Guest azevon Posted July 24, 2007 Posted July 24, 2007 Greetings All, I'm running a Windows 2003SP2 TS server with Citrix Meteframe 3.0. In the past, I have successfully added users (using computer management\local users & groups) and then added them into the group "Remote Desktop Users" Then I have successfully logged onto this server via a citrix client (or TS client), and modified that user"s Internet Option Security tab (my goal is to add my local UNC paths into trusted local intranet sites). Butr suddenly, when I add a new user onto the server (and give them the same rights as old users), when I log on as that user remotely, the icons in the IE Security tab are grayed out, with grayed locked keys on top of them. I am not able to modify the settings. What am I missing? Thanks in advance, -andy-
Guest Jeff Pitsch Posted July 24, 2007 Posted July 24, 2007 Re: Client can't modify local Internet Options Group Policy..... Jeff Pitsch Microsoft MVP - Terminal Server Citrix Technology Professional Provision Networks VIP Forums not enough? Get support from the experts at your business http://jeffpitschconsulting.com azevon wrote: > Greetings All, > > I'm running a Windows 2003SP2 TS server with Citrix Meteframe 3.0. > > In the past, I have successfully added users (using computer > management\local users & groups) and then added them into the group "Remote > Desktop Users" > > Then I have successfully logged onto this server via a citrix client (or TS > client), and modified that user"s Internet Option Security tab (my goal is to > add my local UNC paths into trusted local intranet sites). > > Butr suddenly, when I add a new user onto the server (and give them the same > rights as old users), when I log on as that user remotely, the icons in the > IE Security tab are grayed out, with grayed locked keys on top of them. I am > not able to modify the settings. > > What am I missing? > > Thanks in advance, > > -andy-
Guest azevon Posted July 24, 2007 Posted July 24, 2007 Re: Client can't modify local Internet Options I am in Group Policy - what needs to be modified? Why would this happen after creating other users that didn't have this restriction? Thanks for your help. "Jeff Pitsch" wrote: > Group Policy..... > > Jeff Pitsch > Microsoft MVP - Terminal Server > Citrix Technology Professional > Provision Networks VIP > > Forums not enough? > Get support from the experts at your business > http://jeffpitschconsulting.com > > azevon wrote: > > Greetings All, > > > > I'm running a Windows 2003SP2 TS server with Citrix Meteframe 3.0. > > > > In the past, I have successfully added users (using computer > > management\local users & groups) and then added them into the group "Remote > > Desktop Users" > > > > Then I have successfully logged onto this server via a citrix client (or TS > > client), and modified that user"s Internet Option Security tab (my goal is to > > add my local UNC paths into trusted local intranet sites). > > > > Butr suddenly, when I add a new user onto the server (and give them the same > > rights as old users), when I log on as that user remotely, the icons in the > > IE Security tab are grayed out, with grayed locked keys on top of them. I am > > not able to modify the settings. > > > > What am I missing? > > > > Thanks in advance, > > > > -andy- >
Guest Vera Noest [MVP] Posted July 24, 2007 Posted July 24, 2007 Re: Client can't modify local Internet Options As Jeff wrote, greyed out options usually mean that a Group Policy has enforced the settings. Use Resultant Set of Policies for this user on this Terminal Server to see which policies are affecting the user. Chances are that someone created a policy higher up in the forest which enforces these settings, most likely by enabling this setting: Computer Configuration - Administrative templates - Windows Components - Internet Explorer "Security zones: Do not allow users to change policies" _________________________________________________________ Vera Noest MCSE, CCEA, Microsoft MVP - Terminal Server TS troubleshooting: http://ts.veranoest.net ___ please respond in newsgroup, NOT by private email ___ =?Utf-8?B?YXpldm9u?= <azevon@discussions.microsoft.com> wrote on 24 jul 2007 in microsoft.public.windows.terminal_services: > I am in Group Policy - what needs to be modified? Why would > this happen after creating other users that didn't have this > restriction? > > Thanks for your help. > > "Jeff Pitsch" wrote: > >> Group Policy..... >> >> Jeff Pitsch >> Microsoft MVP - Terminal Server >> Citrix Technology Professional >> Provision Networks VIP >> >> Forums not enough? >> Get support from the experts at your business >> http://jeffpitschconsulting.com >> >> azevon wrote: >> > Greetings All, >> > >> > I'm running a Windows 2003SP2 TS server with Citrix Meteframe >> > 3.0. >> > >> > In the past, I have successfully added users (using computer >> > management\local users & groups) and then added them into the >> > group "Remote Desktop Users" >> > >> > Then I have successfully logged onto this server via a citrix >> > client (or TS client), and modified that user"s Internet >> > Option Security tab (my goal is to add my local UNC paths >> > into trusted local intranet sites). >> > >> > Butr suddenly, when I add a new user onto the server (and >> > give them the same rights as old users), when I log on as >> > that user remotely, the icons in the IE Security tab are >> > grayed out, with grayed locked keys on top of them. I am >> > not able to modify the settings. >> > >> > What am I missing? >> > >> > Thanks in advance, >> > >> > -andy-
