+ Post New Thread
Page 1 of 2 12 LastLast
Results 1 to 15 of 28
Internet Related/Filtering/Firewall Thread, Idiots guide / Proxies / ie10 + in Technical; I know this has been brought up before. But i could do with a fresh start on the topic What ...
  1. #1
    Tesla's Avatar
    Join Date
    Nov 2013
    Location
    Milk 'n' Beans
    Posts
    1,230
    Thank Post
    154
    Thanked 237 Times in 179 Posts
    Blog Entries
    1
    Rep Power
    78

    Idiots guide / Proxies / ie10 +

    I know this has been brought up before. But i could do with a fresh start on the topic

    What do you guys use now instead of internet explorer maintenance? Using Server 2008r2

    I haven't really ever messed with group policy/adding templates etc (unless they are already there and its just a case of changing a few settings)

    any help appreciated....any...

  2. #2

    localzuk's Avatar
    Join Date
    Dec 2006
    Location
    Minehead
    Posts
    18,352
    Thank Post
    525
    Thanked 2,599 Times in 2,017 Posts
    Blog Entries
    24
    Rep Power
    888
    We switched to using a WPAD.dat file, published using option 252 over DHCP. IE10 wasn't the reason though to be honest, it was done to simplify web access across the site, with the various different devices now connecting up.

  3. 2 Thanks to localzuk:

    mac_shinobi (26th March 2014), zag (25th March 2014)

  4. #3
    Vasriel's Avatar
    Join Date
    Oct 2012
    Location
    Scotland
    Posts
    122
    Thank Post
    20
    Thanked 20 Times in 17 Posts
    Rep Power
    8
    We are still using a GPO that adds the proxy information to the registry

  5. 3 Thanks to Vasriel:

    speckytecky (28th March 2014), Tesla (25th March 2014), zag (25th March 2014)

  6. #4
    Tesla's Avatar
    Join Date
    Nov 2013
    Location
    Milk 'n' Beans
    Posts
    1,230
    Thank Post
    154
    Thanked 237 Times in 179 Posts
    Blog Entries
    1
    Rep Power
    78
    cheer , will investigate


    (This post did the update thing again *sigh*)

  7. #5
    Gaz
    Gaz is offline

    Join Date
    Feb 2011
    Location
    Preston
    Posts
    905
    Thank Post
    165
    Thanked 77 Times in 66 Posts
    Rep Power
    21
    An extreme method thats not often considered because it involves reinstalling IE, is to use the Internet Explorer Administration Kit and then put the proxy info into that and then deploy it.
    Internet Explorer Administration Kit

  8. #6

    Join Date
    Apr 2010
    Posts
    2,160
    Thank Post
    109
    Thanked 190 Times in 157 Posts
    Rep Power
    84
    We are still using a GPO that adds the proxy information to the registry
    We do the same

  9. #7
    Tesla's Avatar
    Join Date
    Nov 2013
    Location
    Milk 'n' Beans
    Posts
    1,230
    Thank Post
    154
    Thanked 237 Times in 179 Posts
    Blog Entries
    1
    Rep Power
    78
    @localzuk , are you able to elaborate on using proxy pacs at all?

  10. #8
    zag
    zag is offline
    zag's Avatar
    Join Date
    Mar 2007
    Posts
    3,957
    Thank Post
    968
    Thanked 463 Times in 390 Posts
    Blog Entries
    12
    Rep Power
    95
    We're using the proxy registry "hack" as well.

  11. #9

    localzuk's Avatar
    Join Date
    Dec 2006
    Location
    Minehead
    Posts
    18,352
    Thank Post
    525
    Thanked 2,599 Times in 2,017 Posts
    Blog Entries
    24
    Rep Power
    888
    Basically, you create a proxy pac file which lists the proxy server to go to for sites, along with any exclusion rules or whatever else you want to include, like so (A very simple one to start with):

    Code:
    function FindProxyForURL(url, host){
    var proxy_no = "DIRECT";
    
    if (shExpMatch(url, "http://helpdesk/*")) { return proxy_no; }
    if (shExpMatch(url, "http://helpdesk")) { return proxy_no; }
        
    return "PROXY lincache.sch4290.somerset.gov.uk:8080";
    }
    Save that as "wpad.dat" and host it on a web server of some form. On that webserver, you need to make sure you have the right mime type set up:

    For apache:
    Code:
    AddType application/x-ns-proxy-autoconfig .pac
    AddType application/x-ns-proxy-autoconfig .dat

    For IIS (on Windows 2012 Server, adjust according to the version you run):

    1. In IIS Manager, click on your Server, and open MIME Types.
    2. Add a new one - Extension: .dat MIME Type: application/x-ns-proxy-autoconfig
    3. Add a second one - Extension: .pac MIME Type: application/x-ns-proxy-autoconfig

    In DNS, set up a record "wpad" which points at that server.

