Solved

GPO's are locking down IE setting - But user has still changed the home page...how?

Posted on 2008-10-03
10
209 Views
Last Modified: 2013-12-08
Using the "Highly managed" computer and user gpo's, we have locked down the user and computer where the home page in IE7 is unavailable for change.  Yet, the home page has been changed.  Any thoughts on how the user could do this.  They have no admin rights.  Regedit is locked down as well.
0
Comment
Question by:tm3
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 4
  • 2
10 Comments
 
LVL 4

Expert Comment

by:Dimarc67
ID: 22637934
Did the user manually change the homepage, or did a site provide a link to do it (i.e., Google's "Make this my homepage" link)?
0
 

Author Comment

by:tm3
ID: 22638009
Don't know.  I don't believe that a site did it because different machines have different home pages.
0
 
LVL 4

Expert Comment

by:Dimarc67
ID: 22638029
Have you confirmed that the GPO is being applied as expected?  You can use the Group Policy Management Console (GPMC) for this.
0
PeopleSoft Has Never Been Easier

PeopleSoft Adoption Made Smooth & Simple!

On-The-Job Training Is made Intuitive & Easy With WalkMe's On-Screen Guidance Tool.  Claim Your Free WalkMe Account Now

 
LVL 4

Expert Comment

by:Patrick49er
ID: 22638046
Run a "Group Policy Results" wizard against the machine and user on that machine you have questions about.  See if there is a policy that is over riding your mandatory IE homepage setting.  If that is the case, make your GPO as enforced so that no GPOs above it over ride that setting.  If you do this, my recommendation is to create a GPO that is specific for that setting you want to enforce.  This will alleviate any possible problems you might have in the future of GPOs over riding what you want to have done.
0
 

Author Comment

by:tm3
ID: 22638241
The current GPO tree is pretty basic. And the GPresults output is showing what I would expect. When I login as the user, the policy blocks me from changing the home page.  I just can't figure out how one of the students can change the settings when they are sitting at the keyboard.  This is a lab environment with one login.  I don't know which student is playing with it.
0
 
LVL 4

Expert Comment

by:Patrick49er
ID: 22638388
Are you sure the culprit hasn't "hacked" into the local admin account and is doing it via that?  Any programs being ran?  Can the user account access the IE7 Advanced options and reset IE7 to first run?  Can the user access it via the Control Panel?
0
 

Author Comment

by:tm3
ID: 22638476
Local admin - no. Last login date same as image date. Adbanced options - grayed out. Control panel is locked down as well. Task manager is not accessable so can see programs running....just found it.  In IE, the home button has a drop down...it says "Add or Change Home Page" ...ok...so which gpo will turn that off?
0
 
LVL 4

Accepted Solution

by:
Patrick49er earned 125 total points
ID: 22638591
And just to be sure, you have User Configuration -> Admin Templates -> Internet Explorer and the Disable changing home page setting enabled and set to the home page you desire. Correct?

I don't see any other setting other than the option to remove the Home button.  This can be found at:
User Configuration -> Admin Templates ->  Internet Explorer -> Toolbars and then Configure Toolbar Buttons.  When enabled, you can select which toolbars are shown.

0
 

Author Comment

by:tm3
ID: 22638660
Confirmed on "disable changing home settings" is enabled.  Just tried your suggestion and it removed the home page button and both the botton and the drop down went away.  I'll try this for now, but can see some folks not liking that solution.  Is there an enhanced GPO set out there for IE7 that I would need to install?
0
 
LVL 4

Expert Comment

by:Patrick49er
ID: 22642310
I am pretty sure if your Group Policy Management is on the latest that you have IE7 admin templates for that administration.  I didn't find anything in reference to removing that drop down from the Home Page button.  It does seem pretty silly to me to have the Home Page locked only to have that button reverse it.
0

Featured Post

Optimizing Cloud Backup for Low Bandwidth

With cloud storage prices going down a growing number of SMBs start to use it for backup storage. Unfortunately, business data volume rarely fits the average Internet speed. This article provides an overview of main Internet speed challenges and reveals backup best practices.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article offers some helpful and general tips for safe browsing and online shopping. It offers simple and manageable procedures that help to ensure the safety of one's personal information and the security of any devices.
For both online and offline retail, the cross-channel business is the most recent pattern in the B2C trade space.
Google currently has a new report that is in beta and coming soon to Webmaster Tool accounts. This Micro Tutorial will highlight new features for Google Webmaster Tools.
This Micro Tutorial will demonstrate how nuggets on the Web are formatted by using Chrome Developer Tools. These tools would not only view the site's CSS but it can also modify it and save the CSS to use on your own site.

707 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question