GPO setting

Posted on 2014-07-17
Last Modified: 2014-08-07
Does anyone know where in GPO I can change the setting for "Run under logged on user's security context...."?

Link below:
Question by:Thomas N
    LVL 6

    Expert Comment

    User Configuration -> preferences -> control panel settings -> Internet Settings

    Right click and select browser version
    Then click the common tab and check the box.

    Author Comment

    by:Thomas N
    Would you by chance know how to check to see if my browser on the client machine is running under this setting?
    LVL 34

    Expert Comment

    by:Seth Simmons
    run gpresult /r and see if it appears there as being applied
    LVL 60

    Accepted Solution

    it is under the Group Policy Preference (a collection of Group Policy client-side extensions ) item setting and are distributed to domain-joined computers using the Group Policy. below have some screenshots on the GPP. The latter should be available in  “Remote Server Administration Tools” (RSAT) whihc alos has the GPMC and the client side extension (CSE) packages will be freely downloadable from the Microsoft website

    The windows article on GPP will be useful (yours is under "Common tab and processing order")

    e.g. “Run in Logged on User’s Security Context” example setting

    Overall, something to note on this  
    If the Run in logged-on user's security context option is selected, it changes the security context under which the preference item is processed. The preference extension processes preference items in the security context of the logged-on user. This allows the preference extension to access resources as the user rather than the computer. This can be especially important when using drive maps or other preferences in which the computer may not have permissions to resources or when using environment variables. The value of many environment variables differs when evaluated in a security context other than the logged-on user.
    LVL 6

    Expert Comment

    If the setting was applied through GPO, it would be grayed out in IE and you would not be able to change it.
    LVL 60

    Expert Comment

    yap, granularity explanation in link and below for relevance

    Run in logged-on user's security context (user policy option)

    Applicable to preferences that are part of User Configuration settings, it designates that associated with it change should be carried by impersonating the current user, instead of the Local System account. The option's checkbox is automatically grayed out for all items appearing in the Computer Configuration section of Group Policy Management Editor. Keep in mind that this particular option has no relevance in regard to Drive Maps and Printers settings, which always follow the context in which they are defined (User or Computer Configuration node).

    Featured Post

    Better Security Awareness With Threat Intelligence

    See how one of the leading financial services organizations uses Recorded Future as part of a holistic threat intelligence program to promote security awareness and proactively and efficiently identify threats.

    Join & Write a Comment

    We recently had an issue where out of nowhere, end users started indicating that their logins to our terminal server were just showing a "blank screen." After checking the usual suspects -- profiles, shell=explorer.exe in the registry, userinit.exe,…
    Find out how to use Active Directory data for email signature management in Microsoft Exchange and Office 365.
    This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
    This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

    733 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    19 Experts available now in Live!

    Get 1:1 Help Now