+ Post New Thread
Results 1 to 8 of 8
How do you do....it? Thread, Proxy - As a machine Based Policy? in Technical; Like most schools our Proxy is set as a user GPO. I am hoping to use a testing room for ...
  1. #1

    Join Date
    Mar 2007
    Posts
    130
    Thank Post
    29
    Thanked 5 Times in 4 Posts
    Rep Power
    17

    Proxy - As a machine Based Policy?

    Like most schools our Proxy is set as a user GPO. I am hoping to use a testing room for training purposes and have it overrule any user based proxy setting, defined by User GPO.

    A typical student currently logs on to a PC and is currently pointed to 'SchoolProxy:8080 as defined in our student Group policy setting.

    I can create an OU with a group of testbed PC's,(relating to the testing room) and i would like to apply a Machine based policy that specifies 'NEW-Schoolproxy:8080. Thus a student gets directed to a different proxy whilst they are logged into a pc in this location.

    I don't think this can be done by GPO, but i would love to be proved wrong

    Failing that, how would you achieve this, Would a registry hack get at login on these specific PC's get round it?


    Cheers

  2. #2


    Join Date
    Jul 2007
    Location
    Rural heck
    Posts
    2,662
    Thank Post
    120
    Thanked 433 Times in 352 Posts
    Rep Power
    126
    You might be able to modify the hosts.txt on these machines so SchoolProxy is pointed to the IP of your new proxy.

    You could also look into using WPAD, you'll have to put your test machines on static IPs so they can be differentiated from your normal machines.

  3. #3
    jack0w's Avatar
    Join Date
    Jan 2008
    Posts
    123
    Thank Post
    12
    Thanked 4 Times in 4 Posts
    Rep Power
    14
    Have you looked at using loopback processing? You can find more info on this here - Loopback processing of Group Policy

  4. Thanks to jack0w from:

    steele_uk (13th November 2009)

  5. #4

    Join Date
    Oct 2008
    Location
    Lincolnshire
    Posts
    2,280
    Thank Post
    13
    Thanked 235 Times in 223 Posts
    Rep Power
    69
    There is an option in the group policy to apply proxy per machine rather than per user. Not sure where as I don't have access to it at work but on my test bed at home I have seen it.

  6. #5

    Join Date
    Jan 2009
    Location
    Reading
    Posts
    7
    Thank Post
    4
    Thanked 1 Time in 1 Post
    Rep Power
    0
    We used to have a problem with students pulling out network cables which stopped the user GPO from running, thus bypassing the proxy.

    To fix this we set the proxy in the computer policy, like this:

    Set the proxy details in the GPO that is applied to the testbed pc's (in User configuration -> windows settings -> internet explorer maintenance).

    In the same policy, locate Computer Configuration -> Administrative Templates -> System -> Group Policy and enable the Loopback Policy. Set the mode to 'merge'. If there are conflictions, the policies in Computer configuration will take precedent as they are applied last.

  7. Thanks to ccattell from:

    steele_uk (13th November 2009)

  8. #6
    TheLibrarian
    Guest
    If they are bypassing the proxy by stopping group policy applying, that means you have a default gateway set that allows Internet access (I think).

    I'd look at removing the default gateway access to the Internet.

    Just my £0.02

  9. #7

    Join Date
    Feb 2008
    Posts
    270
    Thank Post
    14
    Thanked 44 Times in 35 Posts
    Rep Power
    22
    And enforce the setting to log off if roaming/mandatory profile fails so they get dumped back to the log in screen if they try the rj45 yank.

    As mentioned before you can use the GPO settings under computer configuration of loopback processing and use machine based proxy settings rather than per user to achieve what you want.

  10. #8

    Join Date
    Jan 2009
    Location
    Reading
    Posts
    7
    Thank Post
    4
    Thanked 1 Time in 1 Post
    Rep Power
    0
    We allow staff direct access out as the Bloxx filter can get slow at times, and we use local profiles with redirection as the performance is much better, especially on wireless!

SHARE:
+ Post New Thread

Similar Threads

  1. Replies: 19
    Last Post: 26th June 2013, 10:32 AM
  2. Local Machine Group Policy
    By neilmc in forum Windows
    Replies: 4
    Last Post: 27th August 2009, 11:44 AM
  3. Proxy settings per machine
    By MattCowen in forum Windows
    Replies: 7
    Last Post: 1st October 2008, 10:29 AM
  4. Script to call another based on machine name
    By originofsymmetry in forum Scripts
    Replies: 5
    Last Post: 2nd May 2008, 01:04 PM
  5. Redirected desktop based on machine
    By Jobos in forum Windows
    Replies: 8
    Last Post: 15th June 2007, 12:18 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •