Connection Fails Without Admin Rights

[MrDylan]

Any idea why, if a pupil logs in they receive a Connection Failed message when the DPS launces?

Yet if they are added to the Domain Admin group it works fine?

Also, if I turn on a computer and log in as a pupil, it wont work. If I log in as me (Domain Admin) then it will work for me. If I then log out and log that same pupil back in, it will work for them too. Unless I reboot the PC and it will then be broken for them.

[beeswax]

if you haven't done this already, ensure that the "Users" group has Read, Read & Execute and List Folder Contents on the following drives and folders,
E:\
E:\Program Files
E:\Program Files\School Applications
where E: is the drive where you've installed the APS software.

[MrDylan]

They do indeed have at least those rights on those folders.

[MrDylan]

I think it may actually be linked to a big problem I've never fixed, just worked around.

Internet Explorer won't access secure sites unless you're an Administrator or an account that's never being set up.

No matter what though, always just a 'Page Cannot Be Displayed' error. Firefox works fine though.

I've tried everything to fix it.

[_Bob_]

Proxy settings for secure sites in the IE GPO?

[MrDylan]

I have the proxy setting in the GPO to the ISA server same settings for all addresses, but to bypass it for local things and I've entered the server names and IP addresses.

[MrDylan]

Ok.

I created a new Student User, with only Start Menu and Desktop Redirection GPOs and no Mandatory Profile.

Worked Fine.

Moved said User into Student GPO with all policies applied.

Worked Fine.

Rebooted computer few times, relogged in few times, still fine.

Copied profile to server, and entered path in User properties.

Broken.

[MrDylan]

Add that same user to Domain Admins, keep everything else the same, and it works.
Take them out of Domain Admins, and it doesn't again.

[MrDylan]

Create a Standard Pupil account with all policies applied, but no profile.

Works on some machines but not others.