Internet Explorer Control Panel Restrictions (Part

[alexanderb4]

This guide (http://www.winguides.com/registry/display.php/537/) suggests any modifications can be made to HKEY_LOCAL_MACHINE to apply for all uses of the machine.

However I cannot find an equivilant to [HKEY_CURRENT_USER\Software\Policies\Microsoft\Inte rnet Explorer\Control Panel] in HKEY_LOCAL_MACHINE. Where might I find these settings or do I have to add them? Is the script for adding entries different from that for modifying them?

What I want to do is set a Proxy address for use by anyone using the machine, and remove the Internet Options option to switch off the proxy setting, and disable the Autoproxy & Detect proxy overide in Internet Options.

Any ideas?

[POBrien]

You have to add the necessary subkeys, values and value data to the Machine branch. Just duplicate the setup as it is in current user.

to lock users out of the Internet Options, you can use the No browser option tweak..

http://www.winguides.com/registry/display.php/442/

[alexanderb4]

Thanks for that.

I don't want to block user from all internet options only those related to proxy. Any ideas? (see my version below)

If I am running a regedit script to achieve the PC wide changes what will I it need to actually create these entries (in the MACHINE) section?

Also, will I be able to disable the options for Autoconfig?

I currently use this script:

REGEDIT4
[HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Internet Settings]
"ProxyOverride"=""
"ProxyServer"="domain:port"
"ProxyEnable"=dword:1
[HKEY_CURRENT_USER\Software\Policies\Microsoft\Inte rnet Explorer\Control Panel]
"Proxy"=dword:ffffffff
"Autoconfig"=dword:ffffffff
[HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Internet Settings]
"MigrateProxy"=dword:0

It works for XP, Win2000 and appears to work for Win98 but when I have used variations on this I have found it inconsistent. Any ideas?

[POBrien]

got it.. How about

REGEDIT4

[HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Internet Settings]
"ProxyOverride"=""
"ProxyServer"="domain:port"
"ProxyEnable"=dword:1

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Int ernet Explorer\Control Panel]
"Proxy "=dword:00000001
"Autoconfig"=dword:00000001
"Connection Settings"=dword:00000001
"Connection Wizard"=dword:00000001

or you can remove the Connections Tab entirely with...

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Int ernet Explorer\Control Panel]
"ConnectionsTab"=dword:00000001




[HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Internet Settings]
"MigrateProxy"=dword:0

[alexanderb4]

Thank you that is most helpful.

If I wanted the Proxy address for the MACHINE regardless of user. What is the script to add those keys to the MACHINE entry you have suggested.

Also, is their any significance in using 00000001 or 1?

And, can you explain how Migrate Proxy works?

[POBrien]

Here's the script...

Copy everything between the lines below into notepad. save the files as proxy.reg. Run the reg file in the users login script. When the user logs in she/he will inherit the reg file settings.

__________________________________________________ _____________

REGEDIT4

[HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Internet Settings]
"ProxyServer"="10.0.0.1:23001"
"ProxyEnable"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Int ernet Explorer\Control Panel]
"Proxy "=dword:00000001
"Autoconfig"=dword:00000001
"Connection Settings"=dword:00000001
"Connection Wizard"=dword:00000001

__________________________________________________ ______________


As you can see above, the value/value data for...

"ProxyServer"="10.0.0.1:23001"

is an example. You would substitute the ip of 10.0.0.1 for the real ip that is used for the proxy server. The port 23001 will need to be changed to reflect the port that you configured (on the proxy server) for internet access.


Regarding your other questions...

Also, is their any significance in using 00000001 or 1?

I don't think there is. I have always used the 00000001 format. You can try the 1 format to see if it will disable as well.

And, can you explain how Migrate Proxy works?

No I can't. I don't know the answer. I know it's not used for your current needs.

[alexanderb4]

I may be failing to understand how this works but...

