RE: http proxy settings per machine not user

From: Denis Wong _at_ Hong Kong (_at_)
Date: 11/26/04 

Date: Thu, 25 Nov 2004 17:45:02 -0800

The proxy setting is set under the User Config part. Try to set it again and
refresh your policy.

BR,
Denis

"Jan" wrote:

> We need some PCs to have internet access, and any user who logs on to that
> machine should get the http proxy settings, and therefore have internet
> access. If the user logs onto a different machine, they should not have
> internet access.
>
> To begin with, we entered the http proxy settings on a per-user basis on
> each PC, by going
> into the Options in IE.. We are using a mixture of Win2000 and WinXP PCs in
> a Win2000 domain, with local user profiles. Internet access worked fine on
> these PCs using the http proxy via NAT on the firewall.
>
> In view of the recent security flaws, we decided to tighten up security on
> IE, so we altered
> the Default Domain Policy -
>
> User Configuration, Windows Settings, Internet Explorer Maintenance,
> Security, Security Zones and Content Ratings - we imported higher security
> settings on the Internet zone, with certain websites in the Restricted Sites
> zone using medium security setting
>
> We then thought that it would be useful if the http proxy settings could be
> done once on the PC, rather than for each new user who needs to use internet
> on it. So we altered the Default Domain Policy again -
>
> Computer Configuration, Administrative Templates, Windows Components,
> Internet Explorer, Make proxy settings per machine(rather than per-user) -
> enabled
>
> After refreshing group policy, users have no internet access, and the
> previous http proxy setting had disappeared.
>
> If the proxy settings are now per machine, how do you set them for the
> machine? In the explanation of this policy it says
>
> "If you enable this policy, users cannot set user-specific proxy settings.
> They must use the zones created for all users of the computer."
>
> - so I'm wondering what these zones are, and where are they created? I've
> looked through all the computer configuration settings on Group Policy, but
> can't find anywhere to enter a proxy setting.
>
> Many thanks for any ideas.
>
> Jan
>
>
>

Relevant Pages

  • Group Policy Connundrum - Stick with it, its confusing!!!
    ... I have created a policy named no internet. ... I have also created some exceptions for this policy, which do not use the proxy, i.e. ... Then by setting the 'Admin Template> Windows Components> Internet Explorer> Disable Changing Proxy Settings' to enabled effectively grays out the proxy settings in internet explorer and stops the user from altering the settings. ...
    (Security-Basics)
  • Group Policy Connundrum - Stick with it, its confusing!!!
    ... I have created a policy named no internet. ... I have also created some exceptions for this policy, which do not use the proxy, i.e. ... Then by setting the 'Admin Template> Windows Components> Internet Explorer> Disable Changing Proxy Settings' to enabled effectively grays out the proxy settings in internet explorer and stops the user from altering the settings. ...
    (Security-Basics)
  • Re: How to Enforce internet access through proxy setting only
    ... I am trying to restrict internet access on mobile user (laptop ... Try using the policy editor ... then to stop users changing settings within IE navigate to ... "Prevents users from changing proxy settings. ...
    (microsoft.public.windowsxp.general)
  • Re: GPOs at Site level
    ... download the GPO will interfere ... > the User Configuration side of the policy object. ... Maybe such proxy settings -- the nearby one that can ... >>> My theory is that if a user plugs their laptop in in LA, ...
    (microsoft.public.windows.server.active_directory)
  • Re: Internet access
    ... In AD create a user group, NOInternet. ... got access to the Internet to the group. ... at the right pane you have Proxy settings. ... At the top of the policy NOInternetopen the ...
    (microsoft.public.windows.server.networking)