Rad,
Quote:

the vars will be evaluated before it is sent




Minor detail I overlooked.

One could pull the %windir% from the remote registry.

Stephen,
Instead of setting proxy "per user" it could be set "per machine" which would make it easy to manipulate remotely with a central admin script instead of separate individual local scripts that students can reverse engineer and defeat.
_________________________
Give a man a fish and he will be back for more. Slap him with a fish and he will go away forever.