How to Configure WPAD through DNS

• First you have to configure a wpad site in your IIS

1. Open the proxypac.pac file you have previously created and save as wpad.dat.
2. Copy wpad.dat to the location: C:\inetpub\wwwroot
3. Open IIS Management Console
4. Add web site –  right click on Sites
5. Site name: wpad; Physical Path: C:\inetpub\wwwroot; Hostname: wpad / Set the binding with the Server IP address and click OK.
6. In the newly created site add mime type: .dat; “MIME type: application/x-ns-proxy-autoconfig”

 

• DNS setup in order to have automatic proxy

1. On your Domain Controller go to DNS.
2. On your existing domain add New Zone, Primary Zone, Zone name: wpad.
3. In this zone right click and select New Host. Name: wpad, IP address: the IP of your IIS server hosting the wpad.dat file.
4. On the client machine: Set as primary DNS the IP of the Domain controller.

On Microsoft Windows Server 2008 or 2008R2 the WPAD domain can be blocked. To check if it is blocked run CMD with the command: dnscmd /info /globalqueryblocklist. If wpad appears in the response, you should run the command: dnscmd /config /enableglobalqueryblocklist 0. This should remove the blocking. 

• Browser deployment from Group Policy:

1. On the Domain Controller create a new Organization Unit with all the users you want to use the proxypac.pac file.
2. Right click on the new OU and select “Create a GPO in this domain, and Link it here...”. Name it properly. Edit the new policy.
3. In the same policy that enforces the Logon Script expand User Configuration/ Policies/ Windows Settings/ Internet Explorer Maintenance/ Connection / Automatic Browser Configuration.
4. Enable “Automatically detect configuration settings”.
5. On the Client side: Open CMD and run the command “gpupdate /force”.
6. Delete the browsing history.
7. Check that in IE - Automatically detect settings is enabled.
8. Close and Reopen IE and verify if the wpad.dat has been updated and is the one from your IIS server. You can do this by opening Internet Options /General /Browsing History section – Settings/ View Files. In the opened folder check to see if you have wpad.dat file and that the content is correct.

For Firefox you can manually set the settings from the client machine:

1. Open Firefox.
2. Select Tools from the application menu, click Options.
3. Click the Advanced section, click Settings under Connection.
4. Select Auto-detect proxy settings for this network, click OK.