IE Security Zones In Win2k3
Dear All,
In my Win2k3 Server there is one user that has set the security level for the Internet Zone to Custom and I want to set it to high. The problem is that when I log in as that user and go to the "Internet Options|Security" all the controls are greyed-out and I can not change his security level for the Internet -and in fact any other- zone.
Can you clease help?
Thank you,
---
Theo
In my Win2k3 Server there is one user that has set the security level for the Internet Zone to Custom and I want to set it to high. The problem is that when I log in as that user and go to the "Internet Options|Security" all the controls are greyed-out and I can not change his security level for the Internet -and in fact any other- zone.
Can you clease help?
Thank you,
---
Theo
ASKER
Hi there,
Can you post on using the GPO?
I tried to locate the relevant setting but couldn't.
Thanks,
---
Theo
Can you post on using the GPO?
I tried to locate the relevant setting but couldn't.
Thanks,
---
Theo
First off all, you would need to create a single OU where you place the users account or the users computer, then add a GPO to the OU and then go to the following option...
Machine: Computer Configuration --> Administrative Templates --> Windows Components --> Internet Explorer
User: User Configuration --> Windows Settings --> Internet Explorer Maintenance
In those options, you can set these options....
Machine: Computer Configuration --> Administrative Templates --> Windows Components --> Internet Explorer
User: User Configuration --> Windows Settings --> Internet Explorer Maintenance
In those options, you can set these options....
ASKER
1)
>In those options, you can set these options....
Where?
The only options I get are:
Security Zones: Use only machive settings
Security Zones: Do not allow users to change policies
Security Zones: Do not allow users to add/delete sites
Make proxy settings per-machine
Disable automatic Install of IE components
Disable periodic check for IE updates
Disable software update shell-notifications on program launch
Disable showing the splash screen
BTW, all of them are: Not configured!
2) I think the answer is a new component in W2k3 called the IE Enhanced Security Conficuration. BRB about it when i'll have the chance...
Cheers,
---
Theo
>In those options, you can set these options....
Where?
The only options I get are:
Security Zones: Use only machive settings
Security Zones: Do not allow users to change policies
Security Zones: Do not allow users to add/delete sites
Make proxy settings per-machine
Disable automatic Install of IE components
Disable periodic check for IE updates
Disable software update shell-notifications on program launch
Disable showing the splash screen
BTW, all of them are: Not configured!
2) I think the answer is a new component in W2k3 called the IE Enhanced Security Conficuration. BRB about it when i'll have the chance...
Cheers,
---
Theo
ASKER
More you can find at Win2k3's IE:
Help | Enhanced Security Configuration
or
res://shdoclc.dll/IESechel
I am having a look ...
Help | Enhanced Security Configuration
or
res://shdoclc.dll/IESechel
I am having a look ...
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Hi there,
In "User Configuration --> Administrative Templates --> Windows Components --> Internet Explorer --> Internet Control Panel" I made the change and set "Disable the Security page" to Disabled.
I also checked that in GP results to make sure it is processed.
But the user is still unable to change the security settings for the zones.
:(
I also tried in "Computer Configuration --> Administrative Templates --> Windows Components --> Internet Explorer" to change the following settings ...
Security Zones: Use only machive settings
Security Zones: Do not allow users to change policies
...to Disabled but to no avail :(
Mind you though! I did not create a new GPO as you suggested in the beginning - instead I changed the "Default Domain Policy" GPO but as I said in GP results it checks out OK.
Do you thing that this micht be the cause?
...One more thing, those last two settings:
Security Zones: Use only machive settings
Security Zones: Do not allow users to change policies
...do not seem to work together: If I enable one, the other is not processed! Do you know why?
Do you have access to a W2k3 Srv system? If yes can you try to see if you encounter the same issue?
Thanks,
---
Theo
In "User Configuration --> Administrative Templates --> Windows Components --> Internet Explorer --> Internet Control Panel" I made the change and set "Disable the Security page" to Disabled.
I also checked that in GP results to make sure it is processed.
But the user is still unable to change the security settings for the zones.
:(
I also tried in "Computer Configuration --> Administrative Templates --> Windows Components --> Internet Explorer" to change the following settings ...
Security Zones: Use only machive settings
Security Zones: Do not allow users to change policies
...to Disabled but to no avail :(
Mind you though! I did not create a new GPO as you suggested in the beginning - instead I changed the "Default Domain Policy" GPO but as I said in GP results it checks out OK.
Do you thing that this micht be the cause?
...One more thing, those last two settings:
Security Zones: Use only machive settings
Security Zones: Do not allow users to change policies
...do not seem to work together: If I enable one, the other is not processed! Do you know why?
Do you have access to a W2k3 Srv system? If yes can you try to see if you encounter the same issue?
Thanks,
---
Theo
ASKER
Oops! Wait!
I will try again because although I used "gpupdate /force" after each change, changes were not immediately effected!
Will try tomorow!
...
Theo
I will try again because although I used "gpupdate /force" after each change, changes were not immediately effected!
Will try tomorow!
...
Theo
ASKER
Hi there again! Sorry for the wait but I was sick. February always kills me!
Will get back to you when I'll clear the backlog in my ToDo list!
Thank you,
---
XC
Will get back to you when I'll clear the backlog in my ToDo list!
Thank you,
---
XC
You'd best use a Group Policy Object for this. If you don't use GPO, then log in as an admin and set security to high (only the admin can change these settings and they apply for all users), if you wnat to use the GPO, just post and i'll try and explain were you can find it and how you can use it..