RE: Security Zones and Content Ratings



Hello,

Thank you for using newsgroup and sorry for delayed response!

>From your post, I suggest you check the following Group Policy setting to
see if it has been enabled:
Computer Configuration\Administrative Templates\System\Group
Policy\Internet Explorer Maintenance policy processing

As far as I know, the policy setting determines when Internet Explorer
Maintenance policies are updated. This setting affects all policies that
use the Internet Explorer Maintenance component of Group Policy, such as
those in Windows Settings\Internet Explorer Maintenance. It overrides
customized settings that the program implementing the Internet Explorer
Maintenance policy set when it was installed. If you enable this setting,
you can use the check boxes provided to change the options. If you disable
this setting or do not configure it, it has no effect on the system.

If the problem persists, please help me confirm if the problem only occur
on the specific Windows XP SP2 client. What about other Windows XP SP2
clients in the domain?

Please collect the GPResult and send it to v-kzhao@xxxxxxxxxxxxxx
1. Click Start->Run
2. Type "gpresult /z >c:\gpresult.txt"
3. Send c:\gpresult.txt to me.

In addition, to avoid overwriting the Internet Explorer Maintenance
settings in a GPO, you may use GPMC to view the Internet Explorer
Maintenance settings. For more information about GPMC, please refer to:

Administering Group Policy with the GPMC
http://www.microsoft.com/windowsserver2003/gpmc/gpmcwp.mspx

Group Policy Management Console with Service Pack 1
<http://www.microsoft.com/downloads/details.aspx?FamilyId=0A6D4C24-8CBD-4B35
-9272-DD3CBFC81887&displaylang=en>

More reference:
==================
How Internet Explorer Maintenance Extension Works
<http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/Tech
Ref/2904be16-6bc3-4dfa-b884-dd4b6c6b9994.mspx>

833633: How to strengthen the security settings for the Local Machine zone
in Internet Explorer
http://support.microsoft.com/default.aspx?scid=kb;en-us;833633

Thanks & Regards,

Ken Zhao

Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security

=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.


Newsgroup Web Interface Upgrade
Please complete a one-time registration process on your first visit to the
Partner Portal beginning July 11, 2005 at 9 A.M. PST by entering the secure
code mspp2005 when prompted. This secure code will be valid for 6 months
after which you will need to update your registration by entering the new
secure code. We will post announcements in the newsgroups prior to
expiration. Once you have entered the secure code mspp2005 , you will be
able to update your profile and access the the partner newsgroups. Please
update your Favorites link to the newsgroups web page, your current link
will redirect until November 1, 2005.
Please post any comment, questions or concerns to the
microsoft.private.directaccess.partnerfeedback newsgroup. For more
information, please go to:
https://partner.microsoft.com/global/technicalsupport/registeredsupport/4001
4662


--------------------
| Thread-Topic: Security Zones and Content Ratings
| thread-index: AcWdHDxSlz1/e7PpT2CoOLZUiTjnGQ==
| X-WBNR-Posting-Host: 65.212.81.90
| From: =?Utf-8?B?YmFhYTdiMWItNTE4MTA5MDEz?=
<baaa7b1b-518109013@xxxxxxxxxxxxxxxxxxxxxxxxx>
| Subject: Security Zones and Content Ratings
| Date: Tue, 9 Aug 2005 12:55:04 -0700
| Lines: 14
| Message-ID: <81F6854F-E529-48F6-B12D-F407CC00703A@xxxxxxxxxxxxx>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="Utf-8"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Content-Class: urn:content-classes:message
| Importance: normal
| Priority: normal
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
| Newsgroups: microsoft.public.windows.group_policy
| NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
| Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGXA03.phx.gbl
| Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.group_policy:9852
| X-Tomcat-NG: microsoft.public.windows.group_policy
|
| I am trying to set the Content Ratings of certain users in our Domain. I
| found "Security Zones and Content Ratings" under User
Configuration>WIndows
| Settings>Internet Explorer Maintenance>Security. I then imported the
| settings from my XP SP2 workstation. No errors or problems. I then ran
| gpupdate on the target system (XP SP2) and logged back in. The
previoulsy,
| locally configured Content Ratings were still in effect. I also tried
| logging into a Windows 2003 Server that had never had Content Ratings
set.
| It is still not set, even by GPO.
|
| Correct settings show up under GP Modeling on both XP and Window 2003
Server.
| Correct settings do show up under GP Results on Windows 2003 Server but
do
| not show up on XP.
|
| What am I missing?
|

.



Relevant Pages

  • Re: Secure Tools
    ... MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002 ... cleanup each PC separately and am fustrated when users change tool settings ... "Using Group Policy to Manage Internet Explorer" ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: Secure Tools
    ... settings from users logging in as "guest?" ... The PC's are networked and use WN2000 and IE6. ... "Using Group Policy to Manage Internet Explorer" ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: A few beginning questions about using GPOs to help setup for new software.
    ... Information about some new Group Policy settings for Internet ... Explorer Security Zones in Microsoft Windows XP SP2 and in Microsoft ... Internet Explorer Policy Settings ...
    (microsoft.public.windows.group_policy)
  • RE: ACCESS RESTRICTION
    ... I understand that you want to disable access to Internet Explorer to some ... wish to limit internet access for or edit an existing group policy object. ... Enter a non existent Proxy address and disable changing the proxy address. ... Maintenance -> Proxy settings -> Enter an invalid IP address as the address ...
    (microsoft.public.windows.inetexplorer.ie6.setup)
  • Re: Locking down Mozilla
    ... I just want to prevent everybody from using Mozilla instead of Internet Explorer. ... GeAr schrieb: ... If it's using the registry to make settings there, you could use Group Policy to preference settings. ...
    (microsoft.public.win2000.active_directory)