AD GPO's not rolling out

[Lordmathos]

Hi All.

I have recently updated our GPO's with a few new settings. Some of the computers in the company are getting the new gpo's from the server and other computers are not.

Any ideas.

Cheers

 

[monsterjta]

What do you see if you run an RSOP report? Do you see any errors on applying group policy? How about going to the machine and issuing a GPRESULT? This should give good information on what's being applied/denied. If you do not even see the policy in the list, you may need to issue a GPUPDATE /FORCE. Machine policies may require a reboot.

Specifically, what are the policies you are trying to rollout? Are they User or Computer policies? Are they applied to the correct OU's? What is the scope of the policie, Authenticated Users?

Hope This Helps,

Good Luck!

(Enamoration by Automation)

 

[Lordmathos]

The main gpo problem is with the proxy settings in internet explorer. Some users get the settings applied and others don't.

I have never used GPRESULT and RSOP. Are they run on the server or the client machine??

Cheers

 

[monsterjta]

I have always had issue with Proxy settings in the native GPO. I use a VBScript to set my Proxy settings because of this. I create a new policy, remove all administrative templates to streamline the GPO, and attach this script to the User Configuration -> Logon Scripts.

Dim objShell
On error resume next
'''''''''''''''''''''''''''''''''''''''''''
'Proxy settings for limited Internet access
'''''''''''''''''''''''''''''''''''''''''''
locProxyEnable = "HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyEnable"
binValueProxyEnable = 1
locProxyServer = "HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyServer"
strValueProxyServer = "localhost:80"
locProxyOverride = "HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyOverride"
strValueProxyOverride = "[URL unfurl="true"]https://;ftp://;<local>"[/URL]

'write
Set objShell = CreateObject("WScript.Shell")

objShell.RegWrite locProxyEnable, binValueProxyEnable, "REG_DWORD"
objShell.RegWrite locProxyServer, strValueProxyServer, "REG_SZ"
objShell.RegWrite locProxyOverride, strValueProxyOverride, "REG_SZ"

In this particular script, I am disallowing access to all internet sites except for HTTPS and FTP sites. Everything else is proxied to the localhost port 80, which is going to lead the user nowhere.

Feel free to play with this script as you like. I would suggest staying away from the native proxy policies in Windows.

Hope This Helps,

Good Luck!

(Enamoration by Automation)

 

[markdmac]

Did you try running GPUPDATE /Force on the machines not getting the policy? How about GPRESULT to see what the machines report?

On an XP machine both can be run from a command line.

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript

 

[Lordmathos]

I have tried gpupdate and sometimes the policies update and sometimes they do not.

I shall give this script a go and see how well it works for us.

Cheers for your help