The value of the "State" registry item is changed after a Group Policy preferences setting is applied in Windows Server 2008, in Windows Vista or in Windows Server 2008 R2

Symptoms

Consider the following scenario:

  • You customize the following registry value by using the Setreg.exe utility on a computer that is running Windows Vista, Windows Server 2008 or Windows Server 2008 R2:

    HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing\State

  • You use a Group Policy preferences setting to enable the Check for signatures on downloaded programs option on the computer.

In this scenario, the value of the State registry item is changed immediately after the Group Policy preferences setting is applied to the computer or after the preferences settings are refreshed. Any applications or services that rely on the value of the State registry item stops working.

Cause

This issue occurs because the Group Policy preferences driver (Gppref.dll) uses some incorrect syntax when you configure the Group Policy preferences setting. This behavior causes the setting to overwrite the value of the State registry item.

Resolution

Hotfix information

A supported hotfix is available from Microsoft. However, this hotfix is intended to correct only the problem that is described in this article. Apply this hotfix only to systems that are experiencing the problem described in this article. This hotfix might receive additional testing. Therefore, if you are not severely affected by this problem, we recommend that you wait for the next software update that contains this hotfix.

If the hotfix is available for download, there is a "Hotfix download available" section at the top of this Knowledge Base article. If this section does not appear, contact Microsoft Customer Service and Support to obtain the hotfix.

Note If additional issues occur or if any troubleshooting is required, you might have to create a separate service request. The usual support costs will apply to additional support questions and issues that do not qualify for this specific hotfix. For a complete list of Microsoft Customer Service and Support telephone numbers or to create a separate service request, visit the following Microsoft Web site:

http://support.microsoft.com/contactus/?ws=supportNote The "Hotfix download available" form displays the languages for which the hotfix is available. If you do not see your language, it is because a hotfix is not available for that language.

Prerequisites

To apply this hotfix, you must be running one of the following operating systems:

  • Windows Vista Service Pack 1 (SP1)

  • Windows Vista Service Pack 2 (SP2)

  • Windows Server 2008

  • Windows Server 2008 Service Pack 2 (SP2)

  • Windows Server 2008 R2

For more information about how to obtain a Windows Vista service pack, click the following article number to view the article in the Microsoft Knowledge Base:

935791 How to obtain the latest Windows Vista service pack

For more information about how to obtain a Windows Server 2008 service pack, click the following article number to view the article in the Microsoft Knowledge Base:

968849 How to obtain the latest service pack for Windows Server 2008

Restart requirement

You do not have to restart the computer after you apply this hotfix.

Hotfix replacement information

This hotfix does not replace a previously released hotfix.

File information

The English (United States) version of this hotfix installs files that have the attributes that are listed in the following tables. The dates and the times for these files are listed in Coordinated Universal Time (UTC). The dates and the times for these files on your local computer are displayed in your local time together with your current daylight saving time (DST) bias. Additionally, the dates and the times may change when you perform certain operations on the files.

Windows Vista and Windows Server 2008 file information notes

Important Windows Vista hotfixes and Windows Server 2008 hotfixes are included in the same packages. However, only "Windows Vista" is listed on the Hotfix Request page. To request the hotfix package that applies to one or both operating systems, select the hotfix that is listed under "Windows Vista" on the page. Always refer to the "Applies To" section in articles to determine the actual operating system that each hotfix applies to.

  • The files that apply to a specific product, SR_Level (RTM, SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table.

    Version

    Product

    SR_Level

    Service branch

    6.0.600
    1.
    22xxx

    Windows Vista and Windows Server 2008

    SP1

    LDR

    6.0.600
    2.
    22xxx

    Windows Vista and Windows Server 2008

    SP2

    LDR

  • Service Pack 1 is integrated into the release version of Windows Server 2008. Therefore, RTM milestone files apply only to Windows Vista. RTM milestone files have a 6.0.0000.xxxxx version number.

  • The MANIFEST files (.manifest) and the MUM files (.mum) that are installed for each environment are listed separately in the "Additional file information for Windows Server 2008 and for Windows Vista" section. MUM files and MANIFEST files, and the associated security catalog (.cat) files, are extremely important to maintain the state of the updated components. The security catalog files, for which the attributes are not listed, are signed with a Microsoft digital signature.

