What are the known issues with the RSoP analysis report results for GPOs in GPA 6.0? (NETIQKB71364)

Currently, you can see the following issues with the RSoP analysis report results for GPOs

• When you configure the Computer Configuration/Windows Settings/Security Settings/Wireless Network (IEEE 802.11) Policies settings for a GPO in the GP Repository, and you run the RSoP analysis report using the What if the GP Repository version of the GPO is exported to Active Directory? scenario using this GPO, the RSoP analysis report does not correctly display the Allowed Networks and Blocked Networks subsections under the Wireless Network (IEEE 802.11) Policies > Network Filters section. (ENG247383)
• When you generate the RSoP analysis report for a GPO in Active Directory that has the Computer Configuration/Windows Settings/Security Settings/Network Access Protection settings configured, the report results correctly display all the settings. If you have another version of the same GPO in the GP Repository, and generate the RSoP analysis report using the What if the GP Repository version of the GPO is exported to Active Directory? scenario for this GPO, the RSoP analysis report displays an extra Winning GPO column under the Network Access Protection section of the report. If you compare or differentiate the two RSoP analysis reports, you can see that the report does not correctly compare the settings. (ENG248609)
• When you generate the RSoP analysis report, where at least one GPO is configured with the Computer Configuration/Windows Settings/Security Settings/Network Access Protection settings, the report results do not display the Winning GPO in the Network Access Protection Client Management Settings section. (DOC256028)
• When you configure the User Configuration/Windows Settings/Folder Redirection settings for a GPO linked to a site, domain, or OU in Active Directory, if you apply this setting to a user and run the RSoP analysis report, the RSoP analysis report does not display the Folder Redirection information in the User Configuration section. (ENG246843)
• When you configure the User Configuration/Windows Settings/Internet Explorer Maintenance/URLs/Favorites and Links settings for a GPO linked to an OU in Active Directory, and if you run the RSoP analysis report for a user and computer linked to the same OU in Active Directory, the RSoP analysis report correctly displays the Winning GPO information in the Favorites and Links section of the report. However, if you configure the same settings for a GPO in the GP Repository, and run the RSoP analysis report for the same user and computer using the What if the GP Repository version of the GPO is exported to Active Directory? scenario, the RSoP analysis report does not correctly display the Winning GPO information in the Favorites and Links section of the report. When you compare the two RSoP analysis reports, GPA does not accurately compare the results in the Favorites and Links section. (ENG250107)
• Suppose you configure the MSI package name under the User Configuration/Software Settings/Available Applications or the Computer Configuration/Software Settings/Installed Applications settings for a GPO, and you rename this GPO after importing it from Active Directory into the GP Repository. When you run the RSoP analysis report using the What if the GP Repository version of the GPO is exported to Active Directory? scenario for the renamed GPO, GPA displays the Active Directory version of the GPO and not the renamed GPO as the Winning GPO in the following sections:

  · The Installed Applications section under the Computer Configuration > Software Settings section of the RSoP analysis report.

  · The Installed Applications section under the User Configuration > Software Settings section of the RSoP analysis report.

  · The Available Applications section under the User Configuration > Software Settings section of the RSoP analysis report. (ENG251865)

• Suppose you use the GPA Console installed on a computer in the child domain to import a GPO created in the parent domain and the GPO has MSI package settings configured. GPA adds the domain user account information of the child domain in the Security section of the MSI package settings of the GPO imported from Active Directory into the GP Repository. (ENG250254)
• Suppose the GP Repository contains a GPO that has an MSI package, for either users or computers, with the Assigned Applications deployment type. If you generate the RSoP analysis report for this GPO using the What if the GP Repository version of the GPO is exported to Active Directory? scenario, the report results do not display the Cause section. However, if you generate the RSoP analysis report for a GPO, in Active Directory, having the same MSI package deployment type, the report results display the Cause section. This issue also affects the comparison or differentiation of RSoP reports. (ENG252097)
• If you import a GPO, with an MSI package, from Active Directory into the GP Repository, and then modify the name of the MSI package in the software settings of the GP Repository version of the GPO, GPA does not correctly compare the MSI package when you generate a GPO Comparison report between the Active Directory and the GP Repository versions of the GPO. (ENG250259)
• When you configure settings under the User Configuration/Windows Settings/Folder Redirection path for a GPO linked to an OU in Active Directory, and if you run the RSoP analysis report for a user and computer linked to the same OU in Active Directory, the RSoP analysis report does not display some of the Folder Redirection settings. However, if you import the same GPO into the GP Repository, and then run the RSoP analysis report, the RSoP analysis report correctly displays all the Folder Redirection settings. This issue also affects the RSoP comparison or differential report results. To avoid this issue, import the GPO into the GP Repository. (ENG254111)
• When you configure settings under the User Configuration/Windows Settings/Folder Redirection path for a GPO in the GP Repository, and if you run the RSoP analysis report using the What if the GP Repository version of the GPO is exported to Active Directory? scenario, the report results have the following issues:

