Windows 8 / IE11 forget proxy settings applied by GPO on reboot

I've just about run out of ideas here on what may be causing this. I've toyed with policies quite often, but never ran into this problem before.
Windows 8 with IE11. While there are GPO's active on the system, the settings are kept free to alter by the user if need be. We use a proxy, so I'm required to provide the proxy and the exceptions in a policy to the PC's to make sure they work under normal
conditions. I added a couple of settings in the GPP (Group Policy Preferences) with the correct settings, enabled these settings (green lines) and tested these on a test system. They work fine, I get my proxy settings pushed through.
Then we get to the rollout on the systems that are affected (not that many, just 10 accounts total, all in nearby rooms). I can run a gpupdate /force to reload the settings, and can confirm the proxy settings are applied properly. So the policy itself seems
sound also on the workplaces it needs to be active on. Users still have the option to change the proxy settings on their own discretion, but that's exactly what we want to happen.
Now we run into the problem that when part of these PC's are rebooted, the PC somehow seems to decide the proxy isn't worth its time anymore, and kills all settings for the proxy back to default. Either that, or it just switches the proxy off. Running a
gpupdate /force reapplies the policy and everything starts working again, but WHY is Windows 8 / IE11 adament about forgetting these settings?
The really maddening thing is that on a couple of PC's with Windows 8 and IE11 (and the same policies applied) it isn't a problem and the proxy remains filled in, as I would expect from GPO's. These include my test system, which makes me unable to replicate
the problem and test locally.
I've tried enhancing the policy with using a forced wait for the network to become available) aswell as a forced logonscript run on boot instead the standard 'after 5 minutes'. Find these under 'Computer Configuration - Policy - Administrative Templates
- System - Logon' and 'Computer Configuration - Policy - Administrative Templates - System - Group Policy'. Neither setting seems to work tho. I've also tried going with a Computer Configuration Startup script in which I just request to run 'gpupdate' with
the '/force' as the switches. But this also seems not to do anything.
In short: Does anyone know why Windows 8 / IE11 falls back to something outside the scope of policies, while it accepts the forced policy update with the correct settings when 'gpupdate /force' is issued manually afterwards? And has anyone any idea what
I can do to make sure the policy is applied regardless of what Windows 8 / IE11 thinks it should be?

Just had a go with that... Found out that when I login and refresh the polciy using gpupdate /force, the proxy settings are filled in properly.
Once I reboot tho, the proxy switches itself off (the entries regarding the proxyname and such remain, as does the 'bypass for local addresses, but it's all grayed out). Once I switch the proxy back on, and check under 'Advanced', I find everything in order,
except for the exclusion list which is emptied.
So I forced the gpupdate, verified that the proxy was switched on, and the exclusion list was populated. I then restarted the PC, only to find that above situation (proxy switched off, and exclusionlist empty) had reasserted itself.
Waited a bit and did a forced policy update again. Then verified the logged files (which was just User.txt).
After anonymizing the output a bit, I copied the contents to
http://pastebin.com/YyWswW83 for your review. It looks like it contains 3 batches of GP updates.
The one at 13:20 is likely the primary one in which I forced the GPUpdate. The one at 13:22 is the one issued on the restart of the computer, while the one at 13:24 is the (once again) forced gpupdate.
From my understanding it seems as if the no-change of GPO detection works, but also causes it to skip the policy. Tho I admit that's speculation on my part. Any and all light you (or anyone else) may be able to shine on this, will be greatly appreciated.

