Re: Client can't modify local Internet Options

Be aware this is weird first of all but IE enhanced security can cause other issues as well. You may have opened up a hornets nest....

Jeff Pitsch
Microsoft MVP - Terminal Server
Citrix Technology Professional
Provision Networks VIP

Forums not enough?
Get support from the experts at your business
http://jeffpitschconsulting.com

azevon wrote:
Problem Solved - I had to enable IE Enhanced Security Configuration in Add/Remove Programs, for users.

Thanks for everyone's help!

"azevon" wrote:

Hi Jeff - considering I'm a one man show, no one has played with any settings. A few weeks ago I added users, and they can easily add/remove trusted sites. Only thing I did, was perform MS server updates via Windows Update. I am assuming this changed some sort of policy settings. I ran RSOP on 2 users - 1 that works and 1 that doesn't. I see no differences in their configs. Also, not that I think it matters, but I'm not using AD. I also disabled the setting that Vera suggested, but these users still don"t have rights.

"Jeff Pitsch" wrote:

Someone has started applying Group Policies that affect the IE control panel. You need to use RSOP (resultant set of policies) to figure out which one is doing it. Before that htough you need to get with your team (or the AD team or whoever) to find out why they have locked this down.



azevon wrote:
I am in Group Policy - what needs to be modified? Why would this happen after creating other users that didn't have this restriction?

Thanks for your help.

"Jeff Pitsch" wrote:

Group Policy.....

Jeff Pitsch
Microsoft MVP - Terminal Server
Citrix Technology Professional
Provision Networks VIP

Forums not enough?
Get support from the experts at your business
http://jeffpitschconsulting.com

azevon wrote:
Greetings All,

I'm running a Windows 2003SP2 TS server with Citrix Meteframe 3.0.

In the past, I have successfully added users (using computer management\local users & groups) and then added them into the group "Remote Desktop Users"

Then I have successfully logged onto this server via a citrix client (or TS client), and modified that user"s Internet Option Security tab (my goal is to add my local UNC paths into trusted local intranet sites).

Butr suddenly, when I add a new user onto the server (and give them the same rights as old users), when I log on as that user remotely, the icons in the IE Security tab are grayed out, with grayed locked keys on top of them. I am not able to modify the settings.

What am I missing?

Thanks in advance,

-andy-
.

Relevant Pages

  • Re: SceCli Error 1202 filling up the Event Log!
    ... > after restarting the Win2003 server, the secedit.sdb database does not get ... >>> security database and have it recreated. ... >>> configuration\windows settings\security settings, you should inventory ...
    (microsoft.public.win2000.advanced_server)
  • Re: SBS 2003 After Service Pack 1 for SBS
    ... Controllers" groups have been added to the new CERTSVC_DCOM_ACCESS security ... we can have Certificate Services update the DCOM security settings ... down time for the server - probably over a weekend. ... Then please run command "iisreset" to refresh IIS ...
    (microsoft.public.windows.server.sbs)
  • Re: Print Groups
    ... One for test and then one for all printer objects on a server. ... Change the settings on one printer, ... Used to set print queue security. ...
    (microsoft.public.windows.server.clustering)
  • Re: Open file - security warning....How do I disable it?
    ... You possibly should move this over to the IE security newsgroup, ... IE internet options have both all user and per user settings. ... We are in the process of migrating to windows server 2003. ... and then remove security inside the network. ...
    (microsoft.public.security)
  • Re: Access Denied, Cannot connect
    ... server), and I do not understand this part. ... are printing to Windows Server 2003/Print Server and Windows 2000 ... The second link is talking about changing the registry settings and values. ... Controller Security Template". ...
    (microsoft.public.win2000.printing)
Loading