Force proxy settings for Windows browsers

clearosOnce you've set up content filtering per user groups, this article describes how to force proxy settings on your Windows users. This article was written using Windows 7 Pro, but might work for Windows 10.


Manual check

Start by logging on as a local admin, and confirming that your browser works using a manual proxy setting.

  1. Start Chrome.
  2. Click the three dots (top-right) and choose Settings.
  3. Scroll to the bottom, and expand the Advanced section.
  4. Scroll to the bottom again, and in the System section click Open proxy settings.
  5. In the Internet Properties dialog box, click LAN settings.
    1. Select Use a proxy server for your LAN..., and leave all other checkboxes unticked.
    2. Address: 192.168.1.1
    3. Port: 8080
    4. Click OK.
  6. Click OK again to close the dialog box.

Note that this will also make the correct 'System settings' for Internet Explorer and Firefox.

Regedit

Now we want to transfer these settings to be used for 'Default user' settings.

  1. Open Regedit with an admin account.
  2. Browse to: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections
  3. You should see three keys:
    1. (Default)
    2. DefaultConnectionSettings
    3. SavedLegacySettings
  4. With Connections selected in the left pane, click File > Export.
  5. Save the file as connections.reg.
  6. Open the connections.reg file in a text editor and change HKEY_CURRENT_USER to HKEY_Local_Machine.
  7. Now open a Command Prompt, browse to the file and run the following command:
regedit connection.reg

 

Prevent proxy changes

With the following step we can prevent users from changing their proxy settings.

  1. Open Regedit with an admin account.
  2. Browse to: HKEY_Local_Machine\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings
  3. Add the following DWORD key:
  • ProxySettingsPerUser
    • Value = 0

Note that you could also achieve this by adding the following content to the bottom of your connections.reg file in the previous steps.

[HKEY_Local_Machine\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxySettingsPerUser"=dword:00000000

New User accounts

Note that you will need to delete any existing User Profiles on the workstation as the right proxy settings will only be set for new user accounts.

 

Thanks for visiting.