Solved

Internet explorer security settings

Posted on 2013-11-13
14
474 Views
Last Modified: 2014-05-12
Firstly, windows 7 machines with mixture of IE10 and IE9.

machines have been having problems with scripts not running at login, exe files not allowed to run, some documents not allowed to be opened and now a lot of internet sites will not open or say that the machine does have java or flash installed.

these errors all come with an internet security warning stating that the settings do not allow these files to be run/accessed. PROBLEM: internet security settings are set to HIGH.

if I reset internet explorer back to defaults everything works, unfortunately after a reboot or the next user logs in or even after a couple of hours of the machine being on the settings revert back to HIGH instead of Medium-High.

nothing is set in any GPO that could affect this setting and it has only started happening over the past week.

Anybody have any idea what's causing this to happen? I can only assume it must be an update from Microsoft but which one?
0
Comment
Question by:PEbuilder
  • 6
  • 4
  • 2
  • +1
14 Comments
 
LVL 23

Expert Comment

by:Thomas Grassi
ID: 39645493
What do you have set for UAC?

http://www.blogsdna.com/1815/how-to-disable-uac-turn-off-uac-in-windows-7-beta-1-build-7000.htm

Take a look try disable it see if that helps.
0
 
LVL 50

Expert Comment

by:jcimarron
ID: 39645541
PEbuilder --
Run System Restore to a date before the problems started.

I suggest you also scan for viruses and malware.
0
 

Author Comment

by:PEbuilder
ID: 39645662
trgrassijr55,

I did have UAC disabled on all machines but the implementation of a new windows 8 laptop (with touchscreen) I had to re-enable it again as windows 8 can't function with UAC disabled.

i'll move the laptop to another OU and reset disable UAC again and see how we go.
0
 
LVL 4

Expert Comment

by:FutureTechSysDOTcom
ID: 39646002
I wrote a blog post that's basically a tutorial on cleaning up your machine and scanning for viruses and spyware.  I would go through it and do everything in there, based on what you're describing:

http://bit.ly/HVE57U

Let me know if that does the trick for you.

Regards,
Chris M.
0
 

Author Comment

by:PEbuilder
ID: 39647354
FutureTechSysDOTcom:

first thing I did was to run Malwarebytes to check for anything on one of the affected computers, a quick scan revealed nothing.

I have just completed a full scan with malwarebytes and that again has revealed nothing.
ComboFix has just been run, not sure if it has or hasn't picked anything up but I have attached the completion log.
combofixlog.txt
0
 
LVL 23

Expert Comment

by:Thomas Grassi
ID: 39647654
PEbuilder

can you post your script?

What anti virus firewall software you using?

try running msconfig

in services tab  hide all Microsoft services then disable all others
in startup tab disable all

restart what happens
0
 

Author Comment

by:PEbuilder
ID: 39648214
trgrassijr55:

the script I use is KIXTART, the actual script itself runs fine but the interference from the internet security settings prevents the main .exe (kix32.exe) from running.

Antivirus package is Sophos main control on one of our servers and it pushes updates down to the computers as they login and again at set intervals during the day.

Pretty sure this is down to an update, I have now installed and patched 6 machines (including installing IE11) and the problem stops.
0
Enabling OSINT in Activity Based Intelligence

Activity based intelligence (ABI) requires access to all available sources of data. Recorded Future allows analysts to observe structured data on the open, deep, and dark web.

 
LVL 23

Expert Comment

by:Thomas Grassi
ID: 39648234
PEbuilder:

It has been a long time since I used kixtart

Not sure about an update causing this.

If that is the case then do a system restore point back to  a know good point.

Internet security settings will not stop an application like kix32.exe to stop running.

Where is this file located? check the permissions on that folder
0
 

Author Comment

by:PEbuilder
ID: 39648260
now that's what I would've thought, how could IE affect that app?

I had one machine where the script didn't run so I decided to run it manually, I copied over the path to the script and as soon as I started to run up popped an internet security warning telling me files of that nature cannot be run.

checking the IE security settings they were on HIGH, dropped them to default level tried the script again and it ran perfectly.

really, really weird error.
0
 
LVL 4

Expert Comment

by:FutureTechSysDOTcom
ID: 39648496
I have to slightly disagree.  IE can in fact stop stuff from running.  I see it more often on servers than desktops.  Take a look and see if "Internet Explorer Enhanced Security" or something like that is installed.  It will do a lot of what you're describing.
0
 
LVL 50

Expert Comment

by:jcimarron
ID: 39648533
PEbuilder--
" I can only assume it must be an update from Microsoft but which one? "
That can be tested by uninstalling all updates installed just before this problem started.  Does the problem go away?  If so reinstall updates one by one until you find the one causing the problem.
You can uninstall updates from Control Panel|Programs and Features|View Installed Updates (top left).  Click on a given update and you will be offered Uninstall.
0
 

Accepted Solution

by:
PEbuilder earned 0 total points
ID: 39656087
installed IE11 and MS's latest round of updates and the problem has stopped.

resetting IE10 security to default does now stop the problem.
0
 
LVL 23

Expert Comment

by:Thomas Grassi
ID: 39662417
This is the problem with third party apps calling home.
They need to check for updates etc so they need to access the web that's when IE will block them.

If you create your self a simple login script just using command line prompts for you mapping etc.  The problem will go away.

Running Kix or any other third party application in a login / startup script will have issues like this.
0
 

Author Closing Comment

by:PEbuilder
ID: 40058430
updating to IE11 and all MS updates is the only solution
0

Featured Post

Threat Intelligence Starter Resources

Integrating threat intelligence can be challenging, and not all companies are ready. These resources can help you build awareness and prepare for defense.

Join & Write a Comment

I had to do a bit of research to find the answer to this question so I thought I'd share my results.  Due to our outdated mainframe systems, we need to downgrade IE9 to IE8 in order to stay compatible.  We also needed to downgrade Java.  In order to…
SSL stands for “Secure Sockets Layer” and an SSL certificate is a critical component to keeping your website safe, secured, and compliant. Any ecommerce website must have an SSL certificate to ensure the safe handling of sensitive information like…
This Micro Tutorial will demonstrate how to add subdomains to your content reports. This can be very importing in having a site with multiple subdomains.
How to create a custom search shortcut to site-search Experts Exchange using Google in the Firefox browser. This eliminates the need to type out site:experts-exchange.com whenever you want to search the site. Launch your Bookmark Menu: Press 'Ctrl +…

744 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now