+ Post New Thread
Page 1 of 2 12 LastLast
Results 1 to 15 of 21
Windows Server 2008 R2 Thread, GPO Problem How to block user settings being applied (urgent) in Technical; I have a default domain policy that supplies the proxy settings to machines (user configuration) I want to block this ...
  1. #1
    round2it's Avatar
    Join Date
    May 2009
    Location
    UK
    Posts
    1,084
    Thank Post
    255
    Thanked 161 Times in 116 Posts
    Rep Power
    41

    GPO Problem How to block user settings being applied (urgent)

    I have a default domain policy that supplies the proxy settings to machines (user configuration)

    I want to block this policy and then apply a new proxy

    I have blocked inheritance of the default policy but the user settings are still being passed through

    How do I block the user settings being passed through

    any help would be appretiated

  2. #2
    TheLibrarian
    Guest
    You can disable user settings directly on the policy.

    Looking at the GPMC on Windows 7, you highlight the policy in the left hand pane and choose the details tab on the right hand pane then set the selection box called GPO Status.

    HTH

  3. Thanks to TheLibrarian from:

    round2it (2nd March 2012)

  4. #3

    Join Date
    Dec 2008
    Location
    Nottingham
    Posts
    575
    Thank Post
    38
    Thanked 115 Times in 105 Posts
    Rep Power
    47
    You could place "enforce" on the downlevel policy

  5. Thanks to Willott from:

    round2it (2nd March 2012)

  6. #4
    round2it's Avatar
    Join Date
    May 2009
    Location
    UK
    Posts
    1,084
    Thank Post
    255
    Thanked 161 Times in 116 Posts
    Rep Power
    41
    Yes i have enforced the other policy but for some reason the default domain policy (user settings) is the winning policy (strange I know)

    Can I block The user settings only via a filter somehow?

  7. #5
    Mr.Ben's Avatar
    Join Date
    Jan 2008
    Location
    A Pirate Ship
    Posts
    942
    Thank Post
    182
    Thanked 158 Times in 126 Posts
    Blog Entries
    2
    Rep Power
    66
    If your Users are in an OU you can 'Block Inheritance' of GPO's by right clicking on the Container

  8. Thanks to Mr.Ben from:

    round2it (2nd March 2012)

  9. #6

    Join Date
    Dec 2008
    Location
    Nottingham
    Posts
    575
    Thank Post
    38
    Thanked 115 Times in 105 Posts
    Rep Power
    47
    Gpresult definitely shows it's coming from default domain policy and not a loopback on a machine targetted ou/gpo?

  10. Thanks to Willott from:

    round2it (2nd March 2012)

  11. #7
    TheLibrarian
    Guest
    If the Default Domain Policy is still being processed after a block inheritance has been set it must mean the policy has been set as Enforced (right click the policy in the left hand panel of the GPO).

  12. Thanks to TheLibrarian from:

    round2it (2nd March 2012)

  13. #8
    round2it's Avatar
    Join Date
    May 2009
    Location
    UK
    Posts
    1,084
    Thank Post
    255
    Thanked 161 Times in 116 Posts
    Rep Power
    41
    The Default policy is not enforced

    When I block the policy it Blocks computer settings perfectly, But the user settings are still applied.

    This is simple stuff but its not doing as I ask with the user settings

  14. #9

    Join Date
    Mar 2011
    Location
    Bournemouth
    Posts
    280
    Thank Post
    16
    Thanked 74 Times in 64 Posts
    Rep Power
    22
    Err cant you just remove the old proxy settings? You should not use the default domain policy for applying non-default policies, create new policy objects for your custom policy settings and link them only where they should be applied. Applying policies at the domain level and then trying to override them complicates things for you and is generally going to slow down application at the client level.

  15. Thanks to ChrisMiles from:

    round2it (2nd March 2012)

  16. #10
    TheLibrarian
    Guest
    Hold on, is this the Computer configuration to apply a machine proxy setting to all users? Make proxy settings per-machine (rather than per user)

    If so then all the filtering / block inheritance etc. isn't going to do anything.

  17. #11
    round2it's Avatar
    Join Date
    May 2009
    Location
    UK
    Posts
    1,084
    Thank Post
    255
    Thanked 161 Times in 116 Posts
    Rep Power
    41
    that is my next step

    I did not set this server up

    I just dont want to break the system while everyone is in.

  18. #12
    round2it's Avatar
    Join Date
    May 2009
    Location
    UK
    Posts
    1,084
    Thank Post
    255
    Thanked 161 Times in 116 Posts
    Rep Power
    41
    For some reason the proxy settings are set in the default domain policy ( i would have had it as a separate policy on the ous's required) this is the way to go i think

    am I correct thinking that any other settings that change the proxy will not apply due to the setting being in the default domain policy.

  19. #13
    round2it's Avatar
    Join Date
    May 2009
    Location
    UK
    Posts
    1,084
    Thank Post
    255
    Thanked 161 Times in 116 Posts
    Rep Power
    41
    Think this is the problem

    All Default Domain Policies Will win over sub policies and the proxy settings should be applied with a sub policy on the ou required.

  20. #14

    Join Date
    Jan 2008
    Location
    South West
    Posts
    1,842
    Thank Post
    219
    Thanked 271 Times in 219 Posts
    Rep Power
    70
    you should run the gpresult html option on a client and see what is happening. RSOP doesn't get everything!

  21. Thanks to chazzy2501 from:

    round2it (2nd March 2012)

  22. #15
    round2it's Avatar
    Join Date
    May 2009
    Location
    UK
    Posts
    1,084
    Thank Post
    255
    Thanked 161 Times in 116 Posts
    Rep Power
    41
    ah well email sent to everyone to say im going to break the system at 3pm today



SHARE:
+ Post New Thread
Page 1 of 2 12 LastLast

Similar Threads

  1. Replies: 2
    Last Post: 25th May 2011, 05:18 PM
  2. How to Block Google chat facilities.
    By westbourne in forum How do you do....it?
    Replies: 7
    Last Post: 16th May 2011, 12:33 PM
  3. How to Disable Power Settings for All Users
    By jzepeda in forum Windows
    Replies: 5
    Last Post: 27th January 2010, 11:21 AM
  4. AD: Block user settings GPO inheritance based on computer location
    By morganw in forum Windows Server 2000/2003
    Replies: 0
    Last Post: 23rd October 2009, 12:48 PM
  5. Does anyone know how to block chat on google
    By timbo343 in forum Windows
    Replies: 12
    Last Post: 22nd March 2006, 12:38 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •