We have a strange issue with a particular XP pro SP2 machine in our domain.

If I log onto this machine as the local administrator, I can access the
internet no problems. The user who sits at this machine was unable to access
the internet until I gave her local admin privs on this machine - not even
the power users group did the trick. Another user who sits at this machine
in the evenings was also unable to access the internet using her domain
logon. When I gave her domain account local admin rights on that machine (as
I had done for the previous user I mentioned) I expected that would solve
the problem. NOPE!! She still is unable to access the internet - simply
gets a "page unable to be displayed" for any site she attempts to visit!

I tried pinging some sites and that worked just fine so traffic is getting
through - maybe port 80 is somehow being blocked? I turned off the firewall
just in case - and that still did not fix the issue. The strange thing is
that this user can log onto other machines and access the internet so it
must be somehow related to something on that PC - I just do not know where
to look next...

Has anyone got any suggestions on trouble shooting this issue?

Thanks,

Brad

Re: Internet access issue - wierd one... by Doug

Doug
Wed May 24 14:18:29 CDT 2006

It almost sounds like there's a proxy set up on a per-user basis. While =
logged on as that user, open Internet Options, Connections, LAN Settings =
and see if there is a specific proxy server configured.
--=20
Doug Knox, MS-MVP Windows Media Center\Windows Powered Smart =
Display\Security
Win 95/98/Me/XP Tweaks and Fixes
http://www.dougknox.com
--------------------------------
Per user Group Policy Restrictions for XP Home and XP Pro
http://www.dougknox.com/xp/utils/xp_securityconsole.htm
--------------------------------
Please reply only to the newsgroup so all may benefit.
Unsolicited e-mail is not answered.
=20
"Brad Pears" <donotreply@notreal.com> wrote in message =
news:uchKsD2fGHA.4892@TK2MSFTNGP02.phx.gbl...
> We have a strange issue with a particular XP pro SP2 machine in our =
domain.
>=20
> If I log onto this machine as the local administrator, I can access =
the=20
> internet no problems. The user who sits at this machine was unable to =
access=20
> the internet until I gave her local admin privs on this machine - not =
even=20
> the power users group did the trick. Another user who sits at this =
machine=20
> in the evenings was also unable to access the internet using her =
domain=20
> logon. When I gave her domain account local admin rights on that =
machine (as=20
> I had done for the previous user I mentioned) I expected that would =
solve=20
> the problem. NOPE!! She still is unable to access the internet - =
simply=20
> gets a "page unable to be displayed" for any site she attempts to =
visit!
>=20
> I tried pinging some sites and that worked just fine so traffic is =
getting=20
> through - maybe port 80 is somehow being blocked? I turned off the =
firewall=20
> just in case - and that still did not fix the issue. The strange thing =
is=20
> that this user can log onto other machines and access the internet so =
it=20
> must be somehow related to something on that PC - I just do not know =
where=20
> to look next...
>=20
> Has anyone got any suggestions on trouble shooting this issue?
>=20
> Thanks,
>=20
> Brad=20
>=20
>

Re: Internet access issue - wierd one... by Cris

Cris
Wed May 24 16:13:55 CDT 2006

This is a multi-part message in MIME format.

------=_NextPart_000_0047_01C67F4D.0DFB7330
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

Are you running Small Business Server?

--=20
Cris Hanna [SBS-MVP]
--------------------------------------
Please do not respond directly to me, but only post in the newsgroup so =
all can take advantage
"Brad Pears" <donotreply@notreal.com> wrote in message =
news:uchKsD2fGHA.4892@TK2MSFTNGP02.phx.gbl...
We have a strange issue with a particular XP pro SP2 machine in our =
domain.