Similar Messages

Windows - Use system proxy settings not working as expected

Hi everyone,
I have a bit of an issue that I could use some help with. We currently have remote users that utilize an SSTP VPN connection to access our internal network. Once connected, those users are required to use an internal proxy server to connect to the Internet. The proxy server is Microsoft's TMG and utilized domain authentication.
On our remote Windows clients we have their Internet Options configured to utilize a proxy as follows:
Internet Options -> Connections -> LAN Settings -> No proxy configured at all
Internet Options -> Connections -> Highlight SSTP Connection -> Settings
Use a proxy server for this connection -> IP/Port of Proxy Server
Firefox and Chrome are both configured to use system proxy settings.
Here is my process to demonstrate the issues:
Remote client workstation is rebooted.
With the above configuration just after a reboot, a remote user that is not connected to the VPN can browse the Internet with Internet Explorer, Chrome, and Firefox. None of the browsers prompt for credentials.
A remote VPN connection is then established.
FF is opened and HTTP connections utilize the proxy server. However, HTTPS connections do not use the proxy server, but instead attempt to use the default gateway. FF does not prompt for credentials. FF is closed.
Chrome is opened and can access both HTTP and HTTPS sites without issue. No credential prompt. Chrome is closed.
IE is opened and can access both HTTP and HTTPS sites without issue. No credential prompt. IE is closed.
Here's where it gets weirder...
FF is then reopened. The VPN connection is still up. FF will prompt for credentials. Domain credentials are supplied and FF can now utilize the proxy for both HTTP and HTTPS connections. FF is closed.
VPN is disconnected.
FF is opened and cannot access the Internet as it is still trying to use the proxy server. FF is closed.
IE is opened and can access the Internet. IE is closed.
Chrome is opened and can access the Internet. Chrome is closed.
FF is reopened and can now access the Internet. FF is closed.
In summary, in the above scenario FF acts in an unexpected manner with regards to proxy usage when "use system proxy settings" is applied. However, Firefox begins acting as expected after IE is opened and closed. For example, connect to VPN, open IE, close IE, open FF, and everything works accordingly. Disconnect the VPN, open IE, close IE, open FF and everything works as expected.
Any insight you can provide would be appreciated as it is affecting our FF users and the sooner we can achieve resolution the better. As a note, we've also worked through this issue with WPAD and proxy auto-detect. I've intentionally removed these from the equation to simplify troubleshooting.
Thanks

Quick update. Added to a previously filed bug. Looks like it's assigned now so maybe we'll see a fix for this soon.
https://bugzilla.mozilla.org/show_bug.cgi?id=563169

Getting network prefs to forget proxy settings

Hi there,
Every time I bring my computer to school I have to manually configure it to work with the school's proxy server. The first time I did this I mistakenly entered my login and password in the network prefs pane -- it's unnecessary and actually prevents me from establishing a connection. I have to go in manually every time, clear out the login and password and click "apply". Is there a plist file I can delete somewhere that'll reset this? I don't mind if I lose the proxy server address and port.
Thanks,
Jeff

delete the system configuration file: /Library/Managed Preferences/<username>/com.apple.SystemConfiguration.plist folder on your mac..You will need to authenticate as admin to do this.

Use System Proxy Settings - when this is selected in FF v3.6.6, does it adhere to the same local IE proxy setting? We use a pac file configured in "Use automatic configuration script."

Does anyone know what Firefox looks at locally on the PC when the "Use System Proxy Settings" setting is selected? It appears to be the default setting, recently changed from "No Proxy" of versions past...
Our company uses a pac file specified in IE under "Use automatic configuration script" - with this new default, does it adhere to the same setting in:
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings]

I may be wrong but I think that the "Use System Proxy Settings" makes sense only on Linux and generally speaking "other OSes". As far as I know there is no generic proxy settings in Windows operating system.
The one I know is in the registry part of Internet Explorer.
So in my understanding in Windows, Use System Proxy Settings = No Proxy

IOS 5.1 or iPhone Configuration Profile 3.5 for Windows has not fixed the issue with apply Proxy Settings

iOS 5.1 or iPhone Configuration Profile 3.5 for Windows has not fixed the issue with apply Proxy Settings via a Configuration Profile. Has anyone else got the same issue? Are Mac users got this issue?

This seems to be working for me now but will keep monitoring it the next couple of times I use it to make sure its not a one time thing

Steps to apply Proxy settings for all Server in a specific OU using Group Policy ?

People,
I have several terminal server (2008 R2) running as RDSH in an OU called Terminal Servers.
So how can I create the GPO setting to make sure that everyone who login to this terminal server will be getting the proxy settings automatically to proxy.domain.com on port 3128 ?
I've created the GP object and then link it directly to the Terminal Servers OU using the following options:
User Configuration (Enabled) > Policies > Windows Settings > Internet Explorer Maintenance >
Connection/Proxy Settings > Enable proxy settings
But somehow when I login as myself and DOMAIN\Administrator the proxy settings in the IE11 is still unchecked with the old Proxy value and sometimes blank in some servers.
/* Server Support Specialist */

