<div>
To the best of my knowledge, and I am fairly certain, there are no GPO's to enable/disable IE Enhanced Security. As a matter fact a while back there were a few scripting articles about how to create a custom template to do so, so I am doubtful you would have that or enabled in a default SBS domain.<br />
<br />
However IE Enhanced Security is handled a little differently on a terminal server though I have never really dug into it. I would recommend reading the section 1/2 way down the page on the topic under; &quot;Internet Explorer Enhanced Security Configuration and Terminal Services&quot;. It may be of some help. There is a link within about configuring for standard users.<br />
<a href="http://support.microsoft.com/kb/815141" rel="ugc nofollow">http://support.microsoft.com/kb/815141</a><br />

</div>


<div>
<div class="content wysiwyg-content">
Hi,<br />
My Current Environment is SBS2011 + Windows Server 2008 R2.<br />
<br />
SBS is used for all packaged roles.<br />
Server 2008 R2 is used for remote desktop services and application server only.<br />
<br />
When a user remotes into the 2008 R2 server they have IE ESC applied.<br />
<br />
However I have set IE ESC in Server Manager on 2008 R2 server to Off for both administrators and Users.<br />
<br />
By default in an SBS2011 domain is there any Group Policies that could be applying this to users when they log on?
</div>
</div>


Hi,
My Current Environment is SBS2011 + Windows Server 2008 R2.

SBS is used for all packaged roles.
Server 2008 R2 is used for remote desktop services and application server only.

When a user remotes into the 2008 R2 server they have IE ESC applied.

However I have set IE ESC in Server Manager on 2008 R2 server to Off for both administrators and Users.

By default in an SBS2011 domain is there any Group Policies that could be applying this to users when they log on?

To the best of my knowledge, and I am fairly certain, there are no GPO&#39;s to enable/disable IE Enhanced Security. As a matter fact a while back there were a few scripting articles about how to create a custom template to do so, so I am doubtful you would have that or enabled in a default SBS domain.

However IE Enhanced Security is handled a little differently on a terminal server though I have never really dug into it. I would recommend reading the section 1/2 way down the page on the topic under; &quot;Internet Explorer Enhanced Security Configuration and Terminal Services&quot;. It may be of some help. There is a link within about configuring for standard users.
http://support.microsoft.com/kb/815141


Remote Desktop Services Logon Applys IE Enhanced Security

Windows Server 2008 and Windows Server 2008 R2, based on the Microsoft Vista codebase, is the last 32-bit server operating system released by Microsoft. It has a number of versions, including including Foundation, Standard, Enterprise, Datacenter, Web, HPC Server, Itanium and Storage; new features included server core installation and Hyper-V.

Windows Server 2008

Small Business Server (SBS) is a line of server operating systems targeted at small businesses by bundling the operating system with a number of other Microsoft products that would normally need to be purchased or licensed separately. The most notable inclusions are Exchange, SQL Server, SharePoint and ISA/TMG (Microsoft's firewall and proxy server).