Solved

IE Proxy settings not getting applied from group policy

Posted on 2008-10-10
7
868 Views
Last Modified: 2013-12-08
Hi All

I'm having problems with only two laptops which aren't getting their internet proxy settings applied from group policy when the users and myself (domain admin) log on.

We are running a windows 2003 server environment with windows xp and internet explorer 7. Users have roaming profiles. Now I don't think there is anything wrong with our group policies, domain, dns as this problem is only affecting these two laptops as all the other desktops and laptops are working fine when these two users and other users log on to them.

I've tried removing the computer from the domain and deleted the computer account from AD and then rejoined it but that hasn't worked. If I run gpupdate from the command prompt on the two affected laptops then it updates the proxy and all is fine but I don't understand why this isn't done during the logon process. It seems that any changes I make to the computer are reverted back to the previous settings when I reboot even if I manually add the proxy settings to the registry.

We did make a group policy change to the proxy settings a short while ago but since the change the update was applied to all pc's but I can't remember if this problem started at the same time as when the change was made. It was certainly around the same time when this problem occured.

Any help would be appreciated as I've gone in circles trying to find a solution to this.
0
Comment
Question by:wonder_boy07
  • 3
  • 3
7 Comments
 
LVL 28

Expert Comment

by:Michael Pfister
Comment Utility
I assume the 2 PCs have a problem processing the GPO during logon.
You can troubleshoot the group policy process by creating a userenv.log by following this article http://support.microsoft.com/kb/221833/en-us
0
 
LVL 28

Expert Comment

by:Michael Pfister
Comment Utility
Also check the computer's event log for errors/warning.
Are these machines connected via WAN or LAN?
0
 

