Group policy laptop problems (500 pts)

In one of our remote offices that we support we put in place a GPO that automatically sets and greys out the appropriate information for the proxy server that we want them using. However this has caused a problem with one of the users who is using a laptop. When she takes it home at night she is unable to connect using her standard home broadband connection due to the proxy server. Since the GPO greyed out the option to change it she can not edit the information to allow her to access the internet.

I have had her try checking the option for automatically detect network settings thinking that if it could see the internet when she was connected at home it would bypass the proxy server and let her on. No luck.

We need to keep the GPO in place to ensure that the users are all connecting to the proxy server at the remote office but the ones with the laptops are still able to connect at home. Any ideas or workarounds?
mpatrick65Asked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

MitchV85Commented:
          The only way around this that I am aware of is to deny her user account access to the system32\GroupPolicy folder and that will stop the policies from applying. However this will stop policies from applying no matter where she logs in so it may be more work than necessary to change her security permissions whenever she goes home and then when she comes back into the office.
           Perhaps you could make a sepereate OU for laptop users and then assign a new GPO to that OU that specifies proxy settings for those users but allows them to change it. This way when the user is in the office and logs in the proxy settings will be applied and when the user is at home they can delete the proxy settings and get out to the internet (the settings will then be reapplied when they come back into the office and log in.)



Hope this helps you out!
Mitch
0
masterbakerCommented:
You could try using a tool like Proxy Changer (http://www.snapfiles.com/get/proxychanger.html) to allow her to switch between using the proxy and working without it.  I haven't used Proxy Changer before, but the idea is simple.  The proxy changes are just registry changes, so making a tool to switch them quickly and easily is pretty straightforward.  I'm sure if you searched for other proxy changing tools, you'd find several.  This one does happen to be freeware, which is nice.

Jeff
0
TheCleanerCommented:
You have a couple of built in choices:

1.  Change the GPO for the setting of : Disable changing connection settings, under the user config, admin templates, windows components, internet explorer : so that it doesn't grey out the ability to disable the proxy at home.

Probably like mitch said, put them in a separate OU.

OR

You can work on using an autoconfig using "automatically detect settings" instead of actually putting in a proxy IP address...

More info here:

http://www.experts-exchange.com/Web/Web_Languages/JavaScript/Q_21411191.html  (for examples of a .pac file)

and a semi-walkthrough here:

http://www.grape-info.com/doc/win2000srv/internet-gw/wpad/index.html

and if you use ISA server:

http://www.isaserver.org/tutorials/Configuring-DHCP-DNS-automatic-discovery.html


This would make it to where the only button checked is "auto configure settings" and that way at home the user would open IE, the autoconfig would say "don't see anything to configure me with, so by default I'm just going to try and go there" and the user will get to the internet sites.

0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
TheCleanerCommented:
Thank you for the points!
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Networking

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.