Re: Win2000 IE GPO settings
- From: "Mark Ainsworth" <mark_a_ainsworth@xxxxxxxxxxxxx>
- Date: Fri, 4 Nov 2005 01:27:47 -0000
I've had similar problems where some clients on a network would have the
correct IE proxy settings and some wouldn't, even though they are all using
the same group policy that contains the correct proxy settings.
I traced the problem to a bug relating to Folder Redirection and Windows XP
SP 2. If you are using a Folder Redirection policy and at least some of the
clients are XP SP2, see
http://support.microsoft.com/Default.aspx?kbid=888254 for details of how to
fix this.
Hope this helps.
Mark
"Steven L Umbach" <n9rou@xxxxxxxxxxxxxxxxxx> wrote in message
news:u1pIrUa2FHA.564@xxxxxxxxxxxxxxxxxxxxxxx
>I am a bit confused. You say gpupdate /force works but secedit does not?
>Maybe you mean that when you run gpupdate on the client computer like XP
>Pro it works but not when you are logged onto a Windows 2000 domain
>computer?? Make sure that the following advice in the KB article link is
>enabled on a GPO linked to a container where the computers are located that
>you are logging onto and experiencing the problem. --- Steve
>
> http://support.microsoft.com/default.aspx?scid=kb;en-us;316702
>
>
> "SPP-IT" <SPPIT@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
> news:F6EE7700-E140-44DE-ACC8-BA915D10A9EA@xxxxxxxxxxxxxxxx
>> Steve I have tried gpupdate /force and it has worked for me. Also it does
>> seem to be IE settings because when I make a change to something else it
>> works fine. I have a windows 2000 server so I need to use secedit
>> /refreshpolicy user_policy but when I run this it doesn't seem to work.
>> What
>> else can I do.
>>
>> "Steven L Umbach" wrote:
>>
>>> When using RSOP make sure you are also trying logging mode if you are
>>> running it from a Windows 2003 domain controller. Also try gpupdate
>>> /force
>>> to see if that works or not and try making another change to the Group
>>> Policy for user configuration to see if that is being propagated when
>>> you
>>> use gpupdate /force. That will help determine if the problem is with the
>>> IE
>>> settings or that Group Policy processing. Run gpupdate on the domain
>>> controller after making the new configuration change however before
>>> running
>>> gpupdate /force on the domain computer. Run the support tool gpresult on
>>> the
>>> workstation to see what it reports as far as Group Policies being
>>> applied to
>>> the user and that last time they were applied. --- Steve
>>>
>>>
>>> "SPP-IT" <SPPIT@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
>>> news:94D5C06F-0CA3-4E3B-A6F6-D0002814F60E@xxxxxxxxxxxxxxxx
>>> >
>>> >
>>> > "SPP-IT" wrote:
>>> >
>>> >>
>>> >>
>>> >> "Steven L Umbach" wrote:
>>> >>
>>> >> > You will need to configure GP so that it applies settings at each
>>> >> > refresh or
>>> >> > block users access to the settings. When GP refreshes it compares
>>> >> > the
>>> >> > GP
>>> >> > version number it has locally in the registry to what is found on
>>> >> > the
>>> >> > sysvol
>>> >> > share of the domain controller. If they match the GP settings are
>>> >> > not
>>> >> > applied again which is what is happening in your case. Check out
>>> >> > the
>>> >> > various
>>> >> > settings for processing under computer configuration/administrative
>>> >> > templates/system/Group Policy and configure the appropriate setting
>>> >> > to
>>> >> > process even if Group Policy objects have not changed being sure to
>>> >> > read the
>>> >> > full description of the setting. You would probably configure
>>> >> > registry
>>> >> > policy [for administrative templates] or IE maintenance policy
>>> >> > depending
>>> >> > where the setting is found. --- Steve
>>> >> >
>>> >> >
>>> >> >
>>> >> > "SPP-IT" <SPPIT@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
>>> >> > news:E7735330-1F83-489D-A8EB-54A6BD597B11@xxxxxxxxxxxxxxxx
>>> >> > > When I make changes as a user in IE security settings
>>> >> > > they do not revert back to the settings that I set in my GPO.
>>> >> > > Should
>>> >> > > I be
>>> >> > > looking at anything else that might prevent my GPO's from
>>> >> > > working. I
>>> >> > > checked
>>> >> > > all of the obvious stuff such as dns, anything else you can think
>>> >> > > of
>>> >> > > I
>>> >> > > would
>>> >> > > greatly appreciate.
>>> >> > >
>>> >> > > I only have user accounts in the OU that contains the GPO. When I
>>> >> > > make a
>>> >> > > changes to the GPO it will push down the settings, but when I as
>>> >> > > a
>>> >> > > user
>>> >> > > make
>>> >> > > chages in IE security settings on my desktop and I logoff and log
>>> >> > > back in
>>> >> > > those settings won't revert back to the settings of my GPO.
>>> >> > >
>>> >> > > I am using gpmc and it says that the GPO that I created has been
>>> >> > > pushed
>>> >> > > down
>>> >> > > but when I check those settings they haven't been changed. All
>>> >> > > other
>>> >> > > settings
>>> >> > > seem to be working.
>>> >> > >
>>> >> > >
>>> >> >
>>> >> >
>>> >> >
>>> >>
>>> >>
>>> >> I had those settings set already yet when I logoff and log back in as
>>> >> the
>>> >> user that this gpo is applied to the settings are not being set to
>>> >> the
>>> >> gpo
>>> >> settings. I am not sure why please help.
>>> >
>>> > Also when I run RSOP the policy is pushed down but when I look at IE
>>> > security settings that are pushed down they are incorrect, but when I
>>> > look
>>> > at
>>> > the gpo through gpmc the settings that I want pushed down are correct.
>>>
>>>
>>>
>
>
.
- Prev by Date: Re: IE Proxy Exceptions
- Next by Date: Re: Group Manipulation
- Previous by thread: Re: IE Proxy Exceptions
- Next by thread: XP Client in 2k3 domain
- Index(es):
Relevant Pages
|
