Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 62
  • Last Modified:

internet explorer enhanced security refused to be disabled

Server: Windows 2012 R2
Role: Remote desktop / terminal server

Problem: internet explorer enhanced security has been disabled for both Admin and Users
However IE is still Enabled for Users; Admin is OK

Attempted the following already but can't fix the issue

Tried #1: turn on, reboot, turn off: shows admin and users are OFF
  But IE for Users still show internet explorer still show is enabled

Tried #2: create GPO using registry on SOFTWARE\Microsoft\Active Setup\Installed Components\{A509B1A8-37EF-4b3f-8CFC-4F3A74704073}, set value to 0 (zero)
 
Tried #3: disabled any other GPO but only ones are: Office 2013 and drive mapping

Any recommendation is much appreciated!
0
G Chow
Asked:
G Chow
  • 2
2 Solutions
 
SteveCommented:
could I guess you turned off IE enhanced security AFTER the users had accessed the server?

have a look at the registry. I'm afraid you need to do this for any user with a profile prior to you disabling it.

https://social.technet.microsoft.com/Forums/windowsserver/en-US/d5a07f64-b8b2-47f7-993d-2b7c538deb33/disable-ie-enhanced-security-for-new-profile-in-remote-desktop-session-host?forum=winserverTS
0
 
G ChowAuthor Commented:
thank you!

the registry setting didn't help ... but one of the comments gave me an alternate solution ...
GPO + giving user temporary admin rights to reduce the security configuration

so at least we can get by with some of the sites but need to manually add to the trust list

...  but when user starts up, it's still ENABLED
0
 
SteveCommented:
what happens to a new user? are they OK without needing the admin rights & GPO?
0

Featured Post

Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now