[gptalk] Re: FW: IE Proxy GPO Issue

  • From: "Darren Mar-Elia" <darren@xxxxxxxxxx>
  • To: <gptalk@xxxxxxxxxxxxx>
  • Date: Thu, 10 Aug 2006 08:08:05 -0700

Craig-
I'm not sure which two areas you're referring to. Can you post a policy path
for each here?
 
Darren

  _____  

From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
Behalf Of Buonora, Craig (GE, Research, consultant)
Sent: Thursday, August 10, 2006 7:18 AM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] FW: IE Proxy GPO Issue



 
Darren thanks, to ensure I am doing that properly I see 2 areas where I can
set that, which would be correct and what is the difference between them?
 
Craig

  _____  

From: Darren Mar-Elia [mailto:darren@xxxxxxxxxx] 
Sent: Monday, August 07, 2006 4:06 PM
To: gptalk@xxxxxxxxxxxxxxx
Subject: RE: [gptalk] IE Proxy GPO Issue


This could be a bug in IE maintenance or simply the way that particular
policy item works. Unfortunately, there are a lot of bugs in IE maintenance
policy. You might want to consider filing an incident with MS to see if they
have any input on it. I haven't found anything documented, but that doesn't
mean it works as expected ;)
 

  _____  

From: Buonora, Craig (GE, Research, consultant)
[mailto:buonora@xxxxxxxxxxxxxxx] 
Sent: Monday, August 07, 2006 12:54 PM
To: gptalk@xxxxxxxxxxxxxxx
Subject: FW: [gptalk] IE Proxy GPO Issue


Darren I am using loopback set so I am not sure why the policy will not
enforce every 90 minutes with a user logged on.  I also tried to add the
policy to an OU with a user in it, and enabled IE Main to always process
regardless, still the machine does not refresh that string unless I log off.

 
Craig

  _____  

From: Darren Mar-Elia [mailto:darren@xxxxxxxxxx] 
Sent: Friday, June 23, 2006 5:19 PM
To: gptalk@xxxxxxxxxxxxxxx
Subject: RE: [gptalk] IE Proxy GPO Issue


Craig-
IE Maintenance is a per-user policy. So in any case, machines will not read
that policy--only users will (the exception to that is if you are using
loopback). As for whether both XP and Win2K will read that Admin. template
policy, I don't have a win2k system here to look but there might be an
equivalent lockdown in Admin. Templates for Win2K. I don't know if that
lockdown will work for both its easy to test.

Darren

  _____  

From: Buonora, Craig (GE, Research, consultant)
[mailto:buonora@xxxxxxxxxxxxxxx] 
Sent: Friday, June 23, 2006 12:26 PM
To: gptalk@xxxxxxxxxxxxxxx
Subject: RE: [gptalk] IE Proxy GPO Issue


Darren:
 
I set it there so I exclude machines instead of users from having the policy
being applied as we use exclusion groups to exclude machines from policies
being applied. Out environment is W2K and XP, will that setting work for
both?
 
Craig

  _____  

From: Darren Mar-Elia [mailto:darren@xxxxxxxxxx] 
Sent: Friday, June 23, 2006 3:18 PM
To: gptalk@xxxxxxxxxxxxxxx
Subject: RE: [gptalk] IE Proxy GPO Issue


Craig-
I'm a little confused that you're setting a per-user policy in a GPO linked
to computers. Are those computers set with loopback?
 
In any case, IE maintenance proxy is a "preference", by default. This means
it is only set once and never again. Its a "feature" according to MS. What I
would do if you don't want it changed is to also enable the policy at user
configuration\admin. templates\Windows Components\Internet Explorer\Disable
Changing Connection Settings. Note that this is an XP,SP2 policy so I'm
making the assumption that that is your client base.
 
Darren
 
 

  _____  

From: Buonora, Craig (GE, Research, consultant)
[mailto:buonora@xxxxxxxxxxxxxxx] 
Sent: Friday, June 23, 2006 12:01 PM
To: gptalk@xxxxxxxxxxxxxxx
Subject: [gptalk] IE Proxy GPO Issue


I seem to have a slight issue with my IE proxy GPO I was looking to see if
anyone could help with. I set me users autoconfig file within IE
[IE - Tools - Internet Options - Connections - LAN settings = Check Use
automatic configuration script, fill in with applicable path]
 
On reboot or doing a gpupdate /force /boot it seems to update the users
machine ok [The GPO is set on a OU holding machines, not users], but with 90
minute interval time does not refresh the path if the user changed it. Is
there a setting I missed to enforce that? Also, is there a way to grey that
out so they cannot change it at all? 
 
Thanks for any help,
 
Craig

Other related posts: