+ Post New Thread
Page 1 of 2 12 LastLast
Results 1 to 15 of 21
Windows Thread, Proxy settings not being applied - GPO - XP in Technical; Windows XP clients with server 2008 r2 using client side extensions For some reason the proxy settings in our GPOs ...
  1. #1


    Join Date
    Oct 2006
    Posts
    3,411
    Thank Post
    184
    Thanked 356 Times in 285 Posts
    Rep Power
    148

    Proxy settings not being applied - GPO - XP

    Windows XP clients with server 2008 r2 using client side extensions

    For some reason the proxy settings in our GPOs aren't applying. If I delete the users ntuser.dat file it cures most people but not all. If however I run gpupdate while the user is logged on it cures all of them.

    I have tried applying the proxy settings to the computers rather than per user but this has had no effect.

    All other GPO settings seem to apply fine.

    Any ideas?
    Last edited by j17sparky; 23rd May 2011 at 09:29 AM.

  2. #2

    Michael's Avatar
    Join Date
    Dec 2005
    Location
    Birmingham
    Posts
    9,262
    Thank Post
    242
    Thanked 1,568 Times in 1,250 Posts
    Rep Power
    340
    If all your workstations/servers require proxy settings to connect to the internet, then it makes sense to apply the change on the Default Domain Policy. It's one of the few policies I enable at this level.

    You could also review how often GPOs are applied. By default it's 90 minutes and you can easily reduce this -

    User Config > Admin Templates > System > Group Policy - Group Policy refresh interval for users - Enabled

  3. Thanks to Michael from:

    speckytecky (18th August 2011)

  4. #3

    Join Date
    Aug 2007
    Posts
    811
    Thank Post
    98
    Thanked 64 Times in 46 Posts
    Rep Power
    26
    Have you updated to IE8 using the "IE 8 customization installation tool" ?
    Did you maybe put the proxy details in there?

  5. #4

    Join Date
    May 2008
    Posts
    60
    Thank Post
    1
    Thanked 7 Times in 7 Posts
    Rep Power
    23
    A long shot but check KB 888254 - might not be relevent if your are patched and up to date.

    Have you done any GPO debugging using RSoP or other console snapins? Might help narrow your search a bit.

  6. #5

    Join Date
    Jul 2011
    Posts
    10
    Thank Post
    2
    Thanked 1 Time in 1 Post
    Rep Power
    0
    Hi all, we use Windows 2003 SP2 domain and basic Active Directory. We have recently had to change some proxy settings - trouble is, they don't seem to be applying. In the past, we have changed them by hand, because they haven't really altered through Group Policy and we haven't had time to track down the reason - I've had some time this summer break, to look deeper. I've Googled the subject, but most of the suggestions I have already tried, except I came across one article that states that the "Internet Explorer Maintenance" setting does not behave in the usual way. Apparently, one has to right-click on the "Connection" setting under the "Internet Explorer Maintenance" in the Policy and select "Reset Browser Settings". Then you right-click again to select "Preference Mode".

    Here are some Googled suggestions =
    -----------------------------------------------------------
    http://forums.whirlpool.net.au/archive/1661332
    "GPO's only set a setting, they dont remove old settings by default or when they are removed.

    In your new GPO, make sure to remove and apply the removed proxy setting."
    ----------------------------------------------------------
    ...also this =
    Group Policy - Proxy Server for your local LAN
    "Re: Group Policy - Proxy Server for your local LAN

    PC's with Windows XP Service Pack 2 applied will not apply Internet Explorer Maintenance settings if Folder Redirection settings are also applied. See Microsoft Knowledge Base article # 888254 for more information. This is article is somewhat confusing in that it states (as of the January 28, 2005 revision):

    After you enable the Folder Redirection policy in Windows XP Service Pack 2, the Internet Explorer Maintenance policy may not apply

    "You cannot set the Folder Redirection policy setting on a Microsoft Windows XP-based computer that also uses Group Policy settings to customize Microsoft Internet Explorer."

    In fact, the Folder Redirection settings are applied correctly, but the Internet Explorer Maintenance settings are ignored."
    ----------------------------------------------------------
    ...also this =
    group policy proxy settings
    "That behavior is intended, by default Group Policies are only applied
    if you change them since MS assumes that you do not give the user the
    permission to change the settings, and it makes the logon process
    faster if you do not have to reapply GPOs.

