Solved

How to remove GPO settings for IE (Internet Explorer) after removing from domain

Posted on 2009-07-14
4
707 Views
Last Modified: 2013-12-08
It's impossible to craft a search term that yields the results that I need.

I removed a system from our domain, but the GPO that locks down most of the IE (Internet Explorer) settings is still applied. The system was properly removed from the domain.

As an example, I cannot change the entries for trusted sites, restricted sites, intranet sites, etc. I cannot change any of the pop-up allowances. There are many others.

I searched and searched and searched.... I do not want to lock down IE, and I do not want to apply a GPO for IE. I want to remove the restrictions which were in effect via the GPO.

I found an article regarding resetting general system settings, but nothing for IE.
(Reference: http://support.microsoft.com/default.aspx?scid=kb;en-us;313222)

I have worked with AD for a long time, but I have no idea how to undo these GPO-made settings.

Thanks!!

-- Rob "I" --
0
Comment
Question by:iistech
4 Comments
 
LVL 1

Expert Comment

by:Angus_Bell
Comment Utility
A problem can occur if you have a GP setting that turns something off or on and you don't reverse that action. Even by removing the policy or the computer that setting will remain.  One option is look at what the policy set in the GP and compare it to the local policy and make any changes. In the mmc add Group Policy Object Editor and choose local computer.  But you may need to adjust what settings are available by adding a template.  
0
 
LVL 8

Expert Comment

by:Timoros
Comment Utility
Did you run gpupdate /force from command line ?

I also found this:
http://escapelogic.com/main/node/2

0
 
LVL 10

Accepted Solution

by:
remmett70 earned 250 total points
Comment Utility
Since Group Policy is making registry changes, the changes that were applied, are still in effect.  You would need to look at the policies that were applied to that computer by GPO.  The quickest way would to reverse the settings would be to look at a computer in the same OU, to see what policies are applied to know what settings to reverse.

When reversing the changes, if a setting was enabled, just setting the policy to Not Defined does not work.  If the policy setting was enabled, you need to disable the setting, then set it to Not Defined or the computer will still retain the enabled status.
0

Featured Post

Why You Should Analyze Threat Actor TTPs

After years of analyzing threat actor behavior, it’s become clear that at any given time there are specific tactics, techniques, and procedures (TTPs) that are particularly prevalent. By analyzing and understanding these TTPs, you can dramatically enhance your security program.

Join & Write a Comment

#Citrix #Internet Explorer #Enterprise Mode #IE 11 #IE 8
Resolve DNS query failed errors for Exchange
This Micro Tutorial will demonstrate how nuggets on the Web are formatted by using Chrome Developer Tools. These tools would not only view the site's CSS but it can also modify it and save the CSS to use on your own site.
How to create a custom search shortcut to site-search Experts Exchange using Google in the Firefox browser. This eliminates the need to type out site:experts-exchange.com whenever you want to search the site. Launch your Bookmark Menu: Press 'Ctrl +…

772 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

9 Experts available now in Live!

Get 1:1 Help Now