GPO Proxy server settings (to not activate away from school0

Hi, we've been using a GPO to set the proxy settings necessary in school - this works fine

What i'd like though is for staff laptops to not use the proxy when away from the school, ie not logged into the domain

Our current solution is to use firefox out of school and explorer in - with some daft thingy (can't remember what but very usefull!) synching the bookmarks and faves from one to the other
We'd like to move away from this and use explorer wherever, but without the need for staff to change any settings on their laptops (however easy!)

Any advice greatfully received!!

Thanks

Here is a vbscript that that I use on staff laptops to change proxy settings. I just drop it in the startup folder and put a link to it on the desktop.

Code:

---

intAnswer = _
    Msgbox("CHANGE PROXY SETTINGS" & chr(13) & "ARE YOU AT HOME?", _
        vbYesNo, "WHERE ARE YOU?")

If intAnswer = vbYes Then
set WSHShell = WScript.CreateObject("WScript.Shell")

WSHShell.RegWrite "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyServer", ""
WSHShell.RegWrite "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyEnable", 0, "REG_DWORD"
WSHShell.RegWrite "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyOverride", ""
WSHShell.RegWrite "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Start Page", "http://www.google.co.uk"       
    Msgbox "THE PROXY SERVER HAS BEEN DISABLED"
Else
set WSHShell = WScript.CreateObject("WScript.Shell")

WSHShell.RegWrite "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyServer", "%YOURPROXYSERVER%:%PORT%"
WSHShell.RegWrite "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyEnable", 1, "REG_DWORD"
WSHShell.RegWrite "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyOverride", "<local>"       
WSHShell.RegWrite "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Start Page", "http://www.google.co.uk"       
   
        Msgbox "THE PROXY SERVER HAS BEEN ENABLED"
End If

---

If you set up auto proxy either via dns or DHCP you don't get this problem as it's the same setting as is used on all home broadband.

Chapter 26 - Using Automatic Configuration, Automatic Proxy, and Automatic Detection

I *think* you can get away with pushing a proxy.pac that is only accessable inside the school... otherwise the auto-config route definitely works.

Assuming you host your website internally, or at least host some sort of http:// site that is accessible inside and out, just put your proxy.pac on there. We host our website in our DMZ, and have the network set up so you don't need to be using the proxy to get to it. That way no matter whether the notebook is on campus or at home, it can access the proxy.pac file and know exactly what to do.

For example:

Code:

---


function FindProxyForURL(url, host)
{

          if (isPlainHostName(host)
            || isInNet(host, "123.123.123.0", "255.255.255.0")
            || isInNet(host, "192.168.211.0", "255.255.255.0")
            || isInNet(host, "172.17.0.0", "255.255.0.0")
            || isInNet(host, "172.18.0.0", "255.255.0.0")
            || dnsDomainIs(host, ".yourschool.edu"))
                return "DIRECT";

          if (isInNet(myIpAddress(), "172.16.0.0", "255.255.0.0")
            || isInNet(myIpAddress(), "172.17.0.0", "255.255.0.0")
            || isInNet(myIpAddress(), "172.18.0.0", "255.255.0.0")
            || isInNet(myIpAddress(), "172.20.0.0", "255.255.252.0")
            || isInNet(myIpAddress(), "172.24.0.0", "255.255.252.0")
            || isInNet(myIpAddress(), "172.31.0.0", "255.255.0.0")
            || isInNet(myIpAddress(), "10.10.0.0", "255.255.248.0")
            || isInNet(myIpAddress(), "10.10.8.0", "255.255.252.0")
            || isInNet(myIpAddress(), "10.20.0.0", "255.255.252.0")
            || isInNet(myIpAddress(), "10.20.4.0", "255.255.252.0")
            || isInNet(myIpAddress(), "10.22.0.0", "255.255.255.0")
            || isInNet(myIpAddress(), "10.21.0.0", "255.255.255.0")
            || isInNet(myIpAddress(), "10.24.0.0", "255.255.224.0") 
            || isInNet(myIpAddress(), "10.24.60.0", "255.255.255.0")
            || isInNet(myIpAddress(), "10.24.61.0", "255.255.255.0")
            || isInNet(myIpAddress(), "10.24.62.0", "255.255.255.0")
            || isInNet(myIpAddress(), "10.25.0.0", "255.255.252.0")
            || isInNet(myIpAddress(), "10.50.0.0", "255.255.224.0")
            || isInNet(myIpAddress(), "10.51.0.0", "255.255.224.0")
            || isInNet(myIpAddress(), "10.52.0.0", "255.255.224.0")
            || isInNet(myIpAddress(), "192.168.212.0", "255.255.255.0")
            || isInNet(myIpAddress(), "192.168.192.0", "255.255.255.0"))
                return "PROXY 123.123.123.123:80";       

       
        return "DIRECT";

}

---