• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 2485
  • Last Modified:

Proxy server via Group Policy?

I have a Windows 2k server environment with 2 servers and roughly 75 clients running Windows XP. I have a proxy server set up and am using group policy to point IE to the proxy on a few OUs containing users. (I have also tried it on OUs containing computers). It used to work just fine, but now I cannot get the setting to work at all...other settings, such as homepage and wallpaper work on these gpo's, but not the proxy settings. I know the proxy works because if I manually put the settings into an individual computer it works! Any suggestions will be appreciated...
1 Solution
under the OU that has the users you want this to apply to check under
User Configuration
Windows Settings
Internet Explorer maintenance

You have 2 spots where you can set Proxy settings
Obviously under Proxy settings and also under Connection Settings where you will want it as Do not Customize Settings if you want Proxy settings to take effect.

Also double check that your GPO is not being overridden
Brad GrouxCommented:
Under the group policy you have the following entry correct?
User Settings --> Windows Settings --> Internet Explorer Maintenance --> Connection
Server/Port and bypass proxy server for local addresses?

Group Policy Objects are applied to leaf objects, not groups... You use group to filter policy settings. Group Policy applies to all leaf objects (user/computer accounts) in the container by default.  Configure from the security tab of the GPO so that GP Settings can be applied to only the users/computers who are member of the group.

You can Remove Authenticated users group because that is the entire network of users. You can deny Domain, Enterprise, Administrators, Administrator permission. Then add Group and set "Read" and "Apply Group Policy." This makes it so users must be applied the GPO if they are a member of the group.

Make sure you wait ample time or force a group policy update when testing... or use "gpupdate /force" at a command prompt to update immediately.

Might want to also check out the following MS KB article.
dkuhlmanAuthor Commented:
"You can deny Domain, Enterprise, Administrators, Administrator permission" this is a good way to lock yourself out of ever getting into this gpo ever again =^O
i think the problem can be conflect between user side and computer side policy.
as i recommend is to only make user policy to use proxy, and if you dont want this user to be used in other computer you can assign this user to specific computer and he cant use this account on ther computers.

Featured Post

Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now