Knowledge Base for Windows

Description/Problem:
The new server installed with Microsoft Windows Server 2008 (Service Pack 2) was not able execute some applications. Small window informed us that “Error messages: A referral was returned from the server.” After several minutes of investigation we have identified that system has problem to execute unsigned applications. It happens if user try to execute unsigned application that requires elevation and policy called “User Account Control: Only elevate executables that are signed and validated” is enabled. To void this error message from system is necessary to make a change in Group Policy settings or simply modify one value in system registry.

Solution:

• Execute Command Line (CMD) as Administrator
• Execute RegEdit from Command Line
• Modify registry key and set value from “1″ to “0″

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System
"ValidateAdminCodeSignatures"=dword:00000000

Description/Problem:
Short information about new Group Policy preferences in Windows Server 2008 and how to enable down-level computers to process these new items. Group Policy preferences are made up of more than 20 new Group Policy client-side extensions. New preferences are included in the Group Policy Management Editor window of the Group Policy Management Console.

Solution:
KB943729

• Group Policy Object verification tool
  “gpotool.exe /checkacl /verbose”
• Resultant Set of Policy (RSoP)
  “gpresult /scope computer”
• Refresh Group Policy
  “gpupdate /force”