Solved

Internet Explorer Autoconfiguration Script & Kixtart

Posted on 2001-09-17
7
4,550 Views
Last Modified: 2013-12-28
*Sorry if is not the correct topic area to post in, I can't find a specific Internet Explorer Area*

My company is rolling out some new proxy servers for each of our six offices.

I use kix to successfully enter the correct details into the relevant proxy server options under internet options by entering the following keys:-

$res=WRITEVALUE("HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings","ProxyEnable","1","REG_DWORD")
$res=WRITEVALUE("HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings","ProxyServer","PROXY SERVER NAME:8080;https=PROXY SERVER NAME:8080","REG_SZ")
$res=WRITEVALUE("HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings","ProxyHttp1.1","1","REG_DWORD")
$res=WRITEVALUE("HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings","ProxyOverride","","REG_SZ")

However we currently use an automatic configuration script for IE, which overwrites the proxy server entries.

I used the IEAK (Internet explorer administration kit) to customise IE5.5 to include the proxy server settings, then changed the proxy entries in the install.ins for each office and saved each .ins file into a new directory.

I use the following entry in kix to select which .ins file to enter into the registry according to the users current office location.

$res=WRITEVALUE("HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Internet Settings","AutoConfigURL","relevant office name\ Install.ins","REG_SZ")

This works correctly under windows 9x, but not in windows NT/2000 as each user account has its own AutoConfigURL in their SID under HKEY_USERS
i.e.

HKEY_USERS\S-1-5-21-2138838754-301012480-1928362250-1699\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\AutoConfigURL

NT/2000 uses this entry instead of the default setting (entered by Kix at logon).

Is there a way to get KIX to change all AutoConfigURL entries in the registry, or is there another way I can overcome this problem?

Many thanks for any assistance you may be able to provide

Darren
0
Comment
Question by:dlmcdermott
  • 5
  • 2
7 Comments
 
LVL 3

Expert Comment

by:gro031899
ID: 6487551
Hi dlmcdermott,
can't you identify your different offices in your login script with the ip addresses? Like that way:

In the example below I put the registry patches in a reg file.

"your" ip-ranges:
office 1: 10.101.x.x to 10.102.x.x
office 2: 10.103.x.x to 10.104.x.x
office 3: and so on.

Your loginscript:

rem office 1
if byte_two >= 101 and byte_two <= 102 then reg proxy_office1.reg /s

rem office 2
if byte_two >=103 and byte_two <= 104 then reg proxy_office2.reg /s
and so on.

(the if-statments show the way only, they must be "translated" into kix format)

hope it gives you an idea
gro
0
 
LVL 3

Accepted Solution

by:
gro031899 earned 50 total points
ID: 6487602
...our company uses the following way: All clients uses the same IE-configuration in the connection box: "use autoconfiguration". If somebody accesses the internet/intranet the autoconfig-function of IE gets from HIS (!) proxy-server a ins-file for its own configuration. Following is in the file (example):

[Proxy]
HTTP_Proxy_Server=proxy.office1.com:8080
FTP_Proxy_Server=
Gopher_Proxy_Server=
Secure_Proxy_Server=
Socks_Proxy_Server=
Use_Same_Proxy=1
Proxy_Enable=1
Proxy_Override=*.office1.*;*.company1.org;office2.*;10.101.*

That means, for each use of the IE, the IE is new configured with the actual proxy settings, because the config file is reloaded after each IE start. Big advantage: If I travel from one to another office I need not to change my configuration, because I get the ins-file from the proxy of office 2.
gro
0
 

Author Comment

by:dlmcdermott
ID: 6489933
IT was simpler to fix than I thought. I had already created a ins file for each office. All I needed to do was to add the following key

$res=WRITEVALUE("HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings","AutoConfigURL","RELEVANT OFFICE LOCATION/Install.ins","REG_SZ")

The ins file enters the correct proxy details according to the users office location.

Thanks for your posts though!

BTW Does you know if its possible to undo ALL changes/settings the IEAK kit makes to an installation?

Cheers
Darren
0
How to improve team productivity

Quip adds documents, spreadsheets, and tasklists to your Slack experience
- Elevate ideas to Quip docs
- Share Quip docs in Slack
- Get notified of changes to your docs
- Available on iOS/Android/Desktop/Web
- Online/Offline

 
LVL 3

Expert Comment

by:gro031899
ID: 6489949
Hi dlmcdermott,
I gave you the answer (auto config). This is not the right way, to ask another question in the same queue and another and so on. Usually you have to ask a new question. Thats the way in EE and thats why we like to answer the questions and to collect expert points.

