The assignment of application x from policy x failed. The error was : %%1274

Got an issue with some MSI’s that couldn’t be deployed with Group Policy. The following was logged into the Windows System log.

The assignment of application Adobe Flash Player 11.2 ActiveX from policy software-FlashPlayer failed.  The error was : %%1274

Log Name:      System
Source:        Application Management Group Policy
Date:          14/04/2012 22:33:20
Event ID:      101
Task Category: None
Level:         Warning
Keywords:      Classic
User:          SYSTEM
Computer:      xxx
Description:
The assignment of application Adobe Flash Player 11.2 ActiveX from policy software-FlashPlayer failed.  The error was : %%1274
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Application Management Group Policy" />
    <EventID Qualifiers="0">101</EventID>
    <Level>3</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2012-04-14T20:33:20.000000000Z" />
    <EventRecordID>8394</EventRecordID>
    <Channel>System</Channel>
    <Computer>xxx</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data>Adobe Flash Player 11.2 ActiveX</Data>
    <Data>software-FlashPlayer</Data>
    <Data>1274</Data>
  </EventData>
</Event>

image

 

Solution

After applying the Group Policy ‘”Startup policy processing wait time”, found under: Computer Configuration\Policies\Administrative Templates\System\Group Policy. I gave it a value of 30. If your GPO’ still isn’t applied you can increase the value, more info on Technet.

This is the wait time for a group policy to be applied. Typically used for computers connected on slow networks.

image

More reading about this policy:

http://sourcedaddy.com/windows-7/configuring-group-policy-processing.html

Server 2008 R2 Slow startup while applying computer settings

I’ve had some trouble with slow logon on Windows Server 2008 R2. The “Applying Computer Settings”-part takes about two minutes!

The eventlog shows two records about this issue:

The winlogon notification subscriber <GPClient> is taking long time to handle the notification event (CreateSession).

image

And:

The winlogon notification subscriber <GPClient> took xxx seconds to handle the notification event (CreateSession).

image

I stumbled upon some possible solutions. The first was updating the NIC driver. As I’m using the wireless network card, I’m only updating this one.

Updating NIC driver

Old driver:

image

New driver:

image

Drivers are updated but the logon time wasn’t reduced by a single second. Crying face

Disable Computer GPO’s

Second try was moving the computer object to a unmanaged OU (without policies applied), run gpupdate /force and rebooted some times .. but the problem still exists.

GpNetworkStartTimeoutPolicyValue

Third try: adding GpNetworkStartTimeoutPolicyValue with value 1 to the registry:

image

Maybe it’s a service or application on the computer itself .. ? I disabled some 3rd party (non Microsoft) services, but the problem remains.

Disable IPv6?

–> no luck

Disable CardReader?

–> no effect

Disable Autotuning?

netsh int tcp set global autotuninglevel=disabled

image

Didn’t solved it either, so I enabled Autotuning again:

netsh int tcp set global autotuninglevel=normal

Patches/Hotfixes?

KB2617858: Unexpectedly slow startup or logon process in Windows Server 2008 R2 or in Windows 7

KB2525332: You encounter a long logon time after you enable the "Do not automatically make redirected folders available offline" Group Policy setting in Windows 7 or in Windows Server 2008 R2

–> This hotfix fixes the slow logon issue for me! (I’m using redirected folders!)

Remote Desktop: the logon attempt failed

I was unable to save my credentials just for one server. This server was NOT a domain member, domain member servers doesn’t suffer from this issue (in my case). Remote Desktop (mstsc) keeps asking for credentials all the time, with the error message:

Your credentials did not work
Your system administrator does not allow the use of saved credentials to log on to the remote computer <serverName> cause its identity is not fully verified. Please enter new credentials.

the logon attempt failed

RDP - the logon attempt failed

Had this issue a long time, but today was the day to tackle this issue. I found the solution here:

  • Open Group Policy Editor via cmd -> gpedit.msc
  • Navigate to Local Computer Policy\Computer Configuration\Administrative Templates\System\Credentials Delegation\
  • Open Setting Allow Delegating Saved Credentials with NTLM-only Server Authentication, set it to Enabled click on button Show… and in Show Contents window add Value TERMSRV/*
  • run a gpupdate on your workstation

This solution works, but I had to make a new group policy object (GPO) in my Active Directory Server because my Windows 7 is a domain member.

Allow Delegation Saved Credentials witg NTLM-only Server AuthenticationAllow Delegation Saved Credentials witg NTLM-only Server Authentication

Allow Delegation Saved Credentials witg NTLM-only Server Authentication - Value

All credits to: http://itowns.blogspot.com/2009/01/remote-desktop-not-allowed-to-use-saved.html