?
Solved

GPO's are locking down IE setting - But user has still changed the home page...how?

Posted on 2008-10-03
10
Medium Priority
?
210 Views
Last Modified: 2013-12-08
Using the "Highly managed" computer and user gpo's, we have locked down the user and computer where the home page in IE7 is unavailable for change.  Yet, the home page has been changed.  Any thoughts on how the user could do this.  They have no admin rights.  Regedit is locked down as well.
0
Comment
Question by:tm3
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 4
  • 2
10 Comments
 
LVL 4

Expert Comment

by:Dimarc67
ID: 22637934
Did the user manually change the homepage, or did a site provide a link to do it (i.e., Google's "Make this my homepage" link)?
0
 

Author Comment

by:tm3
ID: 22638009
Don't know.  I don't believe that a site did it because different machines have different home pages.
0
 
LVL 4

Expert Comment

by:Dimarc67
ID: 22638029
Have you confirmed that the GPO is being applied as expected?  You can use the Group Policy Management Console (GPMC) for this.
0
Back Up Your Microsoft Windows Server®

Back up all your Microsoft Windows Server – on-premises, in remote locations, in private and hybrid clouds. Your entire Windows Server will be backed up in one easy step with patented, block-level disk imaging. We achieve RTOs (recovery time objectives) as low as 15 seconds.

 
LVL 4

Expert Comment

by:Patrick49er
ID: 22638046
Run a "Group Policy Results" wizard against the machine and user on that machine you have questions about.  See if there is a policy that is over riding your mandatory IE homepage setting.  If that is the case, make your GPO as enforced so that no GPOs above it over ride that setting.  If you do this, my recommendation is to create a GPO that is specific for that setting you want to enforce.  This will alleviate any possible problems you might have in the future of GPOs over riding what you want to have done.
0
 

Author Comment

by:tm3
ID: 22638241
The current GPO tree is pretty basic. And the GPresults output is showing what I would expect. When I login as the user, the policy blocks me from changing the home page.  I just can't figure out how one of the students can change the settings when they are sitting at the keyboard.  This is a lab environment with one login.  I don't know which student is playing with it.
0
 
LVL 4

Expert Comment

by:Patrick49er
ID: 22638388
Are you sure the culprit hasn't "hacked" into the local admin account and is doing it via that?  Any programs being ran?  Can the user account access the IE7 Advanced options and reset IE7 to first run?  Can the user access it via the Control Panel?
0
 

Author Comment

by:tm3
ID: 22638476
Local admin - no. Last login date same as image date. Adbanced options - grayed out. Control panel is locked down as well. Task manager is not accessable so can see programs running....just found it.  In IE, the home button has a drop down...it says "Add or Change Home Page" ...ok...so which gpo will turn that off?
0
 
LVL 4

Accepted Solution

by:
Patrick49er earned 375 total points
ID: 22638591
And just to be sure, you have User Configuration -> Admin Templates -> Internet Explorer and the Disable changing home page setting enabled and set to the home page you desire. Correct?

I don't see any other setting other than the option to remove the Home button.  This can be found at:
User Configuration -> Admin Templates ->  Internet Explorer -> Toolbars and then Configure Toolbar Buttons.  When enabled, you can select which toolbars are shown.

0
 

Author Comment

by:tm3
ID: 22638660
Confirmed on "disable changing home settings" is enabled.  Just tried your suggestion and it removed the home page button and both the botton and the drop down went away.  I'll try this for now, but can see some folks not liking that solution.  Is there an enhanced GPO set out there for IE7 that I would need to install?
0
 
LVL 4

Expert Comment

by:Patrick49er
ID: 22642310
I am pretty sure if your Group Policy Management is on the latest that you have IE7 admin templates for that administration.  I didn't find anything in reference to removing that drop down from the Home Page button.  It does seem pretty silly to me to have the Home Page locked only to have that button reverse it.
0

Featured Post

Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article offers some helpful and general tips for safe browsing and online shopping. It offers simple and manageable procedures that help to ensure the safety of one's personal information and the security of any devices.
This article provides a convenient collection of links to Microsoft provided Security Patches for operating systems that have reached their End of Life support cycle. Included operating systems covered by this article are Windows XP,  Windows Server…
How to create a custom search shortcut to site-search Experts Exchange using Google in the Firefox browser. This eliminates the need to type out site:experts-exchange.com whenever you want to search the site. Launch your Bookmark Menu: Press 'Ctrl +…
Two types of users will appreciate AOMEI Backupper Pro: 1 - Those with PCIe drives (and haven't found cloning software that works on them). 2 - Those who want a fast clone of their boot drive (no re-boots needed) and it can clone your drive wh…

752 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question