asked on

Cannot Change IE Security Settings on RDS server

I have installed a clean Server 2012R2 server, joined it as a member server, installed RDS ran all patches. I am trying to set the IE Internet zone to medium High. The sites button is greyed. The Custom slider is not there. Custom Level button is available but the only Level available is High (default).

I have checked HKLM and HKCU for the Control Panel Internet settings. Keys/entries do not exist.
HKEY_CURRENT_USER \ Software \ Policies \ Microsoft \ Internet Explorer \ Control Panel
and
HKEY_LOCAL_MACHINE \ Software\ Policies \ Microsoft \ Internet Explorer \ Control Panel
HKEY_LOCAL_MACHINE \ SOFTWARE \ Policies \ Microsoft \ Windows \ CurrentVersion \ Internet Settings

I have verified no GPO Domain or local exists preventing changes.

I have set the registry value for the zone(s) to 1, no difference. Restarted server.

Added a Local GPO to allow changes (option is set to disable).

I'm at a loss now. Please help.

John Tsioumpris

How about installing another browser and dumping IE...

yo_bee

It sound like you have Group Policy settings being applied for the users

Do you know where to look for this.

User Config > Administrative Templates > Windows Components > Internet Explorer.

Check there to see if anything is enabled.

Also run RSOP from CMD

David Bird

ASKER

Hehe. It's quickbooks fussing at the Internet security Settings. Have Firefox as default.
Ran GPResults with no GPO under domain or local. Created a LOCAL GPO setting to make sure is was enabled. Ran gpresult again and it showed the local policy and successfully loaded.

yo_bee

I just looked at my local computer and the Internet Zone > Site button is greyed out. This maybe by design. Looking at this KB from MS you will see that they just mention Intranet, Trusted and Restricted for the Site button. Nothing about the Internet. Can you confirm that the Internet Zone > Site button is not greyed out on your computer?

https://support.microsoft.com/en-us/help/17479/windows-internet-explorer-11-change-security-privacy-settings



Add or remove a site from a security zone

1.Open Internet Explorer, select the Tools button , and then select Internet options.
2.Select the Security tab, choose one of the security zone icons (Local intranet, Trusted sites, or Restricted sites), and then select Sites. You can add sites to the zone you chose, or delete sites that you no longer want in this zone.

3.If you chose Local intranet in the previous step, select Advanced, and then do one of the following:
•Add a site. Enter a URL into the Add this website to the zone box, and then select Add.
•Remove a site. Under Websites, select the URL you want to remove, and then select Remove.

David Bird

ASKER

Therein lies the whackadoodle part. On my DC running 2012R2, The Sites button is enabled AND the slider bar is there. Just the new machine has the Internet / Site greyed out.

ASKER CERTIFIED SOLUTION

David Bird

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

yo_bee

That is very interesting. I just checked on my home computer that has no GPO's applied and the Site button is also greyed out.

David Bird

ASKER

The fix I posted in the forum worked.