wiseman4250
asked on
Trusted Sites button greyed out in IE7 for Windows 2003 Terminal Server domain users sessions
TS clients on a new Windows 2003 server R2 Terminal server have Trusted Sites button greyed out in IE7.\
No GPO is being applied in AD. The local GP has not been modified. Administrator account has full access to the IE security page/ buttons. How can I enable adding trusted sites for all users of this ts server?
No GPO is being applied in AD. The local GP has not been modified. Administrator account has full access to the IE security page/ buttons. How can I enable adding trusted sites for all users of this ts server?
ASKER
The flag key in HKEY_CURRENT_USER\Software
Thanks aprilmj
Thanks aprilmj
ASKER
Here is the solution:
I modified my GPO in the Terminal Server Users OU in AD with the following:
"User Configuration" -> "Windows Settings" -> "Internet Explorer Maintenance" -> "Security". Right click on "Security Zones and Content ratings" and select "Properties", Import the current security Settings.
Forced GPO updates with secedit /refreshpolicy user_policy /enforce (W2K DC)
This enabled sites to be added to the different zones on the security page.
This also removed the key emblems from the icons on the security page for the users
I modified my GPO in the Terminal Server Users OU in AD with the following:
"User Configuration" -> "Windows Settings" -> "Internet Explorer Maintenance" -> "Security". Right click on "Security Zones and Content ratings" and select "Properties", Import the current security Settings.
Forced GPO updates with secedit /refreshpolicy user_policy /enforce (W2K DC)
This enabled sites to be added to the different zones on the security page.
This also removed the key emblems from the icons on the security page for the users
I am currently having the exact same problem however my users are local users on the TS server and there is no AD OU GPO that I can use to address this issue on the local users. Does anyone have any other suggestions? Users created earlier than yesterday(??? how long I'm not usre) seem to be fine.
I'm having the same problem with local users too. It is only for new users and not specific to what type of user (even Administrators). This is the first time I have tried to add a user this month so it could coincide with the report from 06.08.2007
Any Ideas would be more than welcome!
Any Ideas would be more than welcome!
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
That's great the work around get me through what I needed. It isn't ideal because it take a lot of other settings with it but at least it makes it workable. Thanks a lot!
Your welcome keyswiss.
Okay but this means that all users that are already created would still have to be cahnged manually?
Yes, that is correct. All existing users will have to be changed manually.
Someone pointed me towards
http://forums.microsoft.com/TechNet/ShowPost.aspx?PostID=3149964&SiteID=17
Which made it posible for me to change the trusted sites for all the users.
http://forums.microsoft.com/TechNet/ShowPost.aspx?PostID=3149964&SiteID=17
Which made it posible for me to change the trusted sites for all the users.
HKEY_CURRENT_USER\Software
Look in the right pane for a value named "Flags". Double click it and set the value data to 47 (hexadecimal). Be sure to back the key up first to be on the safe side.