Using GPP to apply user-based Internet Settings that can be targeted.
Old settings are top two boxes unchecked, then direct proxy is filled in with bypass for local checked and lots of various defined bypass settings. Over the years, it's a pain as staff have to toggle proxy off when they take devices like laptops home, as well as modify multiple policies when adding a new bypass setting. Now since we've added Chrome policies, it doesn't play well as they can't toggle it off (unless we set it so it can be changed, then the kids take it off on purpose and complain it doesn't work to get out of classwork). When kids start going 1 to 1 in the next few years (that's edu speak for kids get a computer/device assigned to them that they will carry throughout high school & take home) it has to be fixed. The Youtube need is pushing the change now. [cid:[email protected]] New settings, still applied via GPP. Uncheck automatic config, but then check and fill in the url for the script file. Remove all the other manual settings as they are now defined in the .pac.. The .pac is published to be accessible both internal & external. Chrome can also be pointed to this file & doesn't have to be toggled/changed when offsite. [cid:[email protected]] To be clear, the design of our proxy setup is handled by our network administrator, so my part is in implementing/deploying to machines, testing, and making sure things still work. Nothing is allowed "straight out the door" by default (there are special cases of course), so must go through proxy or doesn't get anywhere. We need two separate sets of settings for one DNS domain, so wpad publishing just isn't the best option for us. Doing it this way removes the need to toggle IE proxy settings (which kids won't have access to), allows for our split youtube access (staff have full access, students get a staff-defined whitelist only by proxying through another system), and Chrome will also just work. The only thing (that I haven't mentioned yet) that we still have trouble with is the Apple Itunes store not working-if you google/bing that, pretty much everyone has this issue trying to use a proxy.pac and lots of requests into Apple to add proxy settings in Itunes. We have a very limited installation base just for music teachers that need it, and our network admin is making some filtering exceptions for those systems to keep them working. -----Original Message----- From: [email protected] [mailto:[email protected]] On Behalf Of Joseph L. Casale Sent: Tuesday, April 21, 2015 4:57 PM To: [email protected] Subject: Re: [NTSysADM] RE: Java and proxy.pac > Our network admin had two more ideas, one was to just rename the file > to wpad.dat--that didn't work; the other was to also check the box for > automatic configuration, which I tested today, and it also didn't work (and > we don't have wpad published). So how do you assign the proxy configuration to your clients in *your* environment? > Go to 8.x and point to the "real" proxy.pac file (with lots of spaces and > CRs), it works flawlessly. Javascript is not Python, it doesn't care about that and hence it worked regardless. jlc
