Gpo for proxy not working.

[nicholab]

I have a user and their proxy settings keep going to blank and port 80?

 

When I do gpupdate they change to the right settings. Any suggestion?

[speckytecky]

We have had similar proxy issues. Hopefully now resolved after running RSOP on a client and discovering that the proxy was being picked up from multiple places in Group Policy.

[nicholab]

Just had a look at GPresult and the wining policy is the one I want but when I log on as local admin I two get port 80 listed as the proxy port but not active. Any suggestions? Edited April 26, 2017 by nicholab

[Garacesh]

Didja press F6?

 

When you're setting IE options (User configuration, Preferences, Control Panel Settings, Internet Settings) some info has a red dotted underline. That means the policy is not going to take effect.

 

Press F6 whilst focus is on that field, it turns green. That means it will be applied.

 

And it's F7 to make it red again.

[nicholab]

My setting are as that it is one user laptop seem to reset the proxy to auto detect after a reboot. If I GP update I do get the correct settings. Also my settings are as in the above example.

[nicholab]

This seems to have helped so far

 

“HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\defaultconnectionsettings”

 

“HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\savedlegacysettings”

 

and

 

“HKEY_USERS\S1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\defaultconnectionsettings”

 

“HKEY_USERS\S1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\savedlegacysettings”

 

from https://community.spiceworks.com/topic/1567165-can-t-remove-proxy-settings-windows-7-server-2012-r2-domain-help

[nicholab]

This has still changed back t automatically detect settings rather than the proxy set by gpo any ideas? Gpresult says I have the right settings.

[mrwoberts]

Hmmm, is there a piece of software on your this PC that is asserting itself in a proxy fashion?

How would you tell? Well, you could use something like CPorts from Nirsoft and look at what software is listening in on port 80, or something along those lines.

You could also force a 'clean' boot on the PC - which is to say, stopping all non-essential, non-MS services and apps at startup (msconfig may help).

If after a clean boot the policy you want stays in place and is not overwritten, then it surely must be something installed on the PC.

[nicholab]

Not done a clean boot but I have removed the cached gpo but I thinking I should copy the gpo and re link it so it has a new guid.

[nicholab]

Proxy setting now seem to work for staff but I have an issue that on the student machine the proxy settings seems to be burned into the image how can I resolve this? So that student get the proxy settings form the machine but a GPO update they get the settings that they should. How can I resolve this?

[nicholab]

This is driving me mad the GPO results says it gets the right settings but it only works on the second login of a user. Also the settings apply if I GP update in the user session. Can I set a proxy for the machine? I looked through the policies all IEM settings are removed.

[mrwoberts]

How are you setting your proxy? Computer or User?

If User, which is how apply it, I previously ran a GP to remove any Computer specified proxy, which seem to clear up a few problems I had.

Which method are you using? Script, Registry, Plain IE Proxy setting..

[nicholab]

How are you setting your proxy? Computer or User?

If User, which is how apply it, I previously ran a GP to remove any Computer specified proxy, which seem to clear up a few problems I had.

Which method are you using? Script, Registry, Plain IE Proxy setting..

 

How did you remove it from the computer I am using a gpo proxy setting?

[eddyc]

Are your students using a mandatory profile? If so, the proxy could be set in that? It might not always update from GPO.

 

You could set the desired settings in the mandatory profile as a failover?

[mrwoberts]

How did you remove it from the computer I am using a gpo proxy setting?

By explicitly creating a GPO to DELETE these registry keys

 

Hive: HKEY_LOCAL_MACHINE (for both)

Key Path: Software\Microsoft\Windows\CurrentVersion\Internet Settings (for both)

 

ProxyEnable

ProxyServer

 

Notice they are in the HKLM local machine tree, rather than the current user HKCU. I believe that settings in HKLM may override the current users settings

Edited May 10, 2017 by mrwoberts

[nicholab]

I have check and none of these keys exist on the machine registry.

[Blue_Cookeh]

Are you setting the proxy for Gopher in your GPO? This seems to break it, set the proxy up for all protocols apart from Gopher and it starts to work.

[nicholab]

I setting it for one proxy setting for everything but not individually defined. I have now set the proxy by machine as that seems to work but I think that the issue might be the machine key was having "DefaultConnectionSettings" and "SavedLegacySettings" may have been having an effect. So far in testing and from the update from staff this seems to have worked setting it on the machine.