Problem configuring proxy settings in IE7 via group policies "CraigM" <cwigster[ at ]nospam.people.net.au> 06.07.2007 08:26:46 Hi everyone, Apologies for the cross posting, I'm not entirely sure if this is a IE7 issue or a group policy issue. I had a group policy that forces a few IE settings for all of our users. This policy works fine for users on IE6, however for those on IE7 all of the settings apply except the proxy settings. This is most frustrating as we are trying to lockdown outgoing web access to authorised systems and to force all the PCs to go via the proxy server. Now I have done a bit of searching on the web and did come across a reference for this MS kb article http://support.microsoft.com/kb/555850/en-us which in a nutshell states that non admin users are now not allowed to alter their proxy settings if a specific local policy is set to "disabled" or "enabled", so they recommend it is set to "disabled". Well I have tried this and it still doesn't work, even after doing copious amounts of gpupdate /force and rebooting my PC. Using the Group Policy Results function in the Group Policy Editor I did notice an odd thing, well odd to me at any rate. The Summary page shows that the policy that configures the proxy settings has been applied, however under the Settings tab, when I expand the Internet Explorer Maintenance section it does not list the proxy settings, it only shows the following Browser User Interface/Customized Title Bar URLs/Important URLs URLs/Favorites and Links I would have expected to see Connection or something relating to the proxy settings defined in the policy. So in summary, the existing policy works for IE6 but the proxy related settings are not being applied to IE7. Has anyone come across this? Are there any updated IE7 specific policy files I should be installing? Any help appreciated Craig

RE: Problem configuring proxy settings in IE7 via group policies Gistcheckin 06.07.2007 19:36:10 Have you tried using Automatically Detect Settings? Release Notes: http://msdn2.microsoft.com/en-us/ie/aa740486.aspx Open Internet Explorer, click the Tools button, and then click Internet Options. Click the Connections tab. Click the first entry in the Dialup and Virtual Private Networks list, and then click Settings. Select the Automatically detect settings check box, and then click OK. Repeat the previous two steps for each entry in the Dialup and Virtual Private Networks list. Click the Lan Settings button in the Connections tab, and repeat steps 4-6. Click OK on the Connections tab. Close Internet Explorer, and then restart it -- Gistcheckin "CraigM" wrote: [Quoted Text] > Hi everyone, > > Apologies for the cross posting, I'm not entirely sure if this is a IE7 > issue or a group policy issue. > > I had a group policy that forces a few IE settings for all of our users. > This policy works fine for users on IE6, however for those on IE7 all of the > settings apply except the proxy settings. This is most frustrating as we are > trying to lockdown outgoing web access to authorised systems and to force > all the PCs to go via the proxy server. Now I have done a bit of searching > on the web and did come across a reference for this MS kb article > > http://support.microsoft.com/kb/555850/en-us > > which in a nutshell states that non admin users are now not allowed to alter > their proxy settings if a specific local policy is set to "disabled" or > "enabled", so they recommend it is set to "disabled". Well I have tried this > and it still doesn't work, even after doing copious amounts of gpupdate > /force and rebooting my PC. > > Using the Group Policy Results function in the Group Policy Editor I did > notice an odd thing, well odd to me at any rate. The Summary page shows that > the policy that configures the proxy settings has been applied, however > under the Settings tab, when I expand the Internet Explorer Maintenance > section it does not list the proxy settings, it only shows the following > > Browser User Interface/Customized Title Bar > URLs/Important URLs > URLs/Favorites and Links > > I would have expected to see Connection or something relating to the proxy > settings defined in the policy. > > So in summary, the existing policy works for IE6 but the proxy related > settings are not being applied to IE7. Has anyone come across this? Are > there any updated IE7 specific policy files I should be installing? > > Any help appreciated > > Craig > > >

