UTM Proxy Script

[karldenton]

We had a Sophos UTM install last week. The proxy settings have been set on a domain wide policy, which ticks the autodetect proxy, and puts in the location of the script.

 

When I've looked they have done it on User Config - Preferences = IE8 but we are running the latest version (and chrome)

 

For 90% of people it works but for some it doesn't. Including random pupils

 

I've done gpupdate and ipconfig / flushdns but still doesn't work.

 

If I change it manually and enter the proxy settings in the bottom box on IE settings it works fine.

 

Any suggestions please.

[Rob_D]

Do you tell chrome to follow the system proxy or set its own?

 

The IE8 settings should be compatible with the later versions, and if it works for most people then I'd be inclined to think it's not the GPO settings. Have you tried putting the proxy settings into the GPO?

Do you know if it's always the same users, does the issue follow them between computers?

Do the users have the right permissions to access the script?

Are you sure it's a user policy and not set as a loopback policy?

Have you done group policy modling against the effected users to see if another GPO has conflicting settings or somethnig?

What type of profiles do the users have?

If they have roaming profiles have you tried deleting the user profile and starting again? I've had proxy stuff get stuck in the HKCU registry. Conversely try blowing away the profile for someone that works (or create a new, clean account) and see if that creates the problem.

 

Hope some of this helps.

 

Rob.

Edited April 28, 2016 by Rob_D

[CyberDrac]

IE10 onwards it has to be done in GPP (editing the policy on a Windows 8 or above machine or Server 2012) ... User Settings ... Group Policy Preferences ... Control Panel Settings ... Internet Settings ... (New - Internet Explorer 10 (and above))

 

edited for clarity

Edited April 28, 2016 by CyberDrac

[Rob_D]

We've got server 2008r2 polices working with IE11.

You have to change the policy internetsettings.xml for the policy, after you've put your settings in.

 

Find the line:

 

and change it to

[CyberDrac]

We've got server 2008r2 polices working with IE11.

You have to change the policy internetsettings.xml for the policy, after you've put your settings in.

 

Find the line:

 

and change it to

 

I cheated ... I just RDPed into a cheap Win8.1 tablet that I installed the management tools on