[1607, au] Windows 10 1607 ignoring PAC file

[Geoff]

I have some Win10 1607 Enterprise machines I've just switched to use a pac file and it isn't working.

 

PAC file is set in GPO (verified by gpresults).

PAC file is being served over http with the correct mime type.

Proxy setting is correct in both system settings and IE settings.

 

IE and Edge both cannot view sites outside the local LAN. However Firefox (when set to system proxy) works correctly.

[Steve21]

PAC got nuked in the latest versions if you mean a file type one? Unless you enable the legacy features. (IE11/Edge wise)

 

HKLM\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\
Value: EnableLegacyAutoProxyFeatures
Type:  REG_DWORD
Data:  1 

 

Enable that and try it again if using a local one

 

If it's web-based you need to check the MIME type it's returning is:

 

application/x-ns-proxy-autoconfig

 

Steve

[beany1]

The following tool is really good, you run it and it outputs to a text file if it can find PAC/WPAD.

 

https://findproxyforurl.com/official-toolset/

 

*Not sure who they are, but I've used it in past and never had problems.

[Geoff]

PAC got nuked in the latest versions if you mean a file type one? Unless you enable the legacy features. (IE11/Edge wise)

 

HKLM\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\
Value: EnableLegacyAutoProxyFeatures
Type:  REG_DWORD
Data:  1 

 

Enable that and try it again if using a local one

 

If it's web-based you need to check the MIME type it's returning is:

 

application/x-ns-proxy-autoconfig

 

Steve

 

As said in the original post. It's coming via http link off an webserver which is still supported AFAIK. The mimetype is application/x-ns-proxy-autoconfig as I said I had checked.

[Geoff]

The following tool is really good, you run it and it outputs to a text file if it can find PAC/WPAD.

 

https://findproxyforurl.com/official-toolset/

 

*Not sure who they are, but I've used it in past and never had problems.

 

I am not the creator of the PAC. It is automatically generated by forcepoint websense. Our filtering provider.

 

It is working correctly on other machines. It's just the v1607 machines that don't work.

[beany1]

That's fine, if you run that tool on a client that isn't working it'll try use the pac and output with any issues, or if there isn't issue getting the pac it'll download it.

 

If it was me I'd use that to narrow down issue.

[Geoff]

Didn't work so well. Manually downloading the pac myself works fine.

 

#-----------------------------------------------------
# Internet Explorer Configuration
#-----------------------------------------------------
#
# Automatically Detect Settings not configured
#
# Explicit PAC file configured
#	- http://pac.webdefence.global.blackspider.com:8082/proxy.pac?p=XXXXXX

Warning: file_put_contents(tmp\proxy.pac?p=XXXXX_Explicit_IE_20171004_155037_2.pac): failed to open stream: No such file or directory in C:\Users\geoffk\Desktop\FindProxyForURL_Toolset\bin\functions.php on line 31
#		- PAC file downloaded successfully
#		- Content Type: application/x-ns-proxy-autoconfig
#		- Code Syntax: Unable to open PAC file
#
#-----------------------------------------------------
# WPAD DHCP Configuration
#-----------------------------------------------------
#
# DHCP 252 entry not configured
#
#-----------------------------------------------------
# WPAD DNS Configuration
#-----------------------------------------------------
#
# No DNS suffices found for WPAD DNS search
#
#-----------------------------------------------------
# PAC files are saved in the tmp folder
#-----------------------------------------------------

[beany1]

Have you added the bit on the end of the address for privacy or something? "p=XXXXXX"

 

Without that suffix the PAC starts downloading...But the full address shows invalid policy.

[Geoff]

Yes, that's our id for our cloud account so I X'd it off.