Protect policy at XP machine level from Zenworks 6.5 group policies 2

[TAGross]

I need to figure out a way to have Zenworks 6.5 group policies in place but to protect the local machine settings from changes to the:
-User Configuration
-Windows Settings
-Internet Explorer Maintenance
-Connection

under group policy editting.

Does anybody have an idea how I can do this

 

[marvhuffaker]

Are you trying to prevent Users from changing the settings? Or trying to prevent a ZEN policy from chaning the IE settings?

Marvin Huffaker, MCNE

http://www.redjuju.com

 

[TAGross]

I'm trying to prevent Zen policy from changing the IE settings.

 

[marvhuffaker]

Zen won't change anything in IE unless you have specifically defined a Group Policy to do so.

So if that's the case just disable those specific configurations related to the stuff you don't want.

Marvin Huffaker, MCNE

http://www.redjuju.com

 

[TAGross]

Marvin,
Are you talking about disabling the Windows group Policy in Zenworks by unchecking it or is there a way to disable control for a specific object in MMC group policy when you edit the policy?

 

[marvhuffaker]

You leave the Group Policy checked.. That's the only way to enforce the Group Policy. But what you do is you go in and edit the specific components of the policy, which essentially opens up MMC and gives you the various controls. In there, you need to find whatever is messing with your IE controls and change it. Once you exit out of MMC and get back to ConsoleOne, the changes should be written to the policy files that are distributed to the PCs.

Just to clarify further, you edit the policies from ConsoleOne -- it launches MMC and you make the changes. If for some reason you don't have the option of editing the policy, it's because the policy is for the wrong operating system. You need to be on the same operating system as the policy you are trying to modify.

Marvin Huffaker, MCNE

http://www.redjuju.com

 

[TAGross]

Thanks, but I understood that process. The problem is I want to make a change to a specific policy on each machine without having Zen override it. My users are DLU and are non-volatile. When I drill down through ConsoleOne to the policy for "Windows Group Policy" (select edit) and try to set the following:
-User Configuration
-Windows Settings
-Internet Explorer Maintenance
-Connection
-Proxy Settings
I am not presented with a property that can be set to "not configured". Instead I get a dialog box where I either check enable proxy or not. Either way that policy is pushed as defined to the workstation when the DLU user logs in.

I was looking for a way to set that to not configured. Unfortunately this is new territory for me and I'm probably just not looking in the right place.

 

[terry712]

if you dont touch this part of the policy then it will not effect the pc's
the default parts on all the pollicies are unconfigured until you set them

cant understand why you want to do it on pc rather than letting zen do it?

you are in the correct place for proxy stuff

 

[marvhuffaker]

You may need to blow away the directory holding the policies, then as terry mentioned, go in and recreate policies and don't change that setting. That should leave it as unconfigured.



Marvin Huffaker, MCNE

http://www.redjuju.com

 

[TAGross]

Thanks guys. I will try your suggestions.

 

[TAGross]

Thanks guys. That worked.