PROBLEM: IE 7 will not open (says the network connection has a problem) sites that require HTTPS. We have checked EVERYTHING we can think of, including Popup Blocker, Phishing, list of Trusted sites, all possible Advanced Tab settings, Add-ons (both temp no-add-on mode and disabling one at a time), and Protected mode. Profiles not in use on these PCs are deleted by a script when GPO is applied at reboot.
We have about a hundred imaged XP Pro boxes with this problem. I've tried everything I could think of, and I STRONGLY suspect either a profile issue, or a IE issue. The problem is intermittent using even the same account (log on, try it, log off, immediately log back on, try it again, then log off again).
To the best of my knowledge, this is not a domain GPO, or local policy issue. Hardware NIC is good and all network issues (such as a wierd firewall rule) is also rulled out, because in all cases, Mozilla Firefox always works.
We are trying to avoid having to reimage all these many computers, in the middle of a difficult time period, and would prefer to simply patch them.
REFERENCE URL's:
IE7 release notes:
http://msdn2.microsoft.com
General troubleshooting info:
http://blogs.msdn.com/ie/a
Unable to open secure websites (https) in Internet Explorer
http://www.techbytes.ca/te
Protected Mode in Vista IE7
http://blogs.msdn.com/ie/a
--------------------------
ANY (and I do mean ANY) ideas, references to Q articles, Technet articles, etc., at all would be greatly appreciated and REWARDED with points.
Thanks so much,
K
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Save solutions to your questions, answers you’ve discovered through searching plus helpful articles in your personal knowledgebase for easy future access.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.
Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
Some ideas:
- what is your corporate firewall/proxy ?
- is it configured for authentication ? If so, try to disable it.
- would your workstation access HTTPS if would go not through firewall/proxy ?
- you mentioned cloning. Which tool do you use for that ? Does it changes computer SID after cloning ?
- if out of clues, try capturing network packets with sniffer like Wireshark. If you'll find something suspicious, put it here :)
Please check if the windows firewall is disabled also see the below link for security settings on IE7 http://www.ie-vista.com/se
Hi All, thanks again so much for the help.
In answer to your questions, the firewall.cpl is OFF (only one ethernet IP and one NIC per PC) for all connections. There is no proxy/firewall configured, it is auto-detect. Nevertheless, that is NOT the issue, and as I originally stated above in my initial post has been ruled out because Firefox always works (same logon session on windows, same account credentials running the .exe, and same OS environment) for the same URLs where IE will not. The cloning tool we use is Ghost, and the PC's are imaged by broadcasting the image one room at a time (Ghost v.8 server). SIDs are fine, and even if they were not, there is no means by which they would be relevant to these symptoms. If you are in the know regarding encryption technology, then you are aware already that most sites use 64 or 128 bit (Gmail, Yahoo Mail, and a few other sites with SSL certs, where this problem is occuring) --- which is why I also mentioned originally that the browser has the default 128 bit capability (default IE 7 install).
Again, I really appreciate the help, and will keep checking back to this question for more. Thanks so much!,
~K
Souseran,
I have verified that this problem is with 128 bit SSL sites. I have attempted to enable TLS (as well as various combinations and enabling of virtually everything else I could in Advanced properties) and that did not make a different.
Ubig,
There is no proxy configured and no proxy exists between these clients and the internet. Other than ethernet broadcasts, ARP, DNS, and of course being routed out to our very fat pipe connection to the internet routers, there is no other possible routing of packets for these TCP/IP sessions.
Business Accounts
Answer for Membership
by: souseranPosted on 2007-10-31 at 14:28:42ID: 20189221
Does this happen with all SSL sites, or only one or a few? Can you access the site(s) with a different version of IE or another browser such as Firefox? Assuming that it is not all of them, for the sites that fail, can you check the level of encryption used on them vs what is used in your browser?