GPO Proxy Settings per User

I've spent days researching this but haven't found a situation quite like it. I have multiple users in a SBS environment. We use roaming profiles exclusively. I have 2 users (user A and user B) in the same OU "No Internet" that have dummy proxy
settings to prevent them from using the internet except for specifically allowed sites. These users log in to two different workstations (PC1 and PC2). The computers are in the same OU, "Windows7Desktops".
When User A logs in to PC1, the proxy settings are correctly applied. When User A logs in to PC2, the proxy settings do not apply. User B's proxy settings also apply on PC1, but not on PC2.
The workstations are identical builds, the same software is installed on each, both are running the same version of Windows 7 SP1.
I'm at a loss! My gut feeling is that there is a setting in the registry for the PCs that is different, but I've been unable to locate it. Any suggestions would be appreciated.

Hi DeannaM,
Would you please provide a general description for that how you configure the Proxy setting in Group Policy?
Did you mean that configure the proxy settings under User Configuration, and then link the GPO to a computer-based OU? If I misunderstand, or any details and updates, please feel free to let me know.
Based on your description, this issue seems that just occurred when user login PC2. Please use a user account
to login PC2, then run
gpresult command to collect group policy information and check.
By the way, would you please confirm whether PC2 was also belonged to another computer-based OU, or just belong
to this one OU? Please pay attention to
loopback mode. Just my guess.
Hope this helps.
Best regards,
Justin Gu

Similar Messages

"Make proxy settings per-machine (rather than per user)" Group Policy setting not applied until login as a local Administrator

We want to deploy to all our desktop the pac file to configure proxy. We have a Windows 2008 R2 server, and i've enabled the GPO "Make proxy settings per-machine (rather than per user)", and i've add a registry key AutoConfigURL in "HKLM\Software\Microsoft\Windows\Current
Version\Internet Settings" with the pac file link.
I've tested on my pc, and all was configured without any problem. I've try to login to my computer with another user (without admin rights) and the automatic configuration proxy was compiled and not modificable. It's seems that all works.
But, our users are not local admin, so i've tried to deploy the GPO in a collegue computer. I've forced the update of GPO, checked on registry that all new keys are added, and i've reboot the pc. When i've check on IE settings, autoconfig URL was empty and
grey. I'm disconnected from user and i've login to the pc with a local admin. With my surprise, the IE settings was compiled. When i'm come bac to the user profile the IE settings was compiled and not modificable.
The problem is: i've over 750 users in 3 countries, and i don't want grant them the local admin permissions. How can i configure proxy settings via GPO without login to every machine at least one time?

> have a Windows 2008 R2 server, and i've enabled the GPO "Make proxy
> settings per-machine (rather than per user)", and i've add a registry
> key AutoConfigURL in "HKLM\Software\Microsoft\Windows\Current
> Version\Internet Settings" with the pac file link.
In the past, we experienced various issues with machine proxy settings,
so we don't use them anymore. The simple approach:
Block access to the connections page through ADM template settings and
deploy the proxy through GPP Internet Settings.
This is what we do (with a pac file, too), and it works well :)
Martin
Mal ein
GUTES Buch über GPOs lesen?
NO THEY ARE NOT EVIL, if you know what you are doing:
Good or bad GPOs?
And if IT bothers me - coke bottle design refreshment :))

Language settings per User

Hi,
has anyone an idea on how to change the language settings per User (not general Language Setting).
Lets say one user uses english another user swedish or geman as default language!
Many thanks in advance, Nick

Hi Nick,
Yr suggestion is up to the mark, But SAP dont have such option.All user have same Lang.
Thanks
Kevin

Proxy settings with user and password

How can I configure the proxy settings if our proxy requests user and password.

We have a proxy configuration that requieres the input of an user and a password. If we try to update the Creator, we get the error 'Unable to connect to the Update Center Server. Check proxy settings ...'.
If I remember well, the first time I tried the update feature, I think I got a pop up window to input the user and the password for the proxy. But now I get always the error message. If we shut down the proxy it works fine.
Today I tried the 'GoogleSearch' demo application and the same problen occures.
Thanks for information
Guenther

WLAN Proxy Settings - Saving User Id and Password

I've looked around on the net but have not been able to find a solution to this problem.
Using an N8 (on Nokia Belle), the WLAN settings does not seem to provide any place to specify the username and password for a proxy based network (Note: this is not the pre-shared key for the WLAN, but the username and password asked by the proxy server). When the browser is used, it prompts for the username and password and then works. However other applications cannot connect to this network as they seemingly lack this feature and the phone does not make this globally available. Nokia Configuration Tool (NCT) 6.3 seems to allow placement of username and password values. When configuration is transferred back to phone, NCT shows successfully configured, but this does not seem to be the case when the settings are used by the phone. Does anyone have a solution for this?

Step 1
Goto Connectivity Menu
Menu Button - Settings - Connectivity
Step 2
Add new Access Point (continue from above)
Settings - Destinations
Step 3
Set the new Access Point
1) Select Access Point to add new access point.
2) Select Yes for "Automatically check ......"
3) Select WLAN for wifi & choose your corporate Access Point
4) Select Internet to assign it to Internet group.
Step 4
1) Go back to menu in Step 2
2) Select Internet.
3) Select the new Access Point that you've added in Step 3 & it will give the details of it.
4) Select Options - Advanced Settings
5) And you should see IPv4, IPv6 and Proxy settings menu
If I have helped you, please hit the star at the bottom of my posts - it's appreciated!
Don't forget if your problem is solved to press the "Accept as Solution" button.

Unique audio/video settings per user account?

I have a rather strange question...
I recently purchased my first mac and love it so far, but being a windows user for 15 years is taking some getting used to.
My situation:
(VIDEO) I currently have a mac mini hooked up to a monitor utilizing the mini-port to DVI. Secondly I am using the HDMI port out to an HDTV.
(AUDIO) I am using the headphone out to my DVI monitor and my HDMI obviously runs through the HDMI cable.
I have setup 3 user accounts...mine, my wife's, and one for a "media center".
My question:
Is there any way that I can setup the "media center" user account to be the only account that will recognize only the HDMI port for video/audio? Since I have my mac in a different room from my HDTV, I do not want to be going back and forth every time I wish to utilize my "media center" account.
I hope my issue is clear...thanks in advance for any help!
MK

ProRes ships with Final Cut Pro 6 - it does not come with 5.
You can download the decoder separately but I don't know how well that will work on older versions of FCP:
http://support.apple.com/downloads/AppleProRes_QuickTime_Decoder_1_0_forMac

Proxy settings moved from User to Machine not removing user settings.

Hi All,
I have recently moved our company's proxy settings from User based to Machine based as we were having issues after moving from an internal proxy to a hosted external proxy. What we found was after turning off the internal some users were no longer
getting external internet.
After some investigation we found they were still getting old proxy settings on login and after a GPupdate.exe or normal gpupdate from the server the correct settings would apply. (happened to users logging on for the 1st time) To prevent this from happening
I moved the proxy settings to the Computer GPO and it all appeared to work in the test GPO and in live. But a few days later we got some calls logged to our help desk stating they don't get external internet. After some more
investigation we found that they are still getting the user policy applied to them even though it has all been removed from the User GPO.
I found if I remove the proxy settings it doesn't always apply to users but if I add info in it always updates to the user. What can be causing this? Some of these users have local admin rights and I thought at first it might be something they
did but now we are getting non admin users with these issues.
We are using IE 10 and have set the original Proxy settings using the GUI internet control panel and are now applying the proxy settings via Registry updates in the Computer GPO and enabled "Make Proxy settings per-machine" object. Our SOE
is Win 7 ent x64 with IE 10 (1500 units) and Win 8.1 ent x64 IE11 (100 units) And some XP SP3 that are in the process of migrating to Win7.
Any help on this would be much appreciated.
Cheers,
Nat

Hi Nat,
you wrote: I found if I remove the proxy settings it doesn't always apply to users but if I add info in it always updates to the user.
Does that also happen für new users now after you changed your settings to the computer settings?
I guess you used group policy preferences; that worked as "one time settings", so as long as the policy exists it will be merged with the Settings on the users computer. Please find a detailed description on
http://technet.microsoft.com/en-us/library/dn581922.aspx
So you now have 2 configuration items: your policy as well as the users registry. So to remove that you already moved the Settings from the user configuration to your Computers configuration (that worked as you described) while the Settings
in their HKCU are still there - you Need to either implement another policy to remove that, or you can set it empty.
Don't set it to "not configured" as that will keep your old setting deployed before.
Sometimes I found in more easy to implement another user preference that removed the Registry key with the Registry keys to remove a Setting instead of Publishing a "remove Setting" configuration.
Regards,
Martin

Locking proxy settings in Firefox 6? doesn't seem to work the same as 5?

Trying to lock down the proxy settings so users can't disable the proxy. Did this in 5 by editing the firefox.js file in omni.jar then creating a mozzila.cfg file, but same technique doesn't appear to work in 6.
Any ideas what's different?

This does not seem to apply to Firefox 6. I cant locate a place to configure all user settings like there was in the previous versions of Firefox. My Scenario is-
Terminal Server on 2008 R2 and trying to configure all user settings that will apply to all users launching Firefox from the TS.
All documentation and references I have found after an exhaustive search all reference FF 4 and before. Any thoughts?

ActiveX UAC and Proxy Settings via GPO

Hi there,
Wondering if anyone can help.
I am experiencing the following issue when trying to load ActiveX control without UAC prompts for standard users.
I have:
Configured ActiveXInstaller Service and configured allowed sites and settings via GPO.
Configured IE Security settings for the Trusted Zone to Allow ActiveX content to run via GPO.
Configured IE to use per user proxy settings via GPO.
Allowed the domain in our proxy and bypassed authentication for that domain.
Everything seems to be in place but I receive a UAC prompt for the Internet Explorer Add-on Installer UNLESS I either turn off the IE proxy settings or add the domain to the IE proxy exclusions list.
Unfortunately neither of these are options in our environment..
Anything I've missed?
Thanks!

Hi,
Before going further, what's the operating systems you are using? How did you configure
approved Installation Sites for ActiveX Controls and Active X installation policy for sites in Trusted zones settings?
Regarding how to configure these two settings, we can refer to the following article for double check.
Administering the ActiveX Installer Service in Windows 7
http://technet.microsoft.com/en-us/library/dd631688(v=ws.10).aspx
Besides, we can also run command gpresult/h gpreport.html with admin privileges to collect group policy result report to check if the policy settings are applied correctly.
Best regards,
Frank Shen

How do I configure a proxy for all users via GPO on Server 2012 R2?

I would like to configure a proxy that applies to all users that log into our server running Server 2012 R2. I can manually set up the proxy (on an individual account basis) via Internet Options in Control Panel but this proxy needs to be configured for
all users. Is it possible to do this in Group Policy Management for Server 2012 R2?
Thank you
Silas Horton

> Have you checked *User configuration\Policies\Windows Settings\Internet
> Explorer Maintenance\Connection\Proxy Settings *in group policy?
He cannot check this because it is't available anymore starting with
Server 2012/Windows 8/IE 10...
> Hope it helps.
No, it doesn't :)
Better check User configuration - Preferences - Control Panel Settings -
Internet Settings
Martin
Mal ein
GUTES Buch über GPOs lesen?
NO THEY ARE NOT EVIL, if you know what you are doing:
Good or bad GPOs?
And if IT bothers me - coke bottle design refreshment :))

