Group Policy not taking effect

I am trying to restrict a users ablilty to browse the internet by adding fake proxy settings and then disabling the ability to change proxy settings using group policy.

The proxy settings policy took affect as I set "make proxy settings per-machine ", but the policy to disable changing proxy settings will not take effect. I tested it on my computer with the same access privledges as the user and it worked without issue.

Since this is a domain user, do I have to be plugged into the domain for this setting to work? I would think that it has nothing to do with the domain since these are local GP settings.

The user is a local admin and a standard domain user. I will be removing local admin privledges also, should that make a difference? (tested on my computer and it did not make a difference)

Any help would be appreciated.

Thank you.

 

Where are you creating this group policy? Are you doing a active directory policy or are you making a policy per machine. I would put all the PC's you want to restrict under a common OU and create the policy from there.

 

The problem with placing this use in an OU is that this is a laptop that he takes home to use to remote into a terminal server so he is not logged into the domain.

I could restrict his account with the OU, but that would not stop anything once he is outside of the domain which he primarily is with this computer.

 

most routers i use have the ability to block services like http to certain MAC addresses. Try that.

 

I do not have access to this users router as it is his own personal router that he uses at home. I do not want to block all internet access either, I just need to block browser access.

Like I stated, I was able to get the proxy settings group policy to take effect and the 'make proxy settings per machine' group policy to take effect, but the one to disable changing proxy settings and/or the one to hide the connections tab will not take effect. gpupdate /force and multiple restarts did not help.

 

So you want to block this user access when he is at home?

 

Correct, only his browser access however as he needs to be able to use RDP to access the terminal server and his email client must remain functional.

He just has a tendancy to let his son use the computer and his son likes to browse to places that are dirty and infect the computer with viruses so therefore his browsing priveldges and local admin rights are being revoked.

 

Sounds like he needs to take responsibility for his laptop, anyway..

You can log onto his laptop and edit his local policy. That should work all the time. Make sure the policy blocks inheritance from any domain policy.

 

I have been editing using the local policy and there are no domain policies that will override any of these policies. I just cannot figure out why on this particular computer those 2 particlar policies will not take effect when in testing on a couple of other computers the policies worked properly without all this trouble.

 

I don't know what the answer is but you could try just disabling access to the connections tab all together. I know it's not really what you are after but if it gets the job done......

User Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel>Disable Connections Page

 

See the bold typing.

 

OOPS! Sorry. I did read your post but I guess not good enough.