Internet Issue- Group policy?

[yusuf]

We are currently in the process of upgrading a ICT suite from HDD's to SSD's and the machines that we have upgraded seem to be giving us issues with getting onto the internet for the users.

 

Whenever a user logs on, they unable to access the internet as it says 'access denied: authentication configuration missing' in Chrome, however when the same user logs off and back on again, the internet seems to work completely fine. It's as if the machines are logging in way too fast and not picking up the right proxy policy for students, hence no internet. We use a proxy server, in which students go out on port 800.

 

We had escalated this issue with Smoothwall, and they pointed the issue down to settings in group policy after investigation. Not entirely sure if its GP as it would affect every machine on site, but rather only affecting the upgraded machines. Also not sure where to check in GPM?

 

Apologies if I've created this thread in the wrong place.

 

 

 

Any advice at the moment in time will helpful

 

Thanks,

Yusuf

[3s-gtech]

How are you setting your proxy settings (GPP, .pac etc)?

[yusuf]

We are using registry key in HKEY_USER via GPM. The three reg keys we use is proxy enable, proxy override & proxy server. Been using this for years. Only until we've upgraded our machines to SSDs they are giving us this issue.

[synaesthesia]

You need to add a setting in group policy to slow it down a touch; "always wait for the network at computer startup and logon" should do the trick under System/Logon.

[Davit2005]

Is this jus Chrome, how are other browsers. Do you use roaming profiles etc.

[yusuf]

We've already made that change "always wait for the network at computer startup and logon" on GP but still no luck. It's literally affecting only a handful of machines we've upgraded to SSDs.

 

Internet doesn't work on any web browser (have tried IE and chrome). We currently use roaming profiles.

[ultima170387]

When we upgraded to SSDs we also had to apply the policy 'Specify startup policy processing wait time'. We set ours to 15 seconds and this seemed to sort group policy errors when using SSDs for us. Funnily enough the policy default is 30 seconds, but that result worked for us. The policy is found in the Computer Configuration - Administrative Templates - System - Group Policy Edited November 29, 2017 by ultima170387

[yusuf]

@ultima170387 I will give this a try now- fingers crossed it works mate.

 

Thanks

[yusuf]

Made the change on GPM, but hasn't made any difference as we're still having the same issues.

[yusuf]

Any help will be useful as we've hit a dead end now..

[DJ-1701]

If you are using mandatory or roaming profiles, it may be worth settings those settings in the default NTUser.man / NTUser.dat, but the way that Internet Explorer settings are meant to be done these days via GPO is below.

 

 

Proxy settings should be controlled via Group Policy, placed in User Configuration -> Preferences -> Internet Settings

 

Before you do anything, read this https://msitpros.com/?p=1014 which explains how to enable and disable sections in a Group Policy Preference window.

 

Create a new Internet Explorer 10 policy and configure to your liking and click OK.

 

Depending on your update level, the GPP may not be set to apply on Internet Explorer above version 10, so to check that it will apply to version 11...

Go to User Configuration -> Policies -> Windows Settings -> Scripts (Logon/Logoff) -> Logon

Click Show Files... and navigate up from Logon to the grandparent folder 'User'.

Go in to Preferences -> Internet Settings and edit the InternetSettings.xml file in Notepad.

Find the part where it states: max="

Ensure this number is 99.0.0.0 (if not, change and save it).

 

As Chrome is by default set to use the same settings as Internet Explorer, this should be set automatically.

[10101010]

thanks DJ didnt know about the 99.0.0.0