[Technical] Proxy Group Policy dynamic removal

[Grant Frazer]

Thanks everybody for your responses.

What has worked for us thanks to Ian's ideas, is the use of a logoff
script file which changes the "ProxyEnable" entry to "0" in the
"HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings" key.
For those interested we basically grabbed the reg file and added it to a
.bat file using the /s switch to make it silently install.  We found if
you didn't use the /s switch the Microsoft Firewall and operating system
will prompt you to run the reg file.

Example .bat code.

regedit.exe /s proxy_disable.reg


Also for those interested the use of a Local Policy did not have any
effect as the Group Policy still overrode it even though the laptop was
not on the network.


Once again thank you for the help,

Grant Frazer 
Information and Communication Technologies Manager 
Fintona Girls School 
79 Balwyn Rd, 
Balwyn, VIC, 3103 
Ph +61 3 98301388 
Fax. +61 3 98885682 
<http://www.fintona.vic.edu.au> 

_________________________________________________ 
The information contained in this e-mail message and any attached files
may be confidential information. If you are not the intended recipient
any
use, disclosure or copying of this e-mail is unauthorized. If you have
received this e-mail in error, please notify the sender immediately by
reply e-mail and delete all copies of this transmission together with
any
attachments.
_________________________________________________

-----Original Message-----
From: Clark, Ian C [mailto:clark.ian.c at edumail.vic.gov.au] 
Sent: Wednesday, June 01, 2005 1:46 PM
To: Technical Discussion in Schools Mailing List
Subject: RE: [Technical] Proxy Group Policy dynamic removal


-----Original Message-----
From: tech-bounces at edulists.com.au
[mailto:tech-bounces at edulists.com.au]On Behalf Of Grant Frazer
Sent: Wednesday, 1 June 2005 12:31 PM
To: tech at fhc.vic.edu.au
Subject: [Technical] Proxy Group Policy dynamic removal


Hi All,
We have laptops which log on to our network and are also used by the
staff members on their home network for broadband access.  We use Groups
Policy Objects under our Active Directory to set the proxy server and
exceptions for the staff members to be able to access the internet from
our network, is there a way of automatically removing the proxy GPO when
they log off so that when the staff members log onto their laptop at
home they won't have to remove the proxy settings in their browser so
that they can access their home network?
--------------------------

Hi Grant,

There are ways of manually switching between use proxy/don't use proxy.
You can use a shortcut to a registry setting, or use a utility like IBM
Access Manager or NetSwitcher or the "click here" proxy switching
extensions for Firefox or the Maxthon shell on Internet Explorer.

But one thing you could try (I haven't) is making the notebook's local
policy use no proxy as a default (run gpedit.msc, go to User
Configuration, Windows Settings, Internet Explorer Maintenance,
Connection, Proxy Settings).

In a domain logon, that setting should be overwritten by the Group
Policy with your school proxy server, but at home, hopefully the local
policy kicks in instead.

Otherwise, some scripting at logon/logoff might be called for.

----
  At this point we are not considering the option of the staff member
logging on to the local computer as opposed to domain side of the laptop
as this has proven to be confusing for the staff.
----

That's my preferred way, too, Grant. Just one consistent domain logon,
at home or at work.

Cheers,
Clarky

TSP IT Specialist,
Surrey Hills Subnetwork


Important -
This email and any attachments may be confidential. If received in
error, please contact us and delete all copies. Before opening or using
attachments check them for viruses and defects. Regardless of any loss,
damage or consequence, whether caused by the negligence of the sender or
not, resulting directly or indirectly from the use of any attached files
our liability is limited to resupplying any affected attachments. Any
representations or opinions expressed are those of the individual
sender, and not necessarily those of the Department of Education &
Training.

_______________________________________________
http://www.edulists.com.au - FAQ, resources, subscribe, unsubscribe
Technical Mailing List kindly supported by http://www.vcaa.vic.edu.au -
Victorian Curriculum and Assessment Authority and
http://www.vitta.org.au  - VITTA Victorian Information Technology
Teachers Association Inc