Apply proxy

[TheLion]

Hi,

 

We still use proxy servers for filtering and wonder what the best way to add them is? How are you all doing it?

 

I've tried:

 

 

• Netsh command works really nice but can't run it as a login script as it needs admin privileges
  
• Registry entries in Software\Microsoft\Windows\CurrentVersion\Internet Settings but these don't apply system wide so for example SIMS can't reach out to the internet
  

[LeMarchand]

Chrome and Edge can have proxy settings controlled via GPO. You can also use the "Internet Settings" Preference.

 

Otherwise, run it as a STARTUP rather than a Login script? No-one has complained at the school where I have that set up (checks if at school and sets as appropriate) - doesn't mean it is working, as mine's just for winhttp but the person who was having difficulties with the home/school switching for certain things hasn't mentioned it again.

[TheLion]

Thanks. I can't do it at startup because staff, lower school, upper school all have different proxies.

 

When applying through Internet Settings. Our SIMS messaging software fails to work, Google Drive stops, etc, all because it can't find a proxy as it just adds it for the browser.

[Jcx500]

Thanks. I can't do it at startup because staff, lower school, upper school all have different proxies.

 

When applying through Internet Settings. Our SIMS messaging software fails to work, Google Drive stops, etc, all because it can't find a proxy as it just adds it for the browser.

 

Can’t you use wmi filters?

[LeMarchand]

Thanks. I can't do it at startup because staff, lower school, upper school all have different proxies.

 

When applying through Internet Settings. Our SIMS messaging software fails to work, Google Drive stops, etc, all because it can't find a proxy as it just adds it for the browser.

 

If not @Jcx500's WMI idea:

 

Different script copied out as appropriate or Scheduled Task set to run as System set to run appropriate script by OU?

[TheLion]

WMI is a good idea but I'll have to do it via AD groups and that won't apply until the user logs in so it won't validate against the filter. Unless I'm missing something.

 

For some reason schedule task didn't apply via GPO I'll have to try that again.

[LeMarchand]

Did you get this sorted? My solution didn't seem to be working, so I tweaked it and it seems fine on testing. It's for the winhttp settings, which seems to be what GDrive goes by (and presumably the SIMS thing). Has your LA swapped to a firewall that only understands who people are by AD login, as ours has?

 

 

1. Create a script that checks if IP range = in school, and if it is set appropriate winhttp proxy. otherwise reset it.
   
2. Copy script to local drive if doesn't exist.
   
3. Set scheduled task via GPO to run script as system a minute after logon.
   

Edited December 4, 2020 by LeMarchand