This seems to confirm a problem in the GPO mechanism regarding IE. I started a thread a few weeks ago about a similar problem. I was trying to configure Content Advisor for member of a single group. I had a GPO for that group only and configured Content Advisor settings for the GPO. All users got it immediately (and I'm sure my policies were configured properly, permissions were right - etc. - I've done it a million times and everything else was working. Here's my original post about it: > I want to give a group of users Internet Explorer, but restrict them >to certain web sites. What's the best way to do this? > I thought this would be quite straightforward using Content Advisor >via Group Policy. I enabled it for a GPO that applied to a group of >users and restricted them to certain sites. I logged on as on of the >users and did receive the restriction. However, I then noticed that my >administrator's session to the same server was also restricted. I >verified that, even though the Content Advistor settings are listed >under the User Configuration (Windows Settings, Internet Explorer >Maintenance, Security , Security Zones and Content Ratings), any >restriction applied to any user on a server causes those settings to be >applied to *all* users. Any ideas? (I know about kiosk mode, but since >I'm publishing a desktop, they could create a shortcut to Iexplore.exe >in their home drive and get a normal instance of IE, so I want >something a little more sure). JD -----Original Message----- From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf Of Aaron Simms Sent: 16 January 2004 8:43 AM To: thin@xxxxxxxxxxxxx Subject: [THIN] Re: IE proxy settings applied via GPO to Citrix server OU Thanks Raff, I tried it and it works. Who needs GPO's? Thanks for the help! Aaron Simms MCSE,CCA,CCSP Network Engineer Pemstar Inc. <mailto:Aaron.simms@xxxxxxxxxxx> Aaron.simms@xxxxxxxxxxx 507-535-4334 ----- Forwarded by Aaron Simms/RCH/AM/PEMSTAR Inc on 01/15/2004 01:41 PM ----- "Steve Raffensberger" <sraffens1@xxxxxxxxxxx> Sent by: thin-bounce@xxxxxxxxxxxxx 01/15/2004 01:03 PM Please respond to thin To: <thin@xxxxxxxxxxxxx> cc: Subject: [THIN] Re: IE proxy settings applied via GPO to Citrix server OU I think Jim would suggest logging in as an admin, running change user /install and setting the proxy to the new setting. This usually works for me. Raff -----Original Message----- From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx]On Behalf Of Aaron Simms Sent: Thursday, January 15, 2004 12:42 PM To: thin@xxxxxxxxxxxxx Subject: [THIN] IE proxy settings applied via GPO to Citrix server OU Hi, First the setup: W2k servers w/AD MF XPe FR3 and W2K SP4 Roaming profiles for all Citrix users Now the problem: I have a separate OU for my Citrix servers and in the User GP I have configured IE to use proxy settings. This worked then I changed the proxy address in the GP. Now all existing users still get the old address and any new accounts setup get the new settings. I have also changed other settings in IE in the GP and all users get the new changes. I can't get the proxy address to change for the old users. Any ideas? Thank you, Aaron Simms MCSE,CCA,CCSP Network Engineer Pemstar Inc. <mailto:Aaron.simms@xxxxxxxxxxx> Aaron.simms@xxxxxxxxxxx 507-535-4334