2013-07-04 08:06:04.841  Options : (   ) GPO_FLAG_DISABLE - This GPO is disabled.
2013-07-04 08:06:04.841            (   ) GPO_FLAG_FORCE - Do not override the settings in this GPO with settings in a subsequent GPO.
2013-07-04 08:06:04.842  Options (raw) : 0x00000000
2013-07-04 08:06:04.842  Version : 12517567 (0x00bf00bf)
2013-07-04 08:06:04.842  GPC : LDAP://CN=User,cn={F45570D0-E3E9-4C02-B471-11E5708EC6F8},cn=policies,cn=system,DC=domain,DC=net
2013-07-04 08:06:04.842  GPT : \\domain.net\SysVol\domain.net\Policies\{F45570D0-E3E9-4C02-B471-11E5708EC6F8}\User
2013-07-04 08:06:04.842  GPO Display Name : USER-Microsoft-Office
2013-07-04 08:06:04.842  GPO Name : {F45570D0-E3E9-4C02-B471-11E5708EC6F8}
2013-07-04 08:06:04.842  GPO Link : (   ) GPLinkUnknown - No link information is available.
2013-07-04 08:06:04.842             (   ) GPLinkMachine - The GPO is linked to a computer (local or remote).
2013-07-04 08:06:04.842             (   ) GPLinkSite - The GPO is linked to a site.
2013-07-04 08:06:04.842             (   ) GPLinkDomain - The GPO is linked to a domain.
2013-07-04 08:06:04.843             ( X ) GPLinkOrganizationalUnit - The GPO is linked to an organizational unit.
2013-07-04 08:06:04.843             (   ) GP Link Error
2013-07-04 08:06:04.843  lParam : 0x00000000
2013-07-04 08:06:04.843  Prev GPO : Yes
2013-07-04 08:06:04.843  Next GPO : No
2013-07-04 08:06:04.843  Extensions : [{00000000-0000-0000-0000-000000000000}{3BFAE46A-7F3A-467B-8CEA-6AA34DC71F53}{CEFFA6E2-E3BD-421B-852C-6F6A79A59BC1}][{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{D02B1F73-3407-48AE-BA88-E8213C6761F1}][{A3F3E39B-5D83-4940-B954-28315B82F0A8}{3BFAE46A-7F3A-467B-8CEA-6AA34DC71F53}][{C418DD9D-0D14-4EFB-8FBF-CFE535C8FAC7}{CEFFA6E2-E3BD-421B-852C-6F6A79A59BC1}]
2013-07-04 08:06:04.843  lParam2 : 0x382b2bc8
2013-07-04 08:06:04.843  Link : LDAP://OU=ou,DC=domain,DC=net
2013-07-04 08:06:04.847  RunOnce value created [SUCCEEDED(S_FALSE)]
2013-07-04 08:06:04.851  Read GPE XML data file (4376 bytes total).
2013-07-04 08:06:04.852  RunOnce value created [SUCCEEDED(S_FALSE)]
2013-07-04 08:06:04.853  RunOnce value created [SUCCEEDED(S_FALSE)]
2013-07-04 08:06:04.857  RunOnce value created [SUCCEEDED(S_FALSE)]
2013-07-04 08:06:04.861  RunOnce value created [SUCCEEDED(S_FALSE)]
2013-07-04 08:06:04.864  RunOnce value created [SUCCEEDED(S_FALSE)]
2013-07-04 08:06:04.868  RunOnce value created [SUCCEEDED(S_FALSE)]
2013-07-04 08:06:04.872  RunOnce value created [SUCCEEDED(S_FALSE)]
2013-07-04 08:06:04.876  RunOnce value created [SUCCEEDED(S_FALSE)]
2013-07-04 08:06:04.880  RunOnce value created [SUCCEEDED(S_FALSE)]
2013-07-04 08:06:04.884  Properties handled. [ hr = 0x80070005 "Access is denied." ]
2013-07-04 08:06:04.887  Error suppressed. [ hr = 0x80070005 "Access is denied." ]
2013-07-04 08:06:04.888  RunOnce value created [SUCCEEDED(S_FALSE)]
2013-07-04 08:06:04.892  RunOnce value created [SUCCEEDED(S_FALSE)]
2013-07-04 08:06:04.896  RunOnce value created [SUCCEEDED(S_FALSE)]
2013-07-04 08:06:04.899  RunOnce value created [SUCCEEDED(S_FALSE)]
2013-07-04 08:06:04.909  Completed get next GPO. [SUCCEEDED(S_FALSE)]
2013-07-04 08:06:04.909  Completed get GPO list. [SUCCEEDED(S_FALSE)]
2013-07-04 08:06:04.927  Leaving ProcessGroupPolicyExFolderOptions() returned 0x00000000