Author Comment

by:wonder_boy07
Comment Utility
Hi mpfister

Here is some data from the userenv.log

USERENV(5a8.5cc) 15:49:34:815 ImpersonateUser: Failed to impersonate user with 5.
USERENV(5a8.5cc) 15:49:34:815 GetUserNameAndDomain Failed to impersonate user
USERENV(5a8.5cc) 15:49:34:815 ImpersonateUser: Failed to impersonate user with 5.
USERENV(5a8.5cc) 15:49:34:815 GetUserDNSDomainName: Failed to impersonate user
USERENV(5a8.5cc) 15:49:34:878 ImpersonateUser: Failed to impersonate user with 5.
USERENV(5a8.5cc) 15:49:34:878 GetUserNameAndDomain Failed to impersonate user
USERENV(5a8.5cc) 15:49:34:894 ImpersonateUser: Failed to impersonate user with 5.
USERENV(5a8.5cc) 15:49:34:894 GetUserDNSDomainName: Failed to impersonate user
USERENV(5a8.5cc) 15:49:34:941 ImpersonateUser: Failed to impersonate user with 5.
USERENV(5a8.5cc) 15:49:34:941 GetUserNameAndDomain Failed to impersonate user
USERENV(5a8.5cc) 15:49:34:941 ImpersonateUser: Failed to impersonate user with 5.
USERENV(5a8.5cc) 15:49:34:941 GetUserDNSDomainName: Failed to impersonate user
USERENV(5a8.5cc) 15:49:34:972 ImpersonateUser: Failed to impersonate user with 5.
USERENV(5a8.5cc) 15:49:34:972 GetUserNameAndDomain Failed to impersonate user
USERENV(5a8.5cc) 15:49:34:988 ImpersonateUser: Failed to impersonate user with 5.
USERENV(5a8.5cc) 15:49:34:988 GetUserDNSDomainName: Failed to impersonate user
USERENV(5a8.5cc) 15:49:35:003 ImpersonateUser: Failed to impersonate user with 5.
USERENV(5a8.5cc) 15:49:35:003 GetUserNameAndDomain Failed to impersonate user
USERENV(5a8.5cc) 15:49:35:582 ImpersonateUser: Failed to impersonate user with 5.
USERENV(5a8.5cc) 15:49:35:582 GetUserDNSDomainName: Failed to impersonate user
USERENV(ce0.cd4) 15:49:36:146 LibMain: Process Name:  C:\WINDOWS\system32\WgaTray.exe
USERENV(c98.cbc) 15:49:37:852 LibMain: Process Name:  C:\WINDOWS\Explorer.EXE
USERENV(eb8.ec0) 15:49:38:510 LibMain: Process Name:  C:\Program Files\ThinkPad\ConnectUtilities\SvcGuiHlpr.exe
USERENV(eb8.ec0) 15:49:38:541 GetProfileType:  Profile already loaded.
USERENV(eb8.ec0) 15:49:38:541 GetProfileType: ProfileFlags is 2
USERENV(eb8.ec0) 15:49:38:541 ImpersonateUser: Failed to impersonate user with 5.
USERENV(eb8.ec0) 15:49:38:541 GetUserNameAndDomain Failed to impersonate user
USERENV(eb8.ec0) 15:49:38:572 ImpersonateUser: Failed to impersonate user with 5.
USERENV(eb8.ec0) 15:49:38:572 GetUserDNSDomainName: Failed to impersonate user
USERENV(c98.ef4) 15:49:38:635 GetProfileType:  Profile already loaded.
USERENV(eb8.ec0) 15:49:38:729 ImpersonateUser: Failed to impersonate user with 5.
USERENV(eb8.ec0) 15:49:38:760 GetUserNameAndDomain Failed to impersonate user
USERENV(c98.ef8) 15:49:38:760 GetProfileType:  Profile already loaded.
USERENV(c98.ef8) 15:49:38:760 GetProfileType: ProfileFlags is 2
USERENV(eb8.ec0) 15:49:38:776 ImpersonateUser: Failed to impersonate user with 5.
USERENV(eb8.ec0) 15:49:38:776 GetUserDNSDomainName: Failed to impersonate user
USERENV(eb8.ec0) 15:49:38:823 ImpersonateUser: Failed to impersonate user with 5.
USERENV(eb8.ec0) 15:49:38:823 GetUserNameAndDomain Failed to impersonate user
USERENV(eb8.ec0) 15:49:38:839 ImpersonateUser: Failed to impersonate user with 5.
USERENV(eb8.ec0) 15:49:38:839 GetUserDNSDomainName: Failed to impersonate user
USERENV(230.23c) 15:49:42:314 LibMain: Process Name:  C:\WINDOWS\system32\rundll32.exe
USERENV(9f0.a14) 15:49:42:392 LibMain: Process Name:  C:\Program Files\ThinkPad\Utilities\TpKmapAp.exe
USERENV(104.114) 15:49:44:521 LibMain: Process Name:  C:\WINDOWS\system32\rundll32.exe
USERENV(700.e7c) 15:49:48:669 LibMain: Process Name:  C:\WINDOWS\system32\userinit.exe
USERENV(c98.cbc) 15:49:57:420 ImpersonateUser: Failed to impersonate user with 5.
USERENV(c98.cbc) 15:49:57:420 GetUserNameAndDomain Failed to impersonate user
USERENV(c98.cbc) 15:49:57:436 ImpersonateUser: Failed to impersonate user with 5.
USERENV(c98.cbc) 15:49:57:436 GetUserDNSDomainName: Failed to impersonate user
USERENV(c98.cbc) 15:49:57:451 ImpersonateUser: Failed to impersonate user with 5.
USERENV(c98.cbc) 15:49:57:451 GetUserNameAndDomain Failed to impersonate user
USERENV(c98.cbc) 15:49:57:451 ImpersonateUser: Failed to impersonate user with 5.
USERENV(c98.cbc) 15:49:57:467 GetUserDNSDomainName: Failed to impersonate user
USERENV(c98.cbc) 15:49:57:467 ImpersonateUser: Failed to impersonate user with 5.
USERENV(c98.cbc) 15:49:57:467 GetUserNameAndDomain Failed to impersonate user
USERENV(c98.cbc) 15:49:57:483 ImpersonateUser: Failed to impersonate user with 5.
USERENV(c98.cbc) 15:49:57:483 GetUserDNSDomainName: Failed to impersonate user
USERENV(ec4.f18) 15:50:03:916 LibMain: Process Name:  C:\Program Files\Picasa2\PicasaMediaDetector.exe
USERENV(804.410) 15:50:06:311 LibMain: Process Name:  C:\WINDOWS\system32\ctfmon.exe
USERENV(2f4.eb8) 15:50:06:327 LibMain: Process Name:  C:\WINDOWS\system32\mobsync.exe
USERENV(804.410) 15:50:06:468 GetProfileType:  Profile already loaded.
USERENV(804.410) 15:50:06:546 GetProfileType: ProfileFlags is 2
USERENV(bd0.aa0) 15:50:06:593 LibMain: Process Name:  C:\Program Files\Google\Google Desktop Search\GoogleDesktopDisplay.exe
USERENV(bd0.aa0) 15:50:06:625 ImpersonateUser: Failed to impersonate user with 5.
USERENV(bd0.aa0) 15:50:06:640 GetUserNameAndDomain Failed to impersonate user
USERENV(bd0.aa0) 15:50:06:656 ImpersonateUser: Failed to impersonate user with 5.
USERENV(bd0.aa0) 15:50:06:656 GetUserDNSDomainName: Failed to impersonate user
USERENV(bd0.aa0) 15:50:06:672 ImpersonateUser: Failed to impersonate user with 5.
USERENV(bd0.aa0) 15:50:06:672 GetUserNameAndDomain Failed to impersonate user
USERENV(bd0.aa0) 15:50:06:672 ImpersonateUser: Failed to impersonate user with 5.
USERENV(bd0.aa0) 15:50:06:672 GetUserDNSDomainName: Failed to impersonate user
USERENV(bd0.aa0) 15:50:06:969 ImpersonateUser: Failed to impersonate user with 5.
USERENV(bd0.aa0) 15:50:07:063 GetUserNameAndDomain Failed to impersonate user
USERENV(bd0.aa0) 15:50:07:157 ImpersonateUser: Failed to impersonate user with 5.
USERENV(bd0.aa0) 15:50:07:172 GetUserDNSDomainName: Failed to impersonate user
USERENV(bd0.e4c) 15:50:07:266 ImpersonateUser: Failed to impersonate user with 5.
USERENV(bd0.e4c) 15:50:07:266 GetUserNameAndDomain Failed to impersonate user
USERENV(bd0.e4c) 15:50:07:282 ImpersonateUser: Failed to impersonate user with 5.
USERENV(bd0.e4c) 15:50:07:282 GetUserDNSDomainName: Failed to impersonate user
USERENV(ee8.df8) 15:50:07:564 LibMain: Process Name:  C:\WINDOWS\system32\svchost.exe
USERENV(73c.770) 15:50:08:628 LibMain: Process Name:  C:\WINDOWS\system32\rundll32.exe
USERENV(f98.18c) 15:50:09:536 LibMain: Process Name:  C:\PROGRA~1\SYMANT~2\VPTray.exe
USERENV(e80.fec) 15:50:10:256 LibMain: Process Name:  C:\Program Files\Common Files\Symantec Shared\ccApp.exe
USERENV(e1c.d5c) 15:50:11:086 LibMain: Process Name:  C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
USERENV(e1c.d5c) 15:50:11:196 ImpersonateUser: Failed to impersonate user with 5.
USERENV(e1c.d5c) 15:50:11:352 GetUserNameAndDomain Failed to impersonate user
USERENV(e1c.d5c) 15:50:11:509 ImpersonateUser: Failed to impersonate user with 5.
USERENV(e1c.d5c) 15:50:11:540 GetUserDNSDomainName: Failed to impersonate user
USERENV(e1c.d5c) 15:50:11:775 ImpersonateUser: Failed to impersonate user with 5.
USERENV(e1c.d5c) 15:50:11:790 GetUserNameAndDomain Failed to impersonate user
USERENV(e1c.d5c) 15:50:11:806 ImpersonateUser: Failed to impersonate user with 5.
USERENV(e1c.d5c) 15:50:11:822 GetUserDNSDomainName: Failed to impersonate user
USERENV(10a4.10ac) 15:50:13:418 LibMain: Process Name:  C:\WINDOWS\system32\imapi.exe
USERENV(12f8.12fc) 15:50:18:083 LibMain: Process Name:  C:\WINDOWS\system32\userinit.exe
USERENV(a40.a44) 15:50:20:181 LibMain: Process Name:  C:\Program Files\Microsoft Office Communicator\Communicator.exe
USERENV(1468.1470) 15:50:25:065 LibMain: Process Name:  C:\WINDOWS\system32\rundll32.exe
USERENV(1468.1470) 15:50:26:458 ImpersonateUser: Failed to impersonate user with 5.
USERENV(1468.1470) 15:50:26:458 GetUserNameAndDomain Failed to impersonate user
USERENV(1468.1470) 15:50:26:458 ImpersonateUser: Failed to impersonate user with 5.
USERENV(1468.1470) 15:50:26:458 GetUserDNSDomainName: Failed to impersonate user
USERENV(1468.1470) 15:50:26:474 ImpersonateUser: Failed to impersonate user with 5.
USERENV(1468.1470) 15:50:26:474 GetUserNameAndDomain Failed to impersonate user
USERENV(1468.1470) 15:50:26:474 ImpersonateUser: Failed to impersonate user with 5.
USERENV(1468.1470) 15:50:26:490 GetUserDNSDomainName: Failed to impersonate user
USERENV(1468.1470) 15:50:27:444 ImpersonateUser: Failed to impersonate user with 5.
USERENV(1468.1470) 15:50:27:444 GetUserNameAndDomain Failed to impersonate user
USERENV(1468.1470) 15:50:27:444 ImpersonateUser: Failed to impersonate user with 5.
USERENV(1468.1470) 15:50:27:444 GetUserDNSDomainName: Failed to impersonate user
USERENV(1520.1524) 15:51:28:042 LibMain: Process Name:  C:\WINDOWS\system32\NOTEPAD.EXE
USERENV(f88.700) 15:53:14:474 LibMain: Process Name:  C:\WINDOWS\system32\cmd.exe
USERENV(107c.1080) 15:53:17:902 LibMain: Process Name:  C:\WINDOWS\system32\ipconfig.exe

