Solved

Default Domain Policy Settings Removed but Still being Applied?

Posted on 2009-07-07
10
478 Views
Last Modified: 2012-05-07
Hi!
My Default Domain Policy had some legacy IE Settings put into it at some point before I started over 4 years ago. And I stripped them out. Unfortunately it looks like the DDP is still pushing them out even though I removed them. I know this because I did a deny to the DDP policy only on one PC and it picked up the correct proxy settings from another GPO. So is there a way to change the Default domain policy, by deleting it and creating a new one? I heard of Dcgpofix, but I only want to do that policy and not the domain controller one?

So is that possible or should I be looking to do that some other way?

Cheers
0
Comment
Question by:Colchester_Institute
10 Comments
 
LVL 70

Expert Comment

by:KCTS
Comment Utility
When you say you "stripped out" the settings I assume you just set them to NOT CONFIGURED. Try setting the policies to ENABLED (or DISABLED as appropriate) rather than just leaving them unconfigured.
0
 
LVL 1

Author Comment

by:Colchester_Institute
Comment Utility
Sorry if I confused with the strip out bit, what I meant was in the DDP there was the proxy address specified for IE, I removed these settings out of the policy so that there was no proxy specified anymore, so the setting enable proxy is unticked as it would be setting up a new GPO.

But Still.....................some how with that setting gone it is still setting it. I have checked all other GPO's and that proxy isnt specified in any of them.

hence trying to replace the DDP

Cheers
0
 
LVL 26

Expert Comment

by:Pber
Comment Utility
Do a RSOP.MSC or use Group Policy Results from the GPMC and navigate to the proxy settings and it will tell you what policy if any is setting that setting.
0
 
LVL 1

Expert Comment

by:_Fred
Comment Utility
Maybe the setting is coming from another gpo. to make sure ru the "group polici results wizard" by right cliking "group plicy results" at the group policy management console. After it runs, select the report that was produced and select the tab settings. Click the proxy setting and see what is the wining policy. This is the policy you have to change.
0
What Is Threat Intelligence?

Threat intelligence is often discussed, but rarely understood. Starting with a precise definition, along with clear business goals, is essential.

 
LVL 1

Author Comment

by:Colchester_Institute
Comment Utility
I did a RSOP.msc & a wizard to see if I could find anything that was going on.

In the Rsop I went to the proxy settings and the enable proxy settings was disabled, but the proxy address was still in there. in the Precedence tab it showed the Default Domain Policy in there and nothing else :-(

The wizard showed me the other gpo which was a user admin policy and that had no proxy information in it either?

Is that pointing to the DDP?

Cheers for your help so far
0
 
LVL 1

Expert Comment

by:_Fred
Comment Utility
Now i got confused...
What you need to see is the settings tab of the group policy results at the group policy management console after you run the group policy results wizard .
There you will see what is the wining gpo for the proxy setting. If the proxy setting doesn't appear at the group policy results, then it is disabled.
0
 
LVL 1

Author Comment

by:Colchester_Institute
Comment Utility
Got ya,

Ok under the proxy side nothing there appeared which shows like you said that nothing is being applied. Check the screenshot attached. That was the setting in the default domain policy that I took out, but it is still there and also it takes over clients sometimes with that setting instead of the correct proxy. Weird I know! And I definately know that its not being applied via any other GPO as I have gone through all of them.
proxy.JPG
0
 
LVL 1

Author Comment

by:Colchester_Institute
Comment Utility
this setting was in the default domain policy because it was specified even though it is not ticked to be enabled. Which meant that it was being pushed out to the clients like in the screen shot, removed the setting from the gpo and it got rid of the proxy specified. But the Auto Configuration tickbox is still ticked even though it is set to disabled.
0
 

Accepted Solution

by:
ee_auto earned 0 total points
Comment Utility
Question PAQ'd, 500 points refunded, and stored in the solution database.
0

Featured Post

How to improve team productivity

Quip adds documents, spreadsheets, and tasklists to your Slack experience
- Elevate ideas to Quip docs
- Share Quip docs in Slack
- Get notified of changes to your docs
- Available on iOS/Android/Desktop/Web
- Online/Offline

Join & Write a Comment

In this article, we will see the basic design consideration while designing a Multi-tenant web application in a simple manner. Though, many frameworks are available in the market to develop a multi - tenant application, but do they provide data, cod…
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

728 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

14 Experts available now in Live!

Get 1:1 Help Now