Mark Minasi's Reader Forum
Mark Minasi's Reader Forum
Home | Profile | Register | Active Topics | Active Polls | Members | Search | FAQ | Minasi Forum RSS Feed
Username:
Password:
Save Password
Forgot your Password?

 All Forums
 HALP! Questions on Windows and Windows Server
 Group Policies
 IE maintenance only applies to new accounts
 New Topic  Reply to Topic
 Printer Friendly
Author Previous Topic Topic Next Topic  

Pesos
Honorable But Hopeless Addict

USA
3769 Posts
Status: offline

Posted - 11/09/2004 :  7:38:52 PM  Show Profile  Reply with Quote
Hi all,

GPO user settings under admin/IE maintenance (in this case specifying a proxy server for IE) only kick in for new users. current users do not get the setting applied.

searching around seems to confirm this - as these settings are specified as "preferences" and don't get forced on users (i've tried gpupdate /force).

so - is there another way I can force this proxy setting other than this GPO? Basically I want to find a way to make this change, then i will apply a policy to prevent the user from changing it.

thanks!
Wes

-Wes

dmarelia
Moderator

USA
2955 Posts
Status: offline

Posted - 11/09/2004 :  7:45:16 PM  Show Profile  Visit dmarelia's Homepage  Reply with Quote
Even preferences should get applied the first time. Has this proxy server been provided to these users before? Is there a reason you want this to be a preference rather than mandatory?

Darren Mar-Elia
MS MVP--Group Policy
Group Policy Resource Site: http://www.gpoguy.com
Group Policy Blog: http://www.sdmsoftware.com/blog
Group Policy on Twitter:
http://www.twitter.com/grouppolicyguy
Like us on Facebook: http://www.facebook.com/SDMSoftware
***********
GPO Change Auditing, Rollback and Attestation. Get SDM Software's GPAA --http://sdmsoftware.com/group-policy-management-products/group-policy-auditing-attestation-gpaa/
Go to Top of Page

Pesos
Honorable But Hopeless Addict

USA
3769 Posts
Status: offline

Posted - 11/09/2004 :  8:25:28 PM  Show Profile  Reply with Quote
the only way it kicks in is if I create a new user, then apply the policy to it. existing users are unaffected (i have tried this with many accounts).

i want it to be mandatory - by preference i was referring to the many posts i've seen referring to these IE settings as "preferences" rather than "settings" - as in the user can change them.

i want to somehow set this proxy (users have never had a proxy set before) and then prevent it from being changed. the latter can be done via GP easily enough, but the former just doesn't kick in for existing users...

thanks!
Wes

-Wes
Go to Top of Page

dmarelia
Moderator

USA
2955 Posts
Status: offline

Posted - 11/10/2004 :  12:46:41 AM  Show Profile  Visit dmarelia's Homepage  Reply with Quote
If you go to my site (www.gpoguy.com), there's an FAQs page. Go under IE maintenance and it lists the location for the brndlog.txt file, which is the log that IE maintenance policy creates on application. See if it shows anything for one of these problem users. Note that you have to explicitly set IE Maintenance to preference mode. Did you actually do that?

Darren Mar-Elia
MS MVP--Group Policy
Group Policy Resource Site: http://www.gpoguy.com
Group Policy Blog: http://www.sdmsoftware.com/blog
Group Policy on Twitter:
http://www.twitter.com/grouppolicyguy
Like us on Facebook: http://www.facebook.com/SDMSoftware
***********
GPO Change Auditing, Rollback and Attestation. Get SDM Software's GPAA --http://sdmsoftware.com/group-policy-management-products/group-policy-auditing-attestation-gpaa/
Go to Top of Page

Pesos
Honorable But Hopeless Addict

USA
3769 Posts
Status: offline

Posted - 11/10/2004 :  3:13:21 PM  Show Profile  Reply with Quote
Thanks Darren,

I originally tried it without preference mode, i then tried it with, and again without. doesn't seem to kick in regardless.

here is an exceprt from the txt file:

10/18/2004 10:07:38 NoClear flag is specified.

10/18/2004 10:07:38 COM initialized with S_OK success code.

10/18/2004 10:07:38 Branding Internet Explorer...
10/18/2004 10:07:38 Command line is "/mode:isp /peruser".

10/18/2004 10:07:38 Global branding settings are:
10/18/2004 10:07:38 Context is (0x01C00008) "Internet Content Providers, running from per-user stub";
10/18/2004 10:07:38 Settings file is "C:\Program Files\Internet Explorer\Signup\install.ins";
10/18/2004 10:07:38 Target folder path is "C:\Program Files\Internet Explorer\Signup".
10/18/2004 10:07:38 Done.

10/18/2004 10:07:38 About to clear previous branding...
10/18/2004 10:07:38 Done.

10/18/2004 10:07:38 Processing migration of old settings...
10/18/2004 10:07:38 Done.

10/18/2004 10:07:38 Processing wininet setup...
10/18/2004 10:07:38 There are no connection settings to process!
10/18/2004 10:07:38 Done.

10/18/2004 10:07:38 Processing deletion of connection settings...
10/18/2004 10:07:38 Existing connection settings weren't specified to be deleted!
10/18/2004 10:07:38 Done.

10/18/2004 10:07:38 Processing zones HKCU settings...
10/18/2004 10:07:38 Done.

10/18/2004 10:07:38 Processing local machine policies and restrictions...
10/18/2004 10:07:38 There are no local machine *.inf files to process!
10/18/2004 10:07:38 Done.

10/18/2004 10:07:38 Processing current user policies and restrictions...
10/18/2004 10:07:38 There are no current user *.inf files to process!
10/18/2004 10:07:38 Done.

