Hi
We have several laptops for users which travel and when they are on the
network we have a GPO which sets a proxy in IE which cannot be disabled by
the users.
One of the laptop users has gone abroad and is trying to use wireless but
the laptop is trying to use the proxy, can we disable the GPO for the proxy
settings on the laptop without it being connected to the network so the user
can access the internet ?
--
Sam

"Sam Atkinson" <(E-Mail Removed)> wrote in
message news:7D986E6A-01AE-42E6-B935-(E-Mail Removed)...
> Hi
> We have several laptops for users which travel and when they are on
> the
> network we have a GPO which sets a proxy in IE which cannot be
> disabled by
> the users.

Since the GPO gets pushed when the user logs in but can be changed
afterward by the user (i.e., they could reconfigure IE to not use the
policy), are you blocking all HTTP traffic on your network unless it
originates from the host where the proxy is running?

> One of the laptop users has gone abroad and is trying to use
> wireless but
> the laptop is trying to use the proxy, can we disable the GPO for
> the proxy
> settings on the laptop without it being connected to the network so
> the user
> can access the internet ?

Since the user is no longer on your network to have its PDC push a
policy on his host when he logs in, why can't this user just configure
IE to *not* use the proxy?

--
Sam


"VanguardLH" wrote:

> "Sam Atkinson" <(E-Mail Removed)> wrote in
> message news:7D986E6A-01AE-42E6-B935-(E-Mail Removed)...
> > Hi
> > We have several laptops for users which travel and when they are on
> > the
> > network we have a GPO which sets a proxy in IE which cannot be
> > disabled by
> > the users.
>
> Since the GPO gets pushed when the user logs in but can be changed
> afterward by the user (i.e., they could reconfigure IE to not use the
> policy), are you blocking all HTTP traffic on your network unless it
> originates from the host where the proxy is running?
>
> > One of the laptop users has gone abroad and is trying to use
> > wireless but
> > the laptop is trying to use the proxy, can we disable the GPO for
> > the proxy
> > settings on the laptop without it being connected to the network so
> > the user
> > can access the internet ?
>
> Since the user is no longer on your network to have its PDC push a
> policy on his host when he logs in, why can't this user just configure
> IE to *not* use the proxy?
>
the user does not have permission to remove the proxy the option to do this
is disabled so im looking for a way to disable the use of the proxy in IE
which was put on by a group policy

"Sam Atkinson" wrote in message
news:37AD022E-6DD6-4B4F-933C-(E-Mail Removed)...
>
> "VanguardLH" wrote:
>
>> "Sam Atkinson" wrote ...
>>
>>> We have several laptops for users which travel and when they are
>>> on
>>> the
>>> network we have a GPO which sets a proxy in IE which cannot be
>>> disabled by
>>> the users.
>>
>> Since the GPO gets pushed when the user logs in but can be changed
>> afterward by the user (i.e., they could reconfigure IE to not use
>> the
>> policy), are you blocking all HTTP traffic on your network unless
>> it
>> originates from the host where the proxy is running?
>>
>>> One of the laptop users has gone abroad and is trying to use
>>> wireless but
>>> the laptop is trying to use the proxy, can we disable the GPO for
>>> the proxy
>>> settings on the laptop without it being connected to the network
>>> so
>>> the user
>>> can access the internet ?
>>
>> Since the user is no longer on your network to have its PDC push a
>> policy on his host when he logs in, why can't this user just
>> configure
>> IE to *not* use the proxy?
>>
> the user does not have permission to remove the proxy the option to
> do this
> is disabled so im looking for a way to disable the use of the proxy
> in IE
> which was put on by a group policy

"the option to do this is disabled"
And that means what? That the Connections panel under Internet
Options is hidden?

Looks like you will have to give the user the password to the local
Administrator account so they can change the registry for the
restriction placed there (or run gpedit.msc) regarding hiding panels
in the Internet Options applet. In gpedit.msc, they would have to
change what your policy pushed into the registry by navigating to:

User Configuration
Administrative Templates
Windows Components
Internet Explorer
Internet Control Panel

Or they could use regedit.exe to change those settings under:

HKEY_CURRENT_USER/SOFTWARE/Policies/Microsoft/Internet
Explorer/Restrictions

Or just delete that key to eliminate all the subkeys and data items
under there that restrict the user from displaying some or all panels
in the Internet Options applet. Obviously the user must have admin
privileges to make policy changes (even local ones) or use regedit.

Maybe the user could run the Network Connection wizard (in the left
pane of the Network applet in Control Panel) to create a new
connectoid (that doesn't use your proxy) and connect using that new
connectoid.

Sam Atkinson <(E-Mail Removed)> wrote:
> Hi
> We have several laptops for users which travel and when they are on
> the network we have a GPO which sets a proxy in IE which cannot be
> disabled by the users.
> One of the laptop users has gone abroad and is trying to use wireless
> but the laptop is trying to use the proxy, can we disable the GPO for
> the proxy settings on the laptop without it being connected to the
> network so the user can access the internet ?

In addition to the other replies -

* once you get this laptop back in house, you should make some changes to
your GPOs so that this can't happen again - there should be "domain" and
"not-domain" settings just as there are for the Windows firewall

* note that this question would best have been posted in
microsoft.public.windows.group_policy - that's where the GP gurus hang out.

Best o' luck!