+ Post New Thread
Results 1 to 13 of 13
Windows Server 2008 R2 Thread, GPO third party cookies in Technical; Hello, Can anyone advise me on how to disable third party cookies with internet explorer 10 using Group policy either ...
  1. #1

    Join Date
    Jul 2013
    Posts
    10
    Thank Post
    1
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Angry GPO third party cookies

    Hello,

    Can anyone advise me on how to disable third party cookies with internet explorer 10 using Group policy either a registry tweak or a GPO add in ?

    Thank you

  2. #2
    themightymrp's Avatar
    Join Date
    Dec 2009
    Location
    Leeds, West Yorkshire
    Posts
    1,220
    Thank Post
    216
    Thanked 226 Times in 195 Posts
    Rep Power
    73
    If you have access to Windows 8 RSAT or Server 2012 then you can edit IE10 settings using Group Policy Preferences.

    Go to User Settings --> Preferences --> Control Panel Settings. Right click Internet Settings and choose 'New Internet Explorer 10'. Modify this policy with your necessary connection settings etc. To block the 3rd party cookies its under the Privacy tab --> Advanced button. Turn on the override automatic cookie handling and this check the radio button for blocking 3rd party cookies

  3. #3

    Join Date
    Jul 2013
    Posts
    10
    Thank Post
    1
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Nope,

    This is a server 2008 R2 server with a mixture of windows and Windows 7 Machines and also terminal server.

  4. #4
    themightymrp's Avatar
    Join Date
    Dec 2009
    Location
    Leeds, West Yorkshire
    Posts
    1,220
    Thank Post
    216
    Thanked 226 Times in 195 Posts
    Rep Power
    73
    OK. You can create a GPP for Internet Explorer 8 using the above method. Then use the XML 'hack' mentioned on this page but set the max version to 10.5.0.0

    I am assured this still works (the hack is originally to allow IE9 GPP edits)

    How to enable Group Policy Preferences support for IE9

  5. #5
    themightymrp's Avatar
    Join Date
    Dec 2009
    Location
    Leeds, West Yorkshire
    Posts
    1,220
    Thank Post
    216
    Thanked 226 Times in 195 Posts
    Rep Power
    73
    Or...... install a trial version of Windows 8, add the RSAT tools to it, edit your policy and then delete the Win 8 machine when you've finished.

    This is not the nicest method I admit

  6. #6

    Join Date
    Jul 2013
    Posts
    10
    Thank Post
    1
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    I'd rather no install Windows 8 if I can help it as I hate it to bits. Other than what you've suggested is it possible to edit the registry ?

  7. #7
    themightymrp's Avatar
    Join Date
    Dec 2009
    Location
    Leeds, West Yorkshire
    Posts
    1,220
    Thank Post
    216
    Thanked 226 Times in 195 Posts
    Rep Power
    73
    According to this KB article the info can be found in the registry. But I just looked through it and got seriously confused!

    Internet Explorer security zones registry entries for advanced users

  8. #8
    themightymrp's Avatar
    Join Date
    Dec 2009
    Location
    Leeds, West Yorkshire
    Posts
    1,220
    Thank Post
    216
    Thanked 226 Times in 195 Posts
    Rep Power
    73
    OK may have something - but TEST IT FIRST!!!! I can't guarantee this will work for you

    Using the website Diff Checker - Online diff tool to find the difference between two text files I compared a registry key export both before and after setting the override cookie/block 3rd party cookies thing.

    The first part DEFINETLY enables the override default cookie handling. The next 2 parts seem to be what the result is of checking "block 3rd party cookies"

    Code:
    Windows Registry Editor Version 5.00
    
    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
    "PrivacyAdvanced"=dword:00000001
    
    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3]
    "{AEBA21FA-782A-4A90-978D-B72164C80120}"=hex:1a,37,61,59,23,52,35,0c,7a,5f,20,\
      17,2f,1e,1a,19,0e,2b,01,73,13,37,13,12,14,1a,15,2a
    "{A8A88C49-5EB2-4990-A1A2-0876022C854F}"=hex:1a,37,61,59,23,52,35,0c,7a,5f,20,\
      17,2f,1e,1a,19,0e,2b,01,73,13,37,13,12,14,1a,15,39

  9. #9

    Join Date
    Jul 2013
    Posts
    10
    Thank Post
    1
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Nice that's works perfect. One further question where would I find the registry key for enabling session cookies ?

  10. #10
    themightymrp's Avatar
    Join Date
    Dec 2009
    Location
    Leeds, West Yorkshire
    Posts
    1,220
    Thank Post
    216
    Thanked 226 Times in 195 Posts
    Rep Power
    73
    It just needs the values of two of those keys changing. The full settings you should need are:

    Code:
    Windows Registry Editor Version 5.00
    
    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
    "PrivacyAdvanced"=dword:00000001
    
    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3]
    "{AEBA21FA-782A-4A90-978D-B72164C80120}"=hex:1a,37,61,59,23,52,35,0c,7a,5f,20,\
      17,2f,1e,1a,19,0e,2b,01,73,13,37,13,12,14,1a,15,2a,4e,2c,08,0d,20,1b,28,18,\
      36,32
    "{A8A88C49-5EB2-4990-A1A2-0876022C854F}"=hex:1a,37,61,59,23,52,35,0c,7a,5f,20,\
      17,2f,1e,1a,19,0e,2b,01,73,13,37,13,12,14,1a,15,39,4e,2c,08,0d,20,1b,28,18,\
      36,32

  11. #11

    Join Date
    Jul 2013
    Posts
    10
    Thank Post
    1
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Is that compatible with IE 10 ?

  12. #12
    themightymrp's Avatar
    Join Date
    Dec 2009
    Location
    Leeds, West Yorkshire
    Posts
    1,220
    Thank Post
    216
    Thanked 226 Times in 195 Posts
    Rep Power
    73
    I'm using IE10 so I guess so

  13. #13
    themightymrp's Avatar
    Join Date
    Dec 2009
    Location
    Leeds, West Yorkshire
    Posts
    1,220
    Thank Post
    216
    Thanked 226 Times in 195 Posts
    Rep Power
    73
    Can you confirm if this worked for you? I just want to know for future reference if I ever need to do the same....

    Cheers

SHARE:
+ Post New Thread

Similar Threads

  1. Replies: 1
    Last Post: 27th September 2011, 12:30 PM
  2. Third Party Software Deployment
    By sqdge in forum Windows
    Replies: 21
    Last Post: 14th January 2011, 07:29 PM
  3. SIMS: Third Party access SDK documentation
    By peterteckhokgoh in forum MIS Systems
    Replies: 1
    Last Post: 14th August 2007, 10:50 AM
  4. GPO or Third Party Solution
    By edsa in forum Network and Classroom Management
    Replies: 7
    Last Post: 16th April 2007, 08:09 PM

Thread Information

Users Browsing this Thread

There are currently 2 users browsing this thread. (0 members and 2 guests)

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •