Solved

Help with Group Policy and browsing

Posted on 2014-02-05
6
396 Views
Last Modified: 2014-02-06
I need to find out why my users are getting a Proxy setting applied automatically in their browsers, applied by Group Policy? I need to find this IE Proxy setting in GPMC and disable it so that NO proxy is applied and all users with a proxy set manually have it overridden by group policy.

This is an ongoing problem... new users claim they "Can't get on the internet" until they uncheck the proxy from Tools > Internet Options > Connections LAN settings.
0
Comment
Question by:Elixir2
  • 4
6 Comments
 
LVL 7

Expert Comment

by:Lee Ingalls
ID: 39836693
REF: http://technet.microsoft.com/en-us/library/dd759258.aspx

See the screenshot for adding a GPO to clear IE Proxy Setting

To open or add and open a Group Policy object

On your domain controller running Windows Server 2008, click Start , point to Administrative Tools , and then click Group Policy Management . The Group Policy Management console opens.

In the left pane, double-click your forest. For example, double-click Forest: example.com .

In the left pane, double-click Domains , and then double-click the domain that contains the GPO you want to manage. For example, double-click example.com .

Do one of the following:

To open an existing domain-level GPO for editing , double click the domain that contains the GPO that you want to manage, right-click the domain policy you want to manage, and then click Edit .

To create a new Group Policy object and open for editing , right-click the domain for which you want to create a new GPO, and then click Create a GPO in this domain, and link it here .

In New GPO , in Name , type a name for the new GPO, and then click OK .

Right-click your new GPO, and then click Edit . Group Policy Management Editor opens.
GP-IE-Proxy-Off.jpg
0
 
LVL 1

Author Comment

by:Elixir2
ID: 39837261
I'm fairly familiar with GPMC adding/editing GPOs. I'm not so familiar with "linking" and "enforcing" GPOs.

I'm looking at your screenshot and I notice a significant difference. I don't have anything under User Configuration > Windows Settings > Internet...  It's just not there. The last entry is Policy-based...screenshot of my gpo I even tried creating a new GPO from scratch - same thing.
0
 
LVL 10

Accepted Solution

by:
Pramod Ubhe earned 500 total points
ID: 39838187
On one one of the affected computers, you can run GPRESULT > R > result.txt command to see what GPOs are applied or RSOP.msc for GUI.
0
PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

 
LVL 1

Author Comment

by:Elixir2
ID: 39840391
GPRESULT /R > result.txt maybe?

Microsoft (R) Windows (R) Operating System Group Policy Result tool v2.0
Copyright (C) Microsoft Corp. 1981-2001

Created On 2/6/2014 at 2:51:23 PM



RSOP data for DOMAIN\usernameDC02 : Logging Mode
--------------------------------------------------------

OS Configuration:            Primary Domain Controller
OS Version:                  6.1.7601
Site Name:                   N/A
Roaming Profile:             N/A
Local Profile:               C:\Users\username
Connected over a slow link?: No


USER SETTINGS
--------------
    CN=Lastname\, Firstname,OU=Admins,DC=domain,DC=pest1,DC=com
    Last time Group Policy was applied: 2/6/2014 at 2:39:11 PM
    Group Policy was applied from:      DC02.domain.pest1.com
    Group Policy slow link threshold:   500 kbps
    Domain Name:                        DOMAIN
    Domain Type:                        Windows 2000
    
    Applied Group Policy Objects
    -----------------------------
        Browser and Software Block
        Desktop Lock Policy
        Login
        logging
        Legal Logon
        Desktop Lock Policy
        Default Domain Policy
        DHR-LION

    The following GPOs were not applied because they were filtered out
    -------------------------------------------------------------------
        Outlook Restrict PST
            Filtering:  Disabled (GPO)

        logging
            Filtering:  Not Applied (Empty)

        Local Group Policy
            Filtering:  Not Applied (Empty)

        Browser and Software Block
            Filtering:  Not Applied (Empty)

        ConfigMgr Client Install
            Filtering:  Not Applied (Empty)

    The user is a part of the following security groups
    ---------------------------------------------------
        Domain Users
        Everyone
        BUILTIN\Users
        BUILTIN\Pre-Windows 2000 Compatible Access
        BUILTIN\Administrators
        NT AUTHORITY\INTERACTIVE
        CONSOLE LOGON
        NT AUTHORITY\Authenticated Users
        This Organization
        LOCAL
        Domain Admins
        TSWeb Users
        TSWEB Admin
        VNC Users
        WSUS Administrators
        Denied RODC Password Replication Group
        High Mandatory Level
        

Open in new window

0
 
LVL 1

Author Comment

by:Elixir2
ID: 39840443
I used the /Z switch to get more information:
Found my proxy. Still can't tell what GPO is setting it. Still don't know why the Internet Explorer line is missing from my GPMC?
Well, there's this which explains it.
But I think I like this one better...
0
 
LVL 1

Author Closing Comment

by:Elixir2
ID: 39840468
Addressed the issue I asked for. If it was a partial answer, it was because my question was vague. Good enough to get me to the next step!
0

Featured Post

Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Sometimes drives fill up and we don't know why.  If you don't understand the best way to use the tools available, you may end up being stumped as to why your drive says it's not full when you have no space left!  Here's how you can find out...
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
To efficiently enable the rotation of USB drives for backups, storage pools need to be created. This way no matter which USB drive is installed, the backups will successfully write without any administrative intervention. Multiple USB devices need t…
Windows 8 came with a dramatically different user interface known as Metro. Notably missing from that interface was a Start button and Start Menu. Microsoft responded to negative user feedback of the Metro interface, bringing back the Start button a…

863 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

23 Experts available now in Live!

Get 1:1 Help Now