Configure a Proxy in Windows 11: Manual vs. Automatic (and netsh)

You need to set up a proxy server in Windows 11 and aren’t sure whether to use automatic detection, a setup script, or enter the address manually.

Why: Windows offers three proxy modes. Automatic detection finds a proxy advertised on the network (WPAD). A setup script points to a PAC file that decides per-site which proxy to use — common in organizations. Manual is a fixed proxy IP and port you type in yourself. Use whichever your IT department or proxy provider specifies; for a single known proxy, manual is simplest.

Option 1: Automatic — detect settings or use a setup script

1. Open Settings > Network & internet > Proxy.
2. Under Automatic proxy setup:
   • Turn on Automatically detect settings to let Windows discover a proxy on the network.
   • For a PAC file, select Set up next to Use setup script. In Edit setup script, turn on Use setup script, enter the Script address (the PAC URL, e.g. http://proxy.example.com/proxy.pac), and select Save.

A script address is the URL of a proxy-configuration (PAC) file that Windows loads to decide which proxy to use. If you don’t have the URL, ask your IT department.

Option 2: Manual — enter a proxy IP and port

1. In Settings > Network & internet > Proxy, under Manual proxy setup, select Set up next to Use a proxy server.
2. In Edit proxy server, turn on Use a proxy server.
3. Enter the Proxy IP address and the Port.
4. (Optional) In the exceptions box, list sites that should bypass the proxy, separated by semicolons.
5. Tick Don’t use the proxy server for local (intranet) addresses if local resources should connect directly.
6. Select Save.

Option 3: netsh — set the system (WinHTTP) proxy

The Settings options above cover your user/browser traffic. System services use a separate WinHTTP proxy. To set or clear that, open Command Prompt as administrator:

:: Set a system proxy (server:port) with a bypass list
netsh winhttp set proxy proxy-server="proxy.example.com:8080" bypass-list="*.local;localhost"

:: Or copy the proxy from your Internet Explorer / Settings config
netsh winhttp import proxy source=ie

:: Check what's set
netsh winhttp show proxy

:: Remove it (back to direct)
netsh winhttp reset proxy

• set proxy configures the proxy server for both HTTP and HTTPS; the optional bypass-list is semicolon-separated hosts that connect directly.
• import proxy source=ie pulls the proxy from your existing Windows/IE settings — handy so you don’t retype it.
• reset proxy returns WinHTTP to DIRECT.

FAQ

Which mode do I pick? If your organization gave you a PAC URL, use Use setup script. If they gave you an IP and port, use Manual. On a network that advertises a proxy automatically, just leave Automatically detect settings on.

Do I need both the Settings proxy and netsh? Usually just the Settings proxy. Set the WinHTTP proxy with netsh only when a system service or tool that ignores the user proxy needs one too.

What’s a PAC file? A small script your admin hosts that tells Windows, per destination, whether to go direct or through a specific proxy. You only supply its URL.

Sources: Microsoft Support — Use a proxy server in Windows · Microsoft Learn — netsh winhttp