[Last Call] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 372
  • Last Modified:

IE Security Zones In Win2k3

Dear All,

 In my Win2k3 Server there is one user that has set the security level for the Internet Zone to Custom and I want to set it to high. The problem is that when I log in as that user and go to the "Internet Options|Security" all the controls are greyed-out and I can not change his security level for the Internet -and in fact any other- zone.
Can you clease help?


Thank you,
---
Theo
 
0
xchange
Asked:
xchange
  • 6
  • 3
1 Solution
 
rhandelsCommented:
Hi,

You'd best use a Group Policy Object for this. If you don't use GPO, then log in as an admin and set security to high (only the admin can change these settings and they apply for all users), if you wnat to use the GPO, just post and i'll try and explain were you can find it and how you can use it..
0
 
xchangeAuthor Commented:
Hi there,

 Can you post on using the GPO?
I tried to locate the relevant setting but couldn't.


Thanks,
---
Theo
0
 
rhandelsCommented:
First off all, you would need to create a single OU where you place the users account or the users computer, then add a GPO to the OU and then go to the following option...

Machine: Computer Configuration --> Administrative Templates --> Windows Components -->  Internet Explorer

User: User Configuration --> Windows Settings --> Internet Explorer Maintenance

In those options, you can set these options....
0
What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

 
xchangeAuthor Commented:
1)
>In those options, you can set these options....
Where?
The only options I get are:
Security Zones: Use only machive settings
Security Zones: Do not allow users to change policies
Security Zones: Do not allow users to add/delete sites
Make proxy settings per-machine
Disable automatic Install of IE components
Disable periodic check for IE updates
Disable software update shell-notifications on program launch
Disable showing the splash screen

BTW, all of them are: Not configured!

2) I think the answer is a new component in W2k3 called the IE Enhanced Security Conficuration. BRB about it when i'll have the chance...


Cheers,
---
Theo
0
 
xchangeAuthor Commented:
More you can find at Win2k3's IE:
Help | Enhanced Security Configuration
or
res://shdoclc.dll/IESechelp.htm

I am having a look ...
0
 
rhandelsCommented:
User: Computer Configuration --> Administrative Templates --> Windows Components -->  Internet Explorer --> Internet Control Panel..

Make sure to disable the "Disable the Security page".
0
 
xchangeAuthor Commented:
Hi there,

 In "User Configuration --> Administrative Templates --> Windows Components -->  Internet Explorer --> Internet Control Panel" I made the change and set "Disable the Security page" to Disabled.
I also checked that in GP results to make sure it is processed.
But the user is still unable to change the security settings for the zones.
:(
I also tried in "Computer Configuration --> Administrative Templates --> Windows Components -->  Internet Explorer" to change the following settings ...
Security Zones: Use only machive settings
Security Zones: Do not allow users to change policies
...to Disabled but to no avail :(

Mind you though! I did not create a new GPO as you suggested in the beginning - instead I changed the "Default Domain Policy" GPO but as I said in GP results it checks out OK.
Do you thing that this micht be the cause?

...One more thing, those last two settings:
Security Zones: Use only machive settings
Security Zones: Do not allow users to change policies
...do not seem to work together: If I enable one, the other is not processed! Do you know why?

Do you have access to a W2k3 Srv system? If yes can you try to see if you encounter the same issue?


Thanks,
---
Theo
0
 
xchangeAuthor Commented:
Oops! Wait!
I will try again because although I used "gpupdate /force" after each change, changes were not immediately effected!
Will try tomorow!
...
Theo
0
 
xchangeAuthor Commented:
Hi there again! Sorry for the wait but I was sick. February always kills me!
Will get back to you when I'll clear the backlog in my ToDo list!


Thank you,
---
XC
0

Featured Post

Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

  • 6
  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now