IE Proxy settings not getting applied from group policy

Hi All

I'm having problems with only two laptops which aren't getting their internet proxy settings applied from group policy when the users and myself (domain admin) log on.

We are running a windows 2003 server environment with windows xp and internet explorer 7. Users have roaming profiles. Now I don't think there is anything wrong with our group policies, domain, dns as this problem is only affecting these two laptops as all the other desktops and laptops are working fine when these two users and other users log on to them.

I've tried removing the computer from the domain and deleted the computer account from AD and then rejoined it but that hasn't worked. If I run gpupdate from the command prompt on the two affected laptops then it updates the proxy and all is fine but I don't understand why this isn't done during the logon process. It seems that any changes I make to the computer are reverted back to the previous settings when I reboot even if I manually add the proxy settings to the registry.

We did make a group policy change to the proxy settings a short while ago but since the change the update was applied to all pc's but I can't remember if this problem started at the same time as when the change was made. It was certainly around the same time when this problem occured.

Any help would be appreciated as I've gone in circles trying to find a solution to this.
wonder_boy07Asked:
Who is Participating?
 
wonder_boy07Connect With a Mentor Author Commented:
Hey mpfister

Thanks for getting back to me.

I've managed to find the cause of the problem as to why these two laptops weren't getting their proxy settings applied. It was caused by a service. I opened MSCONFIG and disabled all services under the services tab only after hiding all the microsoft services. I had to enable them one at a time to see which one it was but eventually found the culprit.

Thanks for your help anyway.

0
 
Michael PfisterCommented:
I assume the 2 PCs have a problem processing the GPO during logon.
You can troubleshoot the group policy process by creating a userenv.log by following this article http://support.microsoft.com/kb/221833/en-us
0
 
Michael PfisterCommented:
Also check the computer's event log for errors/warning.
Are these machines connected via WAN or LAN?
0
The new generation of project management tools

With monday.com’s project management tool, you can see what everyone on your team is working in a single glance. Its intuitive dashboards are customizable, so you can create systems that work for you.

 
wonder_boy07Author Commented:
Hi mpfister

Here is some data from the userenv.log

USERENV(5a8.5cc) 15:49:34:815 ImpersonateUser: Failed to impersonate user with 5.
USERENV(5a8.5cc) 15:49:34:815 GetUserNameAndDomain Failed to impersonate user
USERENV(5a8.5cc) 15:49:34:815 ImpersonateUser: Failed to impersonate user with 5.
USERENV(5a8.5cc) 15:49:34:815 GetUserDNSDomainName: Failed to impersonate user
USERENV(5a8.5cc) 15:49:34:878 ImpersonateUser: Failed to impersonate user with 5.
USERENV(5a8.5cc) 15:49:34:878 GetUserNameAndDomain Failed to impersonate user
USERENV(5a8.5cc) 15:49:34:894 ImpersonateUser: Failed to impersonate user with 5.
USERENV(5a8.5cc) 15:49:34:894 GetUserDNSDomainName: Failed to impersonate user
USERENV(5a8.5cc) 15:49:34:941 ImpersonateUser: Failed to impersonate user with 5.
USERENV(5a8.5cc) 15:49:34:941 GetUserNameAndDomain Failed to impersonate user
USERENV(5a8.5cc) 15:49:34:941 ImpersonateUser: Failed to impersonate user with 5.
USERENV(5a8.5cc) 15:49:34:941 GetUserDNSDomainName: Failed to impersonate user
USERENV(5a8.5cc) 15:49:34:972 ImpersonateUser: Failed to impersonate user with 5.
USERENV(5a8.5cc) 15:49:34:972 GetUserNameAndDomain Failed to impersonate user
USERENV(5a8.5cc) 15:49:34:988 ImpersonateUser: Failed to impersonate user with 5.
USERENV(5a8.5cc) 15:49:34:988 GetUserDNSDomainName: Failed to impersonate user
USERENV(5a8.5cc) 15:49:35:003 ImpersonateUser: Failed to impersonate user with 5.
USERENV(5a8.5cc) 15:49:35:003 GetUserNameAndDomain Failed to impersonate user
USERENV(5a8.5cc) 15:49:35:582 ImpersonateUser: Failed to impersonate user with 5.
USERENV(5a8.5cc) 15:49:35:582 GetUserDNSDomainName: Failed to impersonate user
USERENV(ce0.cd4) 15:49:36:146 LibMain: Process Name:  C:\WINDOWS\system32\WgaTray.exe
USERENV(c98.cbc) 15:49:37:852 LibMain: Process Name:  C:\WINDOWS\Explorer.EXE
USERENV(eb8.ec0) 15:49:38:510 LibMain: Process Name:  C:\Program Files\ThinkPad\ConnectUtilities\SvcGuiHlpr.exe
USERENV(eb8.ec0) 15:49:38:541 GetProfileType:  Profile already loaded.
USERENV(eb8.ec0) 15:49:38:541 GetProfileType: ProfileFlags is 2
USERENV(eb8.ec0) 15:49:38:541 ImpersonateUser: Failed to impersonate user with 5.
USERENV(eb8.ec0) 15:49:38:541 GetUserNameAndDomain Failed to impersonate user
USERENV(eb8.ec0) 15:49:38:572 ImpersonateUser: Failed to impersonate user with 5.
USERENV(eb8.ec0) 15:49:38:572 GetUserDNSDomainName: Failed to impersonate user
USERENV(c98.ef4) 15:49:38:635 GetProfileType:  Profile already loaded.
USERENV(eb8.ec0) 15:49:38:729 ImpersonateUser: Failed to impersonate user with 5.
USERENV(eb8.ec0) 15:49:38:760 GetUserNameAndDomain Failed to impersonate user
USERENV(c98.ef8) 15:49:38:760 GetProfileType:  Profile already loaded.
USERENV(c98.ef8) 15:49:38:760 GetProfileType: ProfileFlags is 2
USERENV(eb8.ec0) 15:49:38:776 ImpersonateUser: Failed to impersonate user with 5.
USERENV(eb8.ec0) 15:49:38:776 GetUserDNSDomainName: Failed to impersonate user
USERENV(eb8.ec0) 15:49:38:823 ImpersonateUser: Failed to impersonate user with 5.
USERENV(eb8.ec0) 15:49:38:823 GetUserNameAndDomain Failed to impersonate user
USERENV(eb8.ec0) 15:49:38:839 ImpersonateUser: Failed to impersonate user with 5.
USERENV(eb8.ec0) 15:49:38:839 GetUserDNSDomainName: Failed to impersonate user
USERENV(230.23c) 15:49:42:314 LibMain: Process Name:  C:\WINDOWS\system32\rundll32.exe
USERENV(9f0.a14) 15:49:42:392 LibMain: Process Name:  C:\Program Files\ThinkPad\Utilities\TpKmapAp.exe
USERENV(104.114) 15:49:44:521 LibMain: Process Name:  C:\WINDOWS\system32\rundll32.exe
USERENV(700.e7c) 15:49:48:669 LibMain: Process Name:  C:\WINDOWS\system32\userinit.exe
USERENV(c98.cbc) 15:49:57:420 ImpersonateUser: Failed to impersonate user with 5.
USERENV(c98.cbc) 15:49:57:420 GetUserNameAndDomain Failed to impersonate user
USERENV(c98.cbc) 15:49:57:436 ImpersonateUser: Failed to impersonate user with 5.
USERENV(c98.cbc) 15:49:57:436 GetUserDNSDomainName: Failed to impersonate user
USERENV(c98.cbc) 15:49:57:451 ImpersonateUser: Failed to impersonate user with 5.
USERENV(c98.cbc) 15:49:57:451 GetUserNameAndDomain Failed to impersonate user
USERENV(c98.cbc) 15:49:57:451 ImpersonateUser: Failed to impersonate user with 5.
USERENV(c98.cbc) 15:49:57:467 GetUserDNSDomainName: Failed to impersonate user
USERENV(c98.cbc) 15:49:57:467 ImpersonateUser: Failed to impersonate user with 5.
USERENV(c98.cbc) 15:49:57:467 GetUserNameAndDomain Failed to impersonate user
USERENV(c98.cbc) 15:49:57:483 ImpersonateUser: Failed to impersonate user with 5.
USERENV(c98.cbc) 15:49:57:483 GetUserDNSDomainName: Failed to impersonate user