  · The Folder Redirection settings are not displayed in the correct order under the different sections of the report. (ENG253977)

  · The Winning GPO is displayed under different sections of the report. (ENG254001)

           The preceding issues also affect the results of the RSoP Comparison reports and RSoP Differential reports. There is no known workaround for these issues.

• If you are using the GPA Console on a computer running Microsoft Windows Vista Service Pack 1 or Microsoft Windows Server 2008, and if you configure the Computer Configuration/Windows Settings/Policy-Based QoS settings for some GPOs, when you generate the RSoP analysis report for these GPOs, the Computer Configuration section of the RSoP analysis report does not display the QoS Policies settings in the correct link order. (ENG252572)
• If you configure the User Configuration/Windows Settings/Remote Installation Services policy settings for a GPO linked to an OU in Active Directory, when you generate the RSoP analysis report, the Resultant Set of Policies tab of the report does not display these settings. (ENG255499)
• Suppose you have two versions of the same GPO, one in the GP Repository and the other in Active Directory. If you configure different values for the Security Level settings in the User Configuration/Windows Settings/Internet Explorer Maintenance/Security/Security Zones and Content Ratings policy settings for each of these GPO versions, when you generate the RSoP analysis report using the What if the GP Repository version of the GPO is exported to Active Directory? scenario, the report results display the settings of both versions of the GPO. The settings of the GP Repository version of the GPO should overwrite the settings of the Active Directory version of the GPO, but this is not happening. If you compare this RSoP analysis report with any other RSoP analysis report, the report results display duplicate information in the Security Zones and Content Ratings subsection under the User Configuration section of the RSoP Comparison report. (ENG255644)
• If you configure the Choice Options settings under the User Configuration/Windows Settings/Remote Installation Services settings for a GPO, when you generate the RSoP analysis report using this GPO, the report results do not display these settings. (ENG240919)
• Suppose you configure the User Configuration/Windows Settings/Folder Redirection settings for a GPO in Active Directory, and then import the GPO into the GP Repository. When you generate the GPO Differential report using the Active Directory version of the GPO and the GP Repository version of the same GPO, the report results display the Folder Redirection settings in the User Configuration section of the report, even if the settings are equal. (ENG251749)
• When you configure the advanced options of any setting in the User Configuration/Windows Settings/Folder Redirection settings for a GPO in either Active Directory or the GP Repository, and you configure the basic options of the same setting in the User Configuration/Windows Settings/Folder Redirection settings for either the same or different GPO in the GP Repository or in Active Directory, GPA does not correctly compare the Folder Redirection settings if you generate a GPO Comparison report on these two GPOs. (ENG245005)
• Suppose you are using the GPA Console on a computer with Internet Explorer 7 installed. If you configure a GPO with the Security Zones and Privacy settings using the current Internet Explorer 7 configuration under the User Configuration/Windows Settings/Internet Explorer Maintenance/Security/Security Zones and Content Ratings path, when you generate the GPO Settings report, the report results display an empty page and GPA displays an error message. (ENG252787)
• Suppose you extend the Active Directory schema to support computers running Microsoft Windows Vista Service Pack 1 or if there are computers running Microsoft Windows Server 2008 in your domain. If you configure the Computer Configuration/Windows Settings/Security Settings/Wireless Network (IEEE 802.11) Policies settings or the Computer Configuration/Windows Settings/Security Settings/Wired Network (IEEE 802.3) Policies settings, when you generate the GPO Settings report, the RSoP analysis report on GPOs in Active Directory, or the comparison or differential report for two GPOs, GPA does not display the configured policies or their subsettings in these reports. This issue occurs because GPA does not support the extended Active Directory schema. (ENG244906, ENG247379, ENG245467)
