Re: IE Advanced/Security settings

Tech-Archive recommends: Fix windows errors by optimizing your registry

Oh, so there is no place within IE Group Policy where you can enforce
"Integrated Windows Authentication"?

Sounds like the reg hack would do it though... will give it a try... thanks!

/ Per


"Steven L Umbach" <n9rou@xxxxxxxxxxxxxxxxxx> wrote in message
news:%23Bid1xVyFHA.3256@xxxxxxxxxxxxxxxxxxxxxxx
>I don't know of any templates offhand but it is possibly to apply changes
>to the registry via Group Policy startup or logon scripts once you find the
>registry changes that apply the desired setting. The script would simply be
>a .bat file created with notepad using the regedit /s command with the path
>to the .reg file which could be on a network share. Below is an example of
>such a .reg file for a couple advanced security settings - enabling that
>temporary internet files be deleted at IE closing and enabling Windows
>integrated authentication and it would be a logon script. --- Steve
>
>
> ttp://support.microsoft.com/default.aspx?scid=kb;en-us;310516&sd=tech ---
> about .reg files.
>
> Windows Registry Editor Version 5.00
>
> [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet
> Settings]
> "EnableNegotiate"=dword:00000001
>
> [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet
> Settings\Cache]
> "Persistent"=dword:00000000
>
>
> "Kevin" <KStringer@xxxxxxxxxxxxx> wrote in message
> news:Xns96E46A17B911EKStringerHuFriedycom@xxxxxxxxxxxxxxxx
>>I was referring to the last section of the maint/adv group as it appears
>> in the IE Options windows. The 'Security' block at the bottom has about
>> 16 choices in the IE dialog box, but only 2 GP settings in the GP
>> Editor. The full maint/adv page has more, yes.
>>
>> I imported wuau.adm to get all my firewall settings and WSUS stuff
>> (can't remember which) a while back and that worked nicely. I guess I
>> am looking for a bit more in the way of IE settings that I can push via
>> domain group policy.
>>
>> The IEAK stuff seems vastly overkill for what I'm trying to do - we
>> don't 'deploy' IE, its just installed on our workstations and I can't
>> get past the part where it wants to do a bunch of stuff to our IE
>> Deployment environemnt - because we don't have one.
>>
>> I don't really want to have to wade throuhg 300+ registry change
>> deployments, either. I've been able to do all the settings I've needed
>> up to this point in the group policy stuff and I'd really like to stick
>> with that way of doung things - I just need more templates (or options
>> within the templates or whatever).
>>
>> Makse sense?
>>
>>
>>
>> "Steven L Umbach" <n9rou@xxxxxxxxxxxxxxxxxx> wrote in
>> news:#NnJDerxFHA.628@xxxxxxxxxxxxxxxxxxxx:
>>
>>> There are a lot more than two settings in IE maintenance/advanced
>>> under internet settings inetset.adm if you have a Windows 2003 domain
>>> controller or for XP Pro computers though I agree all settings are not
>>> there. I have not used it myself but the IEAK [see link below] can
>>> also be used to configure IE settings though I believe that works best
>>> before deployment. If you can determine the registry entry that the
>>> setting uses you might be able to deploy the change with a Group
>>> Policy startup [computer specific] and or logon script [user specific]
>>> using a .reg file. There are free tools such as regshot to take before
>>> and after snapshots of the registry after doing a setting change to
>>> help track down the registry key/entry. --- Steve
>>>
>>> http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library
>> /
>>> ServerHelp/ac9df2a1-6750-4d6f-bd91-74be5d619e81.mspx
>>> http://www.snapfiles.com/get/regshot.html --- regshot
>>>
>>> "Kevin" <KStringer@xxxxxxxxxxxxx> wrote in message
>>> news:Xns96E092DD9CB2EKStringerHuFriedycom@xxxxxxxxxxxxxxxx
>>>> We have a need to set one of these settings company-wide and that's
>>>> what group policies are for, right?
>>>>
>>>> Well, I go into my group policy editor and go to the IE/Advanced page
>>>> and there are only 2 of the many, many options from that tab (in IE).
>>>>
>>>> Are there templates that I can import to add these? I'm not really
>>>> that much of an A/D or group policy guru, I just know how to add a
>>>> few basic rules, not add missing options, etc.
>>>>
>>>> Any suggestions?
>>>>
>>>> Thanks!
>>>
>>>
>>
>
>


.

Relevant Pages