Client can't modify local Internet Options

[Guest azevon]

Greetings All,

 

I'm running a Windows 2003SP2 TS server with Citrix Meteframe 3.0.

 

In the past, I have successfully added users (using computer

management\local users & groups) and then added them into the group "Remote

Desktop Users"

 

Then I have successfully logged onto this server via a citrix client (or TS

client), and modified that user"s Internet Option Security tab (my goal is to

add my local UNC paths into trusted local intranet sites).

 

Butr suddenly, when I add a new user onto the server (and give them the same

rights as old users), when I log on as that user remotely, the icons in the

IE Security tab are grayed out, with grayed locked keys on top of them. I am

not able to modify the settings.

 

What am I missing?

 

Thanks in advance,

 

-andy-

[Guest Jeff Pitsch]

Re: Client can't modify local Internet Options

 

Group Policy.....

 

Jeff Pitsch

Microsoft MVP - Terminal Server

Citrix Technology Professional

Provision Networks VIP

 

Forums not enough?

Get support from the experts at your business

http://jeffpitschconsulting.com

 

azevon wrote:

> Greetings All,

>

> I'm running a Windows 2003SP2 TS server with Citrix Meteframe 3.0.

>

> In the past, I have successfully added users (using computer

> management\local users & groups) and then added them into the group "Remote

> Desktop Users"

>

> Then I have successfully logged onto this server via a citrix client (or TS

> client), and modified that user"s Internet Option Security tab (my goal is to

> add my local UNC paths into trusted local intranet sites).

>

> Butr suddenly, when I add a new user onto the server (and give them the same

> rights as old users), when I log on as that user remotely, the icons in the

> IE Security tab are grayed out, with grayed locked keys on top of them. I am

> not able to modify the settings.

>

> What am I missing?

>

> Thanks in advance,

>

> -andy-

[Guest azevon]

Re: Client can't modify local Internet Options

 

I am in Group Policy - what needs to be modified? Why would this happen

after creating other users that didn't have this restriction?

 

Thanks for your help.

 

"Jeff Pitsch" wrote:

> Group Policy.....

>

> Jeff Pitsch

> Microsoft MVP - Terminal Server

> Citrix Technology Professional

> Provision Networks VIP

>

> Forums not enough?

> Get support from the experts at your business

> http://jeffpitschconsulting.com

>

> azevon wrote:

> > Greetings All,

> >

> > I'm running a Windows 2003SP2 TS server with Citrix Meteframe 3.0.

> >

> > In the past, I have successfully added users (using computer

> > management\local users & groups) and then added them into the group "Remote

> > Desktop Users"

> >

> > Then I have successfully logged onto this server via a citrix client (or TS

> > client), and modified that user"s Internet Option Security tab (my goal is to

> > add my local UNC paths into trusted local intranet sites).

> >

> > Butr suddenly, when I add a new user onto the server (and give them the same

> > rights as old users), when I log on as that user remotely, the icons in the

> > IE Security tab are grayed out, with grayed locked keys on top of them. I am

> > not able to modify the settings.

> >

> > What am I missing?

> >

> > Thanks in advance,

> >

> > -andy-

>

[Guest Vera Noest [MVP]]

Re: Client can't modify local Internet Options

 

As Jeff wrote, greyed out options usually mean that a Group Policy

has enforced the settings.

Use Resultant Set of Policies for this user on this Terminal Server

to see which policies are affecting the user.

Chances are that someone created a policy higher up in the forest

which enforces these settings, most likely by enabling this

setting:

 

Computer Configuration - Administrative templates - Windows

Components - Internet Explorer

"Security zones: Do not allow users to change policies"

 

_________________________________________________________

Vera Noest

MCSE, CCEA, Microsoft MVP - Terminal Server

TS troubleshooting: http://ts.veranoest.net

___ please respond in newsgroup, NOT by private email ___

 

=?Utf-8?B?YXpldm9u?= <azevon@discussions.microsoft.com> wrote on

24 jul 2007 in microsoft.public.windows.terminal_services:

> I am in Group Policy - what needs to be modified? Why would

> this happen after creating other users that didn't have this

> restriction?

>

> Thanks for your help.

>

> "Jeff Pitsch" wrote:

>

>> Group Policy.....

>>

>> Jeff Pitsch

>> Microsoft MVP - Terminal Server

>> Citrix Technology Professional

>> Provision Networks VIP

>>

>> Forums not enough?

>> Get support from the experts at your business

>> http://jeffpitschconsulting.com

>>

>> azevon wrote:

>> > Greetings All,

>> >

>> > I'm running a Windows 2003SP2 TS server with Citrix Meteframe

>> > 3.0.

>> >

>> > In the past, I have successfully added users (using computer

>> > management\local users & groups) and then added them into the

>> > group "Remote Desktop Users"

>> >

>> > Then I have successfully logged onto this server via a citrix

>> > client (or TS client), and modified that user"s Internet

>> > Option Security tab (my goal is to add my local UNC paths

>> > into trusted local intranet sites).

>> >

>> > Butr suddenly, when I add a new user onto the server (and

>> > give them the same rights as old users), when I log on as

>> > that user remotely, the icons in the IE Security tab are

>> > grayed out, with grayed locked keys on top of them. I am

>> > not able to modify the settings.

>> >

>> > What am I missing?

>> >

>> > Thanks in advance,

>> >

>> > -andy-

[Guest Jeff Pitsch]

Re: Client can't modify local Internet Options

 

Someone has started applying Group Policies that affect the IE control

panel. You need to use RSOP (resultant set of policies) to figure out

which one is doing it. Before that htough you need to get with your

team (or the AD team or whoever) to find out why they have locked this

down.

 

 

 

azevon wrote:

> I am in Group Policy - what needs to be modified? Why would this happen

> after creating other users that didn't have this restriction?

>

> Thanks for your help.

>

> "Jeff Pitsch" wrote:

>

>> Group Policy.....

>>

>> Jeff Pitsch

>> Microsoft MVP - Terminal Server

>> Citrix Technology Professional

>> Provision Networks VIP

>>

>> Forums not enough?

>> Get support from the experts at your business

>> http://jeffpitschconsulting.com

>>

>> azevon wrote:

>>> Greetings All,

>>>

>>> I'm running a Windows 2003SP2 TS server with Citrix Meteframe 3.0.

>>>

>>> In the past, I have successfully added users (using computer

>>> management\local users & groups) and then added them into the group "Remote

>>> Desktop Users"

>>>

>>> Then I have successfully logged onto this server via a citrix client (or TS

>>> client), and modified that user"s Internet Option Security tab (my goal is to

>>> add my local UNC paths into trusted local intranet sites).

>>>

>>> Butr suddenly, when I add a new user onto the server (and give them the same

>>> rights as old users), when I log on as that user remotely, the icons in the

>>> IE Security tab are grayed out, with grayed locked keys on top of them. I am

>>> not able to modify the settings.

>>>

>>> What am I missing?

>>>

>>> Thanks in advance,

>>>

>>> -andy-

[Guest azevon]

Re: Client can't modify local Internet Options

 

Hi Jeff - considering I'm a one man show, no one has played with any

settings. A few weeks ago I added users, and they can easily add/remove

trusted sites. Only thing I did, was perform MS server updates via Windows

Update. I am assuming this changed some sort of policy settings. I ran RSOP

on 2 users - 1 that works and 1 that doesn't. I see no differences in their

configs. Also, not that I think it matters, but I'm not using AD. I also

disabled the setting that Vera suggested, but these users still don"t have

rights.

 

"Jeff Pitsch" wrote:

> Someone has started applying Group Policies that affect the IE control

> panel. You need to use RSOP (resultant set of policies) to figure out

> which one is doing it. Before that htough you need to get with your

> team (or the AD team or whoever) to find out why they have locked this

> down.

>

>

>

> azevon wrote:

> > I am in Group Policy - what needs to be modified? Why would this happen

> > after creating other users that didn't have this restriction?

> >

> > Thanks for your help.

> >

> > "Jeff Pitsch" wrote:

> >

> >> Group Policy.....

> >>

> >> Jeff Pitsch

> >> Microsoft MVP - Terminal Server

> >> Citrix Technology Professional

> >> Provision Networks VIP

> >>

> >> Forums not enough?

> >> Get support from the experts at your business

> >> http://jeffpitschconsulting.com

> >>

> >> azevon wrote:

> >>> Greetings All,

> >>>

> >>> I'm running a Windows 2003SP2 TS server with Citrix Meteframe 3.0.

> >>>

> >>> In the past, I have successfully added users (using computer

> >>> management\local users & groups) and then added them into the group "Remote

> >>> Desktop Users"

> >>>

> >>> Then I have successfully logged onto this server via a citrix client (or TS

> >>> client), and modified that user"s Internet Option Security tab (my goal is to

> >>> add my local UNC paths into trusted local intranet sites).

> >>>

> >>> Butr suddenly, when I add a new user onto the server (and give them the same

> >>> rights as old users), when I log on as that user remotely, the icons in the

> >>> IE Security tab are grayed out, with grayed locked keys on top of them. I am

> >>> not able to modify the settings.

> >>>

> >>> What am I missing?

> >>>

> >>> Thanks in advance,

> >>>

> >>> -andy-

>

[Guest azevon]

Re: Client can't modify local Internet Options

 

Problem Solved - I had to enable IE Enhanced Security Configuration in

Add/Remove Programs, for users.

 

Thanks for everyone's help!

 

"azevon" wrote:

> Hi Jeff - considering I'm a one man show, no one has played with any

> settings. A few weeks ago I added users, and they can easily add/remove

> trusted sites. Only thing I did, was perform MS server updates via Windows

> Update. I am assuming this changed some sort of policy settings. I ran RSOP

> on 2 users - 1 that works and 1 that doesn't. I see no differences in their

> configs. Also, not that I think it matters, but I'm not using AD. I also

> disabled the setting that Vera suggested, but these users still don"t have

> rights.