Windows 8 / IE11 forget proxy settings applied by GPO on reboot

I've just about run out of ideas here on what may be causing this. I've toyed with policies quite often, but never ran into this problem before.
Windows 8 with IE11. While there are GPO's active on the system, the settings are kept free to alter by the user if need be. We use a proxy, so I'm required to provide the proxy and the exceptions in a policy to the PC's to make sure they work under normal
conditions. I added a couple of settings in the GPP (Group Policy Preferences) with the correct settings, enabled these settings (green lines) and tested these on a test system. They work fine, I get my proxy settings pushed through.
Then we get to the rollout on the systems that are affected (not that many, just 10 accounts total, all in nearby rooms). I can run a gpupdate /force to reload the settings, and can confirm the proxy settings are applied properly. So the policy itself seems
sound also on the workplaces it needs to be active on. Users still have the option to change the proxy settings on their own discretion, but that's exactly what we want to happen.
Now we run into the problem that when part of these PC's are rebooted, the PC somehow seems to decide the proxy isn't worth its time anymore, and kills all settings for the proxy back to default. Either that, or it just switches the proxy off. Running a
gpupdate /force reapplies the policy and everything starts working again, but WHY is Windows 8 / IE11 adament about forgetting these settings?
The really maddening thing is that on a couple of PC's with Windows 8 and IE11 (and the same policies applied) it isn't a problem and the proxy remains filled in, as I would expect from GPO's. These include my test system, which makes me unable to replicate
the problem and test locally.
I've tried enhancing the policy with using a forced wait for the network to become available) aswell as a forced logonscript run on boot instead the standard 'after 5 minutes'. Find these under 'Computer Configuration - Policy - Administrative Templates
- System - Logon' and 'Computer Configuration - Policy - Administrative Templates - System - Group Policy'. Neither setting seems to work tho. I've also tried going with a Computer Configuration Startup script in which I just request to run 'gpupdate' with
the '/force' as the switches. But this also seems not to do anything.
In short: Does anyone know why Windows 8 / IE11 falls back to something outside the scope of policies, while it accepts the forced policy update with the correct settings when 'gpupdate /force' is issued manually afterwards? And has anyone any idea what
I can do to make sure the policy is applied regardless of what Windows 8 / IE11 thinks it should be?

Just had a go with that... Found out that when I login and refresh the polciy using gpupdate /force, the proxy settings are filled in properly.
Once I reboot tho, the proxy switches itself off (the entries regarding the proxyname and such remain, as does the 'bypass for local addresses, but it's all grayed out). Once I switch the proxy back on, and check under 'Advanced', I find everything in order,
except for the exclusion list which is emptied.
So I forced the gpupdate, verified that the proxy was switched on, and the exclusion list was populated. I then restarted the PC, only to find that above situation (proxy switched off, and exclusionlist empty) had reasserted itself.
Waited a bit and did a forced policy update again. Then verified the logged files (which was just User.txt).
After anonymizing the output a bit, I copied the contents to
http://pastebin.com/YyWswW83 for your review. It looks like it contains 3 batches of GP updates.
The one at 13:20 is likely the primary one in which I forced the GPUpdate. The one at 13:22 is the one issued on the restart of the computer, while the one at 13:24 is the (once again) forced gpupdate.
From my understanding it seems as if the no-change of GPO detection works, but also causes it to skip the policy. Tho I admit that's speculation on my part. Any and all light you (or anyone else) may be able to shine on this, will be greatly appreciated.

Registry keys for the per-machine proxy settings

Hello,
I'm writing a C++ software that's supposed to set proxy settings for all users. I succeeded at disabling the per-user-proxy-settings through the COM Group Policy objects but I cannot find where to define the machine-wide proxy settings. The most
logical answer was to modify the values under the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings but IE seems to be ignoring them. Any ideas as how to set the proxy settings in this case ?

Hi,
To configure the proxy server settings on a client computer, create the following .reg file to populate the registry with the proxy server information:
Regedit4
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"MigrateProxy"=dword:00000001
"ProxyEnable"=dword:00000001
"ProxyHttp1.1"=dword:00000000
"ProxyServer"="http://ProxyServername:80"
"ProxyOverride"="<local>"
In this file, ProxyServer name is the name of your proxy server.
Thanks!
Andy Altmann
TechNet Community Support

How can I have proxy settings stay for multiple users on an educational network?

