These are my settings as you can see i have narrowed the it down to use per ou rather than telling the user settings 4 or 5 times to do the same thing.
I'd try to remove all the proxy settings from all your policies and create a seperate policy for internet settings and apply it to the seperate ou's that require internet access. then a good gpupdate /force always does the trick!
Kris