Registry pushed : Two Winning Group Policy


hi techies,

i have created 1 loopback policy , tested looks fine except 2 things.

1) proxy setting want disable :  i have pushed registry key proxyenable "0"  in ou  link policy, when check logging machine able access site proxy, when checked gpresult, showing both proxy enable, proxy server, proxyoverride 2 winning policy. 1) site level proxy having full internet access through proxy 2) ou have configured proxy setting in ou linked gp proxy disable, through proxy working

i checked order of policy there fine ou has high precedance , enforced one.

the proxy policy pushed registry setting not want use ie maintenance

2) unable hide / remove network windows explorer navigation tab after giving below registry , taking administrator right.

.clsid\{031e4825-7b94-4dc3-b131-e946b44c8dd5}\shellfolder 

clsid\{323ca680-c24d-4099-b94d-446dd2d7249e}\shellfolder 

hkey_classes_root\clsid\{323ca680-c24d-4099-b94d-446dd2d7249e}\shellfolder

hkey_local_machine\software\wow6432node\classes\clsid\{f02c1a0d-be21-4350-88b0-7367fc96ef3c}\shellfolder

registry item (key path: hkey_current_user\software\microsoft\windows\currentversion\internet settings, value name: proxyenable)hide

the following settings have applied object. within category, settings nearest top of report prevailing settings when resolving conflicts.

proxyenablehide

winning gpo

site level ie_proxy

result: success

generalhide

action

update

properties

hive

hkey_current_user

key path

software\microsoft\windows\currentversion\internet settings

value name

proxyenable

value type

reg_dword

value data

0x1 (1)

proxyenablehide

winning gpo

ou level proxy

result: success

generalhide

action

update

properties

hive

hkey_current_user

key path

software\microsoft\windows\currentversion\internet settings

value name

proxyenable

value type

reg_dword

value data

0x0 (0)

please me


with regards, raviraj nagenhatti - system administrator


hi raviraj,
please select “remove item when no longer applied” option site level ie_proxy gpo.
gp preference settings tattoo, default. in other words, when group policy object (gpo) goes out of scope, gp preference setting remain in registry. however, can change behavior of gp preference setting selecting “remove item when no longer applied” option specific gp preference setting. after selecting option, gp preference setting removed when gpo goes out of scope.
please see details from:
gp policy vs. preference vs. gp preferences
https://blogs.technet.microsoft.com/grouppolicy/2008/03/04/gp-policy-vs-preference-vs-gp-preferences/
regards,
wendy

please remember mark replies answers if , un-mark them if provide no help. if have feedback technet subscriber support, contact tnmff@microsoft.com.



Windows Server  >  Group Policy



Comments

Popular posts from this blog

Edit Group Policy

Hyper-V VM not reaching OS 'Logon' screen

DNS question...