1

I am an intern who has just started in a new company. I have never used the group policy editor before. However I suggested that I believed it is possible to accomplish the two tasks we wish using the editor rather than individually going around to hundreds of PCs and implementing these settings ourselves.

We have recently rolled out some new connection settings and an Intranet page. There are two things this means :

  1. Since we are using a self-signed certificate in order to avoid this page :

"There is a problem with the website's security certificate" page.

we need to add our local domain to the trusted root certificate authorities for all users in the domain like so :

Image showing dialog of the page being added to the trusted root cert authorities.

  1. Our company uses a proxy server to connect to the Internet. Our Intranet site needs to bypass this. This is a setting ~600 users of our company have not set (and as this is not a tech company, it would be a long and arduous process to get them to do it themselves).

The settings we need are as follows on IE :

Image showing a dialog with "Automatically Detect Settings" enabled for LAN, as well as a proxy server specified but ignored if the address requested is local.

Can anyone help me with implementing these settings domain wide using the group policy editor or similar?

Ideally I'd like to create a subset of users and test it with them before rolling out - just so I don't break everyone's Internet. I have searched all over the Internet for a guide to doing this, but there is a notable lack of information on accomplishing this task written in a clear/understandable way.

Any help in this would be greatly appreciated. Thanks a lot!

Improve this question
1
  • P.s. You don't add a domain to a trusted root certification authority, you add a certificate (your intranet server's certificate) to the client machines. This way they won't get the IE error.
    – Kinnectus
    Mar 25, 2016 at 11:41

2 Answers 2

Reset to default
1

I would create a test GPO and deploy it to a test group first, but I think this will be very simple to do. Setup your proxy settings in Internet Explorer on the computer with GPMC installed. Open GPMC and create a new Group Policy Object. Edit the new Group Policy Object and go to User Configuration->Windows Settings->Internet Explorer Maintenance->Connection. Then select "Import the current Connection settings from this machine". This should import all the connection settings which will include the proxy setup.

Improve this answer
4
  • Just make sure that your settings are done properly before an "import". Because these will be the settings applied to everyone affected by the GPO.
    – Nasir
    Jul 17, 2013 at 15:19
  • Agreed, I definitely would NOT edit a current GPO. Add a new one, so if something goes wrong, you can just delete it.
    – xxl3ww
    Jul 17, 2013 at 15:30
  • @xxl3ww Many thanks for your help with this. I have installed GPMC and ran it to create a new GPO. I am now in Windows Settings, and there is no "Internet Explorer Maintenance" as far as I can see. Can you offer any guidance here? Thanks a lot :)
    – Simon Kiely
    Jul 17, 2013 at 16:05
  • 1
    I was giving directions for Windows Server 2003. If you're on 2008 go to User Configuration->Policies->Windows Settings->Internet Explorer Maintenance
    – xxl3ww
    Jul 17, 2013 at 16:57
-1

I suggest to change the proxy server so you could view other websites the are block-listed or restricted by your company you're working. (e.g., Facebook, Youtube, Google stores and etc.) are restricted. One thing you should do is to change the proxy server.

Improve this answer
1
  • 1
    Please read the question again carefully. Your answer does not answer the original question.
    – DavidPostill ♦
    Feb 6, 2015 at 15:35

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .