What does your regentry look like?

37 views
Skip to first unread message

Kurt Buff

unread,
Oct 24, 2025, 10:32:07 AMOct 24
to ntsys...@googlegroups.com
We implemented a GPO that removes WinHTTP Autoproxy as a dependency of Wcmsvc (Windows Connection Manager) in an attempt to work around the problems we've been seeing with NICs implementing Win11 24H2. It works, but it solidifies a configuration setting that I inherited in a GPO that implemented a lot of CIS recommendations, one of which was to disable WinHTTP Autoproxy, and that is what caused our problems with NICs in certain Dell models.

Turns out that disabling WinHTTP Autoproxy is perhaps not the best way of doing things, so I want to revert, and add WinHTTP Autoproxy back. However, I can't seem to figure out how to do that. I've reviewed a fresh install of 24H2, but can't identify the correct configuration, as WinHTTP Autoproxy doesn't appear in the DependsOnService key. Am I incorrect in believing it should show? Can someone give me a screencap where WinHTTP Autoproxy was disabled and removed as a dependency of wcmsvc?

image.png

This is the article that provided understanding of the problem:
and this is the article that I'm using to try to correct the what I believe to be the misconfiguration:

Kurt


Wright, John M

unread,
Oct 24, 2025, 10:37:27 AMOct 24
to ntsys...@googlegroups.com

I can answer the first question.  This is from one of our 24H2 machines.

 

reg query hklm\system\currentcontrolset\services\wcmsvc

 

HKEY_LOCAL_MACHINE\system\currentcontrolset\services\wcmsvc

    DependOnService    REG_MULTI_SZ    RpcSs\0NSI\0WinHttpAutoProxySvc

 

--

John Wright

IT Support Specialist

1800 Old Bluegrass Avenue, Louisville, KY 40215

502.708.9953

Please submit IT requests to Hazelwoo...@bluegrass.org

24 Hour Helpline 1.800.928.8000

  

CONFIDENTIALITY NOTICE: This message contains confidential information and is intended only for the individual(s) addressed in the message. If you are not the named addressee, you should not disseminate, distribute, or copy this e-mail. If you are not the intended recipient, you are notified that disclosing, distributing, or copying this e-mail is strictly prohibited.

 

From: ntsys...@googlegroups.com <ntsys...@googlegroups.com> On Behalf Of Kurt Buff
Sent: Friday, October 24, 2025 10:32 AM
To: ntsys...@googlegroups.com
Subject: [ntsysadmin] What does your regentry look like?

 

EXTERNAL EMAIL - This email was sent by a person from outside your organization. Exercise caution when clicking links, opening attachments or taking further action, before validating its authenticity.

Secured by Check Point

 

We implemented a GPO that removes WinHTTP Autoproxy as a dependency of Wcmsvc (Windows Connection Manager) in an attempt to work around the problems we've been seeing with NICs implementing Win11 24H2. It works, but it solidifies a configuration setting that I inherited in a GPO that implemented a lot of CIS recommendations, one of which was to disable WinHTTP Autoproxy, and that is what caused our problems with NICs in certain Dell models.

 

Turns out that disabling WinHTTP Autoproxy is perhaps not the best way of doing things, so I want to revert, and add WinHTTP Autoproxy back. However, I can't seem to figure out how to do that. I've reviewed a fresh install of 24H2, but can't identify the correct configuration, as WinHTTP Autoproxy doesn't appear in the DependsOnService key. Am I incorrect in believing it should show? Can someone give me a screencap where WinHTTP Autoproxy was disabled and removed as a dependency of wcmsvc?

 

 

This is the article that provided understanding of the problem:

and this is the article that I'm using to try to correct the what I believe to be the misconfiguration:

 

Kurt

 

--
You received this message because you are subscribed to the Google Groups "ntsysadmin" group.
To unsubscribe from this group and stop receiving emails from it, send an email to ntsysadmin+...@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/ntsysadmin/CADy1Ce4HkZroQKAHSRpQMqBW8_7Kmhq6Hj5frYyO4PaZLqWP%3DQ%40mail.gmail.com.

Kurt Buff

unread,
Oct 24, 2025, 10:42:15 AMOct 24
to ntsys...@googlegroups.com
Awesome. Thank you.

Kurt

Kurt Buff

unread,
Oct 24, 2025, 10:48:25 AMOct 24
to ntsys...@googlegroups.com
BTW, the CIS GPO we implemented disabled the WinHTTP Autoproxy service. What is yours set to - Manual, Auto, Trigger?

Thanks,
Kurt

On Fri, Oct 24, 2025 at 8:37 AM Wright, John M <John....@newvista.org> wrote:

Wright, John M

unread,
Oct 24, 2025, 10:51:47 AMOct 24
to ntsys...@googlegroups.com

Demand_Start.

 

sc.exe qc winhttpautoproxysvc

[SC] QueryServiceConfig SUCCESS

 

SERVICE_NAME: winhttpautoproxysvc

        TYPE               : 10  WIN32_OWN_PROCESS

        START_TYPE         : 3   DEMAND_START

        ERROR_CONTROL      : 1   NORMAL

        BINARY_PATH_NAME   : C:\WINDOWS\system32\svchost.exe -k LocalServiceHttp -p

        LOAD_ORDER_GROUP   :

        TAG                : 0

        DISPLAY_NAME       : WinHTTP Web Proxy Auto-Discovery Service

        DEPENDENCIES       : Dhcp

                           : DNSCache

        SERVICE_START_NAME : NT AUTHORITY\LocalService

Kurt Buff

unread,
Oct 24, 2025, 11:01:32 AMOct 24
to ntsys...@googlegroups.com
Thank you again. Much appreciated.

Kurt

Kurt Buff

unread,
Oct 24, 2025, 12:40:56 PMOct 24
to ntsys...@googlegroups.com
Wow. 

The GPO that disabled the service also stripped permissions. It wasn't in the list of services, so I had to update the GPO for that service to add permissions back in.

Makes sense, I suppose, but it added to the headache.

Kurt




Kurt Buff

unread,
Oct 24, 2025, 7:11:16 PMOct 24
to ntsys...@googlegroups.com
Thank you very much for your help.

It looks like this is working as expected.

Kurt

Robert ECEO Townley

unread,
Oct 25, 2025, 12:43:57 PMOct 25
to ntsys...@googlegroups.com
Kurt, 

A.) Wishing for over a decade that wpad was manually opt-in, not the default.   Hoping win11 would have fulfilled that wish.

B.) did you add it back because there are machines that Dell has not patched?   Or does it cause other problems?   

C.) I do have entries in DNS (and DHCP ?) that give a unique localhost ip address for wpad.  But need to do more.    

Kurt Buff

unread,
Oct 25, 2025, 2:25:56 PMOct 25
to ntsys...@googlegroups.com
If you look at the articles I put in my original, you'l see that a GPO (two, actually, one for users and one for machines) can stop use of WPAD.

Kurt

To view this discussion visit https://groups.google.com/d/msgid/ntsysadmin/CACE8FwmFfJAjtzCpvpK%2BpttY2pxhh_3y6p9rN%2B%2BMJwmm5EZgGA%40mail.gmail.com.
Reply all
Reply to author
Forward
0 new messages