I am using a proxy server for my environment deployed on premises for internal hosts and on the cloud from BYOD. When a user takes their device off the premises, the proxy changes to an external proxy address. However, I am concerned that if a machine is compromised with malware and gets admin privileges, it might change proxy settings which will bypass my proxy.
How do I prevent the end user from changing proxy settings? even with admin privileges?
I am looking for a way to harden proxy settings on network stack so that the end user can not overwrite it.