Proxy server via Group Policy?

Posted on 2007-10-08
Last Modified: 2008-05-30
I have a Windows 2k server environment with 2 servers and roughly 75 clients running Windows XP. I have a proxy server set up and am using group policy to point IE to the proxy on a few OUs containing users. (I have also tried it on OUs containing computers). It used to work just fine, but now I cannot get the setting to work at all...other settings, such as homepage and wallpaper work on these gpo's, but not the proxy settings. I know the proxy works because if I manually put the settings into an individual computer it works! Any suggestions will be appreciated...
Question by:dkuhlman
    LVL 3

    Expert Comment

    under the OU that has the users you want this to apply to check under
    User Configuration
    Windows Settings
    Internet Explorer maintenance

    You have 2 spots where you can set Proxy settings
    Obviously under Proxy settings and also under Connection Settings where you will want it as Do not Customize Settings if you want Proxy settings to take effect.

    Also double check that your GPO is not being overridden
    LVL 14

    Accepted Solution

    Under the group policy you have the following entry correct?
    User Settings --> Windows Settings --> Internet Explorer Maintenance --> Connection
    Server/Port and bypass proxy server for local addresses?

    Group Policy Objects are applied to leaf objects, not groups... You use group to filter policy settings. Group Policy applies to all leaf objects (user/computer accounts) in the container by default.  Configure from the security tab of the GPO so that GP Settings can be applied to only the users/computers who are member of the group.

    You can Remove Authenticated users group because that is the entire network of users. You can deny Domain, Enterprise, Administrators, Administrator permission. Then add Group and set "Read" and "Apply Group Policy." This makes it so users must be applied the GPO if they are a member of the group.

    Make sure you wait ample time or force a group policy update when testing... or use "gpupdate /force" at a command prompt to update immediately.

    Might want to also check out the following MS KB article.;en-us;Q306915

    Author Comment

    "You can deny Domain, Enterprise, Administrators, Administrator permission" this is a good way to lock yourself out of ever getting into this gpo ever again =^O
    LVL 2

    Expert Comment

    i think the problem can be conflect between user side and computer side policy.
    as i recommend is to only make user policy to use proxy, and if you dont want this user to be used in other computer you can assign this user to specific computer and he cant use this account on ther computers.

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    What Security Threats Are You Missing?

    Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

    Article by: IanTh
    Hi Guys After a whole weekend getting wake on lan over the internet working, I thought I would share the experience. Your firewall has to have a port forward for port 9 udp to your local broadcast x.x.x.255 but if that doesnt work, do it to a …
    Even if you have implemented a Mobile Device Management solution company wide, it is a good idea to make sure you are taking into account all of the major risks to your electronic protected health information (ePHI).
    After creating this article (, I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
    Here's a very brief overview of the methods PRTG Network Monitor ( offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…

    760 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    9 Experts available now in Live!

    Get 1:1 Help Now