But anyway: Undo ALL changes is not possible because you need the IEAK to make a installation package. Or you must more specifc define what do you exactly mean with ALL Changes. I think, it is not necessary to undo the changes due to the autoconfig tells the IE to use the settings coming from the proxy and overwrites the last IE-config settings.
gro
0
 
LVL 3

Expert Comment

by:gro031899
ID: 6489958
I understand the following with "undo all changes": you want to correct the ins-files in the installation package of the IE. In that way you must build a new IE package without the changes you made before and provide the new installation package to your clients. This is not so difficult if you use the full automatic installation of the IE without any manual input during installation.
gro
0
 

Author Comment

by:dlmcdermott
ID: 6490301
HI Gro,

Sorry didn't mean to break any rules, will stick to your advice in the. future.

What I meant by undoing all the changes I meant is there a way to get the internet settings tabs (advanced, security etc) as I had locked these using IEAK. However, after posting I found a way to get them back by adding additional keys into the registry.

These are (incase anyone else needs them)

REGEDIT4

[HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer]

[HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel]
"Advanced"=dword:00000000
"Autoconfig"=dword:00000000
"Cache"=dword:00000000
"CalendarContact"=dword:00000000
"Certificates"=dword:00000000
"Check_If_Default"=dword:00000000
"Colors"=dword:00000000
"Connection Settings"=dword:00000000
"Connection Wizard"=dword:00000000
"Fonts"=dword:00000000
"History"=dword:00000000
"HomePage"=dword:00000000
"Languages"=dword:00000000
"Links"=dword:00000000
"Messaging"=dword:00000000
"Profiles"=dword:00000000
"Proxy"=dword:00000000
"Ratings"=dword:00000000
"Wallet"=dword:00000000

[HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Restrictions]
"Accessibility"=dword:00000000
"GeneralTab"=dword:00000000
"SecurityTab"=dword:00000000
"ConnectionsTab"=dword:00000000
"ProgramsTab"=dword:00000000
"AdvancedTab"=dword:00000000
"CertifPers"=dword:00000000
"CertifSite"=dword:00000000
"Connwiz Admin Lock"=dword:00000000
"FormSuggest"=dword:00000000
"FormSuggest Passwords"=dword:00000000
"ResetWebSettings"=dword:00000000
"SecAddSites"=dword:00000000
"SecChangeSettings"=dword:00000000
"Settings"=dword:00000000
"ContentTab"=dword:00000000

OR

REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Internet Explorer]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Internet Explorer\Control Panel]
"Advanced"=dword:00000000
"Autoconfig"=dword:00000000
"Cache"=dword:00000000
"CalendarContact"=dword:00000000
"Certificates"=dword:00000000
"Check_If_Default"=dword:00000000
"Colors"=dword:00000000
"Connection Settings"=dword:00000000
"Connection Wizard"=dword:00000000
"Fonts"=dword:00000000
"History"=dword:00000000
"HomePage"=dword:00000000
"Languages"=dword:00000000
"Links"=dword:00000000
"Messaging"=dword:00000000
"Profiles"=dword:00000000
"Proxy"=dword:00000000
"Ratings"=dword:00000000
"Wallet"=dword:00000000

Cheers for your posts gro

Darren
0
 
LVL 3

Expert Comment

by:gro031899
ID: 6490314
...here is a good way to delete registry-key's and values:
http://www.ntfaq.com/Articles/Index.cfm?ArticleID=22194

and

http://www.ntfaq.com/Articles/Index.cfm?ArticleID=22187

hope thats what you are looking for.
tip: fill out your profile that other people can get some info about your knowledge

gro
thanks for the points
0

Featured Post

How to run any project with ease

Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
- Combine task lists, docs, spreadsheets, and chat in one
- View and edit from mobile/offline
- Cut down on emails

Join & Write a Comment

The use of stolen credentials is a hot commodity this year allowing threat actors to move laterally within the network in order to avoid breach detection.
Possible fixes for Windows 7 and Windows Server 2008 updating problem. Solutions mentioned are from Microsoft themselves. I started a case with them from our Microsoft Silver Partner option to open a case and get direct support from Microsoft. If s…
This Micro Tutorial will give you a basic overview of Windows DVD Burner through its features and interface. This will be demonstrated using Windows 7 operating system.
Windows 8 came with a dramatically different user interface known as Metro. Notably missing from that interface was a Start button and Start Menu. Microsoft responded to negative user feedback of the Metro interface, bringing back the Start button a…

760 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

21 Experts available now in Live!

Get 1:1 Help Now