[gptalk] Re: Proxy Setting Sticking
- From: Shane Williford <shane.williford@xxxxxxxxxx>
- To: "gptalk@xxxxxxxxxxxxx" <gptalk@xxxxxxxxxxxxx>
- Date: Fri, 19 Dec 2008 08:42:40 -0600
Hmm...not sure why this is, but when dealing with proxy and my remote (i.e.
laptop) users, what I did was create a simple script that modifies the proxy
settings. I placed a batch file in the Startup folder, then 'called' a .reg
file from a 'Support' folder local to the PC that disables all proxy settings.
It took me sometime to 1. find the reg key, then 2. to modify it to disable all
that I wanted. I'm sure you could use the same process but for org-wide just
place the files in a login/startup script.
Shane M. Williford
Systems Administrator
MCSE, MCSA Sec, Sec+, Net+, A+
Mazuma Credit Union
9300 Troost
Kansas City, MO 64131
shane.williford@xxxxxxxxxx<mailto:shane.williford@xxxxxxxxxx>
816-361-4194 x6012
From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
Behalf Of Darrell Wiebesick
Sent: Friday, December 19, 2008 8:37 AM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Proxy Setting Sticking
We have had the same problems trying to use this at customer sites. We used it
for 'naughty students' to restrict the internet for a period of time using a
'fake proxy'. However, when we move the students back to their OU, the students
would still be restricted from the internet even after many reboots over
several weeks.
I have all but given up on this as a useful solution to restrict internet. It
acts like a preference and not a policy. I am very interested in using this at
our customer sites that want a quick way to temporarily restrict internet
access by having a fake proxy apply to the 'naughty OU' and have internet
available when the individual is moved back to their regular OU.
If anyone has a workable solution, please share it.
Thanks
"ProActive IT Solutions"
www.netrixIT.com<http://www.netrixit.com/>
Darrell Wiebesick MCSE
Netrix Information Technologies, Inc.
1323 23rd Street South Suite H
Fargo, ND 58103
Phone (701) 298-0175
Fax (701) 298-0189
Toll Free (877) 638-7492
HP Agent # 5871590001
The contents of this message are intended solely for the recipient(s) named
above. If you are not the intended recipient, please alert the sender by reply
e-mail and then delete this message.
From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
Behalf Of James F. Prudente
Sent: Friday, December 19, 2008 8:00 Morning
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Proxy Setting Sticking
It's been some time since I had to deal with this, but what you're describing
is exactly what we went through when removing a proxy.
From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
Behalf Of TAZAMAL HUSSAIN
Sent: Thursday, December 18, 2008 6:36 PM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Proxy Setting Sticking
Guys,
Thanks so far... Well its definately odd becuase if we apply a GPO with Proxy
Settings, the Proxy Settings obviously take place at the client side. When we
remove it the settings stick. The only way I have got the settings back to
normal (i.e. no Proxy Settings applied) is to actually open the Proxy Setting
up, do not configure it at all (yes! just open it up and leave it all blank)
and then save it back to a group policy and apply it to the OU!!!... the client
then takes the new value (which is blank)... its almost as if you are going to
configure it but then change your mind and do nothing. Its weird, as you'd
expect it to be removed but instead you have to go back and create a blank
proxy setting GPO and apply that.
The only way round so far I have managed is to create 2 GPO's... one with Proxy
Settings and One with No Proxy settings (by this I mean creating a new GPO and
opening the Proxy Settings section and not filling it out and saving the GPO as
that) and then filtering this against AD security groups.... then populating
users who should be proxied and users who can use the local gateway out to the
Internet...
Could it be my environment...I wonder
________________________________
From: syspro@xxxxxxxxxxxxxxxx
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Proxy Setting Sticking
Date: Fri, 19 Dec 2008 08:18:07 +1100
Hi Taz,
My understanding was that the IE settings just built INS files (Install.INS,
SecZones.inf, Authcode.inf, Programs.inf ) and then ran them when the policy is
applied. There is no process to back up your old settings and reapply them when
the GPO is no longer applied.
Only Non tattooed Admin Templates have true reversal of settings. Group Policy
Preferences support "Delete setting when not applied" which is slightly
different to "Replace original setting"
Darren may be better informed. If so, I would be interested to hear the
mechanism used by IE to back out settings.
Alan Cuthbertson
Policy Management Software (Now with ADMX and Preference support):-
http://www.sysprosoft.com/index.php?ref=activedir&f=pol_summary.shtml
ADM Template Editor(Now with ADMX support):-
http://www.sysprosoft.com/index.php?ref=activedir&f=adm_summary.shtml
Policy Log Reporter - including Preference logging(Free)
http://www.sysprosoft.com/index.php?ref=activedir&f=policyreporter.shtml
________________________________
From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
Behalf Of TAZAMAL HUSSAIN
Sent: Friday, 19 December 2008 4:43 AM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Proxy Setting Sticking
Hi Guys,
HAs anyone come across setting IE Proxy Settings via Group Policy and the
setting sticking when the policy is removed or setting is blanked out?
TazH
________________________________
Great search results, great prizes. BigSnapSearch.com Search
now<http://clk.atdmt.com/UKM/go/117442309/direct/01/>
________________________________
Get Windows Live Messenger on your Mobile. Click
Here!<http://clk.atdmt.com/UKM/go/msnnkmgl0010000001ukm/direct/01/>
________________________________
Notice: The information transmitted in this e-mail may contain confidential
and/ or legally privileged information intended only for the use of the
individual(s) named above. Review, use, disclosure, distribution, or forwarding
of this information by persons or entities other than the intended recipient(s)
is prohibited by law and may subject them to criminal or civil liabilities.
Statements and opinion expressed in this e-mail may not represent those of
Mazuma Credit Union. All e-mail communications through Mazuma's corporate email
system are subject to archiving and review by someone other than the recipient.
If you have received this communication in error, please notify the sender
immediately and delete/destroy any and all copies of the original message from
any computer or network system.
Other related posts:
