Disable Group Policy on a laptop

  • Thread starter Thread starter Sam Atkinson
  • Start date Start date
S

Sam Atkinson

Hi
We have several laptops for users which travel and when they are on the
network we have a GPO which sets a proxy in IE which cannot be disabled by
the users.
One of the laptop users has gone abroad and is trying to use wireless but
the laptop is trying to use the proxy, can we disable the GPO for the proxy
settings on the laptop without it being connected to the network so the user
can access the internet ?
 
Sam Atkinson said:
Hi
We have several laptops for users which travel and when they are on
the
network we have a GPO which sets a proxy in IE which cannot be
disabled by
the users.
Click to expand...

Since the GPO gets pushed when the user logs in but can be changed
afterward by the user (i.e., they could reconfigure IE to not use the
policy), are you blocking all HTTP traffic on your network unless it
originates from the host where the proxy is running?
One of the laptop users has gone abroad and is trying to use
wireless but
the laptop is trying to use the proxy, can we disable the GPO for
the proxy
settings on the laptop without it being connected to the network so
the user
can access the internet ?
Click to expand...

Since the user is no longer on your network to have its PDC push a
policy on his host when he logs in, why can't this user just configure
IE to *not* use the proxy?
 
--
Sam


VanguardLH said:
Since the GPO gets pushed when the user logs in but can be changed
afterward by the user (i.e., they could reconfigure IE to not use the
policy), are you blocking all HTTP traffic on your network unless it
originates from the host where the proxy is running?


Since the user is no longer on your network to have its PDC push a
policy on his host when he logs in, why can't this user just configure
IE to *not* use the proxy?
Click to expand...
the user does not have permission to remove the proxy the option to do this
is disabled so im looking for a way to disable the use of the proxy in IE
which was put on by a group policy
 
in message
the user does not have permission to remove the proxy the option to
do this
is disabled so im looking for a way to disable the use of the proxy
in IE
which was put on by a group policy
Click to expand...

"the option to do this is disabled"
And that means what? That the Connections panel under Internet
Options is hidden?

Looks like you will have to give the user the password to the local
Administrator account so they can change the registry for the
restriction placed there (or run gpedit.msc) regarding hiding panels
in the Internet Options applet. In gpedit.msc, they would have to
change what your policy pushed into the registry by navigating to:

User Configuration
Administrative Templates
Windows Components
Internet Explorer
Internet Control Panel

Or they could use regedit.exe to change those settings under:

HKEY_CURRENT_USER/SOFTWARE/Policies/Microsoft/Internet
Explorer/Restrictions

Or just delete that key to eliminate all the subkeys and data items
under there that restrict the user from displaying some or all panels
in the Internet Options applet. Obviously the user must have admin
privileges to make policy changes (even local ones) or use regedit.

Maybe the user could run the Network Connection wizard (in the left
pane of the Network applet in Control Panel) to create a new
connectoid (that doesn't use your proxy) and connect using that new
connectoid.
 
Sam Atkinson said:
Hi
We have several laptops for users which travel and when they are on
the network we have a GPO which sets a proxy in IE which cannot be
disabled by the users.
One of the laptop users has gone abroad and is trying to use wireless
but the laptop is trying to use the proxy, can we disable the GPO for
the proxy settings on the laptop without it being connected to the
network so the user can access the internet ?
Click to expand...

In addition to the other replies -

* once you get this laptop back in house, you should make some changes to
your GPOs so that this can't happen again - there should be "domain" and
"not-domain" settings just as there are for the Windows firewall

* note that this question would best have been posted in
microsoft.public.windows.group_policy - that's where the GP gurus hang out.

Best o' luck!
 
Back
Top