AFAIK - wpad.dat files are the same as proxy.pac files. You set a DHCP option (or create a DNS wpad host name) to tell the clients which host they can request the wpad.dat file from. But the actual contents of a wpad.dat file are the same as proxy.pac files: http://en.wikipedia.org/wiki/Web_Proxy_Autodiscovery_Protocol. I would suggest that this is the best way forward for your situation, as it's the lowest maintenance.
For the GPO method - you could either: a) Apply the shutdown script to all users - since that's how they are getting the settings. Users that have desktops would just get the setting again when they next start up the machine b) Use a GPO that is scoped to the machines in question (e.g. use an OU for laptops or a security group containing laptop computer objects to filter the GPO), and use the loopback policy processing option (but I don't really recommend this - it can become a maintenance nightmare) Cheers Ken From: Greg Mulholland [mailto:[EMAIL PROTECTED] Sent: Thursday, 17 April 2008 5:41 PM To: NT System Admin Issues Subject: RE: Shutdown script It would be my choice, if it were my network to run wpad across the whole site(s) however it aint. Until i speak to the Manager here (who isnt in yet!) i wont be able to make any decisions on that, only to say that he has expressed a need read:want to keep the status quo. i thought wpad wasnt independent. that might be an option to create a gpo that publishes wpad info via dhcp to all laptops in a particular OU. can you generate your own wpad.dat? i know how to do is in ISA and beleeiiieve mne that would be my preference if it was my baby but it snot!. top level user gpo applys the IE settings to all users. ________________________________ From: Ken Schaefer [EMAIL PROTECTED] Sent: Friday, 18 April 2008 10:21 AM To: NT System Admin Issues Subject: RE: Shutdown script OK - still a bit unsure what's going on here; a) WPAD is proxy independent as far as I know. You could use either DNS or DHCP to specify the proxy info location. Is there some reason you can't do that? b) WRT to OUs/GPOs - how are you getting the settings out at the moment? (and there doesn't need to be more OUs - security group filtering may suffice) Cheers Ken From: Greg Mulholland [mailto:[EMAIL PROTECTED] Sent: Thursday, 17 April 2008 5:11 PM To: NT System Admin Issues Subject: RE: Shutdown script Thanks for the response Ken a) Im working in an environment that uses a linux proxy of sorts and is fixed on using gpo to publish the proxy settings b) the way the OU structure is setup it splits users and computers into separate OU's. Even if i could add an additional sub OU to the users OU these people still have workstations so the policy would apply to them as well in that case, hence it has to be workstation based. I have tried to use HKU proxy settings and i have had no real joy with that either. ________________________________ From: Ken Schaefer [EMAIL PROTECTED] Sent: Friday, 18 April 2008 10:03 AM To: NT System Admin Issues Subject: RE: Shutdown script Couple of quick questions a) Why can't you use WPAD or similar? b) What do you mean "OU structure doesnt allow for a user/logoff script instead of shutdown"? Are you doing the settings on a machine or user basis at the moment? Cheers Ken From: Greg Mulholland [mailto:[EMAIL PROTECTED] Sent: Thursday, 17 April 2008 2:33 PM To: NT System Admin Issues Subject: Shutdown script Having an issue with the below scenario and i think i need to come at it from a different angle but need some more eyes/brains. I think the issue is to do with as the machine is in shutdown mode when the script runs the reg cannot be written to. any ideas on a different way of doing this? You can schedule tasks at startup and logon but not at shutdown or logoff. Situation presents itself as follows: Users who carry laptops get proxy settings assigned via gpo. When the users logoff and go home they logon to a cached copy of their profile. Hence we need a script to kill their IE proxy settings at shutdown. So what i have done is create the script which toggle the proxy enable regkey, add it to a shutdown script gpo for the OU the laptops all reside in and whacko. Running the script manually works a treat however running the script automatically at shutdown doesn't. If i turn on 'show shutdown scripts as visible" in gp a dialog box pops up which my eyes cant read. I have tried to photo it but i need to blow it up more than the phone will allow. A few things: wpad cannot be used i can created a proxy.pac file which i could push to with gp however this is a per user setting not a workstation setting which is what i require. laptop users also do have pc's which they work from so we cant apply this policy on a user base nothing of any sort in the event logs there is a requirement that this process be totally transparent to the user user access level has no bearing on the outcome. OU structure doesnt allow for a user/logoff script instead of shutdown local profiles on the laptop cannot be used on the laptop at home, must be cached domain profile Thanks Greg ~ Upgrade to Next Generation Antispam/Antivirus with Ninja! ~ ~ <http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm> ~
