Setting a transparent proxy without changing existing IP Address values

Solution 1:

Use WPAD: http://en.wikipedia.org/wiki/Web_Proxy_Autodiscovery_Protocol

Most Windows systems are configured to use WPAD by default. IE, Chrome, and Firefox will respect the system proxy settings. Assuming your users are on a Windows domain with restricted administrator rights, they will be unable to change the system proxy settings or the IE proxy settings, but they would still be able to change the Chrome or Firefox proxy settings if they desired. But they'd have to know they were going through a proxy first.

The biggest problem with the proxy is if they are web developers who access http:// localhost:someport to view the prototype of their application. In that case the proxy will say that said port is unreachable. Otherwise WPAD proxies are fairly transparent to naive end users.

Do note that in my experience web proxies such as Squid, while useful due to programs such as Squidguard that keep users from going to "forbidden" sites, do little to decrease web traffic due to the large amounts of HTML5 and other dynamic uncacheable content on the web today. While they are useful for tracking what IP address is connecting to what content, tying together IP address and the name of the computer that it belongs to (and thus user) will require a DHCP server that logs that information. Microsoft's DHCP server logs that information. As far as I know, Cisco's does not.