Reversing Group Policy settings for Internet Explorer 11

Tristan
Tristan used Ask the Experts™
on
Hello

I am attempting to reverse a group of Internet Explorer settings applied through Group Policy

All settings were applied through one policy that was applied against a specific OU.
IN this OU were two further OUs containing the user accounts and computer accounts.

I have moved two of each of the  computer and user accounts to a new OU in the root of AD.
I have enabled Block Inheritance on the new OU.

The RSOP report shows no policies are applied but Internet Explorer still has the following issues:

In the security tab the message Some Settings are managed by the System Administrator
Cant add or subtract from the trusted sites list
All advanced settings are greyed out
Reset internet Explorer settings button is greyed out
]In the advanced tab the message Some Settings are managed by the System Administrator

The OS is Windows 7 Enterprise
Browser is IE11
DC is Windows 2008 R2 Datacenter

Any ideas how I reverse these settings back to default?
I want to apply new settings but not through AD Group Policy

Thanks

TD
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Top Expert 2012

Commented:
Did you try to run "gpupdate /force" on the workstations?

Author

Commented:
Multiple times with no errors
Top Expert 2013
Commented:
All settings were applied through one policy that was applied against a specific OU.
Configure another policy on your new OU with the settings set to 'Disabled'.  If you set GPO settings to 'Not Configured' then it will keep the settings from your previous GPO.
Should you be charging more for IT Services?

Do you wonder if your IT business is truly profitable or if you should raise your prices? Learn how to calculate your overhead burden using our free interactive tool and use it to determine the right price for your IT services. Start calculating Now!

MaheshArchitect
Distinguished Expert 2018
Commented:
By moving accounts to new OU and blocking inheritance existing applied GPO settings can't be reversed because it is getting stored in computer registry
You must create new GPO with reverse settings as stated above
Brian PiercePhotographer
Awarded 2007
Top Expert 2008

Commented:
As @Mahesh says - to reverse the policy you must reverse the settings - setting them to 'not configured', or removing the policy is not enough as the values are tattooed in the registry.

Author

Commented:
Hi
Thanks guys.

I will try this out and report back


TD
LeeTutorretired
Top Expert 2009

Commented:
I've requested that this question be deleted for the following reason:

Not enough information to confirm an answer.
Top Expert 2013

Commented:
Basic knowledge of group policy application confirms that my original answer was correct, as confirmed by additional experts.

Additional information not required to confirm answer.

Author

Commented:
That was it .

Thanks Blue and Mahesh

Commented:
Thank you Experts! I feel like I just found the Holy Grail. This is great information for us newbies to GPO.

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial