Internet access issue - wierd one...

[Brad Pears]

We have a strange issue with a particular XP pro SP2 machine in our domain.

If I log onto this machine as the local administrator, I can access the
internet no problems. The user who sits at this machine was unable to access
the internet until I gave her local admin privs on this machine - not even
the power users group did the trick. Another user who sits at this machine
in the evenings was also unable to access the internet using her domain
logon. When I gave her domain account local admin rights on that machine (as
I had done for the previous user I mentioned) I expected that would solve
the problem. NOPE!! She still is unable to access the internet - simply
gets a "page unable to be displayed" for any site she attempts to visit!

I tried pinging some sites and that worked just fine so traffic is getting
through - maybe port 80 is somehow being blocked? I turned off the firewall
just in case - and that still did not fix the issue. The strange thing is
that this user can log onto other machines and access the internet so it
must be somehow related to something on that PC - I just do not know where
to look next...

Has anyone got any suggestions on trouble shooting this issue?

Thanks,

Brad

[Doug Knox MS-MVP]

It almost sounds like there's a proxy set up on a per-user basis. While logged on as that user, open Internet Options, Connections, LAN Settings and see if there is a specific proxy server configured.
--
Doug Knox, MS-MVP Windows Media Center\Windows Powered Smart Display\Security
Win 95/98/Me/XP Tweaks and Fixes
http://www.dougknox.com
--------------------------------
Per user Group Policy Restrictions for XP Home and XP Pro
http://www.dougknox.com/xp/utils/xp_securityconsole.htm
--------------------------------
Please reply only to the newsgroup so all may benefit.
Unsolicited e-mail is not answered.

"Brad Pears" > wrote in message ...
> We have a strange issue with a particular XP pro SP2 machine in our domain.
>
> If I log onto this machine as the local administrator, I can access the
> internet no problems. The user who sits at this machine was unable to access
> the internet until I gave her local admin privs on this machine - not even
> the power users group did the trick. Another user who sits at this machine
> in the evenings was also unable to access the internet using her domain
> logon. When I gave her domain account local admin rights on that machine (as
> I had done for the previous user I mentioned) I expected that would solve
> the problem. NOPE!! She still is unable to access the internet - simply
> gets a "page unable to be displayed" for any site she attempts to visit!
>
> I tried pinging some sites and that worked just fine so traffic is getting
> through - maybe port 80 is somehow being blocked? I turned off the firewall
> just in case - and that still did not fix the issue. The strange thing is
> that this user can log onto other machines and access the internet so it
> must be somehow related to something on that PC - I just do not know where
> to look next...
>
> Has anyone got any suggestions on trouble shooting this issue?
>
> Thanks,
>
> Brad
>
>

[Cris Hanna \(SBS-MVP\)]

Are you running Small Business Server?

--
Cris Hanna [SBS-MVP]
--------------------------------------
Please do not respond directly to me, but only post in the newsgroup so all can take advantage
"Brad Pears" > wrote in message ...
We have a strange issue with a particular XP pro SP2 machine in our domain.

If I log onto this machine as the local administrator, I can access the
internet no problems. The user who sits at this machine was unable to access
the internet until I gave her local admin privs on this machine - not even
the power users group did the trick. Another user who sits at this machine
in the evenings was also unable to access the internet using her domain
logon. When I gave her domain account local admin rights on that machine (as
I had done for the previous user I mentioned) I expected that would solve
the problem. NOPE!! She still is unable to access the internet - simply
gets a "page unable to be displayed" for any site she attempts to visit!

I tried pinging some sites and that worked just fine so traffic is getting
through - maybe port 80 is somehow being blocked? I turned off the firewall
just in case - and that still did not fix the issue. The strange thing is
that this user can log onto other machines and access the internet so it
must be somehow related to something on that PC - I just do not know where
to look next...

Has anyone got any suggestions on trouble shooting this issue?

Thanks,

Brad

[Brad Pears]

Yes we are actually! SBS 2000. I have ISA turned off though (in case you were thinking it was something in there...) We are using a watchguard firebox III 700.

Brad
"Cris Hanna (SBS-MVP)" > wrote in message ...
Are you running Small Business Server?

--
Cris Hanna [SBS-MVP]
--------------------------------------
Please do not respond directly to me, but only post in the newsgroup so all can take advantage
"Brad Pears" > wrote in message ...
We have a strange issue with a particular XP pro SP2 machine in our domain.

If I log onto this machine as the local administrator, I can access the
internet no problems. The user who sits at this machine was unable to access
the internet until I gave her local admin privs on this machine - not even
the power users group did the trick. Another user who sits at this machine
in the evenings was also unable to access the internet using her domain
logon. When I gave her domain account local admin rights on that machine (as
I had done for the previous user I mentioned) I expected that would solve
the problem. NOPE!! She still is unable to access the internet - simply
gets a "page unable to be displayed" for any site she attempts to visit!

I tried pinging some sites and that worked just fine so traffic is getting
through - maybe port 80 is somehow being blocked? I turned off the firewall
just in case - and that still did not fix the issue. The strange thing is
that this user can log onto other machines and access the internet so it
must be somehow related to something on that PC - I just do not know where
to look next...

Has anyone got any suggestions on trouble shooting this issue?

Thanks,

Brad

[Brad Pears]

You are a genious!! That is exactly what it was and I didn't even think to
look there at all!!! Maybe someone had been screwing around on that
machine. Guess I better tighten up the group policy!!

Thanks again!