The system event viewer log file is corrupt (great now I need to fix that too)

and our machines connect via WAN.
0
Enabling OSINT in Activity Based Intelligence

Activity based intelligence (ABI) requires access to all available sources of data. Recorded Future allows analysts to observe structured data on the open, deep, and dark web.

 

Author Comment

by:wonder_boy07
Comment Utility
Hi mpfister

Fixed the system event and there is only one error showing which is

"Source:     Ftdisk
Event ID:    49

Configuring the Page file for crash dump failed. Make sure there is a page file on the boot partition and the is large enough to contain all physical memory."
0
 
LVL 6

Expert Comment

by:Hisham_Elkouha
Comment Utility
you can assign the Group policy manually in those two PCs
0
 
LVL 28

Expert Comment

by:Michael Pfister
Comment Utility
Sorry, wonder_boy07, have been offline.

For the Event 49: check the page file and crash dump settings in Control Panel -> System. Small memory dump (64k) and a page file between "RAM size" and "RAM size multiplied with 1.5" should be enough for a regular workstation.

So no other events while logging on? Can you post the entire userenv.log please (using the Attach File function)? Best delete/rename it first, then log on with a test account and save the log so I can see one complete logon process. I'm missing the "ProcessGPOs" part of the log file...

So the machine is connected via a WAN .. can you please be more specific? Dial in via RAS? VPN with routers?

"Failed to impersonate user" may point to a name resulution problem:

Verify that DNS works from the client:

nslookup -type=srv _ldap._tcp.dc._msdcs.yourdomainname.com

nltest /dsgetdc:yourdomainname.com

(nltest comes with the Support Tools)








0
 

Accepted Solution

by:
wonder_boy07 earned 0 total points
Comment Utility
Hey mpfister

Thanks for getting back to me.

I've managed to find the cause of the problem as to why these two laptops weren't getting their proxy settings applied. It was caused by a service. I opened MSCONFIG and disabled all services under the services tab only after hiding all the microsoft services. I had to enable them one at a time to see which one it was but eventually found the culprit.

Thanks for your help anyway.

0

Featured Post

Complete Microsoft Windows PC® & Mac Backup

Backup and recovery solutions to protect all your PCs & Mac– on-premises or in remote locations. Acronis backs up entire PC or Mac with patented reliable disk imaging technology and you will be able to restore workstations to a new, dissimilar hardware in minutes.

Join & Write a Comment

Introduction If you're like most people, you have occasionally made a typographical error when you're entering information into an online form.  And to your consternation, the browser remembers the error, and offers to autocomplete your future entr…
Find out how to use Active Directory data for email signature management in Microsoft Exchange and Office 365.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

771 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now