| Author | Messages | |
JFinkbiner
Posts:11
 | | 09/01/2010 4:37 PM |
| I recently changed some proxy settings as we have updated our ISA
server. I was curious to know how others are protecting their end users
from changing proxy settings. I currently have a 2003 native domain and
all computers are running XPSP2 with IE7 or better. It seems that the
user defined proxy settings overwrite the GPO assigned proxy settings
until the user reboots the machine.
Jonathan Finkbiner <mailto:xxxxxxxxxxxxxxxx>
System Engineer
Information Services
Lifestyle Family Fitness <http://www.lff.com/>
| | | |
| JamieNelson
Posts:166
| | 09/01/2010 4:42 PM |
| You should be able to enforce per-machine proxy settings if you don't want user to be able to override them in any way.
Jamie Nelson | Sr. Administrator | BI&T Infrastructure-Intel | Devon Energy Corporation | Work: ' 405.552.8054 | Mobile: ' 405.248.7963 | http://www.dvn.com<http://www.dvn.com/>
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On Behalf Of Jonathan Finkbiner
Sent: Wednesday, September 01, 2010 9:43 AM
To: xxxxxxxxxxxxxxxx
Subject: [gptalk] IE Maintenance - Proxy Settings
I recently changed some proxy settings as we have updated our ISA server. I was curious to know how others are protecting their end users from changing proxy settings. I currently have a 2003 native domain and all computers are running XPSP2 with IE7 or better. It seems that the user defined proxy settings overwrite the GPO assigned proxy settings until the user reboots the machine.
Jonathan Finkbiner <mailto:xxxxxxxxxxxxxxxx>
System Engineer
Information Services
Lifestyle Family Fitness<http://www.lff.com/>
Confidentiality Warning: This message and any attachments are intended only for the use of the intended recipient(s), are confidential, and may be privileged.
If you are not the intended recipient, you are hereby notified that any review, retransmission, conversion to hard copy, copying, circulation or other use of all or any portion of this message and any attachments is strictly prohibited. If you are not the intended recipient, please notify the sender immediately by return e-mail, and delete this message and any attachments from your system.
| | | |
| WellingonIS
Posts:14
| | 09/01/2010 4:42 PM |
| GPO for the proxy setting.. User Configuration Internet Explorer Maintenance
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On Behalf Of Jonathan Finkbiner
Sent: Wednesday, September 01, 2010 10:43 AM
To: xxxxxxxxxxxxxxxx
Subject: [gptalk] IE Maintenance - Proxy Settings
I recently changed some proxy settings as we have updated our ISA server. I was curious to know how others are protecting their end users from changing proxy settings. I currently have a 2003 native domain and all computers are running XPSP2 with IE7 or better. It seems that the user defined proxy settings overwrite the GPO assigned proxy settings until the user reboots the machine.
Jonathan Finkbiner <mailto:xxxxxxxxxxxxxxxx>
System Engineer
Information Services
Lifestyle Family Fitness<http://www.lff.com/>
UHS Confidentiality Notice: This e-mail message, including any attachments, is for the sole use of the intended recipient (s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution of this information is prohibited. If this was sent to you in error, please notify the sender by reply e-mail and destroy all copies of the original message.
| | | |
| alanhutchinson
Posts:15
| | 09/01/2010 6:12 PM |
| How about :
Windows Components - Internet Explorer - Internet Control Panel -
Disable the Connections Page
This will remove the connections tab.
Regards,
Alan.
________________________________
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Jonathan Finkbiner
Sent: 01 September 2010 15:43
To: xxxxxxxxxxxxxxxx
Subject: [gptalk] IE Maintenance - Proxy Settings
I recently changed some proxy settings as we have updated our ISA
server. I was curious to know how others are protecting their end users
from changing proxy settings. I currently have a 2003 native domain and
all computers are running XPSP2 with IE7 or better. It seems that the
user defined proxy settings overwrite the GPO assigned proxy settings
until the user reboots the machine.
Jonathan Finkbiner <mailto:xxxxxxxxxxxxxxxx>
System Engineer
Information Services
Lifestyle Family Fitness <http://www.lff.com/>
| | | |
| WellingonIS
Posts:14
| | 09/01/2010 6:14 PM |
| That's good but if you have a bunch of machines that's going to be much running around.