For all supported x86-based versions of Windows Server 2008 and of Windows Vista

File name

File version

File size

Date

Time

Platform

Gpme.dll

6.0.6001.22670

722,432

14-Apr-2010

17:52

x86

Gppref.dll

6.0.6001.22670

3,838,976

14-Apr-2010

17:52

x86

Gpprefbr.dll

6.0.6001.22670

691,200

14-Apr-2010

17:52

x86

Gpprefcn.dll

6.0.6001.22670

202,240

14-Apr-2010

17:52

x86

Gpregistrybrowser.dll

6.0.6001.22670

222,720

14-Apr-2010

17:52

x86

Propshts.dll

6.0.6001.22670

2,139,648

14-Apr-2010

17:52

x86

Gpme.dll

6.0.6002.22382

722,432

14-Apr-2010

19:00

x86

Gppref.dll

6.0.6002.22382

3,838,976

14-Apr-2010

19:00

x86

Gpprefbr.dll

6.0.6002.22382

691,200

14-Apr-2010

19:00

x86

Gpprefcn.dll

6.0.6002.22382

202,240

14-Apr-2010

19:00

x86

Gpregistrybrowser.dll

6.0.6002.22382

222,720

14-Apr-2010

19:00

x86

Propshts.dll

6.0.6002.22382

2,139,648

14-Apr-2010

19:00

x86

For all supported x64-based versions of Windows Server 2008 and of Windows Vista

File name

File version

File size

Date

Time

Platform

Gpme.dll

6.0.6001.22670

771,584

14-Apr-2010

18:15

x64

Gppref.dll

6.0.6001.22670

4,331,008

14-Apr-2010

18:15

x64

Gpprefbr.dll

6.0.6001.22670

956,928

14-Apr-2010

18:15

x64

Gpprefcn.dll

6.0.6001.22670

265,728

14-Apr-2010

18:15

x64

Gpregistrybrowser.dll

6.0.6001.22670

290,816

14-Apr-2010

18:15

x64

Propshts.dll

6.0.6001.22670

3,104,256

14-Apr-2010

18:15

x64

Gpme.dll

6.0.6002.22382

771,584

14-Apr-2010

18:57

x64

Gppref.dll

6.0.6002.22382

4,331,008

14-Apr-2010

18:57

x64

Gpprefbr.dll

6.0.6002.22382

956,928

14-Apr-2010

18:57

x64

Gpprefcn.dll

6.0.6002.22382

265,728

14-Apr-2010

18:57

x64

Gpregistrybrowser.dll

6.0.6002.22382

290,816

14-Apr-2010

18:57

x64

Propshts.dll

6.0.6002.22382

3,104,256

14-Apr-2010

18:57

x64

Gpme.dll

6.0.6001.22670

722,432

14-Apr-2010

17:52

x86

Gppref.dll

6.0.6001.22670

3,838,976

14-Apr-2010

17:52

x86

Gpprefbr.dll

6.0.6001.22670

691,200

14-Apr-2010

17:52

x86

Gpprefcn.dll

6.0.6001.22670

202,240

14-Apr-2010

17:52

x86

Gpregistrybrowser.dll

6.0.6001.22670

222,720

14-Apr-2010

17:52

x86

Propshts.dll

6.0.6001.22670

2,139,648

14-Apr-2010

17:52

x86

Gpme.dll

6.0.6002.22382

722,432

14-Apr-2010

19:00

x86

Gppref.dll

6.0.6002.22382

3,838,976

14-Apr-2010

19:00

x86

Gpprefbr.dll

6.0.6002.22382

691,200

14-Apr-2010

19:00

x86

Gpprefcn.dll

6.0.6002.22382

202,240

14-Apr-2010

19:00

x86

Gpregistrybrowser.dll

6.0.6002.22382

222,720

14-Apr-2010

19:00

x86

Propshts.dll

6.0.6002.22382

2,139,648

14-Apr-2010

19:00

x86

For all supported IA-64-based versions of Windows Server 2008

File name

File version

File size

Date

Time

Platform

Gpme.dll

6.0.6001.22670

1,038,848

14-Apr-2010

17:45

IA-64

Gppref.dll

6.0.6001.22670

5,992,960

14-Apr-2010

17:45

IA-64

Gpprefbr.dll

6.0.6001.22670

1,842,688

14-Apr-2010

17:45

IA-64

Gpprefcn.dll

6.0.6001.22670

480,256

14-Apr-2010

17:45

IA-64

Gpregistrybrowser.dll

6.0.6001.22670

563,200

14-Apr-2010

17:45

IA-64

