IE8 settings on Win2008 Terminal


I have a Windows 2008 Terminal Server installed with IE8 and I would like some custom IE8 settings applied to the Trusted Sites for all users of the Terminal Server. We have a number of ActiveX controls that must be enabled for an application to work. The users must also be able to add Trusted sites.
The domain controller is a SBS 2008 Server

Can this be accomplished in GPO and how? What is the best method? Please step me through the process - Thank you.
Who is Participating?
Compuit1Connect With a Mentor Author Commented:
Guys I found this process to resolve the trusted site greyed out issue. Click on the root folder in the 2008 Server Manager. You then scroll down to the "Security Information" Section and click “Configure IE ESC”. In the window that opens you can then turn off IE ESC for Administrators and/or for users. I did this for the users on the terminal server and the users are now able to add trusted sites etc.

Configure IE ESC
Compuit1Author Commented:
Note if the user is added to the Domain Admin group in AD users & Computers then all works OK... However this is not ideal or desired. Any advice?
You can follow the Library information from, it describes the details for the setting. Furthermore explore it for your experience:

Thank you
Get 10% Off Your First Squarespace Website

Ready to showcase your work, publish content or promote your business online? With Squarespace’s award-winning templates and 24/7 customer service, getting started is simple. Head to and use offer code ‘EXPERTS’ to get 10% off your first purchase.

compdigit44Connect With a Mentor Commented:
On your server have you disabled Internet Explorer Enhanced Security? Also your could great a Group Policy User (Preference) policy with your Active X settings preset.
Compuit1Author Commented:
Hello Computer beast - I messed up a bit with the versions of IE. The SBS2008 system has IE7 installed and of course the AD & GPO is administered from there.
The Terminal Server has IE9.

I created an IE policy and applied it to the TS User OU however It appears with this config any gpupdate I do on the SBS has no impact on the Terminal Server.
What I proceeded to do was then to run a gpedit.msc on the TS as a admin and set the changes for IE9 this appear to have resolved some problems but the trusted sites are still greyed out.
If I can get the the trusted site ungreyed for the normal TS users I would say my problem is resolved.

Compdigit44 - Where should I check for the Internet Explorer Enhanced Security - On the SBS, TS or both? I do not see it under programs or features on both servers.
Compuit1Author Commented:
The key to solving this problem was to turn off the Internet Explorer Enhanced Security. While Compdigit44 did not tell me to do this the seed was planted to experiment on the Win2008 server and it produced the flexibility required to make the custom user changes.
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.