Working around a group policy
- From: TonyV <kingskippus@xxxxxxxxx>
- Date: Fri, 30 Nov 2007 10:25:08 -0800 (PST)
There are probably messages posted already about how to override group
policies in general, and I know that AD is designed not to be able to
do so. However, I'm wondering if there's a way to, if not override
one, at least work around the effect of one.
The situation is that I'm a contract developer for a really large
company. In the support group's infinite wisdom, they've disabled the
script debugger for everyone in Internet Explorer using an AD group
policy. Normally, this isn't much of a problem, as I develop my
scripts in Firefox, which has a nice debugger, and port them over.
However, I now have a script that works in Firefox perfectly but not
in IE, and I can't figure out why. And, of course, thanks to our
support group, I have no debugging tool to try to track it down.
We also have a group policy in effect that hides the Advanced tab in
the IE options. I was able to get around that by manually setting the
registry key HKCU\Software\Policies\Microsoft\Internet Explorer
\Control Panel\AdvancedTab. I've also manually set the key that
denies the ability to change advanced settings (Advanced, in the same
key) to allow it, and I explicitly denied everyone permission to
change that key. I also manually made similar changes in the HKLM
hive. I've also edited the values that allow/disallow the debugger.
In other words, as far as I can tell, everything according to the
registry should allow me to change the advanced option to enable the
script debugger.
However, it looks like either IE is getting this setting directly from
the group policy (?) or I've missed a key somewhere. I kind of doubt
the latter, I've researched it for hours. The policy is User
Configuration/Administrative Templates/Windows Components/Internet
Explorer/Disable changing Advanced page settings. I honestly can't
find the policy setting to disable the debugger, I probably don't have
the template loaded for it. Still, it wouldn't matter much, as
they've set the precedence so that the AD policy overrides the local
policy.
Does anyone know how to work around this policy? Only our support
group has access to change the settings, they won't give me access to
it, and since I'm a contractor, our AD guys won't put me in the group
that would allow me to change the settings.
.
- Follow-Ups:
- Re: Working around a group policy
- From: harrykrishna . nospam
- Re: Working around a group policy
- Prev by Date: Re: Deploying security key using Wireless Access Group Policy
- Next by Date: Group Policy design
- Previous by thread: Deploying security key using Wireless Access Group Policy
- Next by thread: Re: Working around a group policy
- Index(es):
Relevant Pages
|
