Propagating IE Connection settings

Try doing it under Active Directory Group Policy. The next time the user under the group wherein you have added the group policy, the settings should take effect.

hope this helps.

You can certainly use Group Policy to make this change (GROUP POLICY / USER CONFIGURATION / WINDOWS SETTINGS / INTERNET EXPLORER MAINTENANCE / AUTOMATIC BROWSER CONFIGURATION).

Remember this policy will have to be set at a level that includes where all the user objects are located e.g. If your users are within the ?User? container, the policy must be set at the domain level. If the user objects are all within an OU then the policy should be applied at the OU level.

You would filter the policy to only apply to ?Domain Users? by removing the ?Authenticated Users? security group and ensuring that the ?READ? and ?APPLY? permissions are set for ?Domain Users?. Leaving the ?Authenticated Users? filter would apply the policy to all computers and users and would unnecessarily reduce performance (logon delay, GP refresh etc). If this policy is specifically for this then you might also want disable the Computer Policy from the GPO.

GPO settings propagate, by default, every 90 minutes (+- 30 mins). You could use ?SECEDIT /refreshpolicy user_policy /enforce? on a client to check the settings are propagating.

Or you could use the Internet Explorer Administration Kit (IEAK) but I?m not too familiar with this tool.

Regards,
Tictag

To answer your first question, yes you are in the right area.

Could you fill in a little more detail. Like do you have a NT 4 server or w2k with AD?

What are the workstations?

Does the setting go to any workstations? If it goes to some, but not the others, is there a difference between computer setup?

Sorry if some advises sound bit simple, but don't know your prof. skill level and you didn't give much info about specific setup.

Have you tested the setting on different computers with the same users.

The IE-setting is a user setting, not computer.

So (since you didn't give too precise description about what you did) try to log on to another computer with a user-account that didn't work.

If it works on another computer then you know there's something wrong with the specific wstations connection to AD.

If it doesn't work on another ws either, then you could try deleting the users profile (after backing up necessery files offcourse) and logging back on, with high hopes that it would work then.

You could use a test-account offcourse, but I bet a new account you create will work.

I do this quite regularily. I was fortunate enough to inherit some quite funky .reg edit files, which i call from my logon .bat file

@ regedit.exe /s \\domainserver\netlogon\proxy.reg

and the proxy.reg file looks something like this

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"User Agent"="Mozilla/4.0 (compatible; MSIE 5.0; Win32)"
"IE5_UA_Backup_Flag"="5.0"
"NoNetAutodial"=hex:00,00,00,00
"MigrateProxy"=dword:00000001
"EmailName"="IEUser@"
"AutoConfigProxy"="wininet.dll"
"MimeExclusionListForCache"="multipart/mixed multipart/x-mixed-replace multipart/x-byteranges "
"WarnOnPost"=hex:01,00,00,00
"UseSchannelDirectly"=hex:01,00,00,00
"EnableHttp1_1"=dword:00000001
"ProxyEnable"=dword:00000001

so set a PC exactly as you want ie to behave, then update the proxy.reg file with the strings exactly as per your registry, and bobs a very good friend of your mothers...