Re: IE Advanced/Security settings

I don't know of any templates offhand but it is possibly to apply changes
to the registry via Group Policy startup or logon scripts once you find the
registry changes that apply the desired setting. The script would simply be
a .bat file created with notepad using the regedit /s command with the path
to the .reg file which could be on a network share. Below is an example of
such a .reg file for a couple advanced security settings - enabling that
temporary internet files be deleted at IE closing and enabling Windows
integrated authentication and it would be a logon script. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;310516&sd=tech ---
about .reg files.

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet
Settings]
"EnableNegotiate"=dword:00000001

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet
Settings\Cache]
"Persistent"=dword:00000000


"Kevin" <KStringer@xxxxxxxxxxxxx> wrote in message
news:Xns96E46A17B911EKStringerHuFriedycom@xxxxxxxxxxxxxxxx
>I was referring to the last section of the maint/adv group as it appears
> in the IE Options windows. The 'Security' block at the bottom has about
> 16 choices in the IE dialog box, but only 2 GP settings in the GP
> Editor. The full maint/adv page has more, yes.
>
> I imported wuau.adm to get all my firewall settings and WSUS stuff
> (can't remember which) a while back and that worked nicely. I guess I
> am looking for a bit more in the way of IE settings that I can push via
> domain group policy.
>
> The IEAK stuff seems vastly overkill for what I'm trying to do - we
> don't 'deploy' IE, its just installed on our workstations and I can't
> get past the part where it wants to do a bunch of stuff to our IE
> Deployment environemnt - because we don't have one.
>
> I don't really want to have to wade throuhg 300+ registry change
> deployments, either. I've been able to do all the settings I've needed
> up to this point in the group policy stuff and I'd really like to stick
> with that way of doung things - I just need more templates (or options
> within the templates or whatever).
>
> Makse sense?
>
>
>
> "Steven L Umbach" <n9rou@xxxxxxxxxxxxxxxxxx> wrote in
> news:#NnJDerxFHA.628@xxxxxxxxxxxxxxxxxxxx:
>
>> There are a lot more than two settings in IE maintenance/advanced
>> under internet settings inetset.adm if you have a Windows 2003 domain
>> controller or for XP Pro computers though I agree all settings are not
>> there. I have not used it myself but the IEAK [see link below] can
>> also be used to configure IE settings though I believe that works best
>> before deployment. If you can determine the registry entry that the
>> setting uses you might be able to deploy the change with a Group
>> Policy startup [computer specific] and or logon script [user specific]
>> using a .reg file. There are free tools such as regshot to take before
>> and after snapshots of the registry after doing a setting change to
>> help track down the registry key/entry. --- Steve
>>
>> http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library
> /
>> ServerHelp/ac9df2a1-6750-4d6f-bd91-74be5d619e81.mspx
>> http://www.snapfiles.com/get/regshot.html --- regshot
>>
>> "Kevin" <KStringer@xxxxxxxxxxxxx> wrote in message
>> news:Xns96E092DD9CB2EKStringerHuFriedycom@xxxxxxxxxxxxxxxx
>>> We have a need to set one of these settings company-wide and that's
>>> what group policies are for, right?
>>>
>>> Well, I go into my group policy editor and go to the IE/Advanced page
>>> and there are only 2 of the many, many options from that tab (in IE).
>>>
>>> Are there templates that I can import to add these? I'm not really
>>> that much of an A/D or group policy guru, I just know how to add a
>>> few basic rules, not add missing options, etc.
>>>
>>> Any suggestions?
>>>
>>> Thanks!
>>
>>
>


.

Relevant Pages

  • Re: Applying zone settings on Pop-up Blocker
    ... I checked the registry and the settings is there! ... > Troubleshooting Group Policy in Microsoft? ...
    (microsoft.public.windows.group_policy)
  • Re: Local Policy Update Using Remote Registry Edit
    ... Keep in mind that domain profile settings apply only when domain computer ... You can edit local Group Policy remotely by selecting the mmc ... find it always best to edit Group Policy instead of registry settings. ... Is there a way to remotely edit the local group policy of a Windows XP ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Group Policy is preventing me from turning on Windows Firewall
    ... Most likely some malware or spyware has configured such via a registry mod ... Group Policy that will reverse what the registry ... The registry keys to add to disable Windows Firewall for both the domain and ... I went into the settings to ...
    (microsoft.public.windowsxp.security_admin)
  • Re: OneCare really pisses me off
    ... The normal interface to access the Group Policy settings is Gpedit.msc which is available on XP Pro, ... Almost all program installations make changes in the registry, and you don't give permisson each time. ... when you agree to allow the software to install. ...
    (microsoft.public.windowsxp.general)
  • Re: Understanding security template INF structures
    ... a handy way to deal with registry settings. ... believe they handle registry security though. ... > templates and GPO, instead of having to go from machine to machine... ...
    (microsoft.public.win2000.security)