+ Post New Thread
Results 1 to 15 of 15
Windows Thread, Policy problem in Technical; I am now having a problem whereby a setting that was once in the group policy, but no longer is, ...
  1. #1

    localzuk's Avatar
    Join Date
    Dec 2006
    Location
    Minehead
    Posts
    17,617
    Thank Post
    514
    Thanked 2,442 Times in 1,890 Posts
    Blog Entries
    24
    Rep Power
    831

    Policy problem

    I am now having a problem whereby a setting that was once in the group policy, but no longer is, still seems to be plaguing the machines.

    The setting in particular is 'User Config -> Windows Settings -> Internet Explorer Maintenance -> Security ->Security Zones and Content Ratings'

    The Content Ratings settings was enabled and the 'Users can see sites that have no rating' unticked. So all users were having issues getting to the majority of websites unless the supervisor password was entered. I have now selected the 'Do not customize Content Ratings' option. About 70% of users seem to be able to browse without being bugged by that box now, but the rest still get it.

    I have tried forcing policy updates but this makes no difference.

    What am I missing?

    Cheers
    Tony

  2. #2

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,803
    Thank Post
    110
    Thanked 583 Times in 504 Posts
    Blog Entries
    1
    Rep Power
    224

    Re: Policy problem

    Upgraded to IE7?

  3. #3

    localzuk's Avatar
    Join Date
    Dec 2006
    Location
    Minehead
    Posts
    17,617
    Thank Post
    514
    Thanked 2,442 Times in 1,890 Posts
    Blog Entries
    24
    Rep Power
    831

    Re: Policy problem

    No. I am avoiding that until I am forced to.

  4. #4
    ChrisH's Avatar
    Join Date
    Jun 2005
    Location
    East Lancs
    Posts
    4,999
    Thank Post
    120
    Thanked 280 Times in 258 Posts
    Rep Power
    106

    Re: Policy problem

    I havent had any problems with IE 7 apart from getting rid of the annoying first run page.

  5. #5
    Heebeejeebee's Avatar
    Join Date
    Nov 2006
    Location
    Intergalactic Cruise
    Posts
    1,050
    Thank Post
    68
    Thanked 75 Times in 59 Posts
    Rep Power
    34

    Re: Policy problem

    Quote Originally Posted by ChrisH
    I havent had any problems with IE 7 apart from getting rid of the annoying first run page.
    Did you get rid of it? If so how?

    I managed to get around it by filling it in using my favourite "test" user profile, logging out and then saving the profle back as the default, but an easier way would be nice.

    HBJB

  6. #6

    john's Avatar
    Join Date
    Sep 2005
    Location
    London
    Posts
    10,507
    Thank Post
    1,492
    Thanked 1,050 Times in 919 Posts
    Rep Power
    302

    Re: Policy problem

    GP has an option to get rid of it, they also have one for Media Player as well

  7. #7
    Heebeejeebee's Avatar
    Join Date
    Nov 2006
    Location
    Intergalactic Cruise
    Posts
    1,050
    Thank Post
    68
    Thanked 75 Times in 59 Posts
    Rep Power
    34

    Re: Policy problem

    Quote Originally Posted by john
    GP has an option to get rid of it, they also have one for Media Player as well
    It must be well burried then. I'll do some digging.

    HBJB

  8. #8

    Join Date
    Jan 2007
    Location
    Hampshire
    Posts
    71
    Thank Post
    0
    Thanked 1 Time in 1 Post
    Rep Power
    0

    Re: Policy problem

    I can't picture the exact dialog you're using; but do make sure you are explicitly switching off the feature and not simply setting it back to the 'Not Set' default option.

    Other than that, anything special about the machines that are not updating? They in a different organisational unit? Will any policy changes at all update on them? I assume you've run 'gpupdate /force' (although technically that shouldn't be necessary once the refresh internval has passed anyhow). Could it be somethig silly like a DNS issue?

    Don't rush into an IE7 deployment just because of something like this. Always worth fully testing it, especially with any in-house stuff you run and to make sure your deployment strategy actually works properly.

