none
Proxy server settings?

    Question

  • When I look at the LAN Settings within Internet Explorer/ Options there is no proxy, and no tick in either the "automatic detect settings" or the "use automatic script configuration" boxes. When I perform a gpresult on a workstation, I can see the only group policy applied is the Default Domain Policy. In the group policy under Windows settings\internet explorer maintenance\connection, also nothing is checked except "automatically detect configuration settings". What is telling each user session which server to use?

    I know which server works as the proxy, and I would also like to know which users are using this proxy. Unfortunately it is a Windows 2000 Server box, and it doesn't even have ISA on it. The only indication it is even a proxy is the Websweeper console. I need to know who is using this box, so I can move them on to a proxy in another domain, and then decomission this box. What can I use to see who is using this box?

    Thanks

    Monday, August 01, 2011 3:44 PM

Answers

  • Hello,

    please refer to that: http://technet.microsoft.com/en-us/library/cc441719.aspx

     


    This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

    Microsoft Student Partner 2010 / 2011
    Microsoft Certified Professional
    Microsoft Certified Systems Administrator: Security
    Microsoft Certified Systems Engineer: Security
    Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration
    Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration
    Microsoft Certified Technology Specialist: Windows Server 2008 Applications Infrastructure, Configuration
    Microsoft Certified Technology Specialist: Windows 7, Configuring
    Microsoft Certified IT Professional: Enterprise Administrator

    Monday, August 01, 2011 4:43 PM

All replies

  • Hello,

    please refer to that: http://technet.microsoft.com/en-us/library/cc441719.aspx

     


    This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

    Microsoft Student Partner 2010 / 2011
    Microsoft Certified Professional
    Microsoft Certified Systems Administrator: Security
    Microsoft Certified Systems Engineer: Security
    Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration
    Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration
    Microsoft Certified Technology Specialist: Windows Server 2008 Applications Infrastructure, Configuration
    Microsoft Certified Technology Specialist: Windows 7, Configuring
    Microsoft Certified IT Professional: Enterprise Administrator

    Monday, August 01, 2011 4:43 PM
  • do you have access to the w2k box? what proxy product or method is it using, can you examine the configuration/logs of that?
    or maybe you could use netmon or wireshark or similar to examine the network traffic to that box?
    how are the clients using that box/finding that box, if they are not explicitly configured to it?
    is your DNS or DHCP offering some referrals/helpers/options that point to that box?
    Don
    Monday, August 01, 2011 9:40 PM
  • I do indeed have access to the box. It does not appear to have any proxy server software on it whatsoever, although it does have Websweeper to filter what traffic flows through. Why didn't I think of Netmon? I was going to install Ethereal!!

    I am not sure what clients connect to this box. I believe this is a proxy for users at the company where I am currently temping. In the users internet explorer settings there is nothing except 'automatically detect.....'

    There are both A and PTR records set up in DNS for this server.

    Thanks

    Tuesday, August 02, 2011 1:19 PM
  • Hi,

    It is possible that your organization may be using a PAC file which has more detailed settings for your proxy requirements. Check your group Policy objects and check if there are any settings available for IE. Also, look at any files related to this in your netlogon folder. more about PAC file is here. http://en.wikipedia.org/wiki/Proxy_auto-config 

    In ISA environment,we have something called WPAD. This has to be set in DHCP Scope options.Since you already mentioned there is no ISA in your environment, check for similiar settings which is pointed to your proxy servers.


    Regards, Mohan R Sr. Administrator - Server Support
    Tuesday, August 02, 2011 2:19 PM
  • Hi,

    It is possible that your organization may be using a PAC file which has more detailed settings for your proxy requirements. Check your group Policy objects and check if there are any settings available for IE. Also, look at any files related to this in your netlogon folder. more about PAC file is here. http://en.wikipedia.org/wiki/Proxy_auto-config 

    In ISA environment,we have something called WPAD. This has to be set in DHCP Scope options.Since you already mentioned there is no ISA in your environment, check for similiar settings which is pointed to your proxy servers.


    Regards, Mohan R Sr. Administrator - Server Support

    Well if the PAC file was used it should say so in the Group Policy, no? The only thing that I can find is populated is "automatically detect settings". Am I missing something? Thanks
    Tuesday, August 02, 2011 3:28 PM
  • Hi,

    You're correct it should say that in GPO. Just want to make sure we're chcking at the right place. In your default policy or the standard policy which is applied to users, under user configuration-windows settings-Ie maintenance-connection or automatic browser configuration-auto proxy URL. Check if there are any entries here.or some file share is given here..

    Else, in netlogon folder check if there are any scripts configured to run. Open the script and check if you find anything related to proxy.

    Finally, the DHCP...


    Regards, Mohan R Sr. Administrator - Server Support
    Tuesday, August 02, 2011 3:55 PM
  • not necessarily. WPAD could be in use, which wouldn't need to appear in the browser settings UI nor in GPO.
    IE will autodetect if it can, looking for names like wpad.your.default.domain/wpad.dat
    if you have a dns record for something like that, then WPAD will automagically just work and no client/gpo config needed.

    but a quick analysis of the traffic would show you what a browser startup is fishing for.


    Don
    Tuesday, August 02, 2011 9:36 PM