Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We are trying to deploy a bunch of new Windows 7 (and some old XP) machines using MDT2010 and MDT2012.

Because IE is set to "automatically detect proxy settings", it gets the settings from the proxy.pac/wpad.dat defined in the DHCP server.

The problem is that during deployment, the machine is not on the domain, so no authentication to the WebMarshal server is possible, so all internet-based operations fail unless someone "hands-on" fills in the authentication dialog box.

How can I do one of the following?

  1. Disable auto proxy configuration for XP before the application installations begin
  2. Have the proxy.pac/wpad.dat files bypass the proxy based on something identifiable on the machine (host name would do, but iirc that's not available to PAC, but any other variable I can set from MDT would do too)
  3. Configure WebMarshal to bypass authentication for particular a computer name
share|improve this question

This is what I use (a vbs I found):

DIM sKey,sValue,binaryVal
Dim oReg
Dim status
Set oReg=GetObject( "winmgmts:{impersonationLevel=impersonate}!\\.\root\default:StdRegProv")    'For registry operations througout

Const HKCU=&H80000001

status = "off"
sKey = "Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections"
sValue = "DefaultConnectionSettings"

oReg.GetBinaryValue HKCU, sKey, sValue, binaryVal

select case lcase(status)
  case "on"    binaryVal(8) = binaryVal(8) OR 8        'Force Autodetect on
  case "off"    binaryVal(8) = binaryVal(8) XOR 8        'Force Autodetect off
  case "show"    wscript.echo "Automatically detect is set to " & ((binaryVal(8) and 8) = 8)
  case else    wscript.echo "Invalid parameter - IEautomaticallydetect  on, off or show"
end select

if lcase(status)="on" or lcase(status)="off" then oReg.SetBinaryValue HKCU, sKey, sValue, binaryVal

Works flawlessly for me, I call it from a .cmd

share|improve this answer
In that example, status will always be off. – Cylindric Feb 28 '12 at 11:39

Assuming you have outbound internet access with no proxy, then you could disable "Automatically Detect Settings" and take a copy of the following reg key:



HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\

Then configure as required for production and take another export. You can then switch them using a script at the appropiate times.

Bear in mind that most Proxy related configurations are stored in various keys

HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\

This includes the actual proxy itself, and exceptions etc

share|improve this answer

Another option, presuming webmarshal supports it, is not to authenticate for the domains you need for deployment, which should be few enough not to represent a security issue.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.