Small windows problems thread

Sounds like a job for vPro

1 Like

Desperately double-posting here in hopes that someone may have a suggestion: Windows Proxy settings, registry, Group Policy, DefaultConnectionSettings binary value is changed after reboot

Hi,

I am stumped by how Windows Proxy registry settings interact with GP in an enterprise environment.

I have a number of users experiencing intermittent or permanent loss of access to internet from their workstations. This is occurring ever since a TransperantProxy (what is a TransperntProxy btw?) GP has been rolled out. I have no access to the GP (so I cannot take a look) I also do not have access to most normal administrative tools because management reasons . . . :facepalm: the TL;DR is the following question: Is there any way to get the details about what (process ID, process Name, GP . . . something) is causing the registry DefaultConnectionSettings binary value to change?

Here are the situation details:

  1. The policy is controlling the check boxes in "Local Area Network (LAN) Settings) (Win+R ==> inetcpl.cpl ==> Connections ==> “LAN settings”)
  2. According to the policy all the check boxes get “un-checked” like below
    image
  3. This policy does not always work because either the user is not in the correct OU, or the computer is no in the correct OU or subnet or both or reasons . . .
  4. The Windows proxy settings are located at the following registry keys (in as far as individual users are concerned): HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings; andHKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\DefaultConnectionSettings Windows Proxy settings, registry, Group Policy, HKCU:\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connection\DefaultConnectionSetting
  5. The DefaultConnectionSetting is an array of binary values that are controlled by bitwise operations
  6. The 9th index of DefaultConnectionSettings contains the result of the bitwise operation that sets the proxy settings

    7.The relevant values for the index in this instance (because there are others) are values 01 and 05.
  7. Value 01 means that no check boxes are checked
  8. Value 05 means that ONLY the “Use automatic configuration script” (i.e., pac file) box is checked (this also happens to be the old group policy that used the pac file)
  9. I tried to manually adjust the registry values for users/computers that, according to gpresult /r (a utility that tells you the results of a group policy update) and the AD admin , seem to be getting the appropriate TransperantProxy GP. Adjusting the registry manually or through the Windows GUI seems to work for the active session BUT the settings do not survive a reboot
  10. I have tried to audit registry changes but am unable to see what changes the registry. All I know is that when I change the registry, I can find a entery in the Secruity logs that points to my username and the key that I changed
  11. I also confirmed this with procmon that shows that the registry key was changed and shows the value of the key after the change
  12. After I reboot the computer the changes get lost and old changes come back and I am not able to find what is changing this because generally, It has been my experience that adjust registry manually overrides GP.
  13. I think that GP is whipping the manually set registry settings because if I remove the machine from the domain and never loggin into the user sesssion (i.e., GP is not pulled) the correct registry settings in the ntuser.dat file remain unchanged. However, when I rejoin the domain and login (i.e., GP is pulled) the manual set registry settings get whiped–makes sense I suppose if this is enterprise GP. However, this is not working so I need to somehow prove that it is the GP that is doing this. Is there any way to get the details about what (process ID, process Name, GP . . . something) is causing the registry change?

I have looked at all sorts of things (procmon, auditing the registry where the Windows logs do not rotate like LInux systems–the older values just get deleted). I am just stuck.

Help please. Many thanks.

All streaming services suddenly slow down to about half speed and audio stops (simultaneously) at random. Feels like a gpu issue. This is a NUC with a 1070 eGPU. Happens between 10 minutes to an hour apart.

Whats the fan do

Both NUC and gpu fans are set to run 100% all the time because they are in a vented closet where sound isn’t an issue. Thermals are good.

I should add that browser restart fixes the issue at which point it doesn’t recur for around another 10-60 minutes.

At random points on windows 10 my mice will start doing random shit. Buttons will randomize, literally. If I turn one mouse off and on again, then its fine for a while. It progresses to a blue screen tho.

Uh?

likely a usb issue. rather than a dicky mouse. see if your motherboard manufacturer has updated drivers.
also make sure hpet is enabled in bios/eufi as the usb may need a hardware clock to keep proper timings. it should be on by default but some manufacturers still leave it off.

I hate the Windows 10 upgrade…All the time, they asked me to upgrade to the latest Windows 10.

yep and reset your preferences for privacy when they do it :frowning:

that’s just NOT COOL!

Gee oh no a system that wants to stay up to date :roll_eyes:

Shutup10

I’ve got an annoying little issue where my PC won’t get a network connection when starting from a cold boot. I can get an address by requesting a new DHCP lease but it’s getting boring having to do it every time. If I reboot (i.e. not a cold boot) it’s fine when the system comes back up.

I’ve re-installed my network drives and that hasn’t fixed it - I really don’t want to have to reinstall Windows if I can avoid it.

Anyone got any ideas?

have you tied setting a static address?

you tried reinstalling the drivers but did you try the full reset of the IP stack?

That’s a good call, I hadn’t thought of that. I’ll give it a shot tonight.

Reset the net stack. If that don’t work, CC out the drivers. Like get a driver cleaner.

check your network interface properties.
have you set it to manually select dhcp? if so set it to auto detect.
have you disabled any services like dhcp client discovery?.
when you disable services it can have a knock on effect on its dependencies.

have you blocked your dhcp access with your firewall?.(i know windows rings out at first boot, if its blocked you cant get a connection)

have you added some microsoft/amazon ip’s to the hosts file to be redirected to 127?.
have you made changes to control panel/internet properties?

lastly check your windows integrity with sfc /scannow and dism healthcheck/repair (google is your friend)

I have my desktop backgrounds set to change every 10 Minutes… and they don’t.

It can be hours, all day and they wont change. If I open the Personalise settings it will prompt it back to working but even the the intervals are not 10 minutes. They also do not change at the same time, each monitor changes irregularly, which I don’t actually mind so much, but it seems wrong.

I bought a new laptop that will arrive this weekend to replace my dying thinkpad with Win 8 Pro license, but the new laptop has Win10 Home instead so I can’t use WSL2 or anything Hyper-V related. Since it runs Win10 Pro with the Win8 Pro key, can I transfer that license to the new laptop by any chance with the whole “digital license linked to microsoft account”?

The old thinkpad is unsalvageable without a new motherboard, but I can keep it running for enough to lift the embedded cd-key from the board

yes

1 Like