Are you doing this through IE Maintenance Policies under User Configuration? If so this may apply... http://support.microsoft.com/default.aspx?scid=kb;en-us;Q306915
The behavior you describe seems consistent with the behavior in the KB, despite its age. On Mon, Feb 14, 2011 at 10:38 AM, Guyer, Don <don.gu...@fiserv.com> wrote: > I agree. Reviewing that policy shows no settings regarding Proxy. There’s > not a lot of settings in the DDP, so I’m going to push the idea of creating > a smaller number of GPOs to replace it with. > > > > *Don Guyer* > > Windows Systems Engineer > > Datasafe Platform > > Fiserv Enterprise Technology > > *Fiserv* > > don.gu...@fiserv.com > > Office: 1-800-523-7282 x 1673 > > Fax: 610-293-4499 > > www.fiserv.com > > > > *From:* Kennedy, Jim [mailto:kennedy...@elyriaschools.org] > *Sent:* Monday, February 14, 2011 10:34 AM > > *To:* NT System Admin Issues > *Subject:* RE: (un)Enforcing Default Domain Policy > > > > Then there has to be a setting in the DDP that is overwriting it. > > > > *From:* Guyer, Don [mailto:don.gu...@fiserv.com] > *Sent:* Monday, February 14, 2011 10:32 AM > *To:* NT System Admin Issues > *Subject:* RE: (un)Enforcing Default Domain Policy > > > > Just did that. Proxy is there when denying DDP, not there after I took out > the explicit deny. > > > > > > *Don Guyer* > > Windows Systems Engineer > > Datasafe Platform > > Fiserv Enterprise Technology > > *Fiserv* > > don.gu...@fiserv.com > > Office: 1-800-523-7282 x 1673 > > Fax: 610-293-4499 > > www.fiserv.com > > > > *From:* Kennedy, Jim [mailto:kennedy...@elyriaschools.org] > *Sent:* Monday, February 14, 2011 10:27 AM > *To:* NT System Admin Issues > *Subject:* RE: (un)Enforcing Default Domain Policy > > > > Can you get a machine in the remote location into a test OU and go from > there? > > > > *From:* Guyer, Don [mailto:don.gu...@fiserv.com] > *Sent:* Monday, February 14, 2011 10:25 AM > *To:* NT System Admin Issues > *Subject:* RE: (un)Enforcing Default Domain Policy > > > > Yes, I’m following. > > > > The issue we’re having is we’re trying to configure Internet proxy settings > in one domain, where the physical hardware is at 2 different locations. The > new GPOs for these Proxies are not working, at the OU level. There are no > settings in the DDP for Proxy. > > > > I just explicitly denied my user account Read and Apply access to the DDP > and the Proxy settings are there. That means that even though there are no > proxy settings in the DDP, it is somehow overriding. > > > > Thx, > > > > *Don Guyer* > > Windows Systems Engineer > > Datasafe Platform > > Fiserv Enterprise Technology > > *Fiserv* > > don.gu...@fiserv.com > > Office: 1-800-523-7282 x 1673 > > Fax: 610-293-4499 > > www.fiserv.com > > > > *From:* Jonathan Link [mailto:jonathan.l...@gmail.com] > *Sent:* Monday, February 14, 2011 10:17 AM > *To:* NT System Admin Issues > *Subject:* Re: (un)Enforcing Default Domain Policy > > > > If you unenforce a GPO, subsequent GPO's can overwrite the settings. > That's the actually meaning of enforced, not allowing settings to be > overwritten by GPO's in OU's below the GPO which is enforced. > > Does that make sense? It does to me, but I have a head cold and a lack of > sleep trying to get something done... > > On Mon, Feb 14, 2011 at 9:35 AM, Guyer, Don <don.gu...@fiserv.com> wrote: > > Everyone, > > > > We are troubleshooting a GPO issue and would like to remove > the enforced setting on our Default Domain Policy GPO. I am just looking for > assurance that this will not break anything, or remove it from being applied > to OUs that it is currently applied to. > > > > Thx, > > > > *Don Guyer* > > Windows Systems Engineer > > Datasafe Platform > > Fiserv Enterprise Technology > > *Fiserv* > > don.gu...@fiserv.com > > Office: 1-800-523-7282 x 1673 > > Fax: 610-293-4499 > > www.fiserv.com > > > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ > ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ > > --- > To manage subscriptions click here: > http://lyris.sunbelt-software.com/read/my_forums/ > or send an email to listmana...@lyris.sunbeltsoftware.com > with the body: unsubscribe ntsysadmin > > > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ > ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ > > --- > To manage subscriptions click here: > http://lyris.sunbelt-software.com/read/my_forums/ > or send an email to listmana...@lyris.sunbeltsoftware.com > with the body: unsubscribe ntsysadmin > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ > ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ > > --- > To manage subscriptions click here: > http://lyris.sunbelt-software.com/read/my_forums/ > or send an email to listmana...@lyris.sunbeltsoftware.com > with the body: unsubscribe ntsysadmin > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ > ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ > > --- > To manage subscriptions click here: > http://lyris.sunbelt-software.com/read/my_forums/ > or send an email to listmana...@lyris.sunbeltsoftware.com > with the body: unsubscribe ntsysadmin > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ > ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ > > --- > To manage subscriptions click here: > http://lyris.sunbelt-software.com/read/my_forums/ > or send an email to listmana...@lyris.sunbeltsoftware.com > with the body: unsubscribe ntsysadmin > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ > ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ > > --- > To manage subscriptions click here: > http://lyris.sunbelt-software.com/read/my_forums/ > or send an email to listmana...@lyris.sunbeltsoftware.com > with the body: unsubscribe ntsysadmin > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ > ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ > > --- > To manage subscriptions click here: > http://lyris.sunbelt-software.com/read/my_forums/ > or send an email to listmana...@lyris.sunbeltsoftware.com > with the body: unsubscribe ntsysadmin > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin