+ Post New Thread
Page 1 of 2 12 LastLast
Results 1 to 15 of 28
Internet Related/Filtering/Firewall Thread, Idiots guide / Proxies / ie10 + in Technical; I know this has been brought up before. But i could do with a fresh start on the topic What ...
  1. #1
    Tesla's Avatar
    Join Date
    Nov 2013
    Location
    Milton Keynes
    Posts
    887
    Thank Post
    121
    Thanked 155 Times in 122 Posts
    Blog Entries
    1
    Rep Power
    62

    Idiots guide / Proxies / ie10 +

    I know this has been brought up before. But i could do with a fresh start on the topic

    What do you guys use now instead of internet explorer maintenance? Using Server 2008r2

    I haven't really ever messed with group policy/adding templates etc (unless they are already there and its just a case of changing a few settings)

    any help appreciated....any...

  2. #2

    localzuk's Avatar
    Join Date
    Dec 2006
    Location
    Minehead
    Posts
    17,868
    Thank Post
    518
    Thanked 2,486 Times in 1,928 Posts
    Blog Entries
    24
    Rep Power
    838
    We switched to using a WPAD.dat file, published using option 252 over DHCP. IE10 wasn't the reason though to be honest, it was done to simplify web access across the site, with the various different devices now connecting up.

  3. 2 Thanks to localzuk:

    mac_shinobi (26th March 2014), zag (25th March 2014)

  4. #3
    Vasriel's Avatar
    Join Date
    Oct 2012
    Location
    Scotland
    Posts
    108
    Thank Post
    14
    Thanked 18 Times in 15 Posts
    Rep Power
    7
    We are still using a GPO that adds the proxy information to the registry

  5. 3 Thanks to Vasriel:

    speckytecky (28th March 2014), Tesla (25th March 2014), zag (25th March 2014)

  6. #4
    Tesla's Avatar
    Join Date
    Nov 2013
    Location
    Milton Keynes
    Posts
    887
    Thank Post
    121
    Thanked 155 Times in 122 Posts
    Blog Entries
    1
    Rep Power
    62
    cheer , will investigate


    (This post did the update thing again *sigh*)

  7. #5
    Gaz
    Gaz is offline

    Join Date
    Feb 2011
    Location
    Preston
    Posts
    829
    Thank Post
    143
    Thanked 72 Times in 63 Posts
    Rep Power
    21
    An extreme method thats not often considered because it involves reinstalling IE, is to use the Internet Explorer Administration Kit and then put the proxy info into that and then deploy it.
    Internet Explorer Administration Kit

  8. #6

    Join Date
    Apr 2010
    Posts
    2,054
    Thank Post
    83
    Thanked 188 Times in 155 Posts
    Rep Power
    84
    We are still using a GPO that adds the proxy information to the registry
    We do the same

  9. #7
    Tesla's Avatar
    Join Date
    Nov 2013
    Location
    Milton Keynes
    Posts
    887
    Thank Post
    121
    Thanked 155 Times in 122 Posts
    Blog Entries
    1
    Rep Power
    62
    @localzuk , are you able to elaborate on using proxy pacs at all?

  10. #8
    zag
    zag is offline
    zag's Avatar
    Join Date
    Mar 2007
    Posts
    3,829
    Thank Post
    918
    Thanked 422 Times in 355 Posts
    Blog Entries
    12
    Rep Power
    88
    We're using the proxy registry "hack" as well.

  11. #9

    localzuk's Avatar
    Join Date
    Dec 2006
    Location
    Minehead
    Posts
    17,868
    Thank Post
    518
    Thanked 2,486 Times in 1,928 Posts
    Blog Entries
    24
    Rep Power
    838
    Basically, you create a proxy pac file which lists the proxy server to go to for sites, along with any exclusion rules or whatever else you want to include, like so (A very simple one to start with):

    Code:
    function FindProxyForURL(url, host){
    var proxy_no = "DIRECT";
    
    if (shExpMatch(url, "http://helpdesk/*")) { return proxy_no; }
    if (shExpMatch(url, "http://helpdesk")) { return proxy_no; }
        
    return "PROXY lincache.sch4290.somerset.gov.uk:8080";
    }
    Save that as "wpad.dat" and host it on a web server of some form. On that webserver, you need to make sure you have the right mime type set up:

    For apache:
    Code:
    AddType application/x-ns-proxy-autoconfig .pac
    AddType application/x-ns-proxy-autoconfig .dat

    For IIS (on Windows 2012 Server, adjust according to the version you run):

    1. In IIS Manager, click on your Server, and open MIME Types.
    2. Add a new one - Extension: .dat MIME Type: application/x-ns-proxy-autoconfig
    3. Add a second one - Extension: .pac MIME Type: application/x-ns-proxy-autoconfig

    In DNS, set up a record "wpad" which points at that server.

