Group Policy

Posted on 2005-03-27
Medium Priority
Last Modified: 2010-04-14

I have 2000 client systems and while working with GP , one of our engr has set proxy server address and port thro' GP . We have a mixed environment and users use diffrent proxies depending on the project . Sensing the trouble we jus disabled the user configuration part in GP and later unchecked proxy setting and then enabled user configuration . But still we coukld see that proxy settings are getting resetted to the address we set in Default policy . Please let me know how to go back to the original seetings safely.

Currently user configuration is kept disabled .

Sailor Song
Question by:salioursong
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
LVL 15

Accepted Solution

Naser Gabaj earned 336 total points
ID: 13639224
Did he applied the GP on the domain level, if this the case, then it's better to deny applying the policy on the specific user groups or OU's, here is the steps:

In the Domain Controller

START>PROGRAMS>ADMINISTRATIVE TOOLS>ACTIVE USERS & COMPUTERS>right click DOMAIN>PROPERTIES>GROUP POLICY>click once on the group policy that he made the changes>PROPERTIES>SECURITY>in the name section of security window choose the domain users>and in the permissions section choose APPLY GROUP POLICY>check DENY

I hope this will help you.


LVL 35

Assisted Solution

by:Nirmal Sharma
Nirmal Sharma earned 332 total points
ID: 13641859
You have many options to know from where the group policy settings are comming.

1. Install GMPC and RSOP.
2. Check with gpresult.exe
3. Enable Profile Logging on user's machine.

How to enable Profile Logging: -

Let me know.


Author Comment

ID: 13642384
HI Naser ,

Policy is applied on the domain level.

Hi sys,

Since the default user policy is disabled now , I may not be able to check this . As soon as
I enable the user policy proxy settings get greyed out from users sytems.

I have created another OU and planned move all systems to that OU . But the user policy is not getting applied on clients . (Block inheritence is enbaled) . I guess its due to that disabled user policy in domain level.

So I have to repair that default policy.
LVL 14

Assisted Solution

theruck earned 332 total points
ID: 13642504
yes just set the default domain policy as it was before and WAIT FOR APPLYing as it takes some time (you can try gpudate /force on the machines)
LVL 35

Expert Comment

by:Nirmal Sharma
ID: 13642575
>>>I guess its due to that disabled user policy in domain level.

Not at all. A Disabled GPO is not applied at all but the changes are refreshed after 90 minutes on clients and 5 minutes on domain controllers. So i think you have already passed four or more hours and policies are still not applying. Better you run the tool i suggested so that you will come to know from where the settings are comming. You can also enable User Profile Logging which is usefull to know the GPO version being applied.

>>>So I have to repair that default policy.

What will you repair in it? What is there to repair in it? If the settings are applied when you Enable this GPO then you do not need to do anything. Do one thing...set "DISABLE" on the Default Domain Policy and you have created one GPO on a new OU so set "BLOCK POLICY INHERITENCE" on this GPO. Try.

Let me know.

Featured Post

Get 15 Days FREE Full-Featured Trial

Benefit from a mission critical IT monitoring with Monitis Premium or get it FREE for your entry level monitoring needs.
-Over 200,000 users
-More than 300,000 websites monitored
-Used in 197 countries
-Recommended by 98% of users

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
The top devops trends for 2017 are focused on improved deployment frequency, decreased lead time for change and decreased MTTR.
In this video we outline the Physical Segments view of NetCrunch network monitor. By following this brief how-to video, you will be able to learn how NetCrunch visualizes your network, how granular is the information collected, as well as where to f…
This is my first video review of Microsoft Bookings, I will be doing a part two with a bit more information, but wanted to get this out to you folks.

770 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question