Enforcing proxy

Discussion in 'Windows Small Business Server' started by Scott, Sep 7, 2007.

  1. Scott

    Scott Guest

    Hi all,
    In sbs2003r2 standard edition, (No ISA) how can I create a polcy that forces
    the XP clients to use a proxy server. I thought that there would be an option
    in Domain Policies or Domain Controller Policies, but I cannot seem to find
    one.
    I want to prevent the users from simply removing the option in LAN settings
    within IE.
    Scott
     
    Scott, Sep 7, 2007
    #1
    1. Advertisements

  2. What proxy server do you use?

    If you don't grant your users local admin or power user rights, I don't
    think they can change your IE/connection settings - but that is indeed
    something you can set via group policy. Set up a custom GPO and link it at
    the MyBusiness level. One way would be to go to

    User config\Admin Templates\Windows Components\Internet Explorer\Internet
    Control panel - deny them access to the Connections tab outright. Ha.
    That'll learn 'em.

    Also - you might reconfigure your DHCP scope so that it doesn't give their
    computers a default gateway address. That way, even if they do manage to
    bypass the proxy, tough beans. They won't be getting anywhere.
     
    Lanwench [MVP - Exchange], Sep 7, 2007
    #2
    1. Advertisements

  3. Russ Grover \(SBITS.Biz\), Sep 7, 2007
    #3
  4. Scott

    Scott Guest

    Thanks Russ
     
    Scott, Sep 7, 2007
    #4
  5. Scott

    Scott Guest

    Nice one Lanwench.
    The default gateway method looks good. The local admin method will cause
    more issues as I am not onsite that often & I would prefer them to be able to
    install printers & software without calling me.
    I could not help detecting the tone of satisfaction in your e-mail. I would
    not want to cross you.
    Thanks again.

    Scott
     
    Scott, Sep 9, 2007
    #5
  6. I don't like to do that - I'll set up a local-admin account in AD for a
    trusted person in the office to use in emergencies.
    Without revoking the admin rights, there's no way to stop someone from
    putting that default gateway back in there by giving themselves a static IP.
    If you want to keep the place operational & standardized while you're not
    there, admin rights should be revoked.
     
    Lanwench [MVP - Exchange], Sep 10, 2007
    #6
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.