Re: ZONES VIA GPO's

From: Paul Adare (padare_at_newsguy.com)
Date: 11/16/03


Date: Sun, 16 Nov 2003 04:33:50 -0500

In article <O5Kbd67qDHA.1708@TK2MSFTNGP12.phx.gbl>, in the
microsoft.public.windowsxp.security_admin news group, Pasi Heino
<pasi.heino@suomi24.fi> says...

> Hello,
>
> I have W2K3 Domain and XP Pro workstations. Now I need to deploy specific
> Security Zone settings to wks. When I am trying to modify Security Zone
> settings there's announcement, which needs Enhaced Security Settings to XP
> Pro workstations. I know that there is this option on W2K2 Servers, but how
> I can deploy my own security zone settings to workstations via Group Policy.
> Now it's not working properly.
>
> I have uninstalled enhanced security settings from server and nothing
> happens?

This is not a good idea, you should re-enable the enhanced security
configuration on your server.

>
> If somebody have resolved this problem share information!!

To deploy IE security settings to both Windows Server 2003 servers, and
to XP computers, you need at least 2 GPOs. For deploying to servers,
create the GPO on one of the servers. This GPO will contain the enhanced
security configuration settings (which will be ignored by the XP
computers). To create the GPO for the XP computers, you need to create
the GPO on a computer running XP Pro. Open MMC.exe and add the Group
Policy snap-in, browse to your domain, and create a new GPO in the
domain. Import the IE security settings from the XP computer, make the
modifications you need to make to the GPO, and then link the GPO to
whatever container you need to link it to.

>
> I have also problem with ActiveX components, because normal users cannot
> install any components? Now I need to make MSI packages of those web
> programs which needs ActiveX. Where's user needs rights and is it possible
> to install ActiveX in Windows XP with user rights?

A lot of ActiveX components require either Power Users or Administrator
privileges to install. If that's the case, then as far as I know, the
only ways to install them are by belonging to Power Users or
Administrators, or with an MSI like you're doing now.
 

-- 
Paul Adare
What use is it that knowledge mounts?
It's knowing something good that counts. 
Friedrich von Logau


Relevant Pages

  • Network Shared Files/UNC
    ... issues regarding our network security. ... GPO settings are not inherited from the domain GPO ... folders of our servers by just running Notepad and going ... another way of tightening security so that the Servers are ...
    (microsoft.public.win2000.active_directory)
  • Re: Unable to download/run ActiveX controls
    ... Your current security settings prohibit running Active X ... Test Your ActiveX Installation ... change the security settings for this zone? ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • GPO Administrative Templates Missing
    ... security settings through GPO, things like disabling control panel, IE ...
    (microsoft.public.windows.server.sbs)
  • Re: Big Security Permission Mistake - Please Help if You Can
    ... Reset Security Settings Back to the Defaults ... security template to be applied. ...
    (microsoft.public.windowsxp.configuration_manage)
  • Re: why microsoft choose mfc rather than wtl?
    ... One is that users need to keep their browser security settings as high as ... attacks that aren't possible in the higher security settings. ... point was that you should not dictate securiy settings to your customers ...
    (microsoft.public.vc.mfc)