• Suppose you are using the GPA Console on a computer running Microsoft Windows Vista Service Pack 1 or Microsoft Windows Server 2008 and the GP Repository is on a computer running Microsoft Windows Server 2003. If you configure all the settings under the Computer Configuration/Windows Settings/Security Settings/Network Access Protection/NAP Client Configuration/Enforcement Clients path as ENABLED for a GPO in the GP Repository, when you generate the GPO Settings report for this GPO, the report results display all the settings for Enforcement Clients as DISABLED . (ENG252466)
• If you configure the Computer Configuration/Windows Settings/Security Settings/Network List Manager Policies settings for two GPOs using GPMC, and if you are using the GPA Console on a computer running Microsoft Windows Vista Service Pack 1 or Microsoft Windows Server 2008, when you generate the GPO Comparison report for these two GPOs, the report results do not correctly display the Network List Manager settings under the Administrative Templates > Extra Registry Settings section of the report. (ENG252278)
• If you configure the Computer Configuration/Windows Settings/Security Settings/Network List Manager Policies settings for a GPO using GPMC, and if you are using the GPA Console on a computer running Microsoft Windows Vista Service Pack 1 or Microsoft Windows Server 2008, when you generate the GPO Settings report for this GPO, the report results display the settings under the Administrative Templates > Extra Registry Settings section of the report. (ENG252239)
• If you try to edit the settings under the Computer Configuration/Windows Settings/Security Settings/Network List Manager Policies path for a GPO using a GPA Console computer running Microsoft Windows Vista Service Pack 1 or Microsoft Windows Server 2008, GPA displays only the Help option on the Action menu. (ENG252187)
• Suppose you are using the GPA Console on a computer running Microsoft Windows Vista Service Pack 1 or Microsoft Windows Server 2008. If you configure the Computer Configuration/Administrative Templates/Windows Components/Network Access Protection/Allow the Network Access Protection client to support the 802.1x Enforcement Client component settings for a GPO in Active Directory, GPA is unable to generate the GPO Settings report and displays an error message. However, you are able to generate the GPO Settings report for a GPO in the GP Repository having the same settings configured. (ENG252240)
• If you are using GPA on a computer running Microsoft Windows Vista Service Pack 1, and you use GPA to generate the GPO Settings report on a GPO in either Active Directory or the GP Repository having the Computer Configuration/Windows Settings/Security Settings/Local Policies/User Rights Assignment settings configured, the GPO Settings report does not display the Create symbolic links setting. This is a known issue with GPEditor, the underlying MMC snap-in that GPA uses to configure GPO settings. For more information about this issue, contact the Microsoft technical support team. (ENG248381)
• If you are using the GPA Console on a computer running either Microsoft Windows Vista Service Pack 1 or Microsoft Windows Server 2008, and if you enable or disable the Windows Firewall: Allow logging policy available in the Computer Configuration/Network/Network Connections/Windows Firewall/Domain Profile settings for a GPO, GPA is unable to generate the GPO Settings report and displays an error message. (ENG255444)
• Using the GP Repository, when you try to configure the Computer Configuration/Windows Settings/Security Settings/Wireless Network (IEEE 802.11) Policies settings, GPA displays a warning message and does not save your changes. If you try to configure the same settings using the GP Explorer, GPA again displays the warning and does not save your changes. (ENG255207, ENG255208)
• Suppose you generate and then compare two RSoP analysis reports where the first report you compare in the RSoP comparison wizard uses the What if the GP Repository version of the GPO is exported to Active Directory? scenario and the second report does not use any what-if scenario, and the GPOs included in the reports have settings with values in the headers. If you have not configured any permissions in the settings for the GPO in the GP Repository of the second report, the RSoP Comparison report results do not display the permissions for those settings that have values in the headers. To avoid this issue, select the report that does not use any what-if scenario first in the wizard, rather than second. (ENG256984)