> I've created the GP object and then link it directly to the Terminal
> Servers OU using the following options:
>
> User Configuration (Enabled) > Policies > Windows Settings > Internet
> Explorer Maintenance >
> Connection/Proxy Settings > Enable proxy settings
User policies apply to user objects - the servers will ignore them, and
as long as there is no user in your terminal servers OU, no one will get
this setting.
Link your policy to the OUs where the users are, then use item level
targeting to filter for a security group you create for this purpose,
and add all your terminal servers to this group. Don't forget to reboot
the servers after changing group memberships...
Greetings/Grüße,
Martin
Mal ein
gutes Buch über GPOs lesen?
Good or bad GPOs? - my blog…
And if IT bothers me -
coke bottle design refreshment (-:
Martin,
Since the browser in the Terminal Servers are all running IE 11, do I need to do the GPO using IEAK or GPP with the new ADMX template ?
/* Server Support Specialist */

Windows 8 and IE10 and 11 not accepting Proxy Settings via Group Policy from windows server 2003

Hi
We are still running Windows Server 2003 with a Win7 and Win8 desktop environment. I can control Win7 IE9 settings,
But Win8 systems are running IE10. We have an internal proxy server.
Is there any way to force the proxy settings to the Win8/IE10 or 11 systems .
i have tried with The IE 10 .adm template and applied gpo,but does not have any proxy settings for ie10 and no changes were applies
please can anyone help me regarding this
i want to apply GPO from windows server 2003 to windows 8 ie10/11
Thanks
KNC

Hi,
I agree with Zanderol24, we can install RSAT on a windows8 client, and then we can use Group Policy Management to manage group policy from the client.
For more information about RSAT, we can refer to the following link:
Remote Server Administration Tools (RSAT) for Windows Client and Windows Server (dsforum2wiki)
http://social.technet.microsoft.com/wiki/contents/articles/2202.remote-server-administration-tools-rsat-for-windows-client-and-windows-server-dsforum2wiki.aspx
For more detailed information about how to use GPP to configure the proxy setting for ie10 and ie11, we can refer to the following link:
How to configure Group Policy Preference settings for Internet Explorer 11 in Windows 8.1 or Windows Server 2012 R2
http://support.microsoft.com/kb/2898604
When we use GPPs you need to be aware of the F5-F8 keys:
Red / Green: GP Preferences doesn’t work even though the policy applied and after gpupdate \force
http://blogs.technet.com/b/grouppolicy/archive/2008/10/13/red-green-gp-preferences-doesn-t-work-even-though-the-policy-applied-and-after-gpupdate-force.aspx
Besides, aside from using group policy to manage IE, IEAK can also be used to do this.
For IEAK, the following article can be referred to for more information.
Internet Explorer Administration Kit (IEAK) Information and Downloads
http://technet.microsoft.com/en-in/ie/bb219517.aspx
Best Regards,
Erin

Windows 8 and IE10 not accepting Proxy Settings via Group Policy

We have recently introduced a couple of Windows 8 computers in our network, and we are having issues applying the Internet Explorer Proxy Server settings.
We use a Microsoft TMG 2010 server as our proxy server for accessing the internet.
We have been using a GPO with the following settings to automatically configure our Windows 7 computers running IE9 with the appropriate Proxy settings:
User Configuration\Policies\Windows Settings\Internet Explorer Maintenance\Connection/Proxy Settings
“Enable Proxy Settings” : Checked
“Address of proxy” : server.domain.local
“Port” : 8080
“Use the same proxy server for all addresses” : Checked
“Exceptions” : Here we have a list of several internal or partner sites that should not be proxied.
This GPO has worked beautifully for our Windows XP and Windows 7 users with IE 7, 8 and 9.
Now with Windows 8 and IE10, this no longer works.
I’ve therefore added a Windows Server 2012 Domain Controller to the network, and using GPMC on that new DC, I created a new GPO with the following settings:
User Configuration\Preferences\Control Panel Settings\Internet Settings\Internet Explorer 10
Now, seeing as these are preferences, it’s a little different. But, I’ve “checked off” the option “Use a proxy server for your LAN” as well as “Bypass proxy server for local addresses”.
Then I click on “Advanced” and setup all my proxy settings the way I would like them, including the proxy server name, port and exceptions list.
When this new group policy gets applied to my Windows 8 PC, the only setting that gets applied is the “Use a proxy server for your LAN”.
It does not configure the name or port of the proxy server nor does it configure the exceptions list.
If I go back to the GPMC, and edit the new GPO, the settings are all there.
However, if I just view the settings from the main GPMC screen (without opening the GPO itself),
I don’t see all of those settings (again, only the one “Use a proxy server…”)
What am I missing???

