Running windows 8.1 enterprise, Microsoft forefront TMG with integrated authentication, Active Directory 2012
I have a group policy set to push the tmg proxy settings to the user and I have the user blocked from accessing the internet options screen. I am using the external dns name of the tmg server. I have users who login on their laptop while in the domain network with a domain account and the internet is working. When the user goes home and is on the laptop with their same domain account and they try to access the internet sometimes 8.1 will pass the proxy authentication and the user has no issues. Sometimes the user must go to the wifi icon, and on the wifi ssid they are currently connected to it will say action needed. The user clicks on the wifi ssid and it prompts for username and password, the user enters in their domain account and password and then they can browse the internet fine via our externally accessible proxy server. Then sometimes the user does not get the action needed, and cannot access the internet via our external proxy server. We are forcing all users to use the externally accessible proxy server while off our domain network due to CIPA. Does anyone know how to make 8.1 either pass the intergraded authentication details every time or make 8.1 prompt for the username and password and the user not have to go seek out the action needed prompt.
Thanks
