0

We are using GPO to push out proxy settings and it is applying and working for most users. There is a small group of users, admittedly in a separate OU, that it's just not working for. I can do a gpresult /R and see that the GPO is being applied. However, when I check the proxy settings it's not using the correct proxy.

This GPO is at the root of the domain. How can I further test this?

  • Did you gpupdate? – Michael Bailey Jul 7 '15 at 18:42
  • 1
    Yes. This GPO has been out for months but the users are just not complaining. Their work flow keeps them off the terminal servers 95% of the time. – Stratag3m Jul 7 '15 at 18:43
  • Just to clarify, you ran gpupdate on the individual workstations? (I don't think my question was clear) – Michael Bailey Jul 7 '15 at 18:44
  • No, the machines they are using are not part of the domain. They are logging into terminal servers and that is where the gpupdate was ran. The GPO is applied to the user, not their local machines. – Stratag3m Jul 7 '15 at 18:45
  • Misunderstood the question, my apologies. – Michael Bailey Jul 7 '15 at 18:56
0

Built-in GPO for proxy settings is messed up. Not only you need to set up settings for each version of IE (and download admx files for ie11), they are really sometimes just dont work.

Therefore I suggest modifying registry instead. In

User Configuration > Preferences > Registry

you can specify any custom registry values you want. In particular, you can modify proxy settings here:

HKCU\Software\Microsoft\Windows\CurrentVersion\InternetSettings

Pros of this aproach is that they are version-independent, i.e. they will apply to any version of IE

  • Cons are that this method would require you to deal with some hex key that contains all settings (because that's the only way AFAIK). Also, this is probably not a supported method. – EliadTech Jul 8 '15 at 9:22
  • no, theres a separate key for each setting. ProxyEnable (dword), ProxyServer (reg_sz) etc – strange walker Jul 8 '15 at 11:30
  • We went down that road in my organization, and those keys were either unreliable or not version-independent (can't remember, was long time ago). The only registry-option that worked was this hex key, that contains all settings. I hope Stratag3m will try your keys, and report back... – EliadTech Jul 8 '15 at 12:17

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.