Hi All, - (Revised Answer by myself)<o:p></o:p>
I banged my head against the keyboard on this one for some time trying to get this group policy to apply. I
did every thing that was suggested, learning about the F6 and F7 keys to Green underline and Red underline the options required and not required. I even gave in and used the registry settings and it still did not work. It turned out that I had
2 issues. The first one is obvious and the second not so obvious, this is how it is setup:
I have a 2012 R2 Standard DC with Windows 8.1 clients/workstations and IE 11. As you are aware you must make
sure that the following are underlined in green:
Automatically detect settings - (but not ticked)<o:p></o:p>
Use proxy server for your LAN<o:p></o:p>
Bypass Proxy for local address<o:p></o:p>
Next I made sure that the following had red dotted lines:
Address<o:p></o:p>
This still didn't work, so I went through my 'Do Not use proxy servers for addresses beginning with' removed all
of these and then re-added one by one until the problem materialized. The first issue was when using wildcards I had added an entry with the following:
http://domain.subdomain.com/*
Then caused my proxy fields not to be applied, I re-added this just with:<o:p></o:p>
http://domain.subdomain.com/
<o:p>This next one is IMPORTANT.</o:p>
I had these entries in a Word document of which I had copied and pasted from the entry box for 'Do
Not use proxy servers for addresses beginning with'. As shown in the screen shot above provided by SVEN_BURGER I had very similar entries:
http://domain.subdomain.com/;10.*.*.*;172.27.*.*;http://172.27.*.*
Each time I copied and pasted the line (+ more) above the proxy field on the Windows 8.1 client
be blank after using 'gpupdate /force' I then noticed that in my Word document the whole string was being seen as 1 URL due to the http part at the beginning, so I changed my entry to look like this:
10.*.*.*;172.27.*.*;http://172.27.*.*;http://domain.subdomain.com/
I again noticed that this section:
http://172.27.*.*;http://domain.subdomain.com/
Was being seen as one URL in my Word document. To resolve this I had to add the URL's individually and
apply and OK these before going back in and making the next entry. So I ended up adding them all individually after separating the
URL's in my Word document.
I hope this helps.

ActiveX UAC and Proxy Settings via GPO

Hi there,
Wondering if anyone can help.
I am experiencing the following issue when trying to load ActiveX control without UAC prompts for standard users.
I have:
Configured ActiveXInstaller Service and configured allowed sites and settings via GPO.
Configured IE Security settings for the Trusted Zone to Allow ActiveX content to run via GPO.
Configured IE to use per user proxy settings via GPO.
Allowed the domain in our proxy and bypassed authentication for that domain.
Everything seems to be in place but I receive a UAC prompt for the Internet Explorer Add-on Installer UNLESS I either turn off the IE proxy settings or add the domain to the IE proxy exclusions list.
Unfortunately neither of these are options in our environment..
Anything I've missed?
Thanks!

Hi,
Before going further, what's the operating systems you are using? How did you configure
approved Installation Sites for ActiveX Controls and Active X installation policy for sites in Trusted zones settings?
Regarding how to configure these two settings, we can refer to the following article for double check.
Administering the ActiveX Installer Service in Windows 7
http://technet.microsoft.com/en-us/library/dd631688(v=ws.10).aspx
Besides, we can also run command gpresult/h gpreport.html with admin privileges to collect group policy result report to check if the policy settings are applied correctly.
Best regards,
Frank Shen

GPO Proxy Settings per User

I've spent days researching this but haven't found a situation quite like it. I have multiple users in a SBS environment. We use roaming profiles exclusively. I have 2 users (user A and user B) in the same OU "No Internet" that have dummy proxy
settings to prevent them from using the internet except for specifically allowed sites. These users log in to two different workstations (PC1 and PC2). The computers are in the same OU, "Windows7Desktops".
When User A logs in to PC1, the proxy settings are correctly applied. When User A logs in to PC2, the proxy settings do not apply. User B's proxy settings also apply on PC1, but not on PC2.
The workstations are identical builds, the same software is installed on each, both are running the same version of Windows 7 SP1.
I'm at a loss! My gut feeling is that there is a setting in the registry for the PCs that is different, but I've been unable to locate it. Any suggestions would be appreciated.

