Group Policy to Remove Program May Not Be Applied to Some Users and Computers

• Microsoft Windows 2000 Datacenter Server
• Microsoft Windows 2000 Server
• Microsoft Windows 2000 Advanced Server

SYMPTOMS

When you create a policy to remove a program using the Software Installation policy, some users may still have programs available to them. Software Installation is a policy under both computer and user configurations.

CAUSE

This behavior can occur if you delete a Group Policy Object (GPO) before it is applied in either of the following situations:

• Before the computers are restarted (for computer configuration).



• Before users log off and log back on (for user configuration).

RESOLUTION

To resolve this issue, allow sufficient time for computers to be restarted or users to log on again before doing any of the following actions:

• Deleting a GPO that has Software Installation policy defined.



• Changing the ACLs on a GPO.



• Moving a user or computer to a new container.

MORE INFORMATION

To prevent this issue from occurring, you should click to select the Uninstall the applications when they fall out of the scope of management check box when you initially deploy (assign or publish the package) the group policy. This option stores the uninstall information in the user profile when the user installs the program. When the GPO is no longer applicable, the program is uninstalled.

If you do choose the Uninstall the applications when they fall out of the scope of management option on the GPO, all programs are removed. Also, if you do not choose this option when you initially create a policy to install or publish programs, you need to create and apply a policy to remove programs. Even if the policy is set to uninstall the programs, certain users and/or computers may not have the policy applied and may still have the programs available to them.

NOTE: The Uninstall the applications when they fall out of the scope of management check box is not selected by default.

To apply this option during initial deployment:

1. Click Start, point to Programs, point to Administrative Tools, and then click Active Directory Users and Computers.



2. Right-click the domain, and then click Properties.



3. On the Group Policy tab, click the default domain policy, and then click Edit. This starts Group Policy Editor with the Default Domain policy.



4. Expand User Configuration, and then click software settings.



5. Right-click Software Installation, and then click Properties.



6. On the General tab, click to select the Uninstall the applications when they fall out of the scope of management check box.

Additional query words: applications software installation deployment uninstall

Keywords : kbenv
Version : WINDOWS:2000
Platform : WINDOWS
Issue type : kbprb