Hi Folks.
Scenario:
Computer on a domain with browser configured to use an automatic configuration script (Internet Options->Connections->LAN Settings)
Objective:
I want computer to be able to access the company Intranet but no external website and, secondly, prevent any user that logs from tweaking the browser connection settings
Thus far:
Removed automatic config script, put in dud/non-existent 10.0.0.1 proxy server address, excempted Intranet addresses from using this proxy server and then modified the following with gpedit…
-Make proxy settings per machine
-Disable the connections page
-Disable caching of auto-proxy scripts
-Manually input the non-existent proxy server address
IE can still access the Internet!
Machine is DHCP-enabled so gets DNS configured automatically. If I force a dud DNS Server from gpedit, I can’t access both Intranet and Internet from IE.
I’d appreciate any suggestion. 🙂
