Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium


server 2008 R2 domain across two sites and proxy settings

Posted on 2014-09-09
Medium Priority
Last Modified: 2014-09-15
Hi all,

I have one domain 2008 R2 split across two sites. Each site has its own proxy server for internet access. Each site has its own dhcp server. Question is, how do I get the users logging on to site 2 to use their own proxy server via group policy. At the moment all users are in one OU and so the GPO that specifies the proxy server is applied to all users. Is there any way for group policy to check IP address for example and then apply a different setting?

Many thanks.
Question by:Jason Thomas
LVL 29

Accepted Solution

Dan McFadden earned 2000 total points
ID: 40311758
I would split the users into OUs based on their site.  So you would have 2 additional OUs under a "MyCorp" OU.  You could then break out the policies based on that structure.  On the "MyCorp" OU, apply GPOs that are the same no matter of a user's location.  Then on the site based OUs, apply the GPOs that are specific to that site only.... aka the local proxy config.

Lumping your users into 1 OU isn't a good idea.  Reason being, as the company grows so does the network infrastructure that supports the company.  A single OU for users doesn't allow you any flexibility to accommodate for policy configuration issues based on locality or department membership.

Here are some reference links about OU Design:

1. http://technet.microsoft.com/en-us/magazine/2008.05.oudesign.aspx
2. http://social.technet.microsoft.com/Forums/windowsserver/en-US/23bb7af1-4a8b-4cd7-b23d-6e8bc06d46db/ad-ou-best-practices


Author Closing Comment

by:Jason Thomas
ID: 40322887
Many thanks.

Featured Post

Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Resolving an irritating Remote Desktop connection that stops your saved credentials from being used.
Wouldn't it be nice if objects in Active Directory automatically moved into the correct Organizational Units? This is what AutoAD aims to do and as a plus, it automatically creates Sites, Subnets, and Organizational Units.
This tutorial will walk an individual through the steps necessary to install and configure the Windows Server Backup Utility. Directly connect an external storage device such as a USB drive, or CD\DVD burner: If the device is a USB drive, ensure i…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…

581 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question