Solved

How to harden IE & Firefox such that users cant uncheck the proxy

Posted on 2016-09-07
3
85 Views
Last Modified: 2016-09-11
How can above be done?  Don't want users to uncheck the proxy & then connect to
their phone's 4G or private Wifi to browse Internet without going thru our corporate
proxy (which gives a certain amount of protection) ?

Some users bring home their laptop so we don't want them to connect to their
home broadband to browse Internet but just to work offline: as there are cases
browsing the Net caused the laptop to be infected & then brought back to office
to connect to corporate network to further spread the infection (despite AV is
up to date).

Feasible to use GPO or local GPO
0
Comment
Question by:sunhux
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 5

Assisted Solution

by:Jambon316
Jambon316 earned 350 total points
ID: 41788317
if you want to enforce this domain-wide then gpo from the domain controller
0
 
LVL 5

Accepted Solution

by:
Jambon316 earned 350 total points
ID: 41788328
there's a guide here

http://thesolving.com/server-room/how-to-force-proxy-settings-via-group-policy-on-windows-server-2012/

I don't know what version of server you're using but scanning over this guide I think it'll hold true for 2008 too

if you're using 2003 then shame on you and time to upgrade
(cue flames from 2003 users lol )
0
 
LVL 41

Assisted Solution

by:Adam Brown
Adam Brown earned 150 total points
ID: 41789108
If you set proxy settings via GPO, it will grey out the option to disable the proxy in IE. You'll have to find and download some Firefox ADMX templates to get that working, and I haven't tested the capability to determine if it will prevent users from disabling proxy, but it will certainly re-enforce it after policy refresh intervals.
0

Featured Post

Does Powershell have you tied up in knots?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Had a business requirement to store the mobile number in an environmental variable. This is just a quick article on how this was done.
An introduction to the wonderful sport of Scam Baiting.  Learn how to help fight scammers by beating them at their own game. This great pass time helps the world, while providing an endless source of entertainment. Enjoy!
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…
Windows 10 is mostly good. However the one thing that annoys me is how many clicks you have to do to dial a VPN connection. You have to go to settings from the start menu, (2 clicks), Network and Internet (1 click), Click VPN (another click) then fi…

688 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question