Power Automate for desktop - Proxy setup

When to override proxy settings

• Proxy requires authentication: The PAD or Machine registration application fails with System.Net.WebException: The remote server returned an error: (407) Proxy Authentication Required

  • check the "Authenticated proxy setup" steps below

• PAD installer was not installed by the target end-user (Helpdesk, SCCM, ...): The PAD or Machine registration application fails with System.Net.WebException.

  • check either the Authenticated or Unauthenticated proxy setup steps below depending on your proxy requirements.

Prerequisites

Make sure the proxy/firewall allows connectivity to Power Automate cloud services

The list of cloud services endpoints is mentioned here:  IP address configuration - Power Automate | Microsoft Learn

Authenticated proxy setup

1. Create or override the PAD registry proxy settings UseDefaultCredentials with 1 and ProxyServer with the target proxy address. 

2. Override the Power Automate Service proxy settings

   1. Open a text editor as admin and load the files below:

      • "C:\Program Files (x86)\Power Automate Desktop\UIFlowService.exe.config"

      • "C:\Program Files (x86)\Power Automate Desktop\PAD.Robot.exe.config"

   2. Right under the opening <system.net>tag, paste the below

      1. In case the proxy is configured by address:
          <defaultProxy useDefaultCredentials="True"> 
             <proxy
               bypassonlocal="True"
               proxyaddress="replace_with_your_proxy_address"
             />
         </defaultProxy>

      2. In case the proxy is configured by script location:
          <defaultProxy useDefaultCredentials="True"> 
             <proxy
               scriptLocation="replace_with_your_proxy_script_location"
             />
         </defaultProxy>

   3. Replace either "replace_with_your_proxy_address" or "replace_with_your_proxy_script_location" with the target configuration in both files

   4. Save the files

3. Change the "Power Automate Service" account with an allowed domain service account

   1. Either using the TroubleshootTool UI "change service account" feature

   2. Or using the TroubleshootTool Console

      1. Create a temporary file “temporary.txt” with the account password inside

      2. Put this file in the " C:\Program Files (x86)\Power Automate Desktop\” folder

      3. Run the 2 commands below after replacing the <accountname> by the target account  

         cd " C:\Program Files (x86)\Power Automate Desktop\” “TroubleshootingTool.Console.exe ChangeUIFlowServiceAccount <accountname> < temporary.txt”

      4. Delete the temporary file

 Unauthenticated proxy setup

This step is usually not necessary unless PAD setup wasn't executed by the target end-user (Helpdesk, SCCM, ...) 

1. Override the "Power Automate Service" proxy settings

   1. Open a text editor as admin and load the files below:

      • "C:\Program Files (x86)\Power Automate Desktop\UIFlowService.exe.config"

      • "C:\Program Files (x86)\Power Automate Desktop\PAD.Robot.exe.config"

   2. Right under the opening <system.net>tag, paste the below

      1. In case the proxy is configured by address:
          <defaultProxy> 
             <proxy
               bypassonlocal="True"
               proxyaddress="replace_with_your_proxy_address"
             />
         </defaultProxy>

      2. In case the proxy is configured by script location:
          <defaultProxy> 
             <proxy
               scriptLocation="replace_with_your_proxy_script_location"
             />
         </defaultProxy>

   3. Replace either "replace_with_your_proxy_address" or "replace_with_your_proxy_script_location" with the target configuration in both files

   4. Save the files

2. Restart the "Power Automate Service"

   1. Open services.msc 

   2. Look for "Power Automate Service"

   3. Right-click and restart

           <system.net>

              <!-- put the proxy settings here -->

           </system.net>