Proxy settings moved from User to Machine not removing user settings.

Hi All,
I have recently moved our company's proxy settings from User based to Machine based as we were having issues after moving from an internal proxy to a hosted external proxy. What we found was after turning off the internal some users were no longer
getting external internet.
After some investigation we found they were still getting old proxy settings on login and after a GPupdate.exe or normal gpupdate from the server the correct settings would apply. (happened to users logging on for the 1st time) To prevent this from happening
I moved the proxy settings to the Computer GPO and it all appeared to work in the test GPO and in live. But a few days later we got some calls logged to our help desk stating they don't get external internet. After some more
investigation we found that they are still getting the user policy applied to them even though it has all been removed from the User GPO.
I found if I remove the proxy settings it doesn't always apply to users but if I add info in it always updates to the user. What can be causing this? Some of these users have local admin rights and I thought at first it might be something they
did but now we are getting non admin users with these issues.
We are using IE 10 and have set the original Proxy settings using the GUI internet control panel and are now applying the proxy settings via Registry updates in the Computer GPO and enabled "Make Proxy settings per-machine" object. Our SOE
is Win 7 ent x64 with IE 10 (1500 units) and Win 8.1 ent x64 IE11 (100 units) And some XP SP3 that are in the process of migrating to Win7.
Any help on this would be much appreciated.
Cheers,
Nat

Hi Nat,
you wrote: I found if I remove the proxy settings it doesn't always apply to users but if I add info in it always updates to the user.
Does that also happen für new users now after you changed your settings to the computer settings?
I guess you used group policy preferences; that worked as "one time settings", so as long as the policy exists it will be merged with the Settings on the users computer. Please find a detailed description on
http://technet.microsoft.com/en-us/library/dn581922.aspx
So you now have 2 configuration items: your policy as well as the users registry. So to remove that you already moved the Settings from the user configuration to your Computers configuration (that worked as you described) while the Settings
in their HKCU are still there - you Need to either implement another policy to remove that, or you can set it empty.
Don't set it to "not configured" as that will keep your old setting deployed before.
Sometimes I found in more easy to implement another user preference that removed the Registry key with the Registry keys to remove a Setting instead of Publishing a "remove Setting" configuration.
Regards,
Martin

Similar Messages

List of users who do not have USER GROUP.

Hi friends,
I want to find out the list of users who do not have USER GROUP.
Can any one please let me know how to find out.
Thanks,
Ankitha

Hi,
use the transaction "suim" or the abap report "RSUSR002"
-> user information system
open tree -> user -> users by compley.... -> exec. users by complex...
next screen -> Group for authorization -> select multiple selection (right symb.) -> in the tab 'single vals' -> click on the left symb. -> select '='
leave the fields blank. -> 'F8' or ok. -> then in the main screen 'F8' or run.
so you will get all users without a group asignment
I hope it was helpfully.
best regards
Cahit

How can I unsync email so deleting from one device will not remove it from all devices?

How do I unsync email so deleting from one device will not remove it from all devices?

Sounds like you have an IMAP/Exchange mail account (vice a POP3 account). By design, an IMPA/Exchange account synchronized your mail boxes among different devices. That behavior can't be changed.

Are all programs / configuration settings restored from a Time Machine backup?

The hardrive in my late 2006 Macbook 2.0ghz laptop has finally kicked the bucket. I confirmed this with an Apple Genius at my local Apple store after she plugged in an external drive and running disk utility to run a diagnostic. However, I forgot to ask her about some details concerning my time machine backup which resides on an external drive that connects via firewire. I do know that my files and folders should be restored without issues. Although, I'm not sure about the following:
1. Will all my non-apple applications / programs be restored?
2. Will my configuration settings for mail be restored?
3. Will my itunes settings be restored (I have an iphone and ipad that connects to itunes)?
4. Will my contacts in address book be restored?
I still have the original drive of this laptop which still works just fine and boots up okay (never erased the OS) where the upgraded drive that I installed a few years ago is the one that failed. Therefore, I will be reverting back to the original drive that is smaller and slower.
The Genius recommended to run disk utility from the Snow Leopard Upgrade DVD (I originally had Leopard installed) to format the drive/install the OS and then do a full restore from my time machine backup. Although, I'm not sure if all my programs and settings for certain apps will be restored. I appreciate any help or other optioins I can possibly do to get back my saved files, programs, and settings.

