cdgill241183 Posted June 30, 2015 Posted June 30, 2015 I'll start from the beginning our ISA server is looked after by an external company and last week there was a sophos filtering update where it broke all rules setup to access shopping sites etc. At this point they asked me to change the internet settings for ie11 via group policy to point directly upstream this was the end of my troubles so I thought........ My policy is setup and all settings are correct all references to our ISA server have been removed but the policy still isn't applying and pointing to our ISA instead of upstream. Any ideas as I am slowly losing my hair?
Michael Posted June 30, 2015 Posted June 30, 2015 Have you made sure the policy isn't set in more than one place, or the Default Domain Policy?
cdgill241183 Posted June 30, 2015 Author Posted June 30, 2015 Yes it's just setup under the users ou so struggling massively with it
Michael Posted June 30, 2015 Posted June 30, 2015 By default Windows applies GPO changes every 90 minutes, but I deliberately reduce this down to 5 with a randomer of 9 for computer and user. The average ICT lesson is less than 30-40 mins and never 90 mins. If you run gpupdate /force does the change apply then?
cdgill241183 Posted June 30, 2015 Author Posted June 30, 2015 No the gpo still isn't applied when it's forced is there a force setting to see what's applied when a specific staff user is logged on without cmd access
foofighterjim Posted June 30, 2015 Posted June 30, 2015 Is the ISA IP used as the default gateway for your clients?
jonnykewell1 Posted June 30, 2015 Posted June 30, 2015 How are you administering the GPO for Ie11? What OS is running on your server?
chazzy2501 Posted June 30, 2015 Posted June 30, 2015 I've found the dedicated GPP IE Settings less reliable. I still use GPP but to make user registry settings as these work 100%! you need 3 regkeys 1 to "proxyenable" 2 to set the proxy "proxyserver" and 3 "proxyOverride" their should be a write up somewhere on doing this.
cdgill241183 Posted June 30, 2015 Author Posted June 30, 2015 Foofighterjim no there different addresses. Jonnykewell1 it's server 2012 set within users preferences Internet settings
localzuk Posted June 30, 2015 Posted June 30, 2015 Are the proxy settings "green" in GPP? Ie. any and all fields that you're applying should have a green dashed line underneath?
jonnykewell1 Posted June 30, 2015 Posted June 30, 2015 from Group policy you can try a Group Policy result on a target machine as a staff member. That way you don't need to run it client side with CMD access.
cdgill241183 Posted June 30, 2015 Author Posted June 30, 2015 All the settings required are green localzuk. Jonnykewell1 what's the line I have to run from group policy to get that info?
the_wuigi Posted June 30, 2015 Posted June 30, 2015 Press F6 to apply those settings https://blog.thesysadmins.co.uk/group-policy-internet-explorer-10-death-iem.html
Arthur Posted June 30, 2015 Posted June 30, 2015 what's the line I have to run from group policy to get that info? I think this should do it... gpresult /s [color="#FF0000"]COMPUTER[/color] /u [color="#FF0000"]DOMAIN\username[/color] /p [color="#FF0000"]PASSWORD[/color] /user [color="#FF0000"]USERNAME[/color] /scope USER More info: https://technet.microsoft.com/en-gb/library/bb490915.aspx
cdgill241183 Posted June 30, 2015 Author Posted June 30, 2015 Found this hotfix when looking around may do the trick. https://support.microsoft.com/en-us/kb/2928422
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now