Applying proxy.pac from domain Group Policy
We have a problem whereby the proxy.pac location is not being applied to a client from the domain Group Policy. It is specified in User Configuration -> Windows Settings -> Internet Explorer Maintenance -> Connection/Automatic Browser Configuration Automatic Browser Configuration is Enabled Auto-proxy URL is set to the proxy.pac path. Everything else from this policy is being applied to the user, it is purely this proxy.pac section that is not getting applied. (I have run rsop to prove the policy is being applied). It would appear that the registry key HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\AutoConfigURL should get set to the proxy.pac path on logon (that's what I see on other clients that do work correctly) but that is not happening although the user has modify permissions on the relevant registry key. However, if I make the user a local admin, the settings are applied from the policy and the registry key is set. What is even more bizarre is that if I remote desktop to the client PC as a user then the settings are applied, but if I login directly on the PC they are not. As this PC is used by multiple users and I don't know who they are going to be (could be any one out of 100 users) I can't fudge it by making them temporary local admins. Does anyone know why logging in via remote desktop should behave differently from logging in directly on the PC? I can't find anything that tells me what the permissions are for Remote Desktop Users group. I should add I have also set "Process even if group Policy Objects have not changed" in Computer Configuration -> Administrative Templates -> System -> Group Policy. Policy is applied from a server; there is no local policy configuration.
July 24th, 2012 12:55pm

Hi, You may use Resultant Set of Policy to check whether this policy is applied from Domain Controller. Also, try to run Gpupdate/force in elevated CMD. Juke Chou TechNet Subscriber Support If you are TechNet Subscription user and have any feedback on our support quality, please send your feedbackhere. Juke Chou TechNet Community Support
Free Windows Admin Tool Kit Click here and download it now
July 25th, 2012 3:31am

As I said in my original post "Everything else from this policy is being applied to the user, it is purely this proxy.pac section that is not getting applied. (I have run rsop to prove the policy is being applied)."
July 25th, 2012 6:26am

Hi, When the settings are applied, A stage of application is to make the registry changes in the following locations. If there is someting wrong in these keys, maybe it will fail to apply IE maintenance settings. HKLM\Software\Policies (preferred) HKLM\Software\Microsoft\Windows\CurrentVersion\Policies HKCU\Software\Policies (preferred) HKCU\Software\Microsoft\Windows\CurrentVersion\Policies Please delete all the keys, then try to run gpupdate /force again to reapply these settings. Note: before deleting them, back up the registry. Juke Chou TechNet Community Support
Free Windows Admin Tool Kit Click here and download it now
July 26th, 2012 5:48am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics