Re: Managing IE6 in a Terminal Services Environment

[Guest Robert Aldwinckle]

Re: Managing IE6 in a Terminal Services Environment

 

(cross-post added to Terminal Services)

"cbrunet" <darthkorn@gmail.com> wrote in message

news:1189795395.919551.256720@r34g2000hsd.googlegroups.com...

> Greetings all,

>

> I'm having some issues trying to manage Internet Explorer 6 through

> Group Policy. I've setup a new GPO and associated it with the OU I

> want. I've then gone User Configuration -> Administrative Templates -

>> Windows Components -> Internet Explorer -> Internet Control Panel ->

> Security Page and enabled the group policy Site to Zone Assignment

> list. I've added the sites I wish to add to the local Intranet, and

> exited.

>

> Now, when I log onto the desktop of the associated system as

> administrator, my IE settings come across. I go Tools -> Internet

> Options, then the security tab, I select the Local Intranet sites and

> all of my addresses I added are there. I can then freely browse any

> of the sites I wish, but I cannot add new sites. Not a big deal since

> I am looking to lock all of this information down anyways.

 

 

Looks like you need to know how to change that (at least temporarily)?

I would try running ProcMon (or even just RegMon) looking for clues

in the registry keys and values iexplore.exe accesses when you try that.

 

>

> My problem is is that when I log in as a user, I get nothing in the

> Local Intranet sites.

 

 

I don't really understand IE in the TS environment. If it's running on a different

machine, when you open Internet Options whose settings will you be looking at?

ProcMon would undoubtedly clarify that question too.

 

BTW make sure that you are doing this on a test system and not a production

server. ProcMon seems to have a nasty habit of causing an occasional BSOD

for me. YMMV and I have checked lately if there is a newer version that the one

I have (1.12).

 

I'm cross-posting this to a Terminal Services NG because I think you're

more likely to find posters there who are sufficiently aware of IE than you

are here (in IE General) to find posters who are sufficiently knowledgeable

about the other aspects of your scenario. ; )

 

 

HTH

 

Robert Aldwinckle

---

 

> Not only that, but the same problem is I can't

> add new sites. So not only are all of the sites falling under the

> Internet category, but I can't even tell users to add new sites now.

> I've tried also adding these sites to the Computer Settings as well to

> no avail, but if I do a RSoP, the policies show that they are being

> applied fine. Even if I go into the registry it clearly shows that

> the values are there (HKCU\Software\Policies\Microsoft\Windows

> \CurrentVersion\InternetSettings\ZoneMapKey or HKLM for the machine

> one's).

>

> In other words, everything seems like it is set up perfectly but it is

> simply not working. The machines I am adding these settings to are

> Windows Server 2003 Application Servers running in Terminal Service

> mode. The domain is all Server 2003.

>

> I've been playing cat and mouse with this for almost 2 days now and am

> at my wits end. I could use all the suggestions in the world.

>

> -Curtis

>

[Guest cbrunet]

Re: Managing IE6 in a Terminal Services Environment

 

Re: Managing IE6 in a Terminal Services Environment

 

On Sep 15, 8:19 pm, "Robert Aldwinckle" <rob...@techemail.com> wrote:

> (cross-post added to Terminal Services)"cbrunet" <darthk...@gmail.com> wrote in message

>

> news:1189795395.919551.256720@r34g2000hsd.googlegroups.com...

>

>

>

> > Greetings all,

>

> > I'm having some issues trying to manage Internet Explorer 6 through

> > Group Policy. I've setup a new GPO and associated it with the OU I

> > want. I've then gone User Configuration -> Administrative Templates -

> >> Windows Components -> Internet Explorer -> Internet Control Panel ->

> > Security Page and enabled the group policy Site to Zone Assignment

> > list. I've added the sites I wish to add to the local Intranet, and

> > exited.

>

> > Now, when I log onto the desktop of the associated system as

> > administrator, my IE settings come across. I go Tools -> Internet

> > Options, then the security tab, I select the Local Intranet sites and

> > all of my addresses I added are there. I can then freely browse any

> > of the sites I wish, but I cannot add new sites. Not a big deal since

> > I am looking to lock all of this information down anyways.

>

> Looks like you need to know how to change that (at least temporarily)?

> I would try running ProcMon (or even just RegMon) looking for clues

> in the registry keys and values iexplore.exe accesses when you try that.

>

>

>

> > My problem is is that when I log in as a user, I get nothing in the

> > Local Intranet sites.

>

> I don't really understand IE in the TS environment. If it's running on a different

> machine, when you open Internet Options whose settings will you be looking at?

> ProcMon would undoubtedly clarify that question too.

>

> BTW make sure that you are doing this on a test system and not a production

> server. ProcMon seems to have a nasty habit of causing an occasional BSOD

> for me. YMMV and I have checked lately if there is a newer version that the one

> I have (1.12).

>

> I'm cross-posting this to a Terminal Services NG because I think you're

> more likely to find posters there who are sufficiently aware of IE than you

> are here (in IE General) to find posters who are sufficiently knowledgeable

> about the other aspects of your scenario. ; )

>

> HTH

>

> Robert Aldwinckle

> ---

>

> > Not only that, but the same problem is I can't

> > add new sites. So not only are all of the sites falling under the

> > Internet category, but I can't even tell users to add new sites now.

> > I've tried also adding these sites to the Computer Settings as well to

> > no avail, but if I do a RSoP, the policies show that they are being

> > applied fine. Even if I go into the registry it clearly shows that

> > the values are there (HKCU\Software\Policies\Microsoft\Windows

> > \CurrentVersion\InternetSettings\ZoneMapKey or HKLM for the machine

> > one's).

>

> > In other words, everything seems like it is set up perfectly but it is

> > simply not working. The machines I am adding these settings to are

> > Windows Server 2003 Application Servers running in Terminal Service

> > mode. The domain is all Server 2003.

>

> > I've been playing cat and mouse with this for almost 2 days now and am

> > at my wits end. I could use all the suggestions in the world.

>

> > -Curtis

 

I'm double checking currently to see if loopback processing is

configured properly for the GPO, but if the settings are showing up in

the registry and in the RSoP, I do not believe it could be a GPO setup

issue. The settings is there, its just not working. Both the user

and the computers are indeed in separate OU's from each other.