How can I configure Proxy AutoConfigURL Setting using Group Policy Preference (GPP) ?


In this blog, we will provide the steps you need to take to configure Internet Explorer 10 or 11 Automatic Configuration / Use automatic configuration script settings using Group Policy Preference (GPP).

As you know, the IE Maintenance GPO famously used to configure this and other IE Settings was first deprecated in IE10 in favor of Administrative Templates and Group Policy Preferences and it is important to familiarize yourself with GPP to make your Administrative work a little easier. 

NOTE: Please read the article [http://technet.microsoft.com/en-us/library/jj890998.aspx] for more detailed information about the changes and other policies!

Objective: To configure Internet Explorer with a Proxy Pac file using Group Policy Preferences options.

                 We currently have 2 different options using GPP to configure Proxy Settings!

Requirements: Be familiar with GPMC.MSC console and Group Policy Preferences.

USING GPP REGISTRY:

  • Open your GMPC.MSC console and navigate to User Configuration / Preferences / Windows Settings
  • Right Click on the Registry object from the left hand pane and select New > registry Item

  • From New Registry Properties, you can fill in the following settings:
    • For Hive: HKEY_CURRENT_USER
    • For Key Path: Software\Microsoft\Windows\CurrentVersion\Internet Settings
    • For Value name: AutoConfigURL
    • For Value Type: REG_SZ
    • For Value data: http://mysite/proxy.pac

Screenshot:

  • Apply and OK to complete this GPP Configuration

 

USING GPP INTERNET EXPLORE:

Here are the steps using GPP Control Panel / Internet Explore GPO which offers the User Interface convenience

  • Open your GMPC.MSC console and navigate to User Configuration / Preferences / Control Panel Settings / Internet Settings
  • Right Click on the Internet Settings object and select Internet Explore 10 [note: this Group Policy will also apply to IE11 clients. See kb https://support.microsoft.com/en-us/kb/2898604]
  • From the New Internet Explore 10 Properties Dialog click on Connections Tab / LAN settings button 

  • From the Local Area Network (LAN) settings dialog, hit the F6 key on your keyboard to active the GPO (It should go from Red to Green) and add the PAC file URL and click OK to continue

  • Click on and OK to commit the changes
  • The GPO should now be configured and ready for testing

 

HOW DO I KNOW THE GPO IS WORKING?

  • The best way to validate the gpo is working is to become familiar with the registry location being affected by this setting. So, simply navigate to the HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings and verify the AutoConfigURL entry exist and have the defined PAC file URL on the targeted client machines

 

END RESULT:

 

 This blog has been provided to you by the IE Support team!

 

 

 

Comments (13)

  1. Nick says:

    Thank you very much for this solution, it works great!!!

  2. AxelRMSFT says:

    @Nick    

    Happy to hear it worked for you!

    1. Florian says:

      Thanks for this Information! I just have one Question – we have WPAD activated, so we can use “Automatically detect Settings” without the Script. If i have “Automatically detect Settings” and “Use automatic configuration Script” set, what does Internet Explorer trying first? WPAD or script?

      1. AxelRMSFT says:

        It will first query your DNS and if WPAD is configured it should resolve. It goes down the options you have in the IE settings, in that order. I would recommend you only use one setting and not to have both Automatically detect setting and use PAC script.

  3. Alec says:

    Topic is a bit stale but hopefully you can answer. I figured out the first section on my own and have the proxy set correctly via GPO, but I’m having trouble finding where in the registry/GPO section I can restrict the end users from being able to make changes! How can I grey out that automatic configuration box within the Connection tab to enforce this GPO?

    1. AxelRMSFT says:

      You can use the online GPSearch tool to help you find GPOs and Registry:
      http://gpsearch.azurewebsites.net

      EXAMPLE OF SEARCH:
      http://gpsearch.azurewebsites.net/#431

      Removes the Connections tab from the interface in the Internet Options dialog box.

      If you enable this policy, users are prevented from seeing and changing connection and proxy settings.

      If you disable this policy or do not configure it, users can see and change these settings.

      When you set this policy, you do not need to set the following policies for the Content tab, because this policy removes the Connections tab from the interface:
      “disable Internet Connection Wizard”
      “disable changing connection settings”
      “Prevent changing proxy settings”
      “disable changing Automatic Configuration settings”

      Try this article:
      Disable changing proxy settings
      https://technet.microsoft.com/en-us/library/cc960614.aspx

  4. I have tried both of these methods applied to a test OU which the computer and user are a member of and it does not apply to Windows 10 IE11. Still only has automatic settings checked.

    1. AxelRMSFT says:

      Windows 10 comes with IE11, this is not applicable to this OS version.

  5. Shawn says:

    In your 2nd option you state to nav to User Configuration / Preferences / Control Panel Settings / Internet Settings and right click on IE 10, I do not have the IE 10 option, I have 5, 6, 7, 8. Any suggestions on why this might be?

    1. AxelRMSFT says:

      The IE 10 option is available out of Windows 8.1 with RSAT or Windows 2012 R2

  6. lee philips says:

    How can I force web or app servers to use the proxy settings without a user being logged onto the server? (both server 2008r2 & 2012r2)

    1. AxelRMSFT says:

      @lee philips
      Normally, the Web Service may use the System Account. This will have to use the proxy configuration.
      Check this blog that may give you some ideas where you could add the proxy configuration, but I suggest you make sure you test this out before setting this in production.

      User Proxy settings showing up in Local System Account – Correct way to apply Proxy settings
      https://blogs.msdn.microsoft.com/askie/2013/05/09/user-proxy-settings-showing-up-in-local-system-account-correct-way-to-apply-proxy-settings/

  7. Daniel says:

    Thank you, its easy and perferctly!

Skip to main content