Group Policy Restricts IE users from running Java Script.

We have recentely installed SBS 2011. It turns out when using group policy, a policy disables IE from running any scripts.  We manually change it on the client and it works.. however, when user loggs back in the policy is reinforced, thereby restricting the user from running scripts again. Does anyone know how to turn this off? Very annoying since we never asked for it! :)
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

You're going to have to open your group policy. The Default domain policy, I would imagine.
You can acccess from AD users & Computers. Right click domain level, and Properties. From there will be a Group Policy TAB. Highlight the policy, and EDIT.

I'm not sure exactly which one DISABLES scripting, or if there is an all-in-one, but look look under:
COMPUTER > Administrative Templates > Windows Components > Internet Explorer

From there I think it will be under Internet Control Panel > Security Page > {Whatever Zone}
There are several Active-x/java/scripting policies. Just look for something enabled.
Some are odd, like JAVA for instance, you enable the policy but within that is a DISABLE, etc...
ThinkPaperIT ConsultantCommented:
Note that it could be another policy applied to those machines that is pushing that setting. (I would think it is not the Default Domain Policy as that usually should have nothign to do with IE settings unless you modified it). You should be able to find out what policies are applied to your computer by either

1) Opening Active Directory, locate the computer, right click, and click "resultant set of policies logging".


2) Open the Group Policy Management Console (should be installed by default on your Domain Controllers under Admin tools). Locate the OU the computer is in and see what policies are listed (under scope). You can click the "details" tab and that would list all the settings configured for that policy (instead of having to dig thru each setting to see if it was enabled/configured).

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Thomas TurnerCommented:
Give this a shot in GP.

Setting can be found under 'User Configuration -> Policies -> Administrative Templates -> Windows Components -> Internet Explorer -> Internet Control Panel -> Advanced Page -> Allow third-party browser extensions'
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows OS

From novice to tech pro — start learning today.