Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

Internet explorer security settings

Posted on 2013-11-13
14
Medium Priority
?
496 Views
Last Modified: 2014-05-12
Firstly, windows 7 machines with mixture of IE10 and IE9.

machines have been having problems with scripts not running at login, exe files not allowed to run, some documents not allowed to be opened and now a lot of internet sites will not open or say that the machine does have java or flash installed.

these errors all come with an internet security warning stating that the settings do not allow these files to be run/accessed. PROBLEM: internet security settings are set to HIGH.

if I reset internet explorer back to defaults everything works, unfortunately after a reboot or the next user logs in or even after a couple of hours of the machine being on the settings revert back to HIGH instead of Medium-High.

nothing is set in any GPO that could affect this setting and it has only started happening over the past week.

Anybody have any idea what's causing this to happen? I can only assume it must be an update from Microsoft but which one?
0
Comment
Question by:PEbuilder
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 6
  • 4
  • 2
  • +1
14 Comments
 
LVL 23

Expert Comment

by:Thomas Grassi
ID: 39645493
What do you have set for UAC?

http://www.blogsdna.com/1815/how-to-disable-uac-turn-off-uac-in-windows-7-beta-1-build-7000.htm

Take a look try disable it see if that helps.
0
 
LVL 50

Expert Comment

by:jcimarron
ID: 39645541
PEbuilder --
Run System Restore to a date before the problems started.

I suggest you also scan for viruses and malware.
0
 

Author Comment

by:PEbuilder
ID: 39645662
trgrassijr55,

I did have UAC disabled on all machines but the implementation of a new windows 8 laptop (with touchscreen) I had to re-enable it again as windows 8 can't function with UAC disabled.

i'll move the laptop to another OU and reset disable UAC again and see how we go.
0
Enroll in September's Course of the Month

This month’s featured course covers 16 hours of training in installation, management, and deployment of VMware vSphere virtualization environments. It's free for Premium Members, Team Accounts, and Qualified Experts!

 
LVL 4

Expert Comment

by:FutureTechSysDOTcom
ID: 39646002
I wrote a blog post that's basically a tutorial on cleaning up your machine and scanning for viruses and spyware.  I would go through it and do everything in there, based on what you're describing:

http://bit.ly/HVE57U

Let me know if that does the trick for you.

Regards,
Chris M.
0
 

Author Comment

by:PEbuilder
ID: 39647354
FutureTechSysDOTcom:

first thing I did was to run Malwarebytes to check for anything on one of the affected computers, a quick scan revealed nothing.

I have just completed a full scan with malwarebytes and that again has revealed nothing.
ComboFix has just been run, not sure if it has or hasn't picked anything up but I have attached the completion log.
combofixlog.txt
0
 
LVL 23

Expert Comment

by:Thomas Grassi
ID: 39647654
PEbuilder

can you post your script?

What anti virus firewall software you using?

try running msconfig

in services tab  hide all Microsoft services then disable all others
in startup tab disable all

restart what happens
0
 

Author Comment

by:PEbuilder
ID: 39648214
trgrassijr55:

the script I use is KIXTART, the actual script itself runs fine but the interference from the internet security settings prevents the main .exe (kix32.exe) from running.

Antivirus package is Sophos main control on one of our servers and it pushes updates down to the computers as they login and again at set intervals during the day.

Pretty sure this is down to an update, I have now installed and patched 6 machines (including installing IE11) and the problem stops.
0
 
LVL 23

Expert Comment

by:Thomas Grassi
ID: 39648234
PEbuilder:

It has been a long time since I used kixtart

Not sure about an update causing this.

If that is the case then do a system restore point back to  a know good point.

Internet security settings will not stop an application like kix32.exe to stop running.

Where is this file located? check the permissions on that folder
0
 

Author Comment

by:PEbuilder
ID: 39648260
now that's what I would've thought, how could IE affect that app?

I had one machine where the script didn't run so I decided to run it manually, I copied over the path to the script and as soon as I started to run up popped an internet security warning telling me files of that nature cannot be run.

checking the IE security settings they were on HIGH, dropped them to default level tried the script again and it ran perfectly.

really, really weird error.
0
 
LVL 4

Expert Comment

by:FutureTechSysDOTcom
ID: 39648496
I have to slightly disagree.  IE can in fact stop stuff from running.  I see it more often on servers than desktops.  Take a look and see if "Internet Explorer Enhanced Security" or something like that is installed.  It will do a lot of what you're describing.
0
 
LVL 50

Expert Comment

by:jcimarron
ID: 39648533
PEbuilder--
" I can only assume it must be an update from Microsoft but which one? "
That can be tested by uninstalling all updates installed just before this problem started.  Does the problem go away?  If so reinstall updates one by one until you find the one causing the problem.
You can uninstall updates from Control Panel|Programs and Features|View Installed Updates (top left).  Click on a given update and you will be offered Uninstall.
0
 

Accepted Solution

by:
PEbuilder earned 0 total points
ID: 39656087
installed IE11 and MS's latest round of updates and the problem has stopped.

resetting IE10 security to default does now stop the problem.
0
 
LVL 23

Expert Comment

by:Thomas Grassi
ID: 39662417
This is the problem with third party apps calling home.
They need to check for updates etc so they need to access the web that's when IE will block them.

If you create your self a simple login script just using command line prompts for you mapping etc.  The problem will go away.

Running Kix or any other third party application in a login / startup script will have issues like this.
0
 

Author Closing Comment

by:PEbuilder
ID: 40058430
updating to IE11 and all MS updates is the only solution
0

Featured Post

On Demand Webinar: Networking for the Cloud Era

Ready to improve network connectivity? Watch this webinar to learn how SD-WANs and a one-click instant connect tool can boost provisions, deployment, and management of your cloud connection.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article offers some helpful and general tips for safe browsing and online shopping. It offers simple and manageable procedures that help to ensure the safety of one's personal information and the security of any devices.
Today, still in the boom of Apple, PC's and products, nearly 50% of the computer users use Windows as graphical operating systems. If you are among those users who love windows, but are grappling to keep the system's hard drive optimized, then you s…
Google currently has a new report that is in beta and coming soon to Webmaster Tool accounts. This Micro Tutorial will highlight new features for Google Webmaster Tools.
Want to learn how to record your desktop screen without having to use an outside camera. Click on this video and learn how to use the cool google extension called "Screencastify"! Step 1: Open a new google tab Step 2: Go to the left hand upper corn…

715 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question