Argh... fixed the problem with our inbound e-mail... Yes, the testing we were doing yesterday showed that if we logged on interactively with the "service account", the policies would apply. If we wiped that profile and just let it log on as a service, user policies were not showing up (using regedit to view the settings for that account remotely).
I found one reference here: http://technet.microsoft.com/en-us/library/cc784268(WS.10).aspx next to "winlogon.exe" that makes me think user policies only apply to an interactive logon, but I was hoping to find something more specific one way or the other. Thanks, -Bonnie On Tue, Jul 26, 2011 at 1:41 PM, Miller Bonnie L. < [email protected]> wrote: > Does anyone know the outcome of the following?**** > > ** ** > > Domain-member workstation (W7 SP1 or Wxp SP3).**** > > Domain-member user account.**** > > User account is configured to logon as a service on the workstation (set up > as a service account).**** > > ** ** > > When the workstation is started up, do user-based GPO settings apply to the > service account when it “logs on”?**** > > ** ** > > ** ** > > We have a very specific need to set the proxy configuration for a service > account, but not for the computer as a whole (when no user is logged on), so > we can’t use proxycfg/netsh. Trying to set this using GPO “User > Config\Policies\Windows Settings\Internet Explorer Maintenance” section, > like we do for our other user accounts. If we log on interactively with the > account, the settings show up. If you let the account log on as a service > and view the settings remotely via regedit, they are not being set.**** > > ** ** > > Is this the way it is supposed to work? I can’t seem to find a good > reference for this scenario. Would GPPs maybe work better?**** > > ** ** > > Thanks,**** > > Bonnie**** > > ~ Finally, powerful > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin
