Group Policy - Take off Internet proxy settings for a user group

[googlemad]

We have a Group Policy that sets the Internet Proxy settings via the 'Internet Explorer Maintenance' section which works fine and is applied to the Staff and Student OUs

 

However we have a group in AD called 'Marketing Staff' (of which then contains several users from the Staff OU) for which we do not wish to receive these proxy settings. What is the best way of going about this?

[Michael]

If you have an OU labelled 'Staff', I suspect the proxy GPO is linked at this level.

 

Create two sub OUs labelled Staff2 and Marketing (for example), so it reads -

 

Staff > Staff2

Staff > Marketing

 

Unlink the proxy GPO from Staff, then link it to Staff2

 

Move the relevant users into Marketing and that's it, it should work as expected.

[themightymrp]

It depends on if the internet proxy settings are the only thing set in that particular group policy.

 

If that's all it does, in your Group Policy Management MMC click on the policy. Go to the Delegation tab. Click on the add button and search for your Marketing Staff group. Tick the box for DENY apply policy settings. Click ok.

 

Remember a DENY overrides any other setting

[Michael]

It depends on if the internet proxy settings are the only thing set in that particular group policy.

 

If that's all it does, in your Group Policy Management MMC click on the policy. Go to the Delegation tab. Click on the add button and search for your Marketing Staff group. Tick the box for DENY apply policy settings. Click ok.

 

Remember a DENY overrides any other setting

 

I did think of this too, but it can be a little iffy at times. Sometimes it applies and sometimes it doesn't.

[themightymrp]

I've not had issues doing it that way before but then, I have maybe only every done it twice!

 

It does all depend on what else is in the GPO and whether or not it is applied globally once or applied to separate staff/student OU's.