Jump to content

Recommended Posts

  • 3 weeks later...
Posted

Thank you very much for this, we were scratching our heads as to why the students were getting certificate errors in both Internet Explorer and Chrome but only in certain rooms then it clicked they were generally new PCs or reimaged PCs which obviously had IE10 installed.

 

Then it clicked that our firewall does weird things in an attempt to block the Internet access if the proxy is turned off and it clicked that they probably weren't getting the proxy settings. And of course Chrome uses the proxy settings from Internet Explorer!

Posted

I have found a slight problem.

 

Since the proxy settings are done via registry import Google Chrome doesn't seem to pick them up until Internet Explorer is launched at least once. Minor thing really but is there a solution to that?

  • 2 weeks later...
Posted
I have found a slight problem.

 

Since the proxy settings are done via registry import Google Chrome doesn't seem to pick them up until Internet Explorer is launched at least once. Minor thing really but is there a solution to that?

 

 

I've encountered this as well as we have IE10 with proxies configured through GPP. I didn't spend a whole lot of time with it and in the end just specified the proxy in the Chrome GPO. Between all the proxy quirks and daily used district websites randomly breaking and I'm trying to push everyone onto Chrome anyways.

Posted

We had this problem. Basically somehow IE 10 got onto our DC, so no IE policies were being applied across the school.

We found out that a new template is needed to control IE 10 Download Administrative Templates for Windows Internet Explorer 10 from Official Microsoft Download Centre

It was odd because throughout school we use IE 9 but it seems that having IE 10 on a DC wipes the entire policies relating to internet explorer

 

hope this can somehow help!

 

SamBrooks

Posted
We had this problem. Basically somehow IE 10 got onto our DC, so no IE policies were being applied across the school.

We found out that a new template is needed to control IE 10 Download Administrative Templates for Windows Internet Explorer 10 from Official Microsoft Download Centre

It was odd because throughout school we use IE 9 but it seems that having IE 10 on a DC wipes the entire policies relating to internet explorer

 

hope this can somehow help!

 

SamBrooks

 

Those only work with 2003 DC's

 

You can get the 2008 R2 policies from here

 

Download Administrative Templates (.admx) for Windows 8 and Windows Server 2012 from Official Microsoft Download Center

Posted
Since following the instructions in this thread to try and get IE10 to find the right homepage, I've had loads of problems with computers losing the setting "Bypass proxy server for local addresses"...this box is getting cleared. We have Server 2008 R2 with IE10 installed. Any quick tips welcome!
Posted

My IE10 test PC is working seemingly fine when I test both with students and staff....why is this, when so many others are having problems?

 

My GPO settings are shown on the attached

ie10.jpg

Posted

Michael reg fix (post #23) working for me on win 7 IE10 with server 2008 R2 :)

 

Couple of Qs:

If later some users are moved out of GPO scope will the registry changes be backed out ?

Is there a way of setting proxy per machine in registry so I could link to OU with computer accounts ?

Seem to recall you can simulate this with loopback policy ?

 

Finally my win 7 machine got updated to IE10 and I found that when using GPMC (via RSAT) the

Internet Explorer Maintenance (IEM) settings can not be edited in the GPO even though they are still there!

 

I went back to IE9 and the IEM settings re-appeared :)

 

Quick way to roll back IE10 to IE9 from admin cmd:

wusa /uninstall /kb:2718695 /quiet /forcerestart

 

PS Isn't it nice and quite without the teachers / kids (strike day). Actually getting some stuff done!

Posted
Michael reg fix (post #23) working for me on win 7 IE10 with server 2008 R2 :)

 

Couple of Qs:

If later some users are moved out of GPO scope will the registry changes be backed out ?

Is there a way of setting proxy per machine in registry so I could link to OU with computer accounts ?

Seem to recall you can simulate this with loopback policy ?

 

Finally my win 7 machine got updated to IE10 and I found that when using GPMC (via RSAT) the

Internet Explorer Maintenance (IEM) settings can not be edited in the GPO even though they are still there!

