Configuring Proxy and Authentication for Windows Agent

New
  • Updated on Apr 30, 2025
  • Published on Mar 27, 2025
  • 3 minute(s) read
  • s
 Prev Next

Introduction

Most organizations use proxy servers to regulate internet access for their devices. To be functional, the HP Insights Windows Application (also referred to as Windows Agent) for the Workforce Experience Platform (WXP) detects proxy settings using one of the following methods:

  1. Proxy Auto-Discovery (WPAD): The Windows Agent dynamically identifies the proxy settings configured in the network. 

  2. Proxy Auto-Configuration (PAC) URL: The  Windows Agent retrieves proxy settings using a centrally hosted PAC (Proxy Auto-Configuration) file, which provides flexible and dynamic control over proxy routing based on predefined rules or script.

  3. Static Proxy Configuration: The agent uses a manually specified proxy server and port number.

If the proxy server cannot be detected automatically, you must manually configure the Windows Agent. 

This article provides instructions for:

  1. Configuring proxy settings manually (PAC or Static Proxy) if auto-detection fails.

  2. Enabling authentication (User or Computer authentication) if the proxy requires authentication.

Summary of Proxy Configuration Methods

Proxy Configuration Method

Requires Manual Configuration?

Best for

WPAD (Proxy Auto-Discovery)

❌ No

Networks using DHCP/DNS-based proxy detection

PAC URL (Proxy Auto-Configuration)

✅ Yes

Dynamic proxy routing based on rules

Static Proxy Configuration

✅ Yes

Fixed proxy settings for all traffic

User Authentication

✅ Yes

Proxies requiring user login credentials

Computer Authentication

✅ Yes

Proxies authenticating devices, not users

Remember to include the registry keys in the batch script file that is used to deploy the Workforce Experience Platform for Windows agent.

Target Audience

IT admin responsible for configuring Windows Agent for Workforce Experience Platform using Proxy. 

Prerequisites

Ensure the following requirements are met:

  • The HP Insights Windows Application (agent) must be of version 3.20.455 or later.

  • The authentication method must be Negotiate (Kerberos, NTLM) or NTLM v2.

    • The Basic and Digest authentication methods are not supported.

Configuration Steps

The configuration method depends on whether the proxy settings need to be detected, manually set, or require authentication.

  1. Configuring Proxy Auto-Discovery (WPAD) – No Manual Configuration Required: If your organization uses WPAD, no additional configuration is required. The Workforce Experience Platform for Windows Agent automatically retrieves the proxy settings via DHCP or DNS. If WPAD is not working as expected, ensure the DHCP server provides WPAD (option 252) or that a DNS record for wpad.company.com exists.

  2. Configuring Proxy Settings Manually (PAC or Static Proxy): If the proxy settings cannot be detected automatically, configure the agent to use either:

    1. A Proxy Auto-Configuration (PAC) URL – Best for dynamic proxy assignments. Run the following command in a batch script to specify a PAC URL for the agent. Replace http://autoconfigurlwith the actual PAC URL: `REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Hewlett-Packard\HP Touchpoint Manager\GPO\ProxyPath" /v AutoConfigProxy /t REG_SZ /d http://autoconfigurl /f. 

      1. Example: REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Hewlett-Packard\HP Touchpoint Manager\GPO\ProxyPath" /v AutoConfigProxy /t REG_SZ /d http://autocache.proxyserver.net/proxy.pac /f

    2. A Static Proxy Server – Best for fixed proxy configurations. Run the following command in a batch script to specify a Static Proxy Server. Replace proxy:port with the correct proxy address and port: `REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Hewlett-Packard\HP Touchpoint Manager\GPO\ProxyPath" /v AutoConfigProxy /t REG_SZ /d http://autocache.proxyserver.net/proxy.pac /f`

      1. Example: `REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Hewlett-Packard\HP Touchpoint Manager\GPO\ProxyPath" /v StaticProxy /t REG_SZ /d web-proxy.corp.domain.com:8080 /f`

  3. Configuring Proxy Authentication: If the proxy server requires authentication, additional settings must be enabled. The authentication method may be:

    1. User Authentication – Requires user credentials to authenticate against the proxy. Run the following command in a batch script to enable User Authentication for the proxy: REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Hewlett-Packard\HP Touchpoint Manager" /v EnableUserAuthProxy /t REG_SZ /d True /f

    2. Computer Authentication – Uses machine credentials instead of user credentials. Run the following command in a batch script to enable Computer Authentication for the proxy: REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Hewlett-Packard\HP Touchpoint Manager" /v EnableComputerAuthProxy /t REG_SZ /d True /f

  4. Configuring Proxy Settings via Group Policy:For enterprise-wide deployment, apply PAC or Static Proxy settings via Group Policy:

    1. Download the HP Insights Group Policy Administrative Templates.

    2. Import the templates into Group Policy Management Console (GPMC).

    3. Configure proxy settings under "Computer Configuration" or "User Configuration" based on your organization's policy.

Related Resources

For additional information, refer to the following article:

Contact Us

For any assistance, create a support case or email [email protected]

Related articles