Hi DeannaM,
Would you please provide a general description for that how you configure the Proxy setting in Group Policy?
Did you mean that configure the proxy settings under User Configuration, and then link the GPO to a computer-based OU? If I misunderstand, or any details and updates, please feel free to let me know.
Based on your description, this issue seems that just occurred when user login PC2. Please use a user account
to login PC2, then run
gpresult command to collect group policy information and check.
By the way, would you please confirm whether PC2 was also belonged to another computer-based OU, or just belong
to this one OU? Please pay attention to
loopback mode. Just my guess.
Hope this helps.
Best regards,
Justin Gu

No proxy but pc still keeps settings from wsus gpo even now it is not in domain

the situation
I deployed a new image the computer was not a domain member. Before connecting to domain I connected the machine to
dedicated Internet connection (no corporate proxy) for making full updated from Microsoft site. Because I want to capture it back for future domain deployments and have maximum updates to date in the image.
Update failed. Checked Direct Access (NO PROXY). Refreshed Software Updates folder.
Windows update always showed the name of previous proxy server with the error. Local GPO were not configured.
Found one entry with the name of proxy in the registry. Tried different things. still not works. No name in Windows update log but deffinetely Windows Update agent still keeps some settings from previous GPO.
Before I wipe this thing, please
see the last WindowsUpdate. May be there is a solution...
Thanks.
2014-08-26 12:41:44:098 484 820 Service *************
2014-08-26 12:41:44:113 484 820 Service ** START ** Service: Service startup
2014-08-26 12:41:44:129 484 820 Service *********
2014-08-26 12:41:44:285 484 820 Agent   * WU client version 7.6.7600.256
2014-08-26 12:41:44:285 484 820 Agent   * Base directory: C:\windows\SoftwareDistribution
2014-08-26 12:41:44:285 484 820 Agent   * Access type: No proxy
2014-08-26 12:41:44:285 484 820 Agent   * Network state: Connected
2014-08-26 12:42:30:118 484 820 Report CWERReporter::Init succeeded
2014-08-26 12:42:30:118 484 820 Agent *********** Agent: Initializing Windows Update Agent ***********
2014-08-26 12:42:30:118 484 820 Agent *********** Agent: Initializing global settings cache ***********
2014-08-26 12:42:30:118 484 820 Agent   * WSUS server:
2014-08-26 12:42:30:118 484 820 Agent   * WSUS status server:
2014-08-26 12:42:30:118 484 820 Agent   * Target group: (Unassigned Computers)
2014-08-26 12:42:30:118 484 820 Agent   * Windows Update access disabled: No
2014-08-26 12:42:30:149 484 820 DnldMgr Download manager restoring 0 downloads
2014-08-26 12:42:30:165 484 820 AU ########### AU: Initializing Automatic Updates ###########
2014-08-26 12:42:30:165 484 820 AU   # WSUS server:
2014-08-26 12:42:30:165 484 820 AU   # Detection frequency: 22
2014-08-26 12:42:30:165 484 820 AU   # Approval type: Pre-install notify (User preference)
2014-08-26 12:42:30:165 484 820 AU   # Auto-install minor updates: No (User preference)
2014-08-26 12:42:30:165 484 820 AU   # Will interact with non-admins (Non-admins are elevated (User preference))
2014-08-26 12:42:30:165 484 820 Report *********** Report: Initializing static reporting data ***********
2014-08-26 12:42:30:165 484 820 Report   * OS Version = 6.1.7601.1.0.65792
2014-08-26 12:42:30:165 484 820 Report   * OS Product Type = 0x00000030
2014-08-26 12:42:30:492 484 820 Report   * Computer Brand = Hewlett-Packard
2014-08-26 12:42:30:492 484 820 Report   * Computer Model = HP EliteDesk 800 G1 SFF
2014-08-26 12:42:30:508 484 820 Report   * Bios Revision = L01 v02.30
2014-08-26 12:42:30:508 484 820 Report   * Bios Name = Default System BIOS
2014-08-26 12:42:30:508 484 820 Report   * Bios Release Date = 2014-04-22T00:00:00
2014-08-26 12:42:30:508 484 820 Report   * Locale ID = 3084
2014-08-26 12:42:30:570 484 820 AU Successfully wrote event for AU health state:0
2014-08-26 12:42:30:570 484 820 AU Initializing featured updates
2014-08-26 12:42:30:570 484 820 AU Found 0 cached featured updates
2014-08-26 12:42:30:570 484 820 AU Successfully wrote event for AU health state:0
2014-08-26 12:42:30:570 484 820 AU Successfully wrote event for AU health state:0
2014-08-26 12:42:30:570 484 820 AU AU finished delayed initialization
2014-08-26 12:42:30:617 484 528 PT WARNING: PTError: 0x80072ee6
2014-08-26 12:42:30:617 484 528 PT WARNING: Initialization failed for Protocol Talker Context: 0x80072ee6
2014-08-26 12:42:30:617 484 528 Report WARNING: Reporter failed to upload events with hr = 80072ee6.
2014-08-26 12:42:30:617 484 528 PT WARNING: PTError: 0x80072ee6
2014-08-26 12:42:30:617 484 528 PT WARNING: Initialization failed for Protocol Talker Context: 0x80072ee6
2014-08-26 12:42:30:617 484 528 Report WARNING: Reporter failed to upload events with hr = 80072ee6.
2014-08-26 12:42:35:609 484 528 Report CWERReporter finishing event handling. (00000000)
2014-08-26 12:53:55:661 484 528 PT WARNING: PTError: 0x80072ee6
2014-08-26 12:53:55:661 484 528 PT WARNING: Initialization failed for Protocol Talker Context: 0x80072ee6
2014-08-26 12:53:55:661 484 528 Report WARNING: Reporter failed to upload events with hr = 80072ee6.
"When you hit a wrong note it's the next note that makes it good or bad". Miles Davis

