Solved

Windows Server 2008 R2 Remote Desktop Server - Group Policy - Disable Internet Explorer Enhanced Security

Posted on 2011-02-22
5
2,334 Views
Last Modified: 2012-05-11
Need some help with our Remote Desktop Server. I have disabled IEESC for Users and Administrators. When a new user logs in and opens Internet Explorer it still warns them the Internet Explorer Enhanced Security Configuration is not enabled. How can I completely remove it?
IEESC.jpg
0
Comment
Question by:LeviDaily
  • 3
  • 2
5 Comments
 
LVL 10

Expert Comment

by:ThorinO
ID: 34956779
0
 
LVL 2

Author Comment

by:LeviDaily
ID: 34956790
I have turned that off but I am still getting the error.
0
 
LVL 10

Expert Comment

by:ThorinO
ID: 34956855
Can you try setting the default home page to say google.com for one of these users. if it works can you create a GPO that does the same thing for all users. Something will need to update the default homepage.
0
 
LVL 2

Author Comment

by:LeviDaily
ID: 34956905
Gotchya... Bigger issue. Maybe I am having a GPO issue because I do have a GPO in place? Since this is a terminal server, It is in an OU that the users arent in. I need to use User loopback processing. Anything else?

0
 
LVL 10

Accepted Solution

by:
ThorinO earned 500 total points
ID: 34956965
If the TS is in a different OU it should be inheriting the default domain policy and whatever is other GPO might be above it. The exception to this is if you have block inheritance set on that OU. If blocking is not setup you could either modify the default domain policy, block and create a GPO for that OU, or keep the default and create a GPO for the OU and have both on there and have the custom one process after the default one.

I would go with the last so that you inherit all the default policies then apply the TS specific GPO which sets the homepage and any other values. Some other values I would suggest is not letting users shut down the system, access things they shouldn't (administrative tools), etc.
0

Featured Post

Too many email signature changes to deal with?

Are you constantly being asked to update your organization's email signatures? Do they take up too much of your time? Wouldn't you love to be able to manage all signatures from one central location, easily design them and deploy them quickly to users. Well, you can!

Join & Write a Comment

Suggested Solutions

I was asked if I could set up a fax machine so that incoming faxes were delivered to people's Exchange inboxes and so that they could send faxes from their desktops without needing to print the document first.  I knew it was possible but I had no id…
A safe way to clean winsxs folder from your windows server 2008 R2 editions
This tutorial will walk an individual through the steps necessary to configure their installation of BackupExec 2012 to use network shared disk space. Verify that the path to the shared storage is valid and that data can be written to that location:…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

760 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

24 Experts available now in Live!

Get 1:1 Help Now