How do I prevent or override a group policy on Windows 7?

Question

A few months ago my company was purchased by a large corporation. We recently switched our network over to the large corporate network which has more restrictions requirements. One of these is the requirement to use a proxy server for Internet traffic. However, some of our internal servers are not recognized by the corporate DNS, so we need to provide the fully qualified domain name.

For W7, we make changes to the Internet Properties for IE8 and Chrome to include our domain name as an exception to the proxy server (e.g., *.foobar.com). The problem is that a group policy that does not include our domain name is continually pushed out to my systems throughout the day. This requires me to make the appropriate changes to the Internet Properties several times a day in order to access our internal servers.

Is there a way that I can prevent the group policy from being pushed to my systems or detect when the group policy is pushed and override it? I am an administrator on all of my systems. I do have Firefox installed which is not subject to the same group policy push, but I need to have IE8 and Chrome working.

Solution 1

How is the network set up? Would it be possible for you to run a local DNS server, and have it send upstream lookups to the corporate DNS server? You could still route your traffic through the proxy, but use your own DNS.

Solution 2

Well these GPO's are changing settings in the registry and while I know this will work I don't condone it in any way.

If you find where the change is made, I'll let you do that footwork, you can then change the permissions on that registry key so that System can no longer write to it. I am rather certain it is System but I am not 100% right now. Make sure that your user still has full permissions or you will hose the whole thing, but by making it so the system doesn't have access to make the change you should be in the clear.

Again, talking to the sys admins is a much better way to go and won't get you in any hot water but there is another way that can work.

Comments

[Dave M]

Discuss with sysadmins at large corporation?

[Jet Waitforit Torres]

Yes, they have promised to add our domain name to their proxy exceptions three weeks ago, but it has not happened yet. Let's assume that it is not going to happen.

[Ixobelle]

edit your HOSTS file?