IE setting in GPO not working on vista

[wickit]

Hi
just replaced our IT suite with 25 new HP 2300 Vista Business
all GPO are working fine apart from one.
IE Home page
if once a user is logged on and you do a gpupdate /force, it then inforces the policy, and the home page changes.
any ideas ??????

PS list of polices
No last logon
Desktop redirect
Proxy settings
No desktop change
No save to desktop
No change to menu
Desktop background
Printers
im sure there are more, but i cant remember off the top of my head !!!
Thx in advance

[FN-GM]

Have You tried both of the following setting in GP

User Configuration > Internet Explorer Maintenance > Important URL's

And

User Configuration > Administrative Templates > Windows Components > Internet Explorer > Disable Changing Home Page Setting

[Kained]

Have you got the latest adm pack for ie 7 maybe that makes a difference ?

[ricki]

I have just tried changing me proxy gpo settings for my network and its not applying the proxy put is applying all the rest of the settings so maybe its to do with ie7 rather then vista.

I am also going to try the ie7 adms on monday.

Richard

[PiqueABoo]

so maybe its to do with ie7

Maybe it is.. I have got a problem where XP machines with IE7 get policy settings for the proxy. They're present in the user's ntuser.pol and other settings from the same policy are in HKCU. But when I look at the proxy reg value it is disabled and the proxy settings and exceptions values are not there.

Reapply the policy (I just increment the GPO version, rather than run gpudate) and it's fine, so I reckon it's a first time the user runs IE7 issue.

The only clue I've found.. and it might be worthless.. is that there is an HKLM value called "ProxySettingsPerUser" you didn't need for IE6 (which works fine with the same policy) but you might need to explicitly create and set to 1 for IE7.

[wickit]

Have You tried both of the following setting in GP

User Configuration > Internet Explorer Maintenance > Important URL's

And

User Configuration > Administrative Templates > Windows Components > Internet Explorer > Disable Changing Home Page Setting

Yep still no go
any more ideas ???

[ricki]

Yes I have I have managed to get it to apply to the admins and the staff now but I cannot see why its not coming through on the students.

I have updated the adms so all the policies are on the same version and this fix it for the staff and admin but I cannot see any difference between them and the students.

When I do a gpresults the students appear to get the correct settings for the proxy and there internet is working but through the old cachepilot instead of my dansguardian box.

Have you any ideas.

Richard

[wickit]

this is doing my head in.....
i heard there may be a issue with desktop redirect if you have that also
do you have that on your GPO's
If not im well and truly stuck !!!!!
bit of an update, not sure if it helps me but im sure it will you

http://support.microsoft.com/kb/555850

[PiqueABoo]

bit of an update

That's the setting I was talking about from the registry perspective. Note the Community Solutions disclaimer though - that KB isn't quite the same as a normal MS KB.

[FN-GM]

You could set the policy local on all the machines

Start > Run > gpedit.msc

[dowerr]

I am having a similar problem with IE settings. Our pupil machines are running XP Pro and mandatory network profile. No matter what level of the domain I set a policy to change the proxy settings in IE, it does not work. The only way to change the proxy settings are to create a new profile and change the settings in there before I copy it to the server share! Very time consuming.

Can anyone help with this problem?

[mattx]

If you are having problems with IE picking up proxy settings etc - then change / compile this AutoIT script so it suits your network:

RegWrite("HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main", "First Home Page", "REG_SZ", "http://navaho")
RegWrite("HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main", "Start Page", "REG_SZ", "http://navaho")
RegWrite("HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings", "ProxyServer", "REG_SZ", "PROXY:PORT")
RegWrite("HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings", "Proxyenable", "REG_DWORD", "1")
RegWrite("HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings", "ProxyOverride", "REG_SZ", "intranet")
Run('C:\Program Files\Internet Explorer\iexplore.exe')

Use it to launch IE. It will change the reg settings before it launches.
If you have problems running it then use the RunAsSet command at the start and close it at the end:

; Set the RunAs parameters to use local adminstrator account
RunAsSet("Administrator", @Computername, "adminpassword")
Code as above
; Reset user's permissions
RunAsSet()

[dowerr]

Thanks Mattx. I've not had chance to try this solution yet but i did solve the problem. I loaded the hives from the ntuser.dat file of the profile into my registry and changed the keys relating to proxy settings.