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On Behalf Of Hutchinson, Alan
Sent: Wednesday, September 01, 2010 12:12 PM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] IE Maintenance - Proxy Settings
How about :
Windows Components - Internet Explorer - Internet Control Panel - Disable the Connections Page
This will remove the connections tab.
Regards,
Alan.
________________________________
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On Behalf Of Jonathan Finkbiner
Sent: 01 September 2010 15:43
To: xxxxxxxxxxxxxxxx
Subject: [gptalk] IE Maintenance - Proxy Settings
I recently changed some proxy settings as we have updated our ISA server. I was curious to know how others are protecting their end users from changing proxy settings. I currently have a 2003 native domain and all computers are running XPSP2 with IE7 or better. It seems that the user defined proxy settings overwrite the GPO assigned proxy settings until the user reboots the machine.
Jonathan Finkbiner <mailto:xxxxxxxxxxxxxxxx>
System Engineer
Information Services
Lifestyle Family Fitness<http://www.lff.com/>
UHS Confidentiality Notice: This e-mail message, including any attachments, is for the sole use of the intended recipient (s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution of this information is prohibited. If this was sent to you in error, please notify the sender by reply e-mail and destroy all copies of the original message.
| | | |
| alanhutchinson
Posts:15
| | 09/01/2010 6:21 PM |
| Ilene,
I'm not sure what you mean by much running around I'm afraid.
REgards,
Alan.
________________________________
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Rosner, Ilene
Sent: 01 September 2010 17:16
To: 'xxxxxxxxxxxxxxxx'
Subject: RE: [gptalk] IE Maintenance - Proxy Settings
That's good but if you have a bunch of machines that's going to be much
running around.
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Hutchinson, Alan
Sent: Wednesday, September 01, 2010 12:12 PM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] IE Maintenance - Proxy Settings
How about :
Windows Components - Internet Explorer - Internet Control Panel -
Disable the Connections Page
This will remove the connections tab.
Regards,
Alan.
________________________________
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Jonathan Finkbiner
Sent: 01 September 2010 15:43
To: xxxxxxxxxxxxxxxx
Subject: [gptalk] IE Maintenance - Proxy Settings
I recently changed some proxy settings as we have updated our ISA
server. I was curious to know how others are protecting their end users
from changing proxy settings. I currently have a 2003 native domain and
all computers are running XPSP2 with IE7 or better. It seems that the
user defined proxy settings overwrite the GPO assigned proxy settings
until the user reboots the machine.
Jonathan Finkbiner <mailto:xxxxxxxxxxxxxxxx>
System Engineer
Information Services
Lifestyle Family Fitness <http://www.lff.com/>
UHS Confidentiality Notice: This e-mail message, including any
attachments, is for the sole use of the intended recipient(s) and may
contain confidential and privileged information. Any unauthorized
review, use, disclosure or distribution of this information is
prohibited, and may be punishable by law. If this was sent to you in
error, please notify the sender by reply e-mail and destroy all copies
of the original message.
| | | |
| omar
Posts:75
| | 09/01/2010 6:29 PM |
| Be Afraid- Be very Afraid!
If you don't want them to change proxy settings you need to think about involving the networking group.
Considering controlling Web and Internet access at the network level with a firewall- so if they change their proxy settings- No Internet access. This will keep users from making changes.
For a lot of IE management- I prefer user logon scripts/computer startup scripts.
My preference is to set the valued but give the users the ability to change if necessary. The IE management with GPO has always proven to me at least to require review/refresh on how it really works and what the results will be with different scenarios. I hate to do a project when it can just be a task. With the logon/startup script- if things are not right- ask the user to logoff/logon or reboot the PC.
My 2 cents.
Omar Droubi
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On Behalf Of Hutchinson, Alan
Sent: Wednesday, September 01, 2010 9:23 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] IE Maintenance - Proxy Settings
Ilene,
I'm not sure what you mean by much running around I'm afraid.
REgards,
Alan.
________________________________
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On Behalf Of Rosner, Ilene
Sent: 01 September 2010 17:16
To: 'xxxxxxxxxxxxxxxx'
Subject: RE: [gptalk] IE Maintenance - Proxy Settings
That's good but if you have a bunch of machines that's going to be much running around.
