GPO question

I have 2 questions. How do I ungray the internet options in IE? I want the user to be able to change the settings.

2nd question is if I have an OU in AD that is underneath other OU's but I dont want the OU to get any of the GPO setttings, how can I do this? I want it to have its own isolated GPO settings.
Thomas NSystems Analyst - Windows System AdministratorAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Will SzymkowskiSenior Solution ArchitectCommented:
I have 2 questions. How do I ungray the internet options in IE? I want the user to be able to change the settings.
There is probebaly a GPO that is being applied to thsi account which is locking down the Internet Options.

2nd question is if I have an OU in AD that is underneath other OU's but I dont want the OU to get any of the GPO setttings, how can I do this? I want it to have its own isolated GPO settings.
All you need to do to stop GPO inheritance is use Blocked Inheritance

Will.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
AmitIT ArchitectCommented:
Adding to Will comment. First you need to find which GPO is applying IE setting. Which you can easily find, by running GPO Modeling wizard for this user.

Once you know the GPO. If it is user policy, add the user in the GPO advance setting and set it to Deny, If it is computer policy, then add computer account to that GPO and set it deny in advance setting.

Second, one already answered by Will.
Thomas NSystems Analyst - Windows System AdministratorAuthor Commented:
Ok for the 2nd question.

Would you know where to edit the attached pic? I cant find it. Its to enable"Display video and animation...."
intranet-zone.png
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Active Directory

From novice to tech pro — start learning today.