    Put the wpad.dat file at the top level of the webserver, so it is accessible via http://wpad.domain/wpad.dat.

    In DHCP server (Windows 2012 again, as that's what I've got in front of me):

    1. Right click on IPv4 and click "Set Predefined Options".
    2. Click Add
    3. Name: WPAD, Data Type: String, Code: 252, Description: WPAD Auto Config String
    4. Click OK

    Now, to set up the server options:

    1. Right click on Server Options
    2. Scroll down to option 252, and tick the box
    3. Enter http://wpad.domain/wpad.dat into the box. (.domain should be your domain name)

    By default, clients should have "Automatically detect settings" ticked in Internet Options.

    Internet Explorer and Chrome will use the DHCP option, Firefox will use the DNS option. Other devices might use one or the other - it varies.

    Basically, with that in place, you should never have to fiddle with proxy settings on any clients, and will only need to edit that one file to make changes to the proxy rules.


  12. 3 Thanks to localzuk:

    mac_shinobi (26th March 2014), pcstru (26th March 2014), Tesla (26th March 2014)

  13. #10

    Michael's Avatar
    Join Date
    Dec 2005
    Location
    Birmingham
    Posts
    9,262
    Thank Post
    242
    Thanked 1,572 Times in 1,252 Posts
    Rep Power
    340
    The GPP is relatively easy to introduce, but you can also specify different proxy configurations for your users (if necessary). Of course the advantage is you can instantly change proxy settings, just as easily as a native GPO itself. You can also (if required) use the same technique to switch off proxy settings altogether (if you introduced a transparent proxy). There are lots of possibilities.

  14. #11
    free780's Avatar
    Join Date
    Sep 2012
    Posts
    1,013
    Thank Post
    42
    Thanked 84 Times in 80 Posts
    Rep Power
    22
    Windows 8 VM, GPP. Make sure you press F5 to make the squiggly lines green. It works.

  15. #12
    Tesla's Avatar
    Join Date
    Nov 2013
    Location
    Milton Keynes
    Posts
    887
    Thank Post
    121
    Thanked 155 Times in 122 Posts
    Blog Entries
    1
    Rep Power
    62
    @Michael

    excuse me for asking, but what is the key path that gets set via those pictures in the help you gave... im setting up the new registry and it's blank..

  16. #13

    Michael's Avatar
    Join Date
    Dec 2005
    Location
    Birmingham
    Posts
    9,262
    Thank Post
    242
    Thanked 1,572 Times in 1,252 Posts
    Rep Power
    340
    Quote Originally Posted by Tesla View Post
    @Michael

    excuse me for asking, but what is the key path that gets set via those pictures in the help you gave... im setting up the new registry and it's blank..
    It's:

    Code:
    HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings
    All entries are in here.

  17. Thanks to Michael from:

    Tesla (26th March 2014)

  18. #14
    Tesla's Avatar
    Join Date
    Nov 2013
    Location
    Milton Keynes
    Posts
    887
    Thank Post
    121
    Thanked 155 Times in 122 Posts
    Blog Entries
    1
    Rep Power
    62
    thanks a lot, will hopefully be testing this afternoon... i have never really had to create gpos before and dont want to mess it up, especially registry!

  19. #15
    Gaz
    Gaz is offline

    Join Date
    Feb 2011
    Location
    Preston
    Posts
    829
    Thank Post
    143
    Thanked 72 Times in 63 Posts
    Rep Power
    21
    As "Automatically detect settings" Is ticked by default what registry key unticks that box?

SHARE:
+ Post New Thread
Page 1 of 2 12 LastLast

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •