Project

General

Profile

Actions
Copy link

Bug #10478

closed

Backlog - New Feature #9494: Windows admx policy support

[ADMX] If LocURI is empty in any ADMX policies, the policy bundle does not applied on devices

Added by Arshana Atapattu 5 months ago. Updated about 2 months ago.

Status:
Closed
Priority:
Critical
Assignee:
Thilina Sandaruwan
Start date:
02/20/2024
Due date:
03/05/2024
% Done:

100%

Estimated time:
Device Type:
Component:
Type:
Windows

Description

Environment details
530 server

Prerequisites
Created ADMX Policies

Steps
Apply the changes on the device(via policy page's "Apply changes to devices" button)

Description
If the LocURI is empty [1] in any of the policy, in the policy bundle it will fail to apply the policies on device.
on single device's "Policy Compliance" tab shows the policy is applied.
But on device the registry values are not changed/applied.

Result

example error when LocURI is not presented [2].

[1] EX:
<Policy name="DontSetAutoplayCheckbox" area="" format="" defaultValue="">
<LocURI></LocURI>
</Policy>

please note that [2]'s 1st line shows that this policy's LocURI is not found

[2]
TID: [-1234] [api/device-mgt/windows/v1.0] [2023-12-19 12:15:53,110] ERROR {io.entgra.proprietary.uem.platform.windows.api.operations.util.AdmxPayloadGenerator} - ADMX LocURI not found for policy - 'DontSetAutoplayCheckbox'
TID: [-1234] [api/device-mgt/windows/v1.0] [2023-12-19 12:15:53,112] ERROR {io.entgra.proprietary.uem.platform.windows.api.operations.util.AdmxPayloadGenerator} - ADMX LocURI not found for policy - 'AddAdminGroupToRUP'
TID: [-1234] [api/device-mgt/windows/v1.0] [2023-12-19 12:15:53,113] ERROR {io.entgra.proprietary.uem.platform.windows.api.operations.util.AdmxPayloadGenerator} - ADMX LocURI not found for policy - 'CompatibleRUPSecurity'
TID: [-1234] [api/device-mgt/windows/v1.0] [2023-12-19 12:15:53,114] ERROR {io.entgra.proprietary.uem.platform.windows.api.operations.util.AdmxPayloadGenerator} - ADMX LocURI not found for policy - 'Connect_HomeDir_ToRoot'
TID: [-1234] [api/device-mgt/windows/v1.0] [2023-12-19 12:15:53,114] ERROR {io.entgra.proprietary.uem.platform.windows.api.operations.util.AdmxPayloadGenerator} - ADMX LocURI not found for policy - 'DeleteRoamingCachedProfiles'
TID: [-1234] [api/device-mgt/windows/v1.0] [2023-12-19 12:15:53,115] ERROR {io.entgra.proprietary.uem.platform.windows.api.operations.util.AdmxPayloadGenerator} - ADMX LocURI not found for policy - 'EnableSlowLinkDetect'
TID: [-1234] [api/device-mgt/windows/v1.0] [2023-12-19 12:15:53,115] ERROR {io.entgra.proprietary.uem.platform.windows.api.operations.util.AdmxPayloadGenerator} - ADMX LocURI not found for policy - 'EnableSlowLinkUI'
TID: [-1234] [api/device-mgt/windows/v1.0] [2023-12-19 12:15:53,115] ERROR {io.entgra.proprietary.uem.platform.windows.api.operations.util.AdmxPayloadGenerator} - ADMX LocURI not found for policy - 'ExcludeDirectories'
TID: [-1234] [api/device-mgt/windows/v1.0] [2023-12-19 12:15:53,118] ERROR {io.entgra.proprietary.uem.platform.windows.api.operations.util.AdmxPayloadGenerator} - ADMX LocURI not found for policy - 'LocalProfile'
TID: [-1234] [api/device-mgt/windows/v1.0] [2023-12-19 12:15:53,118] ERROR {io.entgra.proprietary.uem.platform.windows.api.operations.util.AdmxPayloadGenerator} - ADMX LocURI not found for policy - 'ProfileDlgTimeOut'
TID: [-1234] [api/device-mgt/windows/v1.0] [2023-12-19 12:15:53,118] ERROR {io.entgra.proprietary.uem.platform.windows.api.operations.util.AdmxPayloadGenerator} - ADMX LocURI not found for policy - 'ProfileUnloadTimeout'

Files

noAutorun.png (49.1 KB) noAutorun.png [3] Arshana Atapattu, 04/04/2024 05:40 PM
Actions
Copy link
 #1

Updated by Arshana Atapattu 5 months ago

  • Assignee deleted (Arshana Atapattu)
Actions
Copy link
 #2

Updated by Oshani Silva 5 months ago

  • Project changed from product-uem 6.0.0 GA to product-uem 6.1.0 GA
  • Priority changed from High to Critical
Actions
Copy link
 #3

Updated by Navod Zoysa 3 months ago

  • Due date set to 03/05/2024
  • Assignee set to Thilina Sandaruwan
  • Start date changed from 12/19/2023 to 02/20/2024
  • Type set to Windows

It was decided to solve this issue temporarily by removing the policies that have missing LocURIs from the policy UI payload due to majority of the policies having LocURIs.

A modification needs to be added to the ADMX policy parser to ignore a given list of policies inside each ADMX file.

List of ADMX policies - https://docs.google.com/spreadsheets/d/1KhJh8dyKJndjIqcwGcXIAeWf-iaaJ9ZPSVSFVY_YA8o/edit?usp=sharing

Actions
Copy link
 #4

Updated by Viranga Gunarathna 3 months ago

  • Project changed from product-uem 6.1.0 GA to Backlog
Actions
Copy link
 #5

Updated by Viranga Gunarathna 3 months ago

  • Project changed from Backlog to product-uem 6.1.0 GA
Actions
Copy link
 #6

Updated by Thilina Sandaruwan 2 months ago

  • Status changed from New to QA
  • % Done changed from 0 to 100
Actions
Copy link
 #7

Updated by Arshana Atapattu about 2 months ago

Fix is working
policy bundle did not failed when applied on device side.

AutoPlay(NoAutorun) applied on device side [3]
used policy bundle [4]

[3]
[3]

[4] {"policyName":"ADMX Missing policy","description":"ADMX Missing policy","active":true,"compliance":"enforce","ownershipType":null,"policyType":"GENERAL","profile":{"profileName":"ADMX Missing policy","deviceType":"windows","profileFeaturesList":[{"featureCode":"ADMX_Appx","deviceType":"windows","content":[],"correctiveActions":[]},{"featureCode":"ADMX_AutoPlay","deviceType":"windows","content":[{"name":"NoAutorun","status":"ENABLED","data":[{"NoAutorun_Dropdown":"1"}]},{"name":"Autorun","status":"ENABLED","data":[{"Autorun_Box":"255"}]},{"name":"NoAutoplayfornonVolume","status":"ENABLED"}],"correctiveActions":[]},{"featureCode":"ADMX_EdgeUI","deviceType":"windows","content":[{"name":"AllowEdgeSwipe","status":"ENABLED"}],"correctiveActions":[]},{"featureCode":"ADMX_TaskBar2","deviceType":"windows","content":[{"name":"HideSCAPower","status":"NOT_CONFIGURED"},{"name":"HideSCANetwork","status":"NOT_CONFIGURED"},{"name":"HideSCAVolume","status":"NOT_CONFIGURED"},{"name":"HideSCAHealth","status":"NOT_CONFIGURED"},{"name":"TaskbarLockAll","status":"NOT_CONFIGURED"},{"name":"TaskbarNoAddRemoveToolbar","status":"NOT_CONFIGURED"},{"name":"TaskbarNoDragToolbar","status":"NOT_CONFIGURED"},{"name":"TaskbarNoNotification","status":"NOT_CONFIGURED"},{"name":"TaskbarNoRedock","status":"NOT_CONFIGURED"},{"name":"TaskbarNoResize","status":"NOT_CONFIGURED"},{"name":"TaskbarNoThumbnail","status":"NOT_CONFIGURED"},{"name":"TaskbarNoPinnedList","status":"NOT_CONFIGURED"},{"name":"NoSystraySystemPromotion","status":"NOT_CONFIGURED"},{"name":"EnableLegacyBalloonNotifications","status":"NOT_CONFIGURED"},{"name":"NoBalloonFeatureAdvertisements","status":"NOT_CONFIGURED"},{"name":"NoRemoteDestinations","status":"NOT_CONFIGURED"},{"name":"NoPinningToTaskbar","status":"ENABLED"},{"name":"NoPinningToDestinations","status":"NOT_CONFIGURED"},{"name":"TaskbarNoMultimon","status":"NOT_CONFIGURED"},{"name":"ShowWindowsStoreAppsOnTaskbar","status":"NOT_CONFIGURED"},{"name":"DisableNotificationCenter","status":"NOT_CONFIGURED"},{"name":"NoPinningStoreToTaskbar","status":"NOT_CONFIGURED"},{"name":"ConfigureTaskbarCalendar","status":"NOT_CONFIGURED"}],"correctiveActions":[]}]},"deviceGroups":[{"id":17,"name":"windows group"}],"roles":["ANY"],"users":[]}

Actions
Copy link
 #8

Updated by Arshana Atapattu about 2 months ago

  • Status changed from QA Accept to Closed

Closing due to QA accept

Actions
Copy link

Also available in: Atom PDF