LAN settings disabled

Guest2 · 26 Oct 2009 at 12:19

My boss has logged in with a user onto Citrix and the LAN settings in IE is disabled. I have never disabled any LAN settings or the connections page through group policy so I wondered how it was disabled.

I then logged in as the user onto a test laptop and the LAN settings is NOT disabled. (As it should be)

How is the setting disabled on one machine but enabled on another? I thought Citrix is another computer so it shouldnt matter what machine you use to login

Sin_Chase · 26 Oct 2009 at 13:00

GP filtered down to the Citrix server?

Local Group Policy on Citrix server?

Guest2 · 26 Oct 2009 at 13:50

Sin_Chase said:
GP filtered down to the Citrix server?

Local Group Policy on Citrix server?

Theres no settings set to disable LAN settings on either our citrix server policy or the default domain policy

Sin_Chase · 26 Oct 2009 at 16:21

Checked the Local Policy?

oddjob62 · 26 Oct 2009 at 16:45

It's most likely to be set in user settings (not computer) on a GP that's applied to the Citrix server with GP Loopback enabled.

Guest2 · 26 Oct 2009 at 16:59

Sin_Chase said:
Checked the Local Policy?

how do i do this, i only ever need to use GP on the objects on the server

Guest2 · 26 Oct 2009 at 17:13

oddjob62 said:
It's most likely to be set in user settings (not computer) on a GP that's applied to the Citrix server with GP Loopback enabled.

What does the loopback setting do exactly? Ive read the notes but doent make much sense

'This setting is effective only when both the computer account and the user account are in Windows 2000 domains'

We are using Windows 2003.

What has happened in Group policy is that 2 policies have become inaccessible. Says i do not have read level permission on it. Our main citrix policy has duplicated, when I click the duplicated on it says the permissions for this GPO in the SYSVOL folder are inconsistent with those in AD.

I havent been into the SYSVOL folder or changed any permission. Boss has now revoked my domain admin access because of this. Strange, on his machine he doesnt see any of the duplications or inaccessible policies. I have tried logging out and back into the server 3 times and still see them.

oddjob62 · 26 Oct 2009 at 21:23

Guest2 said:
What does the loopback setting do exactly? Ive read the notes but doent make much sense

Ok normal case:
User1 has GP1 applied to him
Computer1 had GP2 applied to it

When User1 logs onto Computer1 he will notice the GP2's computer policies applied to the computer and GP1's user policies applied to him.

If you turn on loop back on GP2:
When User1 logs onto Computer1 he will notice the GP2's computer policies applied to the computer and GP1's AND GP2's user policies applied to him.

Guest2 · 27 Oct 2009 at 09:29

I have just tested the user on each of our Citrix servers individually. It is only on the second server where the LAN properties are grayed out...

oddjob62 · 27 Oct 2009 at 17:42

Run an RSOP against that server.

Sin_Chase · 27 Oct 2009 at 20:09

Loopback processing will almost certainly be on if you are applying GPs with Computer settings to Citrix servers.

Agreed with oddjob, get an RSOP run and see what is effective.