Proxy setting in group policy

WmHenryH
WmHenryH used Ask the Experts™
on
We're running Windows 2K server as the domain controller and we're having a problem with the proxy settings getting set (occassioaly) by a group policy but I can't locate the correct GP setting.  If I go to any or all the group policies and look under User configuration, windows settings, Internet explorer maintenance, connections proxy settings I see the proxy settings we don't want to use (we don't want any) but it's grayed out and I don't know where it's being ingerited from.  How do I resolve this issue?
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
You say it is only happening occasioanlly?  That is pretty strange.
It sounds like you may have a domain controller that is not getting replication updates from the active directory.  If you are on a small network or only have a single domain controller this is unlikley, so I will assume that replication is working.

You have two options.

1.  Find out where it is inheriting from and get rid of the settings.  You can do this by getting a Resultant Set of Policy report using GPRESULT.  
http://www.windowsnetworking.com/articles_tutorials/Resultant-Set-Policy-Queries-GPRESULT.html   
This will tell you where policies are being set.

2.  If you don't need to inherit any settings from the parent GPOs you could set the Block Inheritance option on the OU containing the affected machines.  This would block all policies not just the proxy settings from being inherited so this option is most likley not a good idea.

Author

Commented:
SkyKing,
  Thanks I will try this and get back to you.  

Author

Commented:
Thanks, I ran GPRESULT /z and got the following which shows the HTTP Prox Server, IP address and some ports.  It doesn't say where it's getting this informaion except that the default domain policy and the DST Registry Update and Refresh are the applied group policy objects.  I looked through both these policies and the deault domain policy under user settings and internet connections proxy server has these addresses that are grayed out and I can't find where they are coming from.  The DST registry Update policy has no addresses under the proxy settings (not even grayed out ones)  What don't I understand here?  If I look at a user's control panel, internet settings, connection lan settings, there is a yellow band saying some settings are managed by your system administrator.
Thanks again for your help

Microsoft (R) Windows (R) XP Operating System Group Policy Result tool v2.0
Copyright (C) Microsoft Corp. 1981-2001
 
Created On 7/22/2009 at 11:22:55 AM
 
 
 
RSOP results for LCS\RAnsel on LAB-19 : Logging Mode
-----------------------------------------------------
 
OS Type:                     Microsoft Windows XP Professional
OS Configuration:            Member Workstation
OS Version:                  5.1.2600
Domain Name:                 LCS
Domain Type:                 Windows 2000
Site Name:                   Default-First-Site-Name
Roaming Profile:             
Local Profile:               C:\Documents and Settings\RAnsel
Connected over a slow link?: No
 
 
COMPUTER SETTINGS
------------------
    CN=LAB-19,CN=Computers,DC=lancasterchristian,DC=com
    Last time Group Policy was applied: 7/22/2009 at 10:38:26 AM
    Group Policy was applied from:      LCS-Server.lancasterchristian.com
    Group Policy slow link threshold:   500 kbps
 
    Applied Group Policy Objects
    -----------------------------
        Default Domain Policy
        DST Registry Update and Refresh
 
    The following GPOs were not applied because they were filtered out
    -------------------------------------------------------------------
        Staff Group Policy Object
            Filtering:  Not Applied (Empty)
 
        Faculty Group Policy Object
            Filtering:  Not Applied (Empty)
 
        test
            Filtering:  Not Applied (Empty)
 
        Local Group Policy
            Filtering:  Not Applied (Empty)
 
        Student Group Policy Object
            Filtering:  Not Applied (Empty)
 
    The computer is a part of the following security groups:
    --------------------------------------------------------
        BUILTIN\Administrators
        Everyone
        Debugger Users
        BUILTIN\Users
        NT AUTHORITY\NETWORK
        NT AUTHORITY\Authenticated Users
        LAB-19$
        Domain Computers
        
    Resultant Set Of Policies for Computer:
    ----------------------------------------
 
        Software Installations
        ----------------------
            N/A
 
        Startup Scripts
        ---------------
            GPO: DST Registry Update and Refresh
                Name:         DST2007Update_Win2k.cmd
                Parameters:   
                LastExecuted: 7:19:42 AM
 
        Shutdown Scripts
        ----------------
            N/A
 
        Account Policies
        ----------------
            GPO: Default Domain Policy
                Policy:            MinimumPasswordAge
                Computer Setting:  N/A
 
            GPO: Default Domain Policy
                Policy:            PasswordHistorySize
                Computer Setting:  1
 