After deleting users they are not removed from portal30.wwsec_person

I am building a customized script to carry on users self registration.
the script is going great and user is created and i can log into portal
successfully with this new created user.
I relogin as portal administrator and delete this new user and now if i tried
to list portal users I cant see the user.
But when I try to rerun my script to recreate this user again it fails when I
investigated I found that it fails because the entry of this user is removed
from portal30_sso.wwsec_person while it still exists in portal30.wwsec_person
so the script fails as there is duplicate in primary key.
Is this a bug in portal 309 that when the user is deleted it is not removed
from portal30.wwsec_person

This is actually a combination of intended behavior/design and a bug.
Let me first explain why there is a user in both the PORTAL30_SSO schema as well as the PORTAL30 schema.
The definition of the user, that can log in, and defines the single sign-on account, is the user's entry in the
WWSEC_PERSON$ table in the PORTAL30_SSO schema. The SSO server actually just uses a subset of the
columns in this table -- those defined in the WWSSO_SSO_USER view.
The same table exists in the PORTAL30 schema, because there is a lot of common infrastructure code
shared by both applications (Login Server, and Portal). The Security and Session Management code
is common, and this code includes the dependency on the WWSEC_PERSON$ table.
Now, assuming that the code was independent (for the sake of argument), why do we still have an entry
for the user in both schemas? As I mentioned earlier, the user entry in the SSO schema is the "master".
The SSO server can have multiple partner applications connected to it. Indeed, on my.oracle.com, the
login server there has at least 4 portals hooked up to it, and a few other non-Portal partner applications,
such as Oracle Mobile.
Each partner application may have a local user profile that it uses to store application specific attributes
of the user. This is stuff that the Login Server is not interested in, and could in no way predetermine for
all conceivable partner applications. So, it is not unreasonable for each partner application to also have
a user record which stores additional attributes of the user (not related to user authentication), and which
can be used to reference other user-related data. For example in the Portal, all the user's privileges
and group memberships are tied to the Portal's user record (foreign key constraints). So, the Portal
being just one partner application of the Login Server, it adhere's to this model and has a user entry
in it's schema corresponding to the user entry in the Login Server.
When a user logs on and accesses a partner application for the first time, the partner application (read Portal)
is expected to automatically create a local profile entry for the user on demand. The Portal does this.
In 3.0.9 and previous versions, to delete a user, you need to delete the user in the Login Server AND the Portal.
The only way to do this is to first delete the user in the Login Server, using the User Portlet.
Then type the user's name into the Portal User Profile portlet (they won't be in the LOV anymore since
you just deleted them from the login server), and click Edit, then Reset To Defaults (this means delete).
You will then get a User Not Found error, since the page is trying to go back to show the details about this user.
(All this has been fixed in 9.0.2 v2, by the way).

MX870 moved from Australia, Ink Cartridges not recognised

Hi, haing recently moved from Australia to CT I purchased replacement ink and inserted the cartirdiges. Whilst the actual cartidge numbers on the pack were different to those used in Aus, the pack had MX870 as being supported on it. The printer states the cartridges are not recognised. This does not make sense, I bought canon ink.

Hi, CAJ!
Thanks for sticking with Canon. Genuine Canon printer ink and Canon printers are designed to be sold and used in specific countries or regions. As such, a Canon printer purchased in Australia would only be able to use genuine Canon inks purchased in Australia. Likewise, inks purchased in the United States would only be able to work on Canon printers sold through Canon USA.
We hope this clears things up!

Machines not removed from AD when reimaged - Not Installing client- how to resolve client not installing

Hello, i have across a machine that does not have the sccm agent installed, but states on the server that it is installed. Now I am assuming that someone in the team reimaged but did not remove from AD. If this is the case, how do i resolve this? I have
2,000 clients so need to know how widespread this is.
i checked the client logs but there are no ccm/sccm entries. I know i could probably remove from SCCM then run a Discovery Method, but if there are more out there, i need to find a fix potentially. The client is not installed on the image. Boundarys all
set ok.
SCCM 2012 R2
Cheers