    Put the wpad.dat file at the top level of the webserver, so it is accessible via http://wpad.domain/wpad.dat.

    In DHCP server (Windows 2012 again, as that's what I've got in front of me):

    1. Right click on IPv4 and click "Set Predefined Options".
    2. Click Add
    3. Name: WPAD, Data Type: String, Code: 252, Description: WPAD Auto Config String
    4. Click OK

    Now, to set up the server options:

    1. Right click on Server Options
    2. Scroll down to option 252, and tick the box
    3. Enter http://wpad.domain/wpad.dat into the box. (.domain should be your domain name)

    By default, clients should have "Automatically detect settings" ticked in Internet Options.

    Internet Explorer and Chrome will use the DHCP option, Firefox will use the DNS option. Other devices might use one or the other - it varies.

    Basically, with that in place, you should never have to fiddle with proxy settings on any clients, and will only need to edit that one file to make changes to the proxy rules.


  12. 3 Thanks to localzuk:

    mac_shinobi (26th March 2014), pcstru (26th March 2014), Tesla (26th March 2014)

  13. #10

    Michael's Avatar
    Join Date
    Dec 2005
    Location
    Birmingham
    Posts
    9,297
    Thank Post
    242
    Thanked 1,586 Times in 1,263 Posts
    Rep Power
    344
    The GPP is relatively easy to introduce, but you can also specify different proxy configurations for your users (if necessary). Of course the advantage is you can instantly change proxy settings, just as easily as a native GPO itself. You can also (if required) use the same technique to switch off proxy settings altogether (if you introduced a transparent proxy). There are lots of possibilities.

  14. #11
    free780's Avatar
    Join Date
    Sep 2012
    Posts
    1,078
    Thank Post
    46
    Thanked 87 Times in 82 Posts
    Rep Power
    23
    Windows 8 VM, GPP. Make sure you press F5 to make the squiggly lines green. It works.

  15. #12
    Tesla's Avatar
    Join Date
    Nov 2013
    Location
    Milk 'n' Beans
    Posts
    1,230
    Thank Post
    154
    Thanked 237 Times in 179 Posts
    Blog Entries
    1
    Rep Power
    78
    @Michael

    excuse me for asking, but what is the key path that gets set via those pictures in the help you gave... im setting up the new registry and it's blank..

  16. #13

    Michael's Avatar
    Join Date
    Dec 2005
    Location
    Birmingham
    Posts
    9,297
    Thank Post
    242
    Thanked 1,586 Times in 1,263 Posts
    Rep Power
    344
    Quote Originally Posted by Tesla View Post
    @Michael

    excuse me for asking, but what is the key path that gets set via those pictures in the help you gave... im setting up the new registry and it's blank..
    It's:

    Code:
    HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings
    All entries are in here.

  17. Thanks to Michael from:

    Tesla (26th March 2014)

  18. #14
    Tesla's Avatar
    Join Date
    Nov 2013
    Location
    Milk 'n' Beans
    Posts
    1,230
    Thank Post
    154
    Thanked 237 Times in 179 Posts
    Blog Entries
    1
    Rep Power
    78
    thanks a lot, will hopefully be testing this afternoon... i have never really had to create gpos before and dont want to mess it up, especially registry!

  19. #15
    Gaz
    Gaz is offline

    Join Date
    Feb 2011
    Location
    Preston
    Posts
    905
    Thank Post
    165
    Thanked 77 Times in 66 Posts
    Rep Power
    21
    As "Automatically detect settings" Is ticked by default what registry key unticks that box?



SHARE:
+ Post New Thread
Page 1 of 2 12 LastLast

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •