HTTPS Secure Websites

[AceDaz]

Hi

 

I have this 1 user who has the same laptop as 20 other staff members. I clone her laptop from the same image. But after a few days she is unable to access secure websites within school - Emails / Bromcom etc.

 

No-one else has this issue and I have recloned her laptop numerous times - last time it was Friday 11th Jan 2013.

 

Has anyone got any ideas?

[BigRed]

what internet browser version is she using?

[AceDaz]

what internet browser version is she using?

 

Windows 7, IE9

[free780]

Is the time,dst,time zone correct?

[DavidTomic]

Obvious question (I hope) ... but it's not ending up getting infected by some type of malware/virus is it?

 

I assume that would be one of the first things that you'd look into?

[BigRed]

Windows 7, IE9

 

I would give Firefox a go just to eliminate browser fault, also would be a good test to remove her local profile (if you are using roaming profiles then remove local profile and give her a fresh roaming profile temporarily), corrupt profiles always cause wierd issues.

[Duke5A]

I've had issues with IE9 and certificate revocation with proxy filters. Is she using a content filter? If IE is blocked from contacting the CA who issued the certificate you'll see these kinds of problems.

[Michael]

I'd also ask whether or not they're installing other software, drivers, toolbars etc...

 

Do you give users local admin access to just standard user access?

 

I've previously seen teachers install their own AV/Firewall software even though the notebook already has AV software installed.

Edited January 17, 2013 by Michael

[BigRed]

I've had issues with IE9 and certificate revocation with proxy filters. Is she using a content filter? If IE is blocked from contacting the CA who issued the certificate you'll see these kinds of problems.

 

Any way to diabnose this, i am also experiencing similar problems with tumblr and other sites?

[pete]

Any way to diabnose this, i am also experiencing similar problems with tumblr and other sites?

 

Look in your proxy logs after asking the end-user to browse the sites that don't work. Filter by their user account or their IP address.

 

You're looking for blocked access to URLs like crl.microsoft.com or crl.verisign.net where crl is Certificate Revocation List.

 

We explicitly whitelist common crls and other ones that we discover to be problematic.

 

While you can disable the check, that's a great way to get bitten when a SSL Cert provider signs a cert for Google.com and hands it out to someone who isn't Google. Or gets compromised and the same thing happens.

[AceDaz]

The secure websites are internal websites that don't go through the proxy, initially it is for electronic registers but when that works the webmail doesnt. when the webmail doesnt then the Microsoft Outlook 2010 Client fails to connect.

 

It initially works ok, but when the user has the laptop for a week or so then it stops working

[psydii]

What is the exact error message?

 

Does it affect other Browsers running under the same user account?

 

Does it affect IE on user accounts on the same laptop?

 

Are they messing with their proxy settings?

 

Stick wireshark/network monitor on it.. what is going on at the TCP/IP level?

 

Are they running any 'privacy' enhancing VPN software? (thought here: it tunnels out of your lan any web connections into the VPN provider, then obviously fails when trying to contact hostnames/ip's inside your firewall)

Edited January 22, 2013 by psydii

[AceDaz]

I am not sure what it is, but I removed her local profile and let it create it again. It *touch wood* seems ok after a week.

 

First one I have seen and it's the only user that has the issue out of 22 people who are on the same build.