Re: Problem configuring proxy settings in IE7 via group policies "CraigM" <cwigster[ at ]nospam.people.net.au> 10.07.2007 02:06:36 Hi Gistcheckin, yes I have tried using the Auto detect settings, all to no avail. I was wondering if there is a updated policy template I am missing or something? It's very frustrating as people keep disabling the proxy settings to bypass the proxy. Looks like I'm going to have to resort to blocking external HTTP traffic at the f/w and only allow the proxy to go out. Probably not a bad idea anyway as it's been on my list of things to do for quite awhile, it's just that other things keep on pushing it down the list. Oh well, if anyone has managed to get proxy settings applying to IE7 via group policies then I would be interested to know how you managed it. Craig "Gistcheckin" <Gistcheckin[ at ]discussions.microsoft.com> wrote in message news:6EDE49D0-D9BA-4EDA-B557-E9796C0496BD[ at ]microsoft.com... [Quoted Text] > Have you tried using Automatically Detect Settings? > Release Notes: > http://msdn2.microsoft.com/en-us/ie/aa740486.aspx > Open Internet Explorer, click the Tools button, and then click Internet > Options. > Click the Connections tab. > Click the first entry in the Dialup and Virtual Private Networks list, and > then click Settings. > Select the Automatically detect settings check box, and then click OK. > Repeat the previous two steps for each entry in the Dialup and Virtual > Private Networks list. > Click the Lan Settings button in the Connections tab, and repeat steps > 4-6. > Click OK on the Connections tab. > Close Internet Explorer, and then restart it > -- > Gistcheckin > > > "CraigM" wrote: > >> Hi everyone, >> >> Apologies for the cross posting, I'm not entirely sure if this is a IE7 >> issue or a group policy issue. >> >> I had a group policy that forces a few IE settings for all of our users. >> This policy works fine for users on IE6, however for those on IE7 all of >> the >> settings apply except the proxy settings. This is most frustrating as we >> are >> trying to lockdown outgoing web access to authorised systems and to force >> all the PCs to go via the proxy server. Now I have done a bit of >> searching >> on the web and did come across a reference for this MS kb article >> >> http://support.microsoft.com/kb/555850/en-us >> >> which in a nutshell states that non admin users are now not allowed to >> alter >> their proxy settings if a specific local policy is set to "disabled" or >> "enabled", so they recommend it is set to "disabled". Well I have tried >> this >> and it still doesn't work, even after doing copious amounts of gpupdate >> /force and rebooting my PC. >> >> Using the Group Policy Results function in the Group Policy Editor I did >> notice an odd thing, well odd to me at any rate. The Summary page shows >> that >> the policy that configures the proxy settings has been applied, however >> under the Settings tab, when I expand the Internet Explorer Maintenance >> section it does not list the proxy settings, it only shows the following >> >> Browser User Interface/Customized Title Bar >> URLs/Important URLs >> URLs/Favorites and Links >> >> I would have expected to see Connection or something relating to the >> proxy >> settings defined in the policy. >> >> So in summary, the existing policy works for IE6 but the proxy related >> settings are not being applied to IE7. Has anyone come across this? Are >> there any updated IE7 specific policy files I should be installing? >> >> Any help appreciated >> >> Craig >> >> >>

Re: Problem configuring proxy settings in IE7 via group policies Gistcheckin 10.07.2007 02:24:01 Scroll down to Mark Heitbrink's response http://www.microsoft.com/communities/newsgroups/en-us/default.aspx?&query=Configure+Proxy+Settings+in+IE+7&lang=en&cr=US&guid=&sloc=en-us&dg=microsoft.public.windows.group_policy&p=1&tid=f6f3dc7b-188c-4bc3-a731-43ed0c13b7ce -- Gistcheckin "CraigM" wrote: [Quoted Text] > Hi Gistcheckin, > > yes I have tried using the Auto detect settings, all to no avail. I was > wondering if there is a updated policy template I am missing or something? > > It's very frustrating as people keep disabling the proxy settings to bypass > the proxy. Looks like I'm going to have to resort to blocking external HTTP > traffic at the f/w and only allow the proxy to go out. Probably not a bad > idea anyway as it's been on my list of things to do for quite awhile, it's > just that other things keep on pushing it down the list. > > Oh well, if anyone has managed to get proxy settings applying to IE7 via > group policies then I would be interested to know how you managed it. > > Craig > > "Gistcheckin" <Gistcheckin[ at ]discussions.microsoft.com> wrote in message > news:6EDE49D0-D9BA-4EDA-B557-E9796C0496BD[ at ]microsoft.com... > > Have you tried using Automatically Detect Settings? > > Release Notes: > > http://msdn2.microsoft.com/en-us/ie/aa740486.aspx > > Open Internet Explorer, click the Tools button, and then click Internet > > Options. > > Click the Connections tab. > > Click the first entry in the Dialup and Virtual Private Networks list, and > > then click Settings. > > Select the Automatically detect settings check box, and then click OK. > > Repeat the previous two steps for each entry in the Dialup and Virtual > > Private Networks list. > > Click the Lan Settings button in the Connections tab, and repeat steps > > 4-6. > > Click OK on the Connections tab. > > Close Internet Explorer, and then restart it > > -- > > Gistcheckin > > > > > > "CraigM" wrote: > > > >> Hi everyone, > >> > >> Apologies for the cross posting, I'm not entirely sure if this is a IE7 > >> issue or a group policy issue. > >> > >> I had a group policy that forces a few IE settings for all of our users. > >> This policy works fine for users on IE6, however for those on IE7 all of > >> the > >> settings apply except the proxy settings. This is most frustrating as we > >> are > >> trying to lockdown outgoing web access to authorised systems and to force > >> all the PCs to go via the proxy server. Now I have done a bit of > >> searching > >> on the web and did come across a reference for this MS kb article > >> > >> http://support.microsoft.com/kb/555850/en-us > >> > >> which in a nutshell states that non admin users are now not allowed to > >> alter > >> their proxy settings if a specific local policy is set to "disabled" or > >> "enabled", so they recommend it is set to "disabled". Well I have tried > >> this > >> and it still doesn't work, even after doing copious amounts of gpupdate > >> /force and rebooting my PC. > >> > >> Using the Group Policy Results function in the Group Policy Editor I did > >> notice an odd thing, well odd to me at any rate. The Summary page shows > >> that > >> the policy that configures the proxy settings has been applied, however > >> under the Settings tab, when I expand the Internet Explorer Maintenance > >> section it does not list the proxy settings, it only shows the following > >> > >> Browser User Interface/Customized Title Bar > >> URLs/Important URLs > >> URLs/Favorites and Links > >> > >> I would have expected to see Connection or something relating to the > >> proxy > >> settings defined in the policy. > >> > >> So in summary, the existing policy works for IE6 but the proxy related > >> settings are not being applied to IE7. Has anyone come across this? Are > >> there any updated IE7 specific policy files I should be installing? > >> > >> Any help appreciated > >> > >> Craig > >> > >> > >> > > >