 

I went back to IE9 and the IEM settings re-appeared :)

 

Quick way to roll back IE10 to IE9 from admin cmd:

wusa /uninstall /kb:2718695 /quiet /forcerestart

 

PS Isn't it nice and quite without the teachers / kids (strike day). Actually getting some stuff done!

 

If users are moved out of the scope, the registry entries would remain until they're removed or over written.

 

You can set proxy settings per machine, but this is when deploying proxy settings via GPO. Because the regedit is deployed on a HKCU basis the loopback method wouldn't work (to the best of my knowledge).

 

When installing IE10 on 2008 R2 or Win 7 + RSAT, you will lose IEM. The only way to get back at those settings is to downgrade to IE9. You can thank Microsoft for this feature!

  • Thanks 2
Posted

You can set proxy settings per machine, but this is when deploying proxy settings via GPO.

 

How would you do this ?

A quick google suggested:

 

Policy Make proxy settings per-machine (rather than per-user)

Category Path Computer Configuration\Administrative Templates\Windows Components\internet Explorer\

Supported On At least Internet Explorer 5.0

Registry Key HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\internet Settings

Value proxySettingsPerUser

 

Then add your 3 registry values e.g.

Action: Update

Hive: HKEY_LOCAL_MACHINE

Key Path: SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings

Value Name: ProxyServer

Default: Unchecked

Value Type: REG_SZ

Value Data: 192.168.1.254:8080

 

but this time under

 

computer configuration\Preferences\Windows Settings\Registry

 

And this would still allow a user to untick "use proxy server" in IE LAN settings

e.g. if they take a laptop off site and need to change / disable the proxy ?

Posted (edited)

This works great but its broken our locally hosted VLE :(

 

How do I get the "bypass proxy server for local addresses" check box to be ticked?

 

I know I can explicitly bypass it with the name but I would like to bypass all local addresses.

Edited by zag
Posted

Only actually rolled out Michael's reg fix (post #23)

 

Tested the local machine idea on one PC with regedit e.g.

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxySettingsPerUser"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable"=dword:00000001
"ProxyServer"="proxy:port"
"ProxyOverride"="192.168.0.*;etc;"

 

Seems to work but some users have the option to untick the proxy in IE whilst for others

it is greyed out which is odd?

Posted
My IE10 test PC is working seemingly fine when I test both with students and staff....why is this, when so many others are having problems?

 

My GPO settings are shown on the attached

 

Still would like to know why we are nt having problems here with the test PC with ie10 on it.....just want my mind put at rest that's all :)

Posted
Anyone solved the bypass proxy server for local addresses issue?

 

What issue are you having?

Posted

Well I was having the issue after all on our IE10 test PC and the GPP Regedit did the trick.

 

However when logged on as a test student I notice if they click "About Internet Explorer" there is a tick box in "Install new versions automatically" - that worries me.

 

If I try and change it, it asks for admin credentials, but is there anyway to remove the tick centrally by a policy edit?

 

Cheers

Posted
Well I was having the issue after all on our IE10 test PC and the GPP Regedit did the trick.

 

However when logged on as a test student I notice if they click "About Internet Explorer" there is a tick box in "Install new versions automatically" - that worries me.

 

If I try and change it, it asks for admin credentials, but is there anyway to remove the tick centrally by a policy edit?

 

Cheers

 

A better way is to control updates deployed via WSUS. The "Install new versions automatically" option is then irrelevant.

Posted

Is it possible to use WMI filtering to only target computers with IE10 or does it not matter pushing these new registry items to computers running IE9 or perhaps 8?

 

Regards

Posted
Is it possible to use WMI filtering to only target computers with IE10 or does it not matter pushing these new registry items to computers running IE9 or perhaps 8?

 

Regards

 

Deploying proxy settings is the same for IE8, IE9, IE10 and IE11 as the same registry keys are used. I believe it's also the same multi-platform i.e. Windows XP, Vista and 7.

  • Thanks 1

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now



×
×
  • Create New...