ITsVISTA
Information that makes life easier when it comes to installing, managing, and using Windows Vista.
Start About FAQ Blogroll Shop

ITsVISTA KB-Link: KB2553771

GetGPOList function does not return all GPOs in Windows 7, in Windows Server 2008 R2, in Windows Vista or in Windows Server 2008

Consider the following scenario:

  • You have a computer that is running one of the following operating systems:
    • Windows Vista
    • Windows 7
    • Windows Server 2008
    • Windows Server 2008 R2
  • You use the LocalSystem account to run a service on the computer.
  • The service calls the GetGPOList function to query all Group Policy objects (GPO) that are applied on a computer.
  • The Authenticated Users group is removed from the access control list (ACL) in an applied GPO.

In this scenario, the GetGPOList function does not return all applied GPOs. The function returns only GPOs that have the Authenticated Usersgroup in the ACL of the GPO.

There is a download that resolves this issue. See Hotfixes for details.
32-bit Download: Contact Microsoft
64-Bit Download: Contact Microsoft

For more information on this issue, including potential causes, workarounds, and resolutions, see: Microsoft KB Article KB2553771.

Get notified of new posts for FREE via RSS or E-mail

Subscribe to ITsVISTA!

Related Posts