computer based and user based policy implemented together?

140 pts.
Tags:
Group Policy
Internet Explorer
Proxy
User authentication
computer based and user based policy implemented together? I am setting up a squid proxy server. To deploy it I want to setup computers such that I can have any user log into a particular workstation and have limited access but when he connects to another workstation(that does not have any group policy on), he getss full access. The interenet is open to all when the proxy address is not put into the IE Lan Options. I have setup a group policy so that the LAN settings in Inetert OPtions is disabled. I can add users to have this group policy. Internet Explorer gets a different profile for every computer that a particular user logs into. So, is there a way for the browser to take in the proxy address into the Lan setting without having me go to each computer and log in with that user name and setup his Lan settings to take the proxy address? Now, at the same time I want to setup some users such that they have limited access no matter which computer they connect too. So, they have the proxy address set into their browser not matter where they log in.
ASKED: February 20, 2008  7:39 PM
UPDATED: February 22, 2008  6:18 PM

Answer Wiki

Thanks. We'll let you know when a new response is added.

You should be able to do this via the group policies.

Computer and user policies are combined to create the effective policy for that session.

If you want a group of computers to have the setting all the time, set up a GPO with those settings in the Computer section. If you want the policy assigned to the user no matter what machine they sit at set the setting in the User section.

Now do keep in mind that not all objects are in both the User and Computer sections of the GPO.

Discuss This Question: 4  Replies

 
There was an error processing your information. Please try again later.
Thanks. We'll let you know when a new response is added.
Send me notifications when members answer or reply to this question.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy
  • Buddyfarr
    please correct me if I am wrong but what the poster is asking is about the squid proxy server, not Active Directory GPO's. So the AD GPO would not apply here. He is trying to setup rules on his Squid proxy server to apply to users and to also apply to individual computers. I am sure that there is a MAC address filter you can use on Squid to filter their surfing. Then you can setup regular user-based rules. When that person is sitting at the particular computer then both rules, computer- and user-based, would apply. If two rules conflict the more strict rule should apply.
    6,850 pointsBadges:
    report
  • Sheldon.sc
    Actually, I was referring to the GPO because I implemented a GP and added the computers to it but for some reason I cannot add the proxy address to go out to all machines. I have to manually go to each computer and set a LOCAL group policy (gpedit.msc) under the User Configuration so that it is taken in for all users. With the GPO editor under >Computer Configuration > Administrative Templates >Internet Explorer, I have enabled 1) Make proxy settings per-machine 2) Disable changing proxy setting. AND Under User Configuration > Windows Settings >Internet Explorer Maintenance > Connection > Proxy Setting, I have enabled proxy setting and put in the proxy address with the port number, without any exceptions. Now, I have implemented this group policy by adding just the computer to the group and not the user. I don’t see the sense in adding both since I wanted it implemented per computer and not user I just added the Computer to the GP. So, even if I add both the Computer and the user, the computers don’t seem to catch the setting when I restart them. So, my question was to know if there is any easier way to get the same done without me having to go to each computer and putting the GP on each computer. OR is there something that I'm missing.
    140 pointsBadges:
    report
  • Buddyfarr
    ok, that makes more sense. did you try linking that GP to an OU instead of adding the computers to it? if you link it to an OU it should affect all users or computers in that OU. also you should be able to use Group Policy Modeling to see the effects of your Group Policy before you enact it.
    6,850 pointsBadges:
    report
  • Sheldon.sc
    Well, I dont want to add all users to the proxy yet. Its on a test run to see how it works with some before I put it out on a whole. And going out to each user would mean just about 15-20 but its increasing. There are users on remote sites too. Which is why I just wanted to implement it without me having to go and get it done manually. What is a Group Policy Modeling ? How do I check the effects of my Group Policy before I deploy it? All this time I would just keep shutting down and restarting a test user computer to see if it works. Which is quite annoying since I have enabled the GP refresh interval for users to 2 mins. Which I guess should work even when I am logged in. This should change my IE settings right? OR does it need a restart?
    140 pointsBadges:
    report

Forgot Password

No problem! Submit your e-mail address below. We'll send you an e-mail containing your password.

Your password has been sent to:

To follow this tag...

There was an error processing your information. Please try again later.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Thanks! We'll email you when relevant content is added and updated.

Following