    If you want to change that behavior to apply at every logon you can
    configure the following GPO-Setting:

    Computer Settings/Administrative Templates/System/Group Policy/Internet
    Explorer Maintenance Policy Processing

    There you are able to configure if the GPOs are applied via slow link,
    if they are applied even if they haven't changed, and if they are
    reapplied during background refreshes."
    ----------------------------------------------------------
    ..also = Group Policy Proxy settings not being applied after IE8 installed - Stream Reader

    "I'm assuming you're talking about settings being applied through the "Internet Explorer Maintenance policy" client-side extension (CSE), and not "Administrative Template" registry settings.

    I've done several mass updates of IE8 at Customer sites where IE CSE settings were being applied and haven't seen the problem you're describing. I'd say that you've got a peculiar quirk there that's causing the behavior (possibly on just a subset of your machines, too).

    Quirks aside, you could use the "Internet Explorer Maintenance policy processing" setting in the "Group Policy" node of the "System" node of "Administrative Templates" in "Computer Configuration" to enable "Process even if the Group Policy objects have not changed". This will give you the effect of "gpupdate /force" on these clients w/ respect to IE CSE settings. This isn't the most efficient thing in the world to do (because clients will keep re-applying the IE CSE policies even if the server version hasn't changed) but, presumably, after your roll-out is complete and everything is working you could investigate turning this back off."
    ----------------------------------------------------------
    ...end of quotes

    I'm not sure what I have to do then as it's not totally clear whether I have to allow the 'Reset' policy to apply over a day or so, to clear all settings from clients. Then apply the preference mode for another couple of days, not sure what for, finally filling in the new proxy settings and then apply those - there doesn't seem to be a full explanation out there. Has anyone else experienced this...? I need to leave the proxy settings available for the teachers to untick the proxy box when they need to connect to their home internet. I have also read elsewhere that using the 'wpad.dat'/'pac' file scenario might be a better way to solve my situation. Because it seems there is a lack of information out there regarding the "Internet Explorer Maintenance" user policy - perhaps even M$ don't understand it themselves........ Any pointers would be most appreciated. Thanks.

    Windows server 2003 SP2, using Group Policy, Exchange 2010, internal WSUS
    1000 XP SP3 clients in total. Office 2007
    300 staff (including teachers, who need settings changed between home and school).
    Folder Redirection for 'App Data', 'My Docs' etc.

  7. #6


    Join Date
    Jan 2009
    Posts
    1,225
    Thank Post
    150
    Thanked 238 Times in 164 Posts
    Rep Power
    155
    Quote Originally Posted by Michael View Post
    If all your workstations/servers require proxy settings to connect to the internet, then it makes sense to apply the change on the Default Domain Policy. It's one of the few policies I enable at this level.

    <snip>[/I]
    This is how I've applied Proxy Settings for the last five years, using our Smoothwall as the proxy. However, now, the Head wants The Staff to be able to access YouTube which is blocked by the upstream proxy to which the Smoothwall connects. So....easy, I thought, add a proxy setting into the Staff Policy to use the unfiltered Grid proxy, and not the Smoothwall. So did that, but the Staff Policy steadfastly refuses to change the proxy setting from the one spec'd in the Default Domain Policy. Staff Policy is linked and enforced, but still won't play ball.

    Any ideas? Anyone?

  8. #7

    Join Date
    Aug 2007
    Posts
    811
    Thank Post
    98
    Thanked 64 Times in 46 Posts
    Rep Power
    26
    Have you run a RSOP for a staff member?
    as the default domain policy is probably also enforced I guess that would be enforced before the later enforced staff policy?

  9. #8

    Michael's Avatar
    Join Date
    Dec 2005
    Location
    Birmingham
    Posts
    9,262
    Thank Post
    242
    Thanked 1,568 Times in 1,250 Posts
    Rep Power
    340
    Quote Originally Posted by Earthling View Post
    This is how I've applied Proxy Settings for the last five years, using our Smoothwall as the proxy. However, now, the Head wants The Staff to be able to access YouTube which is blocked by the upstream proxy to which the Smoothwall connects. So....easy, I thought, add a proxy setting into the Staff Policy to use the unfiltered Grid proxy, and not the Smoothwall. So did that, but the Staff Policy steadfastly refuses to change the proxy setting from the one spec'd in the Default Domain Policy. Staff Policy is linked and enforced, but still won't play ball.

    Any ideas? Anyone?
    You shouldn't really need to enforce GPOs. I set proxy settings on the Default Domain Policy as it applies identically to all types of user in school. I don't have different filtering levels. I would probably recommend you take it off the Default Domain Policy, and set the required changes on the Curric GPO and Staff GPO separately. It should work perfectly then.

