KB No. 2601: Deploying a PAC proxy file via GPO

Background

Automatically deploy the PAC proxy configuration to all Windows workstations via a Group Policy Object (GPO).

Prerequisites

• Access to the Group Policy Management Console (GPMC)
• Active Directory administrative rights
• Verify that the PAC proxy URL is accessible from all client workstations.

Configuration procedure

Step 1: Creating the GPO

• Open the Group Policy Management Console (gpmc.msc)
• Select Create a GPO object in this domain.

• Name the GPO (example: "GPO_Deploy_Proxy.pac")
• Right-click on the created GPO and select Edit.

Step 2: Configuring the registry item

 

Navigate to: User Configuration > Preferences > Windows Settings > Registry

Create a new registry key:

Right-click on Registry > New > Registry Key

• Action: Update
• Hive: HKEY_CURRENT_USER
• Key path: Software\Microsoft\Windows\CurrentVersion\Internet Settings
• Value name: AutoConfigURL
• Value type: REG_SZ
• Value data: http://192.168.4.110:9123/proxypac/proxy.pac?id=72

Click OK to confirm.

Step 3: Applying the GPO to client workstations

1. Link the GPO to a group or OU:

• Return to theGroup Policy Management console.
• Select your GPO.
• Click Add ... > Advanced.

• In the "Object Types"window, select the Computers checkbox.
• Search for and select the relevant client workstation group.
• Confirm withOK.

Application and verification

Force the application of the GPO

On a test client computer, open a command prompt as an administrator and run: gpupdate /force

Verify GPO enforcement

Method 1: Via the Windows graphical user interface

1. Go to Windows Settings
2. Select Network and Internet
3. Click on Proxy
4. Check that:
   • The Use an installation script box is checked.
   • The script address displays: http://192.168.4.110:9123/proxypac/proxy.pac?id=72