            GPO: Default Domain Policy
                Policy:            MinimumPasswordLength
                Computer Setting:  N/A
 
            GPO: Default Domain Policy
                Policy:            LockoutBadCount
                Computer Setting:  N/A
 
            GPO: Default Domain Policy
                Policy:            MaximumPasswordAge
                Computer Setting:  42
 
        Audit Policy
        ------------
            N/A
 
        User Rights
        -----------
            N/A
 
        Security Options
        ----------------
            GPO: Default Domain Policy
                Policy:            RequireLogonToChangePassword
                Computer Setting:  Not Enabled
 
            GPO: Default Domain Policy
                Policy:            PasswordComplexity
                Computer Setting:  Not Enabled
 
            GPO: Default Domain Policy
                Policy:            ForceLogoffWhenHourExpire
                Computer Setting:  Not Enabled
 
            GPO: Default Domain Policy
                Policy:            ClearTextPassword
                Computer Setting:  Not Enabled
 
        Event Log Settings
        ------------------
            N/A
 
        Restricted Groups
        -----------------
            N/A
 
        System Services
        ---------------
            N/A
 
        Registry Settings
        -----------------
            N/A
 
        File System Settings
        --------------------
            N/A
 
        Public Key Policies
        -------------------
            N/A
 
        Administrative Templates
        ------------------------
            GPO: Default Domain Policy
                Setting: Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings
                State:   Enabled
 
 
USER SETTINGS
--------------
    CN=Reagan J. Ansel,CN=Users,DC=lancasterchristian,DC=com
    Last time Group Policy was applied: 7/22/2009 at 11:21:32 AM
    Group Policy was applied from:      LCS-Server.lancasterchristian.com
    Group Policy slow link threshold:   500 kbps
 
    Applied Group Policy Objects
    -----------------------------
        Student Group Policy Object
        Default Domain Policy
        DST Registry Update and Refresh
 
    The following GPOs were not applied because they were filtered out
    -------------------------------------------------------------------
        Local Group Policy
            Filtering:  Not Applied (Empty)
 
    The user is a part of the following security groups:
    ----------------------------------------------------
        Domain Users
        Everyone
        BUILTIN\Users
        NT AUTHORITY\INTERACTIVE
        NT AUTHORITY\Authenticated Users
        LOCAL
        Students
        
    Resultant Set Of Policies for User:
    ------------------------------------
 
        Software Installations
        ----------------------
            N/A
 
        Public Key Policies
        -------------------
            N/A
 
        Administrative Templates
        ------------------------
            N/A
 
        Folder Redirection
        ------------------
            N/A
 
        Internet Explorer Browser User Interface
        ----------------------------------------
            GPO: Default Domain Policy
                Large Animated Bitmap Name:      N/A
                Large Custom Logo Bitmap Name:   N/A
                Title BarText:                   N/A
                UserAgent Text:                  N/A
                Delete existing toolbar buttons: No
 
            GPO: Student Group Policy Object
                Large Animated Bitmap Name:      N/A
                Large Custom Logo Bitmap Name:   N/A
                Title BarText:                   N/A
                UserAgent Text:                  N/A
                Delete existing toolbar buttons: No
 
        Internet Explorer Connection
        ----------------------------
            HTTP Proxy Server:   10.1.3.6:14446
            Secure Proxy Server: 10.1.3.6:14446
            FTP Proxy Server:    10.1.3.6:14446
            Gopher Proxy Server: 10.1.3.6:14446
            Socks Proxy Server:  10.1.3.6:14446
            Auto Config Enable:  No
            Enable Proxy:        No
            Use same Proxy:      Yes
 
            HTTP Proxy Server:   10.1.3.6:14444
            Secure Proxy Server: 10.1.3.6:14444
            FTP Proxy Server:    10.1.3.6:14444
            Gopher Proxy Server: 10.1.3.6:14444
            Socks Proxy Server:  10.1.3.6:14444
            Auto Config Enable:  No
            Enable Proxy:        No
            Use same Proxy:      Yes
 
        Internet Explorer URLs
        ----------------------
            GPO: Default Domain Policy
                Home page URL:           N/A
                Search page URL:         N/A
                Online support page URL: N/A
 
            GPO: Student Group Policy Object
                Home page URL:           N/A
                Search page URL:         N/A
                Online support page URL: N/A
 
        Internet Explorer Security
        --------------------------
            Always Viewable Sites:     N/A
            Password Override Enabled: False
 
