Solved

Internet Explorer Autoconfiguration Script & Kixtart

Posted on 2001-09-17
7
4,579 Views
Last Modified: 2013-12-28
*Sorry if is not the correct topic area to post in, I can't find a specific Internet Explorer Area*

My company is rolling out some new proxy servers for each of our six offices.

I use kix to successfully enter the correct details into the relevant proxy server options under internet options by entering the following keys:-

$res=WRITEVALUE("HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings","ProxyEnable","1","REG_DWORD")
$res=WRITEVALUE("HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings","ProxyServer","PROXY SERVER NAME:8080;https=PROXY SERVER NAME:8080","REG_SZ")
$res=WRITEVALUE("HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings","ProxyHttp1.1","1","REG_DWORD")
$res=WRITEVALUE("HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings","ProxyOverride","","REG_SZ")

However we currently use an automatic configuration script for IE, which overwrites the proxy server entries.

I used the IEAK (Internet explorer administration kit) to customise IE5.5 to include the proxy server settings, then changed the proxy entries in the install.ins for each office and saved each .ins file into a new directory.

I use the following entry in kix to select which .ins file to enter into the registry according to the users current office location.

$res=WRITEVALUE("HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Internet Settings","AutoConfigURL","relevant office name\ Install.ins","REG_SZ")

This works correctly under windows 9x, but not in windows NT/2000 as each user account has its own AutoConfigURL in their SID under HKEY_USERS
i.e.

HKEY_USERS\S-1-5-21-2138838754-301012480-1928362250-1699\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\AutoConfigURL

NT/2000 uses this entry instead of the default setting (entered by Kix at logon).

Is there a way to get KIX to change all AutoConfigURL entries in the registry, or is there another way I can overcome this problem?

Many thanks for any assistance you may be able to provide

Darren
0
Comment
Question by:dlmcdermott
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 5
  • 2
7 Comments
 
LVL 3

Expert Comment

by:gro031899
ID: 6487551
Hi dlmcdermott,
can't you identify your different offices in your login script with the ip addresses? Like that way:

In the example below I put the registry patches in a reg file.

"your" ip-ranges:
office 1: 10.101.x.x to 10.102.x.x
office 2: 10.103.x.x to 10.104.x.x
office 3: and so on.

Your loginscript:

rem office 1
if byte_two >= 101 and byte_two <= 102 then reg proxy_office1.reg /s

rem office 2
if byte_two >=103 and byte_two <= 104 then reg proxy_office2.reg /s
and so on.

(the if-statments show the way only, they must be "translated" into kix format)

hope it gives you an idea
gro
0
 
LVL 3

Accepted Solution

by:
gro031899 earned 50 total points
ID: 6487602
...our company uses the following way: All clients uses the same IE-configuration in the connection box: "use autoconfiguration". If somebody accesses the internet/intranet the autoconfig-function of IE gets from HIS (!) proxy-server a ins-file for its own configuration. Following is in the file (example):

[Proxy]
HTTP_Proxy_Server=proxy.office1.com:8080
FTP_Proxy_Server=
Gopher_Proxy_Server=
Secure_Proxy_Server=
Socks_Proxy_Server=
Use_Same_Proxy=1
Proxy_Enable=1
Proxy_Override=*.office1.*;*.company1.org;office2.*;10.101.*

That means, for each use of the IE, the IE is new configured with the actual proxy settings, because the config file is reloaded after each IE start. Big advantage: If I travel from one to another office I need not to change my configuration, because I get the ins-file from the proxy of office 2.
gro
0
 

Author Comment

by:dlmcdermott
ID: 6489933
IT was simpler to fix than I thought. I had already created a ins file for each office. All I needed to do was to add the following key

$res=WRITEVALUE("HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings","AutoConfigURL","RELEVANT OFFICE LOCATION/Install.ins","REG_SZ")

The ins file enters the correct proxy details according to the users office location.

Thanks for your posts though!

BTW Does you know if its possible to undo ALL changes/settings the IEAK kit makes to an installation?

Cheers
Darren
0
Manage your data center from practically anywhere

The KN8164V features HD resolution of 1920 x 1200, FIPS 140-2 with level 1 security standards and virtual media transmissions at twice the speed. Built for reliability, the KN series provides local console and remote over IP access, ensuring 24/7 availability to all servers.

