What are the issues addressed in GPA Hotfix 72932? (NETIQKB72932)

What are the issues addressed in GPA Hotfix 72932?

What is the purpose of GPA Hotfix 72932?
The GPA Console Does Not Rename Live GPOs Previously Renamed and Exported from the GP Repository into Active Directory.

Incorrect Mapping by the SetDefaultADLinkMap Script to Target Domain AD Links When the AD Links Do Not Exist on the Target Domain.

The GPA Console Does Not Export GPOs with Export Only Accounts Configured on Trusted Domains.

Public Key and Auto Enrollment Policies Set on Windows Server 2008 Console Computers Do Not Apply on Client Computers.

The Event Log Displays Incorrect Log Entries during Certain GP Repository Operations.

GPO Exports Fail if the GPO Includes Links to Invalid or Deleted AD Containers.

Problem after Installing Hotfix 72797 with Exporting GPOs to Trusted Domains After Changing EOA Account Credentials.

Administrative (ADMX) Template Policies on GPOs Do Not Apply to Client Computers.

Hotfix 72932 addresses the following issues:

Resolves an Issue Where the GPA Console Does Not Rename Live GPOs Previously Renamed and Exported from the GP Repository into Active Directory
Resolves Incorrect Mapping by the SetDefaultADLinkMap Script to Target Domain AD Links When the AD Links Do Not Exist on the Target Domain
Resolves an Issue Where the GPA Console Does Not Export GPOs with Export Only Accounts Configured on Trusted Domains
Resolves an Issue Where Public Key and Auto Enrollment Policies Set on Windows Server 2008 Console Computers Do Not Apply on Client Computers
Resolves an Issue Where the Event Log Displays Incorrect Log Entries during Certain GP Repository Operations
Resolves an Issue Where GPO Exports Fail if the GPO Includes Links to Invalid or Deleted AD Containers
Resolves an Issue After Installing Hotfix 72797 with Exporting GPOs to Trusted Domains After Changing EOA Account Credentials
Resolves an Issue Where Administrative (ADMX) Template Policies on GPOs Do Not Apply to Client Computers
Resolves an Issue Where the GPA Console Does Not Rename Live GPOs Previously Renamed and Exported from the GP Repository into Active Directory
This hotfix resolves an issue with renaming live GPOs after exporting to Active Directory (AD). Before you apply this hotfix, when you rename a repository GPO and then export it into AD, the new name does not update in AD if the GPO already existed in AD prior to the export. After you apply this hotfix, if the renamed repository GPO exists in AD, after you export the GPO, the GPA Console updates the GPO name in AD to match the repository GPO name. (ENG302517)

Resolves Incorrect Mapping by the SetDefaultADLinkMap Script to Target Domain AD Links When the AD Links Do Not Exist on the Target Domain
This hotfix resolves an issue of incorrect mapping to target domains. Before you apply this hotfix, if you use the SetDefaultADLinkMap scripting method on a target domain, and if one of the OUs was removed or renamed, the SetDefaultADLinkMap script maps to the domain container in the target domain. After you apply this hotfix, when you run the SetDefaultADLinkMap script, if the OU was previously removed or renamed, the SetDefaultADLinkMap script sets the target OU as empty and does not map the OU to the domain container.

Additionally, before you apply this hotfix, when migrating a GPO in the GPA Console from one domain to another, if target domain mapping links do not exist, the script still migrates the incorrect GPO mapping entries. After you apply the hotfix, when migrating a GPO, the script checks the mapping entries of the target domain prior to migration. The script skips any mapping settings that are invalid. (ENG302507)

Resolves an Issue Where the GPA Console Does Not Export GPOs with Export Only Accounts Configured on Trusted Domains
This hotfix resolves an issue where the GPA Console does not export GPOs with Export Only Accounts (EOAs) configured on a trusted domain. Before you apply this hotfix, when you export a GPO with an EOA configured to a trusted domain, the GPO fails to export and the GPA Console generates an error specifying insufficient modify rights in GPO security filters. After you apply this hotfix, you can export a GPO with an EOA to a trusted domain without any permission errors. (ENG300947, ENG301459)

