Hi Lewi,
A GPO is logically made up of two sections - Computer Configuration and User
Configuration. Settings under Computer Configuration affect computer
accounts the GPO applies to and are applied at startup (and then refreshed
periodically). Settings under User Configuration affect user accounts the
GPO applies to and are applied at logon (and then refreshed periodically).
The Computer Configuration section of Group Policy is always pulled based on
the computer account's location in the directory. Additionally, the default
behavior is to pull the User Configuration section of Group Policy based on
the user account's location in the directory. (e.g. half of the Group Policy
settings may come from one set of GPOs whereas the other half come from a
totally different set of GPOs)
So, if you use Internet Explorer Maintenance (located under User
Configuration) and link it to an OU that only holds computer accounts,
nothing will happen by default. Two options that you could use to resolve
this problem include:
- Relink the GPO so it affects user accounts
- Enable loopback processing on the GPO that contains the proxy settings
When using loopback processing, the User Configuration portion of Group
Policy is pulled based on the computer account's location in the directory.
Depending on which setting you choose, the GPO settings for User
Configuration based on the location of the computer account can either be
merged with or totally replace the GPO settings for User Configuration based
on the location of the user account (that's a mouth full - let me know if
its unclear). In this case you would want to use the merge mode. Here is a
support article that describes loopback processing and how to enable it:
231287 Loopback Processing of Group Policy
http://support.microsoft.com/?id=231287
If I'm reading your question incorrectly and the policy does apply to user
accounts, then check out these two KB articles:
274846 HOW TO: Set Advanced Settings In Internet Explorer by Using Group
Policy Objects
http://support.microsoft.com/?id=274846
306915 Internet Explorer Maintenance Group Policies Do Not Apply During
Subsequent Logons Procedures
http://support.microsoft.com/?id=306915
Mike
------------------------------------------------------------------
Mike Aubert
MCSE, MCSD, MCDBA
(e-mail address removed)
Note the "news2" in my email address is temporary and may be changed in the
future, remove it to email me at my Permanente address.
This posting is provided "AS IS" with no warranties, and confers no rights.
