Interesting predicament. For reasons that would take too long to detail I need to set the following two automatic configuration settings in browsers on Windows 7 Pro workstations to the following:
"Automatically Detect Settings": True (checked)
"Use Automatic Configuration Script": True (checked) + [configuration script.wpad)
When I set up a user GPO to change the above settings that works. However if I attempt to add these two settings:
"Disable Changing Automatic Configuration Settings": Enabled
"Disable changing proxy settings": Enabled
... The lockdown of the settings happens but then the Automatic configuration settings don't change (i.e. if the settings were not correct before they remain to be incorrect and now they are locked down). I have tried breaking the GPO in to two separate GPO's, Tried setting the "autoconfig" settings GPO as a computer policy instead of user (as research indicates that computer policies run prior to user policies) - no joy! The following gives some information about order of operations in GPO [http://technet.microsoft.com/en-us/library/cc785665(v=ws.10).aspx]. I figure I just need to work it out so that the "autoconfig" settings GPO runs first somehow then the lockdown GPO runs.
I tried ensuring that the "autoconfig" settings GPO was run 1st in order. I also tried setting "enforced" on the autoconfig settings GPO - still no go.
Browser versions are IE 9 and IE 10 on the Win7 machines applied.
Thanks for your help!