[gptalk] Re: Proxy Setting Sticking

Hmm...not sure why this is, but when dealing with proxy and my remote (i.e. 
laptop) users, what I did was create a simple script that modifies the proxy 
settings. I placed a batch file in the Startup folder, then 'called' a .reg 
file from a 'Support' folder local to the PC that disables all proxy settings. 
It took me sometime to 1. find the reg key, then 2. to modify it to disable all 
that I wanted. I'm sure you could use the same process but for org-wide just 
place the files in a login/startup script.

Shane M. Williford
Systems Administrator
MCSE, MCSA Sec, Sec+, Net+, A+
Mazuma Credit Union
9300 Troost
Kansas City, MO 64131
shane.williford@xxxxxxxxxx<mailto:shane.williford@xxxxxxxxxx>
816-361-4194 x6012

From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On 
Behalf Of Darrell Wiebesick
Sent: Friday, December 19, 2008 8:37 AM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Proxy Setting Sticking

We have had the same problems trying to use this at customer sites. We used it 
for 'naughty students' to restrict the internet for a period of time using a 
'fake proxy'. However, when we move the students back to their OU, the students 
would still be restricted from the internet even after many reboots over 
several weeks.

I have all but given up on this as a useful solution to restrict internet. It 
acts like a preference and not a policy.  I am very interested in using this at 
our customer sites that want a quick way to temporarily restrict internet 
access by having a fake proxy apply to the 'naughty OU' and have internet 
available when the individual is moved back to their regular OU.

If anyone has a workable solution, please share it.

Thanks

  "ProActive IT Solutions"
                   www.netrixIT.com<http://www.netrixit.com/>

Darrell Wiebesick   MCSE
Netrix Information Technologies, Inc.
1323 23rd Street South Suite H
Fargo, ND 58103
Phone (701) 298-0175
Fax (701) 298-0189
Toll Free (877) 638-7492
HP Agent # 5871590001


The contents of this message are intended solely for the recipient(s) named 
above. If you are not the intended recipient, please alert the sender by reply 
e-mail and then delete this message.

From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On 
Behalf Of James F. Prudente
Sent: Friday, December 19, 2008 8:00 Morning
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Proxy Setting Sticking

It's been some time since I had to deal with this, but what you're describing 
is exactly what we went through when removing a proxy.

From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On 
Behalf Of TAZAMAL HUSSAIN
Sent: Thursday, December 18, 2008 6:36 PM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Proxy Setting Sticking


Guys,

Thanks so far... Well its definately odd becuase if we apply a GPO with Proxy 
Settings, the Proxy Settings obviously take place at the client side. When we 
remove it the settings stick. The only way I have got the settings back to 
normal (i.e. no Proxy Settings applied) is to actually open the Proxy Setting 
up, do not configure it at all (yes! just open it up and leave it all blank) 
and then save it back to a group policy and apply it to the OU!!!... the client 
then takes the new value (which is blank)... its almost as if you are going to 
configure it but then change your mind and do nothing. Its weird, as you'd 
expect it to be removed but instead you have to go back and create a blank 
proxy setting GPO and apply that.

The only way round so far I have managed is to create 2 GPO's... one with Proxy 
Settings and One with No Proxy settings (by this I mean creating a new GPO and 
opening the Proxy Settings section and not filling it out and saving the GPO as 
that) and then filtering this against AD security groups.... then populating 
users who should be proxied and users who can use the local gateway out to the 
Internet...

Could it be my environment...I wonder
________________________________

From: syspro@xxxxxxxxxxxxxxxx
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Proxy Setting Sticking
Date: Fri, 19 Dec 2008 08:18:07 +1100
Hi Taz,

My understanding was that the IE settings just built INS files (Install.INS, 
SecZones.inf, Authcode.inf, Programs.inf ) and then ran them when the policy is 
applied. There is no process to back up your old settings and reapply them when 
the GPO is no longer applied.

Only Non tattooed Admin Templates have true reversal of settings. Group Policy 
Preferences support "Delete setting when not applied" which is slightly 
different to "Replace original setting"

Darren may be better informed. If so, I would be interested to hear the 
mechanism used by IE to back out settings.


Alan Cuthbertson


 Policy Management Software (Now with ADMX and Preference support):-
http://www.sysprosoft.com/index.php?ref=activedir&f=pol_summary.shtml

ADM Template Editor(Now with ADMX support):-
http://www.sysprosoft.com/index.php?ref=activedir&f=adm_summary.shtml

Policy Log Reporter - including Preference logging(Free)
http://www.sysprosoft.com/index.php?ref=activedir&f=policyreporter.shtml






________________________________
From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On 
Behalf Of TAZAMAL HUSSAIN
Sent: Friday, 19 December 2008 4:43 AM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Proxy Setting Sticking

Hi Guys,

HAs anyone come across setting IE Proxy Settings via Group Policy and the 
setting sticking when the policy is removed or setting is blanked out?

TazH
________________________________
Great search results, great prizes. BigSnapSearch.com Search 
now<http://clk.atdmt.com/UKM/go/117442309/direct/01/>

________________________________
Get Windows Live Messenger on your Mobile. Click 
Here!<http://clk.atdmt.com/UKM/go/msnnkmgl0010000001ukm/direct/01/>

________________________________
Notice: The information transmitted in this e-mail may contain confidential 
and/ or legally privileged information intended only for the use of the 
individual(s) named above. Review, use, disclosure, distribution, or forwarding 
of this information by persons or entities other than the intended recipient(s) 
is prohibited by law and may subject them to criminal or civil liabilities. 
Statements and opinion expressed in this e-mail may not represent those of 
Mazuma Credit Union. All e-mail communications through Mazuma's corporate email 
system are subject to archiving and review by someone other than the recipient. 
If you have received this communication in error, please notify the sender 
immediately and delete/destroy any and all copies of the original message from 
any computer or network system.

Other related posts: