Need to remove all proxy settings in I/E for user laptops via Group Policy
I need to remove all proxy settings from users computers(laptops) via group policy so that they can by pass the proxy when at home.
I had a doc before that stepped through all the steps to get this done but I cant seem to find it. It would remove the check box for the proxy thus greying out the proxy address.
This way the users could use their laptops at home and be able to get onto the internet.
It had me setting up 3 registry settings in the GPO:
proxyenable
proxy server
proxy override
Any help for this would be appreciated.
I had a doc before that stepped through all the steps to get this done but I cant seem to find it. It would remove the check box for the proxy thus greying out the proxy address.
This way the users could use their laptops at home and be able to get onto the internet.
It had me setting up 3 registry settings in the GPO:
proxyenable
proxy server
proxy override
Any help for this would be appreciated.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Fox,
So is the link that you put here show how to disable all of the proxy settings that I need as I mentioned above in my posting?
So is the link that you put here show how to disable all of the proxy settings that I need as I mentioned above in my posting?
ASKER
followed article
Thanks for getting back and glad to help. Cheers!
ASKER
Ok here is the problem I am having. When I make the change for proxyenable, when I set the value to 0 it does remove proxy settings from laptops but this also removes the settings from our towers which we don't want. So how can I have it just remove from the laptops but not the desktops
You will need to create a separate group policy for the workstation and server. Create a "Workstation" OU then you move all the workstations here. Then link the GPO to the "Workstation" OU. This way you can separate which policy apply to what.
ASKER
Yes thought of that but right now I have the policies that are setup are going to the users so if I create an ou for laptops will this be applied over the users policy that is being applied now to the desktops via the users policies
In this case, create a user group for only the laptop users and a laptop group policy which only apply to this group.
ASKER
Well I created a ou for the laptops and added them there and then added the proxy enable for this ou which has the dword set to 0 to disable but it still is allowing the value 1 which in user config to take precedence.
Cant get this to work for some reason.
Cant get this to work for some reason.
Try GPRESULT to see the full set of policy settings applied for a computer/user. Sounds the original OU is overriding the new policy.
ASKER
Well I have them both being applied to the default domain policy. Should I being doing it a different way?
ASKER
Is there a script out there that can turn the proxy on and off for laptops and be able to tell if the laptop is off or on the network?
It seems as that your policy is taking effect at the domain root level because you are altering the default domain policy and causing it to be applicable to all the machines in the domain. The only way to know for sure is if we can analyze by using tools like gpresult and rsop. Having said that,I personally try to avoid touching the default domain policy as much as possible and create an additional policy for whatever I need.
The best practice for configuring the default domain policy is "if you want to apply other settings at the domain root level or to the Domain Controllers OU then you should create new GPOs and link them to the appropriate scope of management. The ordering of the GPOs shouldn’t really matter as you should have no overlapping settings. As a general rule of thumb, however, I would recommend assigning any new GPOs a higher precedence in case someone starts using the default GPOs for settings that are not on the “approved” list above. That way the new GPOs will win in any conflict."
http://www.open-a-socket.com/index.php/2015/08/28/best-practice-for-default-domain-policy-and-default-domain-controllers-policy/
As for the script, you may want to have a look at https://stackoverflow.com/questions/18439373/batch-file-to-disable-internet-options-proxy-server
The best practice for configuring the default domain policy is "if you want to apply other settings at the domain root level or to the Domain Controllers OU then you should create new GPOs and link them to the appropriate scope of management. The ordering of the GPOs shouldn’t really matter as you should have no overlapping settings. As a general rule of thumb, however, I would recommend assigning any new GPOs a higher precedence in case someone starts using the default GPOs for settings that are not on the “approved” list above. That way the new GPOs will win in any conflict."
http://www.open-a-socket.com/index.php/2015/08/28/best-practice-for-default-domain-policy-and-default-domain-controllers-policy/
As for the script, you may want to have a look at https://stackoverflow.com/questions/18439373/batch-file-to-disable-internet-options-proxy-server
ASKER
Well I have both settings in the default domain and the one has the value of 0 and the other 1 but the only one that is working is the enable which is the 1. I do see the other 0 getting applied to the laptop registry but it does not disable the proxy as it should.
ASKER
Any other thoughts on this? I need to get this resolved somehow..
Try creating an separate group policy for each OU (laptop and workstation) instead of using the default domain policy for both.
Also have a look at this https://social.technet.microsoft.com/wiki/contents/articles/22457.10-common-problems-causing-group-policy-to-not-apply.aspx
Also have a look at this https://social.technet.microsoft.com/wiki/contents/articles/22457.10-common-problems-causing-group-policy-to-not-apply.aspx
ref link: https://www.microsoft.com/en-us/download/details.aspx?id=40905