Solved

Proxy Server settings from W2K domain policy

Posted on 2004-09-07
10
237 Views
Last Modified: 2010-03-18
We use W2K AD domain policy to set our IE proxy server settings. Until recently we use ISA Server 2000 locally on one of our servers, but have now changed to an off site url for the proxy. Most of the time users log on and get the correct settings, but sometimes the old settings reappear! I have uninstalled the ISA Server software so where can this be coming from?

We don't have "automatically detect" enabled. Sometimes you can untick the incorrect proxy settings, reboot, and it comes good, but sometimes everthing is greyed out and we have to use regedit to clear out the incorrect settings. All the DC servers are synced and all have the correct settings so I'm baffled as to where the wrong settings are coming from !!
0
Comment
Question by:proneill
  • 4
  • 4
10 Comments
 
LVL 11

Expert Comment

by:Eric
ID: 12000144
hmm.. try making a policy disable the old policy , then have a policy later enable it.  I think once all clients are switched over it will be corrected.
Its not spiratic on the same pc's is it?  

also what if you forward the DNS to the extrnal host
0
 

Author Comment

by:proneill
ID: 12015656
Thanks for your response. Not sure how I would make a policy to disable - it only allows for enabling in the GP Proxy Settings.

I don't know what spiratic means but on the same pc it can be ok on one user's logon but not another.

Our dns is internal except for our web site and mail settings which are done on an external host. I can't make any changes to this setup
0
 

Author Comment

by:proneill
ID: 12015674
I've just realised what you probably mean - put the settings so that there's no proxy, then later re-enable it. I'll give this a try!
0
 
LVL 11

Expert Comment

by:Eric
ID: 12017081
hehe I spell wrong because I say things wrong.

spiratic=sporadic  :D

meaning... does it work sometimes with the same user, and not other times.

also try putting a logon script in the problematic GPO.

make it say

net send "yourcomputername" %username% GPO success on %computername%


it will give you a popup window on your pc if the script is executing.  Or simply put a pause in it, so it will stay visable.

and you can confirm its running

IE:

@echo Applied GPO Test
@echo If you see this message the client has successfuly applied GPO "GPO Name"
pause



Just ideas for troubleshooting.  
0
Control application downtime with dependency maps

Visualize the interdependencies between application components better with Applications Manager's automated application discovery and dependency mapping feature. Resolve performance issues faster by quickly isolating problematic components.

 
LVL 11

Expert Comment

by:Eric
ID: 13168143
Bah....
did my suggestion work?
0
 

Author Comment

by:proneill
ID: 13181418
Had to pay Microsoft to investigate this one. Turned out to be a synch error on one of the DCs
0
 
LVL 11

Expert Comment

by:Eric
ID: 13182951
ahh.. been there.

Were you able to repair it or did they make you reload the servers?

They tried to get me to reload, but I said no, then suddenly they came up with a solution :)
0
 

Accepted Solution

by:
modulo earned 0 total points
ID: 13190524
PAQed with points refunded (250)

modulo
Community Support Moderator
0
 

Author Comment

by:proneill
ID: 13190776
This was the gist of the registry hack:

HKey Local Machine\System\CurrentControlSet\Services\NTFRS\Parameters\Backup\Restore\ProcessatStartup. If there is not an entry forBurflags create one, edit, menu,new dword value, Burflags, OK. If there is one, r-click, modify, type d2 in value data box, OK.

The net stop NTFRS, net start NTFRS.
0

Featured Post

Control application downtime with dependency maps

Visualize the interdependencies between application components better with Applications Manager's automated application discovery and dependency mapping feature. Resolve performance issues faster by quickly isolating problematic components.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Have you ever set up your wireless router at home or in the office to find that you little pop-up bubble in the bottom right-hand corner of Windows read "IP Conflict - One of more computers on the network have been assigned the following IP address"…
A common practice in small networks is making file sharing easy which works extremely well when intra-network security is not an issue. In essence, everyone, that is "Everyone", is given access to all of the shared files - often the entire C: drive …
Migrating to Microsoft Office 365 is becoming increasingly popular for organizations both large and small. If you have made the leap to Microsoft’s cloud platform, you know that you will need to create a corporate email signature for your Office 365…
This is used to tweak the memory usage for your computer, it is used for servers more so than workstations but just be careful editing registry settings as it may cause irreversible results. I hold no responsibility for anything you do to the regist…

863 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

21 Experts available now in Live!

Get 1:1 Help Now