            Always Viewable Sites:     N/A
            Password Override Enabled: False
 
            GPO: Default Domain Policy
                Import the current Content Ratings Settings:      No
                Import the current Security Zones Settings:       No
                Import current Authenticode Security Information: No
                Enable trusted publisher lockdown:                No
 
            GPO: Student Group Policy Object
                Import the current Content Ratings Settings:      No
                Import the current Security Zones Settings:       No
                Import current Authenticode Security Information: No
                Enable trusted publisher lockdown:                No
 
        Internet Explorer Programs
        --------------------------
            GPO: Default Domain Policy
                Import the current Program Settings: No
 
            GPO: Student Group Policy Object
                Import the current Program Settings: No

Open in new window

11/26 Forrester Webinar: Savings for Enterprise

How can your organization benefit from savings just by replacing your legacy backup solutions with Acronis' #CyberProtection? Join Forrester's Joe Branca and Ryan Davis from Acronis live as they explain how you can too.

Can you run the tool again using the /V switch.  This will report in verbose mode and should display the GPO objects that the policies come from.

If you want to paste the text of the report here I would not mind looking at it for you.


To save the report as a text file you can pipe it into a text file.  
GPRESULT /V > report.txt  

That will make a file called report.txt you can paste from.

Author

Commented:
Thank you for your offer, I can't find the source and I appreciate your help.  Here's a copy of the file and the snippet copied
Bill

Microsoft (R) Windows (R) XP Operating System Group Policy Result tool v2.0
Copyright (C) Microsoft Corp. 1981-2001
 
Created On 7/23/2009 at 10:42:29 AM
 
 
RSOP results for LCS\SRule on RM302-WINXP : Logging Mode
---------------------------------------------------------
 
OS Type:                     Microsoft Windows XP Professional
OS Configuration:            Member Workstation
OS Version:                  5.1.2600
Domain Name:                 LCS
Domain Type:                 Windows 2000
Site Name:                   Default-First-Site-Name
Roaming Profile:             
Local Profile:               C:\Documents and Settings\SRule
Connected over a slow link?: No
 
 
COMPUTER SETTINGS
------------------
    CN=RM302-WINXP,CN=Computers,DC=lancasterchristian,DC=com
    Last time Group Policy was applied: 7/23/2009 at 10:36:33 AM
    Group Policy was applied from:      LCS-Server.lancasterchristian.com
    Group Policy slow link threshold:   500 kbps
 
    Applied Group Policy Objects
    -----------------------------
        Default Domain Policy
        DST Registry Update and Refresh
 
    The following GPOs were not applied because they were filtered out
    -------------------------------------------------------------------
        Staff Group Policy Object
            Filtering:  Not Applied (Empty)
 
        Faculty Group Policy Object
            Filtering:  Not Applied (Empty)
 
        test
            Filtering:  Not Applied (Empty)
 
        Local Group Policy
            Filtering:  Not Applied (Empty)
 
        Student Group Policy Object
            Filtering:  Not Applied (Empty)
 
    The computer is a part of the following security groups:
    --------------------------------------------------------
        BUILTIN\Administrators
        Everyone
        Debugger Users
        BUILTIN\Users
        NT AUTHORITY\NETWORK
        NT AUTHORITY\Authenticated Users
        RM302-WINXP$
        Domain Computers
        
    Resultant Set Of Policies for Computer:
    ----------------------------------------
 
        Software Installations
        ----------------------
            N/A
 
        Startup Scripts
        ---------------
            GPO: DST Registry Update and Refresh
                Name:         DST2007Update_Win2k.cmd
                Parameters:   
                LastExecuted: 5:46:45 PM
 
        Shutdown Scripts
        ----------------
            N/A
 
        Account Policies
        ----------------
            GPO: Default Domain Policy
                Policy:            MinimumPasswordAge
                Computer Setting:  N/A
 
            GPO: Default Domain Policy
                Policy:            PasswordHistorySize
                Computer Setting:  1
 
            GPO: Default Domain Policy
                Policy:            MinimumPasswordLength
                Computer Setting:  N/A
 
            GPO: Default Domain Policy
                Policy:            LockoutBadCount
                Computer Setting:  N/A
 
            GPO: Default Domain Policy
                Policy:            MaximumPasswordAge
                Computer Setting:  42
 
        Audit Policy
        ------------
            N/A
 
        User Rights
        -----------
            N/A
 
        Security Options
        ----------------
            GPO: Default Domain Policy
                Policy:            RequireLogonToChangePassword
                Computer Setting:  Not Enabled
 
