Internet Explorer proxy configuration

[rooky]

Hi,

I encountered a problem with setting a centralized GPO with proxy settings that should affect a large group of enterprise users.
this topic is more a (F)AQ than a tip but maybe their is a answer to it.

for example

When yoy create one central GPO with a configured proxyserver in Internet Explorer maintenance (user Node) and set it to a central leveled parent OU or even to the Domain level for that matter, then inheritance stops somewhere down the chain if a lower ranked GPO has no proxy server set in it.
When you logon to the client and check I.E. Lan Settings the proxy server isn´t filled in because the last processed GPO had no proxyserver specified in it and is the last gpo to be processed (linkorder1) so proxysettings appear to be blanc.
changing the linkorder doesn´t work you can´t use block inheritance and natural cumalitive processing isn´t working either.
The only way it seemed to work was to create a security Group called "apply proxy Policy" and make useraccounts member to that group, put the security group in de security filter (SOM) of the GPO and remove Authenticated users, finally put an enforce to the link en voila.

Maybe this FAQ can help figuring out why normal cumalative GPO Processing with a centralized Proxy setting won´t work.
even when you use more differed proxy GPO´s in the normal way (without using block inheritance or enforce <no overide&gt it only works when you directly link the seperate GPO´s to the users targeted OU´s or filetr the GPO´s Application with Security Filter Groups.

A real GPO adventure :shock:
Thanks in advance

[lanfear]

Hi,
When you logon to the client and check I.E. Lan Settings the proxy server isn´t filled in because the last processed GPO had no proxyserver specified in it and is the last gpo to be processed (linkorder1) so proxysettings appear to be blanc.
changing the linkorder doesn´t work you can´t use block

Thank god I found this, I was beginning to tear my hair! Suddenly all clients' proxy settings were disabled in IE and I just couldn't figure out why. Everything else worked as supposed within that GPO, but no proxy-related settings would change. The Group Policy Results showed that my user was supposed to get correct proxy settings activated, but no. And I hadn't defined any proxy settings in any of the other GPOs at the same level.

Contrary to your findings, though, it did work by setting the IE GPO at link order 1.

[sammy12male]

Well this is no doubt a helpful tip and I am sure that there are many users like us who have encountered this problem and have thought in despair to get out of it. I would like to know if this problem is only limited to those who use the IE browser. Like my friends are all in praises for the other browsers saying that they are rather well equipped to counter any sort of situations. So is switching over the best policy?

[jdobiash]

I've dealt with differnet OU level proxy settings and for the most part they work fine. I found out one time, however, that if you set a proxy at a lower level, and THEN remove it, that "removed" setting sticks until you do a full reset of the Internet Explorer settings in the GPO. Basically if you never set it, it's kind of a 'null' and ignores it, but once you set it and then remove it, it considers that you want to remove the proxy setting for anyone that GPO applies too.

[guigui357]

Hi all,

i had the same problem and was happy to find this page...the proof iwasn't going crazy

I found the solution : right click on "Internet Explorer Maintenance" and choose "Reset Browser Settings". All the parameters are deleted and come back to 'null'. gpupdate and the client will have the right proxy settings and so on !

solution found on http://www.jsifaq.com/SF/Tips/Tip.aspx?id=6403

Hope it will help others.
Bye