• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 210
  • Last Modified:

Group policy laptop problems (500 pts)

In one of our remote offices that we support we put in place a GPO that automatically sets and greys out the appropriate information for the proxy server that we want them using. However this has caused a problem with one of the users who is using a laptop. When she takes it home at night she is unable to connect using her standard home broadband connection due to the proxy server. Since the GPO greyed out the option to change it she can not edit the information to allow her to access the internet.

I have had her try checking the option for automatically detect network settings thinking that if it could see the internet when she was connected at home it would bypass the proxy server and let her on. No luck.

We need to keep the GPO in place to ensure that the users are all connecting to the proxy server at the remote office but the ones with the laptops are still able to connect at home. Any ideas or workarounds?
0
mpatrick65
Asked:
mpatrick65
  • 2
3 Solutions
 
MitchV85Commented:
          The only way around this that I am aware of is to deny her user account access to the system32\GroupPolicy folder and that will stop the policies from applying. However this will stop policies from applying no matter where she logs in so it may be more work than necessary to change her security permissions whenever she goes home and then when she comes back into the office.
           Perhaps you could make a sepereate OU for laptop users and then assign a new GPO to that OU that specifies proxy settings for those users but allows them to change it. This way when the user is in the office and logs in the proxy settings will be applied and when the user is at home they can delete the proxy settings and get out to the internet (the settings will then be reapplied when they come back into the office and log in.)



Hope this helps you out!
Mitch
0
 
masterbakerCommented:
You could try using a tool like Proxy Changer (http://www.snapfiles.com/get/proxychanger.html) to allow her to switch between using the proxy and working without it.  I haven't used Proxy Changer before, but the idea is simple.  The proxy changes are just registry changes, so making a tool to switch them quickly and easily is pretty straightforward.  I'm sure if you searched for other proxy changing tools, you'd find several.  This one does happen to be freeware, which is nice.

Jeff
0
 
TheCleanerCommented:
You have a couple of built in choices:

1.  Change the GPO for the setting of : Disable changing connection settings, under the user config, admin templates, windows components, internet explorer : so that it doesn't grey out the ability to disable the proxy at home.

Probably like mitch said, put them in a separate OU.

OR

You can work on using an autoconfig using "automatically detect settings" instead of actually putting in a proxy IP address...

More info here:

http://www.experts-exchange.com/Web/Web_Languages/JavaScript/Q_21411191.html  (for examples of a .pac file)

and a semi-walkthrough here:

http://www.grape-info.com/doc/win2000srv/internet-gw/wpad/index.html

and if you use ISA server:

http://www.isaserver.org/tutorials/Configuring-DHCP-DNS-automatic-discovery.html


This would make it to where the only button checked is "auto configure settings" and that way at home the user would open IE, the autoconfig would say "don't see anything to configure me with, so by default I'm just going to try and go there" and the user will get to the internet sites.

0
 
TheCleanerCommented:
Thank you for the points!
0

Featured Post

Keep up with what's happening at Experts Exchange!

Sign up to receive Decoded, a new monthly digest with product updates, feature release info, continuing education opportunities, and more.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now