gpupdate deletes local IE Proxy settings

[Christian SE]

Hi,

Several user reported, that after some time, workstation restart or
gpupdate, the local configured IE Poroxy settings disappear.

We checked all our gp's but no one is configured to set/delete these entries.
GP Results shows now entry for "Proxy Settings", "Automatic Browser
Configuration" Not configured - no winning GPO

How can we fix this behavior?

BR
Christian SE

AD Level: Windows Server 2003 (Srv2003 and Srv2008/R2)
Client: MS Vista and W7

[Ace Fekay [MCT]]

Post by Christian SE
Hi,
Several user reported, that after some time, workstation restart or
gpupdate, the local configured IE Poroxy settings disappear.
We checked all our gp's but no one is configured to set/delete these entries.
GP Results shows now entry for "Proxy Settings", "Automatic Browser
Configuration" Not configured - no winning GPO
How can we fix this behavior?
BR
Christian SE
AD Level: Windows Server 2003 (Srv2003 and Srv2008/R2)
Client: MS Vista and W7

Is the GPO controlling the proxy settings on an OU where the user account
exists or the computer account exists, both, or neither?
--
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Please reply back to the newsgroup or forum for collaboration benefit among
responding engineers, and to help others benefit from your resolution.

Ace Fekay, MCT, MCITP EA, MCTS Windows 2008 & Exchange 2007, MCSE & MCSA
2003/2000, MCSA Messaging 2003
Microsoft Certified Trainer

For urgent issues, please contact Microsoft PSS directly. Please check
http://support.microsoft.com for regional support phone numbers.

[Christian SE]

Hi Ace,

No GPO is controlling the proxy settings. We checked all of them manually.

When setting a proxy locally and run the command gpupdate /force
/targed:user the settings got "lost". With the Command /target:computer the
settings will stay.

Additionally we tested removing all IE configuration from the IE GPO
(branding and favorites are configured) or disable this GPO --> proxy
settings don't get deleted.
With configured GPO I could see in the registry (hkcu/sw/ms/win/cv/internet
settings) that "ProxyServer" disappear when gpupdate runs.

Any suggestions?

BR
Christian

Post by Ace Fekay [MCT]

Post by Christian SE
Hi,
Several user reported, that after some time, workstation restart or
gpupdate, the local configured IE Poroxy settings disappear.
We checked all our gp's but no one is configured to set/delete these entries.
GP Results shows now entry for "Proxy Settings", "Automatic Browser
Configuration" Not configured - no winning GPO
How can we fix this behavior?
BR
Christian SE
AD Level: Windows Server 2003 (Srv2003 and Srv2008/R2)
Client: MS Vista and W7

Is the GPO controlling the proxy settings on an OU where the user account
exists or the computer account exists, both, or neither?
--
Ace
This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.
Please reply back to the newsgroup or forum for collaboration benefit among
responding engineers, and to help others benefit from your resolution.
Ace Fekay, MCT, MCITP EA, MCTS Windows 2008 & Exchange 2007, MCSE & MCSA
2003/2000, MCSA Messaging 2003
Microsoft Certified Trainer
For urgent issues, please contact Microsoft PSS directly. Please check
http://support.microsoft.com for regional support phone numbers.
.

[Ace Fekay [MCT]]

Post by Christian SE
Hi Ace,
No GPO is controlling the proxy settings. We checked all of them manually.
When setting a proxy locally and run the command gpupdate /force
/targed:user the settings got "lost". With the Command /target:computer the
settings will stay.
Additionally we tested removing all IE configuration from the IE GPO
(branding and favorites are configured) or disable this GPO --> proxy
settings don't get deleted.
With configured GPO I could see in the registry
(hkcu/sw/ms/win/cv/internet
settings) that "ProxyServer" disappear when gpupdate runs.
Any suggestions?
BR
Christian

My first thought that if targeting the user account the settings are changed
(lost) and not the computer account, then the issue is with a setting in the
User section of one of the GPOs affecting the machine.

Run a gpresults from the client machine while an affected user is logged on,
as well as an RSOP from the GPMC.

FYI, whenever you want to 'remove' a previosly set GPO setting, simply
disabling the GPO or moving the user or computer account from a GPO
controlled OU to a non-controller OU, doesn't do the trick. You must
literally reverse the entries in the GPO to disabled the settings.

Ace

[Christian SE]

Hi Ace,

the result of RSoP is:
"enable proxy settings" unchecked

Even no Gp is controlling it!

BR
Christian

Post by Ace Fekay [MCT]
My first thought that if targeting the user account the settings are changed
(lost) and not the computer account, then the issue is with a setting in the
User section of one of the GPOs affecting the machine.
Run a gpresults from the client machine while an affected user is logged on,
as well as an RSOP from the GPMC.
FYI, whenever you want to 'remove' a previosly set GPO setting, simply
disabling the GPO or moving the user or computer account from a GPO
controlled OU to a non-controller OU, doesn't do the trick. You must
literally reverse the entries in the GPO to disabled the settings.
Ace
.

[Ace Fekay [MCT]]

Post by Christian SE
Hi Ace,
"enable proxy settings" unchecked
Even no Gp is controlling it!
BR
Christian

Was that RSOP for the user or computer?

Ace

[Christian SE]

Hi Ace,

it was the User in RSoP.

BR
Christian

Post by Ace Fekay [MCT]

Post by Christian SE
Hi Ace,
"enable proxy settings" unchecked
Even no Gp is controlling it!
BR
Christian

Was that RSOP for the user or computer?
Ace
.

[Ace Fekay [MCT]]

Post by Christian SE
Hi Ace,
it was the User in RSoP.

So you're saying the setting was in the User section. If you physically
disabled the setting, and not just removed it, does it work?

Ace

[Christian SE]

Hi Ace

we solved this issue.

After resetting all GPO's „Internet Explorer Maintenance“ settings and
recreating IE Settings GPO, the local configured proxy keeps configured.
Probably one was configured with empty entries.

Thx for your support.

BR
Christian

Post by Ace Fekay [MCT]

Post by Christian SE
Hi Ace,
it was the User in RSoP.

So you're saying the setting was in the User section. If you physically
disabled the setting, and not just removed it, does it work?
Ace
.

[Ace Fekay [MCT]]

Post by Christian SE
Hi Ace
we solved this issue.

That is good to hear. Thanks for posting the resolution.

Ace