Expiring Today—Celebrate National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

Reversing Group Policy settings for Internet Explorer 11

Posted on 2014-03-02
12
Medium Priority
?
1,186 Views
Last Modified: 2015-01-08
Hello

I am attempting to reverse a group of Internet Explorer settings applied through Group Policy

All settings were applied through one policy that was applied against a specific OU.
IN this OU were two further OUs containing the user accounts and computer accounts.

I have moved two of each of the  computer and user accounts to a new OU in the root of AD.
I have enabled Block Inheritance on the new OU.

The RSOP report shows no policies are applied but Internet Explorer still has the following issues:

In the security tab the message Some Settings are managed by the System Administrator
Cant add or subtract from the trusted sites list
All advanced settings are greyed out
Reset internet Explorer settings button is greyed out
]In the advanced tab the message Some Settings are managed by the System Administrator

The OS is Windows 7 Enterprise
Browser is IE11
DC is Windows 2008 R2 Datacenter

Any ideas how I reverse these settings back to default?
I want to apply new settings but not through AD Group Policy

Thanks

TD
0
Comment
Question by:Dextertronic
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
12 Comments
 
LVL 17

Expert Comment

by:Lior Karasenti
ID: 39899714
Did you try to run "gpupdate /force" on the workstations?
0
 
LVL 10

Author Comment

by:Dextertronic
ID: 39899736
Multiple times with no errors
0
 
LVL 14

Accepted Solution

by:
BlueCompute earned 1000 total points
ID: 39899913
All settings were applied through one policy that was applied against a specific OU.
Configure another policy on your new OU with the settings set to 'Disabled'.  If you set GPO settings to 'Not Configured' then it will keep the settings from your previous GPO.
0
Use Case: Protecting a Hybrid Cloud Infrastructure

Microsoft Azure is rapidly becoming the norm in dynamic IT environments. This document describes the challenges that organizations face when protecting data in a hybrid cloud IT environment and presents a use case to demonstrate how Acronis Backup protects all data.

 
LVL 37

Assisted Solution

by:Mahesh
Mahesh earned 1000 total points
ID: 39900136
By moving accounts to new OU and blocking inheritance existing applied GPO settings can't be reversed because it is getting stored in computer registry
You must create new GPO with reverse settings as stated above
0
 
LVL 70

Expert Comment

by:KCTS
ID: 39900381
As @Mahesh says - to reverse the policy you must reverse the settings - setting them to 'not configured', or removing the policy is not enough as the values are tattooed in the registry.
0
 
LVL 10

Author Comment

by:Dextertronic
ID: 39933387
Hi
Thanks guys.

I will try this out and report back


TD
0
 
LVL 59

Expert Comment

by:LeeTutor
ID: 39984364
I've requested that this question be deleted for the following reason:

Not enough information to confirm an answer.
0
 
LVL 14

Expert Comment

by:BlueCompute
ID: 39984365
Basic knowledge of group policy application confirms that my original answer was correct, as confirmed by additional experts.

Additional information not required to confirm answer.
0
 
LVL 10

Author Comment

by:Dextertronic
ID: 40048871
That was it .

Thanks Blue and Mahesh
0
 

Expert Comment

by:kathyakh
ID: 40537778
Thank you Experts! I feel like I just found the Holy Grail. This is great information for us newbies to GPO.
0

Featured Post

Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

How to deal with a specific error when using the Enable-RemoteMailbox cmdlet to create a mailbox in the cloud-based service, for an existing user in an on-premises Active Directory.
IF you are either unfamiliar with rootkits, or want to know more about them, read on ....
This Micro Tutorial will give you a basic overview of Windows DVD Burner through its features and interface. This will be demonstrated using Windows 7 operating system.
This video shows how to use Hyena, from SystemTools Software, to bulk import 100 user accounts from an external text file. View in 1080p for best video quality.
Suggested Courses

730 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question