Can’t get proxy deployed via GPO

[Sonic007]

Hi everyone.

 

I’m not sure what I’m doing wrong but I can’t get the proxy set on my Windows 10 machines via GPO.

 

I have tried two different ways and still not working.

Currently I have it set as registry entries in user configuration, Windows settings and registry.

 

I tried enabling the GPO in case another is over ruling it but it didn’t help.

 

As soon as I login to my client machines, no proxy.

 

Any ideas?

 

Thanks.

[Liam]

Tried it under preferences? Also done some gpo modelling to see if it should be apples.. No wmi filtering or targeting configured?

[jmcdermott]

Have you considered using a wpad or pac file on a local server and letting the clients detect the proxy on there own?

[jthompson]

Maybe check with a gpresult that your GPO is the winning one for those settings, and at the same time look for any other proxy options elsewhere in other GPOs. For instance, could there be some forgotten proxy settings being applied for Chrome under Administrative Templates/Google/Google Chrome?

[LeMarchand]

We do it in Preferences.

 

 

and tell Chrome to follow.

 

 

Does your policy only fail for W10 machines?

[TechMonkey]

Same as LeMarchand but we push a proxy address, not using a script, PAC or WPAD. We tell Chrome to use the system settings as well. We set it on a default person GPO and then just add changes where needed further down the tree.

[MatthewL]

Proxy settings have always been flaky I have found, never been consistent anywhere I've been.

[Fazza]

The only way we could get them to work was with WPAD so I'd advise you to look in to doing it that way. It's a bit of a faff setting up a WPAD server but once done it has worked perfectly for us.

[mrwoberts]

As soon as I login to my client machines, no proxy.

 

Just for a little more specifics, are the proxy settings actually in place when you go to Internet Options >> Connections >> LAN settings?

If not, just double check the GP is definitely applying to a Users OU (and the GPO Users application is Enabled)

 

I used to use registry entries to set mine, but I seem to remember I had to write a little login script to 'wake them up', so to speak. They were set, but if I didn't use IE, or didn't go into Internet Options at least once, the settings weren't being used. As soon as I went in to Internet Options and checked they were there, which they were, it then seemed to work.

[Sonic007]

Hi everyone,

 

Thought I would give you a follow up on this one...

 

Some of my GPO's don't need anything else to be applied however the Proxy one needed me to add Authenticated users before it would apply it.

Is this normal?

 

Anyway it is all working now so happy days.

[jthompson]

I think so. Your users need to be able to read the policy for it to be processed under their context.

[mrwoberts]

Authenticated Users (Read) is the minimum every GPO needs, either in the Security Filtering section, or Delegation.

 

There were problems with that a while back so maybe this GPO never got fixed, but well done for spotting it.