Re: Reducing IE security settings

From: andy smart (anonymus_at_discussions.microsoft.com)
Date: 02/24/05 

Date: Thu, 24 Feb 2005 16:21:45 +0000

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Steven Umbach wrote:
| Hi Andy.
|
| The default setting is medium for the internet Web Content Zone. You
can change
| this in Group Policy/user configuration/Windows settings/Internet Explorer
| maintenance/security - security zones and content. You can configure the
| settings you want on the computer you are configuring the policy on or
modify
| the existing settings.
|
| Also check the settings in advanced settings for "allow active content
from cd
| to run on my computer" which may also be part of the problem. However
I don't
| think that can be changed via Group Policy. --- Steve
|
|
| "andy smart" <anonymus@discussions.microsoft.com> wrote in message
| news:cvhs46$k69$1@newsfeed.th.ifl.net...
|
|>Hi
|>
|>We run XP with SP2 applied on our network - deployed via a GPO from 2003
|>server. This puts the security settings for the Internet Zone in IE to
|>high - which creates lots of problems with our students not being able
|>to access interactive content/mulitmedia/etc etc. We've thought about
|>this and would like to reduce this setting to Medium; we know the risks
|>but feel that the gains will outweigh them in our context, as we'd be
|>forevever adding stuff to 'trusted sites' if we do it that way!
|>
|>However we've been unable to achive this, either by modifying exisiting
|>GPOs or creating our own! Any advice would be gratefully recivied!
|>
|>tia
|>andy
|
|
|
Thanks Steve

This makes us think that somewhere we have another GPO which is
increasign the settings for us. Is there an easy way to find out which
GPO might be doing this, or is it a case of starting from 'default
domain' and systematically adding GPOs till we find it?

andy
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (MingW32)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFCHf8Yqmlxlf41jHgRAn9HAJ0W1xy5sTxK0mTDWpQqfu6t8G2TUwCfUVKK
YvZo9WbYojvGY8ilyJfbMn0=
=4c2D
-----END PGP SIGNATURE-----

Relevant Pages

  • Re: Publisher could not be verified message, IE UserControl
    ... You may first want to make the zone show up in the Internet Options dialog. ... Then go to Internet Options dialog, Security Tab, select My Computer Zone and change the security level for the zone. ... registry settings have the intended effect of NOT presenting the "publisher ...
    (microsoft.public.windowsxp.embedded)
  • Re: SunJavaScript/Flash/IE6 Not Working right! Help?
    ... I went to that site with my ZAPro settings as is - was able to view the ... I even tried lowering Internet Zone ... Using the Windows Firewall is, for me, not an option. ... The safe Mode test sort of implicates ZA. ...
    (microsoft.public.windows.inetexplorer.ie6.setup)
  • Re: Publisher could not be verified message, IE UserControl
    ... the 'My Computer' zone appeared in the Security tab. ... the same "publisher could not be verified" dialog was presented. ... Computer' Security settings. ... You may first want to make the zone show up in the Internet Options dialog. ...
    (microsoft.public.windowsxp.embedded)
  • Re: GPO to prevent IE, OE, and Address Book menu items?
    ... Now that you are an expert on Just-In-Time setup, you get to become an expert on security zone settings. ... In my case it says Local Intranet, because S: is located on a server that I have defined as part of the Local Intranet. ... We are fixing a single user at the moment, but later we can change the settings for all users using Group Policy. ...
    (microsoft.public.windows.terminal_services)
  • Re: drag and drop prompting
    ... Your current security settings prohibit copying or moving files from this ... First you have to Enable the My Computer Security Zone in Internet Options. ...
    (microsoft.public.windowsxp.general)