K
Keith Jakobs, MCP
Greetings:
I am having an issue with Group Policy settings for Internet Explorer not
being applied to stations where a customized version of IE was deployed
during an unattended install. I was hoping one of the MVP's might be able
to provide some insight.
Basically, I have two groups of approximately 15-20 Windows 2000 Pro
workstations that have recently been redeployed from scratch using RIS.
Service Pack 4 is installed via a slipstream, and additional installations,
including some drivers, the latest DirectX and a customized version of IE6
(made using the IEAK), automatically installed using a customized .SIF file
for the RIS CD image.
The problem is that the GPO settings fail to override either the automatic
configuration script setting, nor the proxy settings for IE on first login
for new users. When a new user logs on to one of these stations, their
connection settings for IE persist with the settings that were defined using
the IEAK. Even though the GPO settings are 'enforced' (using the User
Config/Windows Settings/Internet Explorer Maintenance/Connection policy, and
not Administrative templates).
After a certain period, the settings do seem to eventually propagate to the
user, but sometimes it can take several logins to the workstation and/or
several instantiations of Internet Explorer before they apply. The idea is
to force these groups through our ISA server instead of having full access
to the Internet, which our physical configuration would allow. Having the
Internet available to them for the first few login defeats the purpose of
limiting their Internet access for security purposes.
Does anyone have any ideas on why GPO settings are not being enforced in
this scenario? Perhaps someone knows of a registry key where the initial
auto configuration script is configured for all new users that I can delete?
Any and all help would be greatly appreciated. Thanks in advance.
Keith C. Jakobs, MCP
I am having an issue with Group Policy settings for Internet Explorer not
being applied to stations where a customized version of IE was deployed
during an unattended install. I was hoping one of the MVP's might be able
to provide some insight.
Basically, I have two groups of approximately 15-20 Windows 2000 Pro
workstations that have recently been redeployed from scratch using RIS.
Service Pack 4 is installed via a slipstream, and additional installations,
including some drivers, the latest DirectX and a customized version of IE6
(made using the IEAK), automatically installed using a customized .SIF file
for the RIS CD image.
The problem is that the GPO settings fail to override either the automatic
configuration script setting, nor the proxy settings for IE on first login
for new users. When a new user logs on to one of these stations, their
connection settings for IE persist with the settings that were defined using
the IEAK. Even though the GPO settings are 'enforced' (using the User
Config/Windows Settings/Internet Explorer Maintenance/Connection policy, and
not Administrative templates).
After a certain period, the settings do seem to eventually propagate to the
user, but sometimes it can take several logins to the workstation and/or
several instantiations of Internet Explorer before they apply. The idea is
to force these groups through our ISA server instead of having full access
to the Internet, which our physical configuration would allow. Having the
Internet available to them for the first few login defeats the purpose of
limiting their Internet access for security purposes.
Does anyone have any ideas on why GPO settings are not being enforced in
this scenario? Perhaps someone knows of a registry key where the initial
auto configuration script is configured for all new users that I can delete?
Any and all help would be greatly appreciated. Thanks in advance.
Keith C. Jakobs, MCP