Re: Problem configuring proxy settings in IE7 via group policies "CraigM" <cwigster[ at ]nospam.people.net.au> 12.07.2007 04:39:59 Hi Gistcheckin, thanks for the link. I did actually come accross the thread explaining the use of WPAD, however I could not get it to work for IE7. Worked fine for Firefox and IE6, but IE7 still refuses to pick up the proxy settings. Oh well, back to plan C. Regards Craig "Gistcheckin" <Gistcheckin[ at ]discussions.microsoft.com> wrote in message news:5761F0C4-B02D-4697-BA32-9B280B49F1F7[ at ]microsoft.com... [Quoted Text] > Scroll down to Mark Heitbrink's response > http://www.microsoft.com/communities/newsgroups/en-us/default.aspx?&query=Configure+Proxy+Settings+in+IE+7&lang=en&cr=US&guid=&sloc=en-us&dg=microsoft.public.windows.group_policy&p=1&tid=f6f3dc7b-188c-4bc3-a731-43ed0c13b7ce > -- > Gistcheckin > > > "CraigM" wrote: > >> Hi Gistcheckin, >> >> yes I have tried using the Auto detect settings, all to no avail. I was >> wondering if there is a updated policy template I am missing or >> something? >> >> It's very frustrating as people keep disabling the proxy settings to >> bypass >> the proxy. Looks like I'm going to have to resort to blocking external >> HTTP >> traffic at the f/w and only allow the proxy to go out. Probably not a bad >> idea anyway as it's been on my list of things to do for quite awhile, >> it's >> just that other things keep on pushing it down the list. >> >> Oh well, if anyone has managed to get proxy settings applying to IE7 via >> group policies then I would be interested to know how you managed it. >> >> Craig >> >> "Gistcheckin" <Gistcheckin[ at ]discussions.microsoft.com> wrote in message >> news:6EDE49D0-D9BA-4EDA-B557-E9796C0496BD[ at ]microsoft.com... >> > Have you tried using Automatically Detect Settings? >> > Release Notes: >> > http://msdn2.microsoft.com/en-us/ie/aa740486.aspx >> > Open Internet Explorer, click the Tools button, and then click Internet >> > Options. >> > Click the Connections tab. >> > Click the first entry in the Dialup and Virtual Private Networks list, >> > and >> > then click Settings. >> > Select the Automatically detect settings check box, and then click OK. >> > Repeat the previous two steps for each entry in the Dialup and Virtual >> > Private Networks list. >> > Click the Lan Settings button in the Connections tab, and repeat steps >> > 4-6. >> > Click OK on the Connections tab. >> > Close Internet Explorer, and then restart it >> > -- >> > Gistcheckin >> > >> > >> > "CraigM" wrote: >> > >> >> Hi everyone, >> >> >> >> Apologies for the cross posting, I'm not entirely sure if this is a >> >> IE7 >> >> issue or a group policy issue. >> >> >> >> I had a group policy that forces a few IE settings for all of our >> >> users. >> >> This policy works fine for users on IE6, however for those on IE7 all >> >> of >> >> the >> >> settings apply except the proxy settings. This is most frustrating as >> >> we >> >> are >> >> trying to lockdown outgoing web access to authorised systems and to >> >> force >> >> all the PCs to go via the proxy server. Now I have done a bit of >> >> searching >> >> on the web and did come across a reference for this MS kb article >> >> >> >> http://support.microsoft.com/kb/555850/en-us >> >> >> >> which in a nutshell states that non admin users are now not allowed to >> >> alter >> >> their proxy settings if a specific local policy is set to "disabled" >> >> or >> >> "enabled", so they recommend it is set to "disabled". Well I have >> >> tried >> >> this >> >> and it still doesn't work, even after doing copious amounts of >> >> gpupdate >> >> /force and rebooting my PC. >> >> >> >> Using the Group Policy Results function in the Group Policy Editor I >> >> did >> >> notice an odd thing, well odd to me at any rate. The Summary page >> >> shows >> >> that >> >> the policy that configures the proxy settings has been applied, >> >> however >> >> under the Settings tab, when I expand the Internet Explorer >> >> Maintenance >> >> section it does not list the proxy settings, it only shows the >> >> following >> >> >> >> Browser User Interface/Customized Title Bar >> >> URLs/Important URLs >> >> URLs/Favorites and Links >> >> >> >> I would have expected to see Connection or something relating to the >> >> proxy >> >> settings defined in the policy. >> >> >> >> So in summary, the existing policy works for IE6 but the proxy related >> >> settings are not being applied to IE7. Has anyone come across this? >> >> Are >> >> there any updated IE7 specific policy files I should be installing? >> >> >> >> Any help appreciated >> >> >> >> Craig >> >> >> >> >> >> >> >> >>