 
LVL 3

Expert Comment

by:gro031899
ID: 6489949
Hi dlmcdermott,
I gave you the answer (auto config). This is not the right way, to ask another question in the same queue and another and so on. Usually you have to ask a new question. Thats the way in EE and thats why we like to answer the questions and to collect expert points.

But anyway: Undo ALL changes is not possible because you need the IEAK to make a installation package. Or you must more specifc define what do you exactly mean with ALL Changes. I think, it is not necessary to undo the changes due to the autoconfig tells the IE to use the settings coming from the proxy and overwrites the last IE-config settings.
gro
0
 
LVL 3

Expert Comment

by:gro031899
ID: 6489958
I understand the following with "undo all changes": you want to correct the ins-files in the installation package of the IE. In that way you must build a new IE package without the changes you made before and provide the new installation package to your clients. This is not so difficult if you use the full automatic installation of the IE without any manual input during installation.
gro
0
 

Author Comment

by:dlmcdermott
ID: 6490301
HI Gro,

Sorry didn't mean to break any rules, will stick to your advice in the. future.

What I meant by undoing all the changes I meant is there a way to get the internet settings tabs (advanced, security etc) as I had locked these using IEAK. However, after posting I found a way to get them back by adding additional keys into the registry.

These are (incase anyone else needs them)

REGEDIT4

[HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer]

[HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel]
"Advanced"=dword:00000000
"Autoconfig"=dword:00000000
"Cache"=dword:00000000
"CalendarContact"=dword:00000000
"Certificates"=dword:00000000
"Check_If_Default"=dword:00000000
"Colors"=dword:00000000
"Connection Settings"=dword:00000000
"Connection Wizard"=dword:00000000
"Fonts"=dword:00000000
"History"=dword:00000000
"HomePage"=dword:00000000
"Languages"=dword:00000000
"Links"=dword:00000000
"Messaging"=dword:00000000
"Profiles"=dword:00000000
"Proxy"=dword:00000000
"Ratings"=dword:00000000
"Wallet"=dword:00000000

[HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Restrictions]
"Accessibility"=dword:00000000
"GeneralTab"=dword:00000000
"SecurityTab"=dword:00000000
"ConnectionsTab"=dword:00000000
"ProgramsTab"=dword:00000000
"AdvancedTab"=dword:00000000
"CertifPers"=dword:00000000
"CertifSite"=dword:00000000
"Connwiz Admin Lock"=dword:00000000
"FormSuggest"=dword:00000000
"FormSuggest Passwords"=dword:00000000
"ResetWebSettings"=dword:00000000
"SecAddSites"=dword:00000000
"SecChangeSettings"=dword:00000000
"Settings"=dword:00000000
"ContentTab"=dword:00000000

OR

REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Internet Explorer]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Internet Explorer\Control Panel]
"Advanced"=dword:00000000
"Autoconfig"=dword:00000000
"Cache"=dword:00000000
"CalendarContact"=dword:00000000
"Certificates"=dword:00000000
"Check_If_Default"=dword:00000000
"Colors"=dword:00000000
"Connection Settings"=dword:00000000
"Connection Wizard"=dword:00000000
"Fonts"=dword:00000000
"History"=dword:00000000
"HomePage"=dword:00000000
"Languages"=dword:00000000
"Links"=dword:00000000
"Messaging"=dword:00000000
"Profiles"=dword:00000000
"Proxy"=dword:00000000
"Ratings"=dword:00000000
"Wallet"=dword:00000000

Cheers for your posts gro

Darren
0
 
LVL 3

Expert Comment

by:gro031899
ID: 6490314
...here is a good way to delete registry-key's and values:
http://www.ntfaq.com/Articles/Index.cfm?ArticleID=22194

and

http://www.ntfaq.com/Articles/Index.cfm?ArticleID=22187

hope thats what you are looking for.
tip: fill out your profile that other people can get some info about your knowledge

gro
thanks for the points
0

Featured Post

Secure Your Active Directory - April 20, 2017

Active Directory plays a critical role in your company’s IT infrastructure and keeping it secure in today’s hacker-infested world is a must.
Microsoft published 300+ pages of guidance, but who has the time, money, and resources to implement? Register now to find an easier way.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

If you need to start windows update installation remotely or as a scheduled task you will find this very helpful.
An article on effective troubleshooting
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…
Windows 10 is mostly good. However the one thing that annoys me is how many clicks you have to do to dial a VPN connection. You have to go to settings from the start menu, (2 clicks), Network and Internet (1 click), Click VPN (another click) then fi…

763 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question