Deploying a .PAC file with Microsoft Group Policy Management Tool
Note: You need to use the Group Policy Management Console (GPMC) on a computer tht runs Windows 8, Windows 8.1, Windows Server 2012 R2, or Windows Server 2012 to manage a domain.
Create a New Group Policy Object (GPO)
- 1. In the Group Policy Management window, under Domains, right-click the domain name.
- 2. Select Create and Link a GPO Here. The New GPO window appears.
- 3. Enter an intuitive Name for the GPO, such as Proxy Server Policy
- 4. Click OK.
Change the GPO Status
The new GPO appears in the left pane under the specified domain.
- 1. Select the policy proxy GPO.
- 2. In the right pane, click the Details tab, and then change the GPO Status to User configurationsettings disabled. This minimizes the parts of the GPO that are applied, so that users can log on more quickly.
Edit the GPO
- 1. In the left pane, right-click the proxy policy GPO, then click Edit.
- 2. In the Group Policy window, in the left pane:
- Select User Configuration.
- Select Control Panel Settings.
- Select Internet Settings.
- Select Connection, then double-click Automatic Browser Configuration in the right pane.
- 3. On the Automatic Configuration tab:
- Select Automatically detect configuration settings and Enable Automatic Configuration.
- Enter an interval in the Automatically configure every checkbox.
- Enter the Rocket’s FQDN, followed by pac/tier1/lsaccess/proxy.pac in the Auto-proxy URL box.Example: http://support.lightspeedrocket.com/pac/tier1/pac/supportproxy.pac If you are hosting your PAC file in another location, use that URL. Click OK.
- 4. Navigate to User Configuration > Control Panel Settings > Internet Settings.
- 5. Clear Automatically detect configuration settings.
- 6. Select Enable Automatic Configuration.
- 7. Select Auto-proxy URL. Enter the Rocket’s FQDN, followed by pac/tier1/lsaccess/proxy.pac in the Auto-proxy URL box. If you are hosting your PAC file in another location, use that URL.Example: http://support.lightspeedrocket.com/pac/tier1/pac/supportproxy.pac
- 8. In the Computer Configuration area navigate to Administrative Templates > System/Group Policy, and then use the following settings to maintain consistency and compliance of the web browser’s settings:
- Select Internet Settings policy processing.
- Select Allow processing across a slow network connection.
- Clear Do not apply during periodic background processing.
- Select Process even if the Group Policy objects have not changed.
For Firefox Users
FirefoxADM can be used for allowing centrally managed locked and/or default settings in Firefox via Group Policy Templates in Active Directory. More information is available at http://sourceforge.net/projects/firefoxadm/.
Secure the Proxy Settings
After you enable the proxy settings, you should disable users’ ability to change them.
- 1. In the Group Policy window, in the left pane:
- Select User Configuration.
- Select Administrative Templates.
- Select Windows Components.
- Select Internet Explorer.
- 2. In the right pane, scroll down to and right-click Disable changing proxy settings. Select Properties, and then select Enabled.
- 3. Click Apply, and then click OK twice. Users now cannot change their proxy settings.