Deny GPO based on IP Range

Question

Hi Team,

I am testing a new gpo for all users connecting on wifi. The wifi ip range is different than the LAN IP range.

I want to prevent the a current proxy setting gpo from applying for users connecting to the wifi IP range.

Can this be achieved?

Thanks all.

Answer 1

Hi @Admin Travis

I suppose you can try out an Item level target to Deny GPO. I have also found an Interesting Forum for the same query and you can check if the suggestion there are helpful for you

https://social.technet.microsoft.com/Forums/ie/en-US/2c88acbb-7ef0-405b-8869-c3b72a12cf28/ie-proxy-connection-settings-policy-filtering?forum=winserverGP

Hope this answers all your queries, if not please do repost back.
If an Answer is helpful, please click "Accept Answer" and upvote it : )

Answer 2

I think that if you create a new site and define the ip range as a subnet in AD Sites & Services and if you create the GPO and link it yo that site, it should work.

You may need to enforce thi GPO because Sites GPO are applied before Domain and OU GPO's.

Don't forget to create a new site link.

Another option would be to use Group Policy Preferences with Item Level Targetting. It's possible to define. Ip range

Hth