Re: Problem configuring proxy settings in IE7 via group policies "Robert Aldwinckle" <robald[ at ]techemail.com> 12.07.2007 15:12:07 "CraigM" <cwigster[ at ]nospam.people.net.au> wrote in message news:uK2e16DxHHA.276[ at ]TK2MSFTNGP06.phx.gbl... [Quoted Text] > Hi Gistcheckin, > > thanks for the link. I did actually come accross the thread explaining the > use of WPAD, however I could not get it to work for IE7. Worked fine for > Firefox and IE6, but IE7 still refuses to pick up the proxy settings. I've always wondered how you could debug any script errors made there. Perhaps finding a solution to that question would lead to an answer for this one? Also, some features which used to work in IE6 evidently have been disabled by default in IE7. Making those work sometimes involves zapping obscure values in security zones (for example.) Therefore, one tack which might prove useful I think would be running ProcMon with both cases and analysing the two traces to try to figure out where they diverge and ultimately the cause of that. In the case of the above example it could be as simple as a single bit difference in one of those security settings. Good luck Robert Aldwinckle ---

Re: Problem configuring proxy settings in IE7 via group policies "CraigM" <cwigster[ at ]nospam.people.net.au> 13.07.2007 04:20:33 Hi Robert, thanks for the tips. Actually I made a mistake in my last post, the WPAD script did not work for Firefox as well. As you suggest I'll look at some of the security settings and see if I can get it to inherit the policy settings otherwise I'll just block all HTTP/HTTPS/FTP traffic and force everyone to go via the proxy server. Still, it's interesting to see that I'm not the only one in this boat, which is some small confort. :) Craig "Robert Aldwinckle" <robald[ at ]techemail.com> wrote in message news:OOR4HdJxHHA.4736[ at ]TK2MSFTNGP05.phx.gbl... [Quoted Text] > "CraigM" <cwigster[ at ]nospam.people.net.au> wrote in message > news:uK2e16DxHHA.276[ at ]TK2MSFTNGP06.phx.gbl... >> Hi Gistcheckin, >> >> thanks for the link. I did actually come accross the thread explaining >> the >> use of WPAD, however I could not get it to work for IE7. Worked fine for >> Firefox and IE6, but IE7 still refuses to pick up the proxy settings. > > > I've always wondered how you could debug any script errors made there. > Perhaps finding a solution to that question would lead to an answer for > this one? > > Also, some features which used to work in IE6 evidently have been disabled > by default in IE7. Making those work sometimes involves zapping obscure > values in security zones (for example.) Therefore, one tack which might > prove > useful I think would be running ProcMon with both cases and analysing > the > two traces to try to figure out where they diverge and ultimately the > cause of > that. In the case of the above example it could be as simple as a single > bit > difference in one of those security settings. > > > Good luck > > Robert Aldwinckle > --- > >

Re: Problem configuring proxy settings in IE7 via group policies "Mark Heitbrink [MVP]" <spam-only[ at ]gruppenrichtlinien.de> 13.07.2007 07:47:19 CraigM schrieb: [Quoted Text] > thanks for the link. I did actually come accross the thread explaining the > use of WPAD, however I could not get it to work for IE7. Worked fine for > Firefox and IE6, but IE7 still refuses to pick up the proxy settings. I´m running all client on IE7, all are searching automatically and accept the wpad.dat. Hm ... there is no differences in the browser, if you are using the DNS solution. Perhaps, there are still manually settings in your IE options? Mark -- Mark Heitbrink - MVP Windows Server - Group Policy Homepage: www.gruppenrichtlinien.de - deutsch Blog: gpupdate.spaces.live.com - english