Guest Jeff Pitsch Posted July 24, 2007 Posted July 24, 2007 Re: Client can't modify local Internet Options Someone has started applying Group Policies that affect the IE control panel. You need to use RSOP (resultant set of policies) to figure out which one is doing it. Before that htough you need to get with your team (or the AD team or whoever) to find out why they have locked this down. azevon wrote: > I am in Group Policy - what needs to be modified? Why would this happen > after creating other users that didn't have this restriction? > > Thanks for your help. > > "Jeff Pitsch" wrote: > >> Group Policy..... >> >> Jeff Pitsch >> Microsoft MVP - Terminal Server >> Citrix Technology Professional >> Provision Networks VIP >> >> Forums not enough? >> Get support from the experts at your business >> http://jeffpitschconsulting.com >> >> azevon wrote: >>> Greetings All, >>> >>> I'm running a Windows 2003SP2 TS server with Citrix Meteframe 3.0. >>> >>> In the past, I have successfully added users (using computer >>> management\local users & groups) and then added them into the group "Remote >>> Desktop Users" >>> >>> Then I have successfully logged onto this server via a citrix client (or TS >>> client), and modified that user"s Internet Option Security tab (my goal is to >>> add my local UNC paths into trusted local intranet sites). >>> >>> Butr suddenly, when I add a new user onto the server (and give them the same >>> rights as old users), when I log on as that user remotely, the icons in the >>> IE Security tab are grayed out, with grayed locked keys on top of them. I am >>> not able to modify the settings. >>> >>> What am I missing? >>> >>> Thanks in advance, >>> >>> -andy-
Guest azevon Posted July 25, 2007 Posted July 25, 2007 Re: Client can't modify local Internet Options Hi Jeff - considering I'm a one man show, no one has played with any settings. A few weeks ago I added users, and they can easily add/remove trusted sites. Only thing I did, was perform MS server updates via Windows Update. I am assuming this changed some sort of policy settings. I ran RSOP on 2 users - 1 that works and 1 that doesn't. I see no differences in their configs. Also, not that I think it matters, but I'm not using AD. I also disabled the setting that Vera suggested, but these users still don"t have rights. "Jeff Pitsch" wrote: > Someone has started applying Group Policies that affect the IE control > panel. You need to use RSOP (resultant set of policies) to figure out > which one is doing it. Before that htough you need to get with your > team (or the AD team or whoever) to find out why they have locked this > down. > > > > azevon wrote: > > I am in Group Policy - what needs to be modified? Why would this happen > > after creating other users that didn't have this restriction? > > > > Thanks for your help. > > > > "Jeff Pitsch" wrote: > > > >> Group Policy..... > >> > >> Jeff Pitsch > >> Microsoft MVP - Terminal Server > >> Citrix Technology Professional > >> Provision Networks VIP > >> > >> Forums not enough? > >> Get support from the experts at your business > >> http://jeffpitschconsulting.com > >> > >> azevon wrote: > >>> Greetings All, > >>> > >>> I'm running a Windows 2003SP2 TS server with Citrix Meteframe 3.0. > >>> > >>> In the past, I have successfully added users (using computer > >>> management\local users & groups) and then added them into the group "Remote > >>> Desktop Users" > >>> > >>> Then I have successfully logged onto this server via a citrix client (or TS > >>> client), and modified that user"s Internet Option Security tab (my goal is to > >>> add my local UNC paths into trusted local intranet sites). > >>> > >>> Butr suddenly, when I add a new user onto the server (and give them the same > >>> rights as old users), when I log on as that user remotely, the icons in the > >>> IE Security tab are grayed out, with grayed locked keys on top of them. I am > >>> not able to modify the settings. > >>> > >>> What am I missing? > >>> > >>> Thanks in advance, > >>> > >>> -andy- >
