Best Practice

From: yuhong bao (yuhongbao164_at_hotmail.com)
Date: 05/30/03 

Date: Thu, 29 May 2003 21:23:02 -0700

Best Practice:

  a.. Disable Internet Explorer Enhanced Security Configuration if you trust
Administer use server to browse the web is safe and your server have Windows
Server 2003.
  b.. Set Security Zone to:
        Zone Level
        Internet Custom
        All feature that disabled in level High but enabled or prompt in
level Medium: prompt
        Local Intranet Low
        Trusted Site Medium-low
        Restrictive Site High

  If you don't use Windows Server 2003's Internet Explorer Enhanced Security
Configuration:

        Zone Level
        Internet Medium
        Local Intranet Low
        Trusted Site Low
        Restricted Site High

  And, If you use Windows Server 2003's Internet Explorer Enhanced Security
Configuration, Add all Intranet Site to Local Intranet zone.

  a.. Don't use Administer account for everyday tasks until you trust it is
safe.
  b.. Enable:
    a.. Pictures
    b.. Movies
    c.. Sounds
    d.. Animation
    e.. Online Contexts in Media bar If you have Internet Explorer 6.0 or
later
    f.. Install on Demand
  c.. Disable:
    a.. Read All Messages as Plant Text If you have Internet Explorer 6.0
SP1 or later
    b.. Do not save encrypted item to disk
  d.. Accept All Cookies if you are not using Windows Server 2003's Internet
Explorer Enhanced Security Configuration
  e.. Prompt All Cookies if you are using Windows Server 2003's Internet
Explorer Enhanced Security Configuration
  f.. Move Outlook and Outlook Express to Internet Zone, not Restrictive
Site Zone 

-- 
yuhong bao

Relevant Pages

  • Re: running network applications
    ... UNC path unless the UNC path is added to the Local Intranet zone ... On the Terminal Server, go to Control Panel - Internet Options - ... User Configuration - Windows Settings - Internet Explorer ... Managing Internet Explorer Enhanced Security Configuration ...
    (microsoft.public.windows.terminal_services)
  • Re: Using Microsoft update on Windows Server 2000 sp3
    ... In my case the Windows 2003 Server is a Domain server and doesn't have ... >> To save changes to your settings for this website, ... >> userdata persistence for Internet Explorer. ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • RE: Publisher Unknown for lnk?
    ... Start Internet Explorer on the Terminal Server, ... 815141 - Internet Explorer Enhanced Security Configuration Changes ... > I get Open File - Security Warning pop up on TS 2003 when I ...
    (microsoft.public.windows.server.setup)
  • Re: open file - security warning
    ... UNC path unless the UNC path is added to the Local Intranet zone ... Start Internet Explorer on the Terminal Server, ... 815141 - Internet Explorer Enhanced Security Configuration Changes ...
    (microsoft.public.windows.terminal_services)
  • Re: Task scheduler error in W2003
    ... The W2003 server is a secondary domain controller on our network and I ... "Note that this problem occurs only when you install Internet Explorer ... Scheduler add-on." ... This is a Windows 2003 Server and not NT4 ...
    (microsoft.public.windows.server.general)