Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

IE8 settings on Win2008 Terminal

Posted on 2012-04-10
6
Medium Priority
?
1,016 Views
Last Modified: 2012-04-16
Hello,

I have a Windows 2008 Terminal Server installed with IE8 and I would like some custom IE8 settings applied to the Trusted Sites for all users of the Terminal Server. We have a number of ActiveX controls that must be enabled for an application to work. The users must also be able to add Trusted sites.
The domain controller is a SBS 2008 Server

Can this be accomplished in GPO and how? What is the best method? Please step me through the process - Thank you.
0
Comment
Question by:Compuit1
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
6 Comments
 

Author Comment

by:Compuit1
ID: 37831934
Note if the user is added to the Domain Admin group in AD users & Computers then all works OK... However this is not ideal or desired. Any advice?
0
 
LVL 7

Expert Comment

by:ComputerBeast
ID: 37832169
You can follow the Library information from technet.microsoft, it describes the details for the setting. Furthermore explore it for your experience:

http://technet.microsoft.com/en-us/library/cc985341.aspx

Thank you
0
 
LVL 20

Assisted Solution

by:compdigit44
compdigit44 earned 2000 total points
ID: 37834315
On your server have you disabled Internet Explorer Enhanced Security? Also your could great a Group Policy User (Preference) policy with your Active X settings preset.

http://trycatch.be/blogs/roggenk/archive/2007/11/26/group-policy-preferences-in-windows-server-2008.aspx
0
Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

 

Author Comment

by:Compuit1
ID: 37835156
Hello Computer beast - I messed up a bit with the versions of IE. The SBS2008 system has IE7 installed and of course the AD & GPO is administered from there.
The Terminal Server has IE9.

I created an IE policy and applied it to the TS User OU however It appears with this config any gpupdate I do on the SBS has no impact on the Terminal Server.
What I proceeded to do was then to run a gpedit.msc on the TS as a admin and set the changes for IE9 this appear to have resolved some problems but the trusted sites are still greyed out.
If I can get the the trusted site ungreyed for the normal TS users I would say my problem is resolved.

Compdigit44 - Where should I check for the Internet Explorer Enhanced Security - On the SBS, TS or both? I do not see it under programs or features on both servers.
0
 

Accepted Solution

by:
Compuit1 earned 0 total points
ID: 37835395
Guys I found this process to resolve the trusted site greyed out issue. Click on the root folder in the 2008 Server Manager. You then scroll down to the "Security Information" Section and click “Configure IE ESC”. In the window that opens you can then turn off IE ESC for Administrators and/or for users. I did this for the users on the terminal server and the users are now able to add trusted sites etc.

Configure IE ESC
0
 

Author Closing Comment

by:Compuit1
ID: 37850397
The key to solving this problem was to turn off the Internet Explorer Enhanced Security. While Compdigit44 did not tell me to do this the seed was planted to experiment on the Win2008 server and it produced the flexibility required to make the custom user changes.
0

Featured Post

What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Microsoft Office 365 is a subscriptions based service which includes services like Exchange Online and Skype for business Online. These services integrate with Microsoft's online version of Active Directory called Azure Active Directory.
How to deal with a specific error when using the Enable-RemoteMailbox cmdlet to create a mailbox in the cloud-based service, for an existing user in an on-premises Active Directory.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
Shows how to create a shortcut to site-search Experts Exchange using Google in the Chrome browser. This eliminates the need to type out site:experts-exchange.com whenever you want to search the site. Launch the Search Engine Menu: In chrome, via you…

704 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question