guide · static export
PC · network

Reset a Broken System Proxy and WinHTTP Settings

Leftover proxy settings from an uninstalled tool break updates, the Store and half your apps while the browser works fine. Windows keeps two separate proxy stores — reset both.

by@guidox updated:10/31/26 time:20 min level:Intermediate tested on:Windows 11 24H2 works on:Windows 10, Windows 11, Windows Server 2019 tools:PowerShell as administrator
TL;DR

Read **netsh winhttp show proxy** and the **Internet Settings** key, then reset with **netsh winhttp reset proxy** and **ProxyEnable 0**. WinHTTP and WinINET are separate — fixing one leaves the other broken.

Before you start

Requirements

  • Admin rights
  • A known working internet connection
  • 20 minutes
Step by step

Instructions

01

Read both proxy stores

**WinHTTP** is machine-wide and used by services, updates and installers. **WinINET** is per user and used by the browser stack. They are set in different places and fail independently.

netsh winhttp show proxy
Get-ItemProperty 'HKCU:\Software\Microsoft\Windows\CurrentVersion\Internet Settings' | Select-Object ProxyEnable,ProxyServer,AutoConfigURL
⚠ warningA **ProxyServer** value stays in the registry even when **ProxyEnable** is 0. That is why old settings reappear after a tool turns the switch back on.
02

Reset the machine-wide WinHTTP proxy

**reset proxy** returns WinHTTP to direct access. Windows Update, the Store and most installers read this setting, so it is the one that fixes background failures.

netsh winhttp reset proxy
netsh winhttp show proxy
03

Clear the per-user settings properly

Set **ProxyEnable** to 0 and remove the stale server and the auto-config URL. Removing only the switch is what makes the problem come back.

Remove-ItemProperty 'HKCU:\Software\Microsoft\Windows\CurrentVersion\Internet Settings' -Name AutoConfigURL -ErrorAction SilentlyContinue
Set-ItemProperty 'HKCU:\Software\Microsoft\Windows\CurrentVersion\Internet Settings' -Name ProxyEnable -Value 0 -Type DWord
Set-ItemProperty 'HKCU:\Software\Microsoft\Windows\CurrentVersion\Internet Settings' -Name ProxyServer -Value '' -Type String
04

Check the policy layer

A domain or a local policy can set the proxy again within minutes. If your change reverts, read the policy value and gpresult before you fight the symptom.

Get-ItemProperty 'HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings' -ErrorAction SilentlyContinue | Select-Object ProxyEnable,ProxyServer,ProxySettingsPerUser
gpresult /r /scope:computer | Select-String Proxy
05

Look for the environment variables tools leave behind

Many command-line tools ignore both stores and read **HTTP_PROXY** from the environment. A reset that leaves these in place fixes nothing for those apps.

Get-ChildItem Env: | Where-Object Name -match 'PROXY|proxy' | Select-Object Name,Value
[Environment]::SetEnvironmentVariable('HTTP_PROXY',$null,'User')
[Environment]::SetEnvironmentVariable('HTTPS_PROXY',$null,'User')
06

Verify with a client that ignores the browser

**curl.exe** ships with Windows and reports the connection it actually made. A working curl plus a failing Store points at a cache, not at the proxy.

curl.exe -sS -o NUL -w "%{http_code} %{remote_ip}" https://www.microsoft.com
Resolve-DnsName www.microsoft.com | Select-Object -First 3 Name,IPAddress
Invoke-WebRequest https://www.microsoft.com -UseBasicParsing -Method Head | Select-Object StatusCode
Troubleshooting

Common issues

The setting comes back after a reboot

A program or policy re-applies it. Search the Run keys and the Task Scheduler for the tool that set the proxy, then remove that entry as well.

Only one app fails

That app may use WinHTTP, .NET defaults or its own config. Check its settings file and the .NET defaultProxy entry in machine.config.

Everything fails after a VPN

The VPN adapter still holds the default route or a PAC file. Disconnect it, reset both stores, and reconnect.

Store and updates still fail after the reset

Those cached the failed endpoint. Restart the Windows Update service and clear the software distribution cache, or reboot before testing again.

FAQ

Frequently asked

Can I just disable the proxy in Settings?

That only touches WinINET. Services and installers keep using the machine-wide WinHTTP proxy until you reset it separately.

Is a PAC file better than a fixed server?

For a corporate network, yes. At home it is the usual source of stale configurations that outlive the tool that created them.

How to undo this

Set the proxy values you recorded back with Set-ItemProperty, or re-apply the corporate configuration with netsh winhttp set proxy. The reset itself keeps no backup, so write the values down first.

Changelog · 1 entry
  1. 2026-10-31
    First version
Interactive version: checklist, feedback, related guides →

Free · no account needed · tracks your progress