چگونه پروکسی سرور را از طریق Group Policy برای کلاینت ها تنظیم کنم ؟

[vahidea]

سلام . کسی میتونه به من کمک کنه تا آدرس پروکسی سرورم رو با استفاده از Policy های دامین کنترلر تنظیم کنم.

---

موضوعات مشابه:

• چگونگی اضافه کردن زبان فارسی از طریقGroup Policy
• زبان فارسی در group policy
• عدم دسترسی به group policy
• عدم دسترسی به group policy
• عدم دسترسی به group policy

---

[patris1]

How to detect proxy server automaticallyWeb Proxy Auto-Discovery (WPAD) Option1

The IE 5 (and higher) and Netscape Web Proxy Auto-Discovery (WPAD) feature enables web clients to automatically detect proxy settings without user intervention. The algorithm used by WPAD prepends the hostname "wpad" to the fully-qualified domain name and progressively removes subdomains until it either finds a WPAD server answering the hostname or reaches the third-level domain. For instance, web clients in the domain a.b.hoge.com would query wpad.a.b.hoge.com, wpad.b.hoge.com, then wpad.hoge.com. A vulnerability arises because in international usage, the third-level domain may not be trusted. A malicious user could set up a WPAD server and serve proxy configuration commands of his or her choice.

1. All clients should be enabled "Automatic detect settings", even though it's a default value.
2. Make a wpad.dat and proxy.pac file and copy it into root directory of local web server
   function FindProxyForURL(url,host) { if(isPlainHostName(host)|| isInNet(host,"192.168.0.0","255.255.255.0")) return "DIRECT"; else return "PROXY 192.168.0.10:8080; DIRECT"; } Note: wpad.dat is referred by WPAD, and proxy.pac is referred by DHCPINFORM (option2) and Active Directory Group Policy (option3)
3. The web server should have wpad host name (or alias). You need to register to DNS. (A record or CNAME)

Detect proxy server using DHCPINFORM Option2

DHCP server can send DHCPINFORM message and then client can get javascript URL. DHCP server should be supported using DHCPINFORM. Windows 2000 Server/Windows .NET Server support it.

1. Open DHCP Window, right click the host name and select "Set Predefined Options..."
2. Click "Add" button at "Predefined Option and Values" window. And then type as below. You can give any name, but data type and Code should be "String" and "252"
3. Add "AUTO-PROXY-CONFIG" to each scope options and the value should point your proxy.pac file (make link to proxy.dat or copy same file to proxy.pac)

Active Directory Group Policy Option3

You can configure proxy to client automatically using Active Directory Group Policy. But it works only computer which belongs to the domain. The supported OSs are only

1. Windows 2000 Professional and Server
2. Windows XP Professional
3. Windows 2003 Server

These are not supported

1. Windows 9x/Me
2. Windows XP Home Edition

1. Open "Active Directory Users and Computers", and then select OU (if you want to apply all your organization, select root domain) and open property. Click "Group Policy" tab, click [New] or [Edit] and open "Group Policy" window. Click "User Configuration"->"Windows Settings"->"Internet Explorer Maintenance"->"Connection"->"Automatic Browser Configuration" and open "Property".
2. Check [Automatic detect configuration settings] and [Enable Automatic Configuration], set the interval to [Automatic configure every] textbox and URL for proxy.pac file to [Auto-proxy URL] textbox.

[vahidea]

این راهی که شما گفتید رو تا یه جاییش من رفتم .من روی سیستم ها در قسمت
internet option-> connection -> lan setting -> proxy server
آدرس 192.168.6.3 و با پورت 8080 ست کردم .و در ضمن تیک Bypass رو هم زدم .
در دامین کنترلر هم user configuration ->.......-> internet explorer maintenance
در قسمت connection/proxy setting مواردی رو که بالا به صورت لوکال تنظیم کرده بودم رو تنظیم کردم و
policy تنظیم شده رو با دستور مربوطه اعمال کردم . اما به کلاینتها که سر میزنم میبینم این policy روی آنها اعمال نمیشه . و آدرس پروکسی سرور خالی میمونه به جای اینکه با آدرس 6.3 و پورت مربوطه پر بشه .

[patris1]

Default Domain Group Policy