-
Titre
GPO settings are not applied on clients after upgrade to 5.8.2 -
Description
Password manager has been upgraded from 5.6.3 to 5.8.2. Password Manager 5.8.2 components (SPE and OPR) will be deployed in batches. The Administrative Templates used are 5.6.3, therefore GPO settings will be applied only to those client machines that have registry key "Dell" in the registry.
-
Cause
5.6.3 Administrative Templates look for registry key "Dell" in the client machine. Any client machine that does not have the registry key "Dell" will not work. For instance a new computer that has just got deployed a fresh new SPE and OPR v5.8.2. -
Résolution
If the 5.6.3 settings have been deployed to a client machine, and then the Administrative Templates are changed from 5.6.3 to 5.8.2, and the new 5.8.2 settings are then deployed to the same client machine. Then the client will have both 5.6.3 and 5.8.2 settings in the registry. So regardless of which SPE and Offline Password Reset (OPR) tool is installed the corresponding links will be visible on the desktop:
1.- Currently 5.6.3 Administrative Template is applied, so all client machines should have the SPE and OPR registry settings under the "Dell" key in the registry.
2.- Take note of the Password Manager GPO settings.
3.- Change the Administrative Templates to 5.8.2 version.
4.- Configure the Password Manager GPO settings. Use notes taken in step 2.
5.- Once the Password Manager GPO has been applied throughout all clients, now all client machines should have the 5.6.3 SPE and OPR tool but have both 5.6.3 ("Dell" key) and 5.8.2 ("One Identity" key) registry settings. SPE and OPR components should work with no issues.
6.- Upgrade the SPE and OPR components in batches on the client machines.