>

> "Jeff Pitsch" wrote:

>

> > Someone has started applying Group Policies that affect the IE control

> > panel. You need to use RSOP (resultant set of policies) to figure out

> > which one is doing it. Before that htough you need to get with your

> > team (or the AD team or whoever) to find out why they have locked this

> > down.

> >

> >

> >

> > azevon wrote:

> > > I am in Group Policy - what needs to be modified? Why would this happen

> > > after creating other users that didn't have this restriction?

> > >

> > > Thanks for your help.

> > >

> > > "Jeff Pitsch" wrote:

> > >

> > >> Group Policy.....

> > >>

> > >> Jeff Pitsch

> > >> Microsoft MVP - Terminal Server

> > >> Citrix Technology Professional

> > >> Provision Networks VIP

> > >>

> > >> Forums not enough?

> > >> Get support from the experts at your business

> > >> http://jeffpitschconsulting.com

> > >>

> > >> azevon wrote:

> > >>> Greetings All,

> > >>>

> > >>> I'm running a Windows 2003SP2 TS server with Citrix Meteframe 3.0.

> > >>>

> > >>> In the past, I have successfully added users (using computer

> > >>> management\local users & groups) and then added them into the group "Remote

> > >>> Desktop Users"

> > >>>

> > >>> Then I have successfully logged onto this server via a citrix client (or TS

> > >>> client), and modified that user"s Internet Option Security tab (my goal is to

> > >>> add my local UNC paths into trusted local intranet sites).

> > >>>

> > >>> Butr suddenly, when I add a new user onto the server (and give them the same

> > >>> rights as old users), when I log on as that user remotely, the icons in the

> > >>> IE Security tab are grayed out, with grayed locked keys on top of them. I am

> > >>> not able to modify the settings.

> > >>>

> > >>> What am I missing?

> > >>>

> > >>> Thanks in advance,

> > >>>

> > >>> -andy-

> >

[Guest Jeff Pitsch]

Re: Client can't modify local Internet Options

 

Be aware this is weird first of all but IE enhanced security can cause

other issues as well. You may have opened up a hornets nest....

 

Jeff Pitsch

Microsoft MVP - Terminal Server

Citrix Technology Professional

Provision Networks VIP

 

Forums not enough?

Get support from the experts at your business

http://jeffpitschconsulting.com

 

azevon wrote:

> Problem Solved - I had to enable IE Enhanced Security Configuration in

> Add/Remove Programs, for users.

>

> Thanks for everyone's help!

>

> "azevon" wrote:

>

>> Hi Jeff - considering I'm a one man show, no one has played with any

>> settings. A few weeks ago I added users, and they can easily add/remove

>> trusted sites. Only thing I did, was perform MS server updates via Windows

>> Update. I am assuming this changed some sort of policy settings. I ran RSOP

>> on 2 users - 1 that works and 1 that doesn't. I see no differences in their

>> configs. Also, not that I think it matters, but I'm not using AD. I also

>> disabled the setting that Vera suggested, but these users still don"t have

>> rights.

>>

>> "Jeff Pitsch" wrote:

>>

>>> Someone has started applying Group Policies that affect the IE control

>>> panel. You need to use RSOP (resultant set of policies) to figure out

>>> which one is doing it. Before that htough you need to get with your

>>> team (or the AD team or whoever) to find out why they have locked this

>>> down.

>>>

>>>

>>>

>>> azevon wrote:

>>>> I am in Group Policy - what needs to be modified? Why would this happen

>>>> after creating other users that didn't have this restriction?

>>>>

>>>> Thanks for your help.

>>>>

>>>> "Jeff Pitsch" wrote:

>>>>

>>>>> Group Policy.....

>>>>>

>>>>> Jeff Pitsch

>>>>> Microsoft MVP - Terminal Server

>>>>> Citrix Technology Professional

>>>>> Provision Networks VIP

>>>>>

>>>>> Forums not enough?

>>>>> Get support from the experts at your business

>>>>> http://jeffpitschconsulting.com

>>>>>

>>>>> azevon wrote:

>>>>>> Greetings All,

>>>>>>

>>>>>> I'm running a Windows 2003SP2 TS server with Citrix Meteframe 3.0.

>>>>>>

>>>>>> In the past, I have successfully added users (using computer

>>>>>> management\local users & groups) and then added them into the group "Remote

>>>>>> Desktop Users"

>>>>>>

>>>>>> Then I have successfully logged onto this server via a citrix client (or TS

>>>>>> client), and modified that user"s Internet Option Security tab (my goal is to

>>>>>> add my local UNC paths into trusted local intranet sites).

>>>>>>

>>>>>> Butr suddenly, when I add a new user onto the server (and give them the same

>>>>>> rights as old users), when I log on as that user remotely, the icons in the

>>>>>> IE Security tab are grayed out, with grayed locked keys on top of them. I am

>>>>>> not able to modify the settings.

>>>>>>

>>>>>> What am I missing?

>>>>>>

>>>>>> Thanks in advance,

>>>>>>

>>>>>> -andy-