Proxy settings removal from all machines

[rrrrr]

When you tried setting new proxy settings by gpo, did you try setting it to disabled? Setting to not configured wont have any effect. If so is this coming through on rsop? Are you able to supply a screenshot of available gpo proxy settings available and what you have tried? Im doing this from memory as i am no longer a sys admin and dont have a server to hand to reference to.

 

It can be done by script, i think i have something that can be used. When you go to a machine with the old proxy set and search for the proxy value in the registry, is it set under hklm or hkcu?

[cheaptonersucks]

Thanks XiJ, I will have a look. I wonder if the Ransomeware infection some time ago wiped out some of the GPOs! Mapped drives don't even map since the Ransomeware infection. The Managed IT provider said that they had resolved any issues on the DC where the Ransomeware infection took place. Hmmm. So many old and broken GPOs, AD is a complete disaster! Where is the exit...

[mrtechsystems]

https://blogs.msdn.microsoft.com/askie/2015/10/12/how-to-configure-proxy-settings-for-ie10-and-ie11-as-iem-is-not-available/

 

Might have been done through the registry what browsers are you applying the proxy to

 

:-)

[cheaptonersucks]

Thanks again rrrrr, I haven't setting new proxy settings as I don't require any proxy setting to be set now. There are several proxy GPOs in the very very long list of GPOs, but when I tried disabling them and running a gpupdate, nothing changed. I am new to Group Policy and as a technician have never been given any exposure to GP by ex NM. I have really just triedeverthing that you have suggested such as running RSoP, GPRESULT /R, unchecking current proxy in IE on domain machine and then running a GPUPDATE. Looking for the GPO in Group Policy Manager. Disabling proxy GPOs. I can grab a screenshot at some point. Will have to change all the proxy settings locally if I cant find a fix soon. What a task that will be.

[cheaptonersucks]

Thanks mrtechsystems, how do I check if the proxy has been set through the registry? Do you mean that a Group Policy might have been created to push the registry settings? the browsers are IE11 and Chrome.

[cheaptonersucks]

Thanks LeMarchand, I will try creating a new "No Proxy" policy and enforce it. I did try adding a setting to the default domain policy, which I set no proxy at all, which I would have thought would have the same effect as creating a new policy with no proxy settings. Is that correct?

[rrrrr]

What i would do tomorrow.

1, go to a gpo that is applying to workstations. Add the proxy settings to disabled. From google images it should look like below, but set the disabled option

 

Do gpupdate, rsop etc and check result.

 

2 if that dont work, go to a pc with old proxy settings.

Goto regedit

Search for old proxy server.

Review the registry keys that affect the proxy settings.

Add these to gp preferences to for central roll out.

 

 

Again, gpupdate, rsop, review changes.

[cheaptonersucks]

Really don't know enough about Group Policy to resolve this.

[rrrrr]

Really don't know enough about Group Policy to resolve this.

 

All gpo's are, are a central way of changing registry values.

Every gpo setting has an equivalent registry value it changes.

The registry is split into machine settings (hklm) and user settings (hkcu - current user)

Same as the gpos, computer and user settings.

 

Setting as not configured will either leave as default value or not change any current settings

 

Enabled and disabled are both active and will make a change.

[cheaptonersucks]

Thanks rrrrr, I will try your suggestion tomorrow, but I haven't seen the settings in 1. in server 2012? I will try and do what you recommend.

[jonnykewell1]

Have you tried deleting local profiles? I've seen these cache proxy settings in the past. Could even be in the default profile if using a mandatory one from the server? Edited October 7, 2016 by jonnykewell1

[Kineas]

I had this problem when moving internet providers. I removed all of the policies that applied the proxy settings, but they were still on the workstations. I solved it by pushing out a registry value with group policy that disables the proxy.

 

User Config > Preferences > Registry

 

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings

 

Then set the value of ProxyEnable with a REGDWORD to 00000000

[cheaptonersucks]

Thanks jonnykewell1, The managed IT provider setup local profiles for all users, but I will try deleting a local profile and see what effect that has.

[cheaptonersucks]

Thanks Kineas, the school have changed Internet providers recently, which is why the I need to remove the old proxy settings. The new filtering is transparent, so doesn't require any proxy settings. I will try creating a policy that pushes out the registry value.

[Kineas]

Just make sure you push it out to the entire domain and ensure that all policies that set the proxy to enabled are definitely removed.

[cheaptonersucks]

Hi Kineas, I am currently attempting to create a policy to push out the registry value that you suggested, but the REGDWORD for ProxyEnable is set to 0 already. Is that correct? Under the data heading for the ProxyEnable value is 0x00000000. Do I just apply the policy with that value? I thought that I would have to change it to a 0?? Thanks

[round2it]

post a screenshot of what you are trying to do are you using gpp to push out the reg key

[cheaptonersucks]

Yes, I am using Group Policy to push the reg key as follows:-

 

User Config > Preferences > Registry

 

HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Internet Settings

 

Then set the value of ProxyEnable with a REGDWORD to 00000000

[tj2419]

When we changed supplier we removed the proxy from GP but it stayed set on some machines so we ran the following command on the machines to clear it.

 

netsh winhttp reset proxy

 

You can also run netsh winhttp show proxy to see what it is currently set at.

[cheaptonersucks]

Thanks for that tj2419, I have added the following reg key to the default domain policy. I then logged onto some domain machines and the change seemed to have worked. But sadly the policy change isn't having any affect on some of the workstsations, even after a couple of gpupdates and restarts?? I even took one of the machines that the amended policy has had no affect and removed and re-joined the domain, but that made no difference. I will try the command that you kindly sent and will let you know how I get on:-

 

reg key User Config > Preferences > Registry

 

HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Internet Settings

 

Then set the value of ProxyEnable with a REGDWORD to 00000000

[cheaptonersucks]

Thanks to everyone for all your help and advice! After pushing the reg key using the default domain policy, most machines are able to access the web ok.Some machines are being stubborn and are retaining the old proxy settings, even after a gpupdate and a couple of restarts. I can always run netsh winhttp reset proxy on the stubborn machines. Group policy doesn't seem that consistent

[nicholab]

Have you also looked at the winhttp proxy by running the following command?

 

Netsh winhttp show proxy