Re: Managing IE6 in a Terminal Services Environment
- From: "TP" <tperson.knowspamn@xxxxxxxxxxxxxxx>
- Date: Sun, 16 Sep 2007 04:13:22 -0400
Hi Curtis,
Have you disabled Internet Explorer Enhanced Security (IEES) for your user groups? This is done through Add/Remove Programs Windows Components.
Site to Zone Assignments are stored separately for IEES enabled and IEES disabled. Unfortunately the Group Policy template is for IEES disabled mode. By defining the assignments using a GPO you effectively assigned an empty list of sites for users who have IEES enabled. For reference sake IEES sites are stored under the EscDomains (Enhanced security configuration Domains) key in the user's registry.
-TP
cbrunet wrote:
Greetings all,.
I'm having some issues trying to manage Internet Explorer 6 through
Group Policy. I've setup a new GPO and associated it with the OU I
want. I've then gone User Configuration -> Administrative Templates -
Windows Components -> Internet Explorer -> Internet Control Panel ->Security Page and enabled the group policy Site to Zone Assignment
list. I've added the sites I wish to add to the local Intranet, and
exited.
Now, when I log onto the desktop of the associated system as
administrator, my IE settings come across. I go Tools -> Internet
Options, then the security tab, I select the Local Intranet sites and
all of my addresses I added are there. I can then freely browse any
of the sites I wish, but I cannot add new sites. Not a big deal since
I am looking to lock all of this information down anyways.
My problem is is that when I log in as a user, I get nothing in the
Local Intranet sites. Not only that, but the same problem is I can't
add new sites. So not only are all of the sites falling under the
Internet category, but I can't even tell users to add new sites now.
I've tried also adding these sites to the Computer Settings as well to
no avail, but if I do a RSoP, the policies show that they are being
applied fine. Even if I go into the registry it clearly shows that
the values are there (HKCU\Software\Policies\Microsoft\Windows
\CurrentVersion\InternetSettings\ZoneMapKey or HKLM for the machine
one's).
In other words, everything seems like it is set up perfectly but it is
simply not working. The machines I am adding these settings to are
Windows Server 2003 Application Servers running in Terminal Service
mode. The domain is all Server 2003.
I've been playing cat and mouse with this for almost 2 days now and am
at my wits end. I could use all the suggestions in the world.
-Curtis
- Follow-Ups:
- Re: Managing IE6 in a Terminal Services Environment
- From: cbrunet
- Re: Managing IE6 in a Terminal Services Environment
- References:
- Managing IE6 in a Terminal Services Environment
- From: cbrunet
- Managing IE6 in a Terminal Services Environment
- Prev by Date: Re: Publish Network Printer
- Next by Date: Re: Cannot Remote Control: Error 7054
- Previous by thread: Re: Managing IE6 in a Terminal Services Environment
- Next by thread: Re: Managing IE6 in a Terminal Services Environment
- Index(es):
Relevant Pages
|
