I can't believe there are still people (not necessarily you, arebop) who think pushing _proxy settings_ to clients is somehow good from a security standpoint.

I can't believe there are still people (not necessarily you, arebop) who think pushing _proxy settings_ to clients is somehow good from a security standpoint. If you really want to control or log what people are doing through your network, you have to FORCE them to go through a proxy, and the only way to do that is with a firewall and with a transparent proxy, not by putting configuration on a piece of hardware that someone else, the user, has physical access to and uses day in and day out.