If the Proxy Server address is entered in the CURRENT USER section of the registry how is it that this Proxy Server will be used for all users [the objective of the script] given that the Proxy Server is not specified in the LOCAL MACHINE section?

Will these work in all versions of Windows?<P ID="edit"><FONT class="small">Edited by alexanderb4 on 12/10/01 16:54.</FONT></P>

[POBrien]

It's designed that way by Microsoft. The reason, is because you can have multiple users using the same machine. UserA can have the proxy enabled. When userB logs in her/his proxy settings can be different. This is really applicable when it's a stand alone machine.

How it works in a network environment is that when any user logs in they inherit the reg file. (so in that respect the tweak behaves like it is configed in the machine section.

You're assumption is correct... Most tweaks can be geared to the current user or all users based on the Current User branch or the Local machine branch but the proxy tweak doesn't follow that concept.

[alexanderb4]

I am interested in stand alone machines connected over the Internet.

The implication is that the suggestion in the original guide is wrong - proxy configuration cannot be applied to the MACHINE. Can you confirm this?

If so, is there a way to make the script that specifies the proxyserver, run for each user, for instance by forcing it to run every time the PC starts?

[POBrien]

The section that your reading from...

http://www.winguides.com/registry/display.php/537/

is correct. It can be used for current or machine.

Here's the actual link to the proxy config setup. (which is applicable for the current user only)

http://www.winguides.com/registry/display.php/292/

If you want to run it for particular users on the same stand alone machine, follow the steps below...

1. You'll have to modify the proxy.reg file to reference the current user branch only.

REGEDIT4

[HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Internet Settings]
"ProxyServer"="10.0.0.1:23001"
"ProxyEnable"=dword:00000001

[HKEY_CURRENT_USER\SOFTWARE\Policies\Microsoft\Inte rnet Explorer\Control Panel]
"Proxy "=dword:00000001
"Autoconfig"=dword:00000001
"Connection Settings"=dword:00000001
"Connection Wizard"=dword:00000001

2. Make sure the proxy.reg file is in the c:\ drive.

You'll need one more file besides the proxy.reg file.

3. Open notepad and type

@echo off
cd\
c:
regedit /s proxy.reg

save the file as proxy.bat in the c:\ drive.

4. Right click on the proxy.bat file and select properties then the General tab. Add the check to the Hidden attribute. Next, go to the adjacent Program tab. Select Minimize for the Run section and add the check for close on exit.

After you close out a shortcut (proxy.pif) will appear.

5. Copy that shortcut into the applicable user's Startup folder via the Start button/Programs menu.

Now when the user logs into windows the batch file proxy.bat will execute. This will then execute the proxy.reg file which will then add the entries into that applicable user's registry.
When the user then launches IE, IE will look to the registry and implement the proxy entries.

For users that don't need proxy config, don't copy the proxy.pif into their own Startup folder.

[alexanderb4]

That is fantastic. Is there a way to do this remotely through a downloadable script?

[POBrien]

Thanks. Yes there is. Exactly what is the current setup like for your users to receive remote downloads?

[alexanderb4]

At the moment the click on a link to a proxy.reg file and then "open from current location" which enters settings into their registry, provided they agree (Yes,OK).

This process can be ammended, and ideally run in silent mode.

By the way - will this approach work equally well in all version of windows, including XPHome & XPPro?

[POBrien]

yes it will.

[alexanderb4]

Excellent. Await your suggestion for download with anticipation!

[POBrien]

Before I can attempt to offer the solution, I need to know exactly what the current Network setup is for the users.

[alexanderb4]

All the ones this concerns are using dial-up connection to the internet, or cable modems or ADSL.

[POBrien]

what is the method currently used to access these pc's remotely?

[alexanderb4]

No. The PC connects to an internet page were they run from location the proxy.reg file, which then updates their registry to point all future traffic trought the proxy address.

[POBrien]

got it. well... since the users don't login through a login script it's very difficult to setup a tweak that would auto add the reg entries for the applicable user(s).