USERENV(ec4.f18) 15:50:03:916 LibMain: Process Name:  C:\Program Files\Picasa2\PicasaMediaDetector.exe
USERENV(804.410) 15:50:06:311 LibMain: Process Name:  C:\WINDOWS\system32\ctfmon.exe
USERENV(2f4.eb8) 15:50:06:327 LibMain: Process Name:  C:\WINDOWS\system32\mobsync.exe
USERENV(804.410) 15:50:06:468 GetProfileType:  Profile already loaded.
USERENV(804.410) 15:50:06:546 GetProfileType: ProfileFlags is 2
USERENV(bd0.aa0) 15:50:06:593 LibMain: Process Name:  C:\Program Files\Google\Google Desktop Search\GoogleDesktopDisplay.exe
USERENV(bd0.aa0) 15:50:06:625 ImpersonateUser: Failed to impersonate user with 5.
USERENV(bd0.aa0) 15:50:06:640 GetUserNameAndDomain Failed to impersonate user
USERENV(bd0.aa0) 15:50:06:656 ImpersonateUser: Failed to impersonate user with 5.
USERENV(bd0.aa0) 15:50:06:656 GetUserDNSDomainName: Failed to impersonate user
USERENV(bd0.aa0) 15:50:06:672 ImpersonateUser: Failed to impersonate user with 5.
USERENV(bd0.aa0) 15:50:06:672 GetUserNameAndDomain Failed to impersonate user
USERENV(bd0.aa0) 15:50:06:672 ImpersonateUser: Failed to impersonate user with 5.
USERENV(bd0.aa0) 15:50:06:672 GetUserDNSDomainName: Failed to impersonate user
USERENV(bd0.aa0) 15:50:06:969 ImpersonateUser: Failed to impersonate user with 5.
USERENV(bd0.aa0) 15:50:07:063 GetUserNameAndDomain Failed to impersonate user
USERENV(bd0.aa0) 15:50:07:157 ImpersonateUser: Failed to impersonate user with 5.
USERENV(bd0.aa0) 15:50:07:172 GetUserDNSDomainName: Failed to impersonate user
USERENV(bd0.e4c) 15:50:07:266 ImpersonateUser: Failed to impersonate user with 5.
USERENV(bd0.e4c) 15:50:07:266 GetUserNameAndDomain Failed to impersonate user
USERENV(bd0.e4c) 15:50:07:282 ImpersonateUser: Failed to impersonate user with 5.
USERENV(bd0.e4c) 15:50:07:282 GetUserDNSDomainName: Failed to impersonate user
USERENV(ee8.df8) 15:50:07:564 LibMain: Process Name:  C:\WINDOWS\system32\svchost.exe
USERENV(73c.770) 15:50:08:628 LibMain: Process Name:  C:\WINDOWS\system32\rundll32.exe
USERENV(f98.18c) 15:50:09:536 LibMain: Process Name:  C:\PROGRA~1\SYMANT~2\VPTray.exe
USERENV(e80.fec) 15:50:10:256 LibMain: Process Name:  C:\Program Files\Common Files\Symantec Shared\ccApp.exe
USERENV(e1c.d5c) 15:50:11:086 LibMain: Process Name:  C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
USERENV(e1c.d5c) 15:50:11:196 ImpersonateUser: Failed to impersonate user with 5.
USERENV(e1c.d5c) 15:50:11:352 GetUserNameAndDomain Failed to impersonate user
USERENV(e1c.d5c) 15:50:11:509 ImpersonateUser: Failed to impersonate user with 5.
USERENV(e1c.d5c) 15:50:11:540 GetUserDNSDomainName: Failed to impersonate user
USERENV(e1c.d5c) 15:50:11:775 ImpersonateUser: Failed to impersonate user with 5.
USERENV(e1c.d5c) 15:50:11:790 GetUserNameAndDomain Failed to impersonate user
USERENV(e1c.d5c) 15:50:11:806 ImpersonateUser: Failed to impersonate user with 5.
USERENV(e1c.d5c) 15:50:11:822 GetUserDNSDomainName: Failed to impersonate user
USERENV(10a4.10ac) 15:50:13:418 LibMain: Process Name:  C:\WINDOWS\system32\imapi.exe
USERENV(12f8.12fc) 15:50:18:083 LibMain: Process Name:  C:\WINDOWS\system32\userinit.exe
USERENV(a40.a44) 15:50:20:181 LibMain: Process Name:  C:\Program Files\Microsoft Office Communicator\Communicator.exe
USERENV(1468.1470) 15:50:25:065 LibMain: Process Name:  C:\WINDOWS\system32\rundll32.exe
USERENV(1468.1470) 15:50:26:458 ImpersonateUser: Failed to impersonate user with 5.
USERENV(1468.1470) 15:50:26:458 GetUserNameAndDomain Failed to impersonate user
USERENV(1468.1470) 15:50:26:458 ImpersonateUser: Failed to impersonate user with 5.
USERENV(1468.1470) 15:50:26:458 GetUserDNSDomainName: Failed to impersonate user
USERENV(1468.1470) 15:50:26:474 ImpersonateUser: Failed to impersonate user with 5.
USERENV(1468.1470) 15:50:26:474 GetUserNameAndDomain Failed to impersonate user
USERENV(1468.1470) 15:50:26:474 ImpersonateUser: Failed to impersonate user with 5.
USERENV(1468.1470) 15:50:26:490 GetUserDNSDomainName: Failed to impersonate user
USERENV(1468.1470) 15:50:27:444 ImpersonateUser: Failed to impersonate user with 5.
USERENV(1468.1470) 15:50:27:444 GetUserNameAndDomain Failed to impersonate user
USERENV(1468.1470) 15:50:27:444 ImpersonateUser: Failed to impersonate user with 5.
USERENV(1468.1470) 15:50:27:444 GetUserDNSDomainName: Failed to impersonate user
USERENV(1520.1524) 15:51:28:042 LibMain: Process Name:  C:\WINDOWS\system32\NOTEPAD.EXE
USERENV(f88.700) 15:53:14:474 LibMain: Process Name:  C:\WINDOWS\system32\cmd.exe
USERENV(107c.1080) 15:53:17:902 LibMain: Process Name:  C:\WINDOWS\system32\ipconfig.exe

