Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I need help in forcing several workstations to use an external web proxy.

I realize I will be asking how to do this the "wrong way" considering that: a) Users are not part of any windows group and are all administrator users. b) I do not have access to the routers so can not force the proxy there.

My challenge is to force all the computers at a workspace to use the business's approved web proxy.

I will eventually get the correct infrastructure established, but for now I just need a quick and dirty solution to force the workstations to use a proxy.

Setting the proxy at browser level is useless as the users can just as easily turn it off.

Of course, as each user practically has an administrator account, they can also undo anything I implement.

But, if it were obscure enough, then it would solve the problem until I get a proper network in place.

I was thinking something along the lines of a registry setting, or script that would force the proxy for all browsers. The users are not the kind that would know the first thing about registry settings but would know how to change their browser settings. However, the only registry settings I have seen are for IE only - workstations use various browsers.

Any ideas?

share|improve this question
    
Forcing autonomous computers to act as your subjects!? "Why you're the king? I didn't vote for you!" –  surfasb Jul 25 '11 at 8:06
add comment

1 Answer

Since they all have administrator accounts and use a variety of different web browsers I'd say you have two solutions.

Using a PAC file, which allows browsers to automatically locate a configuration file which tells them which proxy to use, although this is still also easily disabled by going into Internet Explorers settings and clicking the "Automatically discover proxy" (or whatever it says).

The other option is to use a transparent proxy, with this everyones internet traffic will be forced through the proxy anyway, basically all this is is the proxy set as the default gateway but with rules to redirect web traffic into the proxy port, but it comes at the disadvantage of not being able to filter HTTPS.

share|improve this answer
    
Thanks for you fast reply Jack. Few issues I have is that I don't have access to configure the gateways (which is also a mess, these guys have 8 separate internet lines - literally one for each office). The PAC file could be a solution, but as you say they can just turn it off. So looking for something like a registry setting or a way to force the PAC file. Any other ideas? –  Paz Jul 23 '11 at 14:28
    
You could just disallow the connections box in Internet explorer using a GPO (or the registry if you wish to do it that way) and force the proxy settings (with GPO or registry) and that would prevent them from opening the connections box in Internet Explorer. Heres how prevent them from opening the connections tab (it might be out of date I'm not sure). I can't really think of a way to control all browsers though unfortunately. –  Jack Jul 23 '11 at 14:46
    
I see what you mean. unfortunately most are using Firefox etc. But you have given me some ideas. thanks –  Paz Jul 23 '11 at 15:02
    
@Dale: Both Firefox and Chrome allow certain settings to be enforced. –  grawity Jul 23 '11 at 15:27
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.