RE: GPO that forces users to use a proxy server.

JGrimshaw_at_ASAP.com
Date: 10/29/04

  • Next message: Sarbjit Singh Gill: "RE: GPO that forces users to use a proxy server." 
    To: "Michael Silk" <michaels@phg.com.au>
Date: Fri, 29 Oct 2004 12:48:46 -0500

    I have to agree with Michael--end users should not be connecting to end
    user networks with company equipment, unless they are VPNing in from that
    equipment.

    Without that, you open up hosts of problems--otherwise, the protection on
    their laptop is as good as the laptop image and their home network
    security.

    With the VPN set up, with split-tunnelling disabled, you force the users
    to go through you to go onto the Internet. This is probably a good thing,
    as I would think home networks are not proxied and filtered. By forcing
    them to go through you, you have a better chance of having already
    filtered out some questionable sites or port connections.

    "Michael Silk" <michaels@phg.com.au>
    10/28/2004 06:51 PM

    To
    "Ryan Parrish" <RyanP@foxracing.com>, <focus-ms@securityfocus.com>
    cc

    Subject
    RE: GPO that forces users to use a proxy server.

    Hi,

                     If you could; how would you ensure the time on there
    computer was valid ? You could setup a timeserver and force their computer
    to use that through GPO (I assume) but that means the time server would
    need to be available outside your intranet ... Surely it would be easier
    to allow the proxy server to be contactable from their home (even via a
    VPN of some sort ... ?) because after all, it's a work computer and surely
    the same rules apply for what they can browse on it no matter where they
    are or what time it is.

    -- Michael
     

    -----Original Message-----
    From: Ryan Parrish [mailto:RyanP@foxracing.com]
    Sent: Friday, 29 October 2004 5:28 AM
    To: focus-ms@securityfocus.com
    Subject: GPO that forces users to use a proxy server.

    We are trying to implement a GPO that forces all users/computers to use a
    proxy sever for there internet access in the company, but have hit a snag.
     We have lots of laptop users that we found during testing when they take
    there laptops home they can access the internet using there own ISP since
    we set the policy to use a proxy server that is not available to the
    outside internet, thus they get no internet access.
    Has anybody dealt with this kind of situation before? Is there a way to
    set a GPO to only be active during business hours?

    _-`-_-`-_-`-_-`-_-`-_-`-_-`-_-`-_-`-_

    Ryan Parrish
    ryanp@foxracing.com
    IT Dept.
    408-776-8633 extension 1229
    Please direct all support questions to - (¯`·.¸¸.->
    itsupport@foxracing.com

    _-`-_-`-_-`-_-`-_-`-_-`-_-`-_-`-_-`-_

    ---------------------------------------------------------------------------
    ---------------------------------------------------------------------------

    **********************************************************************
    This email message and accompanying data may contain information that is
    confidential and/or subject to legal privilege. If you are not the
    intended recipient, you are notified that any use, dissemination,
    distribution or copying of this message or data is prohibited. If you have
    received this email message in error, please notify us immediately and
    erase all copies of this message and attachments.

    This email is for your convenience only, you should not rely on any
    information contained herein for contractual or legal purposes. You should
    only rely on information and/or instructions in writing and on company
    letterhead signed by authorised persons.
    **********************************************************************

    ---------------------------------------------------------------------------
    ---------------------------------------------------------------------------

    ---------------------------------------------------------------------------
    ---------------------------------------------------------------------------

  • Next message: Sarbjit Singh Gill: "RE: GPO that forces users to use a proxy server."

    Relevant Pages

    • Internet access with GPO
      ... I have created a group called "NO INTERNET" and I have applied a gpo to that ... this policy forced the users in that group to use a proxy server to ... this group will not have access to the internet (exactly what I'm looking ... there is a limit with number of characters that can be ...
      (microsoft.public.win2000.active_directory)
    • RE: GPO that forces users to use a proxy server.
      ... We use a VPN for this as well. ... GPO that forces users to use a proxy server. ... proxy sever for there internet access in the company, ...
      (Focus-Microsoft)
    • Re: tpg cancel attack
      ... Internet connections to move traffic. ... common set of communications protocols. ... The vast collection of inter-connected networks across the world that ... A worldwide network of computer networks. ...
      (talk.politics.guns)
    • Re: Time sync, Updates, and Media Center
      ... BTW the error is an "Installation error" I go to microsoft updates, ... You do not know the proxy server name or its IP address and/or ... Your IT staff has given permission to specify these in your Internet ... Explorer window or you can find these LAN Settings in the Internet ...
      (microsoft.public.windowsxp.general)
    • RE: Group Policy Connundrum - Stick with it, its confusing!!!
      ... Configuration object of the GPO (vs. ... Group Policy Connundrum - Stick with it, ... Small Business Server Internet Connection Firewall ...
      (Security-Basics)