I
iriseye1
Guest
Hi all, hope you are all ok?
I am struggling with a proxy issue. We use Forcepoint as our proxy server. For various reasons it has caused us no end of issues and so thankfully the license expires on it next month when we plan to use Cisco Umbrella instead. Forcepoint tech support have advised me that on the day the license expires, all devices / users who have " webdefense.blackspider...." as their proxy settings will no longer be able to browse to anything until it is removed.
We have a GPO which adds an AutoConfigURL key to all users HKCU registry, so i thought that by just disabling this, or even by editing this and changing the value to be BLANK, this would be a quick fix for all 175 machines. However even when i do this in testing, the keys remain in the registry and when you look at the connection settings in IE, the "webdefense.blackspider.." is still there.
I have googled this for a while now, and have a simple batch file which i have pasted below for info, but the settings for the proxy, specifically the settings in the LAN connection where it says "Use Automatic Configuration Script" keep coming back.
Does anyone know of a reason why the tick is still in the box, and the auto config script is still there? I could really do with a helping hand or a pointer on this. Im really concerned that if i cant fix this soon i will need to visit each machine and manually remove the settings, which seems to work and seems to stay deleted.
Thanks
reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings" /v AutoConfigURL /t REG_SZ /d "" /f
reg delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections" /v fortissl /f
reg delete "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections" /v DefaultConnectionSettings /f
reg delete "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections" /v SavedLegacySettings /f
reg add HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinHttpAutoProxySvc /v Start /t REG_DWORD /d 4 /f ( the value of 4 turns off the proxy from starting I am told)
reg delete HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\iphlpsvc\Parameters\ProxyMgr /v ( another reg key that Forcepoint tech support advised me to include)
reg add "HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings" /v EnableAutoproxyResultCache /t REG_DWORD /d 0 ( something i am trying as I read this may stop proxy settings being cached?)
Continue reading...
I am struggling with a proxy issue. We use Forcepoint as our proxy server. For various reasons it has caused us no end of issues and so thankfully the license expires on it next month when we plan to use Cisco Umbrella instead. Forcepoint tech support have advised me that on the day the license expires, all devices / users who have " webdefense.blackspider...." as their proxy settings will no longer be able to browse to anything until it is removed.
We have a GPO which adds an AutoConfigURL key to all users HKCU registry, so i thought that by just disabling this, or even by editing this and changing the value to be BLANK, this would be a quick fix for all 175 machines. However even when i do this in testing, the keys remain in the registry and when you look at the connection settings in IE, the "webdefense.blackspider.." is still there.
I have googled this for a while now, and have a simple batch file which i have pasted below for info, but the settings for the proxy, specifically the settings in the LAN connection where it says "Use Automatic Configuration Script" keep coming back.
Does anyone know of a reason why the tick is still in the box, and the auto config script is still there? I could really do with a helping hand or a pointer on this. Im really concerned that if i cant fix this soon i will need to visit each machine and manually remove the settings, which seems to work and seems to stay deleted.
Thanks
reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings" /v AutoConfigURL /t REG_SZ /d "" /f
reg delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections" /v fortissl /f
reg delete "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections" /v DefaultConnectionSettings /f
reg delete "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections" /v SavedLegacySettings /f
reg add HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinHttpAutoProxySvc /v Start /t REG_DWORD /d 4 /f ( the value of 4 turns off the proxy from starting I am told)
reg delete HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\iphlpsvc\Parameters\ProxyMgr /v ( another reg key that Forcepoint tech support advised me to include)
reg add "HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings" /v EnableAutoproxyResultCache /t REG_DWORD /d 0 ( something i am trying as I read this may stop proxy settings being cached?)
Continue reading...