bosshognz
asked on
Security and Privacy options are greyed out in Internet Options
I'm setting up a test environment in 2008 R2 and have managed to lock out the ability to change any zone settings in the Security tab and in the Privacy tab in Internet Options of Internet Explorer for all of my normal users.
I have set up a couple of Group Policies - but I'm not sure exactly where the setting would be that is greying out these options.
What could be causing it to be greyed out, and how can I turn it off?
Thanks,
I have set up a couple of Group Policies - but I'm not sure exactly where the setting would be that is greying out these options.
What could be causing it to be greyed out, and how can I turn it off?
Thanks,
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
bosshognz: Enhanced security should not disable internet options settings.
Could you generate Group Policy Results on the server? It can show us, which policies are applied and it'll be easier to find, which policy should be disabled.
Could you generate Group Policy Results on the server? It can show us, which policies are applied and it'll be easier to find, which policy should be disabled.
On the workstation...
Start/run/rsop.msc
Navigate to the policy path about, where you configured it, and it will tell you the name of the gpo responsible for the setting...
Start/run/rsop.msc
Navigate to the policy path about, where you configured it, and it will tell you the name of the gpo responsible for the setting...
ASKER
johnb - I've had a look and changed a couple of settings but that haven't had the desired effect.
pernicek - attached is a partial of the GPO report. I've removed the drive mappings as they aren't relevant.
You'll see the User Config Admin Templates are 'corrupted'. There are a lot of settings set in here as well.
VTStaff.htm
pernicek - attached is a partial of the GPO report. I've removed the drive mappings as they aren't relevant.
You'll see the User Config Admin Templates are 'corrupted'. There are a lot of settings set in here as well.
VTStaff.htm
ASKER
I have completely removed any links to the attached GPO and forced a gpupdate, but the options in Internet Options for Security are still greyed out. something else is not right.
ASKER
This helped me along the way to solving the problem. After removing membership to the GPOs I realised some restrictions were still hanging around that shouldn't have been. With the unrestricted profile, I used the 'Reset option in the Advanced tab of internet options, restarted IE and all options were no longer greyed out.
I believe somewhere along the way I got the right settings in the options shown by pernicek, but IE wasn't unable to unlock it - perhaps due to a bug, I don't know.
Thanks for everyone's help
I believe somewhere along the way I got the right settings in the options shown by pernicek, but IE wasn't unable to unlock it - perhaps due to a bug, I don't know.
Thanks for everyone's help
ASKER
Pernicek: I've had a look there in the two applicable GPOs - but in both all of those settings are 'Undefined' with a default of No.
Also of note. When the users log in, it automatically opens Outlook - which has a plugin that replaces the 'Outlook today' layout. When this loads, theres an error comes up for Internet Explorer
"Content within this application coming from the website listed below is blocked by Internet Explorer Enhanced Security Configuration
About:internet"
I have turned off Enhanced Security for Admins and Users on this Remote Desktop server, so I'm not sure why this is coming up. Related???