ON A W2K SYSTEM
1. When we login and using CLNTRUST and having the proxy set for the
browser on a W2K system we gain access to the Internet.
2. If we execute DWNTRUST and try accessing the Internet we still get
to the Internet.
3. If we change the browser to not use a proxy we get a "page can not
be displayed" screen.
4. We reset the proxy settings and are back out to the Internet. Still
no CLNTRUST executed.
5. If I login as a user that has no access to the Internet, IE not
part of the INTERNET group thus no CLNTRUST key, we get 403 Forbidden.
6. If I reset the browser to not use a proxy we get "page can not be
displayed".

This works as planned, but thought that once I executed DWNTRUST we
would loose the ability to get to the Internet. Why do we get access without
the CLNTRUST key?



ON A WXP SYSTEM
We do the same scenario on the WXP box, but with the following
differences.

1. Same as above
2. Same as above
3. If we change the browser to not use a proxy we still get out to the
Internet.
4. Same as above
5. If I login as a user that has no access to the Internet, IE not
part of the INTERNET group thus no CLNTRUST key, we still get out to the
Internet. This is without the proxy being set.
6. If I reset the browser to use a proxy we get 403 Forbidden.

Why do we get out to the Internet without the proxy being set and with
no CLNTRUST key present?

At no time do we use any configuration scripts or check the
"Automatically detect settings" box.