Koozali.org: home of the SME Server

Obsolete Releases => SME 7.x Contribs => Topic started by: tropicalview on August 24, 2007, 03:20:51 PM

Title: Force pc's to use proxy - Please make a Howto from this-
Post by: tropicalview on August 24, 2007, 03:20:51 PM

Hi All,

When you have installed dansguardian as webfiltering / logging solution, for sure you like to force all users to use the proxy.
And it's not nice if you have a computer lab with 20 pc's and 200 users that all users have to key in the proxy settings.

In this how to you can make the proxy settings per machine and not per user. and also blockout the standard users to change these information...


First we have to login to an administrator account

Go to Start
Click on Run:

(http://www.tropicalview.net/sme/start.JPG)

In run type Gpedit.msc:

(http://www.tropicalview.net/sme/run.JPG)

In groupedit navigate to this folder:

- Computer Configuartion -> Administrative Templates -> Windows Components -> Internet Explorer

(http://www.tropicalview.net/sme/iefolder.JPG)

in there you will find "Make proxy settings per-machine

(http://www.tropicalview.net/sme/makeproxy.JPG)

Enable that option:

(http://www.tropicalview.net/sme/enabled.JPG)
(http://www.tropicalview.net/sme/enabled2.JPG)

Now close all folders, and navigate to:
User configuration -> Windows settings -> Internet Explorer Maintenance -> Connection
(http://www.tropicalview.net/sme/connection.JPG)

Here we have to change 2 settings,

1st disable the automatic settings detect.
Dubbelclick the Automatic Browser Configuration:
(http://www.tropicalview.net/sme/automaticsettings.JPG)

Be sure that one is not marked.

2nd Proxy settings:
Make the proxy settings here suitable to your server.
(http://www.tropicalview.net/sme/proxysettings.JPG)


Now your users will get automaticly those settings and they will not be able to change that in that pc.

Success

Title: Re: Force pc's to use proxy - Please make a Howto from this-
Post by: stephen noble on August 24, 2007, 03:27:53 PM

Thanks,
The dansguardian howto can just point here.

Does this help with a user with firefox on a usb stick ?
or is it Iexplorer specific

Title: Re: Force pc's to use proxy - Please make a Howto from this-
Post by: tropicalview on August 24, 2007, 03:33:57 PM

I'm afraid this will not help as a security issue,

Just to be sure the users all have the settings and will not mess them up.

for other services like MSN and Yhaoo messenger, just disable the internal proxy and the NAT translation.

Title: Re: Force pc's to use proxy - Please make a Howto from this-
Post by: raem on August 25, 2007, 01:25:11 AM

tropicalview

Quote

When you have installed dansguardian as webfiltering / logging solution, for sure you like to force all users to use the proxy.

What configuration arrangement are you using that requires workstations to manually set the proxy ?
Unless you are using the Group Filtering functions with browser login authentication, you can leave your browsers set to auto detect and users will automatically be forced to use the proxy server as long as you issue the following commands
config setprop squid TransparentPort 8080
config setprop dansguardian portblocking yes
signal-event post-upgrade; signal-event reboot

Title: Re: Force pc's to use proxy - Please make a Howto from this-
Post by: raem on August 25, 2007, 01:28:18 AM

tropicalview

Quote

for other services like MSN and Yahoo messenger, just disable the internal proxy and the NAT translation.

Would you be able to give more specific details of what you did to block these services. My understanding is that these programs search for & use any available ports.

Title: Re: Force pc's to use proxy - Please make a Howto from this-
Post by: raem on August 26, 2007, 03:08:19 AM

tropicalview

Added to Wiki
http://wiki.contribs.org/Dansguardian#Using_Group_Policy_Editor_to_force_proxy_port_setting_on_workstations