Deploying a .PAC file with Microsoft Group Policy Management Tool

Note: You need to use the Group Policy Management Console (GPMC) on a computer that runs Windows 8, Windows 8.1, Windows Server 2012 R2, or Windows Server 2012 to manage a domain.

Create a New Group Policy Object (GPO)

  • 1. In the Group Policy Management window, under Domains, right-click the domain name.
  • 2. Select Create and Link a GPO Here. The New GPO window appears.
  • 3. Enter an intuitive Name for the GPO, such as Proxy Server Policy.
  • 4. Click OK.

Change the GPO Status

The new GPO appears in the left pane under the specified domain.

  • 1. Select the policy proxy GPO.
  • 2. In the right pane, click the Details tab, and then change the GPO Status to Computer Configuration settings disabled. This minimizes the parts of the GPO that are applied, so that users can log on more quickly.

Edit the GPO

  • 1. In the left pane, right-click the proxy policy GPO, then click Edit.
  • 2. In the Group Policy window, in the left pane:
    • Select User Configuration.
    • Select Control Panel Settings.
    • Select Internet Settings.
    • Select Connection, then double-click Automatic Browser Configuration in the right pane.
  • 3. On the Automatic Configuration tab:
    • Select Automatically detect configuration settings and Enable Automatic Configuration.
    • Enter an interval in the Automatically configure every checkbox.
    • Enter your PAC URL in the Auto-proxy URL box. Click Ok.
  • 4. Navigate to User Configuration > Control Panel Settings > Internet Settings.
  • 5. Clear Automatically detect configuration settings.
  • 6. Select Enable Automatic Configuration.
  • 7. Select Auto-proxy URL. Enter your PAC file URL in the Auto-proxy URL box.
  • 8. In the Computer Configuration area, navigate to Administrative Templates > System/Group Policy, and then use the following settings to maintain consistency and compliance of the web browser’s settings:
    • Select Configure Internet Explorer Maintenance policy processing
    • Select Allow processing across a slow network connection.
    • Clear Do not apply during periodic background processing.
    • Select Process even if the Group Policy objects have not changed.

For Firefox Users

FirefoxADM can be used for allowing centrally managed locked and/or default settings in Firefox via Group Policy Templates in Active Directory.

Learn more about: FirefoxADM

Secure the Proxy Settings

After you enable the proxy settings, you should disable users’ ability to change them.

  • 1. In the Group Policy window, in the left pane:
    • Select User Configuration.
    • Select Administrative Templates.
    • Select Windows Components.
    • Select Internet Explorer.
  • 2. In the right pane, scroll down to and right-click Prevent changing proxy settings. Select Properties, and then select Enabled.
  • 3. Click Apply, and then click OK twice. Users now cannot change their proxy settings.