IE Proxy Settings via GPO

By oornelas ·
Good Day,

I setup a GPO on our network to specify what proxy server IE should use for a certain AD group. It works fine and everything is great, however; for my laptop users in this group when they take their computer home they can?t browse the web form their personal internet connection. This is because IE is setup to use our proxy server in the office. I also have the GPO setup to not allow them to change this setting.

I would like IE to use the proxy server I have specified in the policy only when their in the office. When they leave the office and use their laptops at home the proxy server settings should not be setup in IE; allowing them to browse the web. Is there a way to accomplish this?


This conversation is currently closed to new comments.

Thread display: Collapse - | Expand +

All Answers

Collapse -

You might try a proxy auto-config file.

by shardeth-15902278 In reply to IE Proxy Settings via GPO
should give you a good starting point.

below is a very primitive sample proxy.pac that would minimally meet your need, assuming your private net was You would reference the file in field "Automatic Browser Configuration"

function FindProxyForURL(url, host)
if (isInNet(myIpAddress(), "", ""))
return "PROXY";
return "DIRECT";

Collapse -

That works but...

by oornelas In reply to You might try a proxy aut ...

Thanks for that it really helped. However; our network here uses the most comon subnet which is what everyone at their house uses with their wireless routers and so on. 192.168.1.X. This was in place before I got here. So with that being said what command can I add so that if the proxy can't be contacted it uses the direct connection instead?

Thanks agian,


Collapse -

IE Proxy Settings

by oornelas In reply to IE Proxy Settings via GPO

I figured it out thanks for you help!

Collapse -

Setup computer to use proxy when on the domain and to bypass proxy offsite

by jeremiah In reply to IE Proxy Settings via GPO

Are you using ISA for your proxy? If so the answer is simple. Install Isaclient on the client machine. We deploy laptops for teachers in an ISA server environment and the teachers are constantly moving the computer onsite and then taking it home. With Isaclient installed it will automatically enable proxy when the system is onsite an then disable it when it is offsite. If you are not using ISA server then you can use a proxy aware network appliance to enforce proxy instead of the GPO. For example we use a Sonicwall at one of our customer locations and we enable content filtering which then has an option to require proxy. Then you set the sonicwall as your default gateway and every device will be required to use the proxy server you specify for any TCP port range you specify.

Related Discussions

Related Forums