Group policy laptop problems (500 pts)

Posted on 2006-03-22
Last Modified: 2010-05-18
In one of our remote offices that we support we put in place a GPO that automatically sets and greys out the appropriate information for the proxy server that we want them using. However this has caused a problem with one of the users who is using a laptop. When she takes it home at night she is unable to connect using her standard home broadband connection due to the proxy server. Since the GPO greyed out the option to change it she can not edit the information to allow her to access the internet.

I have had her try checking the option for automatically detect network settings thinking that if it could see the internet when she was connected at home it would bypass the proxy server and let her on. No luck.

We need to keep the GPO in place to ensure that the users are all connecting to the proxy server at the remote office but the ones with the laptops are still able to connect at home. Any ideas or workarounds?
Question by:mpatrick65
    LVL 5

    Assisted Solution

              The only way around this that I am aware of is to deny her user account access to the system32\GroupPolicy folder and that will stop the policies from applying. However this will stop policies from applying no matter where she logs in so it may be more work than necessary to change her security permissions whenever she goes home and then when she comes back into the office.
               Perhaps you could make a sepereate OU for laptop users and then assign a new GPO to that OU that specifies proxy settings for those users but allows them to change it. This way when the user is in the office and logs in the proxy settings will be applied and when the user is at home they can delete the proxy settings and get out to the internet (the settings will then be reapplied when they come back into the office and log in.)

    Hope this helps you out!
    LVL 13

    Assisted Solution

    You could try using a tool like Proxy Changer ( to allow her to switch between using the proxy and working without it.  I haven't used Proxy Changer before, but the idea is simple.  The proxy changes are just registry changes, so making a tool to switch them quickly and easily is pretty straightforward.  I'm sure if you searched for other proxy changing tools, you'd find several.  This one does happen to be freeware, which is nice.

    LVL 23

    Accepted Solution

    You have a couple of built in choices:

    1.  Change the GPO for the setting of : Disable changing connection settings, under the user config, admin templates, windows components, internet explorer : so that it doesn't grey out the ability to disable the proxy at home.

    Probably like mitch said, put them in a separate OU.


    You can work on using an autoconfig using "automatically detect settings" instead of actually putting in a proxy IP address...

    More info here:  (for examples of a .pac file)

    and a semi-walkthrough here:

    and if you use ISA server:

    This would make it to where the only button checked is "auto configure settings" and that way at home the user would open IE, the autoconfig would say "don't see anything to configure me with, so by default I'm just going to try and go there" and the user will get to the internet sites.

    LVL 23

    Expert Comment

    Thank you for the points!

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    IT, Stop Being Called Into Every Meeting

    Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

    Are you one of those front-line IT Service Desk staff fielding calls, replying to emails, all-the-while working to resolve end-user technological nightmares? I am! That's why I have put together this brief overview of tools and techniques I use in o…
    how to add IIS SMTP to handle application/Scanner relays into office 365.
    Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.

    737 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    17 Experts available now in Live!

    Get 1:1 Help Now