• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 457
  • Last Modified:

Incorrect proxy settings received by many users at logon

We run approximately 50 virtual machines off thin clients in a windows 2008 server environment with users running Windows XP.  Several weeks ago, I was experimenting with adding several sites to the bypass proxy server list in a gpo that is linked to the virtual machines OU that provides users with the proxy settings.
When i was finished adding and removing some sites, everything worked fine until a couple of days later when the wrong addresses began appearing in users 'bypass proxy server for local addresses' exceptions list causing them not to be able to reach these sites.
There is no trace of these sites in any group policy, however, it appears that it saves the incorrect settings back to ntuser.dat at the end of the day (they are using roaming profiles) even though the correct settings were in place before logging out.  
We have attempted to resolve the problem by using logon scripts, registry keys through gpo's and recreating the original gpo's and overriding gpo's however the problem still occurs.
Any ideas?
0
daverandom
Asked:
daverandom
  • 5
  • 4
1 Solution
 
Pr1zCommented:
If the settings are indeed correct in the GPO('s), running "GPUpdate /force" on each of the clients should pull down the settings.  You can use the "Resultant Set Of Policies" (RSOP) MMC to verify that the policies you think are being applied are indeed being applied.

Hope this helps

Priz
0
 
daverandomAuthor Commented:
Thanks Pr1z,
The users affected in the morning (not always the same users) are currently having to run a gpupdate /force every morning :(

The RSOP specifies the correct policies are being applied, however, they still receive the wrong settings at logon as noted in the registry and their ntuser.dat file
0
 
navaidfarooquiCommented:
are you using Microsoft ISA Server or Forefront?
0
Free learning courses: Active Directory Deep Dive

Get a firm grasp on your IT environment when you learn Active Directory best practices with Veeam! Watch all, or choose any amount, of this three-part webinar series to improve your skills. From the basics to virtualization and backup, we got you covered.

 
daverandomAuthor Commented:
Microsoft ISA server
0
 
navaidfarooquiCommented:
then check your ISA Server settings sir.... it must be the culprit here.
0
 
daverandomAuthor Commented:
if you don't mind me asking... do you know where i could look in the ISA server settings, I have alread taken a look and i cannot think how ISA could be removing the 'bypass proxy for local addresses' option on client computers.
0
 
navaidfarooquiCommented:
0
 
navaidfarooquiCommented:
for ISA 2006

Using ISA server will bypass local host –> Goto management console- Expand the server ->select networks under Configuration ->Select Internal in the right side window and right click select properties-> go to web browser Tab. Put the tick mark in Bypass proxy for web servers in this network, Directly access computers specified in the Domain tab and tick mark to Directly access computers specified in the Address tab and specied the server’s IP or hostname in the below window.
0
 
daverandomAuthor Commented:
Problem Solved.  It was actually a setting in Enterprise Vault (Policies>Desktop>Web Applications) that has an option to include the enterprise vault servers in the intranet zone and remove the bypass proxy setting.  All we had to do was untick these options and everything worked as expected.  The settings are on by default and must have been turned back on after we did a recent patch update
0
 
daverandomAuthor Commented:
I accepted my own comment because it was the only answer that had a correct solution, however, it would've been a hard question to troubleshoot over the web
0

Featured Post

Concerto Cloud for Software Providers & ISVs

Can Concerto Cloud Services help you focus on evolving your application offerings, while delivering the best cloud experience to your customers? From DevOps to revenue models and customer support, the answer is yes!

Learn how Concerto can help you.

  • 5
  • 4
Tackle projects and never again get stuck behind a technical roadblock.
Join Now