Hi,
I want to be able to have mutlple users log onto machines and haave proxy settings already set in preferences. I have tried by copying the Mozilla folder in to the All users location and does not help.
Each user logs onto a computer with a mandatory or Roaming account depending on account security. Settings for firefox are picked up from their Documents and settings folder when they log on (It is created when they log on for the first time)
Is there a way to pull across proxy settings for a new user? Ussually it would be a case of just sticking it in All Users.
Thanks

A possibility is to create a file user.js and place that file in the default template location (defaults\pref) in the Firefox program folder.
If you don't want users to change the proxy (connection) settings then you can also lock the prefs or set a different default value.
See http://kb.mozillazine.org/Locking_preferences
You can use these calls in mozilla.cfg to set or lock a pref:
defaultPref(); // set new default value
pref(); // set pref, but allow changes
lockPref(); // lock pref, disallow changes
http://kb.mozillazine.org/network.proxy.type
http://kb.mozillazine.org/network.proxy.%28protocol%29
http://kb.mozillazine.org/network.proxy.%28protocol%29_port

Currency display format as per user settings?

Dear Friends,
I need a help.
I am printing currency grand total amount in my report.
the default format setting is like : 1,234,567.89
if user changes is format settings (going into system, user profile, own data, default) 1.234.567,89 then it should print in this format.
what i mean report grand total should come as per user display settings.
how to solve this?
Thanks in advanvce
Sridhar.

hi sreedhar,
data: c(100) type c.
data: l_amnt(100) type c.
data: length type i.
data: offset type i.
l_amnt = '1,234,567.89'.
replace all occurrences of ',' in l_amnt with '#'.
replace all occurrences of '.' in l_amnt with ','.
replace all occurrences of '#' in l_amnt with '.'.
length = strlen( l_amnt ).
offset = length - 3.
translate c+offset(1) using '.,'.
write : l_amnt.
rgds
anver
if hlped mark points

Sense proxy settings for guest users

Hello,
I've got a client that wants guest users to be able to 'Plug and play' on the wireless network.
That is, when a user connects, he get's assigned an IP address and does not need to change his proxy settings or IP settings.
I know this is a feature in Nomadix, is this possible in the Cisco Controller ?
I've been unable to find it.
thanks
GuÃ°mundur

Most browsers include an [automatic proxy configuration (PAC) mechanism|http://en.wikipedia.org/wiki/Proxy_auto-config] and the transparent configuration of proxies, and Safari and Firefox are no different here.
The usual approach here is to have folks visit a site and select the PAC file, or to push the file out. Here is a comfiguration example from [UConn|http://helpdesk.uconn.edu/trouble/proxy/autoprox.html], and another from [Rice|http://proxy.rice.edu/setup.php], and there are others around and visible via Google.
The [pactester|http://code.google.com/p/pactester> tool might be useful, too.
If y'all get some DNS entries set up (various web browsers have [Web Proxy Auto Discovery (WPAD)|http://en.wikipedia.org/wiki/WebProxy_AutodiscoveryProtocol], when last I checked [Safari needed a little help|http://www.macosxhints.com/article.php?story=20090711031033128]) and have your firewall raise an appropriate diagnostic page, you won't have to go through this again, either.
None of this stuff is particularly specific to Mac OS X or to Safari; the PAC stuff is fairly generic, and WPAD is used with various boxes. (Try Safari with WPAD, but you might still need to reference that PAC file. And if you do, using WPAD-compliant naming would probably be a reasonable approach.)
The hosts files? You're really still using those? Any chance you can get real DNS working? That's a whole lot less work, and now is the time to deploy that; if you're going to mess with everything, then you can use that effort and that requirement to (also) move forward in your networking capabilities.

GPO Proxy Settings per User

Similar Messages

Maybe you are looking for