Group Policy and net filtering with .PAC file

[Gibbo]

I have a usergroup called NOPRIVS which restricts pupil usage. They only get a small number of apps and their internet is restricted to just a handful of sites, dictated in the NONET.PAC file. If the site they enter is in the list, it shows it. Otherwise it takes them to a fake proxy.

 

However, it doesn't seem to be working. The policy settings in IE Maintenance - Connection - Auto Browser Configuration are:

 

Automatically detect config settings- ENABLED

Automatic Browser Configuration - ENABLED

Interval - EVERY 0 MINUTES

Auto-config URL (.INS file) - http://server:80/nonet.pac

Auto-proxy URL (.JS, .JVS or .PAC file) - http://server:80/nonet.pac

 

The location of the NONET.PAC file is on the web server, which is running ok - the only site that the pupil can see is the web server itself. Everything else comes up with "this page cannot be displayed".

 

I don't have folder redirection set in the policy, is there anything I'm missing? There's nothing else configured in the GPO net settings that I think would cause a problem (just the home page and a couple of favourites are altered)

 

 

Thanks

[Michael]

Is the file placed within a share and are permissions configured so every user can access the file? And how are you specifying the location of the file? A mapped network drive or a UNC path?

 

Folder Redirection isn't necessary or required for what you're trying to achieve.

[Gibbo]

The file is in the usual IIS folder as detailed in my policy settings in the OP. Ie: http://server/nonet.pac

 

The user has read access to this area, as they can view other web pages stored there.