Proxy setting not applying

[Blue_Cookeh]

Hey,

 

I've just been given an issue that I just can't work out!

 

I have some Windows 7 clients on our domain and they aren't applying their proxy settings properly.

 

I push proxy settings out via GPO and I can confirm using GP Results that they're applying on the problem PCs and there isn't anything in the Event Logs... but I can tell just by trying to browse the internet that there are *no* proxy settings set.

 

The users are Standard Users using mandatory profiles (which haven't got any proxy information in them).

 

Any ideas?

 

Thanks

[mtdmitchell]

Hey,

 

I've just been given an issue that I just can't work out!

 

I have some Windows 7 clients on our domain and they aren't applying their proxy settings properly.

 

I push proxy settings out via GPO and I can confirm using GP Results that they're applying on the problem PCs and there isn't anything in the Event Logs... but I can tell just by trying to browse the internet that there are *no* proxy settings set.

 

The users are Standard Users using mandatory profiles (which haven't got any proxy information in them).

 

Any ideas?

 

Thanks

 

Have you set he Proxy on the default Domain GPO? and also lower down? i found if i removed the Proxy settings from the default domain and left it lower down it applyed fine to the win 7 machines.

 

on my network the default domain gpo was the only policy i migrated when upgrading to 2008 r2 from 2003 r2. I re-created all other gpo's....i thought i was maybe something to do with that.

[Blue_Cookeh]

There used to be some proxy settings set in the Default Domain policy from back before I got here, but I removed those months ago and these Windows 7 machines have a fresh OS on, so I can't see that being the problem.

 

We're running a mix 2003R2/2008R2 XP/W7 network here. I'm using new GPOs for Windows 7 clients (selected using WMI filters, also confirmed working with GP Results).

 

EDIT: Just found something else. I reenabled the ability to edit proxy information and that isn't even taking effect on the computer... odd.

Edited January 4, 2012 by Blue_Cookeh

[ricki]

Hi

 

Have you updated the adm for your version of ie. I you have the wrong adm/admx they dont always apply. Plus it might be worth trying to create another gpo with all your ie settings in and see if that works we had a corrupt policy a bit back.

 

Richard

[Blue_Cookeh]

OK, I made a new OU, created and linked a GPO with our proxy settings in and dropped the user in the new OU.

 

All Windows restrictions were taken off (so we know it's not the old GPO being applied) but the proxy settings from the new GPO were not applied. At this point I can only imagine it is the ADM files, but this is happening on both IE8 and IE9, I'm editing the GPOs on my Windows 7 admin machine at the moment... and we do have a 2008R2 DC.

 

I was thinking of just creating a logon script to set the proxy if this carries on, but I don't really want to reenable registry editing.

[Michael]

Have you applied any IE settings using GPP? If yes, I would avoid it as it appears to break IE8 and IE9.

 

GPO (recommended method): User Config > Policies > Internet Explorer Maintenance > Connection > Proxy Settings

 

GPP (NOT recommended): User Config > Preferences > Control Panel Settings > Internet Settings

[apeo]

You could try reg hack using GP Preferences.

[Blue_Cookeh]

Have you applied any IE settings using GPP? If yes, I would avoid it as it appears to break IE8 and IE9.

 

GPO (recommended method): User Config > Policies > Internet Explorer Maintenance > Connection > Proxy Settings

 

GPP (NOT recommended): User Config > Preferences > Control Panel Settings > Internet Settings

 

I'm trying to apply them using a GPO, yeah.

 

You could try reg hack using GP Preferences.

 

I'll give that a go tomorrow too, it's just odd that it won't do it the "official" way.

 

EDIT: I've just installed 2008R2 and W7 in virtual machines on a test domain and proxy settings aren't being pushed out even on that... I must be doing something stupid here

Edited January 4, 2012 by Blue_Cookeh

[Blue_Cookeh]

Just to add, I think I managed to find out the problem.

