We've had the same problem with deploying IE7, only for Staff accounts randomly... proxy gpo doesn't get applied.
Can you go into the GPMC and run a group policy results task on a machine with the problem using an account that has the issue. When you get that report switch to the settings tab and right click save report. Stick it in a zip with a pass and post it here with the pass (thus preventing google indexing the contents of the zip)
Your not using loopback policy mode or anything like that?
I know what your saying about the RSOP but its hard to see if it happens here without it.
A test would be to remove ALL policies to a test OU and just apply the proxy settings to that account and see if the delay still occurs. Then add domain admin to that account and reset the profile and see if the same delay applies.
Are you applying on machine or user account ou's?
Works for students but not for staff, however if the staff run gpupdate it then applies the homepage but still no proxy. No luck with the dll either for us. Back to IE6!
Standard users can not change proxy settings after Internet Explorer 7 installation.
Now that KB isn't directly related to this problem, but does that quote mean I need to be setting IE7 proxy settings as a Computer Configuration item? If so then where is that setting as under User Configuration > Windows Settings I only get Scripts and Security Settings!This is happening because the Internet Explorer 7 sets the proxy settings per machine (rather than per-user) by default for desktop computers.
Not sure about where you can do it in the computer policy setting but you could deploy the group policy preferences windows update and try using it (you must edit GP from vista/w7/2008 to see preference options) to set the proxy as it can do it too for users as a workaround for now.
I just read the KB, does that not say just to ensure that its not applied per machine?
In order to resolve this issue you must disable the following Local Computer Policy setting - Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Make proxy settings per-machine (rather than per-user). You must set this policy setting to disabled even if Group Policy console (gpedit.msc) shows this as Not Configured.
Last edited by ZeroHour; 10th September 2009 at 02:49 PM.
Could be, I wasn't sure exactly what the KB means with regards to how IE7 works, i.e. whether the policy will apply to the machine rather than the user, or just that whatever settings are applied to one user will be applied to all users on that machine (which is what the KB is providing a fix for).
The proxy settings are actually applied in a couple of places (don't ask!) but yes, they do get applied to user OUs (as well as computer OUs due to the domain layout).So I take it your applying the gp to a users OU rather then a machine OU (otherwise loopback would be required)?
I know that having overriding gp settings for IE can cause issues tbh. I would really test it out with a ou with only 1 gp that only applys one ie setting because you cant count on it otherwise.
Duke (10th September 2009)
Very likely you're right...
Once I get a few free minutes (got a couple of staff away this week) I'll give it a proper test with different GPOs and see what the results are. Cheers for the help!
Np m8, remember removing the settings is not the same as right clicking "internet explorer maintenance" and hitting "Reset browser settings"
Doing the right click *should* truely remove the IE settings otherwise you can still get the conflict.
I think the stacking of IE settings could be the issue as GP merging is a lot more taxing and the IE settings are one of the slower/worse parts to deploy I have found.
There are currently 2 users browsing this thread. (0 members and 2 guests)