• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 2492
  • Last Modified:

Internet Explorer Proxy Exceptions not working (GPO)

I created a GPO for a group of users that sets a web proxy server for them to connect to, and a list of exceptions to bypass use of the proxy.

When I log on as a test user, I am indeed connected to the web proxy, but the sites I specified in GPO as exceptions are not in the list of exceptions. The list of exceptions is blank. Why won't the exceptions work?

Here is my GPO:

User Configuration --> Policies --> Windows Settings --> Internet Explorer Maintenance --> Connection --> Proxy settings: Checked "Enabled proxy settings", typed in the address of proxy and the port, checked the "Use the same proxy server for all addresses" box, added the exception sites in the Exception textfield, and checked "Do not use proxy server for local (intranet) addresses" box.

 

What am I doing wrong?

 

P.S. We are using Internet Explorer 8, and I can tell by looking at proxy server logs that the exceptions are not working.
0
uchelpdesk
Asked:
uchelpdesk
  • 4
  • 2
1 Solution
 
CharlWiehahnCommented:
Hi uchelpdesk,

Are you able to post a list of the exceptions you are entering onto the policy? Also are you using a semicolon to seperate the exceptions?
0
 
uchelpdeskAuthor Commented:
The exceptions are just our internal CRM, webmail, and sharepoint server domain names (e.g. crm.example.com, sharepoint.example.com, and mail.example.com).

Yes, I am separating them with a semicolon. When I check a test user account's IE settings, in their proxy settings (advanced) there is just nothing in the list of exception sites, even though they are correctly specified in the GPO.

Oddly, the exceptions are the only part of the GPO that isn't showing up / working.
0
 
CharlWiehahnCommented:
Hi uchelpdesk,

If you use GPMC (http://www.microsoft.com/download/en/details.aspx?id=21895) and run an RSOP (Resultant Set of Policy)  on the client pc, does it state that the specific exceptions have successfully applied?

I am just wondering if you dont have another GPO higher up in the OU structure over-writing some of your settings. Perhaps create a test OU at the root of the AD structure and inforce your new policy on that OU to test. Then move your user and computer accounts to the test OU and restart.
0
NFR key for Veeam Agent for Linux

Veeam is happy to provide a free NFR license for one year.  It allows for the non‑production use and valid for five workstations and two servers. Veeam Agent for Linux is a simple backup tool for your Linux installations, both on‑premises and in the public cloud.

 
uchelpdeskAuthor Commented:
I tried using RSOP but when I viewed the Proxy settings, everything was blank. This doesn't make sense because the client is clearly getting the GPO proxy connection settings, just not the exceptions.

I also tried your second suggestion. I created a test OU in the root AD and linked the GPO to it. Still no luck. The client gets the proxy connection settings, but the exceptions textfield is blank.
0
 
uchelpdeskAuthor Commented:
Well, it turns out after a little more experimentation, I found out the wrong OU was being linked to the GPO. So thank you very much CharlWiehahn, you helped me diagnose this. Now that I linked it to the correct Users OU, the necessary users are getting the exception settings pushed to them.

Thank you!
0
 
uchelpdeskAuthor Commented:
Well, it turns out after a little more experimentation, I found out the wrong OU was being linked to the GPO. So thank you very much CharlWiehahn, you helped me diagnose this. Now that I linked it to the correct Users OU, the necessary users are getting the exception settings pushed to them.

Thank you!
0

Featured Post

Nothing ever in the clear!

This technical paper will help you implement VMware’s VM encryption as well as implement Veeam encryption which together will achieve the nothing ever in the clear goal. If a bad guy steals VMs, backups or traffic they get nothing.

  • 4
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now