Internet Settings GPO for Users not on AD.

[Guest]

Greetings

The reason for me doing all of this is that all the machines are logging
onto the AD Domain "UK", but unfortunately the users are logging onto the NT
Domain "Europe", therefore I can't set up their user policies when they log
onto AD, cos they aren't ever logging onto it. :-(

I've done the following:

Computer Configuration\Administrative Templates\Windows Components\Internet
Explorer:
Make proxy settings per-machine (rather than per user)

http://www.microsoft.com/resources/...n/Windows/2000/server/reskit/en-us/gp/792.asp

This bit works cos it's the HKLM set, but I want to also Disable changing
proxy settings & Disable changing Automatic Configuration settings under User
Configuration\Administrative Templates\Windows Components\Internet Explorer

But then I need to also force the Connection Settings to the Auto-Config
script (a .pac file) under User Configuration\Windows Settings\Internet
Explorer Maintenance\Connection so they get redirected to the correct proxies
for various internal and external sites.

Sadly these last two don't appear to take place owing to the user not
logging into the AD, even though I'm hoping that since I'm making the proxy
setting per machine rather than user, it would just force these settings,
whatever user logs in, onto the PC.

I'm starting to run out of ideas on what to do here, cos it doesn't appear
to be happening.
Any ideas on how to get the "User" part of this GPO to kick into the
"Computer" config?

Thanx
S8n

 

[Chriss3 [MVP]]

Hello Say,
Have you tried enable the follow policy setting?
Computer Configuration\Administrative Templates\System\Group Policy\Allow
Cross-Forest User Policy and Roaming User Profiles


--
Regards
Christoffer Andersson
Microsoft MVP - Directory Services

No email replies please - reply in the newsgroup

 

[Guest]

Hi Chriss

Have you tried enable the follow policy setting?
Computer Configuration\Administrative Templates\System\Group Policy\Allow
Cross-Forest User Policy and Roaming User Profiles

I hadn't, owing to the fact that I didn't know it existed. But after reading
the explanation, it makes perfect sense. Trying it now. Shall have to wait a
little for the GPO to propagate & then shall get back to you.

Thanx
S8n

 

[Guest]

I hadn't, owing to the fact that I didn't know it existed. But after reading
the explanation, it makes perfect sense. Trying it now. Shall have to wait a
little for the GPO to propagate & then shall get back to you.

Thanx, that appears to have sorted out the forcing of proxy/autoconfig
settings onto all users on the PC. I'm not able to disable changing those
setting tho', but that's easily fixed by simply removing access to the
Connections tab.

Thanx for the advice, it's much appreciated, especially since it worked.

Oh & I've upgraded something in GPMC, as it has a hell of a lot more
security features under internet settings, which I'm also using.

Update for Windows 2000 (KB842933)
http://www.microsoft.com/downloads/...46-3af7-4eaf-9ce6-e34ea2c74faf&displaylang=en

S8n