RE: GPO for IE



Dear Customer,

Thanks for your reply.

According to the description, you concern is that how to disable "Automatic
Browser Configuration" on the client via group policy. If I have any
misunderstanding, please feel free let me know.

Analysis:
=============

Based on the research, the "Automatic Browser Configuration" group policy
is a preference policy and it will not be displayed as Disabled in GPMC
tool. If you would like to ensure that the automatic browser configuration
is disabled, you may first uncheck the "Enabled Automatic Configuration"
option and then enable the [Disable Changing Automatic Configuration
settings] policy so that users cannot change the setting manually.

Here is some information which may be helpful for you.

Suggestion:
==============

Please configure the GPO On the domain controller as followed.

1. Edit the group policy in Group Policy Management console.

2. Locate the entry: User Configuration --> Windows Settings --> Internet
Explorer Maintenance --> Connection --> Automatic Browser Configuration,
ensure the checkbox "Enable Automatic Configuration" has been selected.

3. Then locate the entry: User Configuration --> Administrative Templates
--> Windows Components --> Internet Explorer.
In right pane, double click the entry "Disable Changing Automatic
Configuration settings". Select "Enabled" and click OK to apply it.

4. On your client computer, run the command "gpupdate /force" to refresh
the policy.

You may export that registry key from a computer that have that option
unchecked and then via a logon script to import that registry key to all
intended users.

For more information:
====================

Internet Explorer Maintenance policy processing
http://www.microsoft.com/technet/prodtechnol/windows2000serv/reskit/gp/341.m
spx?mfr=true

Internet Explorer Maintenance Group Policies do not apply during subsequent
logons procedures
http://support.microsoft.com/kb/306915

Hope it helps.

David Shen
Microsoft Online Partner Support

.



Relevant Pages

  • Re: applying settings to clients forcefully
    ... The RSOP output states windows 2003 as member server. ... Windows 2000 IP Configuration ... Microsoft Windows Operating System Group Policy Result tool ... Default Domain Policy ...
    (microsoft.public.win2000.group_policy)
  • Re: applying settings to clients forcefully
    ... Yes it's member server of the infrasoft.lan domain and i am not using any terminal services of that machine, nor it's configured as terminal server. ... > Windows 2000 IP Configuration ... > Microsoft Windows Operating System Group Policy Result tool ...
    (microsoft.public.win2000.group_policy)
  • Re: Windows 2000 Server GPO with Windows 2003 Server Terminal Serv
    ... I guess the next big question is how do I apply group policy for all my ... terminal server users without effecting the administrator account. ... Replace mode only looks at the "USer Configuration" ...
    (microsoft.public.windows.server.active_directory)
  • Re: make domain GP not apply to local computer?
    ... down the system which is "computer" configuration Group Policy. ... then a different GP can be set for the laptop computers to allow users to ... normal Group Policy user configuration settings in a merge or replace mode. ...
    (microsoft.public.windowsxp.security_admin)