• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1185
  • Last Modified:

Trying to lockdown IE proxy via GPO

We have a proxy server in place. We locally set everyone up to use the proxy server. We also set the AD GPO to "grey" out the "Connection/Lan Settings" in IE.
The question is:
If the Proxy fails, is there a way for IE to recognize this and bypass the Proxy automatically?
If, for some reason, I don't want them to use the Proxy, Is there a way for me to go to GPO, remove the "greyed" out feature, and not have to log-off, log-on the user?


0
vferreira71
Asked:
vferreira71
3 Solutions
 
RDAdamsCommented:
You would have to remove the Proxy from all the users and change your GPO to reflect that.
0
 
vferreira71Author Commented:
I cannot change the Proxy settings on the local users if the GPO has the "Lan settings" greyed out.
The only way (that I know of) would be to go to GPO; remove the grey out selection; log-ff a user; and log him back in; uncheck the use proxy server.

Is there a setting in IE (or the local pc) that bypasses the Proxy if something happens to it (it crashes)?
This way, all users realize that the Proxy is not working, and bypasses it.


0
 
RartemassAuthor, martial arts coach, IT ConsultantCommented:
-I don't know if it can be done as you suggest, however an alternative would be to have a second web browser installed (or another IE in a different location) that is set to bypass the proxy

You could then do a few things:
1. If the proxy fails let everyone know to use the second browser icon via email, network broardcast etc.  Then again when it is back up.  Kind of like a disaster recovery option.

2. Create a script that checks if the proxy can be reached (via ping for example).  If a reply is received load web browser1, if fails load web browser2.  Change the IE shortcut on all PC's to run the script (You do have a means to deploy software updates?). This way users won't have to do anything.

-Another option would be to have a script that checks if the proxy is accessibly and then changes the following registry string value, then loads default browser:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyServer

If you want the proxy address removed simply delete the string value.  This can also replace the default browser icon.
0
Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
RartemassAuthor, martial arts coach, IT ConsultantCommented:
Note the second option (reg editing) may need to be run as the local administrator if you have restricted user's access
0
 
dabondiCommented:
You can remote Edit the Regkey with a Script on all Computers

So if the Proxy Fails you just run you prewritet and tested :-) WSH File and Your User can grummbling the net :-)

0
 
Jeffrey Kane - TechSoEasyPrincipal ConsultantCommented:
You should just use the Automatic Proxy Discovery --- WPAD is a DHCP setting, and you can just modify the proxy that should be used by changing the wpad.dat file.

http://www.microsoft.com/technet/prodtechnol/isa/2004/help/FW_C_AutoDiscFWClnt.mspx?mfr=true

Jeff
TechSoEasy
0

Featured Post

Concerto's Cloud Advisory Services

Want to avoid the missteps to gaining all the benefits of the cloud? Learn more about the different assessment options from our Cloud Advisory team.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now