Share via

Problems with Power Options Group Policy

Anonymous
2025-04-15T14:37:54+00:00

When removing a Power Options Preference settings, PCs hang on 'Applying software installation' policy. In event viewer, there are errors Completed Security Extension Processing in 3031 milliseconds with error code 1252.

This relates to security processing not being completed or the policy trying to apply settings, but the GPO is no longer there.

I have researched online, and forums have suggested to clear the Group Policy History files, but there aren't any, and I am at a bit of a loss.

Has anyone experienced this issue before?

Any suggestions or advice would be highly appreciated.

Kind regards,
Jack

Windows for home | Windows 10 | Settings

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments No comments

30 answers

Sort by: Most helpful
  1. Anonymous
    2025-04-17T13:01:14+00:00

    I have just checked, but there isn't an upgrade under the Upgrades tab. It's empty.

    When we removed the upgrade, I think we selected allow users to unistall the software, or something similar?

    Is there another way to remove this from the XML, perhaps through ADSI Edit?

    Thanks,

    Jack

    Was this answer helpful?

    0 comments No comments
  2. Emmanuel Santana 39,215 Reputation points Independent Advisor
    2025-04-17T12:50:08+00:00

    Hmmm that's interesting, I think that the value is being rehydrated by the current GPO’s MSI deployment. This means the new MSI deployment in the existing GPO is marked as an upgrade of the old one, and the superseded product ID is embedded in the policy. Even if the old GPO is gone, its Product GUID is still referenced in the new one under the <Deployment><SupersededIDs> XML block.

    1. Open GPMC and go to the current Software Installation GPO.
    2. Expand Computer Configuration > Policies > Software Settings > Software Installation.
    3. Right-click the MSI entry → Properties → Upgrades tab.
    4. You’ll see the old product listed as superseded.
    5. Remove the upgrade rule to delete the SupersededID from the policy.
    6. Close GPMC and allow SYSVOL to replicate. Run gpupdate /force on the client.

    Finally, delete the SupersededIDs value on the client one last time.

    Was this answer helpful?

    0 comments No comments
  3. Anonymous
    2025-04-17T12:45:10+00:00

    Hey,

    Just did this on one machine as a test, removed the Superceeded value, and run gpupdate/force and reboot, the value has come back after a reboot!

    Thanks,

    Jack

    Was this answer helpful?

    0 comments No comments
  4. Emmanuel Santana 39,215 Reputation points Independent Advisor
    2025-04-17T11:30:33+00:00

    If you only have a few machines, you can manually delete the SupersededIDs value under the Product GUID key. Don’t delete the entire key. Then run gpupdate /force and reboot.

    Or use a Group Policy Preferences Registry Item to delete the SupersededIDs value:

    Path: HKLM\Software\Microsoft\Windows\CurrentVersion\Group Policy\AppMgmt{YourCurrentProductGUID}

    Action: Delete

    Value name: SupersededIDs

    Also check for old scripts in SYSVOL:

    \<domain>\SYSVOL&lt;domain>\Policies&lt;GPO_GUID>\Machine\Scripts\Startup

    Leftover files could cause issues.

    You don’t need to touch the new MSI policy or product key, just remove the old supersession trail causing the stall.

    Was this answer helpful?

    0 comments No comments
  5. Anonymous
    2025-04-17T11:22:44+00:00

    Hey Emmanuel,

    I checked the key in regedit, and found that the policy is pushing the correct Software installation, but there is a key for SupercededIDs with value - {3905461e-a631-442c-9309-1f246e7296f2}

    I checked under the SYSVOL policies folder with the GUID for that specific Software installation policy, and that is not shown, only the current one.

    I tried removing the link, and then the hanging message doesn't show, so it must be that GPO.

    How do I get rid of this SupercededID, do I remove it via the registry with a GPO?

    There are no leftover MSIs in the System32 or SysWOL64 folders.

    Running GPResult /z > gp.txt just shows the current MSI that is being pushed out, which is correct.

    I think it must be that supercededID thing.

    Thanks!
    Jack

    Was this answer helpful?

    0 comments No comments