            GPO: Default Domain Policy
                Policy:            PasswordComplexity
                Computer Setting:  Not Enabled
 
            GPO: Default Domain Policy
                Policy:            ForceLogoffWhenHourExpire
                Computer Setting:  Not Enabled
 
            GPO: Default Domain Policy
                Policy:            ClearTextPassword
                Computer Setting:  Not Enabled
 
        Event Log Settings
        ------------------
            N/A
 
        Restricted Groups
        -----------------
            N/A
 
        System Services
        ---------------
            N/A
 
        Registry Settings
        -----------------
            N/A
 
        File System Settings
        --------------------
            N/A
 
        Public Key Policies
        -------------------
            N/A
 
        Administrative Templates
        ------------------------
            GPO: Default Domain Policy
                Setting: Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings
                State:   Enabled
 
 
USER SETTINGS
--------------
    CN=SRule,CN=Users,DC=lancasterchristian,DC=com
    Last time Group Policy was applied: 7/23/2009 at 10:08:16 AM
    Group Policy was applied from:      LCS-Server.lancasterchristian.com
    Group Policy slow link threshold:   500 kbps
 
    Applied Group Policy Objects
    -----------------------------
        Default Domain Policy
        DST Registry Update and Refresh
        Local Group Policy
 
    The following GPOs were not applied because they were filtered out
    -------------------------------------------------------------------
        Staff Group Policy Object
            Filtering:  Denied (Security)
 
        Student Group Policy Object
            Filtering:  Denied (Security)
 
        Faculty Group Policy Object
            Filtering:  Denied (Security)
 
    The user is a part of the following security groups:
    ----------------------------------------------------
        Domain Users
        Everyone
        Debugger Users
        BUILTIN\Administrators
        BUILTIN\Users
        NT AUTHORITY\INTERACTIVE
        NT AUTHORITY\Authenticated Users
        LOCAL
        teststudentgroup
        Group Policy Creator Owners
        Domain Admins
        Schema Admins
        Enterprise Admins
        
    Resultant Set Of Policies for User:
    ------------------------------------
 
        Software Installations
        ----------------------
            N/A
 
        Public Key Policies
        -------------------
            N/A
 
        Administrative Templates
        ------------------------
            N/A
 
        Folder Redirection
        ------------------
            N/A
 
        Internet Explorer Browser User Interface
        ----------------------------------------
            GPO: Default Domain Policy
                Large Animated Bitmap Name:      N/A
                Large Custom Logo Bitmap Name:   N/A
                Title BarText:                   N/A
                UserAgent Text:                  N/A
                Delete existing toolbar buttons: No
 
        Internet Explorer Connection
        ----------------------------
            HTTP Proxy Server:   10.1.3.6:14446
            Secure Proxy Server: N/A
            FTP Proxy Server:    N/A
            Gopher Proxy Server: N/A
            Socks Proxy Server:  N/A
            Auto Config Enable:  No
            Enable Proxy:        Yes
            Use same Proxy:      Yes
 
            HTTP Proxy Server:   10.1.3.6:14446
            Secure Proxy Server: 10.1.3.6:14446
            FTP Proxy Server:    10.1.3.6:14446
            Gopher Proxy Server: 10.1.3.6:14446
            Socks Proxy Server:  10.1.3.6:14446
            Auto Config Enable:  No
            Enable Proxy:        No
            Use same Proxy:      Yes
 
        Internet Explorer URLs
        ----------------------
            GPO: Default Domain Policy
                Home page URL:           N/A
                Search page URL:         N/A
                Online support page URL: N/A
 
        Internet Explorer Security
        --------------------------
            Always Viewable Sites:     N/A
            Password Override Enabled: False
 
            Always Viewable Sites:     N/A
            Password Override Enabled: False
 
            GPO: Default Domain Policy
                Import the current Content Ratings Settings:      No
                Import the current Security Zones Settings:       No
                Import current Authenticode Security Information: No
                Enable trusted publisher lockdown:                No
 
        Internet Explorer Programs
        --------------------------
            GPO: Default Domain Policy
                Import the current Program Settings: No

Open in new window

GP.txt

Author

Commented:
After editing all the policy files that contained connection settings of the IP address and ports for Proxy server the situation has improved in that sometimes the yellow band stating some setting are controlled by the administrator and sometimes the Proxy settings and IP address shows up on the control panel but is grayed out.  I have no idea where these grayed out settings are coming from.

Author

Commented:
No solution was ever found

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial