• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1518
  • Last Modified:

How can I use a proxy.pac file to configure the proxy address based upon user login

We currently use our proxy.pac file to specify the appropriate local web proxy address based upon the destination url. What we now need to do is specify the proxy address based upon an Active Directory security group of the logged in user. Our current PAC file is included below. Is there a way that I can also add a user login dependancy? e.g. If the user belongs to the AD group "Staff" then we need them to go to one proxy address however if they belong to the AD group "Student" then they need to use a different proxy address.
-----
function FindProxyForURL(url, host)
{
      var Use_Proxy = "PROXY 10.0.128.216:8002";
      var Bypass_Proxy = "DIRECT";

  if  (
       isInNet(host, "10.0.0.0", "255.255.0.0") ||
       isInNet(host, "192.168.0.0", "255.255.0.0") ||
       isInNet(host, "10.101.0.0", "255.255.0.0") ||
       isInNet(host, "10.102.0.0", "255.255.0.0") ||
       isInNet(host, "10.103.0.0", "255.255.0.0") ||
       isInNet(host, "10.104.0.0", "255.255.0.0") ||
       isInNet(host, "172.17.0.0", "255.255.0.0") ||
       isInNet(host, "10.201.0.0", "255.255.0.0")
      )
    return Bypass_Proxy;
  else if (
           dnsDomainIs(host, "127.0.0.1")
          )  
    return Bypass_Proxy;
  else if (
           isPlainHostName(host) ||
           dnsDomainIs(host, ".benendensch.local") ||
           dnsDomainIs(host, ".benendenschool.net") ||
           dnsDomainIs(host, ".benendenschooltrust.net") ||
           dnsDomainIs(host, ".benenden.kent.sch.uk")
          )
    return Bypass_Proxy;
  else
    return Use_Proxy;
}
-----

Thanks

Wade
0
WadeNash
Asked:
WadeNash
  • 2
1 Solution
 
tegmine_itCommented:
You can create a GPO with security filtering, that will only apply for users that are member of a security group. Within that GPO you can configure a pac file under IE settings. For each purpose you'll need to create a pac file that is accessible for the users.
Info on security filtering:
http://technet.microsoft.com/en-us/library/cc781988(WS.10).aspx 
 
0
 
WadeNashAuthor Commented:
Thanks for your response teqmine. We have already investigated this route but have not managed to get it to work reliably. We are now taking a different approach regarding our proxy filtering which will do away with the need for the proxy.pac file completely.
0
 
WadeNashAuthor Commented:
In a perfect environment this may work well however we found it very hit and miss. We have now decided to approach the problem from a different angle by changing the way we proxy and filter our Internet connection.
0

Featured Post

Automating Your MSP Business

The road to profitability.
Delivering superior services is key to ensuring customer satisfaction and the consequent long-term relationships that enable MSPs to lock in predictable, recurring revenue. What's the best way to deliver superior service? One word: automation.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now