Solved

IE8 settings on Win2008 Terminal

Posted on 2012-04-10
6
984 Views
Last Modified: 2012-04-16
Hello,

I have a Windows 2008 Terminal Server installed with IE8 and I would like some custom IE8 settings applied to the Trusted Sites for all users of the Terminal Server. We have a number of ActiveX controls that must be enabled for an application to work. The users must also be able to add Trusted sites.
The domain controller is a SBS 2008 Server

Can this be accomplished in GPO and how? What is the best method? Please step me through the process - Thank you.
0
Comment
Question by:Compuit1
  • 4
6 Comments
 

Author Comment

by:Compuit1
ID: 37831934
Note if the user is added to the Domain Admin group in AD users & Computers then all works OK... However this is not ideal or desired. Any advice?
0
 
LVL 7

Expert Comment

by:ComputerBeast
ID: 37832169
You can follow the Library information from technet.microsoft, it describes the details for the setting. Furthermore explore it for your experience:

http://technet.microsoft.com/en-us/library/cc985341.aspx

Thank you
0
 
LVL 19

Assisted Solution

by:compdigit44
compdigit44 earned 500 total points
ID: 37834315
On your server have you disabled Internet Explorer Enhanced Security? Also your could great a Group Policy User (Preference) policy with your Active X settings preset.

http://trycatch.be/blogs/roggenk/archive/2007/11/26/group-policy-preferences-in-windows-server-2008.aspx
0
Efficient way to get backups off site to Azure

This user guide provides instructions on how to deploy and configure both a StoneFly Scale Out NAS Enterprise Cloud Drive virtual machine and Veeam Cloud Connect in the Microsoft Azure Cloud.

 

Author Comment

by:Compuit1
ID: 37835156
Hello Computer beast - I messed up a bit with the versions of IE. The SBS2008 system has IE7 installed and of course the AD & GPO is administered from there.
The Terminal Server has IE9.

I created an IE policy and applied it to the TS User OU however It appears with this config any gpupdate I do on the SBS has no impact on the Terminal Server.
What I proceeded to do was then to run a gpedit.msc on the TS as a admin and set the changes for IE9 this appear to have resolved some problems but the trusted sites are still greyed out.
If I can get the the trusted site ungreyed for the normal TS users I would say my problem is resolved.

Compdigit44 - Where should I check for the Internet Explorer Enhanced Security - On the SBS, TS or both? I do not see it under programs or features on both servers.
0
 

Accepted Solution

by:
Compuit1 earned 0 total points
ID: 37835395
Guys I found this process to resolve the trusted site greyed out issue. Click on the root folder in the 2008 Server Manager. You then scroll down to the "Security Information" Section and click “Configure IE ESC”. In the window that opens you can then turn off IE ESC for Administrators and/or for users. I did this for the users on the terminal server and the users are now able to add trusted sites etc.

Configure IE ESC
0
 

Author Closing Comment

by:Compuit1
ID: 37850397
The key to solving this problem was to turn off the Internet Explorer Enhanced Security. While Compdigit44 did not tell me to do this the seed was planted to experiment on the Win2008 server and it produced the flexibility required to make the custom user changes.
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article offers some helpful and general tips for safe browsing and online shopping. It offers simple and manageable procedures that help to ensure the safety of one's personal information and the security of any devices.
This script can help you clean up your user profile database by comparing profiles to Active Directory users in a particular OU, and removing the profiles that don't match.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
Shows how to create a shortcut to site-search Experts Exchange using Google in the Chrome browser. This eliminates the need to type out site:experts-exchange.com whenever you want to search the site. Launch the Search Engine Menu: In chrome, via you…

920 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now