[gptalk] Re: FW: IE Proxy GPO Issue

  • From: "Buonora, Craig \(GE, Research, consultant\)" <buonora@xxxxxxxxxxxxxxx>
  • To: <gptalk@xxxxxxxxxxxxx>
  • Date: Thu, 10 Aug 2006 13:12:16 -0400

Darren the setting in the GUI I need to set, then ever X machines change
if the EU changes it is:
 
IE - Tools - Options - Connections - LAN Settings, I want to "check" Use
Automatic Configuration Script, then put my .pac string there.
 
In the GPO under User  - Internet Explorer Maintenance there are two
ways it loks I can set that. Under Connection - Conection settings, the
other Automatic Browser Configuration. I would think I need to config
the settings i want above under Connection - Connection Settings. I also
want the GPO to go out and update that setting every X minutes, this is
done in the user portion under system - Group Policy correct.
 
Craig

  _____  

From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx]
On Behalf Of Darren Mar-Elia
Sent: Thursday, August 10, 2006 11:08 AM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: FW: IE Proxy GPO Issue


Craig-
I'm not sure which two areas you're referring to. Can you post a policy
path for each here?
 
Darren

  _____  

From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx]
On Behalf Of Buonora, Craig (GE, Research, consultant)
Sent: Thursday, August 10, 2006 7:18 AM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] FW: IE Proxy GPO Issue



 
Darren thanks, to ensure I am doing that properly I see 2 areas where I
can set that, which would be correct and what is the difference between
them?
 
Craig

  _____  

From: Darren Mar-Elia [mailto:darren@xxxxxxxxxx] 
Sent: Monday, August 07, 2006 4:06 PM
To: gptalk@xxxxxxxxxxxxxxx
Subject: RE: [gptalk] IE Proxy GPO Issue


This could be a bug in IE maintenance or simply the way that particular
policy item works. Unfortunately, there are a lot of bugs in IE
maintenance policy. You might want to consider filing an incident with
MS to see if they have any input on it. I haven't found anything
documented, but that doesn't mean it works as expected ;)
 

  _____  

From: Buonora, Craig (GE, Research, consultant)
[mailto:buonora@xxxxxxxxxxxxxxx] 
Sent: Monday, August 07, 2006 12:54 PM
To: gptalk@xxxxxxxxxxxxxxx
Subject: FW: [gptalk] IE Proxy GPO Issue


Darren I am using loopback set so I am not sure why the policy will not
enforce every 90 minutes with a user logged on.  I also tried to add the
policy to an OU with a user in it, and enabled IE Main to always process
regardless, still the machine does not refresh that string unless I log
off. 
 
Craig

  _____  

From: Darren Mar-Elia [mailto:darren@xxxxxxxxxx] 
Sent: Friday, June 23, 2006 5:19 PM
To: gptalk@xxxxxxxxxxxxxxx
Subject: RE: [gptalk] IE Proxy GPO Issue


Craig-
IE Maintenance is a per-user policy. So in any case, machines will not
read that policy--only users will (the exception to that is if you are
using loopback). As for whether both XP and Win2K will read that Admin.
template policy, I don't have a win2k system here to look but there
might be an equivalent lockdown in Admin. Templates for Win2K. I don't
know if that lockdown will work for both its easy to test.

Darren

  _____  

From: Buonora, Craig (GE, Research, consultant)
[mailto:buonora@xxxxxxxxxxxxxxx] 
Sent: Friday, June 23, 2006 12:26 PM
To: gptalk@xxxxxxxxxxxxxxx
Subject: RE: [gptalk] IE Proxy GPO Issue


Darren:
 
I set it there so I exclude machines instead of users from having the
policy being applied as we use exclusion groups to exclude machines from
policies being applied. Out environment is W2K and XP, will that setting
work for both?
 
Craig

  _____  

From: Darren Mar-Elia [mailto:darren@xxxxxxxxxx] 
Sent: Friday, June 23, 2006 3:18 PM
To: gptalk@xxxxxxxxxxxxxxx
Subject: RE: [gptalk] IE Proxy GPO Issue


Craig-
I'm a little confused that you're setting a per-user policy in a GPO
linked to computers. Are those computers set with loopback?
 
In any case, IE maintenance proxy is a "preference", by default. This
means it is only set once and never again. Its a "feature" according to
MS. What I would do if you don't want it changed is to also enable the
policy at user configuration\admin. templates\Windows
Components\Internet Explorer\Disable Changing Connection Settings. Note
that this is an XP,SP2 policy so I'm making the assumption that that is
your client base.
 
Darren
 
 

  _____  

From: Buonora, Craig (GE, Research, consultant)
[mailto:buonora@xxxxxxxxxxxxxxx] 
Sent: Friday, June 23, 2006 12:01 PM
To: gptalk@xxxxxxxxxxxxxxx
Subject: [gptalk] IE Proxy GPO Issue


I seem to have a slight issue with my IE proxy GPO I was looking to see
if anyone could help with. I set me users autoconfig file within IE
[IE - Tools - Internet Options - Connections - LAN settings = Check Use
automatic configuration script, fill in with applicable path]
 
On reboot or doing a gpupdate /force /boot it seems to update the users
machine ok [The GPO is set on a OU holding machines, not users], but
with 90 minute interval time does not refresh the path if the user
changed it. Is there a setting I missed to enforce that? Also, is there
a way to grey that out so they cannot change it at all? 
 
Thanks for any help,
 
Craig

Other related posts: