Solved

Reversing Group Policy settings for Internet Explorer 11

Posted on 2014-03-02
12
1,156 Views
Last Modified: 2015-01-08
Hello

I am attempting to reverse a group of Internet Explorer settings applied through Group Policy

All settings were applied through one policy that was applied against a specific OU.
IN this OU were two further OUs containing the user accounts and computer accounts.

I have moved two of each of the  computer and user accounts to a new OU in the root of AD.
I have enabled Block Inheritance on the new OU.

The RSOP report shows no policies are applied but Internet Explorer still has the following issues:

In the security tab the message Some Settings are managed by the System Administrator
Cant add or subtract from the trusted sites list
All advanced settings are greyed out
Reset internet Explorer settings button is greyed out
]In the advanced tab the message Some Settings are managed by the System Administrator

The OS is Windows 7 Enterprise
Browser is IE11
DC is Windows 2008 R2 Datacenter

Any ideas how I reverse these settings back to default?
I want to apply new settings but not through AD Group Policy

Thanks

TD
0
Comment
Question by:Dextertronic
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
12 Comments
 
LVL 17

Expert Comment

by:Lior Karasenti
ID: 39899714
Did you try to run "gpupdate /force" on the workstations?
0
 
LVL 10

Author Comment

by:Dextertronic
ID: 39899736
Multiple times with no errors
0
 
LVL 14

Accepted Solution

by:
BlueCompute earned 250 total points
ID: 39899913
All settings were applied through one policy that was applied against a specific OU.
Configure another policy on your new OU with the settings set to 'Disabled'.  If you set GPO settings to 'Not Configured' then it will keep the settings from your previous GPO.
0
Salesforce Made Easy to Use

On-screen guidance at the moment of need enables you & your employees to focus on the core, you can now boost your adoption rates swiftly and simply with one easy tool.

 
LVL 37

Assisted Solution

by:Mahesh
Mahesh earned 250 total points
ID: 39900136
By moving accounts to new OU and blocking inheritance existing applied GPO settings can't be reversed because it is getting stored in computer registry
You must create new GPO with reverse settings as stated above
0
 
LVL 70

Expert Comment

by:KCTS
ID: 39900381
As @Mahesh says - to reverse the policy you must reverse the settings - setting them to 'not configured', or removing the policy is not enough as the values are tattooed in the registry.
0
 
LVL 10

Author Comment

by:Dextertronic
ID: 39933387
Hi
Thanks guys.

I will try this out and report back


TD
0
 
LVL 59

Expert Comment

by:LeeTutor
ID: 39984364
I've requested that this question be deleted for the following reason:

Not enough information to confirm an answer.
0
 
LVL 14

Expert Comment

by:BlueCompute
ID: 39984365
Basic knowledge of group policy application confirms that my original answer was correct, as confirmed by additional experts.

Additional information not required to confirm answer.
0
 
LVL 10

Author Comment

by:Dextertronic
ID: 40048871
That was it .

Thanks Blue and Mahesh
0
 

Expert Comment

by:kathyakh
ID: 40537778
Thank you Experts! I feel like I just found the Holy Grail. This is great information for us newbies to GPO.
0

Featured Post

SuperAntiSpyware Licenses Discounted by 25% !

Exclusive offer to Experts Exchange Members!
Buy SuperAntiSpyware License(s) from us and save 25% on the regular purchase price.
- Includes Full SuperAntiSpyware Vendor Support Entitlements
- Your Subscription does not begin until you activate your license
- Buy for your friends

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

There are many software programs on offer that will claim to magically speed up your computer. The best advice I can give you is to avoid them like the plague, because they will often cause far more problems than they solve. Try some of these "do it…
A hard and fast method for reducing Active Directory Administrators members.
This Micro Tutorial will teach you how to change your appearance and customize your Windows 7 interface to your unique preference. This will be demonstrated using Windows 7 operating system.
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …

734 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question