dmansfield
asked on
IE ESC won't turn off
I mistakenly turned on IE ESC for users on one of our 2008R2 servers that is running XenApp 6.5. When the mistake was realized, I turned it back off through the server manager for both Admins and Users, but users are still getting prompted with the blocked content messages. Even though it's off for users, it's not really.
Normally, this happening to just one server wouldn't be a huge deal, but this server happens to be source for a vdisk image that we're using to provision to a number of client servers through XenApp Provisioning Servers, so it's really affecting eight of them.
We've done some research and it appears correcting this faux pas has been a pain point for terminal servers for years and there is no clear, easy way to turn off the button that was turned on... that we can see anyway. Any solutions that don't involve deploying registry edits through Group Policy or resetting Internet Explorer settings for users one by one? My favorite suggestion to-date came from this KB article (even though it applies to 2003): http://support.microsoft.com/kb/933991... option #1 says "it may be quicker to rebuild the terminal server". Geez, I hope not.
Your suggestions are appreciated. Thanks!!
Normally, this happening to just one server wouldn't be a huge deal, but this server happens to be source for a vdisk image that we're using to provision to a number of client servers through XenApp Provisioning Servers, so it's really affecting eight of them.
We've done some research and it appears correcting this faux pas has been a pain point for terminal servers for years and there is no clear, easy way to turn off the button that was turned on... that we can see anyway. Any solutions that don't involve deploying registry edits through Group Policy or resetting Internet Explorer settings for users one by one? My favorite suggestion to-date came from this KB article (even though it applies to 2003): http://support.microsoft.com/kb/933991... option #1 says "it may be quicker to rebuild the terminal server". Geez, I hope not.
Your suggestions are appreciated. Thanks!!
Carl Webster
Even though you say you don't want to hear it, I always use a GPO to turn off IE ESC.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
I'm open to that if it's the solution but the GPO experieces we read about didn't solve this particular problem -- when IE ESC was turned 'On' on a terminal server for users by mistake. Could you please send the configuration you'd suggest and we'll give it a try?
ASKER
Thank you for the suggestion of using a backup. I do have that option in my back pocket but because such a long time had passed between the time ESC was turned on until now, I'd rather not roll back if I didn't have to. We didn't have any users on these servers for an exended period so the issue went unnoticed while other development had taken place. Good option though... at least it doesn't send me back to a rebuild.
See if this thread might help:
http://social.technet.microsoft.com/Forums/en-US/winserverGP/thread/14aa9d58-0e06-4236-b92c-ca770a464073/
http://social.technet.microsoft.com/Forums/en-US/winserverGP/thread/14aa9d58-0e06-4236-b92c-ca770a464073/
ASKER
I loaded the inetesc.adm template and enforced 'disable' in group policy for both users and admins. After applying the policy to the servers, replicating to all DCs, doing a gpupdate /force and a restart, no change; it says its off but i'm still being prompted for users (not for admins though).
ASKER
All that I can get to work is to have the user click the 'reset' button on the advanced tab of their internet explorer settings. I tried following some suggestions that invovled the default ntuser.dat file, but the fixes found basically had the user browse with the admin IE settings; not really ideal either. Any other suggestions are welcome. Thanks!
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.