If I log onto this machine as the local administrator, I can access =
the=20
internet no problems. The user who sits at this machine was unable to =
access=20
the internet until I gave her local admin privs on this machine - not =
even=20
the power users group did the trick. Another user who sits at this =
machine=20
in the evenings was also unable to access the internet using her =
domain=20
logon. When I gave her domain account local admin rights on that =
machine (as=20
I had done for the previous user I mentioned) I expected that would =
solve=20
the problem. NOPE!! She still is unable to access the internet - =
simply=20
gets a "page unable to be displayed" for any site she attempts to =
visit!

I tried pinging some sites and that worked just fine so traffic is =
getting=20
through - maybe port 80 is somehow being blocked? I turned off the =
firewall=20
just in case - and that still did not fix the issue. The strange thing =
is=20
that this user can log onto other machines and access the internet so =
it=20
must be somehow related to something on that PC - I just do not know =
where=20
to look next...

Has anyone got any suggestions on trouble shooting this issue?

Thanks,

Brad=20


------=_NextPart_000_0047_01C67F4D.0DFB7330
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; =
charset=3Diso-8859-1">
<META content=3D"MSHTML 6.00.2900.2873" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV><FONT face=3DArial size=3D2>Are you running Small Business =
Server?</FONT></DIV>
<DIV><BR>-- <BR>Cris Hanna=20
[SBS-MVP]<BR>--------------------------------------<BR>Please do not =
respond=20
directly to me, but only post in the newsgroup so all can take =
advantage</DIV>
<BLOCKQUOTE=20
style=3D"PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; =
BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<DIV>"Brad Pears" &lt;<A=20
href=3D"mailto:donotreply@notreal.com">donotreply@notreal.com</A>&gt; =
wrote in=20
message <A=20
=
href=3D"news:uchKsD2fGHA.4892@TK2MSFTNGP02.phx.gbl">news:uchKsD2fGHA.4892=
@TK2MSFTNGP02.phx.gbl</A>...</DIV>We=20
have a strange issue with a particular XP pro SP2 machine in our=20
domain.<BR><BR>If I log onto this machine as the local administrator, =
I can=20
access the <BR>internet no problems. The user who sits at this machine =
was=20
unable to access <BR>the internet until I gave her local admin privs =
on this=20
machine - not even <BR>the power users group did the trick. Another =
user who=20
sits at this machine <BR>in the evenings was also unable to access the =

internet using her domain <BR>logon. When I gave her domain account =
local=20
admin rights on that machine (as <BR>I had done for the previous user =
I=20
mentioned) I expected that would solve <BR>the problem. NOPE!!&nbsp; =
She still=20
is unable to access the internet - simply <BR>gets a "page unable to =
be=20
displayed" for any site she attempts to visit!<BR><BR>I tried pinging =
some=20
sites and that worked just fine so traffic is getting <BR>through - =
maybe port=20
80 is somehow being blocked? I turned off the firewall <BR>just in =
case - and=20
that still did not fix the issue. The strange thing is <BR>that this =
user can=20
log onto other machines and access the internet so it <BR>must be =
somehow=20
related to something on that PC - I just do not know where <BR>to look =

next...<BR><BR>Has anyone got any suggestions on trouble shooting this =

issue?<BR><BR>Thanks,<BR><BR>Brad <BR><BR></BLOCKQUOTE></BODY></HTML>

------=_NextPart_000_0047_01C67F4D.0DFB7330--


Re: Internet access issue - wierd one... by Brad

Brad
Wed May 24 17:50:14 CDT 2006

This is a multi-part message in MIME format.

------=_NextPart_000_002B_01C67F62.E5366E30
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

Yes we are actually! SBS 2000. I have ISA turned off though (in case =
you were thinking it was something in there...) We are using a =
watchguard firebox III 700.

Brad
"Cris Hanna (SBS-MVP)" =
<crisnospamhanna@computingnospampossibilities.net> wrote in message =
news:%23wCO4b3fGHA.2416@TK2MSFTNGP03.phx.gbl...
Are you running Small Business Server?

