Re: Internet Explorer - Proxy exceptions entered disappear??

After doing some hands-on with proxy settings using GPO on my server I have
some tips that may be helpful for the future. You may have already
discovered these things but here they are.

As you mentioned the proxy settings for IE are configured automatically by
the firewall client (if that option is selected in the firewall client).
When using GP to configure proxy settings then you need to tell the firewall
client on the workstations that you are custom configuring the proxy
settings for that you don't want the FW client to do auto config IE
settings. If you don't then it will be "Now you see it, now you don't". In
other words you will think the exceptions will be set but then they will be
gone after re-boot.

You asked about applying proxy exceptions to select workstations. I'm not
sure if IP numbers can be used in GP but you can apply the policy using
computer name which will give the same result. Before doing that you will
need to make a new GPO and name it something like (Proxy Exceptions) that
has the exceptions that you added to the Default Domain Policy and then put
the default domain policy back to it's default setting. It is better to
make new Group Policies for this kind of thing than to edit/add to the
default policies. If you get unexpected results you just remove the policy
you just made and everything goes back the way it was! No trying to figure
what you changed to mess things up! Plus in your case when wanting to apply
to "only the required workstations" you will need a separate policy to
accomplish that since you don't want the setting to be applied to the whole
domain.

After you make the new policy and are viewing it in server management
interface you can view or change who/what the policy applies to. When you
have the policy selected/highlighted on the left side of the window you will
see information on the right side about the selected GPO. There are four
tabs at the top of the window (just under the name of the policy) named
Scope, Details, Settings and Delegation. The Scope tab is where you apply
filtering to the policy that you are viewing by using Add button. There are
other settings that you can explore in that window and most are pretty much
self explanatory.

Hope this helps.

Jeff

"Tammy" <Tammy@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:C3535864-2083-42E0-B863-877D46C028AB@xxxxxxxxxxxxxxxx
Hello Jeff,

Thank you very much for your assistance! Before I had a chance to read
your
reply I tried setting up the group policy, as per Lonnie's suggestion and
it
worked! :-) I have only done a few things in Group Policy but definitely
need to explore that more - a lot of useful things can be done in there.

I will take you up on your office for further assistance - if you don't
mind. For now I simply went in GP/Default Domain Policy/ and went to the
location Lonnie mentions above. I enabled proxy settings and was able to
enter the exception and enter the other info that the clients usually get
from ISA Client anyhow, just to make sure that remained in place.

Yes, I would definitely like to know how to do this for only the required
workstations. What might be the best way to go about that?

Thanks again! :-)
Tammy

"Jeff Teel" wrote:

Hi Tammy

I have had to Bypass Proxy for certain Internet web sites as well
(especially when working with FrontPage webs) and like doing it with GP.
Since some IE settings are being controlled by GP the IP addresses that
you
enter in the browser on the workstation will stay there until you log off
and when logging back on GP from the server removes the addresses because
they are not listed in the GPO. You can also tie a new GPO to just the
workstations that you want instead of all workstations. There are all
sorts
of things that you can do with GPO's so if it is something that your not
familiar with it is worth looking at. If you decide to try this method
and
need some coaching we're glad to help if we can.

Thanks
Jeff

"Tammy" <Tammy@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:1BC5EF7D-6B1F-4418-8C5D-5C35961C4ABA@xxxxxxxxxxxxxxxx
Hello all,

I have noticed something quite strange happening in Internet Explorer
when
adding exceptions to the proxy settings - I suspect it has to do with
the
ISA
Firewall client and hopefully it is a quick fix.

We are running SBS 2003 SP1 (ISA 2004) and the clients are running
Windows
XP Pro SP2 and we install the ISA Firewall Client on the workstations.

I have a need to enter some IP addresses in the Proxy settings
exception
list in Internet Explorer 6.0 on some workstations - i.e., 172.16.10.*.
I
will go out and back in to IE and the setting is still there however
when
I
log off the network and back on, go into IE, that setting is gone so
I'm
wondering if there is something I need to do on the server to set this
up.

What we're doing is running a Cisco VPN client program on a few
workstations
(behind ISA). The users connect to the external company's server and
then
they simply go into IE and access their two web sites (internal IPs).
For
them to access the web sites they have to temporarily disable the proxy
in
IE
and I was hoping to at least eliminate this step for them and put those
IPs
in the Exception list - but again those entries will go away at next
login.


Look forward to any assistance provided.

Thanks so much in advance!
Tammy





.