[Webinar] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1216
  • Last Modified:

Applying Proxy Settings in GPO to Machine and not User

I have a problem that I can't seem to solve.

I want to use GPO's to configure IE. Mostly this works, the one area where it does not is with the proxy settings.  MS in it's "Wisdom" thinks that the only place one should be able to set the proxy settings is with the user...which is stupid since it's more likely that a user would move around and a PC would stay put.  But I digress...

I have found the setting in the Computer config section of the GPO where I can specify that proxy settings are per-machine and NOT per-user...supposedly.

I've found this to not be true.

I need two different proxy settings depending on where in the network the computer lives. Here was my plan.  I was going to create an OU specific for the PC location and apply the appropriate GPO, adding in the appropriate computers and a test user. So when I logged in as the test user both the computer config and user config portions of the GPO would execute; this works fine.

Then I was going to apply another GPO to the user OU that was configured with the user things that are global like home page and security settings. I assumed that it would NOT make any difference what was in the proxy setting since I had already applied the correct proxy setting when the config user had logged in and I had specified that proxy settings are per-machine and not per-user.  But whatever is in the user config section of the GPO assigned to the user OU overrides the original proxy settings.

How can I use GPO's to configure IE and make the proxy settings stick per machine?
0
jhyiesla
Asked:
jhyiesla
  • 3
  • 2
2 Solutions
 
Kody-BurgCommented:
How can I use GPO's to configure IE and make the proxy settings stick per machine?


The site below has a very good step-by-step guide to setting up group policy to apply proxy settings for IE:

http://nickganga.com/2009/03/13/internet-explorer-7-advanced-proxy-settings-via-group-policy/
0
 
jhyieslaAuthor Commented:
Had already found that site and tried what he suggested at the link you provided and no joy.
0
 
lucifer82Commented:
You can set the proxy using the command line tool:

http://support.microsoft.com/kb/900935/

so what you need to do is create a login script which first checks your ip and then if it matches the network that you want then apply particular proxy server details and at the end of the script you will need to set saying if other wise no proxy

Pseudo code

Check IP
 IF ip = XXX.XXX.XXX.XXX
 set proxy = site1.proxy.com
 ELSE IF ip = YYY.YYY.YYY.YYY
 set proxy = site2. proxy.com
ElSE
 set proxy = none
END IF
0
Concerto's Cloud Advisory Services

Want to avoid the missteps to gaining all the benefits of the cloud? Learn more about the different assessment options from our Cloud Advisory team.

 
jhyieslaAuthor Commented:
lucifer 82, that would probably work, but I think our network is probably too complex to make that a useable solution.

I have kind of figured it out though.

I have two GPOs. One sits everything, user and computer config. The other just has user things in it and it was this second one that was causing the issue.  I found that in that IE Maintenance section of the user config, if you right-click on it there is an option to reset that whole section. So I did that and then reinput things that were missing like the home page URL.  BUT I just left the proxy settings alone. Now when I apply that GPO, what ever was placed there by the first GPO sticks.  Even though it just "looks" blank it's more like it's null, because I had tried blanking it and that just then blanked the proxy settings when I applied the GPO.  With this "null" setting, it seems as though it functions like a normal GPO setting of Not Configured.
0
 
jhyieslaAuthor Commented:
Lucifer82's solution probably would have worked, but what I came up with seems more usable in my environment.
0
 
lucifer82Commented:
Hi jhyiesla,

What's important is that you got a workable solution :)
0

Featured Post

Concerto Cloud for Software Providers & ISVs

Can Concerto Cloud Services help you focus on evolving your application offerings, while delivering the best cloud experience to your customers? From DevOps to revenue models and customer support, the answer is yes!

Learn how Concerto can help you.

  • 3
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now