asked on

Grouop Policy Setting for Automatic Configuration

Hello,

I'm trying to work out why the following setting isn't taking effect in the timeframe specified.

Group policy -> User configuration -> Windows Settings -> IEM -> Connection
Auto Detect is checked, Enable Auto Configuration is checked, Auto Configure is set to 5 mins and the Auto-Proxy URL is pointing the the appropriate .pac file.

Yet, after this policy takes affect and i make a change (eg to the .pac file), this is not then refreshed with the original policy details after 5 minutes.

Can any tell me what is going on here ?

Thanks and good luck !

Member_2_4466560

Are other settings in that same policy taking effect? if not maybe the policy isnt "applied". Also there could be a higher level policy specifically saying disabled to that feature. Run RSOP.msc from one of the machines that needs to get that policy and see whats actually hitting it.

We can try more from there if needed.

nico-

ASKER

It's applying the policy. I generally use gpresult.

If i change the settings (e.g the .pac file) , it won't then put the original settings back when the policy is refreshed (i.e after the 5 minutes i've set it to)

I thought that was what the auto configure part was all about?

Member_2_4466560

In Windows XP/2003 environment RSOP is better to use, gpresult is windows 2000.
Just for giggles, have you tried forcing the policy to refresh with "gpupdate /force" on the client end?

nico-

ASKER

yeah, it then puts the policy back into place ..

but obviously we don't want to wait for a client reboot .. if someone has admin access and then changes the setting, we want it to re-apply within a short time period

"you can set the interval in minutes for when auto-config will happen. If you leave this value blank, or at zero, auto-config will only when the browser has been started and navigates to this page"
Auto configure every 5 minutes is the setting.

no other group policies setting are overwriting this

Member_2_4466560

You could always try the setting that makes that config panel not show up, as a way to get around "if they change it, to change it back" not many people can change settings via command line in windows anymore. And to eliminate the ability to use that, you can restrict the security of the ipconfig program though that is getting paranoid.

From your description it still seems like it is not even trying to apply. Is this a domain policy or a local policy?
Worst case you could put the policy in both places. Local and domain.

nico-

ASKER

yeah, we have the remove connections tab as fall back, but trying to work out why this won't refresh, hence the 500 points .. not an easy one

Member_2_4466560

Is it a domain policy or local?

nico-

ASKER

domain

reapplies when rebooting or gpupdate /force

Member_2_4466560

Have you tried putting the same info in the local policy? This shouldn't work but something is overwriting this and normally only a higher level domain policy can override a lower policy. Just for giggles try the local policy.

ASKER CERTIFIED SOLUTION

nico-

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial