Removing GPO Proxy settings

[mthomas08]

Hi All

 

Strange one this, on 2008 R2 and when I remove the proxy setting tick box from the group policy on the server its not replicating over to staff.

Our other users dont have this issue e.g Students/Year12/13.

 

I have gone through removed the tick, nothing. Gone in and seen no tick and still not replicating over, this has been removed for a few days but today is the day we pulled the proxy server out (upgraded to lightspeed).

 

Wondering if any one else can help?

 

I have logged on to a machine and checked gpresult and all looks good.

 

Thanks

[mrbios]

Rather than just removing the tick, have you tried right clicking "Internet Explorer Maintenance" and using the "Reset browser settings" selection?

 

Also just check the heirarchy to ensure nothings being applied from higher up the tree.

[Michael]

Just create a GPP with the following code:

 

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable"=dword:00000000

 

Either reboot workstations or run gpupdate and proxy settings will be disabled.

[mthomas08]

@mrbios went through every policy on the server, reset the settings but still no luck. I will continue to see if there is some kind of setting some where outside of group policy causing this?

@Michael Just trying your one now worked like a treat 1st time. Brilliant Thank You, I completely forgot about the registry settings.

[mthomas08]

Well bit of an update on this, its slowly getting across but for some reason there are still users connecting with the Proxy settings....

[ricki]

HI

 

Try modeling and results in group policy and see if the setting is in more than one policy.

 

Also if the group policy is corrupt you get this or the wrong internet explorer admin is used all the settings dont apply

 

Richard

[mthomas08]

Thanks for the assist.

 

I will now add how things went, turns out GPO had an issue on a single DC server where it is not replicating over to one of the servers. I checked the sysvol\policies and there are missing folders. Turns out it's not replicating properly.

 

Doing some googling now but only error appearing is an SCHANNEL error (which is often). I have done quite a bit of DCDiag so far but not seeing any errors. So if anyone has any ideas?

 

The server having the issue is an exchange server 2010 but no other issues so far other than the missing policy folders.

[Oaktech]

I've seen this where some servers have had the GPO policy manager snap in update installed and some do not and some policies which are evident under the policy tab in AD have not been replicated into sysvol, I would check to ensure consistency accross all DC's for this as.

[mthomas08]

Checked, all looks good.

 

I have tried forcing a replication with ntfrsutl forcerepl and its still not updating.

 

*update*

 

Right, in editing group policies I had changed the DC I was using and pointed it to the email server to manually check that servers GPOs. Looks like in the email server it still had the tick box - although the other two DCs were exactly fine.

 

Temporarily I can go in and remove this tick box but it also means replication is not occuring. Also when I select another GPO it mentions to me about inconsistent permissions click ok to fix. So I will go through and check each sysvol permissions and compare with the working DCs.

 

*Looks like the group policy creator owners did not have modify ticked but the other two DCs did. I have made this change and hopefully it will replicate.

Edited June 18, 2012 by mthomas08

[mikeglover]

Just create a GPP with the following code:

 

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable"=dword:00000000

 

Either reboot workstations or run gpupdate and proxy settings will be disabled.

 

Just to confirm this worked great for me first time as well. It was really annoying me. Saved me a headache