You could create a new collection with a query to find out when a clients last heartbeat was or maybe hardware inventory data age? This isn't going to completely solve the problem, but it will narrow down which clients your after. The queries I have below
have an age value of greater than or equal to 30 days. Just increase this obviously to query for clients that haven't reported back in longer amounts of time.
Heartbeat Query
select SMS_R_SYSTEM.ResourceID,SMS_R_SYSTEM.ResourceType,SMS_R_SYSTEM.Name,SMS_R_SYSTEM.SMSUniqueIdentifier,SMS_R_SYSTEM.ResourceDomainORWorkgroup,SMS_R_SYSTEM.Client from SMS_R_System where AgentName in ("Heartbeat Discovery") and DATEDIFF(day,AgentTime,GetDate())>=30
Hardware Inventory Scan Date Query
select SMS_R_SYSTEM.ResourceID,SMS_R_SYSTEM.ResourceType,SMS_R_SYSTEM.Name,SMS_R_SYSTEM.SMSUniqueIdentifier,SMS_R_SYSTEM.ResourceDomainORWorkgroup,SMS_R_SYSTEM.Client from SMS_R_System where ResourceId in (select SMS_R_System.ResourceID from SMS_R_System
inner join SMS_G_System_WORKSTATION_STATUS on SMS_G_System_WORKSTATION_STATUS.ResourceID = SMS_R_System.ResourceId where DATEDIFF(dd,SMS_G_System_WORKSTATION_STATUS.LastHardwareScan,GetDate()) > 30)
Its also likely that clients in this situation will be marked by Config Manager as inactive. So you could also just sort by your inactive clients but this again will have a % of error as your inactive clients may be a result of workstations being off your
network for a prolonged period of time or simply turned off.
If you can ping a client that has a hardware inventory age of greater than 30 days but you have a client policy to run it say daily, then you could argue they fall into the category your after.
You could also look at this outside of the Console all together. A possible option could be to use a startup / login script to check for the presence of the Config Manager client and then install it if its not (there are quite a few about). If you're not
comfortable with this, then you could use a startup / login script to check for the presence of the client and write say a hostname or something similar to a text file.
Cheers
Damon

Can not remove users home folders from TM exclude list.

Hi
MBP mid 2012 10.9.3.
Been away from my TM for some time. So adjusted exclusions I have in place for regular backups. For some reason I can not remove the users home folder exclusion. I have reset TM by removing the plist. Everything reset apart from the exclusions. Any Ideas?
Cheers.
PJRS

Triple-click the line below on this page to select it:
~/Library/Preferences/com.apple.TimeMachine.plist
Right-click or control-click the highlighted line and select
Services ▹ Reveal in Finder (or just Reveal)
from the contextual menu.* A Finder window should open with a file named "com.apple.TimeMachine.plist" selected. Move the file to the Trash.
Repeat with this line:
~/Library/Preferences/ByHost
A folder named "ByHost" should open. Inside that folder, there may be a file with a long name beginning "com.apple.TimeMachine." If the file exists, move it to the Trash.
Restart the computer and test.
*If you don't see the contextual menu item, copy the selected text to the Clipboard by pressing the key combination command-C. In the Finder, select
Go ▹ Go to Folder...
from the menu bar and paste into the box that opens by pressing command-V. You won't see what you pasted because a line break is included. Press return.

Roles appearing in User managment but not in Users Form

I have used the WF_LOCAL_SYNCH.propagateUserRole API to add roles to new and existing users in our production instance. That seemed to go well.
When I view that user through the user management screen I see that he has the role assigned to them. Yet when he logs on he cannot see the role. When I view the user through the user form the indirect responsibility is not showing up.
We have run the Workflow Directory Services User/Role Validation against the user with the following parameters:
p_BatchSize – 10000 (Default Value 10000)
p_Check_Dangling – Yes (Default value No)
Add missing user/role assignments – Yes (Default Value No)
Update WHO columns in WF tables – No (Default Value No)
That has worked for some people but not all.
Does anyone know what is going on or how to fix this?

this you can find in Web console
configuration>>user configuration>>action>>attributes
I am able to add attribute but not able to make field as mandatory,while creating attribute we are not getting option like that you want this field mandatory or not but while modifying the attribute we are getting option like required field radio button if i select that i am getting error "you cant change an attribute to required unless all the user have value for this field"

Log out a specific user after inactivity, not all users

I'd like to log out a specific user after a few minutes of inactivity. Not all users. Is there a ways to set this on a per user basis?
I know how to do it system wide.

Should be possible with this:
Workgroup Manager 10.8

LDAP users that are not Windows users

Hello,
I would like to use Active Directory as a directory service for internal intranet sites, etc.
I have users that do not need access to a Windows desktop as they are connecting to the sites via kiosk/mobile devices.
Can I set up a user that can be validated through LDAP but would not be able to access a Windows desktop through the normal Windows logon screen ?
Chris.

