RE: Content Advisor
- From: DT <DT@xxxxxxxxxxxxxxxxxxxxxxxxx>
- Date: Tue, 26 Jun 2007 07:41:01 -0700
Terence,
I have tried both scenarios but they both give me the same result.
Unless I enable the content manager on the machine manually the sites are not
blocked. But if I click enable on the content manager on a machine, they get
prompted to enter a password to get to the restricted sites. Is there
something I am missing? Thanks for all the help..
"Terence Liu [MSFT]" wrote:
Hello DT,.
Thank you for your kind update.
Based on my test, I think it is possible to use GPO to deploy the Content
Advisor Settings. I suggest we perform the following steps:
Scenario I: Deploy the settings by create Group Policy on Domain Controller
OU or other created OUs.
------------------
1. Open AD computers and users on the server.
2. Create a new OU.
3. Add one of the client to the OU.
4. Right click the OU. (If you are using Domain Controller container,
please just add the computer to this container and right click the folder)
and choose Properties.
5. Go the GPO tab.
6. Click Create a new group policy.
4. Go to the following policy:
User Configuration\Windows Settings\Internet Explorer
Maintenance\Security\Security Zones and Content Ratings.
5. Click Import the current Content Ratings settings and click Modify
Settings.
6. Click General and Create a Password.
7. Set a Password for it.
8. Go to Approved Sites.
9. Input web site you want to block and click Never.
10. Click OK and quit the GPO settings.
12. Click Start -> Run.
13. Input gpupdate /force.
14. Click Yes all the way.
After rebooting the client which is added to this OU, you will find the
Group Policy has been applied on the client, password and the site
limintion has been take action.
Scenario II: Deploy the settings by link Group Policy from other created
OUs.
-------------------------------------
In this scenario, you need not to create a new GPO on the OU. You can add a
group policy created on other OU or domain.
1. Open AD computers and users on the server.
2. Create a new OU.
3. Add one of the clients to the OU.
4. Right click the OU.
5. Go the GPO tab.
6. Click Add a new group policy.
7. Pick the policy which is created in the OU in first Scenario.
12. Click Start -> Run.
13. Input gpupdate /force.
14. Click Yes all the way.
Reboot the test client and test the issue again, you will find all the
group policy works on the client.
Hope the steps help.
Thanks and have a nice day!
Best regards,
Terence Liu(MSFT)
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.
Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.
For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.
Any input or comments in this thread are highly appreciated.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
| Thread-Topic: Content Advisor
| thread-index: Acez+k0nu6eFYAhjTLCMTR0mto9uOQ==
| X-WBNR-Posting-Host: 207.46.193.207
| From: =?Utf-8?B?RFQ=?= <DT@xxxxxxxxxxxxxxxxxxxxxxxxx>
| References: <97E53F2C-07DE-40A9-873A-24801AA3BD00@xxxxxxxxxxxxx>
<aGLXQG9sHHA.1796@xxxxxxxxxxxxxxxxxxxxxx>
| Subject: RE: Content Advisor
| Date: Thu, 21 Jun 2007 04:50:02 -0700
| Lines: 115
| Message-ID: <21F97BB0-2C78-4D36-801C-94FD83AB5846@xxxxxxxxxxxxx>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="Utf-8"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Content-Class: urn:content-classes:message
| Importance: normal
| Priority: normal
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2826
| Newsgroups: microsoft.public.windows.server.sbs
| Path: TK2MSFTNGHUB02.phx.gbl
| Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:45354
| NNTP-Posting-Host: tk2msftibfm01.phx.gbl 10.40.244.149
| X-Tomcat-NG: microsoft.public.windows.server.sbs
|
| If I manually enable the content advisor it works fine, but I would like
to
| enable the content advisor through group policy not by manually doing it.
