Please have your administrator check which sAM account name your client uses and whether it has been entered correctly in the Control Panel. If no sAM account name has been entered or if it does not match, a user will only be authenticated via his own domain affiliation and will only surf via the Proxy.pac using the default setting of the domain's web filter. If this prohibits Internet use, the user cannot surf.