[Webinar] Streamline your web hosting managementRegister Today


Cannot remove old GPO that was applied to XP workstation

Posted on 2008-01-30
Medium Priority
Last Modified: 2010-04-21
Hi Experts,

I have a customer that are on a domain using DHCP which configures the w\s's to use the router as the gateway and the server for DNS which then forwards to the router.  This is ok but they didn't want the w\s's on the net so i created an OU for the w\s's called Worksations, moved the workstations from the computer OU in AD to this OU and applied a GPO to them that disabled the proxy settings for the user and forced them to use as the proxy so no internet!

This worked fine but now they want one w\s on the internet.  So i created a 'With internet' and a 'No Internet' OU within the Workstations OU and moved all the computers into the without internet except the Office computer that they want on the internet into the With Internet OU.  Now i just set the GPO for the proxy settings to the Without internet OU.

The problem is is that the Office computer still has a disabled proxy and is still looking locally for the proxy.

Here is the current OU setup:

Workstations  , holds all xp workstations and no proxy GPO settings applied
   >With internet    ,has no proxy GPO settings applied and holds the Office computer
   >No internet    ,has the GPO to set proxy to local and disable and holds the rest of the computers

Note, i have tried setting a GPO for the With internet OU to enable the proxy at set no proxy but still looking locally.  I have also tried gpupdate/force on the office machine.

Hope this explains everything, cheers for your help in advance.
Question by:Flatsi
  • 4
  • 3

Author Comment

ID: 20776901
p.s. if i run IE as administrator then all works fine without any proxy or proxy setings disabled?!?!

Expert Comment

ID: 20777305
If you're using GPEdit then have a look at the Resultant Set of Policies and see if you can work out what's happening from there.

Otherwise run gpupdate /force from the workstation. Then run GPRESULT. You should be able to work out what's been set where.

Without seeing the GPO's and the settings it's a little difficult to tell.

Author Comment

ID: 20777783
I am using Group Policy Management Console (GPMC) to do all the GPO editing.  I have tried the GPUpdate/force and the Group Policy results for the Office machine shows the allow internet GPO in the applied section and gpresult show the Allow internet GPO.

This is direct copy from the Allow internet GPO HTML Report:

User Configuration (Enabled)
Administrative Templates
Windows Components/Internet Explorer
Policy Setting
Disable changing proxy settings Disabled
Free tool for managing users' photos in Office 365

Easily upload multiple users’ photos to Office 365. Manage them with an intuitive GUI and use handy built-in cropping and resizing options. Link photos with users based on Azure AD attributes. Free tool!


Expert Comment

ID: 20839364
Sorry for the delay I've been a little busy the last week or so.

There doesn't appear to be anything in the list that changes the proxy.

Also the GPO Report is showing User configuration details not workstation. This won't apply the User configuration based upon the Workstation unless you enable loopback processing.

Hope that helps.

Author Comment

ID: 20839826
There doesn't seem to be any settings in the Computer configuration in the GPO for the proxy settings.  

There was no entry for the proxy settings because as i edit the GPO to disable the use proxy server it doesn't give an entry for the proxy setting, i would have thought that if you disable use proxy server then there should be an entry saying Use proxy server 'Disabled' instead of just removing the entry all together.

I would rather these setting applied to the computer and not the user.

Accepted Solution

Spot_The_Cat earned 750 total points
ID: 20840066
That's what loopback processing does. It applies user setting based upon the OU that the computer is placed in rather than just the OU that the user is in.

If you've not moved you users then they'll be getting what ever setting are applied to them in the OU that they're in.

And you've not disabled the proxy:

Disable changing proxy settings Disabled

You've disabled the stop users changing the settings. No matter as this wont be applied to any users anyway.

Author Closing Comment

ID: 31426345
Sorry about the delay, the customer got a bit impatient with me tryint all this to get it working so had to manually set that computer up.  Awarding Points to Spot for prolonged help but i'm sure this might re-occur in the future.

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Let's recap what we learned from yesterday's Skyport Systems webinar.
I’m willing to make a bet that your organization stores sensitive data in your Windows File Servers; files and folders that you really don’t want making it into the wrong hands.
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
Sometimes it takes a new vantage point, apart from our everyday security practices, to truly see our Active Directory (AD) vulnerabilities. We get used to implementing the same techniques and checking the same areas for a breach. This pattern can re…

607 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question