Trying to lockdown IE proxy via GPO

Posted on 2006-05-10
Last Modified: 2008-01-09
We have a proxy server in place. We locally set everyone up to use the proxy server. We also set the AD GPO to "grey" out the "Connection/Lan Settings" in IE.
The question is:
If the Proxy fails, is there a way for IE to recognize this and bypass the Proxy automatically?
If, for some reason, I don't want them to use the Proxy, Is there a way for me to go to GPO, remove the "greyed" out feature, and not have to log-off, log-on the user?

Question by:vferreira71
    LVL 17

    Expert Comment

    You would have to remove the Proxy from all the users and change your GPO to reflect that.

    Author Comment

    I cannot change the Proxy settings on the local users if the GPO has the "Lan settings" greyed out.
    The only way (that I know of) would be to go to GPO; remove the grey out selection; log-ff a user; and log him back in; uncheck the use proxy server.

    Is there a setting in IE (or the local pc) that bypasses the Proxy if something happens to it (it crashes)?
    This way, all users realize that the Proxy is not working, and bypasses it.

    LVL 18

    Accepted Solution

    -I don't know if it can be done as you suggest, however an alternative would be to have a second web browser installed (or another IE in a different location) that is set to bypass the proxy

    You could then do a few things:
    1. If the proxy fails let everyone know to use the second browser icon via email, network broardcast etc.  Then again when it is back up.  Kind of like a disaster recovery option.

    2. Create a script that checks if the proxy can be reached (via ping for example).  If a reply is received load web browser1, if fails load web browser2.  Change the IE shortcut on all PC's to run the script (You do have a means to deploy software updates?). This way users won't have to do anything.

    -Another option would be to have a script that checks if the proxy is accessibly and then changes the following registry string value, then loads default browser:
    HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyServer

    If you want the proxy address removed simply delete the string value.  This can also replace the default browser icon.
    LVL 18

    Expert Comment

    Note the second option (reg editing) may need to be run as the local administrator if you have restricted user's access
    LVL 1

    Assisted Solution

    You can remote Edit the Regkey with a Script on all Computers

    So if the Proxy Fails you just run you prewritet and tested :-) WSH File and Your User can grummbling the net :-)

    LVL 74

    Assisted Solution

    by:Jeffrey Kane - TechSoEasy
    You should just use the Automatic Proxy Discovery --- WPAD is a DHCP setting, and you can just modify the proxy that should be used by changing the wpad.dat file.


    Featured Post

    Highfive + Dolby Voice = No More Audio Complaints!

    Poor audio quality is one of the top reasons people don’t use video conferencing. Get the crispest, clearest audio powered by Dolby Voice in every meeting. Highfive and Dolby Voice deliver the best video conferencing and audio experience for every meeting and every room.

    Join & Write a Comment

    I annotated my article on ransomware somewhat extensively, but I keep adding new references and wanted to put a link to the reference library.  Despite all the reference tools I have on hand, it was not easy to find a way to do this easily. I finall…
    I previously wrote an article addressing the use of UBCD4WIN and SARDU. All are great, but I have always been an advocate of SARDU. Recently it was suggested that I go back and take a look at Easy2Boot in comparison.
    This video demonstrates basic masking and how to edit the mask to reveal the desired image.
    Video by: Tony
    This video teaches viewers how to export a project from Adobe Premiere Pro and the various file types involved.

    746 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    15 Experts available now in Live!

    Get 1:1 Help Now