Wireshark & Constant WPAD Entries

[ITGURU]

Hi

When using wireshark on the network I get a vast amount of entries relating to Name Query for WPAD .

it appears to occur with all connected devices.

It this normal ? - We don't use the WPAD file.

I'm guessing it relates to the 'detect automatic settings' in IE?

If there's some setting which can be used to stop these broadcasts I'd be grateful if you could let me know.

Thanks in Advance.

 

[localzuk]

That is indeed correct. The "detect automatic settings" is what triggers that request.

 

Turn off that setting, and your requests should pretty much disappear.

[ITGURU]

As for changing the setting for all computers - does the registry entry have to be set on both computer and user OU's in AD so that even if the computer is on CTRL, ALT, Delete it wont use the setting.

[localzuk]

Can you not just sort your settings out via group policy? Its just a tickbox then, applied to all users.

[ITGURU]

It's not a setting which is available in the GPO by default - only by custom registry, that I've discovered.

 

Can you not just sort your settings out via group policy? Its just a tickbox then, applied to all users.

[free780]

Just GPP it if you have ie10+ deployed. It's only a user policy.

[localzuk]

It's not a setting which is available in the GPO by default - only by custom registry, that I've discovered.

 

IE settings are part of the GPP aspect of GPO. Its definitely in there - I have used it.

[ITGURU]

Once your on Server 2012 R2 with Internet Explorer 11, the IE maintenance part of the GPO no longer exists and done through registry settings to set Proxy, exceptions etc.

Think I've sorted it now

 

IE settings are part of the GPP aspect of GPO. Its definitely in there - I have used it.

[localzuk]

Once your on Server 2012 R2 with Internet Explorer 11, the IE maintenance part of the GPO no longer exists and done through registry settings to set Proxy, exceptions etc.

Think I've sorted it now

 

It is still there, just in the Preferences part of group policy. There's no need to be touching the registry.