none
Exclude proxy settings on my laptops

    Question

  • I have a web filter that is setup as a proxy.  it is not inline. I have a group policy user setting that sets the proxy information. It works great.  I have laptop users that have an agent to connect them to the web filter while mobile.  How can I exclude the user setting on my laptop users. I have an OU created for the laptops but the group policy is a user policy not a computer policy so it will still apply even if I block inheritance on that OU...  right.

    Friday, March 14, 2014 1:25 AM

Answers

  • > I created the WMI filer and app;idd it to my i.e. proxy GP.  It seemed
    > to work opposite, my regular desktops were not getting the ieproxy goo.
     
    Yes, of course... You need 2 GPOs, one that applies to all users and a
    second that reverts your settings as desired and that only applies to
    laptops. The second one has to be linked above the first one (lower
    number) to overwrite the "all users" settings.
     
    Unfortunately, there is NO way to invert WMI filters.
     

    Martin

    Mal ein GUTES Buch über GPOs lesen?

    NO THEY ARE NOT EVIL, if you know what you are doing: Good or bad GPOs?
    And if IT bothers me - coke bottle design refreshment :))
    • Marked as answer by Timothy_Baker Monday, March 17, 2014 12:41 PM
    Monday, March 17, 2014 8:04 AM

All replies

  • Hello,

    If I am not mistaken you would like to block GPO for several users. In that case I suggest to create a security group and add the Laptop users to the group. Then Use Security Filtering concept in the proxy GPO and assign deny permission on Apply Group Policy setting for the user. More information:

    Regards.


    Mahdi Tehrani Loves Powershell
    Please kindly click on Propose As Answer or to mark this post as and helpfull to other poeple.

    Friday, March 14, 2014 4:34 AM
  • > web filter while mobile.  How can I exclude the user setting on my
    > laptop users.
     
    WMI filter: "select * from win32_battery" will apply only to laptops.
     

    Martin

    Mal ein GUTES Buch über GPOs lesen?

    NO THEY ARE NOT EVIL, if you know what you are doing: Good or bad GPOs?
    And if IT bothers me - coke bottle design refreshment :))
    • Proposed as answer by Mahdi Tehrani Saturday, March 15, 2014 4:51 AM
    Friday, March 14, 2014 8:35 AM
  • Well Actually several laptops,  If I block the user then their normal workstation will not get the i.e. proxy setting or if they log into another computer.  
    Saturday, March 15, 2014 11:35 AM
  • I created the WMI filer and app;idd it to my i.e. proxy GP.  It seemed to work opposite, my regular desktops were not getting the ieproxy goo.  I ran a gpresult and it was showing that the policy was denied.

    Saturday, March 15, 2014 11:36 AM
  • > I created the WMI filer and app;idd it to my i.e. proxy GP.  It seemed
    > to work opposite, my regular desktops were not getting the ieproxy goo.
     
    Yes, of course... You need 2 GPOs, one that applies to all users and a
    second that reverts your settings as desired and that only applies to
    laptops. The second one has to be linked above the first one (lower
    number) to overwrite the "all users" settings.
     
    Unfortunately, there is NO way to invert WMI filters.
     

    Martin

    Mal ein GUTES Buch über GPOs lesen?

    NO THEY ARE NOT EVIL, if you know what you are doing: Good or bad GPOs?
    And if IT bothers me - coke bottle design refreshment :))
    • Marked as answer by Timothy_Baker Monday, March 17, 2014 12:41 PM
    Monday, March 17, 2014 8:04 AM
  • OK, so I have 2 GP objects.  IE_Proxy and Laptop_IE.  Laptop_IE is above IE_Proxy in the link order.  So which policy do I apply the WMI filter?  I am going to say the new one I created since that filter will block it from applying to the desktops.  Then since it has a higher link order it will take precedence on the laptops.

    Monday, March 17, 2014 11:50 AM
  • Works great.  Thank you
    Monday, March 17, 2014 12:41 PM