Darren thanks, to ensure I am doing that properly I see 2 areas where I can set that, which would be correct and what is the difference between them? Craig _____ From: Darren Mar-Elia [mailto:darren@xxxxxxxxxx] Sent: Monday, August 07, 2006 4:06 PM To: gptalk@xxxxxxxxxxxxxxx Subject: RE: [gptalk] IE Proxy GPO Issue This could be a bug in IE maintenance or simply the way that particular policy item works. Unfortunately, there are a lot of bugs in IE maintenance policy. You might want to consider filing an incident with MS to see if they have any input on it. I haven't found anything documented, but that doesn't mean it works as expected ;) _____ From: Buonora, Craig (GE, Research, consultant) [mailto:buonora@xxxxxxxxxxxxxxx] Sent: Monday, August 07, 2006 12:54 PM To: gptalk@xxxxxxxxxxxxxxx Subject: FW: [gptalk] IE Proxy GPO Issue Darren I am using loopback set so I am not sure why the policy will not enforce every 90 minutes with a user logged on. I also tried to add the policy to an OU with a user in it, and enabled IE Main to always process regardless, still the machine does not refresh that string unless I log off. Craig _____ From: Darren Mar-Elia [mailto:darren@xxxxxxxxxx] Sent: Friday, June 23, 2006 5:19 PM To: gptalk@xxxxxxxxxxxxxxx Subject: RE: [gptalk] IE Proxy GPO Issue Craig- IE Maintenance is a per-user policy. So in any case, machines will not read that policy--only users will (the exception to that is if you are using loopback). As for whether both XP and Win2K will read that Admin. template policy, I don't have a win2k system here to look but there might be an equivalent lockdown in Admin. Templates for Win2K. I don't know if that lockdown will work for both its easy to test. Darren _____ From: Buonora, Craig (GE, Research, consultant) [mailto:buonora@xxxxxxxxxxxxxxx] Sent: Friday, June 23, 2006 12:26 PM To: gptalk@xxxxxxxxxxxxxxx Subject: RE: [gptalk] IE Proxy GPO Issue Darren: I set it there so I exclude machines instead of users from having the policy being applied as we use exclusion groups to exclude machines from policies being applied. Out environment is W2K and XP, will that setting work for both? Craig _____ From: Darren Mar-Elia [mailto:darren@xxxxxxxxxx] Sent: Friday, June 23, 2006 3:18 PM To: gptalk@xxxxxxxxxxxxxxx Subject: RE: [gptalk] IE Proxy GPO Issue Craig- I'm a little confused that you're setting a per-user policy in a GPO linked to computers. Are those computers set with loopback? In any case, IE maintenance proxy is a "preference", by default. This means it is only set once and never again. Its a "feature" according to MS. What I would do if you don't want it changed is to also enable the policy at user configuration\admin. templates\Windows Components\Internet Explorer\Disable Changing Connection Settings. Note that this is an XP,SP2 policy so I'm making the assumption that that is your client base. Darren _____ From: Buonora, Craig (GE, Research, consultant) [mailto:buonora@xxxxxxxxxxxxxxx] Sent: Friday, June 23, 2006 12:01 PM To: gptalk@xxxxxxxxxxxxxxx Subject: [gptalk] IE Proxy GPO Issue I seem to have a slight issue with my IE proxy GPO I was looking to see if anyone could help with. I set me users autoconfig file within IE [IE - Tools - Internet Options - Connections - LAN settings = Check Use automatic configuration script, fill in with applicable path] On reboot or doing a gpupdate /force /boot it seems to update the users machine ok [The GPO is set on a OU holding machines, not users], but with 90 minute interval time does not refresh the path if the user changed it. Is there a setting I missed to enforce that? Also, is there a way to grey that out so they cannot change it at all? Thanks for any help, Craig