Guest azevon Posted July 25, 2007 Posted July 25, 2007 Re: Client can't modify local Internet Options Problem Solved - I had to enable IE Enhanced Security Configuration in Add/Remove Programs, for users. Thanks for everyone's help! "azevon" wrote: > Hi Jeff - considering I'm a one man show, no one has played with any > settings. A few weeks ago I added users, and they can easily add/remove > trusted sites. Only thing I did, was perform MS server updates via Windows > Update. I am assuming this changed some sort of policy settings. I ran RSOP > on 2 users - 1 that works and 1 that doesn't. I see no differences in their > configs. Also, not that I think it matters, but I'm not using AD. I also > disabled the setting that Vera suggested, but these users still don"t have > rights. > > "Jeff Pitsch" wrote: > > > Someone has started applying Group Policies that affect the IE control > > panel. You need to use RSOP (resultant set of policies) to figure out > > which one is doing it. Before that htough you need to get with your > > team (or the AD team or whoever) to find out why they have locked this > > down. > > > > > > > > azevon wrote: > > > I am in Group Policy - what needs to be modified? Why would this happen > > > after creating other users that didn't have this restriction? > > > > > > Thanks for your help. > > > > > > "Jeff Pitsch" wrote: > > > > > >> Group Policy..... > > >> > > >> Jeff Pitsch > > >> Microsoft MVP - Terminal Server > > >> Citrix Technology Professional > > >> Provision Networks VIP > > >> > > >> Forums not enough? > > >> Get support from the experts at your business > > >> http://jeffpitschconsulting.com > > >> > > >> azevon wrote: > > >>> Greetings All, > > >>> > > >>> I'm running a Windows 2003SP2 TS server with Citrix Meteframe 3.0. > > >>> > > >>> In the past, I have successfully added users (using computer > > >>> management\local users & groups) and then added them into the group "Remote > > >>> Desktop Users" > > >>> > > >>> Then I have successfully logged onto this server via a citrix client (or TS > > >>> client), and modified that user"s Internet Option Security tab (my goal is to > > >>> add my local UNC paths into trusted local intranet sites). > > >>> > > >>> Butr suddenly, when I add a new user onto the server (and give them the same > > >>> rights as old users), when I log on as that user remotely, the icons in the > > >>> IE Security tab are grayed out, with grayed locked keys on top of them. I am > > >>> not able to modify the settings. > > >>> > > >>> What am I missing? > > >>> > > >>> Thanks in advance, > > >>> > > >>> -andy- > >
Guest Jeff Pitsch Posted July 25, 2007 Posted July 25, 2007 Re: Client can't modify local Internet Options Be aware this is weird first of all but IE enhanced security can cause other issues as well. You may have opened up a hornets nest.... Jeff Pitsch Microsoft MVP - Terminal Server Citrix Technology Professional Provision Networks VIP Forums not enough? Get support from the experts at your business http://jeffpitschconsulting.com azevon wrote: > Problem Solved - I had to enable IE Enhanced Security Configuration in > Add/Remove Programs, for users. > > Thanks for everyone's help! > > "azevon" wrote: > >> Hi Jeff - considering I'm a one man show, no one has played with any >> settings. A few weeks ago I added users, and they can easily add/remove >> trusted sites. Only thing I did, was perform MS server updates via Windows >> Update. I am assuming this changed some sort of policy settings. I ran RSOP >> on 2 users - 1 that works and 1 that doesn't. I see no differences in their >> configs. Also, not that I think it matters, but I'm not using AD. I also >> disabled the setting that Vera suggested, but these users still don"t have >> rights. >> >> "Jeff Pitsch" wrote: >> >>> Someone has started applying Group Policies that affect the IE control >>> panel. You need to use RSOP (resultant set of policies) to figure out >>> which one is doing it. Before that htough you need to get with your >>> team (or the AD team or whoever) to find out why they have locked this >>> down. >>> >>> >>> >>> azevon wrote: >>>> I am in Group Policy - what needs to be modified? Why would this happen >>>> after creating other users that didn't have this restriction? >>>> >>>> Thanks for your help. >>>> >>>> "Jeff Pitsch" wrote: >>>> >>>>> Group Policy..... >>>>> >>>>> Jeff Pitsch >>>>> Microsoft MVP - Terminal Server >>>>> Citrix Technology Professional >>>>> Provision Networks VIP >>>>> >>>>> Forums not enough? >>>>> Get support from the experts at your business >>>>> http://jeffpitschconsulting.com >>>>> >>>>> azevon wrote: >>>>>> Greetings All, >>>>>> >>>>>> I'm running a Windows 2003SP2 TS server with Citrix Meteframe 3.0. >>>>>> >>>>>> In the past, I have successfully added users (using computer >>>>>> management\local users & groups) and then added them into the group "Remote >>>>>> Desktop Users" >>>>>> >>>>>> Then I have successfully logged onto this server via a citrix client (or TS >>>>>> client), and modified that user"s Internet Option Security tab (my goal is to >>>>>> add my local UNC paths into trusted local intranet sites). >>>>>> >>>>>> Butr suddenly, when I add a new user onto the server (and give them the same >>>>>> rights as old users), when I log on as that user remotely, the icons in the >>>>>> IE Security tab are grayed out, with grayed locked keys on top of them. I am >>>>>> not able to modify the settings. >>>>>> >>>>>> What am I missing? >>>>>> >>>>>> Thanks in advance, >>>>>> >>>>>> -andy-
Recommended Posts