DetailPage-MSS-KB

Microsoft small business knowledge base

Article ID: 973072 - Last Review: July 9, 2009 - Revision: 1.0

SYMPTOMS

Consider the following scenario:
  • You are using a Windows Vista or Windows Server 2008-based computer that is part of a domain that has no Internet access and no cached Certificate Revocation List (CRL).
  • You are using the Advanced Group Policy Management (AGPM) 3.0 client component.
  • If you are running GPMC.msc, and you select Change Control, it takes a while to load a Group Policy object (GPO) that is managed by AGPM and that depends on the network configuration. For example, it may take 60 seconds or even longer to load the GPO.

CAUSE

This problem occurs because the Authenticode signature verification process (CRL retrieval) on the AGPM .NET component is for the client-side only.

WORKAROUND

To work around this problem, create an Mmc.exe.config that has the following value:
<?xml version="1.0" encoding="UTF-8" ?>
<configuration>
    <runtime>
            <generatePublisherEvidence enabled="false"/>
    </runtime>
</configuration>
Then, add this file to the C:\Windows\System32 folder.

APPLIES TO
  • Windows Server 2008 for Itanium-Based Systems
  • Windows Server 2008 Datacenter
  • Windows Server 2008 Enterprise
  • Windows Server 2008 Standard
  • Windows Vista Business
  • Windows Vista Enterprise
  • Windows Vista Home Basic
  • Windows Vista Home Premium
  • Windows Vista Ultimate
Keywords: 
kbtshoot kbexpertiseinter kbsurveynew kbprb KB973072
Share
Additional support options
Ask The Microsoft Small Business Support Community
Contact Microsoft Small Business Support
Find Microsoft Small Business Support Certified Partner
Find a Microsoft Store For In-Person Small Business Support