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On Behalf Of Hutchinson, Alan
Sent: Wednesday, September 01, 2010 12:12 PM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] IE Maintenance - Proxy Settings
How about :
Windows Components - Internet Explorer - Internet Control Panel - Disable the Connections Page
This will remove the connections tab.
Regards,
Alan.
________________________________
From: xxxxxxxxxxxxxxxx [mailto:xxxxxxxxxxxxxxxx] On Behalf Of Jonathan Finkbiner
Sent: 01 September 2010 15:43
To: xxxxxxxxxxxxxxxx
Subject: [gptalk] IE Maintenance - Proxy Settings
I recently changed some proxy settings as we have updated our ISA server. I was curious to know how others are protecting their end users from changing proxy settings. I currently have a 2003 native domain and all computers are running XPSP2 with IE7 or better. It seems that the user defined proxy settings overwrite the GPO assigned proxy settings until the user reboots the machine.
Jonathan Finkbiner <mailto:xxxxxxxxxxxxxxxx>
System Engineer
Information Services
Lifestyle Family Fitness<http://www.lff.com/>
UHS Confidentiality Notice: This e-mail message, including any attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution of this information is prohibited, and may be punishable by law. If this was sent to you in error, please notify the sender by reply e-mail and destroy all copies of the original message.
| | | |
| JFinkbiner
Posts:11
| | 09/03/2010 2:35 PM |
| Thanks for the input everyone. I was wondering what you meant by
"enforce per-machine proxy settings" Jamie. Does that effectively remove
the ability for the user to type in their own proxy settings.
The problem that I am trying to circumvent is that initially when a user
logs in, the proxy settings are correct but they still have an option to
alter the settings. Now, as mentioned by Omar I should talk to the
networking group, and after having a long drawn out conversation with
myself :-) I found out that if the proxy setting are manipulated
internet access is denied by a 3rd party web filtering application
(Websense).
Jonathan Finkbiner
________________________________
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Omar Droubi
Sent: Wednesday, September 01, 2010 12:45 PM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] IE Maintenance - Proxy Settings
Be Afraid- Be very Afraid!
If you don't want them to change proxy settings you need to think about
involving the networking group.
Considering controlling Web and Internet access at the network level
with a firewall- so if they change their proxy settings- No Internet
access. This will keep users from making changes.
For a lot of IE management- I prefer user logon scripts/computer startup
scripts.
My preference is to set the valued but give the users the ability to
change if necessary. The IE management with GPO has always proven to me
at least to require review/refresh on how it really works and what the
results will be with different scenarios. I hate to do a project when it
can just be a task. With the logon/startup script- if things are not
right- ask the user to logoff/logon or reboot the PC.
My 2 cents.
Omar Droubi
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Hutchinson, Alan
Sent: Wednesday, September 01, 2010 9:23 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] IE Maintenance - Proxy Settings
Ilene,
I'm not sure what you mean by much running around I'm afraid.
REgards,
Alan.
________________________________
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Rosner, Ilene
Sent: 01 September 2010 17:16
To: 'xxxxxxxxxxxxxxxx'
Subject: RE: [gptalk] IE Maintenance - Proxy Settings
That's good but if you have a bunch of machines that's going to be much
running around.
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Hutchinson, Alan
Sent: Wednesday, September 01, 2010 12:12 PM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] IE Maintenance - Proxy Settings
How about :
Windows Components - Internet Explorer - Internet Control Panel -
Disable the Connections Page
This will remove the connections tab.
Regards,
Alan.
________________________________
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Jonathan Finkbiner
Sent: 01 September 2010 15:43
To: xxxxxxxxxxxxxxxx
Subject: [gptalk] IE Maintenance - Proxy Settings
I recently changed some proxy settings as we have updated our ISA
server. I was curious to know how others are protecting their end users
from changing proxy settings. I currently have a 2003 native domain and
all computers are running XPSP2 with IE7 or better. It seems that the
user defined proxy settings overwrite the GPO assigned proxy settings
until the user reboots the machine.
