Link to home
Start Free TrialLog in
Avatar of Mike Orther
Mike OrtherFlag for United States of America

asked on

Chrome is Bypassing Proxy Settings

In Group Policy Manager on a 2012 Domain Controller I have set the LAN settings to use a Squid proxy server to limit what sites my user can access.  This works perfectly for Internet Explorer and Chrome because they both use the Internet Setting of the operating system. (Windows 7 and 10). We have disabled Firefox because it is difficult to force proxy settings.

I want to block the users ability to go into LAN setting and uncheck the box "Use a proxy server..." thus allowing them full web access.

From Group Policy, I Disable the "Connection Page" from the Internet Settings.
User Configuration > Policy > Administrative Templates > Windows Components > Internet Explorer > Internet Control Panel

When I do this, the Connection Tab is no longer available to the users.  When I use Internet Explorer, IE goes through the proxy server just as expected.  The problem is, when I use Chrome, it no longer uses the Proxy Settings and allows the user to go to any website they like.

I have also tried "User Configuration > Administrative Templates > Network > Network Connections" then set "Prohibit access to the Properties of a LAN connection" but no luck with Chrome.

I tried greying out Proxy Server settings on the client via GPO.  From the client, I can see the proper Proxy Settings are set and the section is greyed out so I cannot change it.  Even though the proxy settings are there, Chrome bypasses these settings and allow the user free reign of the web.

How can I lock the proxy settings and still have Chrome go through the Proxy Server?
ASKER CERTIFIED SOLUTION
Avatar of Adam Brown
Adam Brown
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Mike Orther

ASKER

To prevent “changing proxy settings” edit the Group Policy Object that you will assign to the OU.

User Configuration > Policies > Administrative Templates > Windows Components > Internet Explorer-“Prevent changing proxy settings” – Enable

This will grey out the Proxy Server section but leave all the settings in place and working for Chrome and IE.  It does not matter if the “Automatically detect settings” is checked or not, the proxy still works.
I made a mistake to close this question.  Adam Brown has a better solution and his comment should be accepted.
Thank you Adam this was a very good read.