[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now


GPO Computer policy

Posted on 2009-04-28
Medium Priority
Last Modified: 2012-05-06
Hi, i am trying to set a computer policy which disables proxy. i have already moved the test computer to the test OU , i have blocked inheritance. When user logs in, the result is that user policy which has proxy enabled overides the computer policy. Can there be away that computer policy overides the user policy for this particular OU?
Question by:Shankar3003

Expert Comment

ID: 24257263
I would suggest deny the user on that GPO (group policy object)

Example: I have an OU named "STAFF" with GPO "ProxySettingsGPO"
Under that I have user1, user2, user3

If I dont want user1 to use the proxy settings specified at the GPO. I will just deny user1's access to it. (Just go to ProxySettingsGPO settings --> "security" tab)

I hope this helps.


Expert Comment

ID: 24257419
Simple answer is No.

User policy will override computer policy every time, Except where the computer policy has a deny in it.

DENY always wins.
LVL 70

Accepted Solution

KCTS earned 2000 total points
ID: 24258450
You can use loopback - this re-applies the computer policy following the log-on, see http://support.microsoft.com/kb/231287

Featured Post

Keep up with what's happening at Experts Exchange!

Sign up to receive Decoded, a new monthly digest with product updates, feature release info, continuing education opportunities, and more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Many admins will agree: WSUS is is a nice invention but using it on the client side when updating a newly installed computer is still time consuming as you have to do several reboots and furthermore, the procedure of installing updates, rebooting an…
Know what services you can and cannot, should and should not combine on your server.
Windows 8 came with a dramatically different user interface known as Metro. Notably missing from that interface was a Start button and Start Menu. Microsoft responded to negative user feedback of the Metro interface, bringing back the Start button a…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…
Suggested Courses

834 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question