Hi,
Is this image used to be a WSUS client? According to the logs, the client seems to try to connect a WSUS server.
To remove the WSUS client setting, we have two options:
Set HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU\UseWUServer to 0.
Delete entire HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\
Note: Serious problems might occur if we modify the registry incorrectly. Therefore, make sure that you follow these steps carefully. For added protection, back up the registry before you modify it. Then, we can restore the registry if a problem
occurs.
Best Regards.
Steven Lee
TechNet Community Support

Help Applying preset GPOs to a local Windows 7 installation?

Hello All. Thank you for taking the time to visit my thread.
I am in need of serious assistance and would like to know how I could apply preset GPOs to a Windows 7 installation.
My main objective is to have a bunch of GPOs including security policies and various other settings preset and preconfigured to be later configured settings on a fresh installation of Windows.
I have been using Security Compliance Manager so far to do this and this is what it recommends, and I've gotten this far, but I am not running a server.
GPME never loads because I am not a "domain user" rather a local user. How do I make myself a domain user without a server?
Please do help, I am slightly lost at this point.
Thank you again,
Cryoshadow

Hi,
SCM includes the LocalGPO tool which allows you to manage the local group policy objects (LGPO) on non-domain joined computers. You can use LocalGPO to backup the LGPO from a stand-alone machine. You can also use it to apply the settings from a GPO backup
to other computers, this includes GPO backups created by LocalGPO, SCM, or the Active Directory Domain Services GPO backups created with the Group Policy Management Console.
LocalGPO.msi - Excellent MS Tool
http://gallery.technet.microsoft.com/LocalGPOmsi-Excellent-MS-2593b2eb
Alex Zhao
TechNet Community Support

"Make proxy settings per-machine (rather than per user)" Group Policy setting not applied until login as a local Administrator

We want to deploy to all our desktop the pac file to configure proxy. We have a Windows 2008 R2 server, and i've enabled the GPO "Make proxy settings per-machine (rather than per user)", and i've add a registry key AutoConfigURL in "HKLM\Software\Microsoft\Windows\Current
Version\Internet Settings" with the pac file link.
I've tested on my pc, and all was configured without any problem. I've try to login to my computer with another user (without admin rights) and the automatic configuration proxy was compiled and not modificable. It's seems that all works.
But, our users are not local admin, so i've tried to deploy the GPO in a collegue computer. I've forced the update of GPO, checked on registry that all new keys are added, and i've reboot the pc. When i've check on IE settings, autoconfig URL was empty and
grey. I'm disconnected from user and i've login to the pc with a local admin. With my surprise, the IE settings was compiled. When i'm come bac to the user profile the IE settings was compiled and not modificable.
The problem is: i've over 750 users in 3 countries, and i don't want grant them the local admin permissions. How can i configure proxy settings via GPO without login to every machine at least one time?

