Stop file downloads though GPO.

[boomam]

Hi.
AGES ago i enabled a setting that prevented people from downloading things from the internet.
Last friday i decided to change it so people could download from our VLE, AQA & Edexcel.
Problem is that on some machines the previously set GPO still stops them. But for the life of me, i cant find where that setting is!? lol.

Ideas?

[boomam]

Ive found the setting, its here:
administrative templates\windows components\internet explorer\security features\restrict file downloads.

Problem is, that i cant see it enabled in any of my GPOs?

Ideas?

Ive got the trusted sites set to the only sites i want downloads to be from, and things like intranet/trusted set to allow, and the internet/restricted set to disallow.
That coupled with file restrictions on their storage areas will make them downloading what they shouldnt do pretty bullet proof im thinking.

[mark]

Do you have to specifically disable it to push out a change, merely changing it to not configured isn't enough IIRC

Plus I think there's a companion setting

[boomam]

Care to share?

[boomam]

This is really getting on my wick now.
A computer im using for testing, works as intended for staff users, with them only able to download from sites in the trusted list.
But pupils still cant download. .

Plus, on top of that, in the rooms which have custom GPOs as they are completely different systems/software setups, neither work!

Any ideas?

[boomam]

Fixed the problem rooms, but again, for staff only.

The pupil accounts still have the problem. .

Ideas?

[kennysarmy]

Fixed the problem rooms, but again, for staff only.

The pupil accounts still have the problem. .

Ideas?

Does running the "Group Policy Management" tool on a client not show you which policy is still being applied....

[boomam]

All fixed!
Unfortunatelly ive had to scrap the idea for the time being. .

Theres LOADS of website i'd have to enter into the trusted list, and it also brings up a box to allow/disallow access on each entry to the page.
Based on the massive amount of work there is, ive got the two policys set to disabled.
With the file filtering from R2, they cant save anything nasty to the network itself.
But MIME based filtering im gonna have to shelve till i get the ISA up and running again. So until then, the kids can technically download what they want to their sticks.