I believe I was able to find the root cause today for the issue in our environment. The issue lies within the WebCache file for Windows - apparently both IE and Pulse borrow the settings in this for their WinINet processes to connect to the internet. When windows syspreps the image, this ends up in the Default profile and ends up getting stamped for all users. I was able to find a bunch of others online (other apps) with similar issues. You can script a fix, running as the local user which consists of stopping the CacheTask service : Get-ScheduledTask CacheTask | Stop-Scheduled Task Remove-Item $env:LOCALAPPDATA\Microsoft\Windows\WebCache\WebCacheV01.dat -Force Get-ScheduledTask CacheTask | Start-ScheduledTask Note you may have to issue a taskkill for taskhostw.exe as well (it keeps a lock on WebCacheV01.DAT otherwise). The long term fix is when you sysprep your images, make sure that your sysprep process excludes the "$env:LOCALAPPDATA\Microsoft\Windows\WebCache" directory on new images. Windows will automatically build this on its own when a new user logs in, so it doesnt need to even be in the DEFAULT profile. Hope this helps someone - that was almost 3 months of troubleshooting. The way I spotted this was to use procmon (Sysinternals) to capture the Access Denied errors on another users profile trying to write to the InetCookies EDB file in the local administrator (which we use for the capture).
... View more