Could you consider using a pac file and putting some logic in there as a workaround, if a specific machine name is listed, set a proxy, otherwise don't? Tad messy probably From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On Behalf Of Shane Williford Sent: 19 December 2008 14:43 To: gptalk@xxxxxxxxxxxxx Subject: [gptalk] Re: Proxy Setting Sticking Hmm...not sure why this is, but when dealing with proxy and my remote (i.e. laptop) users, what I did was create a simple script that modifies the proxy settings. I placed a batch file in the Startup folder, then 'called' a .reg file from a 'Support' folder local to the PC that disables all proxy settings. It took me sometime to 1. find the reg key, then 2. to modify it to disable all that I wanted. I'm sure you could use the same process but for org-wide just place the files in a login/startup script. Shane M. Williford Systems Administrator MCSE, MCSA Sec, Sec+, Net+, A+ Mazuma Credit Union 9300 Troost Kansas City, MO 64131 shane.williford@xxxxxxxxxx<mailto:shane.williford@xxxxxxxxxx> 816-361-4194 x6012 From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On Behalf Of Darrell Wiebesick Sent: Friday, December 19, 2008 8:37 AM To: gptalk@xxxxxxxxxxxxx Subject: [gptalk] Re: Proxy Setting Sticking We have had the same problems trying to use this at customer sites. We used it for 'naughty students' to restrict the internet for a period of time using a 'fake proxy'. However, when we move the students back to their OU, the students would still be restricted from the internet even after many reboots over several weeks. I have all but given up on this as a useful solution to restrict internet. It acts like a preference and not a policy. I am very interested in using this at our customer sites that want a quick way to temporarily restrict internet access by having a fake proxy apply to the 'naughty OU' and have internet available when the individual is moved back to their regular OU. If anyone has a workable solution, please share it. Thanks "ProActive IT Solutions" www.netrixIT.com<http://www.netrixit.com/> Darrell Wiebesick MCSE Netrix Information Technologies, Inc. 1323 23rd Street South Suite H Fargo, ND 58103 Phone (701) 298-0175 Fax (701) 298-0189 Toll Free (877) 638-7492 HP Agent # 5871590001 The contents of this message are intended solely for the recipient(s) named above. If you are not the intended recipient, please alert the sender by reply e-mail and then delete this message. From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On Behalf Of James F. Prudente Sent: Friday, December 19, 2008 8:00 Morning To: gptalk@xxxxxxxxxxxxx Subject: [gptalk] Re: Proxy Setting Sticking It's been some time since I had to deal with this, but what you're describing is exactly what we went through when removing a proxy. From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On Behalf Of TAZAMAL HUSSAIN Sent: Thursday, December 18, 2008 6:36 PM To: gptalk@xxxxxxxxxxxxx Subject: [gptalk] Re: Proxy Setting Sticking Guys, Thanks so far... Well its definately odd becuase if we apply a GPO with Proxy Settings, the Proxy Settings obviously take place at the client side. When we remove it the settings stick. The only way I have got the settings back to normal (i.e. no Proxy Settings applied) is to actually open the Proxy Setting up, do not configure it at all (yes! just open it up and leave it all blank) and then save it back to a group policy and apply it to the OU!!!... the client then takes the new value (which is blank)... its almost as if you are going to configure it but then change your mind and do nothing. Its weird, as you'd expect it to be removed but instead you have to go back and create a blank proxy setting GPO and apply that. The only way round so far I have managed is to create 2 GPO's... one with Proxy Settings and One with No Proxy settings (by this I mean creating a new GPO and opening the Proxy Settings section and not filling it out and saving the GPO as that) and then filtering this against AD security groups.... then populating users who should be proxied and users who can use the local gateway out to the Internet... Could it be my environment...I wonder ________________________________ From: syspro@xxxxxxxxxxxxxxxx To: gptalk@xxxxxxxxxxxxx Subject: [gptalk] Re: Proxy Setting Sticking Date: Fri, 19 Dec 2008 08:18:07 +1100 Hi Taz, My understanding was that the IE settings just built INS files (Install.INS, SecZones.inf, Authcode.inf, Programs.inf ) and then ran them when the policy is applied. There is no process to back up your old settings and reapply them when the GPO is no longer applied. Only Non tattooed Admin Templates have true reversal of settings. Group Policy Preferences support "Delete setting when not applied" which is slightly different to "Replace original setting" Darren may be better informed. If so, I would be interested to hear the mechanism used by IE to back out settings. Alan Cuthbertson Policy Management Software (Now with ADMX and Preference support):- http://www.sysprosoft.com/index.php?ref=activedir&f=pol_summary.shtml ADM Template Editor(Now with ADMX support):- http://www.sysprosoft.com/index.php?ref=activedir&f=adm_summary.shtml Policy Log Reporter - including Preference logging(Free) http://www.sysprosoft.com/index.php?ref=activedir&f=policyreporter.shtml ________________________________ From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On Behalf Of TAZAMAL HUSSAIN Sent: Friday, 19 December 2008 4:43 AM To: gptalk@xxxxxxxxxxxxx Subject: [gptalk] Proxy Setting Sticking Hi Guys, HAs anyone come across setting IE Proxy Settings via Group Policy and the setting sticking when the policy is removed or setting is blanked out? TazH ________________________________ Great search results, great prizes. BigSnapSearch.com Search now<http://clk.atdmt.com/UKM/go/117442309/direct/01/> ________________________________ Get Windows Live Messenger on your Mobile. Click Here!<http://clk.atdmt.com/UKM/go/msnnkmgl0010000001ukm/direct/01/> ________________________________ Notice: The information transmitted in this e-mail may contain confidential and/ or legally privileged information intended only for the use of the individual(s) named above. Review, use, disclosure, distribution, or forwarding of this information by persons or entities other than the intended recipient(s) is prohibited by law and may subject them to criminal or civil liabilities. Statements and opinion expressed in this e-mail may not represent those of Mazuma Credit Union. All e-mail communications through Mazuma's corporate email system are subject to archiving and review by someone other than the recipient. If you have received this communication in error, please notify the sender immediately and delete/destroy any and all copies of the original message from any computer or network system.