We help IT Professionals succeed at work.

How do I get rid of Internet Explorer Maintenance settings still being pushed?

crp0499
crp0499 asked
on
My DC is Server 08 STD.  My workstations are Win 7.  My workstations are still getting a GP pushed from a GPO using IEM settings for trusted sites.  

I've read up on this and what I want to do is stop that GP from being applied, but of course, my RSAT tools on my Win 7 box don't show IEM and the GP on the server itself shows that IEM settings as empty.

So, how do I stop a GPO from applying if I can't even get to it to edit?

I did find a post about right clicking and resetting browser settings on the IEM module, but there are a TON of settings in there that I want to keep.

Am I stuck re-writing an entirely new policy using preferences and deleting the old policy?

Thanks

Cliff
Comment
Watch Question

David Johnson, CDSimple Geek from the '70s
Distinguished Expert 2019

Commented:
IEM has been replaced with settings in control panel/internet settings instead.
crp0499CEO

Author

Commented:
That I understand, but I still see the policy being pushed and it's being pushed by the source GPO that has the IEM settings.  However, I cannot see those settings anymore.

What I want to do is get rid of those settings, but I don't know how since I can't see them.

It's odd that the gpresults shows the settings and the source GPO, but I cannot "see" those settings either from the server or from RSAT on my Win 7 box.
crp0499CEO

Author

Commented:
And as a note, when I go to control panel settings/internet settings, all options to make changes there are grayed out.  I think it's all under preferences now.
David Johnson, CDSimple Geek from the '70s
Distinguished Expert 2019

Commented:
run rsop and find the policy that is currently setting these settings and remove the IEM settings from there. in group policy you have to go to preferences / control panel / internet settings / select the browser / new this is the location
Commented:
if you're trying to find a way to remove the IEM settings, go to a 2003 server, or XP machine, run MMC, add the group policy add-in, and edit the GPO with the IEM settings, you can remove them from there.

I just did this a few days ago so i know it works.
crp0499CEO

Author

Commented:
EXACTLY what I wanted.