Browser Settings

[Paul]

I am wondering what happens if a user simply changes his browser settings back to not using a proxy. Will he simply be able to get access to the net via the gateway as he did before we installed CyBlock ?

How can i stop him from changing his browser proxy setting ?

Thanks,

Paul.

[Wavecrest Support]

If the individual user changes his browser setting, he would simply be utilizing the gateway for his internet activity. However there is an option in a Windows Domain enviroment for you to disable this ability.

Please see the following link for a description of how this is accomplished:

http://www.winnetmag.com/WindowsSecurit ... 21282.html

[Wavecrest Support]

There is also another method that should allow you to disable changes to Proxy settings (Tools-->Internet options-->Connections-->Lan Settings) in IE:

Open your registry (regedit) and find the key below.

User Key: [HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel]

Create a new DWORD value (call it Proxy) and set the new value to equal "1" to enable the restriction or "0" to disable the restriction.

Restart Internet Explorer for the changes to take effect.

[Wavecrest Support]

Instead of doing a direct registry change, you can do the following on your windows 2000/XP machine:

Use GPEDIT.MSC (Go to Start, Run, and enter GPEDIT.MSC).
Open 'User Configuration-Administrative Templates-Windows Components-Internet Explorer. There are multiple numbers of policies that can be set. Of course to set policies for entire domains or OUs , you would need to do this at your Active Directory server thru GPO's.

To disable the ability to change proxy settings, use:
'User Configuration-Administrative Templates-Windows Components-Internet Explorer--Disable using proxy settings.

To set the proxy configuration, use:
'User Configuration-Windows Setting-Internet Explorer Maintenance-Connections---Proxy Settings'

To set all users who log on to computer, use:
'Computer Configuration-Administrative Templates-Windows Components-Internet Explorer---Make proxy settings per machine (Rather then per user)'

[pslis]

Expanding on the GPEDIT.MSC method described above, for Windows XP:

To disable the ability to change proxy settings, use:
'User Configuration-Administrative Templates-Windows Components-Internet Explorer-Internet Control Panel (folder)-Disable the Connections page--Enable.

Tested this today, worked. User will not even SEE 'Connections' panel.