Solved

Reversing Group Policy settings for Internet Explorer 11

Posted on 2014-03-02
12
1,150 Views
Last Modified: 2015-01-08
Hello

I am attempting to reverse a group of Internet Explorer settings applied through Group Policy

All settings were applied through one policy that was applied against a specific OU.
IN this OU were two further OUs containing the user accounts and computer accounts.

I have moved two of each of the  computer and user accounts to a new OU in the root of AD.
I have enabled Block Inheritance on the new OU.

The RSOP report shows no policies are applied but Internet Explorer still has the following issues:

In the security tab the message Some Settings are managed by the System Administrator
Cant add or subtract from the trusted sites list
All advanced settings are greyed out
Reset internet Explorer settings button is greyed out
]In the advanced tab the message Some Settings are managed by the System Administrator

The OS is Windows 7 Enterprise
Browser is IE11
DC is Windows 2008 R2 Datacenter

Any ideas how I reverse these settings back to default?
I want to apply new settings but not through AD Group Policy

Thanks

TD
0
Comment
Question by:Dextertronic
12 Comments
 
LVL 17

Expert Comment

by:Lior Karasenti
ID: 39899714
Did you try to run "gpupdate /force" on the workstations?
0
 
LVL 10

Author Comment

by:Dextertronic
ID: 39899736
Multiple times with no errors
0
 
LVL 14

Accepted Solution

by:
BlueCompute earned 250 total points
ID: 39899913
All settings were applied through one policy that was applied against a specific OU.
Configure another policy on your new OU with the settings set to 'Disabled'.  If you set GPO settings to 'Not Configured' then it will keep the settings from your previous GPO.
0
Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
LVL 37

Assisted Solution

by:Mahesh
Mahesh earned 250 total points
ID: 39900136
By moving accounts to new OU and blocking inheritance existing applied GPO settings can't be reversed because it is getting stored in computer registry
You must create new GPO with reverse settings as stated above
0
 
LVL 70

Expert Comment

by:KCTS
ID: 39900381
As @Mahesh says - to reverse the policy you must reverse the settings - setting them to 'not configured', or removing the policy is not enough as the values are tattooed in the registry.
0
 
LVL 10

Author Comment

by:Dextertronic
ID: 39933387
Hi
Thanks guys.

I will try this out and report back


TD
0
 
LVL 59

Expert Comment

by:LeeTutor
ID: 39984364
I've requested that this question be deleted for the following reason:

Not enough information to confirm an answer.
0
 
LVL 14

Expert Comment

by:BlueCompute
ID: 39984365
Basic knowledge of group policy application confirms that my original answer was correct, as confirmed by additional experts.

Additional information not required to confirm answer.
0
 
LVL 10

Author Comment

by:Dextertronic
ID: 40048871
That was it .

Thanks Blue and Mahesh
0
 

Expert Comment

by:kathyakh
ID: 40537778
Thank you Experts! I feel like I just found the Holy Grail. This is great information for us newbies to GPO.
0

Featured Post

Visualize your virtual and backup environments

Create well-organized and polished visualizations of your virtual and backup environments when planning VMware vSphere, Microsoft Hyper-V or Veeam deployments. It helps you to gain better visibility and valuable business insights.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

While working, an annoying popup showing below will come and we cannot cancel or close it form the screen. The error message will come again and again.
A project that enables an administrator to perform actions within a user session context not just at the time of login but any time later on day(s) or week(s) later.
This Micro Tutorial will give you a introduction in two parts how to utilize Windows Live Movie Maker to its maximum editing capability. This will be demonstrated using Windows Live Movie Maker on Windows 7 operating system.
Are you ready to implement Active Directory best practices without reading 300+ pages? You're in luck. In this webinar hosted by Skyport Systems, you gain insight into Microsoft's latest comprehensive guide, with tips on the best and easiest way…

756 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question