Topic: Force pc's to use proxy - Please make a Howto from this-

[tropicalview]

Hi All,

When you have installed dansguardian as webfiltering / logging solution, for sure you like to force all users to use the proxy.
And it's not nice if you have a computer lab with 20 pc's and 200 users that all users have to key in the proxy settings.

In this how to you can make the proxy settings per machine and not per user. and also blockout the standard users to change these information...


First we have to login to an administrator account

Go to Start
Click on Run:



In run type Gpedit.msc:



In groupedit navigate to this folder:

- Computer Configuartion -> Administrative Templates -> Windows Components -> Internet Explorer



in there you will find "Make proxy settings per-machine



Enable that option:




Now close all folders, and navigate to:
User configuration -> Windows settings -> Internet Explorer Maintenance -> Connection


Here we have to change 2 settings,

1st disable the automatic settings detect.
Dubbelclick the Automatic Browser Configuration:


Be sure that one is not marked.

2nd Proxy settings:
Make the proxy settings here suitable to your server.



Now your users will get automaticly those settings and they will not be able to change that in that pc.

Success

[stephen noble]

Thanks,
The dansguardian howto can just point here.

Does this help with a user with firefox on a usb stick ?
or is it Iexplorer specific

[tropicalview]

I'm afraid this will not help as a security issue,

Just to be sure the users all have the settings and will not mess them up.

for other services like MSN and Yhaoo messenger, just disable the internal proxy and the NAT translation.

[raem]

tropicalview

When you have installed dansguardian as webfiltering / logging solution, for sure you like to force all users to use the proxy.

What configuration arrangement are you using that requires workstations to manually set the proxy ?
Unless you are using the Group Filtering functions with browser login authentication, you can leave your browsers set to auto detect and users will automatically be forced to use the proxy server as long as you issue the following commands
config setprop squid TransparentPort 8080
config setprop dansguardian portblocking yes
signal-event post-upgrade; signal-event reboot

[raem]

tropicalview

for other services like MSN and Yahoo messenger, just disable the internal proxy and the NAT translation.

Would you be able to give more specific details of what you did to block these services. My understanding is that these programs search for & use any available ports.

[raem]

tropicalview

Added to Wiki
http://wiki.contribs.org/Dansguardian#Using_Group_Policy_Editor_to_force_proxy_port_setting_on_workstations