Re: Reducing IE security settings

From: Steven Umbach (n9rou_at_n0spam-comcast.net)
Date: 02/24/05


Date: Wed, 23 Feb 2005 22:46:55 -0600

Hi Andy.

The default setting is medium for the internet Web Content Zone. You can change
this in Group Policy/user configuration/Windows settings/Internet Explorer
maintenance/security - security zones and content. You can configure the
settings you want on the computer you are configuring the policy on or modify
the existing settings.

Also check the settings in advanced settings for "allow active content from cd
to run on my computer" which may also be part of the problem. However I don't
think that can be changed via Group Policy. --- Steve

"andy smart" <anonymus@discussions.microsoft.com> wrote in message
news:cvhs46$k69$1@newsfeed.th.ifl.net...
> Hi
>
> We run XP with SP2 applied on our network - deployed via a GPO from 2003
> server. This puts the security settings for the Internet Zone in IE to
> high - which creates lots of problems with our students not being able
> to access interactive content/mulitmedia/etc etc. We've thought about
> this and would like to reduce this setting to Medium; we know the risks
> but feel that the gains will outweigh them in our context, as we'd be
> forevever adding stuff to 'trusted sites' if we do it that way!
>
> However we've been unable to achive this, either by modifying exisiting
> GPOs or creating our own! Any advice would be gratefully recivied!
>
> tia
> andy



Relevant Pages

  • Re: Publisher could not be verified message, IE UserControl
    ... You may first want to make the zone show up in the Internet Options dialog. ... Then go to Internet Options dialog, Security Tab, select My Computer Zone and change the security level for the zone. ... registry settings have the intended effect of NOT presenting the "publisher ...
    (microsoft.public.windowsxp.embedded)
  • Re: SunJavaScript/Flash/IE6 Not Working right! Help?
    ... I went to that site with my ZAPro settings as is - was able to view the ... I even tried lowering Internet Zone ... Using the Windows Firewall is, for me, not an option. ... The safe Mode test sort of implicates ZA. ...
    (microsoft.public.windows.inetexplorer.ie6.setup)
  • Re: Publisher could not be verified message, IE UserControl
    ... the 'My Computer' zone appeared in the Security tab. ... the same "publisher could not be verified" dialog was presented. ... Computer' Security settings. ... You may first want to make the zone show up in the Internet Options dialog. ...
    (microsoft.public.windowsxp.embedded)
  • Re: GPO to prevent IE, OE, and Address Book menu items?
    ... Now that you are an expert on Just-In-Time setup, you get to become an expert on security zone settings. ... In my case it says Local Intranet, because S: is located on a server that I have defined as part of the Local Intranet. ... We are fixing a single user at the moment, but later we can change the settings for all users using Group Policy. ...
    (microsoft.public.windows.terminal_services)
  • Re: drag and drop prompting
    ... Your current security settings prohibit copying or moving files from this ... First you have to Enable the My Computer Security Zone in Internet Options. ...
    (microsoft.public.windowsxp.general)