Resolves an Issue Where Public Key and Auto Enrollment Policies Set on Windows Server 2008 Console Computers Do Not Apply on Client Computers
This hotfix resolves an issue with Public Key and Auto Enrollment policies on client computers and logon accounts. Before you apply this hotfix, when you use the GPA Console running on a Windows Server 2008 computer to configure Public Key and Auto Enrollment policies for a GPO, these policies do not apply on client computers and logon accounts. After you apply this hotfix, when you configure the Public Key and Auto Enrollment policies using the GPA Console running on a Windows Server 2008 computer, these policies apply on client computers and logon accounts successfully. (ENG301382)

Resolves an Issue Where the Event Log Displays Incorrect Log Entries during Certain GP Repository Operations
This hotfix resolves an issue where the GPA Console displays unnecessary information in event log entries during certain GP Repository operations. Before you apply the hotfix, when you check in, check out, approve, unapprove, export, or import a GPO in the GP Repository, the GPA Console logs the operations in the event log. However, additional unnecessary error information displays in the Description section of the event log. After you apply the hotfix, the event log displays only information about GP Repository operations. (ENG300963)

Resolves an Issue Where GPO Exports Fail if the GPO Includes Links to Invalid or Deleted AD Containers
This hotfix resolves an issue where a GPO export fails if the GPO includes links to any invalid or deleted Active Directory (AD) containers. Additionally, you could not remove any links to invalid or deleted AD containers while editing a GPO in the GP Repository. After you apply the hotfix, if you export a GPO that has links to invalid or deleted AD containers, the export succeeds but does not create the link to the AD containers and notifies you. Also, you can now remove invalid GPO link paths to AD containers while editing a GPO through the GPO Properties window in the GP Repository. (ENG306757)

Resolves an Issue After Installing Hotfix 72797 with Exporting GPOs to Trusted Domains After Changing EOA Account Credentials
This hotfix resolves an issue with exporting GPOs when you change the EOA credentials after installing Hotfix 72797. This issue occurs on computers running Windows Server 2008 or Windows Server 2008 R2 and where the GPA Server is joined to a domain with a DC running Windows Server 2008 or Windows Server 2008 R2. In this situation, the GPO export to trusted domains using the EOA account fails due to an Inter-Process Communication (IPC) connection error with the target DC. After you apply the hotfix, GPOs export in this scenario complete successfully without any IPC errors. (ENG304990)

Resolves an Issue Where Administrative Template (ADMX) Policies on GPOs Do Not Apply to Client Computers
This hotfix resolves an issue where if you use GPA to set Window Settings policies before you set Administrative Templates (ADMX) policies in the same GPO on computers running Windows Vista SP1 or later, then the GPO configured by GPA does not apply the ADMX policies on client computers and does not display policy changes for ADMX policies on any diagnostic reports you generate for client computers. After you apply this hotfix, if you configure both types of policies (Window Settings and ADMX Templates) in the same GPO, the GPO configured by GPA applies the Windows Setting and ADMX policies correctly on client computers and displays the policy changes on any diagnostic reports you generate for client computers. (ENG305246, ENG303909)

Note: This hotfix requires NetIQ Group Policy Administrator 6.2.

Installing This Hotfix

Complete the following steps to install this hotfix on each GPA Console and GPA Server computer.

To install this hotfix:

1. Log on to the GPA Console or GPA Server computer with a local administrator account.
2. Close all GPA consoles and programs that are running.
3. Run the GPA62000_Hotfix72932.exe file.
4. Follow the instructions in the wizard until you have finished installing the hotfix.
5. Repeat Steps 1 through 4 on each GPA Console computer and the GPA Server computer.
   

This hotfix modifies the following files (Build Number 398) in the GPA Installation Path\Bin folder:

• faGPRInterface.dll
• NqGPME.dll (GPA Console Only)
• faDBContainerInterface.dll
• faGPRMessageDll.dll
• faGPR.dll
  

Formerly known as NETIQKB72932