  10. #9


    Join Date
    Jan 2006
    Posts
    8,202
    Thank Post
    442
    Thanked 1,032 Times in 812 Posts
    Rep Power
    339
    Ideally you shouldn't need GPO settings at all !
    by default IE,chrome,firefox will automatically detect the proxy settings without needing to specify anything in a group policy.

    configure wpad:
    Automatic Discovery for Firewall and Web Proxy Clients

    As well as having hte advantage of running on multiple browsers/operating systems it also means staff don't need to change the settigns when they get home.

  11. #10

    Michael's Avatar
    Join Date
    Dec 2005
    Location
    Birmingham
    Posts
    9,262
    Thank Post
    242
    Thanked 1,568 Times in 1,250 Posts
    Rep Power
    340
    Ideally you shouldn't need GPO settings at all !
    by default IE,chrome,firefox will automatically detect the proxy settings without needing to specify anything in a group policy.
    That's true, but it's still recommended to specify them and you may wish to include exceptions too.

  12. #11


    Join Date
    Jan 2006
    Posts
    8,202
    Thank Post
    442
    Thanked 1,032 Times in 812 Posts
    Rep Power
    339
    Quote Originally Posted by Michael View Post
    That's true, but it's still recommended to specify them and you may wish to include exceptions too.
    you can add exceptions in the pac file.

    who recommends setting them in GPO? Wpad is a recognised windows/apple/linux config

  13. #12

    Michael's Avatar
    Join Date
    Dec 2005
    Location
    Birmingham
    Posts
    9,262
    Thank Post
    242
    Thanked 1,568 Times in 1,250 Posts
    Rep Power
    340
    It's generally a recommended setting to enable and configure, which is why Microsoft allows a network admin to do so via GPO.

  14. #13


    Join Date
    Jan 2006
    Posts
    8,202
    Thank Post
    442
    Thanked 1,032 Times in 812 Posts
    Rep Power
    339
    Quote Originally Posted by Michael View Post
    It's generally a recommended setting to enable and configure, which is why Microsoft allows a network admin to do so via GPO.
    Well I disagree. WPAD IS a ms setting that they allow a network admin to control - and it has significantly more advantages than GPO settings.

    For example, you can't configure home users through GPO, you can't configure iphone mac, linux clients through GPO. you can't configure multiple proxies through GPO for different sites.
    In fact there is nothing that can't be done through pac files and WPAD settings that can be done through GPO settings, so I see no reason to use it whatsoever, let alone why it would be 'recommended' by anyone.

  15. Thanks to CyberNerd from:

    MikeAtTrs (18th August 2011)

  16. #14

    Join Date
    Jul 2011
    Posts
    10
    Thank Post
    2
    Thanked 1 Time in 1 Post
    Rep Power
    0
    Hello "all who have contributed" to the age old problem of Proxy settings with Group Policy. I'm with CyberNerd. Have given up with GPO. We are implementing wpad.dat, which seems the logical way to go - thanks again to all.

  17. #15

    Michael's Avatar
    Join Date
    Dec 2005
    Location
    Birmingham
    Posts
    9,262
    Thank Post
    242
    Thanked 1,568 Times in 1,250 Posts
    Rep Power
    340
    For example, you can't configure home users through GPO, you can't configure iphone mac, linux clients through GPO. you can't configure multiple proxies through GPO for different sites.
    Well yes Group Policy is a Microsoft invention and so it only applies to Microsoft Windows. I've used GPO proxy settings for years and it works just fine. If the GPO doesn't apply, then there must be a problem somewhere. If I was using a multi-platform environment then yes, a PAC file would be the way to go. The original question was XP clients and 2008 R2, which is all Microsoft.

SHARE:
+ Post New Thread
Page 1 of 2 12 LastLast

Similar Threads

  1. GPO proxy settings
    By itgeek in forum Internet Related/Filtering/Firewall
    Replies: 15
    Last Post: 26th May 2011, 08:23 AM
  2. Replies: 10
    Last Post: 12th October 2009, 11:16 AM
  3. Viewing GPO settings being applied
    By fafster in forum Windows
    Replies: 9
    Last Post: 13th May 2008, 02:32 PM
  4. Proxy Settings Not Applied
    By dezt in forum Wireless Networks
    Replies: 16
    Last Post: 3rd October 2006, 08:26 PM
  5. Problem with Proxy settings in GPO
    By tosca925 in forum Windows
    Replies: 9
    Last Post: 18th January 2006, 12:54 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •