IE Proxy Setting using GPO

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

Situation:
2 sites, each behind their own firewall and proxy server.
Users can log on at either site.
Computers at each site need to be set to use the proxy server they are behind.

Because the proxy server settings in GPO's are in the "User Configuration"
area, the GPO assigns the wrong Proxy settings since it is based upon the
USER and not the COMPUTER the person logged into.

Any help?
 
More Details.

I created 2 OU's. "Group A Computers" and "Group B Computers"
The computers behind proxy server A are in the OU "Group A Computers"
The computers behind proxy server B are in the OU "Group B Computers"

I created "Group A Policy" GPO on OU "Group A Computers" and set the proxy
server to xxx.xxx.xxx.33.
I created "Group B Policy GPO on OU "Group B Computers" and set the proxy
server to xxx.xxx.xxx.65.

No matter which computers the users log into, they get the same IE
Connections Settings, which is correct for one site but wrong for the other
site.
 
The IE proxy settings in gpo are user settings, so you'd have to have your
users in the OU with the correct settings applied. I'm assuming that the
users move so this wouldn't work for you.

Don't worry, you still have a number of options.

Depending on your network config, you may be able to set them to
auto-discover the proxy. You can do this by using a wpad.dat file. It would
make this a long (and probably incomple) post if I put the details here, so
I'll just say do a google search (oops... I meant an msn search :-)) for
wpad.dat. If you still have questions, I'd be more than happy to give more
details.

The other option is to have the a have the reg key modified at login
"My
Computer\HkEY_CURRENT_USER\SOftware\Microsoft\CurrentVersion\InternetSettings"

You'll also have to set ProxyEnable to 1 (in the same location).

I can give you more details on how to do this, but this is something you can
do at the computer level (vs. the user level).

Good luck :-)
 
Unlink these OU level policies.

Define two (actually one additional)sites and associate the subnets IDs of
the appropriate sites to them.

create new, or relink, your policies to the correct sites.

Tell me how that works for you.


--
Manny Borges
MCSE NT4-2003 (+ Security)
MCT, Certified Cheese Master

There are 10 kinds of people in the world. Those who do understand binary
and those who don't.
 
Thank you gentlemen for your inputs. I have given up on the GPO for the
scripting solution.

I can't believe I missed this one. I set the proxy settings and searched
regedit for the IP address. Well, my normal is to start the search on HKEY
Local Machine cause I always want to skip searching the "Classes" section
since it is so fat and slow.

DUH!!! HKEY Current User is ABOVE HKEY Local Machine so I missed where the
setting was.

I'm a scripting freak so will always go for the script first!

Thanks again
 
Hello
I need to configure the internet option espisally the check box of use
automatic configuration script via a GPO and spsiffy the link to use the
wpad.dat file
 
Back
Top