Solved

How to harden IE & Firefox such that users cant uncheck the proxy

Posted on 2016-09-07
3
73 Views
Last Modified: 2016-09-11
How can above be done?  Don't want users to uncheck the proxy & then connect to
their phone's 4G or private Wifi to browse Internet without going thru our corporate
proxy (which gives a certain amount of protection) ?

Some users bring home their laptop so we don't want them to connect to their
home broadband to browse Internet but just to work offline: as there are cases
browsing the Net caused the laptop to be infected & then brought back to office
to connect to corporate network to further spread the infection (despite AV is
up to date).

Feasible to use GPO or local GPO
0
Comment
Question by:sunhux
  • 2
3 Comments
 
LVL 5

Assisted Solution

by:Jambon316
Jambon316 earned 350 total points
ID: 41788317
if you want to enforce this domain-wide then gpo from the domain controller
0
 
LVL 5

Accepted Solution

by:
Jambon316 earned 350 total points
ID: 41788328
there's a guide here

http://thesolving.com/server-room/how-to-force-proxy-settings-via-group-policy-on-windows-server-2012/

I don't know what version of server you're using but scanning over this guide I think it'll hold true for 2008 too

if you're using 2003 then shame on you and time to upgrade
(cue flames from 2003 users lol )
0
 
LVL 39

Assisted Solution

by:Adam Brown
Adam Brown earned 150 total points
ID: 41789108
If you set proxy settings via GPO, it will grey out the option to disable the proxy in IE. You'll have to find and download some Firefox ADMX templates to get that working, and I haven't tested the capability to determine if it will prevent users from disabling proxy, but it will certainly re-enforce it after policy refresh intervals.
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Is your Office 365 signature not working the way you want it to? Are signature updates taking up too much of your time? Let's run through the most common problems that an IT administrator can encounter when dealing with Office 365 email signatures.
This article outlines the process to identify and resolve account lockout in an Active Directory environment.
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …
The viewer will learn how to successfully create a multiboot device using the SARDU utility on Windows 7. Start the SARDU utility: Change the image directory to wherever you store your ISOs, this will prevent you from having 2 copies of an ISO wit…

856 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question