Applying proxy.pac from domain Group Policy
We have a problem whereby the proxy.pac location is not being applied to a client from the domain Group Policy.
It is specified in User Configuration -> Windows Settings -> Internet Explorer Maintenance -> Connection/Automatic Browser Configuration
Automatic Browser Configuration is Enabled
Auto-proxy URL is set to the proxy.pac path.
Everything else from this policy is being applied to the user, it is purely this proxy.pac section that is not getting applied. (I have run rsop to prove the policy is being applied).
It would appear that the registry key HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\AutoConfigURL should get set to the proxy.pac path on logon (that's what I see on other clients that do work correctly) but that is not happening
although the user has modify permissions on the relevant registry key. However, if I make the user a local admin, the settings are applied from the policy and the registry key is set. What is even more bizarre is that if I remote desktop to the
client PC as a user then the settings are applied, but if I login directly on the PC they are not. As this PC is used by multiple users and I don't know who they are going to be (could be any one out of 100 users) I can't fudge it by making them
temporary local admins. Does anyone know why logging in via remote desktop should behave differently from logging in directly on the PC? I can't find anything that tells me what the permissions are for Remote Desktop Users group.
I should add I have also set "Process even if group Policy Objects have not changed" in Computer Configuration -> Administrative Templates -> System -> Group Policy. Policy is applied from a server; there is no local policy configuration.
July 24th, 2012 12:55pm
Hi,
You may use Resultant Set of Policy to check whether this policy is applied from Domain Controller. Also, try to run Gpupdate/force in elevated CMD.
Juke Chou
TechNet Subscriber Support
If you are
TechNet Subscription user and have any feedback on our support quality, please send your feedbackhere.
Juke Chou
TechNet Community Support
Free Windows Admin Tool Kit Click here and download it now
July 25th, 2012 3:31am
As I said in my original post
"Everything else from this policy is being applied to the user, it is purely this proxy.pac section that is not getting applied. (I have run rsop to prove the policy is being applied)."
July 25th, 2012 6:26am
Hi,
When the settings are applied, A stage of application is to make the registry changes in the following locations. If there is someting wrong in these keys, maybe it will fail to apply IE maintenance settings.
HKLM\Software\Policies (preferred)
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies
HKCU\Software\Policies (preferred)
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies
Please delete all the keys, then try to run gpupdate /force again to reapply these settings.
Note: before deleting them, back up the registry. Juke Chou
TechNet Community Support
Free Windows Admin Tool Kit Click here and download it now
July 26th, 2012 5:48am