debug of Internet Explorer configuration

[Graham Turner]

was hoping for a bit of assistance in the debug of what appears to be
inconsistent setting of the "automatic configuration script" value of
Internet Explorer.

the prerequsite values are set in the user configuration section of a GPO
that is explicitly linked to a container that hold the user account.

it seems that the processing of these values is dependent on the enabling of
the "internet explorer maintenance policy processing" policy value

the gui confirms the enabling of ths policy with a value of "process even if
the gp objects have not changed".

that said i am not totally sure this is applying correctly to the
workstation based on the following;

the GPO linked to the workstation is definitely processing as it has been
modified in another section and this change has propogated to the
workstation.

HOWEVER, as i understand the setting of the "internet explorer maintenance
policy" configures the GUID identified as
"A2E30F80-D7DE-11d2-BBDE-00C04F86AE3B" ., the configuration of which is
stored in this registry location;

HKLM/SOFTWARE/MICROSOFT/WINDOWSNT/CURRENTVERSION/GP
EXTENSIONS/A2E3........AE3B

under here we see the NOGPOLISTCHANGES registry value but with a value of 1
which suggests a
"running configuration" so to speak of "update policy settings only when the
GPO changes"

this is contrary to the value set in the GPO itself

not sure if this is relevant but I have searched the registry for other
instances of the NOGPOLISTCHANGES vaule - i find an instance under;

HKML/SOFTWARE/POLICIES/MICROSOFT/WINDOWS/GROUPPOLICY/A2E3...AE3B

although this has the correct setting of NOGPOLISTCHANGES value as per the
GPO, other values are inconsistent.

any clues in verfiying the correct processing of the "Internet Explorer
maintenance processing" value will be gladly received !!

GT

 

[Buz [MSFT]]

1. Check to see if the IE policy is in preference mode.

274846 HOW TO: Set Advanced Settings In Internet Explorer by Using Group
Policy
http://support.microsoft.com/?id=274846

2. Take a look at this article:

306915 Internet Explorer Maintenance Group Policies Do Not Apply During
http://support.microsoft.com/?id=306915


Buz Brodin
MCSE NT4 / Win2K
Microsoft Enterprise Domain Support

Get Secure! - www.microsoft.com/security

This posting is provided "as is" with no warranties and confers no rights.

Please do not send e-mail directly to this alias. This alias is for
newsgroup purposes only.

 

[Graham Turner]

Buz, thanks for the post reply.

as per KB306915 it seems that the machines are not being configured
correctly to process the maintenance settings correctly.

a further qu if i may - my assumption was that the reg value would have been
configured to 1 by the enabling of the "internet explorer maintenance policy
processing" in the policy that applies to the workstation.

the GPO MMC clearly indicates that the policy is enabled

not so - it seems that this policy changes the nogpolistchanges value under
the other key i note in this email (referencing the Group policy registry
table)

is there some sort of interaction between these two reg values ?

this then begs the qu - is there a policy value that does change the
"correct" reg value or does it need to be modded by registry manipulation
(manual or otherwise)

Thanks for your on this

GT





now a further question