How do I configure a Group Policy so that Internet Explorer uses the PAC file?

Steps

  1. Log on to a server in the domain, and, with administrative permissions, open Start > Programs > Administrative Tools > Active Directory Users & Computers and expand your domain.
  2. Right click the top-level domain or Organizational Unit where the policy should be applied, select Properties, and then select the Group Policy tab.
  3. Create a “GPO” and give it a meaningful name.
  4. Edit the GPO from the following location: User configuration > Windows Settings > Internet Explorer Maintenance > Connection > Automatic Browser Configuration
  5. Select Enable Automatic Configuration.
  6. Under Auto-proxy URL (.JS, .JVS, or .PAC file), enter the path to the PAC file.
    • If you are running the Forcepoint Web Security Hybrid module, you will find the path for the PAC file located in the Forcepoint Web Security module of Forcepoint Security Manager under Settings > Hybrid Configuration > User Access > Proxy Auto-Configuration (PAC). It will look something like this:

      http://hybrid-web.global.blackspider.com:8082/proxy.pac?p=

  7. In Automatically configure every field, specify how often the web browser should query for the auto-configuration. For example, if you enter 240 minutes, every 4 hours the web browser checks for an updated PAC file. If you leave this field blank or set it to “0” the web browser is only configured when it is started.
    Note:

    Forcepoint Security Manager clients using Internet Explorer pick up the settings in this GPO the next time that group policy refreshes, which by default is every 90 minutes for clients, and every 5 minutes for domain controllers (or the next time a user logs off and on again). You can change the refresh interval in the default domain policy, or by going to a particular client and entering the following at the command prompt:

    gpupdate /force

    Also note that if the GPO is not applying the settings to the browser, then it is possible that another GPO is being applied that contains different settings; raising the link order for the new GPO should resolve the problem.