Script to automagically set a proxy on login

[Bulldog13]

Hello all

Some crafty users have figured out how to change their internet explorer settings so it does not point to our proxy server.

Can anyone point me in the direction of a script that will automatically set it every time on login.

We are using windows 2003 server. Bascially I would like to add a few lines to our script.bat forcing the proxy to be set.

 

[Thyme]

Disable conncetions that aren't through the proxy

 

[Bulldog13]

Originally posted by: Thyme
Disable conncetions that aren't through the proxy

How do I do that ? Is there an option to check somewhere ? BTW, we are using windows 2k server.

Also, I need a way of setting the proxy automatically - b/c if I just go and kill non-proxied connections - my phone will explode with calls. I found a .vbs script that will do it I just don t know much about 2k server or Active Directory.

 

[Czar]

you can use group policies to do that

 

[Homerboy]

more info needed.
Whats your network environment? MS based with AD/Group Policy? Netware? etc
you could block any port 80 traffic through the router that doesnt come from your proxy directly (if your rotuer supports this... router make/model?)
You could entirely removed the netowrk proxy settings tab (once you set it right) with a simple regedit tweak.

 

[nweaver]

Fire one person for "turning of the proxy" and then monitor/fire a guy a day until it stops. It will...quickly

 

[MrChad]

Originally posted by: nweaver
Fire one person for "turning of the proxy" and then monitor/fire a guy a day until it stops. It will...quickly

Ah, the Gestapo work environment.

 

[Homerboy]

Originally posted by: nweaver
Fire one person for "turning of the proxy" and then monitor/fire a guy a day until it stops. It will...quickly

actually thats a great idea and one we have implmented... well not "fired" but publically and serioulsy repremanded.

 

[Bulldog13]

Originally posted by: Homerboy
more info needed.
Whats your network environment? MS based with AD/Group Policy? Netware? etc
you could block any port 80 traffic through the router that doesnt come from your proxy directly (if your rotuer supports this... router make/model?)
You could entirely removed the netowrk proxy settings tab (once you set it right) with a simple regedit tweak.

We have multiple T connections between sites. We are using a Windows based solution using Active Directory. No more netware. We are using windows 2000 server. Can someone point me to an example on how to do this ?

 

[Bulldog13]

Originally posted by: Czar
you can use group policies to do that

Can you be more specific ?

 

[skace]

active directory domain, gpedit.msc

user config, administrative templates, windows components, internet explorer, disable changing proxy settings.

 

[Czar]

what skace said

 

[TheSophist]

If you are going the policy route, do not let the users have install privileges otherwise they will install more browsers. In which case, you would have to lock those down as well.

 

[Bulldog13]

Thanks to everyone who helped me in this thread (especially skace and czar)! Made me look like a wizard in front o the boss when I showed him how to do this !