Group Policy Proxy Setting Question

[bdoub1eu]

The GP is applied to all users during the login process, correct? Here's why I ask...

I recently created a GP that adds a proxy setting into Internet Explorer...This is an internal server and the GP was successfully pushed out to all the clients. When a user is off the network and goes to a hotel/home and uses broadband, they must uncheck the "use proxy server" in Internet Explorer Connection settings so they can surf using whatever ISP rather than looking for our private/internal proxy server over the internet.

When they come back in the office, and login, the proxy settings aren't automatically pushed down to the client...So they have to go back in and check the proxy settings to get to the internet. If they do a gpupdate /force, the policy is applied, but I thought the login process also forced the GP to work...

Any ideas? Thanks in advance!

 

[MisterNiceGuy]

This is normal behavior. Most of the Group policy settings in that portion of the GPO are preferences. Meaning that they only apply to a computer once. They will only re-apply if you change something or if you /force the gpupdate as you stated. The only way I would see around this would be to script the setting so it is done everytime they bootup on the network.

 

[bdoub1eu]

Yeah, that's what I was thinking...

So what kind of script were you referring to...Startup script? Login script?

Also, do you know where the setting is in the registry to "ungray" the proxy settings in internet explorer?

In the GP, there was an option to "disable changing proxy settings" where it would lock the proxy settings and not allow the user to change them...I changed that option so people would be able to change it, but 1 user isn't getting the changes...Thought I would go in and manuall do it...

Thanks for your help!

 

[spuddym]

Add to your logon script:

gpupdate /force

This forcees the compter to reapply all GP settings from the domain as a user logs on.

 

[rislejay]

You can also enable the "Internet Explorer Maintenance policy processing" policy under Computer Configuration > Administrative Templates > System > Group Policy and check off "Process even if the Group Policy objects have not changed" within the policies properties.