IE security on 2008 TS

[David]

Hi,

I have 2x 2008 Enterprise TS member servers running.

All domain users have problems browsing the web. ActiveX controls cannot be
installed (flash, java etc) because they need admin priviliges.
Ok I can live with that, but even browsing the web is hard. When they go to
a flash based site, they get a yellow message bar at the top "Your security
setting do not allow websites to use ActiveX controls installed on your
computer. This page may not display correctly. Click here for options". When
they click it, they only have a "more information" button, no "enable this
content for this site" or something like that.
I can't explain to all them that they have to add them to the trusted sites
in IE options...
Security settings for all 4 zones (Internet, Local Intranet, Trusted Sites &
Restricted Sites) is set to default. Protected mode is enabled.

Is the only way to do this, is create a GPO whith custom security settings
for the Internet zone in IE?

thanks
David

 

[Ramasamy Pullappan [MSFT]]

Re: IE security on 2008 TS

For the security settings issue, the IE newgroups will be a better place.
http://www.microsoft.com/windows/products/winfamily/ie/community.mspx

For the other issue, as you said, a non-admin cannot install teh activex
control.

-ram.

--
This posting is provided "AS IS" with no warranties, and confers no rights.

"David" <Obsession_2001@hot-mail.com> wrote in message
news:u6u49qKKJHA.456@TK2MSFTNGP06.phx.gbl...
> Hi,
>
> I have 2x 2008 Enterprise TS member servers running.
>
> All domain users have problems browsing the web. ActiveX controls cannot
> be installed (flash, java etc) because they need admin priviliges.
> Ok I can live with that, but even browsing the web is hard. When they go
> to a flash based site, they get a yellow message bar at the top "Your
> security setting do not allow websites to use ActiveX controls installed
> on your computer. This page may not display correctly. Click here for
> options". When they click it, they only have a "more information" button,
> no "enable this content for this site" or something like that.
> I can't explain to all them that they have to add them to the trusted
> sites in IE options...
> Security settings for all 4 zones (Internet, Local Intranet, Trusted Sites
> & Restricted Sites) is set to default. Protected mode is enabled.
>
> Is the only way to do this, is create a GPO whith custom security settings
> for the Internet zone in IE?
>
> thanks
> David
>