proxy server undermining group policy to block internet?

[FLATcura]

hey, i am completely baffled

for years now i have used GP to give users who are not supposed to access the internet a proxy server address of 127.0.0.1. recently i installed a pfsense firewall/router using squid and squidguard set to run in transparent mode.

now suddenly "some" of the users have internet access and i have no idea why.i would love to just tell squidguard to block the internet and leave GP out of it, but team leaders need internet access when they log into their accounts.

ive made whitelist destination in squidguard and it dosent work, ive made a new OU and a new GP and that dosent work..

so the problem lies with having the loopback address as my proxy server. any recommendations or suggestions on how i could block internet on a windows 2003 domain on a per user basis?

thanks for your time

 

[djBon2112]

Direct it to another meaningless private IP? If you're network is a 10.x.x.x network, point the proxy to 192.168.0.1 or something stupid like that. See if that helps.