Hello,
I wanted to ask you some questions with the scenario that we are finding in a client.
We are implementing Intune for Hybrid devices, communications use proxy, URLs and IPS for output to Azure, office 365, Intune are added to the allow list without proxy authentication. But they go through the organization's proxy.
We do not use WPAD.
We have come across two situations that we have had to configure in the equipment so that everything works correctly.
1. We have had to put the proxy configuration on Winhttp, so that the registration of the devices in AZURE AD works. and since we cannot proxy.pac at the Winhttp level, we have had to configure it as ipproxy:port. On this subject, why is it necessary to add the proxy in Winhttp at the system level? Is it really necessary to add the Winhttp?
The computers have the proxy.pac added at the network configuration level > proxy > configuration script, is this not enough?
2. We also had to add the proxy address ipproxy:port , in the BITS service with the Bitsadmin /util command, at the localsystem, localservice and Networkservice levels, so that the win32 applications would download since they did not download without the configuration. Because apparently the BITS service was not able to exit through the proxy, if you do not add the configuration with the described command.
3. And finally about using Hybrid Autopilot, in this scenario I have read the article by MICHAEL NIEHAUS, https://oofhours.com/2019/07/19/windows-autopilot-and-the-joy-of-networking/
On the topic of autopilot using proxy, and it has caught my attention that one of the ways that can be done is to use the Autopilot profile using White Glove pre-provisioning on a different network, but at this point I have the doubt at what point of the Autopilot process the proxy configuration is loaded, and if the proxy configuration is assigned, wouldn't the process stop working since being on a different network, it would stop going out to the Internet when the proxy was applied until you weren't there? connected in the production network?
I would like to know about your experience.
Thank you.