Brad
"Doug Knox MS-MVP" > wrote in message
...
It almost sounds like there's a proxy set up on a per-user basis. While
logged on as that user, open Internet Options, Connections, LAN Settings and
see if there is a specific proxy server configured.
--
Doug Knox, MS-MVP Windows Media Center\Windows Powered Smart
Display\Security
Win 95/98/Me/XP Tweaks and Fixes
http://www.dougknox.com
--------------------------------
Per user Group Policy Restrictions for XP Home and XP Pro
http://www.dougknox.com/xp/utils/xp_securityconsole.htm
--------------------------------
Please reply only to the newsgroup so all may benefit.
Unsolicited e-mail is not answered.

"Brad Pears" > wrote in message
...
> We have a strange issue with a particular XP pro SP2 machine in our
> domain.
>
> If I log onto this machine as the local administrator, I can access the
> internet no problems. The user who sits at this machine was unable to
> access
> the internet until I gave her local admin privs on this machine - not even
> the power users group did the trick. Another user who sits at this machine
> in the evenings was also unable to access the internet using her domain
> logon. When I gave her domain account local admin rights on that machine
> (as
> I had done for the previous user I mentioned) I expected that would solve
> the problem. NOPE!! She still is unable to access the internet - simply
> gets a "page unable to be displayed" for any site she attempts to visit!
>
> I tried pinging some sites and that worked just fine so traffic is getting
> through - maybe port 80 is somehow being blocked? I turned off the
> firewall
> just in case - and that still did not fix the issue. The strange thing is
> that this user can log onto other machines and access the internet so it
> must be somehow related to something on that PC - I just do not know where
> to look next...
>
> Has anyone got any suggestions on trouble shooting this issue?
>
> Thanks,
>
> Brad
>
>

[Doug Knox MS-MVP]

You're welcome. I know there's a restriction in Group Policies to make the proxy server setting per machine, not per user, but I believe you have to set the actual proxy address manually, or possibly via the IEAK (Internet Explorer Administration Kit).

--
Doug Knox, MS-MVP Windows Media Center\Windows Powered Smart Display\Security
Win 95/98/Me/XP Tweaks and Fixes
http://www.dougknox.com
--------------------------------
Per user Group Policy Restrictions for XP Home and XP Pro
http://www.dougknox.com/xp/utils/xp_securityconsole.htm
--------------------------------
Please reply only to the newsgroup so all may benefit.
Unsolicited e-mail is not answered.

"Brad Pears" > wrote in message ...
> You are a genious!! That is exactly what it was and I didn't even think to
> look there at all!!! Maybe someone had been screwing around on that
> machine. Guess I better tighten up the group policy!!
>
> Thanks again!
>
> Brad
> "Doug Knox MS-MVP" > wrote in message
> ...
> It almost sounds like there's a proxy set up on a per-user basis. While
> logged on as that user, open Internet Options, Connections, LAN Settings and
> see if there is a specific proxy server configured.
> --
> Doug Knox, MS-MVP Windows Media Center\Windows Powered Smart
> Display\Security
> Win 95/98/Me/XP Tweaks and Fixes
> http://www.dougknox.com
> --------------------------------
> Per user Group Policy Restrictions for XP Home and XP Pro
> http://www.dougknox.com/xp/utils/xp_securityconsole.htm
> --------------------------------
> Please reply only to the newsgroup so all may benefit.
> Unsolicited e-mail is not answered.
>
> "Brad Pears" > wrote in message
> ...
>> We have a strange issue with a particular XP pro SP2 machine in our
>> domain.
>>
>> If I log onto this machine as the local administrator, I can access the
>> internet no problems. The user who sits at this machine was unable to
>> access
>> the internet until I gave her local admin privs on this machine - not even
>> the power users group did the trick. Another user who sits at this machine
>> in the evenings was also unable to access the internet using her domain
>> logon. When I gave her domain account local admin rights on that machine
>> (as
>> I had done for the previous user I mentioned) I expected that would solve
>> the problem. NOPE!! She still is unable to access the internet - simply
>> gets a "page unable to be displayed" for any site she attempts to visit!
>>
>> I tried pinging some sites and that worked just fine so traffic is getting
>> through - maybe port 80 is somehow being blocked? I turned off the
>> firewall
>> just in case - and that still did not fix the issue. The strange thing is
>> that this user can log onto other machines and access the internet so it
>> must be somehow related to something on that PC - I just do not know where
>> to look next...
>>
>> Has anyone got any suggestions on trouble shooting this issue?
>>
>> Thanks,
>>
>> Brad
>>
>>
>
>

[Duncan McC]

In article >,
says...
> We have a strange issue with a particular XP pro SP2 machine in our domain.
>
> If I log onto this machine as the local administrator, I can access the
> internet no problems. The user who sits at this machine was unable to access
> the internet until I gave her local admin privs on this machine - not even
> the power users group did the trick. Another user who sits at this machine
> in the evenings was also unable to access the internet using her domain
> logon. When I gave her domain account local admin rights on that machine (as
> I had done for the previous user I mentioned) I expected that would solve
> the problem. NOPE!! She still is unable to access the internet - simply
> gets a "page unable to be displayed" for any site she attempts to visit!
>
> I tried pinging some sites and that worked just fine so traffic is getting
> through - maybe port 80 is somehow being blocked? I turned off the firewall
> just in case - and that still did not fix the issue. The strange thing is
> that this user can log onto other machines and access the internet so it
> must be somehow related to something on that PC - I just do not know where
> to look next...
>
> Has anyone got any suggestions on trouble shooting this issue?

* Does the machine have the SBS Firewall Client installed? And is it
correctly set to the Server?

* re user memberships: Is the user a member of the "BackOffice Internet
Users" ?

--
Duncan