Internet Explorer Branding Policy Hang

[Duke]

Could be, I wasn't sure exactly what the KB means with regards to how IE7 works, i.e. whether the policy will apply to the machine rather than the user, or just that whatever settings are applied to one user will be applied to all users on that machine (which is what the KB is providing a fix for).

 

So I take it your applying the gp to a users OU rather then a machine OU (otherwise loopback would be required)?

 

The proxy settings are actually applied in a couple of places (don't ask!) but yes, they do get applied to user OUs (as well as computer OUs due to the domain layout).

 

Cheers,

Chris

[ZeroHour]

Could be, I wasn't sure exactly what the KB means with regards to how IE7 works, i.e. whether the policy will apply to the machine rather than the user, or just that whatever settings are applied to one user will be applied to all users on that machine (which is what the KB is providing a fix for).

 

 

 

The proxy settings are actually applied in a couple of places (don't ask!) but yes, they do get applied to user OUs (as well as computer OUs due to the domain layout).

 

Cheers,

Chris

 

What I think it meant was even though the computer setting "make proxy settings stay on machine" is "not configured" it can still do it and you should set it to disabled to ensure its user policy only.

 

I know that having overriding gp settings for IE can cause issues tbh. I would really test it out with a ou with only 1 gp that only applys one ie setting because you cant count on it otherwise.

[Duke]

Very likely you're right...

 

Once I get a few free minutes (got a couple of staff away this week) I'll give it a proper test with different GPOs and see what the results are. Cheers for the help!

 

Chris

[ZeroHour]

Np m8, remember removing the settings is not the same as right clicking "internet explorer maintenance" and hitting "Reset browser settings"

Doing the right click *should* truely remove the IE settings otherwise you can still get the conflict.

I think the stacking of IE settings could be the issue as GP merging is a lot more taxing and the IE settings are one of the slower/worse parts to deploy I have found.