GPO proxy settings

[itgeek]

Hi we have deployed proxy setting to desktops and laptops. We have a problem when laptops disconnect from the lan and go on there personal wireless at home they are unable to connect because of the proxy settings. How can we change this? Teacher are administrator on there laptops and can change this manually is there a way to stop this?

 

 

Thanks

[Hightower]

Does this help you?

 

http://www.edugeek.net/forums/scripts/26813-proxy-proxy-off-app-2.html

 

[FN-GM]

If you use a proxy.pac file and host it on a server inside the school, when a teacher goes home and the laptop cant find the file it will failover and let them access the internet normally. No need to change any settings etc.

 

By the way the teacher doesnt need to be an administrator to change the proxy settings.

[itgeek]

Thanks, how do you use proxy.pac files?? We make the teachers administrators, but I want to lock this so they cant change the proxy.

 

 

Thanks

[tom_newton]

What FN-GM said

[FN-GM]

This is my config file, im sure you can tweak it yourself.

 

You can set IE to look at this in group policy or by DHCP, i use group policy.

 

 
function FindProxyForURL(url, host)

{

//Declare proxy strings as variables

var schoolproxy = "PROXY 172.16.16.52:8080";

// IP not to use proxy


if (shExpMatch(url, "*172.*")) { return "DIRECT"; }
if (shExpMatch(url, "*10.*")) { return "DIRECT"; }
if (shExpMatch(url, "*192.*")) { return "DIRECT"; }
if (isPlainHostName(host)) { return "DIRECT"; }

// URLS not to use proxy server


if (shExpMatch(url, "*website.com*")) { return "DIRECT"; }


// Slect Proxy Server

if (isInNet(myIpAddress(), "172.16.16.0", "255.255.252.0")) { return schoolproxy; }


else

return "DIRECT";

}

[itgeek]

Thanks do you have any info on how to create proxy.pac and I need to exclude some websites from the list.

[FN-GM]

Paste the code in note pad. Make the changes to reflect your IP range, subnetmask & Proxy IP.

 

To add exceptions add to this section of code

 

if (shExpMatch(url, "*website.com*")) { return "DIRECT"; }

 

Replace website.com with anything you may need and copy that line for any additional ones.

 

To specify in ie you do it in the automatic script configuration box like the attached

Edited May 20, 2011 by FN-GM

[itgeek]

ok do I deploy this in gpo Automatic browser Configuration?

 

Thanks for your help

[FN-GM]

Not sure off the top of my head its in the connect settings under windows in group policy.

 

I think you have to prefix the path with file:// - Myself i host it on a intranet server.

[itgeek]

Help....

 

I have created a proxy.pac file and am testing it on my local machine file://c:\proxy.pac

 

The problem is that its not hitting my proxy server????

 

Any ideas??

 

 

Thanks

[FN-GM]

can you post your copy of the file please so i can take a quick look to see if there is anything obvious?

 

Thanks

[itgeek]

Thanks FN-GM below is the file

 

function FindProxyForURL(url, host) {

return "ip:port;

DIRECT";

}

[bladedanny]

--Edit-- sorry ignore me, I've just tested and it makes no difference.

[FN-GM]

Thanks FN-GM below is the file

 

function FindProxyForURL(url, host) {

return "ip:port;

DIRECT";

}

 

 

Can we see the rest please

 

Also can you put it in a coded area so the forum doesnt do things like putting in smiley faces

[itgeek]

Hi Below is what I have. All I want is to send all traffice to the proxy, address below and then if laptops not on network ignore. Is this possible?

 

Thanks

 

function FindProxyForURL(url, host) {

return "10.170.10.200:3128;

DIRECT";

}