Is
| this possible or do I just have to enable it manually on each machine.
| Thanks again
|
| "Terence Liu [MSFT]" wrote:
|
| > Hello DT,
| >
| > Thanks for posting here.
| >
| > From your post, I understand your concern is that Content Advisor
settings
| > set in Group Policy do not apply to client machines.
| >
| > If I am off base, please feel free to let me know.
| >
| > 1. I suggest we check the following registry key on both client and
server.
| >
| >
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Rating
| > s\.Default\Enabled
| >
| > If the value is 0, please set it to 1. Then reboot client and test this
| > issue.
| >
| > 2. Also, please test the following scenario:
| >
| > Enable Content Advisor on the client first then apply the group policy.
| > a. In Internet Explorer, click Internet Options on the Tools menu.
| >
| > b. Click the Content tab.
| >
| > c. Under Content Advisor, click Enable
| >
| > For more detail info, please go through the following pages:
| >
| > HOW TO: Use the Internet Explorer 6 Content Advisor to Control Access
to
| > Web Sites in Internet Explorer
| > http://support.microsoft.com/default.aspx?scid=kb;EN-US;310401
| >
| > Hope these steps will give you some help.
| >
| > Thanks and have a nice day!
| >
| > Best regards,
| >
| > Terence Liu(MSFT)
| >
| > Microsoft CSS Online Newsgroup Support
| >
| > Get Secure! - www.microsoft.com/security
| >
| > =====================================================
| > This newsgroup only focuses on SBS technical issues. If you have issues
| > regarding other Microsoft products, you'd better post in the
corresponding
| > newsgroups so that they can be resolved in an efficient and timely
manner.
| > You can locate the newsgroup here:
| > http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
| >
| > When opening a new thread via the web interface, we recommend you check
the
| > "Notify me of replies" box to receive e-mail notifications when there
are
| > any updates in your thread. When responding to posts via your
newsreader,
| > please "Reply to Group" so that others may learn and benefit from your
| > issue.
| >
| > Microsoft engineers can only focus on one issue per thread. Although we
| > provide other information for your reference, we recommend you post
| > different incidents in different threads to keep the thread clean. In
doing
| > so, it will ensure your issues are resolved in a timely manner.
| >
| > For urgent issues, you may want to contact Microsoft CSS directly.
Please
| > check http://support.microsoft.com for regional support phone numbers.
| >
| > Any input or comments in this thread are highly appreciated.
| > =====================================================
| >
| > This posting is provided "AS IS" with no warranties, and confers no
rights.
| >
| > --------------------
| > | Thread-Topic: Content Advisor
| > | thread-index: AcezMNqs9hm22bGcTJuYKFNThDamCA==
| > | X-WBNR-Posting-Host: 207.46.19.197
| > | From: =?Utf-8?B?RFQ=?= <DT@xxxxxxxxxxxxxxxxxxxxxxxxx>
| > | Subject: Content Advisor
| > | Date: Wed, 20 Jun 2007 04:48:01 -0700
| > | Lines: 7
| > | Message-ID: <97E53F2C-07DE-40A9-873A-24801AA3BD00@xxxxxxxxxxxxx>
| > | MIME-Version: 1.0
| > | Content-Type: text/plain;
| > | charset="Utf-8"
| > | Content-Transfer-Encoding: 7bit
| > | X-Newsreader: Microsoft CDO for Windows 2000
| > | Content-Class: urn:content-classes:message
| > | Importance: normal
| > | Priority: normal
| > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2826
| > | Newsgroups: microsoft.public.windows.server.sbs
| > | Path: TK2MSFTNGHUB02.phx.gbl
| > | Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:45106
| > | NNTP-Posting-Host: tk2msftibfm01.phx.gbl 10.40.244.149
| > | X-Tomcat-NG: microsoft.public.windows.server.sbs
| > |
| > | I have been messing around with the Content Advisor in Internet
| > Explorer.
| > | Through group policy I can set the allowed or not allowed websites
and
| > the
| > | propogates to all the machines, but it doesn't enable the content
advisor
| > on
| > | any
| > | machine. Is there a way to enable it through group policy or do I
have
| > to
| > | manually enable it on every machine? Thanks
| > |
| > |
| >
| >
|
- Follow-Ups:
- RE: Content Advisor
- From: Terence Liu [MSFT]
- RE: Content Advisor
- References:
- RE: Content Advisor
- From: Terence Liu [MSFT]
- RE: Content Advisor
- From: DT
- RE: Content Advisor
- From: Terence Liu [MSFT]
- RE: Content Advisor
- Prev by Date: IPSEC question
- Next by Date: Re: GPO causing client security logs to fill?
- Previous by thread: RE: Content Advisor
- Next by thread: RE: Content Advisor
- Index(es):
Relevant Pages
|
