Where are these proxy settings coming from?

Guest2 · 14 Jul 2009 at 11:11

In group policy we have proxy settings set to 192.168.10.100. This works fine but for some reason mine default back to a proxy i was testing last week 'proxy54' 10.100 are denied for me as I am a domain admin. This is fine but I cannot work out where the hell proxy54 is coming from?

There is nothing in group policy that refers to proxy54, but when i do a gpupdate /force on my machine my proxy goes back to 54.

Anyone know what is happening? I have checked all the GP objects and there is nothing referring to proxy54 settings

Thanks

IAmATeaf · 14 Jul 2009 at 11:22

do a gpresult /v on the machine, should tell you if a policy (local or group) is putting the value in.

Guest2 · 14 Jul 2009 at 11:28

near the bottom it has 'internet explorer connection' with the 5 lines of proxy54 settings

Where are these stored? I clear them out of IE, do a GPupdate and they come back

IAmATeaf · 14 Jul 2009 at 12:34

At the top of the section it should state which policy, if not then press F1 to get help, then click the Support button on the top toolbar, then click Advanced System Information, in the left hand pane, then click View Group Policy settings applied in the right hand pane.

This will bring up a better display of policies in place for you track down where the entries are coming from.

Guest2 · 14 Jul 2009 at 13:53

It does show the policies being applied, but there are no proxy settings in this list

Guest2 · 16 Jul 2009 at 16:42

anyone else have any ideas? Its not a problem because I just changed it back or turn it off but if this was happening for everyone it would be a problem

Thanks

IAmATeaf · 16 Jul 2009 at 17:16

When do they come back, on restart, on user logon/logoff?

Look for startup scripts or even logon scripts that might be making the change.

Macky · 16 Jul 2009 at 17:43

Proxy settings got entered on my dad's laptop somehow, it was some kind of malware. Cleaned it up and hasn't happened again.

Guest2 · 17 Jul 2009 at 10:05

They were coming back when i did a GPupdate on my machine.

Found it now and sorted

They were coming from the depths of our default domain policy. I couldnt see any settings for proxy54 on the settings tab of the policy because it was disabled. I then checked out userconfig > windows > IE maintenance and they were set as proxy54 but disabled. Enabled now and set to the correct proxy.

Thanks all