+ Post New Thread
Results 1 to 9 of 9
Windows Thread, Not Applying Proxy GPO on Laptops not connected to network in Technical; We apply a proxy via a gpo when our computers are on site but apparantly the gpo is still applied ...
  1. #1
    Jamie_a's Avatar
    Join Date
    Dec 2006
    Location
    Sheffield
    Posts
    82
    Thank Post
    9
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Not Applying Proxy GPO on Laptops not connected to network

    We apply a proxy via a gpo when our computers are on site but apparantly the gpo is still applied offsite so users cant get on the net from home, can we stop the gpo being applied when not connected to the school network.

  2. #2

    plexer's Avatar
    Join Date
    Dec 2005
    Location
    Norfolk
    Posts
    12,964
    Thank Post
    586
    Thanked 1,494 Times in 1,340 Posts
    Rep Power
    397

    Re: Not Applying Proxy GPO on Laptops not connected to network

    It's not that the policy is still being applied when not connected it's that it's is still applied if that makes sense.

    There is nothing to apply new policies once they are not connected.

    You could allow users access to the proxy settings.

    Use a vbscript to change the proxy setting.

    Use an alternative browser for home use i.e firefox.

    Ben

  3. #3

    witch's Avatar
    Join Date
    Nov 2005
    Location
    Dorset
    Posts
    10,397
    Thank Post
    1,105
    Thanked 2,091 Times in 1,471 Posts
    Rep Power
    651

    Re: Not Applying Proxy GPO on Laptops not connected to network

    There is a nifty little thing called 'proxy pal' which is a free download.
    It puts an icon on the toolbar (well, you have to go to customise and add it).
    The teachers use this to toggle the proxy on and off depending if they are at home or school
    It works a treat for us in both schools I work for
    The only ones it doesnt work for are those whose home connection use a proxy as well
    Hope this helps

  4. #4
    Oops_my_bad's Avatar
    Join Date
    Jan 2007
    Location
    Man chest hair
    Posts
    1,738
    Thank Post
    438
    Thanked 53 Times in 50 Posts
    Rep Power
    29

    Re: Not Applying Proxy GPO on Laptops not connected to network

    If you have a webserver on site (maybe an IIS or apache box) you can configure a proxy.pac file to configure the laptops proxy settings.

    Offsite the setting remains but because it can't find the .pac file it "failsover" automatically to your normal connection - I think even teachers can just about handle that

    Have a look at this thread.

  5. #5

    Michael's Avatar
    Join Date
    Dec 2005
    Location
    Birmingham
    Posts
    8,941
    Thank Post
    232
    Thanked 1,510 Times in 1,206 Posts
    Rep Power
    328

    Re: Not Applying Proxy GPO on Laptops not connected to netwo

    I had the same problem, so I created a logoff script

    Code:
    @ECHO OFF
    regedit /S \\servername\netlogon\DisableProxy.reg
    Name this file "DisableProxy.bat" for example and place as a logoff script for your users in AD.

    Create a reg file (in this case called DisableProxy.reg) and place in the NETLOGON share.

    Code:
    Windows Registry Editor Version 5.00
    
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings]
    "ProxyEnable"=dword:00000000
    Now this will work providing that the following policy is NOT enabled:

    User Config > Admin Templates > Win Components > Internet Explorer

    Disable changing proxy settings - Set to not configured or disabled

    And of course make sure that proxy settings have been specified in AD within - User Config > Win Settings > IE Maintenance > Connection > Proxy Settings

    What will then happen is when a user logs on, the policy applies the proxy settings as normal, but when a user logs off or shutdown their PC, proxy settings are turned off, so when they go home (for example), they connect instantly to their DSL at home. When they come back to school and logon, the policy re-applies proxy settings.

    The great about this solution is it requires no human intervention and is completely automatic

  6. #6
    chrbb's Avatar
    Join Date
    Oct 2005
    Location
    Midlands
    Posts
    1,506
    Thank Post
    141
    Thanked 66 Times in 61 Posts
    Rep Power
    46

    Re: Not Applying Proxy GPO on Laptops not connected to netwo

    I found an autoit script on here somewhere that I just put on the users desktop, one for home - one for school.

  7. #7
    Newton's Avatar
    Join Date
    Oct 2007
    Posts
    179
    Thank Post
    59
    Thanked 5 Times in 5 Posts
    Rep Power
    14

    Re: Not Applying Proxy GPO on Laptops not connected to netwo

    At one point I required a similar solution, the best one I found was to a use
    DHCP option to tell the client PC to look for a proxy config script for the proxy information.

    I only designed the above and never actually tried or can remember the DCHP option to set, but google should resolve that.

    The best thing was when on site the DHCP did all the settings and when at home the users router did all the config. not need for log on or off scripts.

  8. #8


    tom_newton's Avatar
    Join Date
    Sep 2006
    Location
    Leeds
    Posts
    4,448
    Thank Post
    865
    Thanked 839 Times in 662 Posts
    Rep Power
    194

    Re: Not Applying Proxy GPO on Laptops not connected to network

    To respond to the guy with half my name

    It's DHCP option 252... works ok with IE, there's a few security issues (rogue dhcp server could redirect browsers for example) but they are not that serious.

    Look up "WPAD".

  9. #9

    Join Date
    Oct 2005
    Location
    Hampshire
    Posts
    24
    Thank Post
    0
    Thanked 6 Times in 6 Posts
    Rep Power
    19

    Re: Not Applying Proxy GPO on Laptops not connected to netwo

    We no longer have this problem...

    All our laptops have a PAC file defined as the source of their proxy settings.

    In the pac file, I have specified that it test the ip range of its own address - if it is in the range that we use in school - we use the school proxy

    Otherwise it is set to direct.

    This works for the laptop I am currently using, and for all the staff laptops we maintain.

    I am still waiting for someone to turn up wanting a third option - a proxy at home, another school or whatever....

    Sine the laptops are in an OU in school, I have set it up so that the pac file can be updated when they connect to school - not yet needed, but just in case!

SHARE:
+ Post New Thread

Similar Threads

  1. Connecting non RM laptops to a CC3 network
    By pbed77789 in forum Network and Classroom Management
    Replies: 26
    Last Post: 16th June 2010, 02:18 PM
  2. Teachers laptops on wireless network
    By bishopsgarthstockton in forum Wireless Networks
    Replies: 21
    Last Post: 27th February 2009, 08:53 AM
  3. Multiple proxy settings (im on CC3 network)
    By gh256 in forum How do you do....it?
    Replies: 1
    Last Post: 7th December 2007, 09:15 AM
  4. Rogue Laptops on Network
    By acrobson in forum How do you do....it?
    Replies: 3
    Last Post: 22nd June 2007, 09:34 AM
  5. Staff laptops: Letting 'em install network software
    By eean in forum How do you do....it?
    Replies: 3
    Last Post: 13th September 2006, 08:08 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •