GPO's are locking down IE setting - But user has still changed the home page...how?

Using the "Highly managed" computer and user gpo's, we have locked down the user and computer where the home page in IE7 is unavailable for change.  Yet, the home page has been changed.  Any thoughts on how the user could do this.  They have no admin rights.  Regedit is locked down as well.
tm3Asked:
Who is Participating?
 
Patrick49erCommented:
And just to be sure, you have User Configuration -> Admin Templates -> Internet Explorer and the Disable changing home page setting enabled and set to the home page you desire. Correct?

I don't see any other setting other than the option to remove the Home button.  This can be found at:
User Configuration -> Admin Templates ->  Internet Explorer -> Toolbars and then Configure Toolbar Buttons.  When enabled, you can select which toolbars are shown.

0
 
Dimarc67Commented:
Did the user manually change the homepage, or did a site provide a link to do it (i.e., Google's "Make this my homepage" link)?
0
 
tm3Author Commented:
Don't know.  I don't believe that a site did it because different machines have different home pages.
0
Cloud Class® Course: CompTIA Healthcare IT Tech

This course will help prep you to earn the CompTIA Healthcare IT Technician certification showing that you have the knowledge and skills needed to succeed in installing, managing, and troubleshooting IT systems in medical and clinical settings.

 
Dimarc67Commented:
Have you confirmed that the GPO is being applied as expected?  You can use the Group Policy Management Console (GPMC) for this.
0
 
Patrick49erCommented:
Run a "Group Policy Results" wizard against the machine and user on that machine you have questions about.  See if there is a policy that is over riding your mandatory IE homepage setting.  If that is the case, make your GPO as enforced so that no GPOs above it over ride that setting.  If you do this, my recommendation is to create a GPO that is specific for that setting you want to enforce.  This will alleviate any possible problems you might have in the future of GPOs over riding what you want to have done.
0
 
tm3Author Commented:
The current GPO tree is pretty basic. And the GPresults output is showing what I would expect. When I login as the user, the policy blocks me from changing the home page.  I just can't figure out how one of the students can change the settings when they are sitting at the keyboard.  This is a lab environment with one login.  I don't know which student is playing with it.
0
 
Patrick49erCommented:
Are you sure the culprit hasn't "hacked" into the local admin account and is doing it via that?  Any programs being ran?  Can the user account access the IE7 Advanced options and reset IE7 to first run?  Can the user access it via the Control Panel?
0
 
tm3Author Commented:
Local admin - no. Last login date same as image date. Adbanced options - grayed out. Control panel is locked down as well. Task manager is not accessable so can see programs running....just found it.  In IE, the home button has a drop down...it says "Add or Change Home Page" ...ok...so which gpo will turn that off?
0
 
tm3Author Commented:
Confirmed on "disable changing home settings" is enabled.  Just tried your suggestion and it removed the home page button and both the botton and the drop down went away.  I'll try this for now, but can see some folks not liking that solution.  Is there an enhanced GPO set out there for IE7 that I would need to install?
0
 
Patrick49erCommented:
I am pretty sure if your Group Policy Management is on the latest that you have IE7 admin templates for that administration.  I didn't find anything in reference to removing that drop down from the Home Page button.  It does seem pretty silly to me to have the Home Page locked only to have that button reverse it.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.