Proxy Settings according to Machine rather than user

[woreilly]

I am at a school that uses 2 different proxy settings - we call them filtered and unfiltered. Only certain machines have access to the unfiltered (controlled by IP address).

 

However, there are several users who flit around between machines that use the different proxy settings. How can I set up my proxy settings to make sure they get the correct proxy on whatever machine they log in to? (preferably without any form of login script).

 

The only method I have found so far is here:

 

https://social.technet.microsoft.com/Forums/windows/en-US/7d420c66-2e89-43d7-b136-baf5f69690f1/locking-down-ie-proxy-settings-under-pc-settingsnetworkproxy-on-windows-81?forum=w8itprosecurity

 

FYI, it is a Server 2012 R2 Domain with x64 Windows 7 Clients (yes i know the article is aimed towards Windows 8)

[Oaktech]

I might be over simplifying this, but can you not just add them to a group and target a GPO to that group with the relevant proxy settings in it and just make sure the targetting for other GPO's with proxy settings in them doesn't include any other groups they are a member of?

 

Have a group membership called filtered and another called unfiltered, target GPO's with the relevant proxy details to those groups and remove proxy references in other more general GPO's

[woreilly]

I might be over simplifying this, but can you not just add them to a group and target a GPO to that group with the relevant proxy settings in it and just make sure the targetting for other GPO's with proxy settings in them doesn't include any other groups they are a member of?

 

Have a group membership called filtered and another called unfiltered, target GPO's with the relevant proxy details to those groups and remove proxy references in other more general GPO's

 

I did think of that. It would definitely work for one user in particular. However, there are some members of staff (SLT) who use Unfiltered when they are in their offices, but when they are out teaching in classrooms they need to get the filtered proxy.

 

Another thought is to remove GP Preferences like you said, remove any internet explorer proxy settings, set chrome to get system proxy settings, and then deploy Registry keys containing the proxy settings for the relevant machines and therefore users should get the right proxy regardless of what machine they log on to...stop me if that won't work!

Edited November 3, 2014 by woreilly

[Duke5A]

So you basically just need to assign a proxy based on machine and not user? Proxies are configured under user configuration, so apply your proxy GPO to the computer OU and turn on loopback processing. User Group Policy loopback processing mode