Managing IE6 in a Terminal Services Environment

  • Thread starter Thread starter cbrunet
  • Start date Start date
C

cbrunet

Guest
Greetings all,

I'm having some issues trying to manage Internet Explorer 6 through
Group Policy. I've setup a new GPO and associated it with the OU I
want. I've then gone User Configuration -> Administrative Templates -
> Windows Components -> Internet Explorer -> Internet Control Panel ->

Security Page and enabled the group policy Site to Zone Assignment
list. I've added the sites I wish to add to the local Intranet, and
exited.

Now, when I log onto the desktop of the associated system as
administrator, my IE settings come across. I go Tools -> Internet
Options, then the security tab, I select the Local Intranet sites and
all of my addresses I added are there. I can then freely browse any
of the sites I wish, but I cannot add new sites. Not a big deal since
I am looking to lock all of this information down anyways.

My problem is is that when I log in as a user, I get nothing in the
Local Intranet sites. Not only that, but the same problem is I can't
add new sites. So not only are all of the sites falling under the
Internet category, but I can't even tell users to add new sites now.
I've tried also adding these sites to the Computer Settings as well to
no avail, but if I do a RSoP, the policies show that they are being
applied fine. Even if I go into the registry it clearly shows that
the values are there (HKCU\Software\Policies\Microsoft\Windows
\CurrentVersion\InternetSettings\ZoneMapKey or HKLM for the machine
one's).

In other words, everything seems like it is set up perfectly but it is
simply not working. The machines I am adding these settings to are
Windows Server 2003 Application Servers running in Terminal Service
mode. The domain is all Server 2003.

I've been playing cat and mouse with this for almost 2 days now and am
at my wits end. I could use all the suggestions in the world.

-Curtis
 
Re: Managing IE6 in a Terminal Services Environment

Hello,

where did you link the GPO ?

i guess:
-user are in OU A
-TS server is in OU B

If you link this GPO to OU B, then you must enable the loopback processing
mode
Using Loopback Processing to Configure User Settings
http://technet2.microsoft.com/windo...151a-47b7-a6c3-92aab07c2d131033.mspx?mfr=true

Loopback processing of Group Policy
http://support.microsoft.com/kb/231287/en-us


--
Cordialement,
Mathieu CHATEAU
http://lordoftheping.blogspot.com


"cbrunet" <darthkorn@gmail.com> wrote in message
news:1189795425.939527.234860@r29g2000hsg.googlegroups.com...
> Greetings all,
>
> I'm having some issues trying to manage Internet Explorer 6 through
> Group Policy. I've setup a new GPO and associated it with the OU I
> want. I've then gone User Configuration -> Administrative Templates -
>> Windows Components -> Internet Explorer -> Internet Control Panel ->

> Security Page and enabled the group policy Site to Zone Assignment
> list. I've added the sites I wish to add to the local Intranet, and
> exited.
>
> Now, when I log onto the desktop of the associated system as
> administrator, my IE settings come across. I go Tools -> Internet
> Options, then the security tab, I select the Local Intranet sites and
> all of my addresses I added are there. I can then freely browse any
> of the sites I wish, but I cannot add new sites. Not a big deal since
> I am looking to lock all of this information down anyways.
>
> My problem is is that when I log in as a user, I get nothing in the
> Local Intranet sites. Not only that, but the same problem is I can't
> add new sites. So not only are all of the sites falling under the
> Internet category, but I can't even tell users to add new sites now.
> I've tried also adding these sites to the Computer Settings as well to
> no avail, but if I do a RSoP, the policies show that they are being
> applied fine. Even if I go into the registry it clearly shows that
> the values are there (HKCU\Software\Policies\Microsoft\Windows
> \CurrentVersion\InternetSettings\ZoneMapKey or HKLM for the machine
> one's).
>
> In other words, everything seems like it is set up perfectly but it is
> simply not working. The machines I am adding these settings to are
> Windows Server 2003 Application Servers running in Terminal Service
> mode. The domain is all Server 2003.
>
> I've been playing cat and mouse with this for almost 2 days now and am
> at my wits end. I could use all the suggestions in the world.
>
> -Curtis
>
 
Re: Managing IE6 in a Terminal Services Environment

On Sep 14, 6:18 pm, "Mathieu CHATEAU" <gollum...@free.fr> wrote:
> Hello,
>
> where did you link the GPO ?
>
> i guess:
> -user are in OU A
> -TS server is in OU B
>
> If you link this GPO to OU B, then you must enable the loopback processing
> mode
> Using Loopback Processing to Configure User Settingshttp://technet2.microsoft.com/windowsserver/en/library/33a8ff54-151a-...
>
> Loopback processing of Group Policyhttp://support.microsoft.com/kb/231287/en-us
>
> --
> Cordialement,
> Mathieu CHATEAUhttp://lordoftheping.blogspot.com
>
> "cbrunet" <darthk...@gmail.com> wrote in message
>
> news:1189795425.939527.234860@r29g2000hsg.googlegroups.com...
>
> > Greetings all,

>
> > I'm having some issues trying to manage Internet Explorer 6 through
> > Group Policy. I've setup a new GPO and associated it with the OU I
> > want. I've then gone User Configuration -> Administrative Templates -
> >> Windows Components -> Internet Explorer -> Internet Control Panel ->

> > Security Page and enabled the group policy Site to Zone Assignment
> > list. I've added the sites I wish to add to the local Intranet, and
> > exited.

>
> > Now, when I log onto the desktop of the associated system as
> > administrator, my IE settings come across. I go Tools -> Internet
> > Options, then the security tab, I select the Local Intranet sites and
> > all of my addresses I added are there. I can then freely browse any
> > of the sites I wish, but I cannot add new sites. Not a big deal since
> > I am looking to lock all of this information down anyways.

>
> > My problem is is that when I log in as a user, I get nothing in the
> > Local Intranet sites. Not only that, but the same problem is I can't
> > add new sites. So not only are all of the sites falling under the
> > Internet category, but I can't even tell users to add new sites now.
> > I've tried also adding these sites to the Computer Settings as well to
> > no avail, but if I do a RSoP, the policies show that they are being
> > applied fine. Even if I go into the registry it clearly shows that
> > the values are there (HKCU\Software\Policies\Microsoft\Windows
> > \CurrentVersion\InternetSettings\ZoneMapKey or HKLM for the machine
> > one's).

>
> > In other words, everything seems like it is set up perfectly but it is
> > simply not working. The machines I am adding these settings to are
> > Windows Server 2003 Application Servers running in Terminal Service
> > mode. The domain is all Server 2003.

>
> > I've been playing cat and mouse with this for almost 2 days now and am
> > at my wits end. I could use all the suggestions in the world.

>
> > -Curtis


I'm double checking currently to see if loopback processing is
configured properly for the GPO, but if the settings are showing up in
the registry and in the RSoP, I do not believe it could be a GPO setup
issue. The settings is there, its just not working. Both the user
and the computers are indeed in separate OU's from each other.
 
Back
Top