Guest cbrunet Posted September 14, 2007 Posted September 14, 2007 Greetings all, I'm having some issues trying to manage Internet Explorer 6 through Group Policy. I've setup a new GPO and associated it with the OU I want. I've then gone User Configuration -> Administrative Templates - > Windows Components -> Internet Explorer -> Internet Control Panel -> Security Page and enabled the group policy Site to Zone Assignment list. I've added the sites I wish to add to the local Intranet, and exited. Now, when I log onto the desktop of the associated system as administrator, my IE settings come across. I go Tools -> Internet Options, then the security tab, I select the Local Intranet sites and all of my addresses I added are there. I can then freely browse any of the sites I wish, but I cannot add new sites. Not a big deal since I am looking to lock all of this information down anyways. My problem is is that when I log in as a user, I get nothing in the Local Intranet sites. Not only that, but the same problem is I can't add new sites. So not only are all of the sites falling under the Internet category, but I can't even tell users to add new sites now. I've tried also adding these sites to the Computer Settings as well to no avail, but if I do a RSoP, the policies show that they are being applied fine. Even if I go into the registry it clearly shows that the values are there (HKCU\Software\Policies\Microsoft\Windows \CurrentVersion\InternetSettings\ZoneMapKey or HKLM for the machine one's). In other words, everything seems like it is set up perfectly but it is simply not working. The machines I am adding these settings to are Windows Server 2003 Application Servers running in Terminal Service mode. The domain is all Server 2003. I've been playing cat and mouse with this for almost 2 days now and am at my wits end. I could use all the suggestions in the world. -Curtis
Guest Mathieu CHATEAU Posted September 14, 2007 Posted September 14, 2007 Re: Managing IE6 in a Terminal Services Environment Hello, where did you link the GPO ? i guess: -user are in OU A -TS server is in OU B If you link this GPO to OU B, then you must enable the loopback processing mode Using Loopback Processing to Configure User Settings http://technet2.microsoft.com/windowsserver/en/library/33a8ff54-151a-47b7-a6c3-92aab07c2d131033.mspx?mfr=true Loopback processing of Group Policy http://support.microsoft.com/kb/231287/en-us -- Cordialement, Mathieu CHATEAU http://lordoftheping.blogspot.com "cbrunet" <darthkorn@gmail.com> wrote in message news:1189795425.939527.234860@r29g2000hsg.googlegroups.com... > Greetings all, > > I'm having some issues trying to manage Internet Explorer 6 through > Group Policy. I've setup a new GPO and associated it with the OU I > want. I've then gone User Configuration -> Administrative Templates - >> Windows Components -> Internet Explorer -> Internet Control Panel -> > Security Page and enabled the group policy Site to Zone Assignment > list. I've added the sites I wish to add to the local Intranet, and > exited. > > Now, when I log onto the desktop of the associated system as > administrator, my IE settings come across. I go Tools -> Internet > Options, then the security tab, I select the Local Intranet sites and > all of my addresses I added are there. I can then freely browse any > of the sites I wish, but I cannot add new sites. Not a big deal since > I am looking to lock all of this information down anyways. > > My problem is is that when I log in as a user, I get nothing in the > Local Intranet sites. Not only that, but the same problem is I can't > add new sites. So not only are all of the sites falling under the > Internet category, but I can't even tell users to add new sites now. > I've tried also adding these sites to the Computer Settings as well to > no avail, but if I do a RSoP, the policies show that they are being > applied fine. Even if I go into the registry it clearly shows that > the values are there (HKCU\Software\Policies\Microsoft\Windows > \CurrentVersion\InternetSettings\ZoneMapKey or HKLM for the machine > one's). > > In other words, everything seems like it is set up perfectly but it is > simply not working. The machines I am adding these settings to are > Windows Server 2003 Application Servers running in Terminal Service > mode. The domain is all Server 2003. > > I've been playing cat and mouse with this for almost 2 days now and am > at my wits end. I could use all the suggestions in the world. > > -Curtis >
Guest cbrunet Posted September 17, 2007 Posted September 17, 2007 Re: Managing IE6 in a Terminal Services Environment On Sep 14, 6:18 pm, "Mathieu CHATEAU" <gollum...@free.fr> wrote: > Hello, > > where did you link the GPO ? > > i guess: > -user are in OU A > -TS server is in OU B > > If you link this GPO to OU B, then you must enable the loopback processing > mode > Using Loopback Processing to Configure User Settingshttp://technet2.microsoft.com/windowsserver/en/library/33a8ff54-151a-... > > Loopback processing of Group Policyhttp://support.microsoft.com/kb/231287/en-us > > -- > Cordialement, > Mathieu CHATEAUhttp://lordoftheping.blogspot.com > > "cbrunet" <darthk...@gmail.com> wrote in message > > news:1189795425.939527.234860@r29g2000hsg.googlegroups.com... > > > Greetings all, > > > I'm having some issues trying to manage Internet Explorer 6 through > > Group Policy. I've setup a new GPO and associated it with the OU I > > want. I've then gone User Configuration -> Administrative Templates - > >> Windows Components -> Internet Explorer -> Internet Control Panel -> > > Security Page and enabled the group policy Site to Zone Assignment > > list. I've added the sites I wish to add to the local Intranet, and > > exited. > > > Now, when I log onto the desktop of the associated system as > > administrator, my IE settings come across. I go Tools -> Internet > > Options, then the security tab, I select the Local Intranet sites and > > all of my addresses I added are there. I can then freely browse any > > of the sites I wish, but I cannot add new sites. Not a big deal since > > I am looking to lock all of this information down anyways. > > > My problem is is that when I log in as a user, I get nothing in the > > Local Intranet sites. Not only that, but the same problem is I can't > > add new sites. So not only are all of the sites falling under the > > Internet category, but I can't even tell users to add new sites now. > > I've tried also adding these sites to the Computer Settings as well to > > no avail, but if I do a RSoP, the policies show that they are being > > applied fine. Even if I go into the registry it clearly shows that > > the values are there (HKCU\Software\Policies\Microsoft\Windows > > \CurrentVersion\InternetSettings\ZoneMapKey or HKLM for the machine > > one's). > > > In other words, everything seems like it is set up perfectly but it is > > simply not working. The machines I am adding these settings to are > > Windows Server 2003 Application Servers running in Terminal Service > > mode. The domain is all Server 2003. > > > I've been playing cat and mouse with this for almost 2 days now and am > > at my wits end. I could use all the suggestions in the world. > > > -Curtis I'm double checking currently to see if loopback processing is configured properly for the GPO, but if the settings are showing up in the registry and in the RSoP, I do not believe it could be a GPO setup issue. The settings is there, its just not working. Both the user and the computers are indeed in separate OU's from each other.
Recommended Posts