Re: Working around a group policy
- From: harrykrishna.nospam@xxxxxxxxx
- Date: Fri, 30 Nov 2007 20:51:49 GMT
TonyV <kingskippus@xxxxxxxxx> wrote:
There are probably messages posted already about how to override group
policies in general, and I know that AD is designed not to be able to
do so. However, I'm wondering if there's a way to, if not override
one, at least work around the effect of one.
The situation is that I'm a contract developer for a really large
company. In the support group's infinite wisdom, they've disabled the
script debugger for everyone in Internet Explorer using an AD group
policy. Normally, this isn't much of a problem, as I develop my
scripts in Firefox, which has a nice debugger, and port them over.
However, I now have a script that works in Firefox perfectly but not
in IE, and I can't figure out why. And, of course, thanks to our
support group, I have no debugging tool to try to track it down.
We also have a group policy in effect that hides the Advanced tab in
the IE options. I was able to get around that by manually setting the
registry key HKCU\Software\Policies\Microsoft\Internet Explorer
\Control Panel\AdvancedTab. I've also manually set the key that
denies the ability to change advanced settings (Advanced, in the same
key) to allow it, and I explicitly denied everyone permission to
change that key. I also manually made similar changes in the HKLM
hive. I've also edited the values that allow/disallow the debugger.
In other words, as far as I can tell, everything according to the
registry should allow me to change the advanced option to enable the
script debugger.
However, it looks like either IE is getting this setting directly from
the group policy (?) or I've missed a key somewhere. I kind of doubt
the latter, I've researched it for hours. The policy is User
Configuration/Administrative Templates/Windows Components/Internet
Explorer/Disable changing Advanced page settings. I honestly can't
find the policy setting to disable the debugger, I probably don't have
the template loaded for it. Still, it wouldn't matter much, as
they've set the precedence so that the AD policy overrides the local
policy.
Does anyone know how to work around this policy? Only our support
group has access to change the settings, they won't give me access to
it, and since I'm a contractor, our AD guys won't put me in the group
that would allow me to change the settings.
Although I usually would be very reluctant to suggest ways around a
Group Policy, this particular setting doesn't "seem" too dangerous to
enable, especially is needed for a particular task.
First, I'd suggest you review any agreements you signed when you
started working there as they may have good reason to simply can you
for going against company policy.
Having said that, you might want to peek at
HKCU\Software\Microsoft\Internet Explorer\Main and see if the two
script debugger settings located here are what you are after.
Ha®®y
HarryKrishna.nospam@xxxxxxxxx
.
- References:
- Working around a group policy
- From: TonyV
- Working around a group policy
- Prev by Date: Re: Group Policy design
- Next by Date: Re: Folder Redirection - File moved from the desktop to the recycle bin disapear
- Previous by thread: Working around a group policy
- Next by thread: Group Policy design
- Index(es):
Relevant Pages
|
