Enhanced Internet Security Service

[Guest Mike Honeycutt]

I have a Windows 2003 R2 Standard Edition Terminal Server (SP2) which

is not allowing users to browse most any sites.IE Enhanced Security

was uninstalled during the original set up about 11 months ago.

Everything worked fine until about 2 weeks ago, then users started

getting the Enhanced Internet Security warning. I verified that it

did not show installed.

 

http://support.microsoft.com/kb/933991

Then downloaded Managing Internet Explorer Enhanced Security

Configuration

http://www.microsoft.com/downloads/details.aspx?FamilyID=d41b036c-e2e1-4960-99bb-9757f7e9e31b&DisplayLang=en

 

Checked the referenced registry keys for normal users & admins - shows

not to be installed.

 

I ran the script to verify it was not working

D:\>cscript IEEnhance.vbs

 

Microsoft ® Windows Script Host Version 5.6

 

Copyright © Microsoft Corporation 1996-2001. All rights reserved.

 

 

 

The use of Internet Explorer is not restricted on this server.

 

Finally I used the adm file from above download to create a GPO to

disable it, which worked. However, now users can't run web based apps

from internal servers. They have no ability to set internet zones or

add sites to trusted sites.

 

This seems to be related to Enhanced Security showing up on it's own,

because it was not an issue before.

 

We finally restore the registry on the terminal server from before the

issue appeared. Un-joined and re-joined the domain, and the problem

persists.

 

There were no Windows updates applied to that box near the appearance

of the issue, no new group policies, etc.

 

Any thoughts?

[Guest To Old To . . .]

RE: Enhanced Internet Security Service

 

Re-install enhanced security, but first click on the more button and un-check

the users. This will change their security level as needed. Then if you like

un-install it all together. A pain, but it works

Hope this helps.

 

"Mike Honeycutt" wrote:

> I have a Windows 2003 R2 Standard Edition Terminal Server (SP2) which

> is not allowing users to browse most any sites.IE Enhanced Security

> was uninstalled during the original set up about 11 months ago.

> Everything worked fine until about 2 weeks ago, then users started

> getting the Enhanced Internet Security warning. I verified that it

> did not show installed.

>

> http://support.microsoft.com/kb/933991

> Then downloaded Managing Internet Explorer Enhanced Security

> Configuration

> http://www.microsoft.com/downloads/details.aspx?FamilyID=d41b036c-e2e1-4960-99bb-9757f7e9e31b&DisplayLang=en

>

> Checked the referenced registry keys for normal users & admins - shows

> not to be installed.

>

> I ran the script to verify it was not working

> D:\>cscript IEEnhance.vbs

>

> Microsoft ® Windows Script Host Version 5.6

>

> Copyright © Microsoft Corporation 1996-2001. All rights reserved.

>

>

>

> The use of Internet Explorer is not restricted on this server.

>

> Finally I used the adm file from above download to create a GPO to

> disable it, which worked. However, now users can't run web based apps

> from internal servers. They have no ability to set internet zones or

> add sites to trusted sites.

>

> This seems to be related to Enhanced Security showing up on it's own,

> because it was not an issue before.

>

> We finally restore the registry on the terminal server from before the

> issue appeared. Un-joined and re-joined the domain, and the problem

> persists.

>

> There were no Windows updates applied to that box near the appearance

> of the issue, no new group policies, etc.

>

> Any thoughts?

>

>