Group Policy to Remove Program May Not Be Applied to Some Users and Computers (240790)


The information in this article applies to:

  • Microsoft Windows 2000 Server
  • Microsoft Windows 2000 Advanced Server
  • Microsoft Windows 2000 Datacenter Server
This article was previously published under Q240790

SYMPTOMS

When you create a policy to remove a program using the Software Installation policy, some users may still have programs available to them. Software Installation is a policy under both computer and user configurations.

CAUSE

This behavior can occur if you delete a Group Policy Object (GPO) before it is applied in either of the following situations:
  • Before the computers are restarted (for computer configuration).
  • Before users log off and log back on (for user configuration).
In either of these situations, the policy is not applied and programs are not uninstalled. If you move a user or computer to a new container (domain or OU) or change the access control lists (ACLs), the GPO may not be applied.

NOTE: The Apply and Read permissions are necessary for a GPO to be applied.

RESOLUTION

To resolve this issue, allow sufficient time for computers to be restarted or users to log on again before doing any of the following actions:
  • Deleting a GPO that has Software Installation policy defined.
  • Changing the ACLs on a GPO.
  • Moving a user or computer to a new container.

MORE INFORMATION

To prevent this issue from occurring, you should click to select the Uninstall the applications when they fall out of the scope of management check box when you initially deploy (assign or publish the package) the group policy. This option stores the uninstall information in the user profile when the user installs the program. When the GPO is no longer applicable, the program is uninstalled.

If you do choose the Uninstall the applications when they fall out of the scope of management option on the GPO, all programs are removed. Also, if you do not choose this option when you initially create a policy to install or publish programs, you need to create and apply a policy to remove programs. Even if the policy is set to uninstall the programs, certain users and/or computers may not have the policy applied and may still have the programs available to them.

NOTE: The Uninstall the applications when they fall out of the scope of management check box is not selected by default.

To apply this option during initial deployment:
  1. Click Start, point to Programs, point to Administrative Tools, and then click Active Directory Users and Computers.
  2. Right-click the domain, and then click Properties.
  3. On the Group Policy tab, click the default domain policy, and then click Edit. This starts Group Policy Editor with the Default Domain policy.
  4. Expand User Configuration, and then click software settings.
  5. Right-click Software Installation, and then click Properties.
  6. On the General tab, click to select the Uninstall the applications when they fall out of the scope of management check box.
Modification Type:MajorLast Reviewed:11/13/2003
Keywords:kbenv kbprb KB240790
©2003 Microsoft Corporation. All rights reserved.