GPO Problem How to block user settings being applied (urgent)

[round2it]

I have a default domain policy that supplies the proxy settings to machines (user configuration)

I want to block this policy and then apply a new proxy

I have blocked inheritance of the default policy but the user settings are still being passed through

How do I block the user settings being passed through

any help would be appretiated

[TheLibrarian]

You can disable user settings directly on the policy.

Looking at the GPMC on Windows 7, you highlight the policy in the left hand pane and choose the details tab on the right hand pane then set the selection box called GPO Status.

HTH

[Willott]

You could place "enforce" on the downlevel policy

[round2it]

Yes i have enforced the other policy but for some reason the default domain policy (user settings) is the winning policy (strange I know)

Can I block The user settings only via a filter somehow?

[Mr.Ben]

If your Users are in an OU you can 'Block Inheritance' of GPO's by right clicking on the Container

[Willott]

Gpresult definitely shows it's coming from default domain policy and not a loopback on a machine targetted ou/gpo?

[TheLibrarian]

If the Default Domain Policy is still being processed after a block inheritance has been set it must mean the policy has been set as Enforced (right click the policy in the left hand panel of the GPO).

[round2it]

The Default policy is not enforced

When I block the policy it Blocks computer settings perfectly, But the user settings are still applied.

This is simple stuff but its not doing as I ask with the user settings

[ChrisMiles]

Err cant you just remove the old proxy settings? You should not use the default domain policy for applying non-default policies, create new policy objects for your custom policy settings and link them only where they should be applied. Applying policies at the domain level and then trying to override them complicates things for you and is generally going to slow down application at the client level.

[TheLibrarian]

Hold on, is this the Computer configuration to apply a machine proxy setting to all users? Make proxy settings per-machine (rather than per user)

If so then all the filtering / block inheritance etc. isn't going to do anything.

[round2it]

that is my next step

I did not set this server up

I just dont want to break the system while everyone is in.

[round2it]

For some reason the proxy settings are set in the default domain policy ( i would have had it as a separate policy on the ous's required) this is the way to go i think

am I correct thinking that any other settings that change the proxy will not apply due to the setting being in the default domain policy.

[round2it]

Think this is the problem

All Default Domain Policies Will win over sub policies and the proxy settings should be applied with a sub policy on the ou required.

[chazzy2501]

you should run the gpresult html option on a client and see what is happening. RSOP doesn't get everything!

[round2it]

ah well email sent to everyone to say im going to break the system at 3pm today