IE GPO 2

[djtech2k]

I need to find a way to remove a proxy server from all clients IE config. I am using a proxy and am now turning it off and having the firewalll do the proxy's job. IE Maintenance allows you to configure proxy settings, but I basically need to just uncheck the proxy box on all clients. I would like to do this via GPO.

I wrote vbscript to do it, but I do not like logon scripts, plus my script just writes the registry values what are in HKCU. If a process is not run as the logged on user, then the registry settings will not be written in that users HKCU.

Any ideas?

 

[PU36]

You can make any poxy setting changes though the GPO at the OU or Domain level.

Edit the GPO and navigate to User Configuration ~ Windows Settings ~ Internet Explorer Mainenance ~ Connectio/Proxy Settings

 

[djtech2k]

That does not seem to work as I need. You can specify a proxy server, but I need to do the reverse. I need to remove all proxy settings and NOT specify any proxy or autoconfig script.

 

[58sniper]

Me thinks you'll need to use a .vbs file to make a registry change. Likely to the
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyEnable
area. YMMV

Pat Richard, MCSE MCSA:Messaging CNA
Microsoft Exchange MVP
Want to know how email works? Read for yourself -

http://www.ietf.org/rfc/rfc2821.txt

 

[djtech2k]

I already wrote one for that, but pushing it out via gpo is a different story. I hate using login/startup script. Plus it is more complex since it is HKCU. If I do it via SMS, then it wants to edit the HKCU for the SMS service account and not the logged in user.

 

[PU36]

Why can't you just enable the GPO setting but not put an information into the boxes.

 

[djtech2k]

When you do that it leaves the proxy box checked, but with a blank value. I need to uncheck the boxes and clear out the any autoconfig scripts.

 

[58sniper]

Well, I push out stuff to touch the HKCU hive all the time (GPO w/ a .vbs login script) without issue. Works great.

I suspect you'd only need to keep that policy in place long enough for everyone to hit it once.

Pat Richard, MCSE MCSA:Messaging CNA
Microsoft Exchange MVP
Want to know how email works? Read for yourself -

http://www.ietf.org/rfc/rfc2821.txt

 

[djtech2k]

How do you push the vbs out via gpo? Is it a startup script? I hate doing that because it requires a reboot to be effective and I have too many machines to have them rebooted in time.

 

[markdmac]

Below is a script I wrote that clears the proxy info and unchecks the box.

'==========================================================================
'
' NAME:ClearProxy.vbs 
'
' AUTHOR: Mark D. MacLachlan , The Spider's Parlor
' URL: [URL unfurl="true"]http://www.TheSpidersParlor.com[/URL]
' COPYRIGHT (c) 2006 All Rights Reserved
' DATE  : 5/25/2006
'
'    THIS CODE AND INFORMATION IS PROVIDED "AS IS" WITHOUT WARRANTY OF
'    ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING BUT NOT LIMITED To
'    THE IMPLIED WARRANTIES OF MERCHANTABILITY AND/OR FITNESS FOR A
'    PARTICULAR PURPOSE.
'
'    IN NO EVENT SHALL THE SPIDER'S PARLOR AND/OR ITS RESPECTIVE SUPPLIERS 
'    BE LIABLE FOR ANY SPECIAL, INDIRECT OR CONSEQUENTIAL DAMAGES OR ANY
'    DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS,
'    WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS
'    ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE
'    OF THIS CODE OR INFORMATION.
'==========================================================================
 
On Error Resume Next
Set WshShell = CreateObject("WScript.Shell")
Path = "HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\"
WshShell.RegWrite Path & "ProxyServer", vbNothing ,"REG_SZ"
WshShell.RegWrite Path & "ProxyEnable", 0 ,"REG_DWORD"
Set WSHShell = Nothing

You would need to add the above as a login script. A reboot is not required.

As an alternative, you can use GPO to push out the registry settigns. Just install the free AD GPO add in that allows you to set registry settings:

http://www.desktopstandard.com/PolicyMakerRegistryExtension.aspx

Note that Microsoft recently purchased Desktop Standard, so this is a trusted source.

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript

Work SMARTER not HARDER. The Spider's Parlor's Admin Script Pack is a collection of Administrative scripts designed to make IT Administration easier! Save time, get more work done, get the Admin Script Pack.

 

[djtech2k]

Very good as usual marc. Ironic enough, those 2 things I have done exactly. I wrote some vbscript to do exaclty what you are doing in the reg and I do have the policymaker installed for registry writes.

I was just wondering if I was missing any alternative methods or if there was a GPO designed to make this happen.

I think we may have found a winner though. In IE Maintenance GPO, there is a section for the connection config that you can detect your local config and use that as the policy. I did setup the server how I wanted and did the "detect". I pushed it out and so far it seems to be working. Fingers crossed!!!