Group Policy change after KB960225 or KB958690

I have a couple of PCs that have had the User Configuration/Windows
Settings/Internet Explorer Maintenance/URLs/Favorites and Links/Delete
existing Favorites and Links, if present object toggled on.
Based on entries in the Event Viewer, and time stamps in what was left of
the \Documents and Settings\%user%\Favorites folders, it appears that this
occured after KB960225 were KB958690 installed and the PCs rebooted.
Unfortunately these are both multi-user PCs in a Dispatch environment, so a
number of users have been affected. As each user logged on after the reboot,
their favorites were wiped clean.
I have pulled a fair amount of hair in finding this condition. It certainly
was not the first place that I looked. Of course, by the time I found this
GP setting, the damage was done for most of the users. There are only few
who have not logged in, since the updates applied on 11 March 2009.
Most of the PCs in my agency are configured to install updates on Friday
afternoons (today!...now!), so I am a bit nervous about what the rest of the
day holds.
Any one else seeing this problem?
Any ideas?

"Dean" wrote:

> I have a couple of PCs that have had the User Configuration/Windows
> Settings/Internet Explorer Maintenance/URLs/Favorites and Links/Delete
> existing Favorites and Links, if present object toggled on.

Forgot to include:
Windows XP Pro, SP3
MS Office Pro, 2003, SP3
..Net 3.5
McAfee VirusScan 8.7x
Microsoft Updates, automatic, every afternoon

All users, except Supervisors, are Power Users. Each has Full Control
within their profile. Supervisors are Administrator equivalent.

Start a free Windows Update support incident request:
https://support.microsoft.com/oas/de...spx?gprid=6527

For home users, no-charge support is available by calling 1-866-PCSAFETY in
the United States and in Canada or by contacting your local Microsoft
subsidiary. There is no-charge for support calls that are associated with
security updates. When you call, clearly state that your problem is related
to a Security Update and cite the update's KB number (e.g., KB960225;
KB958690).

Support for Windows Update:
http://support.microsoft.com/gp/wusupport

For more information about how to contact your local Microsoft subsidiary
for security update support issues, visit the International Support Web
site: http://support.microsoft.com/common/international.aspx

For enterprise customers, support for security updates is available through
your usual support contacts.
--
~Robear Dyer (PA Bear)
MS MVP-Windows (IE, OE, Security, Shell/User)
AumHa VSOP & Admin; DTS-L.net

Dean wrote:
> I have a couple of PCs that have had the User Configuration/Windows
> Settings/Internet Explorer Maintenance/URLs/Favorites and Links/Delete
> existing Favorites and Links, if present object toggled on.
> Based on entries in the Event Viewer, and time stamps in what was left of
> the \Documents and Settings\%user%\Favorites folders, it appears that this
> occured after KB960225 were KB958690 installed and the PCs rebooted.
> Unfortunately these are both multi-user PCs in a Dispatch environment, so
> a
> number of users have been affected. As each user logged on after the
> reboot, their favorites were wiped clean.
> I have pulled a fair amount of hair in finding this condition. It
> certainly
> was not the first place that I looked. Of course, by the time I found
> this
> GP setting, the damage was done for most of the users. There are only few
> who have not logged in, since the updates applied on 11 March 2009.
> Most of the PCs in my agency are configured to install updates on Friday
> afternoons (today!...now!), so I am a bit nervous about what the rest of
> the
> day holds.
<paste>
> Forgot to include:
> Windows XP Pro, SP3
> MS Office Pro, 2003, SP3
> .Net 3.5
> McAfee VirusScan 8.7x
> Microsoft Updates, automatic, every afternoon
>
> All users, except Supervisors, are Power Users. Each has Full Control
> within their profile. Supervisors are Administrator equivalent.

"PA Bear [MS MVP]" wrote:

> Start a free Windows Update support incident request:
> https://support.microsoft.com/oas/de...spx?gprid=6527
>

Submitted incident, 13 March 2009, 1912 UTC

Well, that was a complete waste of time.
I explained the problem in plain English. Probably more clearly than I had
posted it here. Clearly English is not the first, or maybe even second
language of each of the individuals who responded back to the support
incident that I submitted. Maybe that is the problem. Neither one seemed to
grasp that this problem may be due to an issue with the patches associated
with KB960225 or KB958690.

Oh well, I tried.

"Dean" wrote:

> "PA Bear [MS MVP]" wrote:
>
> > Start a free Windows Update support incident request:
> > https://support.microsoft.com/oas/de...spx?gprid=6527
> >
>
> Submitted incident, 13 March 2009, 1912 UTC

Call back, reference your SRX number & ask for a Level 2 tech.

Dean wrote:
> Well, that was a complete waste of time.
> I explained the problem in plain English. Probably more clearly than I
> had
> posted it here. Clearly English is not the first, or maybe even second
> language of each of the individuals who responded back to the support
> incident that I submitted. Maybe that is the problem. Neither one seemed
> to grasp that this problem may be due to an issue with the patches
> associated with KB960225 or KB958690.
>
> Oh well, I tried.
>
> "Dean" wrote:
>
>> "PA Bear [MS MVP]" wrote:
>>
>>> Start a free Windows Update support incident request:
>>> https://support.microsoft.com/oas/de...spx?gprid=6527
>>>
>>
>> Submitted incident, 13 March 2009, 1912 UTC