Solved

GP Problem with Proxy settings

Posted on 2007-03-26
7
1,144 Views
Last Modified: 2013-12-08
Hi experts,

having some issues with GP at the moment we changed from a software firewall using Proxy server to a hardware one which didnt need any proxy settings.

So i gointo the default domain policy and change it from ticked Proxy settings and close and wait.. 4 days later and all the servers say the default domain policy is setting the proxy server to unticked. But if i use (Newly found) the RSoP and check a user out it says that that Proxy settings are set and that it getting it from the default domain policy. All computers have been restarted numberous times (As i say i changed the policy 4+ days ago) so i dont get why its still doing it..

Any suggestions..

Thanks
Stephen
0
Comment
Question by:stebennettsjb
  • 3
  • 3
7 Comments
 
LVL 6

Expert Comment

by:Eric
ID: 18792354
do a gpupdate /forceupdate to make sure all of the group policies are going through all of the domain controllers.

check to make sure that the client computers are getting the group policy settings, and not using cached credentials and settings.

could it be a dns issue ?
 - ipconfig /flushdns
 - ipconfig /registerdns

that's all i can think of right now.

0
 
LVL 1

Expert Comment

by:Miahmichno
ID: 18794566
We had a similar situation:
I ended having to create a GPO that was imported.
1) Open Group Policy
2) Go to user configuration | Internet Explorer Maintenance | Connection Settings
3) Choose import ... from current machine. (make sure that you import the settings that you want)
4) (OPTIONAL ONLY), create a registry change push, we use Prism.  Change the registry entries of:
HKCU\SW\MS\Windows\CurrentVersion\InternetSettings\ProxyEnable = 0
HKLM\SW\MS\Windows\CurrentVersion\InternetSettings\ProxyEnable = 0
0
 

Author Comment

by:stebennettsjb
ID: 18798694
thanks for the info i will try them both out..

0
PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

 

Author Comment

by:stebennettsjb
ID: 18799133
OK heres the update

tried doing

gpupdate /flush
reboot

on all servers and then on all machines

no joy


ive done the dns /flushdns as well with no joy also..

not sure how this importing GPO works, am i importing on the client or the server?

Thanks for the info and any more ideas welcome..

0
 
LVL 1

Accepted Solution

by:
Miahmichno earned 500 total points
ID: 18804964
You will use the GPMC (Group Policy Management Console) from Microsoft to make the changes to your Active Directory.  Once GPMC is installed follow these steps:
1) Open Group policy Management
2) Right click on an OU that you want to use, I suggest a test OU to begin with.
3) Click 'Create and link a GPO here...'
4) Give it a name and press enter
5) Find and right click on the new policy, click edit
6) A new window opens labeled group policy
7) Under 'User Conviguration', drill down to 'Windows Settings'-'Internet Explorer Maintenance'-'Connection'
8) Double click 'Connection Settings'
9) Choose 'Import the current Connection Settings from this machine'
10) Click Modify Settings, and make sure that they are correct
11) Click OK, and close GPMC

Now that you have created the policy and linked it to a test OU, put a couple of test users into the that OU.  Log in to a PC with those users, and see your results.

Once you are satified with the results, Edit your default domain policy or link your new IE policy to the top level of your domain.

Good luck
0
 
LVL 1

Expert Comment

by:Miahmichno
ID: 18805084
The situation I have seen is where previous technician's will set the proxy via a local GP rather than a domain GP.  I can not explain why the domain does not override the local it there are no check marks set for static proxy, but they haven't in my worlds.  

The only way I can explain that the process I outlined above is working, is because it is actually applying an imported setting rather than no setting.  If that makes any sense at all.

The way to apply a registy setting it to either run it from a login script (not recommended)
or as a GP logon:
Part One (Create the reg file)

------  snip ------
Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable"=dword:00000000
"ProxyAddress"=""
"ProxyPort"=""
[HKEY_Local_Machine\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable"=dword:00000000
"ProxyAddress"=""
"ProxyPort"=""

------  snip ------

Part Two: (create new Domain Group Policy like before)
Instead of setting the IE settings do the following:
1) Edit the policy
2) Drill down to 'User Configuration'-'Windows Settings'-'Scripts (Logon/Logoff)
3) Double Click 'Logon'
4) Click Add | Click Browse | Copy files into the newly opened folder
5) Double Click or open new reg file
6) Click OK until you are all the way out

Again, test this on a small group prior to implementing across the network
0
 

Author Comment

by:stebennettsjb
ID: 18814663
well a solution has been found.. a wise man came over and toke a look.. and its working now.

He changed:

sysvol\gemdom.gem-a.local\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\USER\Microsoft\IEAK\install.ins

from pointing to servers to this

[Branding]
NoLinks=1
GPVersion=6.0.6000.16414
NoFavorites=1
[DesktopObjects]
[Proxy]
Proxy_Enable=0
[URL]
AutoDetect=0
AutoConfig=0


Thankyou Miahmichno for the help :)

0

Featured Post

Efficient way to get backups off site to Azure

This user guide provides instructions on how to deploy and configure both a StoneFly Scale Out NAS Enterprise Cloud Drive virtual machine and Veeam Cloud Connect in the Microsoft Azure Cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I annotated my article on ransomware somewhat extensively, but I keep adding new references and wanted to put a link to the reference library.  Despite all the reference tools I have on hand, it was not easy to find a way to do this easily. I finall…
If you are a web developer, you would be aware of the <iframe> tag in HTML. The <iframe> stands for inline frame and is used to embed another document within the current HTML document. The embedded document could be even another website.
Google currently has a new report that is in beta and coming soon to Webmaster Tool accounts. This Micro Tutorial will highlight new features for Google Webmaster Tools.
How to create a custom search shortcut to site-search Experts Exchange using Google in the Firefox browser. This eliminates the need to type out site:experts-exchange.com whenever you want to search the site. Launch your Bookmark Menu: Press 'Ctrl +…

910 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

20 Experts available now in Live!

Get 1:1 Help Now