Installing IE8 with IEAK and proxy not changing from policy

[stu1892]

Evening.

 

I thought i had this sorted, but...

 

I need to roll out IE8. I've built my package using IEAK8.

 

We set our proxy in the default domain policy.

 

The thing is, the proxy will change soon as we need to get something sorted with our crashpilot.

 

If i change the proxy now it isn't filtering down to the new instalation of IE8 and it seems like the old proxy is embeded into the machine which is ignoring the GPO change.

 

I'm sure i had this working yesterday, but i've created so many packages i may have lost the one that was working

Any ideas or settings i may have missed.

 

Cheers in advance!

[stu1892]

This is weird.

 

I install IE8.

 

I reboot.

 

I log in as a student. Try a site that is blocked on our proxy. Works like it should

 

Change the Proxy in the GPO. Reboot.

 

Log in as new student, go to url that is blocked by our proxy but should be allowed on this one. It shows up.

 

Log out. Log in as another student and it's blocked.

[stu1892]

IE6 picks up the new proxy without a fuss.

 

There's no extra ADM to be imported into GP that has a new Proxy setting in for IE8 is there?

[rob998]

The IE8 ADM gets updated when IE8 is installed on the server...lots of extra stuff to configure. I'm sure there is something about a proxy in it.

[stu1892]

Cheers Rob, i'll install it on there now.

 

Will it automatically add itself or will i have to add the .adm?

[stu1892]

Still no luck at all with this. Can't change it at all.

 

This could be a disaster.

 

Change of proxy isn't filtering down to the user on IE8. IE6 is fine.

 

Updated ADM too.

[Michael]

The updated IE8 ADM does not contain anything different when it comes to proxy settings, only features which exist in IE8 such as the Favorites bar enable/disable for example.

 

I would be tempted to set the proxy settings and any exceptions within each OU/GPO as it's only a 5 minute job. Be interesting to see if it makes any difference. If you have more than one DC it could be a replication problem possibly, hence the inconsistency logging on as User A then User B.

 

What is it in IEAK8 you want to implement that you can't using IE8 GPOs?

[stu1892]

Cheers Michael.

 

I can set the proxy in the IEAK, but we control our proxy through our domain policy.

 

If the Cachpilot goes down we change to the LA's proxy. It takes two minutes.

 

However if i change it now, the proxy in IE8 doesn't change at all. So if i deploy IE8 everywhere we are royally screwed.

 

We have a problem with our current Cachepilot you see where it crashes and we reset. Two mins and we're sorted. However to get this issue fixed we need to leave the error on screen and switch to the LA's proxy so that Equinet can dial in and have a look. If we reset, they can't do anything with it.

 

So this really needs to be interchangable but right now only IE6 is switching.

[Firefox]

We had a similar sort of issue, it was to do with a setting running in preference mode.

 

User Configuration\Windows Settings\Internet Explorer Maintenance\Connection

 

right click this and see if preference mode is ticked?

 

Under connection you will see the proxy settings option (check your settings are correct)

 

The only way we got this to work was to untick preference mode, which effectively enforced the settings!

 

this does clear other settings under Internet Explorer Maintenance though, so do try this in a test setup first ;-)

[stu1892]

Yeah, it was already unchecked. Decent spot though!

[Firefox]

have you run RSoP with a particular user and machine that should be getting this setting? what was the result?

[glen_j]

i had some fun with this recently, try unticking the gropher settings box in the group poilcy under proxy settings the newer version of internet explorer doesn't have this. also check there isn't a folder called custom in the internet explorer folder in program files on the computer your testing it on

[stu1892]

This is weird it now says preferene mode is ticked. Pretty positive i didn't click it to test before.

[Firefox]

are you sure you were checking the user config before and not computer?

[stu1892]

It says Gopher cannot be customzed in IE7 and later. There's nothing to uncheck other than 'enable proxy settings'

[glen_j]

oops my mistake, just untick the box for using the same address for all of them delete the contents of the gropher settings box and the port number. see if that works

[stu1892]

Just got snowed under (pardon the pun) doing other work so haven't tried RSoP yet.

 

However, i renamed Custom so that IE8 didn't pick it up and it didn't and the proxy was picked up correctly.

 

However, there is quite a lot of set up with in there and it's only the proxy bit that is 'dodgy'. Any idea what i can do?

[Firefox]

will you only be deploying to the 1 machine, or are you going to try to create some custom policy to remove\rename the custom folder everywhere?

 

not sure where the custom folder comes from, I don't have it in my environment

[stu1892]

It was through IEAK that i created it. But i need it for a couple of things.

 

I'll try and create another package tomorrow, leaving out all the connection options i can. Hopefully then it'll sort itself out.

 

No doubt i'll be back on first thing tomorrow.

[stu1892]

Well. By taking out the connection settings when running IEAK (not configuring them) it's worked. I was sure i had tried that already.

 

However, i've now lost how i figured out my other problem.

 

Where url shortcuts on the desktop won't connect unless the browser is opened first. It's like the internet is not connecting until a browser is opened. No idea how i sorted it before!

[Stuart247]

Hi all

 

Just reading about your problem which echo's mine last month.

 

If it helps in my case IE8 needed to restart twice to pickup machine GPO's. eg Install, restart login to create a profile GPO .pol file is collected from DC restart per machine policy is writen to the registry.

 

Have you tried 2 reboots?

 

Is there a way of automatically fooling the DC to think IE8 profile has been created? Therefore setting the updated .pol file to run on the first reboot?