I’m having a perplexing issue with our migration from ISA 2006 to TMG 2010. In a nutshell, we use DNS for WPAD.dat distribution. To test the WPAD.Dat from TMG before I make a global change in DNS, I have changed the HOSTS record of a group of Windows7 users in our pilot group and reboot them. After the reboot, when I look at their IE, all proxy settings are correct with the new TMG 2010 server, as is the automatically detected Forefront Server in their Forefront TMG client (we run that on all workstations here.) So all looks perfect.
However, their Internet traffic is still going through our old ISA 2006 server. On the Windows7 client machines in the registry I found that within the subkeys of the registry key HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad there are multiple pointers to the old ISA 2006 server. As a test, I deleted the entire key, rebooted and then all Internet traffic was correctly routed through the new TMG 2010.
Any idea what the problem might be? Why aren't these subkeys populating with the new WPAD address? I don’t particularly want to delete this key on all our workstations unless there’s a good reason to. It appears the key does repopulate, however it doesn't contain any pointers to the new TMG 2010 like the old key did.
Below is a screenshot showing a client workstation with the correct settings in IE, but the wrong settings in the Registry. Seatmg.wkg.com is the new TMG 2010 server and Seaisa.wkg.com is the old ISA 2006 server.
Thank you!
George Moore