We have a problem whereby the proxy.pac location is not being applied to a client from the domain Group Policy.
It is specified in User Configuration -> Windows Settings -> Internet Explorer Maintenance -> Connection/Automatic Browser Configuration
Automatic Browser Configuration is Enabled
Auto-proxy URL is set to the proxy.pac path.
Everything else from this policy is being applied to the user, it is purely this proxy.pac section that is not getting applied. (I have run rsop to prove the policy is being applied).
It would appear that the registry key HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\AutoConfigURL should get set to the proxy.pac path on logon (that's what I see on other clients that do work correctly) but that is not happening although the user has modify permissions on the relevant registry key. However, if I make the user a local admin, the settings are applied from the policy and the registry key is set. What is even more bizarre is that if I remote desktop to the client PC as a user then the settings are applied, but if I login directly on the PC they are not. As this PC is used by multiple users and I don't know who they are going to be (could be any one out of 100 users) I can't fudge it by making them temporary local admins. Does anyone know why logging in via remote desktop should behave differently from logging in directly on the PC? I can't find anything that tells me what the permissions are for Remote Desktop Users group.
I should add I have also set "Process even if group Policy Objects have not changed" in Computer Configuration -> Administrative Templates -> System -> Group Policy. Policy is applied from a server; there is no local policy configuration.