Re: Parts of GPO not working.

Hello deca2499,

If you will really prevent internet access use ISA server or equivalent from other companies. If your users use other browsers like firefox from an usb stick/drive or whatever medium your policy will not help.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


Hello all,

Here is the problem I am having. I have a domain with 2 - 2003 domain
controllers and a number of XP and 2000 workstations. I have a GPO
that I need to have applied to some lab computers, most of which are
2000. I have a request that all of those computers not have Internet
access.

Problem I am having is that when the policy applies, I get the proxy
applied but cannot get to local and exempted websites. Tempermental it
is, because it also will not take away the connection page like I have
told it to.

- I have created an OU and put the computers into it and applied the
GPO to the OU.
- I have created a security group and put the computers into the group
and put the group into the security filtering under the Scope tab of
the GPO.
- I have tried to put just the GPO with Authenticated users into the
Scope and apply it to the OU that the computers are in.
I am not sure what else I can do to get this to work. I have included
the GPO settings so that way you can tell me if I have included
something I shouldn't have or need to put something in there I
haven't.

I have created an OU to test this on and will apply it to production
OUs once I have confirmed it works right.

Blocked_Web
Data collected on: 8/27/2008 2:56:38 PM hide all
Generalhide
Detailshide
Domain CIN.domain.com
Owner CIN\Domain Admins
Created 8/13/2008 2:35:06 PM
Modified 8/27/2008 2:56:28 PM
User Revisions 27 (AD), 27 (sysvol)
Computer Revisions 19 (AD), 19 (sysvol)
Unique ID {62CCD47D-ACEE-4F81-AA65-08875ED13CDC}
GPO Status Enabled
Linkshide
Location Enforced Link Status Path
Internet Blocked No Enabled CIN.domain.com/DOMAIN COMPUTERS/Internet
Blocked
This list only includes links in the domain of the GPO.
Security Filteringhide
The settings in this GPO can only apply to the following groups,
users, and computers:Name
CIN\BlockInternet
S-1-5-21-28014860-978782709-526660263-8115
WMI Filteringhide
WMI Filter Name None
Description Not applicable
Delegationhide
These groups and users have the specified permission for this GPOName
Allowed Permissions Inherited
CIN\BlockInternet Read (from Security Filtering) No
CIN\Domain Admins Edit settings, delete, modify security No
CIN\Enterprise Admins Edit settings, delete, modify security No
NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS Read No
NT AUTHORITY\SYSTEM Edit settings, delete, modify security No
S-1-5-21-28014860-978782709-526660263-8115 Read (from Security
Filtering) No
Computer Configuration (Enabled)hide
Administrative Templateshide
System/Group Policyhide
Policy Setting
Group Policy refresh interval for computers Enabled
This setting allows you to customize how often Group Policy is
applied
to computers. The range is 0 to 64800 minutes (45 days).
Minutes: 0
This is a random time added to the refresh interval to prevent
all clients from requesting Group Policy at the same time.
The range is 0 to 1440 minutes (24 hours)
Minutes: 0
Policy Setting
Internet Explorer Maintenance policy processing Enabled
Allow processing across a slow network connection Disabled
Do not apply during periodic background processing Disabled
Process even if the Group Policy objects have not changed Enabled
Policy Setting
User Group Policy loopback processing mode Enabled
Mode: Replace
Windows Components/Internet Explorerhide
Policy Setting
Make proxy settings per-machine (rather than per-user) Enabled
User Configuration (Enabled)hide
Windows Settingshide
Internet Explorer Maintenancehide
Connection/Automatic Browser Configurationhide
Policy Setting
Automatically detect configuration settings Enabled
Automatic Browser Configuration Not configured
Connection/Proxy Settingshide
Enable proxy settings
Protocol Server Port
HTTP 0.0.0.0 80
Secure 0.0.0.0 80
FTP 0.0.0.0 80
Gopher 0.0.0.0 80
Socks 0.0.0.0 80
Exceptions: Do not use proxy server for addresses beginning with
http://*.singledomain.com, http://x3.domain.com/login.cmms,
http://home, Do not use proxy server for local (intranet) addresses
Enabled

Administrative Templateshide
Windows Components/Internet Explorer/Internet Control Panelhide
Policy Setting
Disable the Connections page Enabled
Thank you all in advance for your help and support.

I work 7-1630 EST.

Scott



.

Relevant Pages