GPO to restrict Internet Browsing via Proxy settings for Computers (not users)

Question

Hello!

I need some assistance with setting up a GPO exclusively for a handful of workstations that are used in production. These workstations are Windows 10 22H2.

Simply put, these workstations only need intranet access but not internet browsing access on any browser (in our case, Microsoft Edge and Chrome Enterprise).

Between Google/YouTube, there's plenty of step by step guides for creating a GPO that allows you to change the Proxy Settings under Internet Options but it's user based. I followed the instructions but instead of going through the User configuration in the GPO, I went with Computer configuration hoping it would still work, but nada. The only configuration that actually works in the GPO is, "Prevent changing proxy settings". The GPO fails to add 127.0.0.1:80 to the Proxy Server field.

Is there any way through Computer configuration GPO that I can apply the proxy server IP/Port?

Side note: I have downloaded and installed the latest ADMX files for Win11 22H2prior to attempting this GPO creation.

Answer 1

Disregard, I've finally found the solution using this step by step guide:

https://wiki.ledhed.net/index.php/Set_Proxy_Server_with_Group_Policy

I also added two additional configurations:

Disable changing connection settings

Prevent changing proxy settings

However, I may get away with leaving "Prevent changing proxy settings" to "Not configured".. since disabling changing connection settings seems to prevent the ability to change proxy settings from the get go.

Answer 2

Hello,

 

Thank you for posting in Q&A forum.

If I can know how you manage your computers? By Microsoft Intune, SCCM or any other platform?

This can be achieved by GPO setting, please check if the GPO you applied is located in: Computer Configuration > Policies > Administrative Templates > Network > Network Connections > Windows Components > Internet Explorer.

Once it's applied, it should work on computer level instead of user level.

Please run below CMD command to check the computer level proxy configuration.

netsh winhttp show proxy

 

Hope this answer can help you well.

Best regards，

Jill Zhou