Propshts.dll

6.0.6001.22670

5,739,008

14-Apr-2010

17:45

IA-64

Gpme.dll

6.0.6002.22382

1,038,848

14-Apr-2010

18:36

IA-64

Gppref.dll

6.0.6002.22382

5,992,960

14-Apr-2010

18:36

IA-64

Gpprefbr.dll

6.0.6002.22382

1,842,688

14-Apr-2010

18:36

IA-64

Gpprefcn.dll

6.0.6002.22382

480,256

14-Apr-2010

18:36

IA-64

Gpregistrybrowser.dll

6.0.6002.22382

563,200

14-Apr-2010

18:36

IA-64

Propshts.dll

6.0.6002.22382

5,739,008

14-Apr-2010

18:37

IA-64

Gpme.dll

6.0.6001.22670

722,432

14-Apr-2010

17:52

x86

Gppref.dll

6.0.6001.22670

3,838,976

14-Apr-2010

17:52

x86

Gpprefbr.dll

6.0.6001.22670

691,200

14-Apr-2010

17:52

x86

Gpprefcn.dll

6.0.6001.22670

202,240

14-Apr-2010

17:52

x86

Gpregistrybrowser.dll

6.0.6001.22670

222,720

14-Apr-2010

17:52

x86

Propshts.dll

6.0.6001.22670

2,139,648

14-Apr-2010

17:52

x86

Gpme.dll

6.0.6002.22382

722,432

14-Apr-2010

19:00

x86

Gppref.dll

6.0.6002.22382

3,838,976

14-Apr-2010

19:00

x86

Gpprefbr.dll

6.0.6002.22382

691,200

14-Apr-2010

19:00

x86

Gpprefcn.dll

6.0.6002.22382

202,240

14-Apr-2010

19:00

x86

Gpregistrybrowser.dll

6.0.6002.22382

222,720

14-Apr-2010

19:00

x86

Propshts.dll

6.0.6002.22382

2,139,648

14-Apr-2010

19:00

x86

Windows Server 2008 R2 file information notes

Important Windows 7 hotfixes and Windows Server 2008 R2 hotfixes are included in the same packages. However, hotfixes on the Hotfix Request page are listed under both operating systems. To request the hotfix package that applies to one or both operating systems, select the hotfix that is listed under "Windows 7/Windows Server 2008 R2" on the page. Always refer to the "Applies To" section in articles to determine the actual operating system that each hotfix applies to.

  • The MANIFEST files (.manifest) and the MUM files (.mum) that are installed for each environment are listed separately┬áin the "Additional file information for Windows Server 2008 R2" section. MUM and MANIFEST files, and the associated security catalog (.cat) files, are extremely important to maintain the state of the updated components. The security catalog files, for which the attributes are not listed, are signed with a Microsoft digital signature.

For all supported x64-based versions of Windows Server 2008 R2

File name

File version

File size

Date

Time

Platform

Gppref.dll

6.1.7600.20753

4,889,088

13-Jul-2010

05:46

x64

Gpprefbr.dll

6.1.7600.20753

901,632

13-Jul-2010

05:46

x64

Gpprefcn.dll

6.1.7600.20753

236,032

13-Jul-2010

05:46

x64

Propshts.dll

6.1.7600.20753

3,787,776

13-Jul-2010

05:46

x64

Gppref.dll

6.1.7600.20753

4,342,784

13-Jul-2010

05:04

x86

Gpprefbr.dll

6.1.7600.20753

627,712

13-Jul-2010

05:04

x86

Gpprefcn.dll

6.1.7600.20753

166,400

13-Jul-2010

05:04

x86

Propshts.dll

6.1.7600.20753

2,548,736

13-Jul-2010

05:04

x86

Status

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

More Information

To configure the Check for signatures on downloaded programs option by using a Group Policy preferences setting, follow these steps:

