We help IT Professionals succeed at work.

We've partnered with Certified Experts, Carl Webster and Richard Faulkner, to bring you two Citrix podcasts. Learn about 2020 trends and get answers to your biggest Citrix questions!Listen Now


Group policy laptop problems (500 pts)

mpatrick65 asked
Medium Priority
Last Modified: 2010-05-18
In one of our remote offices that we support we put in place a GPO that automatically sets and greys out the appropriate information for the proxy server that we want them using. However this has caused a problem with one of the users who is using a laptop. When she takes it home at night she is unable to connect using her standard home broadband connection due to the proxy server. Since the GPO greyed out the option to change it she can not edit the information to allow her to access the internet.

I have had her try checking the option for automatically detect network settings thinking that if it could see the internet when she was connected at home it would bypass the proxy server and let her on. No luck.

We need to keep the GPO in place to ensure that the users are all connecting to the proxy server at the remote office but the ones with the laptops are still able to connect at home. Any ideas or workarounds?
Watch Question

          The only way around this that I am aware of is to deny her user account access to the system32\GroupPolicy folder and that will stop the policies from applying. However this will stop policies from applying no matter where she logs in so it may be more work than necessary to change her security permissions whenever she goes home and then when she comes back into the office.
           Perhaps you could make a sepereate OU for laptop users and then assign a new GPO to that OU that specifies proxy settings for those users but allows them to change it. This way when the user is in the office and logs in the proxy settings will be applied and when the user is at home they can delete the proxy settings and get out to the internet (the settings will then be reapplied when they come back into the office and log in.)

Hope this helps you out!

Not the solution you were looking for? Getting a personalized solution is easy.

Ask the Experts
You could try using a tool like Proxy Changer (http://www.snapfiles.com/get/proxychanger.html) to allow her to switch between using the proxy and working without it.  I haven't used Proxy Changer before, but the idea is simple.  The proxy changes are just registry changes, so making a tool to switch them quickly and easily is pretty straightforward.  I'm sure if you searched for other proxy changing tools, you'd find several.  This one does happen to be freeware, which is nice.

You have a couple of built in choices:

1.  Change the GPO for the setting of : Disable changing connection settings, under the user config, admin templates, windows components, internet explorer : so that it doesn't grey out the ability to disable the proxy at home.

Probably like mitch said, put them in a separate OU.


You can work on using an autoconfig using "automatically detect settings" instead of actually putting in a proxy IP address...

More info here:

http://www.experts-exchange.com/Web/Web_Languages/JavaScript/Q_21411191.html  (for examples of a .pac file)

and a semi-walkthrough here:


and if you use ISA server:


This would make it to where the only button checked is "auto configure settings" and that way at home the user would open IE, the autoconfig would say "don't see anything to configure me with, so by default I'm just going to try and go there" and the user will get to the internet sites.

Thank you for the points!
Access more of Experts Exchange with a free account
Thanks for using Experts Exchange.

Create a free account to continue.

Limited access with a free account allows you to:

  • View three pieces of content (articles, solutions, posts, and videos)
  • Ask the experts questions (counted toward content limit)
  • Customize your dashboard and profile

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.


Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.