none
Proxy-Settings Filtering to Computers

    Question

  • Hello,

    I have problems with a Proxy-Policy which need to be filtered to specific Computers. Only these computers should apply the policy. But users are in a different OU than computers!

    I set the proxy-settings in the user-Part OU and activated Loopback-Processing (Replace). GPO is linked to a computer-OU and the computers where I need this settings applied to ALL-users are in GPO-Filtering.

    But the proxy-settings are not applied -> why?

    What am I'm doing wrong?

    Regards
    Miranda

    Thursday, March 19, 2015 11:06 AM

Answers

  • > I have problems with a Proxy-Policy which need to be filtered to
    > specific Computers. Only these computers should apply the policy. But
    > users are in a different OU than computers!
     
    For this I'd recommend Group Policy Preferences "Internet settings".
    Here you can define a proxy for your users, and you can use Item Level
    Targeting to narrow down this setting to e.g. a group which the computer
    must be a member of.
     
    > I set the proxy-settings in the user-Part OU and activated
     
    Which exact setting did you use?
     
    > Loopback-Processing (Replace). GPO is linked to a computer-OU and the
    > computers where I need this settings applied to ALL-users are in
    > GPO-Filtering.
     
    Computers only in the security filtering? The users must have access to
    this gpo, too, to apply user settings :)
     

    Greetings/Grüße, Martin

    Mal ein gutes Buch über GPOs lesen?
    Good or bad GPOs? - my blog…
    And if IT bothers me - coke bottle design refreshment (-:
    Thursday, March 19, 2015 1:43 PM
  • > I cannot apply the Policy to my Users-OU because not ALL-Users should
    > get this settings! The users should only get this, when they are logged
    > on to one of the specified Computers.
     
    You CAN actually do so if you use Item Level Targeting for computer
    names or computer security group membership.
     
    > My policy (including Internet-Settings for IE8/9/10) is linked to my
    > server OU. In Filtering there is a AD-Group listed which includes all
    > machines
     
    This doesn't work. Computers don't apply user settings, and users don't
    apply computer settings.
     

    Greetings/Grüße, Martin

    Mal ein gutes Buch über GPOs lesen?
    Good or bad GPOs? - my blog…
    And if IT bothers me - coke bottle design refreshment (-:
    Thursday, March 19, 2015 4:41 PM
  • > How should I use item-level-targeting exactly? Yes, in User-Settings ->
    > Preferences -> "Internet-Settings" Common-Tab, but what should I setup
    > here exactly?
     
    Whatever satisfies your needs :)
     
    I suggest "Security Group" - Computer is a member of.
     
    > If item-level-targeting is working, do I have to link the policy to the
    > Global-Users-OU? And because of item-level-targeting the settings will
    > be only applied to specified Computers?
     
    Yes to both.
     

    Greetings/Grüße, Martin

    Mal ein gutes Buch über GPOs lesen?
    Good or bad GPOs? - my blog…
    And if IT bothers me - coke bottle design refreshment (-:
    Friday, March 20, 2015 8:47 AM

All replies

  • > I have problems with a Proxy-Policy which need to be filtered to
    > specific Computers. Only these computers should apply the policy. But
    > users are in a different OU than computers!
     
    For this I'd recommend Group Policy Preferences "Internet settings".
    Here you can define a proxy for your users, and you can use Item Level
    Targeting to narrow down this setting to e.g. a group which the computer
    must be a member of.
     
    > I set the proxy-settings in the user-Part OU and activated
     
    Which exact setting did you use?
     
    > Loopback-Processing (Replace). GPO is linked to a computer-OU and the
    > computers where I need this settings applied to ALL-users are in
    > GPO-Filtering.
     
    Computers only in the security filtering? The users must have access to
    this gpo, too, to apply user settings :)
     

    Greetings/Grüße, Martin

    Mal ein gutes Buch über GPOs lesen?
    Good or bad GPOs? - my blog…
    And if IT bothers me - coke bottle design refreshment (-:
    Thursday, March 19, 2015 1:43 PM
  • Hello Martin,

    thanks for your reply.

    I cannot apply the Policy to my Users-OU because not ALL-Users should get this settings! The users should only get this, when they are logged on to one of the specified Computers.

    The reason why I have to do this is, that our network-department will cut direct internet-access from my server-network (which is good for security). Internet-Access will only be possible via a proxy.

    My policy (including Internet-Settings for IE8/9/10) is linked to my server OU. In Filtering there is a AD-Group listed which includes all machines which should get this proxy. All other machines in my server OU don't need internet-access.

    Regards
    Miranda

    Thursday, March 19, 2015 2:02 PM
  • > I cannot apply the Policy to my Users-OU because not ALL-Users should
    > get this settings! The users should only get this, when they are logged
    > on to one of the specified Computers.
     
    You CAN actually do so if you use Item Level Targeting for computer
    names or computer security group membership.
     
    > My policy (including Internet-Settings for IE8/9/10) is linked to my
    > server OU. In Filtering there is a AD-Group listed which includes all
    > machines
     
    This doesn't work. Computers don't apply user settings, and users don't
    apply computer settings.
     

    Greetings/Grüße, Martin

    Mal ein gutes Buch über GPOs lesen?
    Good or bad GPOs? - my blog…
    And if IT bothers me - coke bottle design refreshment (-:
    Thursday, March 19, 2015 4:41 PM
  • How should I use item-level-targeting exactly? Yes, in User-Settings -> Preferences -> "Internet-Settings" Common-Tab, but what should I setup here exactly?

    If item-level-targeting is working, do I have to link the policy to the Global-Users-OU? And because of item-level-targeting the settings will be only applied to specified Computers?

    Regards

    Miranda

    Thursday, March 19, 2015 7:46 PM
  • > How should I use item-level-targeting exactly? Yes, in User-Settings ->
    > Preferences -> "Internet-Settings" Common-Tab, but what should I setup
    > here exactly?
     
    Whatever satisfies your needs :)
     
    I suggest "Security Group" - Computer is a member of.
     
    > If item-level-targeting is working, do I have to link the policy to the
    > Global-Users-OU? And because of item-level-targeting the settings will
    > be only applied to specified Computers?
     
    Yes to both.
     

    Greetings/Grüße, Martin

    Mal ein gutes Buch über GPOs lesen?
    Good or bad GPOs? - my blog…
    And if IT bothers me - coke bottle design refreshment (-:
    Friday, March 20, 2015 8:47 AM