Jonathan Finkbiner <mailto:xxxxxxxxxxxxxxxx>
System Engineer
Information Services
Lifestyle Family Fitness <http://www.lff.com/>
UHS Confidentiality Notice: This e-mail message, including any
attachments, is for the sole use of the intended recipient(s) and may
contain confidential and privileged information. Any unauthorized
review, use, disclosure or distribution of this information is
prohibited, and may be punishable by law. If this was sent to you in
error, please notify the sender by reply e-mail and destroy all copies
of the original message.
| | | |
| alanhutchinson
Posts:15
| | 09/03/2010 3:03 PM |
| I probably didn't make it very clear in my earlier post - you can hide
the connections tab in internet options by setting the policy I outlined
below. Probably won't stop them changing it by editing the registry
though ....
Regards,
Alan.
________________________________
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Jonathan Finkbiner
Sent: 03 September 2010 13:15
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] IE Maintenance - Proxy Settings
Thanks for the input everyone. I was wondering what you meant by
"enforce per-machine proxy settings" Jamie. Does that effectively remove
the ability for the user to type in their own proxy settings.
The problem that I am trying to circumvent is that initially when a user
logs in, the proxy settings are correct but they still have an option to
alter the settings. Now, as mentioned by Omar I should talk to the
networking group, and after having a long drawn out conversation with
myself :-) I found out that if the proxy setting are manipulated
internet access is denied by a 3rd party web filtering application
(Websense).
Jonathan Finkbiner
________________________________
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Omar Droubi
Sent: Wednesday, September 01, 2010 12:45 PM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] IE Maintenance - Proxy Settings
Be Afraid- Be very Afraid!
If you don't want them to change proxy settings you need to think about
involving the networking group.
Considering controlling Web and Internet access at the network level
with a firewall- so if they change their proxy settings- No Internet
access. This will keep users from making changes.
For a lot of IE management- I prefer user logon scripts/computer startup
scripts.
My preference is to set the valued but give the users the ability to
change if necessary. The IE management with GPO has always proven to me
at least to require review/refresh on how it really works and what the
results will be with different scenarios. I hate to do a project when it
can just be a task. With the logon/startup script- if things are not
right- ask the user to logoff/logon or reboot the PC.
My 2 cents.
Omar Droubi
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Hutchinson, Alan
Sent: Wednesday, September 01, 2010 9:23 AM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] IE Maintenance - Proxy Settings
Ilene,
I'm not sure what you mean by much running around I'm afraid.
REgards,
Alan.
________________________________
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Rosner, Ilene
Sent: 01 September 2010 17:16
To: 'xxxxxxxxxxxxxxxx'
Subject: RE: [gptalk] IE Maintenance - Proxy Settings
That's good but if you have a bunch of machines that's going to be much
running around.
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Hutchinson, Alan
Sent: Wednesday, September 01, 2010 12:12 PM
To: xxxxxxxxxxxxxxxx
Subject: RE: [gptalk] IE Maintenance - Proxy Settings
How about :
Windows Components - Internet Explorer - Internet Control Panel -
Disable the Connections Page
This will remove the connections tab.
Regards,
Alan.
________________________________
From: xxxxxxxxxxxxxxxx
[mailto:xxxxxxxxxxxxxxxx] On Behalf Of Jonathan Finkbiner
Sent: 01 September 2010 15:43
To: xxxxxxxxxxxxxxxx
Subject: [gptalk] IE Maintenance - Proxy Settings
I recently changed some proxy settings as we have updated our ISA
server. I was curious to know how others are protecting their end users
from changing proxy settings. I currently have a 2003 native domain and
all computers are running XPSP2 with IE7 or better. It seems that the
user defined proxy settings overwrite the GPO assigned proxy settings
until the user reboots the machine.
Jonathan Finkbiner <mailto:xxxxxxxxxxxxxxxx>
System Engineer
Information Services
Lifestyle Family Fitness <http://www.lff.com/>
UHS Confidentiality Notice: This e-mail message, including any
attachments, is for the sole use of the intended recipient(s) and may
contain confidential and privileged information. Any unauthorized
review, use, disclosure or distribution of this information is
prohibited, and may be punishable by law. If this was sent to you in
error, please notify the sender by reply e-mail and destroy all copies
of the original message.
| | | |
|
|