 

I made a new GPO and OU for the user in question but this time I didn't set the same proxy address for all protocols, instead I set it manually for all of them except Gopher... this time IE8 and IE9 picked it up. It seems they dropped Gopher support after IE7 or something and setting it using GPOs breaks the entire setting.

[apeo]

Good catch, will keep that in mind.

[mreardon]

Just to add, I think I managed to find out the problem.

 

I made a new GPO and OU for the user in question but this time I didn't set the same proxy address for all protocols, instead I set it manually for all of them except Gopher... this time IE8 and IE9 picked it up. It seems they dropped Gopher support after IE7 or something and setting it using GPOs breaks the entire setting.

 

Thank you!

 

After beating my head against a wall on this issue for the past month, your post described exactly what our problem was. Now I can finally put this issue to rest and watch with excitement all of the DENIED entries in our squid logs tomorrow

[Nick_F]

Great - thanks. This has been driving us nuts aswell. Thanks again Microsoft.

[resident_tech]

Been banging my head against this all morning too. I have tried just about everything I could think of and that's been suggested on here and other sites. I have a Win 2008 domain controller and am trying to roll out Windows 7. We are currently running XP without any issues. The proxy settings in IE are not being applied for standard users, and all other gpo settings are being applied as normal. I tried creating a domain admin account in the same OU as the affected users so it would have the same group policy settings. When I use that account to log into a Win7 workstation the proxy settings are applied as normal. When I log back in with the standard user acct I get the same symptoms as before (no proxy settings applied). I have verified that my server is up to date on all it's policy stuff and is running IE 9 like the workstations. Also verified that WMI is functioning normally on the workstations. I'm out of ideas here at the moment

 

Btw, I tried the gopher fix as well with no luck..

[Michael]

If you navigate to: HKCU > Software > Microsoft > Windows > CurrentVersion > Internet Settings

 

Take an export from here. The three entries you're looking for are:

 

ProxyEnable 1

ProxyOverride (your exceptions)

ProxyServer eduproxy.whateveryoulike

 

Import these using GPP on 2008 R2 and like magic, proxy settings will be applied.

[ricki]

Hi

 

Have you run a group policy results from the group policy management.

 

Normally the admx are centrally stored in a windows 2008 domain and they can be updated here centrally and all domain controller can pick it up.

 

It might also be worth checking the security settings if the computers cannot read the polciy they cannot apply it.

 

Lastly have a look at the filters wmi filtering to check that the filter is not stopping it being read.

 

Check the time date are synced with the domain as clients will not authenticate with kerberos if they are more than 5 mins out.

 

I have had a bad image in the past where all the machines from that image would not apply the settings but other imaged it did.

 

Are the computers with 1 gig nic cards. Try updating the driver and have you put in a gproup policy that will wait for the domain and I have to put in a reg setting that makes the computer wait a bit as the nic card is to fast for the domain.

 

Group Policy may not install the PolicyMaker Software Update client on a Windows XP Service Pack 2-based computer, and event ID 5719 and event ID 1054 are logged

 

I know this will sound a silly question but is the gpo attached to a user ou or a computer ou. If they are user settings it has to be applied to a user ou.

 

You can force then in with a registry setting as a log on script for the users

 

I used to use

 

Windows Registry Editor Version 5.00

 

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings]

"ProxyEnable"=dword:00000001

"ProxyServer"="proxy:proxy port no"

"ProxyOverride"="server name1 ;server name 2;"

[chazzy2501]

just an fyi, I had the same issues here and found that the user GPO proxy settings wouldn't apply unless my PC was in a vailid OU. My fresh built PCs were still in the default computers container, this somehow prevented the user proxy settings from applying?

[andrewh2012]

Just to add, I think I managed to find out the problem.

 

I made a new GPO and OU for the user in question but this time I didn't set the same proxy address for all protocols, instead I set it manually for all of them except Gopher... this time IE8 and IE9 picked it up. It seems they dropped Gopher support after IE7 or something and setting it using GPOs breaks the entire setting.

 

This Gopher fix worked for me too. Many thanks as I was really getting frustrated!