The system event viewer log file is corrupt (great now I need to fix that too)

and our machines connect via WAN.
0
 
wonder_boy07Author Commented:
Hi mpfister

Fixed the system event and there is only one error showing which is

"Source:     Ftdisk
Event ID:    49

Configuring the Page file for crash dump failed. Make sure there is a page file on the boot partition and the is large enough to contain all physical memory."
0
 
Hisham_ElkouhaCommented:
you can assign the Group policy manually in those two PCs
0
 
Michael PfisterCommented:
Sorry, wonder_boy07, have been offline.

For the Event 49: check the page file and crash dump settings in Control Panel -> System. Small memory dump (64k) and a page file between "RAM size" and "RAM size multiplied with 1.5" should be enough for a regular workstation.

So no other events while logging on? Can you post the entire userenv.log please (using the Attach File function)? Best delete/rename it first, then log on with a test account and save the log so I can see one complete logon process. I'm missing the "ProcessGPOs" part of the log file...

So the machine is connected via a WAN .. can you please be more specific? Dial in via RAS? VPN with routers?

"Failed to impersonate user" may point to a name resulution problem:

Verify that DNS works from the client:

nslookup -type=srv _ldap._tcp.dc._msdcs.yourdomainname.com

nltest /dsgetdc:yourdomainname.com

(nltest comes with the Support Tools)








0
All Courses

From novice to tech pro — start learning today.