tkultschar

Still waiting to hear back from LA. Checked the Event Viewer - There is nothing relating to either Sophos or what SRP is up to. I can't understand how it would block DNS name resolution though. I can ping IP addresses but not hostnames. Baffling!

Thanks for the replies! The only thing I can see that could block it is the path rules, and as \Program Files and \Program Files(x86) is unrestricted it shouldn't stop anything running - unless the exe's are somewhere else that I can't see. Just discovered that the effected users can't resolve any DNS names - which may be why they cannot connect to the network proxy, as I used the FQDN and it can't resolve it manually. Will attempt using an IP a bit later - might be a temporary fix. Had a quick gander at Sophos knowledge base and it does say that the firewall can block windows services, but the Sophos firewall is currently allowing all traffic which is stranger still. We're a school so our Sophos licensing etc. is managed by the local authority helpdesk, and they haven't got back to me yet. I might just send a request to Sophos anyway explaining...

If anyone has any suggestions I'd be grateful. Slowly running out of ideas and at the moment have to choose between Internet Access and Anti-Virus... Thanks Tom

Logon script or you could give rights to the users so that they can add it themselves.

Hi all, Having a problem with getting our Sophos endpoints up and running. If a client is protected with the endpoint software and a user logs in that has software restriction GPO's applied to it, something blocks access to Internet browsing. I've narrowed it down to a single GPO that contains the software restrictions, and if they are disabled (or changed to unrestricted) then the user can browse the Internet. The message that appears is that the browser cannot connect to the proxy server. Is there a clash somewhere? or a setting that needs amending? I've tried fully disabling all policies but there still isn't any connection. Strangely, as an Admin I can browse the Internet if I run Chrome with my credentials, but I'm assuming it's because there are no active software restrictions imposed on my account, and the proxy settings are taken from the registry. Sophos Enterprise Console 5.1 Windows Server 2008 R2 - Standard users no admin rights Thanks in advance Tom

This seems very strange. A couple of users with the problem report that their internet came back when they tried to refresh the page. No restarts or log offs. Network issue?

We are using that version yep, but not wpad. It's only effecting the newest users, but the majority of our default profile users for some reason. Getting there, slowly...

IE9 and Chrome. Doesn't seem browser related, but you never know! I've just created another account, blocking all inherited GPO's to that OU and applied a simple GPO for proxy settings. Internet works 100% on that, so it must be a GPO causing the problem?

No duplicate proxy settings found. However, if the machine is restarted sometimes the internet will connect - this seems to be random after each consecutive restart. Tom

Problem similar to... http://www.edugeek.net/forums/windows-7/75818-proxy-settings-do-not-apply.html Currently double checking all GPO's for a second proxy policy

Hi all, Having problems with some machines in which certain accounts cannot browse the Internet. As far as I can work out, this is related to Proxy Settings not applying. This is also related mainly to some 'Exam Accounts' that we use - but it has popped up elsewhere at random in the domain. This is normally fixed with a quick restart - the 'Exam Accounts' still don't connect after a reboot. The only additional group policy settings that apply to these accounts are default profiles and drive maps. Everything else is identical to a generic 'ManagedUsers' GPO, in which the proxy setting is applied through the Polices/Windows Settings/Internet Explorer Maintenance/Proxy Settings. RSOP shows the policy has succeeded. GP logs on the client show that the GPO has applied. winsock resets will temporarily solve the problem. I'm seeing some wpad traffic broadcasts on wireshark but autoconfig proxy settings are set to disabled. Getting pretty stuck. Any help appreciated! I'm sure I've forgotten plenty of detail, let me know. Tom Windows Server 2008 R2 DC's Windows 7 Professional 64bit clients Roaming profiles on clients with folder redirection to samba services