10/18/2004 10:07:38 Processing legacy policies and restrictions...
10/18/2004 10:07:38 There are no local machine *.inf files to process!
10/18/2004 10:07:38 There are no current user *.inf files to process!
10/18/2004 10:07:38 There are no legacy *.inf files to process!
10/18/2004 10:07:38 Done.

10/18/2004 10:07:38 Processing general customizations...
10/18/2004 10:07:38 ! Internal failure. Some of the settings may not get applied.
10/18/2004 10:07:38 Done.





what is that last part about internal failure?!?
thanks,
Wes

-Wes
Go to Top of Page

dmarelia
Moderator

USA
2955 Posts
Status: offline

Posted - 11/10/2004 :  4:07:01 PM  Show Profile  Visit dmarelia's Homepage  Reply with Quote
Good question. So, is this happening on more than one machine? Can you create a new GPO, linked at the same level, and try applying just proxy settings in it, just as a test.

Darren Mar-Elia
MS MVP--Group Policy
Group Policy Resource Site: http://www.gpoguy.com
Group Policy Blog: http://www.sdmsoftware.com/blog
Group Policy on Twitter:
http://www.twitter.com/grouppolicyguy
Like us on Facebook: http://www.facebook.com/SDMSoftware
***********
GPO Change Auditing, Rollback and Attestation. Get SDM Software's GPAA --http://sdmsoftware.com/group-policy-management-products/group-policy-auditing-attestation-gpaa/
Go to Top of Page

Pesos
Honorable But Hopeless Addict

USA
3769 Posts
Status: offline

Posted - 11/10/2004 :  4:53:18 PM  Show Profile  Reply with Quote
ok i created a new gpo with the proxy setting and applied it to a new test OU, then moved my account in there, and get the same thing:

09/08/2004 13:57:09 NoClear flag is specified.

09/08/2004 13:57:09 COM initialized with S_OK success code.

09/08/2004 13:57:09 Branding Internet Explorer...
09/08/2004 13:57:09 Command line is "/mode:isp /peruser".

09/08/2004 13:57:09 Global branding settings are:
09/08/2004 13:57:09 Context is (0x01C00008) "Internet Content Providers, running from per-user stub";
09/08/2004 13:57:09 Settings file is "C:\Program Files\Internet Explorer\Signup\install.ins";
09/08/2004 13:57:09 Target folder path is "C:\Program Files\Internet Explorer\Signup".
09/08/2004 13:57:09 Done.

09/08/2004 13:57:09 About to clear previous branding...
09/08/2004 13:57:09 Done.

09/08/2004 13:57:09 Processing migration of old settings...
09/08/2004 13:57:09 Done.

09/08/2004 13:57:09 Processing wininet setup...
09/08/2004 13:57:09 There are no connection settings to process!
09/08/2004 13:57:09 Done.

09/08/2004 13:57:09 Processing deletion of connection settings...
09/08/2004 13:57:09 Existing connection settings weren't specified to be deleted!
09/08/2004 13:57:09 Done.

09/08/2004 13:57:09 Processing zones HKCU settings...
09/08/2004 13:57:09 Done.

09/08/2004 13:57:09 Processing local machine policies and restrictions...
09/08/2004 13:57:09 There are no local machine *.inf files to process!
09/08/2004 13:57:09 Done.

09/08/2004 13:57:09 Processing current user policies and restrictions...
09/08/2004 13:57:09 There are no current user *.inf files to process!
09/08/2004 13:57:09 Done.

09/08/2004 13:57:09 Processing legacy policies and restrictions...
09/08/2004 13:57:09 There are no local machine *.inf files to process!
09/08/2004 13:57:09 There are no current user *.inf files to process!
09/08/2004 13:57:09 There are no legacy *.inf files to process!
09/08/2004 13:57:09 Done.

09/08/2004 13:57:09 Processing general customizations...
09/08/2004 13:57:09 ! Internal failure. Some of the settings may not get applied.
09/08/2004 13:57:09 Done.

09/08/2004 13:57:09 Processing Help->About customization...
09/08/2004 13:57:09 Done.
Go to Top of Page

dmarelia
Moderator

USA
2955 Posts
Status: offline

Posted - 11/10/2004 :  11:34:00 PM  Show Profile  Visit dmarelia's Homepage  Reply with Quote
I wonder if its something with that user's profile. Can you try recreating their profile and see if it works?

Darren Mar-Elia
MS MVP--Group Policy
Group Policy Resource Site: http://www.gpoguy.com
Group Policy Blog: http://www.sdmsoftware.com/blog
Group Policy on Twitter:
http://www.twitter.com/grouppolicyguy
Like us on Facebook: http://www.facebook.com/SDMSoftware
***********
GPO Change Auditing, Rollback and Attestation. Get SDM Software's GPAA --http://sdmsoftware.com/group-policy-management-products/group-policy-auditing-attestation-gpaa/
Go to Top of Page

Pesos
Honorable But Hopeless Addict

USA
3769 Posts
Status: offline

Posted - 11/10/2004 :  11:47:39 PM  Show Profile  Reply with Quote
Hi Dareen, the first txt is from the lab account profile, the second txt i posted was from my own account. it seems to happen with any existing account. if I create a new account, it works fine.

at this point I'm about ready to throw out all the work i did on creating the original lab account and just redo it from scratch with the proxy policy in place from the beginning. of course, if I change the proxy information i'll have to go through this all again...

-Wes
Go to Top of Page
  Previous Topic Topic Next Topic  
 New Topic  Reply to Topic
 Printer Friendly
Jump To:
Mark Minasi's Reader Forum © 2002-2011 Mark Minasi Go To Top Of Page
This page was generated in 0.16 seconds. Snitz Forums 2000