Solved

Applying Proxy Settings in GPO to Machine and not User

Posted on 2011-03-09
6
1,191 Views
Last Modified: 2012-08-13
I have a problem that I can't seem to solve.

I want to use GPO's to configure IE. Mostly this works, the one area where it does not is with the proxy settings.  MS in it's "Wisdom" thinks that the only place one should be able to set the proxy settings is with the user...which is stupid since it's more likely that a user would move around and a PC would stay put.  But I digress...

I have found the setting in the Computer config section of the GPO where I can specify that proxy settings are per-machine and NOT per-user...supposedly.

I've found this to not be true.

I need two different proxy settings depending on where in the network the computer lives. Here was my plan.  I was going to create an OU specific for the PC location and apply the appropriate GPO, adding in the appropriate computers and a test user. So when I logged in as the test user both the computer config and user config portions of the GPO would execute; this works fine.

Then I was going to apply another GPO to the user OU that was configured with the user things that are global like home page and security settings. I assumed that it would NOT make any difference what was in the proxy setting since I had already applied the correct proxy setting when the config user had logged in and I had specified that proxy settings are per-machine and not per-user.  But whatever is in the user config section of the GPO assigned to the user OU overrides the original proxy settings.

How can I use GPO's to configure IE and make the proxy settings stick per machine?
0
Comment
Question by:jhyiesla
  • 3
  • 2
6 Comments
 
LVL 6

Expert Comment

by:Kody-Burg
ID: 35084693
How can I use GPO's to configure IE and make the proxy settings stick per machine?


The site below has a very good step-by-step guide to setting up group policy to apply proxy settings for IE:

http://nickganga.com/2009/03/13/internet-explorer-7-advanced-proxy-settings-via-group-policy/
0
 
LVL 28

Author Comment

by:jhyiesla
ID: 35084780
Had already found that site and tried what he suggested at the link you provided and no joy.
0
 
LVL 7

Accepted Solution

by:
lucifer82 earned 500 total points
ID: 35109148
You can set the proxy using the command line tool:

http://support.microsoft.com/kb/900935/

so what you need to do is create a login script which first checks your ip and then if it matches the network that you want then apply particular proxy server details and at the end of the script you will need to set saying if other wise no proxy

Pseudo code

Check IP
 IF ip = XXX.XXX.XXX.XXX
 set proxy = site1.proxy.com
 ELSE IF ip = YYY.YYY.YYY.YYY
 set proxy = site2. proxy.com
ElSE
 set proxy = none
END IF
0
How to run any project with ease

Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
- Combine task lists, docs, spreadsheets, and chat in one
- View and edit from mobile/offline
- Cut down on emails

 
LVL 28

Assisted Solution

by:jhyiesla
jhyiesla earned 0 total points
ID: 35109900
lucifer 82, that would probably work, but I think our network is probably too complex to make that a useable solution.

I have kind of figured it out though.

I have two GPOs. One sits everything, user and computer config. The other just has user things in it and it was this second one that was causing the issue.  I found that in that IE Maintenance section of the user config, if you right-click on it there is an option to reset that whole section. So I did that and then reinput things that were missing like the home page URL.  BUT I just left the proxy settings alone. Now when I apply that GPO, what ever was placed there by the first GPO sticks.  Even though it just "looks" blank it's more like it's null, because I had tried blanking it and that just then blanked the proxy settings when I applied the GPO.  With this "null" setting, it seems as though it functions like a normal GPO setting of Not Configured.
0
 
LVL 28

Author Closing Comment

by:jhyiesla
ID: 35109908
Lucifer82's solution probably would have worked, but what I came up with seems more usable in my environment.
0
 
LVL 7

Expert Comment

by:lucifer82
ID: 35110309
Hi jhyiesla,

What's important is that you got a workable solution :)
0

Featured Post

IT, Stop Being Called Into Every Meeting

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

Join & Write a Comment

Suggested Solutions

New Windows 7 Installations take days for Windows-Updates to show up and install. This can easily be fixed. I have finally decided to write an article because this seems to get asked several times a day lately. This Article and the Links apply to…
SSL stands for “Secure Sockets Layer” and an SSL certificate is a critical component to keeping your website safe, secured, and compliant. Any ecommerce website must have an SSL certificate to ensure the safe handling of sensitive information like…
This Micro Tutorial will give you basic overview of the control panel section on Windows 7. It will depth in Network and Internet, Hardware and Sound, etc. This will be demonstrated using Windows 7 operating system.
This Micro Tutorial will give you a basic overview of Windows Live Photo Gallery and show you various editing filters and touches to photos you can apply. This will be demonstrated using Windows Live Photo Gallery on Windows 7 operating system.

743 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now