Skip to content Skip to main navigation Skip to footer

Tag: group policy preferences

Group policy proxy settings with Windows Server 2008 R2

Windows Server 2008 R2 does not have GPO settings to force Windows 7 or any other Windows machines with Internet Explorer 9+ to go through the proxy with the usual Internet Explorer Maintenance option that forces proxy settings. Below are helpful articles on how to get this working with the new Group Policy Preferences within Server 2008 R2 registry settings:

Configuring Windows Server 2012 and Windows Server 2008 R2

Configuring Windows Server 2012 and 2008 R2 to push out a group policy to all users can be challenging with Microsoft’s introduction of Group Policy Preferences. These preferences provide more than 20 Group Policy extensions that increase the number of configurable settings in a Group Policy object (GPO). Within most preference items, the configuration interface looks similar to the applicable user interface for configuring settings so the layout will be familiar. The guidelines to set up users’ browsers with a proxy configuration are alike for Internet Explorer 7, 8, 9, and 10, and the following instructions are for Internet Explorer 10.

  1. Go to Group Policy Management, and select the GPO to which you want to add the Internet Explorer 10 settings.
  2. Edit the GPO.
  3. In the Group Policy Management Editor, go to User Configuration, Preferences, Control Panel Settings, and then Internet Settings. If you have already created settings for Internet Explorer 7, 8, and 9, they will be displayed here.
  4. Right-click in the right-hand pane, select “New,” and then select “Internet Explorer 10.”
  5. In the New Internet Explorer 10 Properties dialog box, click the Connections tab, and then click LAN Settings.
  6. Under Proxy server, select the check box to enable the “Use a proxy server…” option.
  7. In the Address field, enter the IP address of your proxy server, and in the Port field, enter the port number.
  8. Now you need to enable the settings and apply them to all users. You can individually enable and disable underlined settings or settings preceded by a circle within a preference item. The underlining or circle of the setting indicates whether it is currently enabled or disabled.
    • A setting with a solid green underline or a green circle is enabled. The preference extension applies this setting’s value to the user or computer.
    • A setting with a dashed red underline or red circle with a slash is disabled. The preference extension does not apply this setting’s value to the user or computer.
  9. Press the following function keys to enable or disable the settings within a preference item. To select a setting, click the actual text of the setting or its text field.

    • F5 – Enable all settings on the current tab.
    • F6 – Enable the currently selected setting.
    • F7 – Disable the currently selected setting.
    • F8 – Disable all settings on the current tab.
  10. After enabling the settings, select the check box to enable the “Bypass proxy server…” option.
  11. Click OK, Apply, and then OK to save the changes. You will see the Internet Settings entry for Internet Explorer 10 along with Internet Explorer 7, 8, and 9, if they were previously created.

Configuring proxy settings in IE 10 and 11 with registry settings

For IE 10 and 11, the alternative way of configuring proxy settings is deploying the registry keys directly.

Key path/location for the registry keys: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings

  • Automatically detect settings

Registry key: “AutoDetect”
Value Type: REG_DWORD
Value Data:
0 = Disable
1 = Enable

The key AutoDetect is only visible before you start IE 10 (or IE 11) on the machine, as IE will interpret it immediately and then delete the key right after.

  • Use automatic configuration script

Registry Key: “AutoConfigURL
Value Type: REG_SZ
Value Data: “http://<servername|host>/my_proxy.pac”

  • Proxy server

To configure this, you may need up to 3 registry keys:

ProxyEnable” check box for “Use a proxy server for your LAN (these settings will not apply to dial-up or VPN connection)
Value Type: REG_DWORD
Value Data:
0 = Disable
1 = Enable

ProxyServer
Value Type: REG_SZ
Value Data: “ProxyServerName:Port”

ProxyOverride
Value Type: REG_SZ
Value Data: “list_of_exclusion”

Value Data: “list_of_exclusion;<local>”
<local> value represents the check: “Bypass proxy server for local addresses
The value is added automatically when enabling the check box in the GPP User Interface (UI) when deploying through the registry key is required.

Deploying the registry keys via GPP registry item

There are different ways to deploy the registry keys, and it is important to correctly deploy the registry keys provided above.

Location of the policy: User Configuration / Preferences / Windows Settings / Registry / Right Click + New + Registry Item

REGISTRY AND SETTING CONFIGURATIONS
  • Automatically detect settings

Action: Replace

Hive: HKEY_CURRENT_USER

Key Path: Software\Microsoft\Windows\CurrentVersion\Internet Settings

Value Name: “AutoDetect”

Value Type: “REG_DWORD”

Value Data: “0” or “1”

0 = Disable

1 = Enable

  • Use automatic configuration script

Action: Replace

Hive: HKEY_CURRENT_USER

Key Path: Software\Microsoft\Windows\CurrentVersion\Internet Settings

Value Name: “AutoConfigURL”

Value Type: “REG_SZ”

Value Data: “http://<servername>/my_proxy.pac”

  • Use a proxy server for your LAN (These settings will not apply to dial-up for VPN connections)

Action : Replace

Hive: HKEY_CURRENT_USER

Key Path: Software\Microsoft\Windows\CurrentVersion\Internet Settings

Value Name: “ProxyEnable”

Value Type: “REG_DWORD”

Value Data: “0” or “1”

0 = Disable

1 = Enable

  • Proxy Server : ProxyServerName:Port

Action: Replace

Hive: HKEY_CURRENT_USER

Key Path: Software\Microsoft\Windows\CurrentVersion\Internet Settings

Value Name: “ProxyServer”

Value Type: REG_SZ

Value Data: “ProxyServerName:Port”

  • ProxyOverride

Action: Replace

Hive: HKEY_CURRENT_USER

Key Path: Software\Microsoft\Windows\CurrentVersion\Internet Settings

Value Name: “ProxyOverride”

Value Type: “REG_SZ”

Value Data: “192.168.1.*;*.domain.com;<local>”

  • Bypass proxy Server for local addresses

The option is represented by the entry “<local>” added in ProxyOverride setting value data.

See https://blogs.msdn.microsoft.com/askie/2015/10/12/how-to-configure-proxy-settings-for-ie10-and-ie11-as-iem-is-not-available/, Case 2, Step 2 for more information.