Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.


pomtom44

94 posts

Master Geek


#255899 5-Sep-2019 12:10
Send private message

Hi all

At work we have a group policy which changes the registry for the user when they log on to set the web proxy. We are changing our proxy over to a new one, which no longer needs the proxy setting enabled.

 

Im trying to figure out how the setup actually works because it's not doing what Im expecting it to do

 

I went to our AD and made a new policy which updates the registry to disable the proxy, added it to a new OU and logged in with a user in that OU.

 

However the user still has the proxy enabled, and auto-detect selected.

 

Iv tried a few things, and somewhere along the way i managed to get it to change the hostname of the proxy to its IP (auto discover I assume) but I dont know what did it.

 

I went to change the user back to the old policy to try reset the proxy, but now its stuck on the changed address.

 

I can see the policy being applied on the user when I run a gpresult, but when I check the registry, it appears the changes from the policy are either not taking place, or are being changed somewhere else that I dont know about.

 

Im wanting to start again and try figure this out, but I have no idea where to go and how to achieve what I want.

anyone have any input that can help me?
Hope my rambling makes sense to someone.

 

 


Create new topic
evilonenz
/dev/urandom
152 posts

Master Geek

Lifetime subscriber

  #2311071 5-Sep-2019 12:13
Send private message

Have you checked you're not using a WPAD file, via option 252 in DHCP? GP changing IE settings can often be a nightmare, but updating the registry entry should work. 

 

I would also recommend trawling other group policy objects, and ensuring there isn't a double up of proxy elements in different GPOs. Group Policy Modelling and 'gpresult.exe' are your friend here, too.


pomtom44

94 posts

Master Geek


  #2311073 5-Sep-2019 12:16
Send private message

evilonenz:

 

Have you checked you're not using a WPAD file, via option 252 in DHCP? GP changing IE settings can often be a nightmare, but updating the registry entry should work. 

 

I would also recommend trawling other group policy objects, and ensuring there isn't a double up of proxy elements in different GPOs. Group Policy Modelling and 'gpresult.exe' are your friend here, too.

 



we are running in a RDS environment, so DHCP isn't an issue here.

 

Iv scanned the gpresult export and can only see my policy that has any relation to proxy.

 

 


 
 
 
 


evilonenz
/dev/urandom
152 posts

Master Geek

Lifetime subscriber

  #2311076 5-Sep-2019 12:20
Send private message

Default WinHttp action is auto-detect proxy settings by running WPAD, from DHCP and/or DNS, and download the configuration. I would definitely look through your DHCP and DNS settings.

 

netsh winhttp show proxy
will be a good command for you, too, if it shows nothing, it'll more than likely be configuring automatically via wpad somewhere.


pomtom44

94 posts

Master Geek


  #2311078 5-Sep-2019 12:24
Send private message

evilonenz:

 

Default WinHttp action is auto-detect proxy settings by running WPAD, from DHCP and/or DNS, and download the configuration. I would definitely look through your DHCP and DNS settings.

 

netsh winhttp show proxy will be a good command for you, too, if it shows nothing, it'll more than likely be configuring automatically via wpad somewhere.

 



I know its not DHCP as we dont have it running for our core network (where the servers are located)
And I can't find anything in DNS about WPAD

 

Also the command comes back with "Blocked by group policy" which is why im having a hard time troubleshooting the issue

 

(Side note: Domain admins such as myself, dont have the proxy enabled, as we are not part of the policy group in AD, which is why im having to test on a standard users profile)


jnimmo
What does this tag do
1041 posts

Uber Geek

Subscriber

  #2311080 5-Sep-2019 12:26
Send private message

Also check 'Make proxy settings per-machine (rather than per user)'


pomtom44

94 posts

Master Geek


  #2311086 5-Sep-2019 12:32
Send private message

jnimmo:

 

Also check 'Make proxy settings per-machine (rather than per user)'

 

 

Sorry which checkbox is this?
And we want per user, not per machine as we run a dual server RDS, so we want it for individual users.


pomtom44

94 posts

Master Geek


  #2311192 5-Sep-2019 14:07
Send private message

Update
Found this in the event logs

 

Event ID 1530: Windows detected your registry file is still in use by other applications or services

 

 

 

With relation to the registry with the internet settings


Create new topic





News »

Vodafone enables 5G roaming - for when international travel comes
Posted 30-Oct-2020 15:03


Spark awards funding to Kiwi businesses in 5G funding initiative
Posted 30-Oct-2020 14:58


Huawei launches IdeaHub Pro in New Zealand
Posted 27-Oct-2020 16:41


Southland-based IT specialist providing virtual services worldwide
Posted 27-Oct-2020 15:55


NASA discovers water on sunlit surface of Moon
Posted 27-Oct-2020 08:30


Huawei introduces new features to Petal Search, Maps and Docs
Posted 26-Oct-2020 18:05


Nokia selected by NASA to build first ever cellular network on the Moon
Posted 21-Oct-2020 08:34


Nanoleaf enhances lighting line with launch of Triangles and Mini Triangles
Posted 17-Oct-2020 20:18


Synology unveils DS16211+
Posted 17-Oct-2020 20:12


Ingram Micro introduces FootfallCam to New Zealand channel
Posted 17-Oct-2020 20:06


Dropbox adopts Virtual First working policy
Posted 17-Oct-2020 19:47


OPPO announces Reno4 Series 5G line-up in NZ
Posted 16-Oct-2020 08:52


Microsoft Highway to a Hundred expands to Asia Pacific
Posted 14-Oct-2020 09:34


Spark turns on 5G in Auckland
Posted 14-Oct-2020 09:29


AMD Launches AMD Ryzen 5000 Series Desktop Processors
Posted 9-Oct-2020 10:13









Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.


Support Geekzone »

Our community of supporters help make Geekzone possible. Click the button below to join them.

Support Geezone on PressPatron



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.