Ask Learn
Preview
Please sign in to use this experience.
Sign inThis browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
If you are wondering how your local system account is getting proxy settings even though you have applied proxy settings only for users, this post will help you.
Here you will see the proxy settings set in Local system account:
HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections
The applications which run in system context might stop working if the Local system account contains proxy settings or any undesired settings which are not set by system administrator.
Here is how the user base settings can get written to Local system account registry key.
When you use Internet Explorer Maintenance Group Policy to set user based connections settings, it provides you with two options:
IMPORTANT: Windows 8 with Internet Explorer 10 deprecates IEM in favor of a more robust tool called Group Policy Preferences. Read More... |
If you choose Connection Settings options to set connection settings for the user, it causes this behavior.
To test it yourself, try setting this GPO in your local computer using Local group policy editor.
Once GPO is applied to the user, check this registry:
HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections
Expected Results:
"Proxy Server" settings of connection should not apply to HKEY_USERS\.DEFAULT. \Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections key.
Actual Result:
“Proxy Server" settings of connection gets added here: HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections key.
What we recommend:
The respective proxy settings part of IE Maintenance should be used. User Configuration - Windows Settings - Internet Explorer Maintenance- Connection-Proxy Settings
NOTE: If you have configured connection settings and then try to click on proxy settings, you are presented with following warning by the policy editor:
It tells you that proxy settings will overwrite the imported connection settings.
This warning applies to the user scope only.
It is of no use to profiles that are not in scope to receive user-based Internet Explorer policy settings (such as the SYSTEM registry profile). So remember that the system base settings added by connection settings will still exist and user based proxy settings will be overridden.
Once you click on OK, you are presented with the following dialog box:
You can then use following articles to configure proxy settings.
If this is proxy settings for a specific dial-up connection:
If it needs to have the same proxy settings as LAN, then DialUpUseLanSettings is the best approach as mentioned in https://support.microsoft.com/kb/839571
Connection Manager Administration Kit
You can also use PowerShell and GPO.
I hope this helps and solve the mysterious question of why your local system account gets user based proxy settings.
Please sign in to use this experience.
Sign in