  1. Use the Group Policy Management console (GPMC) to connect to a Windows Server 2008-based domain controller or to a Windows Server 2008 R2-based domain controller

  2. Right-click a Group Policy object (GPO), and then click Edit.

  3. Locate the following item:

    User Configuration\Preferences\Control Panel Settings\Internet Settings

  4. Right-click the Internet Settings item, and then click New\Internet Explorer 5 and 6 or New\Internet Explorer 7.

  5. Click the Advanced tab.

  6. Under the Security group, locate the Check for signatures on downloaded programs option.

  7. Configure the setting, and then click the OK.

For more information about software update terminology, click the following article number to view the article in the Microsoft Knowledge Base:

824684 Description of the standard terminology that is used to describe Microsoft software updates

For more information, visit the following Microsoft Developer Network Web site:

General information about the enhanced security settings for Internet Explorer

Additional file information

Additional file information for Windows Vista and for Windows Server 2008

Additional files for all supported x86-based versions of Windows Vista and of Windows Server 2008

File name

Update.mum

File version

Not applicable

File size

2,246

Date (UTC)

15-Apr-2010

Time (UTC)

11:30

Platform

Not applicable

File name

X86_6640ac7e40a644e10ce87effd6b468af_31bf3856ad364e35_6.0.6001.22670_none_f728b61d7939bf11.manifest

File version

Not applicable

File size

721

Date (UTC)

15-Apr-2010

Time (UTC)

11:30

Platform

Not applicable

File name

X86_a66b51deb65956c90ba6f1ce380fc79e_31bf3856ad364e35_6.0.6002.22382_none_6010bd487dcce5c8.manifest

File version

Not applicable

File size

721

Date (UTC)

15-Apr-2010

Time (UTC)

11:30

Platform

Not applicable

File name

X86_microsoft-windows-g..rveradmintools-gpme_31bf3856ad364e35_6.0.6001.22670_none_b672e255ca13b185.manifest

File version

Not applicable

File size

1,362,318

Date (UTC)

15-Apr-2010

Time (UTC)

00:41

Platform

Not applicable

File name

X86_microsoft-windows-g..rveradmintools-gpme_31bf3856ad364e35_6.0.6002.22382_none_b85084e5c7405548.manifest

File version

Not applicable

File size

1,362,318

Date (UTC)

14-Apr-2010

Time (UTC)

21:32

Platform

Not applicable

Additional files for all supported x64-based versions of Windows Vista and of Windows Server 2008

File name

Amd64_3933fe7a3f5e3a57cacf7a2465b84bbc_31bf3856ad364e35_6.0.6002.22382_none_3afb269d8be0071d.manifest

File version

Not applicable

File size

1,090

Date (UTC)

15-Apr-2010

Time (UTC)

11:30

Platform

Not applicable

File name

Amd64_79c51d59f8ceca57974618b385b8fc78_31bf3856ad364e35_6.0.6001.22670_none_bbf18c37d5bbc1e7.manifest

File version

Not applicable

File size

1,090

Date (UTC)

15-Apr-2010

Time (UTC)

11:30

Platform

Not applicable

File name

Amd64_microsoft-windows-g..rveradmintools-gpme_31bf3856ad364e35_6.0.6001.22670_none_12917dd9827122bb.manifest

File version

Not applicable

File size

1,362,376

Date (UTC)

15-Apr-2010

Time (UTC)

00:45

Platform

Not applicable

File name

Amd64_microsoft-windows-g..rveradmintools-gpme_31bf3856ad364e35_6.0.6002.22382_none_146f20697f9dc67e.manifest

File version

Not applicable

File size

1,362,376

Date (UTC)

14-Apr-2010

Time (UTC)

21:18

Platform

Not applicable

File name

Update.mum

File version

Not applicable

File size

2,262

Date (UTC)

15-Apr-2010

Time (UTC)

11:30

Platform

Not applicable

File name

X86_microsoft-windows-g..rveradmintools-gpme_31bf3856ad364e35_6.0.6001.22670_none_b672e255ca13b185.manifest

File version

Not applicable

File size

1,362,318

Date (UTC)

15-Apr-2010

Time (UTC)

