IE Proxy Settings


We just installed the Barracuda web filter on our network, and to ensure that all users are required to logon va LDAP or NTLM methods on non-authenticated systems we had to change the Internet explorer proxy settings within a GPO. My question is, that works great while the laptops are on campus, but when the teachers take the laptops home, the IE settings are stored with those proxy settings and then none of the teachers are use their laptops away from campus. Without having them manually disable those settings ( which they can not, no access too) how can I correct this? Thanks in advance
Who is Participating?
Hisham_ElkouhaConnect With a Mentor Commented:
Use Automaticaly Detect Setting instead
you would have to put a domain controller in their home, we had to do the same thing with out travelling sales reps
ravenrx7Author Commented:
i do not think thats the only solution, in that case we would have to have VPN or 50 DCs installed in all the homes
Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

hmm, what about, setup a url to redirect back to your network, have the router pass requests from that url to the web filter?  setup all the proxy settings to the url from dynip
Use WPAD via DNS, internally
Read about PAC files and WPAD.

I explained WPAD in this thread :

Your IE will be configured to use the "auto-detect proxy settings" options
When a laptop is inside the company, the PAC file will be found
When outside,  it will fail to the default behaviour: no proxy, DIRECT access

ravenrx7Author Commented:
Guys, this should work right?
Method 2: Modify Group Policy settings
Click Start, click Run, type gpedit.msc, and then click OK.
In Group Policy Object Editor, double-click User Configuration\Administrative Templates\Windows Components\Internet Explorer.
Double-click Disable caching of Auto-Proxy scripts.
Click Enable, and then click OK.
we use the wpad currently on the network and off. You push out the wpad using GPO as you suggested. The failover is built into the wpad. There are many examples on the internet.

Example for one subnet
if (isInNet(myIpAddress(), "", ""))

This is failover. When off the network is uses direct route or default route either one. But i think you want to let IE cache the proxy script. You can control the expiration of the script in the IIS server that pushes out the wpad by setting the TTL on the object.

You will either need to use autodetect as stated above or we use "Use auto configuration script" setting in GPO. With the above failover it works anywhere.
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.