--=20
Cris Hanna [SBS-MVP]
--------------------------------------
Please do not respond directly to me, but only post in the newsgroup =
so all can take advantage
"Brad Pears" <donotreply@notreal.com> wrote in message =
news:uchKsD2fGHA.4892@TK2MSFTNGP02.phx.gbl...
We have a strange issue with a particular XP pro SP2 machine in our =
domain.

If I log onto this machine as the local administrator, I can access =
the=20
internet no problems. The user who sits at this machine was unable =
to access=20
the internet until I gave her local admin privs on this machine - =
not even=20
the power users group did the trick. Another user who sits at this =
machine=20
in the evenings was also unable to access the internet using her =
domain=20
logon. When I gave her domain account local admin rights on that =
machine (as=20
I had done for the previous user I mentioned) I expected that would =
solve=20
the problem. NOPE!! She still is unable to access the internet - =
simply=20
gets a "page unable to be displayed" for any site she attempts to =
visit!

I tried pinging some sites and that worked just fine so traffic is =
getting=20
through - maybe port 80 is somehow being blocked? I turned off the =
firewall=20
just in case - and that still did not fix the issue. The strange =
thing is=20
that this user can log onto other machines and access the internet =
so it=20
must be somehow related to something on that PC - I just do not know =
where=20
to look next...

Has anyone got any suggestions on trouble shooting this issue?

Thanks,

Brad=20


------=_NextPart_000_002B_01C67F62.E5366E30
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; =
charset=3Diso-8859-1">
<META content=3D"MSHTML 6.00.2900.2802" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV><FONT face=3DArial size=3D2>Yes we are actually!&nbsp; SBS 2000. I =
have ISA=20
turned off though (in case you were thinking it was something in=20
there...)&nbsp;We are using a watchguard firebox III 700.</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D2>Brad</FONT></DIV>
<BLOCKQUOTE dir=3Dltr=20
style=3D"PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; =
BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<DIV>"Cris Hanna (SBS-MVP)" &lt;<A=20
=
href=3D"mailto:crisnospamhanna@computingnospampossibilities.net">crisnosp=
amhanna@computingnospampossibilities.net</A>&gt;=20
wrote in message <A=20
=
href=3D"news:%23wCO4b3fGHA.2416@TK2MSFTNGP03.phx.gbl">news:%23wCO4b3fGHA.=
2416@TK2MSFTNGP03.phx.gbl</A>...</DIV>
<DIV><FONT face=3DArial size=3D2>Are you running Small Business=20
Server?</FONT></DIV>
<DIV><BR>-- <BR>Cris Hanna=20
[SBS-MVP]<BR>--------------------------------------<BR>Please do not =
respond=20
directly to me, but only post in the newsgroup so all can take =
advantage</DIV>
<BLOCKQUOTE=20
style=3D"PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; =
BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<DIV>"Brad Pears" &lt;<A=20
=
href=3D"mailto:donotreply@notreal.com">donotreply@notreal.com</A>&gt; =
wrote in=20
message <A=20
=
href=3D"news:uchKsD2fGHA.4892@TK2MSFTNGP02.phx.gbl">news:uchKsD2fGHA.4892=
@TK2MSFTNGP02.phx.gbl</A>...</DIV>We=20
have a strange issue with a particular XP pro SP2 machine in our=20
domain.<BR><BR>If I log onto this machine as the local =
administrator, I can=20
access the <BR>internet no problems. The user who sits at this =
machine was=20
unable to access <BR>the internet until I gave her local admin privs =
on this=20
machine - not even <BR>the power users group did the trick. Another =
user who=20
sits at this machine <BR>in the evenings was also unable to access =
the=20
internet using her domain <BR>logon. When I gave her domain account =
local=20
admin rights on that machine (as <BR>I had done for the previous =
user I=20
mentioned) I expected that would solve <BR>the problem. NOPE!!&nbsp; =
She=20
still is unable to access the internet - simply <BR>gets a "page =
unable to=20
be displayed" for any site she attempts to visit!<BR><BR>I tried =
pinging=20
some sites and that worked just fine so traffic is getting =
<BR>through -=20
maybe port 80 is somehow being blocked? I turned off the firewall =
<BR>just=20
in case - and that still did not fix the issue. The strange thing is =

<BR>that this user can log onto other machines and access the =
internet so it=20
<BR>must be somehow related to something on that PC - I just do not =
know=20
where <BR>to look next...<BR><BR>Has anyone got any suggestions on =
trouble=20
shooting this issue?<BR><BR>Thanks,<BR><BR>Brad=20
<BR><BR></BLOCKQUOTE></BLOCKQUOTE></BODY></HTML>

------=_NextPart_000_002B_01C67F62.E5366E30--


Re: Internet access issue - wierd one... by Brad

Brad
Wed May 24 18:04:19 CDT 2006

You are a genious!! That is exactly what it was and I didn't even think to
look there at all!!! Maybe someone had been screwing around on that
machine. Guess I better tighten up the group policy!!

Thanks again!

Brad
"Doug Knox MS-MVP" <dknox@mvps.org> wrote in message
news:%23amkab2fGHA.1272@TK2MSFTNGP03.phx.gbl...
It almost sounds like there's a proxy set up on a per-user basis. While
logged on as that user, open Internet Options, Connections, LAN Settings and
see if there is a specific proxy server configured.
--
Doug Knox, MS-MVP Windows Media Center\Windows Powered Smart
Display\Security
Win 95/98/Me/XP Tweaks and Fixes
http://www.dougknox.com
--------------------------------
Per user Group Policy Restrictions for XP Home and XP Pro
http://www.dougknox.com/xp/utils/xp_securityconsole.htm
--------------------------------
Please reply only to the newsgroup so all may benefit.
Unsolicited e-mail is not answered.

"Brad Pears" <donotreply@notreal.com> wrote in message
news:uchKsD2fGHA.4892@TK2MSFTNGP02.phx.gbl...
> We have a strange issue with a particular XP pro SP2 machine in our
> domain.
>
> If I log onto this machine as the local administrator, I can access the
> internet no problems. The user who sits at this machine was unable to
> access
> the internet until I gave her local admin privs on this machine - not even
> the power users group did the trick. Another user who sits at this machine
> in the evenings was also unable to access the internet using her domain
> logon. When I gave her domain account local admin rights on that machine
> (as
> I had done for the previous user I mentioned) I expected that would solve
> the problem. NOPE!! She still is unable to access the internet - simply
> gets a "page unable to be displayed" for any site she attempts to visit!
>
> I tried pinging some sites and that worked just fine so traffic is getting
> through - maybe port 80 is somehow being blocked? I turned off the
> firewall
> just in case - and that still did not fix the issue. The strange thing is
> that this user can log onto other machines and access the internet so it
> must be somehow related to something on that PC - I just do not know where
> to look next...
>
> Has anyone got any suggestions on trouble shooting this issue?
>
> Thanks,
>
> Brad
>
>



Re: Internet access issue - wierd one... by Doug

Doug
Wed May 24 20:16:08 CDT 2006

You're welcome. I know there's a restriction in Group Policies to make =
the proxy server setting per machine, not per user, but I believe you =
have to set the actual proxy address manually, or possibly via the IEAK =
(Internet Explorer Administration Kit).