Hi Chris,
If you want to restrict some users in Active Directory can only logon through mobiles/devices rather than computers, you can configure
Deny log on locally and Deny log on through Terminal Services through Group Policy.
More information for you:
User Rights
http://technet.microsoft.com/en-us/library/dd349804(v=WS.10).aspx
Best Regards,
Amy

How to remove history in the location bar? Deleting history and then using "History" only in the settings for the location bar does not remove old history.

I want to remove ''old History'' in the Location bar.
I am using Firefox 3.6.13.
"Clear recent history" does not remove the old History in the Location bar. And changing the setting to only show "History" does also not remove the old history.
Pressing "Delete" on single lines when opening the list by clicking the arrow to the right in the location bar, remove the entries temporary. But next time you type in the location bar, the same suggestions are there.

See:
* [[Clearing Location bar history]]
* [[Cannot clear Location bar history]]
Entries in the location bar drop down list with a yellow (blue on Mac) star at the right end are bookmarks.<br />
You can remove such a bookmarked item that shows in the list if you open that url in a tab and click the yellow star in the location bar.<br />
This will open the "Edit This Bookmark" dialog and you can click the Remove button to remove the bookmark if you want to remove such a bookmarked entry.

Running Reset Internet Explorer Settings from a remote machine for a user.

Before I tell them it can't be done, I figured I would check with the experts here! Here is my scenario.
1) no GPO access
2) All 60,000 workstations are windows xp :(
3) They want a powershell script to reset all the internet ie settings back to default
4) It would need to be a silent install with no prompting on the client machine
5) They will not enable winrm on the workstation so I can not utilize invoke
I have tried to utilize psexec within the powershell script and the neither the
MicrosoftFixit50195.msi nor the RunDll32.exe InetCpl.cpl,ResetIEtoDefaults work.
I have also ran process monitor on one of the machines while the above patches are being applied. There is no way to change the values of all 5400 reg keys that the patch overwrites. :(
If I could narrow down the amount of keys to a sane amount, I know I have used the format below sucessfully.
& c:\TEMP\paexec.exe \\$machine -d -e -h -lo c:\TEMP\psexec.log -u $user -p $password cmd /c reg add "HKU\$sid\software\Microsoft\Windows\CurrentVersion\Internet Settings" /v ProxyEnable /t REG_DWORD /d "1" /f

Have you tried running the executables by setting the RunOnce key?
http://msdn.microsoft.com/en-us/library/aa376977(v=vs.85).aspx
[string](0..33|%{[char][int](46+("686552495351636652556262185355647068516270555358646562655775 0645570").substring(($_*2),2))})-replace " "

GL25 Rollup from PCA to SPL not considering GCP1 settings

GL25 Rollup from PCA to SPL does not consider closed periods maintained via GCP1. That is even if period is closed via GCP1, although you cannot post a manual SPL document via GB01, you can still rollup to SPL in a closed period. We have tried even OKP1 settings at controlling level also but still the roll up happens.
On our analysis we think that controlling field movements between GLPCT & ZJVT tables using user exits that would validate the posting date, would serve the purpose.
Please let me know if there any OSS notes or any other configuration settings ,which are there so as to avoid using user exits.

Mailbox Export from Windows 7 Machine Not Working

Good Morning All
We are running Exchange 2007 SP3 on a Windows 2003 R2 server. From my Windows XP machine I am able to use the export-mailbox command without issue. From my Windows 7 machine I am unable to run this command at all and receive this error "Cannot
open the log file 'C:\Program Files\Microsoft\Exchange Server\Logging\MigrationLogs\export-Mailbox20140404-101249-2436620.log'."
Is it possible to use the export-mailbox command from a 64bit Windows 7 machine?

How sure about that are you?
http://blogs.technet.com/b/exchange/archive/2007/04/13/3401913.aspx
I'm not installing a x86 Win 7 VM to test, so let's see what the OP comes back with !
Native PST import / export was added to Exchange in 2010 SP1. Prior to that we relied on the Outlook bits.
Cheers,
Rhoderick
Microsoft Senior Exchange PFE
Blog:
http://blogs.technet.com/rmilne
Twitter:   LinkedIn:
  Facebook:
  XING:
Note: Posts are provided “AS IS” without warranty of any kind, either expressed or implied, including but not limited to the implied warranties of merchantability and/or fitness for a particular purpose.

Proxy settings moved from User to Machine not removing user settings.

Similar Messages

Maybe you are looking for