Discussion Locked

XP and proxy client

0 helpful
10 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
We are running proxy 2.0. We just got in 200 new machinesw rullng XP PRO. The only people that can get out t the inter net with them are Users with ADMINISTRATOR or Power User rights. I found a microsoft bulitin that said this is the way it was designed but since we are a school district we will not ginve the students power user or admin rights.

10 replies

by cg it

What Microsoft meant was that the default settings are admins and power users only. You have to make up a custom filter for your clients to access the internet via the proxy server. A thought, you might consider going to ISA server instead of proxy server. Their filter capabilities and security filters are much better than proxy 2.0

by cg it

ooops, didn't quite read the question correctly. Your saying that the user rights assignments for each client computer are set to allow only Admins and Power users are able to access proxy server 2.0 and access the internet. Changing the user rightsin the client computers to enable them to access IE and then the proxy server is what needs to be configured. Then make up a custom filter to limit log on hours, limit log on to particular sites, etc.

by dont-bother

Microsoft did it again! I was sure surprised when I read the docs on Users vs Power Users also.
This applies both to XP and Win2k.

Unfortunatley there ARE ONLY two options:

1.) (Easiest) make students Power Users, then restrict what few rights Power Users have that you don't want Students to have.

2.) (harder - more options to change) make students Users, then Add what rights you need for Users to operate.

You need to change the settings in Security Manager. There are several KB articles on this.
http://support.microsoft.com/
Search for 'User permissions' & 'User Rights'

by gcordero42

just go to your proxy server and crate a group with permission to access the proxy then select from your user list the ones to be designated to that new group (example, Internet Users) then just let they autenticate their password to that domain or workgroup . done..

This discussion is closed to new replies.