00:41

Platform

Not applicable

File name

X86_microsoft-windows-g..rveradmintools-gpme_31bf3856ad364e35_6.0.6002.22382_none_b85084e5c7405548.manifest

File version

Not applicable

File size

1,362,318

Date (UTC)

14-Apr-2010

Time (UTC)

21:32

Platform

Not applicable

Additional files for all supported IA-64-based versions of Windows Server 2008

File name

Ia64_2fdde8200724aafc711633e8fd988a94_31bf3856ad364e35_6.0.6002.22382_none_d0caf83a48e3ce7a.manifest

File version

Not applicable

File size

1,088

Date (UTC)

15-Apr-2010

Time (UTC)

11:30

Platform

Not applicable

File name

Ia64_ec0d5b31c74eec742e1ab7952674ab0d_31bf3856ad364e35_6.0.6001.22670_none_912cd77308fbd90c.manifest

File version

Not applicable

File size

1,088

Date (UTC)

15-Apr-2010

Time (UTC)

11:30

Platform

Not applicable

File name

Ia64_microsoft-windows-g..rveradmintools-gpme_31bf3856ad364e35_6.0.6001.22670_none_b674864bca11ba81.manifest

File version

Not applicable

File size

1,362,347

Date (UTC)

14-Apr-2010

Time (UTC)

21:32

Platform

Not applicable

File name

Ia64_microsoft-windows-g..rveradmintools-gpme_31bf3856ad364e35_6.0.6002.22382_none_b85228dbc73e5e44.manifest

File version

Not applicable

File size

1,362,347

Date (UTC)

15-Apr-2010

Time (UTC)

01:48

Platform

Not applicable

File name

Update.mum

File version

Not applicable

File size

1,579

Date (UTC)

15-Apr-2010

Time (UTC)

11:30

Platform

Not applicable

File name

X86_microsoft-windows-g..rveradmintools-gpme_31bf3856ad364e35_6.0.6001.22670_none_b672e255ca13b185.manifest

File version

Not applicable

File size

1,362,318

Date (UTC)

15-Apr-2010

Time (UTC)

00:41

Platform

Not applicable

File name

X86_microsoft-windows-g..rveradmintools-gpme_31bf3856ad364e35_6.0.6002.22382_none_b85084e5c7405548.manifest

File version

Not applicable

File size

1,362,318

Date (UTC)

14-Apr-2010

Time (UTC)

21:32

Platform

Not applicable

Additional file information for Windows Server 2008 R2

Additional files for all supported x64-based versions of Windows Server 2008 R2

File name

Amd64_925a90b6b95ac222a04b2a65be2392ca_31bf3856ad364e35_6.1.7600.20753_none_d6589ed46145c8c6.manifest

File version

Not Applicable

File size

1,090

Date (UTC)

13-Jul-2010

Time (UTC)

12:43

Platform

Not Applicable

File name

Amd64_microsoft-windows-g..rveradmintools-gpme_31bf3856ad364e35_6.1.7600.20753_none_12d1eed4e37573c6.manifest

File version

Not Applicable

File size

763,065

Date (UTC)

13-Jul-2010

Time (UTC)

12:43

Platform

Not Applicable

File name

Package_1_for_kb982606~31bf3856ad364e35~amd64~~6.1.1.0.mum

File version

Not Applicable

File size

2,305

Date (UTC)

13-Jul-2010

Time (UTC)

12:43

Platform

Not Applicable

File name

Package_for_kb982606_rtm~31bf3856ad364e35~amd64~~6.1.1.0.mum

File version

Not Applicable

File size

1,678

Date (UTC)

13-Jul-2010

Time (UTC)

12:43

Platform

Not Applicable

File name

X86_microsoft-windows-g..rveradmintools-gpme_31bf3856ad364e35_6.1.7600.20753_none_b6b353512b180290.manifest

File version

Not Applicable

File size

763,059

Date (UTC)

13-Jul-2010

Time (UTC)

12:43

Platform

Not Applicable

Need more help?

Expand your skills
Explore Training
Get new features first
Join Microsoft Insiders

Was this information helpful?

Thank you for your feedback!

Thank you for your feedback! It sounds like it might be helpful to connect you to one of our Office support agents.

×