GP IE Settings not applying

  • Thread starter Thread starter MS Newsgroups
  • Start date Start date
M

MS Newsgroups

Hi,

I have a group policy that sets Internet Explorer Connection settings. The
initial base PC installs contains a IE install that was custimized with IEAK
and has a Proxy server setting pointing to a server that is no longer
existing, this should not be a problem since the user should receive the
setting with the new server that is specified in the group policy. When
checking the report in the Group Policy managment tool (Windows 2003) I can
see that the settings for Internet mantenance are correct. When running a
gpresult /scope:user /z from a client desktop it reports the correct proxy
server settings.

But, The settings are not taking effect. When checking the registry key
HKCU\SOFTWARE\MICROSFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS the proxy
server settings and exclusions are still from the base install... running
gpudate /target:user /force does not help..

This problem is intermittant, and is roaming profiles is probably playing a
part of the problem. I can delete the users profile and when it is recreated
the policy does apply

Is this a known bug or has anyone experienced something similar ?

Any help would be appreciated

Niclas
 
Have experienced similar symptoms in an environment of IE 5.5 using group
policy on a Windows 2000 domain

the observed behaviour concerns the lack of refresh of the "enable automatic
configuration"

first time the GPO applies having set the "enable automatic configuration"
policy to a tick and with a value supplied for "auto-proxy" URL

however if on the browser we turn off "use automatic configuration script"
this does not get refreshed at subsequent logon - the autoproxy values
remains in the dialog but now grayed out.

any clues

GT
 
Hello,

Make sure you cross post this to an IEAK group. Below are some ideas on
this:


Have you tried to apply the Group policy / IE maintenance Policy: "Process
even if the Group Policy objects have not changed"?

274846 HOW TO: Set Advanced Settings In Internet Explorer by Using Group
Policy
http://support.microsoft.com/?id=274846

Are we in Preference Mode?

Preference mode settings are designed to provide initial settings for a
user, e.g. the corporate intranet portal or closest proxy server, while at
the same time allowing a user to modify these settings to meet his
individual needs.
The preference policy mode is not designed to enforce certain settings, but
to provide a preference.

RESOLUTION
==========

If you wish to force specific settings on a client, without allowing a user
to modify these, use IE policy mode instead of preference mode, where
possible. An IE policy in policy mode is being applied to the client
whenever the user logs on to the system.

WORKAROUND
==========

If you wish to force specific settings that are only available in preference
mode, such as the IE advanced configuration, the only way to ensure
persistence of the configuration is to prevent access to menus in which
these settings could be changed by the user, e.g. by restricting the
configuration menus.

STATUS
======


This behavior is by design.

MORE INFORMATION
================

e.g.
http://www.microsoft.com/technet/pr...2003/proddocs/deployguide/mngenv/rkdmegpi.asp

The Internet Explorer policies can be used in either "policy mode" and
"preference mode".

Policies in policy mode (also referred to as "maintenance mode" or
"mandatory mode") are designed to force specified settings. If configuration
dialogs are not restricted, the user may still be able to change settings
locally, but these modifications will be overridden by the policy when it
applies again.


Buz Brodin
MCSE NT4 / Win2K
Microsoft Enterprise Domain Support

Get Secure! - www.microsoft.com/security

This posting is provided "as is" with no warranties and confers no rights.

Please do not send e-mail directly to this alias. This alias is for
newsgroup purposes only.
 
Back
Top