Secure SSL web sites showing Page cannot be displayed on domain

[techie2008]

Hi all,

 

Our school is experiencing a peculiar problem.

 

Our school is running in a mixed environment (Windows XP and 7) with a ISA Proxy server in place.

 

Our Windows 7 machines will not open/load secure web sites when a domain user logs on. However if a local windows 7 user logs on (Administrator for example) and uses the same proxy server the site will open. Also if the same Domain user logs onto a Windows XP client, the sites also loads.

 

Can anyone shed any light on this?

 

Many thanks

[DaveyPitch]

How are you pushing out your proxy details? Through Group Policy?

[techie2008]

I am yes

[DaveyPitch]

Silly question time then - have you checked your Win 7 Proxy GPO settings to make sure that your proxy details are being pushed out to all protocols?

[techie2008]

No problem, feel free to ask

 

Yes and all protocols are setup correctly

[DaveyPitch]

Does it only affect non-administrators, or do you get the same problem when you log into a Win 7 machine? Can you check the proxy settings in IE to make sure the proxy settings have been successfully applied?

[techie2008]

Proxy is congifured correctly and it happens to all domain accounts.

 

However if you logon with a local account (inc. non admin.) with the same proxy settings the secure web sites works.

 

This is really annoying and causing the staff many problems.#

 

ARGGHHHHHHHH

[DaveyPitch]

If the proxy settings are applied fine then I reckon the problem has to be at the ISA Server. It's been a while since I used one, but I know you can run live reports to see what people are accessing, and you can narrow that down to specific users. Could you try that perhaps, targetting the report at one individual, getting them to try to access a secure website, and watch the live report on the ISA server to see if it gives any clue to why they're blocked? We got rid of our ISA server a while ago so I'm afraid I can't go back into it and see if there's anything more useful I could add.

[techie2008]

If the proxy settings are applied fine then I reckon the problem has to be at the ISA Server. It's been a while since I used one, but I know you can run live reports to see what people are accessing, and you can narrow that down to specific users. Could you try that perhaps, targetting the report at one individual, getting them to try to access a secure website, and watch the live report on the ISA server to see if it gives any clue to why they're blocked? We got rid of our ISA server a while ago so I'm afraid I can't go back into it and see if there's anything more useful I could add.

 

Thank you for your quick response.

The problem lies only on our Win7 machines, if the same user logs onto a XP machine, the secure site works.

 

Do you still think it could be at the ISA side?

[DaveyPitch]

Yeah, I reckon so, if you're sure that the proxy settings are being correctly applied to the Win 7 machines when a domain user logs in. How did you confirm they were applied correctly across all protocols btw? Do staff have access to internet properties to check themselves?