Windows proxy settings are under Settings > Network & internet > Proxy. Before you configure or turn off a proxy, identify whether Windows uses automatic detection, an organization setup script, a manual server, or a separate proxy attached to one VPN connection.

Key Takeaways

Record every existing script address, server, port, exception, and local-address option before changing it.

Automatic detection, a PAC setup script, and a manual proxy are different modes.

Do not remove a managed proxy, certificate, or policy from a work or school device.

Verify both a browser and a normal Windows app, then restore the recorded values if the change makes access worse.

If you have not yet established whether the whole PC or only some apps fail, start with the device and app troubleshooting guide.

Which Windows proxy settings are active?

Microsoft documents three system proxy methods and a separate per-VPN proxy.［1］

Mode	Information required	Typical owner
Automatically detect settings	No server details entered by the user	Windows or local network
Use setup script	A trusted PAC/script URL	Organization or network administrator
Use a proxy server	Server name or IP, port, and optional exceptions	User or administrator
Proxy for a VPN connection	Settings inside one saved VPN profile	VPN or organization owner

Open Settings > Network & internet > Proxy and record the state of every switch. Copy values into a private note without publishing credentials, tokens, or internal hostnames. On a managed device, a notice such as “Some settings are managed by your organization,” a switch that returns after sign-in, or an unfamiliar script is a reason to contact IT rather than erase the configuration.

Make the record usable for recovery: label whether each mode was on or off, preserve the complete script address, keep the manual server and port together, and copy exception entries in their original order. Note which Wi-Fi, Ethernet, or VPN connection was active and whether the failure affected a browser, a Windows app, or an internal destination. Store this record somewhere reachable if the proxy change removes network access.

Do not paste proxy credentials into screenshots, public tickets, or chat. If a password is requested, use the approved credential flow rather than adding it to a script URL or exception list. On a personal PC, also check whether security or filtering software owns the configuration; “personal device” does not necessarily mean every proxy switch is user-created.

The Windows app connectivity guide is a better starting point when websites work but one or two apps fail. If the PC cannot reach anything on the network, use the Windows Wi-Fi scope checklist.

How do you configure automatic proxy setup in Windows?

Use automatic detection only when the network or administrator expects it.

Open Start > Settings > Network & internet > Proxy.
Under Automatic proxy setup, review Automatically detect settings.
Turn it on when the trusted network provides automatic proxy discovery.
Close and reopen the app you are testing.
If access changes unexpectedly, restore the original switch state.

Automatic detection does not mean “find any public proxy.” It asks Windows to discover configuration supplied by the current environment. Do not combine it with random proxy lists.

How do you use a setup script or manual proxy?

Only use details provided by a trusted administrator or service owner.

Configure a setup script

In Network & internet > Proxy, find Use setup script and select Set up.
Turn on Use setup script.
Enter the exact trusted script address.
Select Save, then restart the affected apps.

Do not edit a PAC file you do not own. If the script cannot be reached, save the exact error and ask its owner whether the URL, certificate, authentication, or network requirement changed.

Configure a manual server

Under Manual proxy setup, select Set up beside Use a proxy server.
Turn on Use a proxy server.
Enter the approved proxy server name or IP address and port.
Add only approved exception patterns, separated by semicolons.
Keep Don't use the proxy server for local (intranet) addresses selected unless the organization explicitly requires intranet traffic to use the proxy.
Select Save and test.

An exception bypasses the proxy for matching destinations. A broad wildcard can expose traffic to a path the administrator did not intend, so use the smallest approved list.

For background on the intermediary itself, see how a proxy server works. A web proxy and a VPN solve different tasks; neither label tells you who owns the current Windows setting.

How do you turn off a proxy in Windows safely?

Turn off only the mode you own and can restore.

Save the current automatic switch, script URL, manual server, port, exceptions, and local-address choice.
Confirm the device is personal and the setting was not installed by work, school, security software, or a trusted network service.
In Network & internet > Proxy, turn off Use setup script or Use a proxy server, depending on the configuration being tested.
Leave other modes unchanged unless evidence points to them.
Close and reopen the affected browser and app.
Test the same destinations that worked and failed before the change.

Do not delete certificates, registry values, organization policies, or network profiles as part of this procedure. If the setting reappears, treat that as evidence of another owner rather than repeatedly fighting it.

How is a VPN proxy different from the system proxy?

Microsoft exposes proxy settings for an individual VPN connection under Settings > Network & internet > VPN > [connection] > Advanced options. That proxy applies to the saved VPN connection and must be configured separately from the main Proxy page.

Windows also treats creation and connection of a VPN profile as its own task.［2］ Record which layer you changed:

system automatic detection;
system setup script;
system manual proxy;
or the proxy attached to one VPN profile.

Turning off the system manual proxy does not automatically remove a per-VPN proxy. Likewise, editing a VPN profile should not be used to overwrite an organization PAC script.

How do you verify and recover after a proxy change?

Use the same small test set before and after the change:

Open one ordinary HTTPS website in a browser.
Open one Windows app that previously worked.
Retry the exact app or site that failed.
If intranet access matters, test one approved internal destination.
Disconnect and reconnect the relevant Wi-Fi, Ethernet, or VPN connection only if its configuration requires a new session.

If the browser works but a Windows app does not, return to app-specific connectivity checks. If every destination fails after the change, restore the saved proxy values exactly and contact the configuration owner with the before/after results.

Interpret mixed results before editing another mode. A public website that works while an approved intranet site fails can indicate a missing exception, required organizational route, or disconnected VPN. An app that fails while the same service works in a browser may use a different network path. A failure that appears only on one network can belong to that network's discovery or access design rather than the manual proxy server.

For a clean comparison, keep the same account, network, destinations, and VPN state during one test. Record the time and exact error, restore the last changed value if access regresses, close and reopen the affected apps, and repeat the identical checks. Escalate with that compact before/after record instead of cycling switches, deleting certificates, or adding broader bypass patterns.

Summary

Identify the active proxy owner and mode before editing it.
Use trusted automatic, script, or manual information only.
Preserve exceptions and local-address behavior unless the owner approves a change.
Treat per-VPN proxy settings as a separate layer.
Verify browser, app, and necessary intranet access, then restore recorded values on regression.

FAQ

Where are Windows proxy settings?

Open Settings > Network & internet > Proxy. A proxy tied to one VPN profile is under that VPN connection's Advanced options instead.

Should Automatically detect settings be on?

It should match the trusted network or administrator's design. Record the original state and do not treat automatic detection as a way to locate arbitrary public proxies.

What is a proxy setup script?

It is a trusted script, often a PAC file, that tells software when and how to use proxies. Use only the exact address supplied by its owner.

Can I turn off a work proxy to fix an app?

Do not remove a managed proxy without authorization. Save the symptom and contact IT, because the proxy may enforce access or security policy.

Why does the proxy switch turn itself back on?

An organization policy, management profile, security tool, or network service may own it. Repeatedly switching it off does not remove that owner.

Does a Windows proxy affect every app?

Many apps use system proxy settings, but some software has its own network stack or configuration. Compare a browser and another app before deciding which layer failed.

Is a VPN proxy the same as the manual system proxy?

No. A saved VPN connection can have its own proxy configuration, separate from the system Proxy page.

What should I do if turning off the proxy breaks access?

Restore the exact recorded values, reopen the affected apps, and ask the proxy owner to review the result. Do not compensate with random registry edits or open proxies. A VPN is separate from Windows proxy policy; it cannot make an invalid proxy server reachable or authorize bypassing a managed PAC configuration.

Sources:

Microsoft Support - Use a proxy server in Windows — https://support.microsoft.com/en-us/windows/experience/connectivity-networking/use-a-proxy-server-in-windows
Microsoft Support - Connect to a VPN in Windows — https://support.microsoft.com/en-us/windows/experience/connectivity-networking/connect-to-a-vpn-in-windows

Sources checked 27 August 2026.

Related articles:

Windows Proxy Settings: Configure or Turn Off Safely