--=20
Doug Knox, MS-MVP Windows Media Center\Windows Powered Smart =
Display\Security
Win 95/98/Me/XP Tweaks and Fixes
http://www.dougknox.com
--------------------------------
Per user Group Policy Restrictions for XP Home and XP Pro
http://www.dougknox.com/xp/utils/xp_securityconsole.htm
--------------------------------
Please reply only to the newsgroup so all may benefit.
Unsolicited e-mail is not answered.
=20
"Brad Pears" <donotreply@notreal.com> wrote in message =
news:eoageY4fGHA.4892@TK2MSFTNGP02.phx.gbl...
> You are a genious!! That is exactly what it was and I didn't even =
think to=20
> look there at all!!! Maybe someone had been screwing around on that=20
> machine. Guess I better tighten up the group policy!!
>=20
> Thanks again!
>=20
> Brad
> "Doug Knox MS-MVP" <dknox@mvps.org> wrote in message=20
> news:%23amkab2fGHA.1272@TK2MSFTNGP03.phx.gbl...
> It almost sounds like there's a proxy set up on a per-user basis. =
While=20
> logged on as that user, open Internet Options, Connections, LAN =
Settings and=20
> see if there is a specific proxy server configured.
> --=20
> Doug Knox, MS-MVP Windows Media Center\Windows Powered Smart=20
> Display\Security
> Win 95/98/Me/XP Tweaks and Fixes
> http://www.dougknox.com
> --------------------------------
> Per user Group Policy Restrictions for XP Home and XP Pro
> http://www.dougknox.com/xp/utils/xp_securityconsole.htm
> --------------------------------
> Please reply only to the newsgroup so all may benefit.
> Unsolicited e-mail is not answered.
>=20
> "Brad Pears" <donotreply@notreal.com> wrote in message=20
> news:uchKsD2fGHA.4892@TK2MSFTNGP02.phx.gbl...
>> We have a strange issue with a particular XP pro SP2 machine in our=20
>> domain.
>>
>> If I log onto this machine as the local administrator, I can access =
the
>> internet no problems. The user who sits at this machine was unable to =

>> access
>> the internet until I gave her local admin privs on this machine - not =
even
>> the power users group did the trick. Another user who sits at this =
machine
>> in the evenings was also unable to access the internet using her =
domain
>> logon. When I gave her domain account local admin rights on that =
machine=20
>> (as
>> I had done for the previous user I mentioned) I expected that would =
solve
>> the problem. NOPE!! She still is unable to access the internet - =
simply
>> gets a "page unable to be displayed" for any site she attempts to =
visit!
>>
>> I tried pinging some sites and that worked just fine so traffic is =
getting
>> through - maybe port 80 is somehow being blocked? I turned off the=20
>> firewall
>> just in case - and that still did not fix the issue. The strange =
thing is
>> that this user can log onto other machines and access the internet so =
it
>> must be somehow related to something on that PC - I just do not know =
where
>> to look next...
>>
>> Has anyone got any suggestions on trouble shooting this issue?
>>
>> Thanks,
>>
>> Brad
>>
>>=20
>=20
>

Re: Internet access issue - wierd one... by Duncan

Duncan
Wed May 24 22:23:38 CDT 2006

In article <uchKsD2fGHA.4892@TK2MSFTNGP02.phx.gbl>,
donotreply@notreal.com says...
> We have a strange issue with a particular XP pro SP2 machine in our domain.
>
> If I log onto this machine as the local administrator, I can access the
> internet no problems. The user who sits at this machine was unable to access
> the internet until I gave her local admin privs on this machine - not even
> the power users group did the trick. Another user who sits at this machine
> in the evenings was also unable to access the internet using her domain
> logon. When I gave her domain account local admin rights on that machine (as
> I had done for the previous user I mentioned) I expected that would solve
> the problem. NOPE!! She still is unable to access the internet - simply
> gets a "page unable to be displayed" for any site she attempts to visit!
>
> I tried pinging some sites and that worked just fine so traffic is getting
> through - maybe port 80 is somehow being blocked? I turned off the firewall
> just in case - and that still did not fix the issue. The strange thing is
> that this user can log onto other machines and access the internet so it
> must be somehow related to something on that PC - I just do not know where
> to look next...
>
> Has anyone got any suggestions on trouble shooting this issue?

* Does the machine have the SBS Firewall Client installed? And is it
correctly set to the Server?

* re user memberships: Is the user a member of the "BackOffice Internet
Users" ?

--
Duncan