Enhanced Internet Security Service

[Mike Honeycutt]

I have a Windows 2003 R2 Standard Edition Terminal Server (SP2) which
is not allowing users to browse most any sites.IE Enhanced Security
was uninstalled during the original set up about 11 months ago.
Everything worked fine until about 2 weeks ago, then users started
getting the Enhanced Internet Security warning. I verified that it
did not show installed.

http://support.microsoft.com/kb/933991
Then downloaded Managing Internet Explorer Enhanced Security
Configuration
http://www.microsoft.com/downloads/...6c-e2e1-4960-99bb-9757f7e9e31b&DisplayLang=en

Checked the referenced registry keys for normal users & admins - shows
not to be installed.

I ran the script to verify it was not working
D:\>cscript IEEnhance.vbs

Microsoft (R) Windows Script Host Version 5.6

Copyright (C) Microsoft Corporation 1996-2001. All rights reserved.



The use of Internet Explorer is not restricted on this server.

Finally I used the adm file from above download to create a GPO to
disable it, which worked. However, now users can't run web based apps
from internal servers. They have no ability to set internet zones or
add sites to trusted sites.

This seems to be related to Enhanced Security showing up on it's own,
because it was not an issue before.

We finally restore the registry on the terminal server from before the
issue appeared. Un-joined and re-joined the domain, and the problem
persists.

There were no Windows updates applied to that box near the appearance
of the issue, no new group policies, etc.

Any thoughts?

 

[To Old To . . .]

RE: Enhanced Internet Security Service

Re-install enhanced security, but first click on the more button and un-check
the users. This will change their security level as needed. Then if you like
un-install it all together. A pain, but it works
Hope this helps.

"Mike Honeycutt" wrote:

> I have a Windows 2003 R2 Standard Edition Terminal Server (SP2) which
> is not allowing users to browse most any sites.IE Enhanced Security
> was uninstalled during the original set up about 11 months ago.
> Everything worked fine until about 2 weeks ago, then users started
> getting the Enhanced Internet Security warning. I verified that it
> did not show installed.
>
> http://support.microsoft.com/kb/933991
> Then downloaded Managing Internet Explorer Enhanced Security
> Configuration
> http://www.microsoft.com/downloads/...6c-e2e1-4960-99bb-9757f7e9e31b&DisplayLang=en
>
> Checked the referenced registry keys for normal users & admins - shows
> not to be installed.
>
> I ran the script to verify it was not working
> D:\>cscript IEEnhance.vbs
>
> Microsoft (R) Windows Script Host Version 5.6
>
> Copyright (C) Microsoft Corporation 1996-2001. All rights reserved.
>
>
>
> The use of Internet Explorer is not restricted on this server.
>
> Finally I used the adm file from above download to create a GPO to
> disable it, which worked. However, now users can't run web based apps
> from internal servers. They have no ability to set internet zones or
> add sites to trusted sites.
>
> This seems to be related to Enhanced Security showing up on it's own,
> because it was not an issue before.
>
> We finally restore the registry on the terminal server from before the
> issue appeared. Un-joined and re-joined the domain, and the problem
> persists.
>
> There were no Windows updates applied to that box near the appearance
> of the issue, no new group policies, etc.
>
> Any thoughts?
>
>