I agree. Reviewing that policy shows no settings regarding Proxy. There's not a lot of settings in the DDP, so I'm going to push the idea of creating a smaller number of GPOs to replace it with.
Don Guyer Windows Systems Engineer Datasafe Platform Fiserv Enterprise Technology Fiserv [email protected] Office: 1-800-523-7282 x 1673 Fax: 610-293-4499 www.fiserv.com <http://www.fiserv.com/> From: Kennedy, Jim [mailto:[email protected]] Sent: Monday, February 14, 2011 10:34 AM To: NT System Admin Issues Subject: RE: (un)Enforcing Default Domain Policy Then there has to be a setting in the DDP that is overwriting it. From: Guyer, Don [mailto:[email protected]] Sent: Monday, February 14, 2011 10:32 AM To: NT System Admin Issues Subject: RE: (un)Enforcing Default Domain Policy Just did that. Proxy is there when denying DDP, not there after I took out the explicit deny. Don Guyer Windows Systems Engineer Datasafe Platform Fiserv Enterprise Technology Fiserv [email protected] Office: 1-800-523-7282 x 1673 Fax: 610-293-4499 www.fiserv.com <http://www.fiserv.com/> From: Kennedy, Jim [mailto:[email protected]] Sent: Monday, February 14, 2011 10:27 AM To: NT System Admin Issues Subject: RE: (un)Enforcing Default Domain Policy Can you get a machine in the remote location into a test OU and go from there? From: Guyer, Don [mailto:[email protected]] Sent: Monday, February 14, 2011 10:25 AM To: NT System Admin Issues Subject: RE: (un)Enforcing Default Domain Policy Yes, I'm following. The issue we're having is we're trying to configure Internet proxy settings in one domain, where the physical hardware is at 2 different locations. The new GPOs for these Proxies are not working, at the OU level. There are no settings in the DDP for Proxy. I just explicitly denied my user account Read and Apply access to the DDP and the Proxy settings are there. That means that even though there are no proxy settings in the DDP, it is somehow overriding. Thx, Don Guyer Windows Systems Engineer Datasafe Platform Fiserv Enterprise Technology Fiserv [email protected] Office: 1-800-523-7282 x 1673 Fax: 610-293-4499 www.fiserv.com <http://www.fiserv.com/> From: Jonathan Link [mailto:[email protected]] Sent: Monday, February 14, 2011 10:17 AM To: NT System Admin Issues Subject: Re: (un)Enforcing Default Domain Policy If you unenforce a GPO, subsequent GPO's can overwrite the settings. That's the actually meaning of enforced, not allowing settings to be overwritten by GPO's in OU's below the GPO which is enforced. Does that make sense? It does to me, but I have a head cold and a lack of sleep trying to get something done... On Mon, Feb 14, 2011 at 9:35 AM, Guyer, Don <[email protected]> wrote: Everyone, We are troubleshooting a GPO issue and would like to remove the enforced setting on our Default Domain Policy GPO. I am just looking for assurance that this will not break anything, or remove it from being applied to OUs that it is currently applied to. Thx, Don Guyer Windows Systems Engineer Datasafe Platform Fiserv Enterprise Technology Fiserv [email protected] Office: 1-800-523-7282 x 1673 Fax: 610-293-4499 www.fiserv.com <http://www.fiserv.com/> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin
