Local Policies reset through AD

[kingjames]

We have an old edited local policy on our windows XP workstations.
These workstation are on the domain but they are logged onto locally.
We need to reset the local policies back to the default for internet explorer, due to a proxy setting change we no longer need the manual proxy address.

Is there a way through AD group policies editor to reset the local policies for the internet settings or to take out these local policy setting or to reset the local policy settings without having to touch each workstation.

 

[gmail2]

I THINK running sysprep on the PC's would reset the policy settings - however that's not really an option is it ... it'd be easier to just modify the policies on each PC manually than to do that

The only suggestion I can come up with would be to apply a startup script to the PC's - write it in WSH. I've never tried using WSH to change policies as we only use domain accounts, but I'm pretty sure it would be possible. Out of curiosity, why do you have a domain but allow users to logon locally?

Irish Poetry - Karen O'Connor
Get your Irish Poetry Published
Garten und Landschaftsbau

 

[markdmac]

You have two options. You can configure your new proxy information in a domain policy and that will replace the local policy.

Additionally you can do this via script.

'==========================================================================
'
' NAME:ClearProxy.vbs 
'
' AUTHOR: Mark D. MacLachlan , The Spider's Parlor
' URL: [URL unfurl="true"]http://www.TheSpidersParlor.com[/URL]
' COPYWRITE (c) 2006 All Rights Reserved
' DATE  : 5/25/2006
'
' COMMENT: 
'
'==========================================================================
 
On Error Resume Next
Set WshShell = CreateObject("WScript.Shell")
Path = "HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\"
WshShell.RegWrite Path & "ProxyServer", vbNothing ,"REG_SZ"
WshShell.RegWrite Path & "ProxyEnable", 0 ,"REG_DWORD"
Set WSHShell = Nothing

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript

 

[gmail2]

You can configure your new proxy information in a domain policy and that will replace the local policy

He can't use domain policy because the users are logging on locally and proxy settings are under user configuration.

Also, would the above script work in this case? I know it would turn off the proxy but woudln't the local policy turn it back on again once it got refreshed?

Sorry - not trying to critise your post, just want to know for my own benefit too

Irish Poetry - Karen O'Connor
Get your Irish Poetry Published
Garten und Landschaftsbau

 

[markdmac]

A login script will process after the local policy is applied, so it would reverse it at each login.

Also, another option is to use esentutl to import a new database which would replace the local policy.

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript

 

[gmail2]

A login script will process after the local policy is applied, so it would reverse it at each login

But because the accounts are local it would be kind of tricky to apply the logon script to each account ... or maybe I'm missing the whole point here?

Never heard of esentutl - that sounds kind of useful. Maybe kingjames could create a startup script through AD that would reset the policy. Oh well, I'm off to have a play with esentutl then

Irish Poetry - Karen O'Connor
Get your Irish Poetry Published
Garten und Landschaftsbau

 

[markdmac]

The login script for all users would just need to be copied to C:\WINDOWS\system32\GroupPolicy\User\Scripts\Logon

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript