Solved Company Group Policy Objects

May 15, 2012 at 02:41:27
Specs: Windows 64
Hi I have disabled user to change proxy settings via GPO that works perfectly. Now i would like to know is there a way one can have these settings/policy disabled once user if off the company LAN.

See More: Company Group Policy Objects

Report •


#1
May 15, 2012 at 13:04:53
As far as I know, the policy should already be covering remote changes. I don't think you have to do anything else.
Someone, correct me if I'm wrong.

How do you know when a politician is lying? His mouth is moving.


Report •

#2
May 16, 2012 at 02:12:14
Hi

Thanks for the prompt response.

I don't want these GPO settings to take effect if the user is off our LAN (remote)
it should only apply once on VPN or either back on LAN.

regards


Report •

#3
May 16, 2012 at 06:10:41
✔ Best Answer
There is a way to set group policy based on IP address but I don't know it. I searched google & most of the hits referred to printers. You maybe able to apply that to other policies.

I searched for gpo based on ip address. Repeat the search. You may find something.

How do you know when a politician is lying? His mouth is moving.


Report •

Related Solutions

#4
May 16, 2012 at 08:35:55
One thing you could do is set the GPO refresh interval lower, but while the user is connected to your LAN, it would generate extra traffic.

Tony


Report •

#5
June 1, 2012 at 12:46:42
AFAIK, group policy settings stick until the computer connects again and gets different settings. The "IP based" way is to apply the policy to a site, but it wouldn't work because the user wouldn't be able to get different site settings out and about. The only feasible way of doing this would be to create a startup script that does some kind of test, like ping the proxy server, and if it can ping it, apply the proxy settings, if not, apply blank proxy settings. If it's worthwhile to you, you might want to post an ad on freelancer.com for someone to make you such a script if it's beyond your capability.

--
Andrew Leonard
BL Technical Services
IT Support for Small Businesses


Report •

#6
June 1, 2012 at 12:52:44
Just after I posted that I thought of a better solution... Use DHCP at your company site to publish the location of a WPAD file. When the users are on-site, they'll use the proxy settings, when off site, they won't. This page should be helpful: http://www.mattscott.org/index.php/...

--
Andrew Leonard
BL Technical Services
IT Support for Small Businesses


Report •


Ask Question