PROXY

[castlesmith]

Good Morning All,

 

I need some advise and help.

I believe some of the staff have picked up the proxy to bypass smoothwall. We have have got all the staff setup as local admins so they can get access to the proxy settings we are running Windows 2012 r2 so is there anything on that which i could use?

 

I need some staff to be able to override the proxy but only a select few.

 

Any help would be great.

 

 

Thanks

[Steve21]

Take away their admin rights for a start, and do proxy via Group Policy

 

Or disable Proxy pass through (e.g. it has to be smoothwall to get out) and give them different access rights within Smoothwall

 

Steve

[castlesmith]

The problem i have is some staff have laptops and we have an offline gpo which allows them access to localadmin rights so they can change the proxy. If i changed the main Staff gpo to block them would the offline gpo still work if i make no changes to it.

 

I like the idea of controlling everything in smoothwall

[Roberto]

Take away their admin rights for a start, and do proxy via Group Policy

 

So much this. You can't reasonably say "I want staff to be admins except I don't" which is what this question amounts to, sorry OP.

Edited November 30, 2015 by Roberto

[Steve21]

The problem i have is some staff have laptops and we have an offline gpo which allows them access to localadmin rights so they can change the proxy. If i changed the main Staff gpo to block them would the offline gpo still work if i make no changes to it.

 

I like the idea of controlling everything in smoothwall

 

Have you considered just using transparent proxy on those laptops then? As it'll apply when in school and not apply outside. No admin/changes required.

 

Steve

[Jawloms]

Or a proxy.pac file do determine if they're on your IP range or not?

[LeMarchand]

If proxy access is via a .pac they shouldn't need to be able to manually change the proxy.

 

Doh! Beaten to it by @Jawloms!