and i have to manually remove the proxy when i took the user from the Restricted group (OU) which should be the case. standing by.