Link to home
Start Free TrialLog in
Avatar of bosshognz
bosshognzFlag for New Zealand

asked on

Security and Privacy options are greyed out in Internet Options

I'm setting up a test environment in 2008 R2 and have managed to lock out the ability to change any zone settings in the Security tab and in the Privacy tab in Internet Options of Internet Explorer for all of my normal users.  

I have set up a couple of Group Policies - but I'm not sure exactly where the setting would be that is greying out these options.

What could be causing it to be greyed out, and how can I turn it off?

Thanks,
ASKER CERTIFIED SOLUTION
Avatar of ashutoshsapre
ashutoshsapre
Flag of India image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of bosshognz

ASKER

ashutoshsapre: I will give that a go
Pernicek:  I've had a look there in the two applicable GPOs - but in both all of those settings are 'Undefined' with a default of No.

Also of note.  When the users log in, it automatically opens Outlook - which has a plugin that replaces the 'Outlook today' layout.  When this loads, theres an error comes up for Internet Explorer
"Content within this application coming from the website listed below is blocked by Internet Explorer Enhanced Security Configuration

About:internet"

I have turned off Enhanced Security for Admins and Users on this Remote Desktop server, so I'm not sure why this is coming up.  Related???
bosshognz: Enhanced security should not disable internet options settings.

Could you generate Group Policy Results on the server? It can show us, which policies are applied and it'll be easier to find, which policy should be disabled.
Avatar of johnb6767
On the workstation...

Start/run/rsop.msc

Navigate to the policy path about, where you configured it, and it will tell you the name of the gpo responsible for the setting...
johnb - I've had a look and changed a couple of settings but that haven't had the desired effect.

pernicek - attached is a partial of the GPO report.  I've removed the drive mappings as they aren't relevant.
You'll see the User Config Admin Templates are 'corrupted'.  There are a lot of settings set in here as well.
VTStaff.htm
I have completely removed any links to the attached GPO and forced a gpupdate, but the options in Internet Options for Security are still greyed out.  something else is not right.
This helped me along the way to solving the problem.  After removing membership to the GPOs I realised some restrictions were still hanging around that shouldn't have been.  With the unrestricted profile, I used the 'Reset option in the Advanced tab of internet options, restarted IE and all options were no longer greyed out.

I believe somewhere along the way I got the right settings in the options shown by pernicek, but IE wasn't unable to unlock it - perhaps due to a bug, I don't know.

Thanks for everyone's help