> have a Windows 2008 R2 server, and i've enabled the GPO "Make proxy
> settings per-machine (rather than per user)", and i've add a registry
> key AutoConfigURL in "HKLM\Software\Microsoft\Windows\Current
> Version\Internet Settings" with the pac file link.
In the past, we experienced various issues with machine proxy settings,
so we don't use them anymore. The simple approach:
Block access to the connections page through ADM template settings and
deploy the proxy through GPP Internet Settings.
This is what we do (with a pac file, too), and it works well :)
Martin
Mal ein
GUTES Buch über GPOs lesen?
NO THEY ARE NOT EVIL, if you know what you are doing:
Good or bad GPOs?
And if IT bothers me - coke bottle design refreshment :))

Proxy Settings Re-Appear after Reboot in Registry Post Malware Clean (Windows 8.1 x64)

Hey Guys -
My main system at home hosts many different things for me. Because I'm an idiot and had protection disabled, I caught some malware which I cleaned off soon
afterwards. The malware was listed as Trojan.Generic.KD or something similar. It had enabled Proxy and set it to 127.0.0.1:58054. I ran Malwarebytes, Spybot, then ExecuteIt to clean the malware off and currently the scans from all 3 apps
come back clean. I also had to manually disable proxy via IE settings.
I have one specific app which for whatever reason will use Proxy settings if they are there over anything else and doesn't offer and configuration to disable it.
Even though proxy is disabled (and cleared) in IE, this app still doesn't work and I still seemingly get redirected to ads in Chrome sometimes. The log file of the app showed it was trying to connect through 127.0.0.1:58054. The thing is,
IE Settings still show Proxy disabled!
The Issue
I checked many things are read a few articles to try to fix this including different Windows 8.1 settings, local Group Policy, startup items, checking Run keys
in HKLM and HKCU for "out of place" entries, and more. Finally, I opened the registry and did s keyword search for ":58054" and found one key with it. I cleared out all of the data and set the EnableProxy string from "1"
to "0", rebooted, and tried again but the app still failed with the same log message. I went back into the registry and found out that the strings I changed had all been changed back! Below is the key / strings I'm talking about which
are located in HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet
Settings. It's odd because I usually deal with HKLM and HKCU and don't think I've ever worked in ".DEFAULT" on any system ever before.
I know that a full OS re-install is suggested - and I actually do it every 3-4 months religiously - but - I currently don't have the time for the full day it
takes to perform due to how many things it hosts.
Any ideas on how I can get this to stop coming back after each restart until I can perform the re-install? Below are the system specs. Thanks!
System Specs
- Intel i7-3770k / 16gb RAM
- x3 partitions 256gb SSD for OS & Apps / 24tb Disk Pool for Storage / 500gb Hybrid drive for App installs
- Windows 8.1 Update 1 x64 (Fully Patched)
Thanks again!
Ben K.

Hi,
.default is the profile for the Local System account and is an alias for
HKEY_USERS\S-1-5-18, Consequently, settings in HKEY_USERS\.Default are used by programs and services that run as Local System.
In addition to HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet
Settings, please also check HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet
Settings and HKCU\Software\Microsoft\Windows\CurrentVersion\Internet
Settings, make sure all proxy server disabled, then press F5 to refresh registry, check the application, if the issue disappears, the the registry entry is the culprit. Then please reboot the PC, if the issue appears again, the virus is not cleared in your
system. In this case, please try other virus clean program if possible, meanwhile, check if there're unknown software installed in your system.
Yolanda Zhu
TechNet Community Support

How do you apply the school proxy settings to the ipad to filter website searches?

How do you apply the school proxy settings to the ipad to filter website searches?

Hi Stebop1987,
You will want to apply a configuration profile with Global HTTP proxy settings to your proxy server. Use Apple Configurator or an MDM to deploy the configuration profile to your fleet of iPads. I recommend you contact your web filter provider for detials on what proxy details to enter in the configuration profile (type, server, port, username, password).
Hope this helps!
~Joe

Windows 8 / IE11 forget proxy settings applied by GPO on reboot

Similar Messages

Maybe you are looking for