Cannot Change IE Security Settings on RDS server

I have installed a clean Server 2012R2 server, joined it as a member server, installed RDS ran all patches. I am trying to set the IE Internet zone to medium High.  The sites button is greyed.  The Custom slider is not there.  Custom Level button is available but the only Level available is High (default).

I have checked HKLM and HKCU for the Control Panel Internet settings. Keys/entries do not exist.
    HKEY_CURRENT_USER \ Software \ Policies \ Microsoft \ Internet Explorer \ Control Panel
    and
    HKEY_LOCAL_MACHINE \ Software\ Policies \ Microsoft \ Internet Explorer \ Control Panel
    HKEY_LOCAL_MACHINE \ SOFTWARE \ Policies \ Microsoft \ Windows \ CurrentVersion \ Internet Settings

I have verified no GPO Domain or local exists preventing changes.

I have set the registry value for the zone(s) to 1, no difference.  Restarted server.

Added a Local GPO to allow changes (option is set to disable).  

I'm at a loss now.  Please help.
David BirdPartnerAsked:
Who is Participating?
 
David BirdConnect With a Mentor PartnerAuthor Commented:
I got it.  In one thread I was reading, the IT Enhanced security had to be disabled (which it already was today).  But I wondered if it wasn't all happy in the registry and looked up the location. BUT, before I went off the deep end on it, I just turned IE Enhanced back on, opened closed Internet explorer, then turned IE Enhanced back OFF.  Opened Security tab and all was good.
1
 
John TsioumprisSoftware & Systems EngineerCommented:
How about installing another browser and dumping IE...
0
 
yo_beeDirector of Information TechnologyCommented:
It sound like you have Group Policy settings being applied for the users

Do you know where to look for this.

User Config > Administrative Templates > Windows Components > Internet Explorer.  

Check there to see if anything is enabled.

Also run RSOP from CMD
0
Worried about phishing attacks?

90% of attacks start with a phish. It’s critical that IT admins and MSSPs have the right security in place to protect their end users from these phishing attacks. Check out our latest feature brief for tips and tricks to keep your employees off a hackers line!

 
David BirdPartnerAuthor Commented:
Hehe. It's quickbooks fussing at the Internet security Settings.  Have Firefox as default.
Ran GPResults with no GPO under domain or local.  Created a LOCAL GPO setting to make sure is was enabled.  Ran gpresult again and it showed the local policy and successfully loaded.
0
 
yo_beeDirector of Information TechnologyCommented:
I just looked at my local computer and the Internet Zone > Site button is greyed out.   This maybe by design.  Looking at this KB from MS you will see that they just mention Intranet, Trusted and Restricted for the Site button.  Nothing about the Internet.  Can you confirm that the Internet Zone > Site button is not greyed out on your computer?

https://support.microsoft.com/en-us/help/17479/windows-internet-explorer-11-change-security-privacy-settings





Add or remove a site from a security zone
 
 1.Open Internet Explorer, select the Tools button , and then select Internet options.
2.Select the Security tab, choose one of the security zone icons (Local intranet, Trusted sites, or Restricted sites), and then select Sites. You can add sites to the zone you chose, or delete sites that you no longer want in this zone.

3.If you chose Local intranet in the previous step, select Advanced, and then do one of the following:
•Add a site. Enter a URL into the Add this website to the zone box, and then select Add.
•Remove a site. Under Websites, select the URL you want to remove, and then select Remove.


0
 
David BirdPartnerAuthor Commented:
Therein lies the whackadoodle part.  On my DC running 2012R2, The Sites button is enabled AND the slider bar is there.  Just the new machine has the Internet / Site greyed out.
0
 
yo_beeDirector of Information TechnologyCommented:
That is very interesting.  I just checked on my home computer that has no GPO's applied and the Site button is also greyed out.
0
 
David BirdPartnerAuthor Commented:
The fix I posted in the forum worked.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.