Related guides
On a Company Laptop: No Admin Rights, Corporate VPN Already On
Updated
A company laptop comes with three limits: unapproved software cannot be installed, there are no admin rights, and a corporate VPN is often already running. A device-wide VPN either will not install or fights the corporate one. The right tool is the web proxy — a browser extension that routes only that browser’s requests, leaving the intranet, the mail client and the corporate VPN exactly where they are, with no admin rights needed. This guide covers setup, what it can and cannot do, and how to stay within the company’s IT policy.
Why the web proxy
- No client: it is only a browser extension, and most companies allow extensions but not software installs.
- No admin rights: the extension runs in user space and never touches system network settings.
- Coexists with the corporate VPN: the corporate VPN owns the system routes; the web proxy lives inside the browser, and the two do not interfere. Intranet pages keep going through the corporate VPN.
- Never drops: the proxy works per request with no long-lived connection, so office-network hiccups go unnoticed.
Two-step setup
- Install the ZeroOmega extension (the maintained successor of SwitchyOmega); this site’s web-proxy page links each browser’s install page.
- Log in to the site, click “copy the extension restore URL” on the web-proxy page, then in the extension’s Import/Export choose “Restore from online” and paste. Regions and addresses import at once; afterwards pick a region from the extension icon and enter your site credentials in the browser’s login prompt.
- Use a separate browser profile (or a second browser) for the proxy, keeping the work browser local so the two never mix.
What it can and cannot do
- Can: research, Google, GitHub, Stack Overflow, overseas documentation sites, ChatGPT on the web, webmail.
- Cannot: video apps, desktop software and command-line tools do not use the browser proxy by default (the command line can take the proxy address in the http_proxy variable — see the Linux guide).
- Cannot: Chinese video sites from abroad — they also check IPv6 and DNS, which the web proxy cannot control; that scenario needs a device-wide VPN.
Staying within IT policy
Everything on a company laptop may be audited, extensions included. Read the acceptable-use policy first: most companies prohibit unapproved software and bypassing security controls, while a browser extension reaching external sites is usually a grey area — ask IT if unsure.
Do not install a device-wide VPN (Cisco, the private network, sing-box) on a company laptop to get around policy: they change system routes, trigger endpoint-management alerts and carry intranet traffic outside. The web proxy touches one browser and carries the least risk.
Keep work and personal accounts apart: no company accounts in the proxied browser, no personal accounts in the work browser.
FAQ
What if the company blocks extensions?
Then there is no safe way on that machine; use your own phone or personal laptop. Do not bypass controls with portable software of unknown origin.
Can the extension see my intranet traffic?
No. Under split rules, intranet domains go direct and never touch the proxy; in global mode they merely pass through the proxy server and back, and the proxy sees domains, not content. For safety, give the proxy its own browser profile.
Does the proxy still work with the corporate VPN on?
Yes, they do not conflict. A few corporate VPNs force all traffic through the company exit and disable proxy settings; then the extension reports a connection failure and the only option is turning the corporate VPN off.
Same on a company Mac?
Yes — the Chrome, Edge and Firefox extensions all have Mac versions. Safari has no such extension; use another browser.
Related pages
- Web proxy setup page: extension install and restore URL →
- What a web proxy is and when to use one →
- Routing a Linux server and command-line tools →
- Which connection method to choose →
- Tencent Video or iQIYI Blocked Abroad? Fix It in 5 Steps →
- How to Choose a China VPN →
- Does Cisco AnyConnect Work in China? →
- Choosing a VPN Router →
- How to Import a sing-box Subscription →
- China VPN for Students Abroad →
- Free or Paid China VPN? →
- What the Private Network (Tailscale) Is →
- How to Use OpenVPN and When to Choose It →
- What the Router Firmware Does →
- How to Reach Us and Never Lose Contact →
- How We Differ from Other VPNs →
- How to Recognise a Risky VPN App →
- Which Region Is Fastest from Inside China →
- For the TV and the Grandparents at Home →
- Watching Home Cameras and a NAS in China from Abroad →
- What to Do When iOS Cannot Install an App →
- Cannot Connect, Slow, or Dropping: What to Check →
- Setting Up for Business Trips and Travel →
- Many Devices, One Setup, No Redo on a New Phone →
- Routing a Synology or QNAP NAS →