General discussion

Locked

Propagating IE Connection settings

By robw ·
We have a need to change the "Automatically detect settings" checkmark for all users in the Enterprise. This setting is found in Internet Properties - Connections - LAN Settings.
I tried changing Default Domain policy - Internet Explorer MAintenance settings but they did not propagate throughout all computers. Can someone first tell me if I am in the right area and what I need to do to change these settings.

This conversation is currently closed to new comments.

12 total posts (Page 1 of 2)   01 | 02   Next
| Thread display: Collapse - | Expand +

All Comments

Collapse -

Propagating IE Connection settings

by robw In reply to Propagating IE Connection ...

Point value changed by question poster.

Collapse -

Propagating IE Connection settings

by robw In reply to Propagating IE Connection ...

Point value changed by question poster.

Collapse -

Propagating IE Connection settings

by R. A. Caluste In reply to Propagating IE Connection ...

Try doing it under Active Directory Group Policy. The next time the user under the group wherein you have added the group policy, the settings should take effect.

hope this helps.

Collapse -

Propagating IE Connection settings

by robw In reply to Propagating IE Connection ...

This is not effecting workstations wo aleadt have setting checked

Collapse -

Propagating IE Connection settings

by Tictag In reply to Propagating IE Connection ...

You can certainly use Group Policy to make this change (GROUP POLICY / USER CONFIGURATION / WINDOWS SETTINGS / INTERNET EXPLORER MAINTENANCE / AUTOMATIC BROWSER CONFIGURATION).

Remember this policy will have to be set at a level that includes where all the user objects are located e.g. If your users are within the ?User? container, the policy must be set at the domain level. If the user objects are all within an OU then the policy should be applied at the OU level.

You would filter the policy to only apply to ?Domain Users? by removing the ?Authenticated Users? security group and ensuring that the ?READ? and ?APPLY? permissions are set for ?Domain Users?. Leaving the ?Authenticated Users? filter would apply the policy to all computers and users and would unnecessarily reduce performance (logon delay, GP refresh etc). If this policy is specifically for this then you might also want disable the Computer Policy from the GPO.

GPO settings propagate, by default, every 90 minutes (+- 30 mins). You could use ?SECEDIT /refreshpolicy user_policy /enforce? on a client to check the settings are propagating.

Or you could use the Internet Explorer Administration Kit (IEAK) but I?m not too familiar with this tool.

Regards,
Tictag

Collapse -

Propagating IE Connection settings

by robw In reply to Propagating IE Connection ...

This is not effecting workstations wo aleadt have setting checked

Collapse -

by MarkusT In reply to Propagating IE Connection ...

To answer your first question, yes you are in the right area.

Could you fill in a little more detail. Like do you have a NT 4 server or w2k with AD?

What are the workstations?

Does the setting go to any workstations? If it goes to some, but not the others, is there a difference between computer setup?

Collapse -

by robw In reply to

Windows 2000 Server with AD

Collapse -

by MarkusT In reply to Propagating IE Connection ...

Sorry if some advises sound bit simple, but don't know your prof. skill level and you didn't give much info about specific setup.

Have you tested the setting on different computers with the same users.

The IE-setting is a user setting, not computer.

So (since you didn't give too precise description about what you did) try to log on to another computer with a user-account that didn't work.

If it works on another computer then you know there's something wrong with the specific wstations connection to AD.

If it doesn't work on another ws either, then you could try deleting the users profile (after backing up necessery files offcourse) and logging back on, with high hopes that it would work then.

You could use a test-account offcourse, but I bet a new account you create will work.

Collapse -

by Tonyd In reply to Propagating IE Connection ...

I do this quite regularily. I was fortunate enough to inherit some quite funky .reg edit files, which i call from my logon .bat file

@ regedit.exe /s \\domainserver\netlogon\proxy.reg

and the proxy.reg file looks something like this

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"User Agent"="Mozilla/4.0 (compatible; MSIE 5.0; Win32)"
"IE5_UA_Backup_Flag"="5.0"
"NoNetAutodial"=hex:00,00,00,00
"MigrateProxy"=dword:00000001
"EmailName"="IEUser@"
"AutoConfigProxy"="wininet.dll"
"MimeExclusionListForCache"="multipart/mixed multipart/x-mixed-replace multipart/x-byteranges "
"WarnOnPost"=hex:01,00,00,00
"UseSchannelDirectly"=hex:01,00,00,00
"EnableHttp1_1"=dword:00000001
"ProxyEnable"=dword:00000001

so set a PC exactly as you want ie to behave, then update the proxy.reg file with the strings exactly as per your registry, and bobs a very good friend of your mothers...

Back to Windows Forum
12 total posts (Page 1 of 2)   01 | 02   Next

Related Discussions

Related Forums