  9. #9

    john's Avatar
    Join Date
    Sep 2005
    Location
    London
    Posts
    10,507
    Thank Post
    1,492
    Thanked 1,050 Times in 919 Posts
    Rep Power
    302

    Re: Policy problem

    HBJB the location of the one for IE7 is:
    "Computer Config - Administrative Templates - Windows Components - Internet Explorer". Its the option to Prevent performance of First Run Customize Settings. I have mine set to go straight to the home page. Works like a chalm for me. Also in there you can turn off the blasted Customer Improvement Annoy the Hell out me program.

    For Media Player, replaced the "Internet Explorer" with Media Player and that option is Do Not Show First Use Dialog Boxes, does the same thing but with WMP, again works like a chalm.

  10. #10

    Join Date
    Jan 2007
    Location
    Birmingham
    Posts
    807
    Thank Post
    29
    Thanked 36 Times in 24 Posts
    Rep Power
    26

    Re: Policy problem

    Quote Originally Posted by john
    HBJB the location of the one for IE7 is:
    "Computer Config - Administrative Templates - Windows Components - Internet Explorer". Its the option to Prevent performance of First Run Customize Settings. I have mine set to go straight to the home page. Works like a chalm for me. Also in there you can turn off the blasted Customer Improvement Annoy the Hell out me program.

    For Media Player, replaced the "Internet Explorer" with Media Player and that option is Do Not Show First Use Dialog Boxes, does the same thing but with WMP, again works like a chalm.
    You will probably find that these options wont appear on a vanilla install of server 2003. Instead you will need to either:

    a) install the administrative tools package on a workstation that has ie7 / WMP installed (a la Windows XP SP2 firewall settings) then run group policy editor.

    b) install ie7 /WMP on the server and then run the group policy editor.

    Hope this helps

  11. #11
    Heebeejeebee's Avatar
    Join Date
    Nov 2006
    Location
    Intergalactic Cruise
    Posts
    1,050
    Thank Post
    68
    Thanked 75 Times in 59 Posts
    Rep Power
    34

    Re: Policy problem

    Ta - I'll check it out when I get back from the BETT show.

    HBJB

  12. #12

    localzuk's Avatar
    Join Date
    Dec 2006
    Location
    Minehead
    Posts
    17,617
    Thank Post
    514
    Thanked 2,442 Times in 1,890 Posts
    Blog Entries
    24
    Rep Power
    831

    Re: Policy problem

    Quote Originally Posted by GeeDee
    I can't picture the exact dialog you're using; but do make sure you are explicitly switching off the feature and not simply setting it back to the 'Not Set' default option.

    Other than that, anything special about the machines that are not updating? They in a different organisational unit? Will any policy changes at all update on them? I assume you've run 'gpupdate /force' (although technically that shouldn't be necessary once the refresh internval has passed anyhow). Could it be somethig silly like a DNS issue?

    Don't rush into an IE7 deployment just because of something like this. Always worth fully testing it, especially with any in-house stuff you run and to make sure your deployment strategy actually works properly.
    The only options for this particular setting are 'Customise settings' and 'don't customise settings'. The policy has been forced using gpupdate, so it isn't that. My guess at the moment is local profiles for individual users remembering it, so I am going to be looking at deleting them tomorrow.

    Also, I have no intention of deploying IE7 as yet - our staff would scream blue murder if I did - 'It looks different!!'.

  13. #13

    localzuk's Avatar
    Join Date
    Dec 2006
    Location
    Minehead
    Posts
    17,617
    Thank Post
    514
    Thanked 2,442 Times in 1,890 Posts
    Blog Entries
    24
    Rep Power
    831

    Re: Policy problem

    Well it appears to be that most items in the GPO have 3 options: Enabled, Disabled, Not Configured. This particular setting appears to have only the equivalent of enabled and not configured. So when it was enabled, choosing the other option leaves those settings in place.

    So the solution was to edit all the settings to allow anything to be accessed without a password and leave it enabled.

    Stupid software.

  14. #14
    mortstar's Avatar
    Join Date
    Jan 2007
    Location
    Oxford
    Posts
    341
    Thank Post
    12
    Thanked 29 Times in 18 Posts
    Rep Power
    21

    Re: Policy problem

    Quote Originally Posted by john
    HBJB the location of the one for IE7 is:
    "Computer Config - Administrative Templates - Windows Components - Internet Explorer". Its the option to Prevent performance of First Run Customize Settings. I have mine set to go straight to the home page. Works like a chalm for me. Also in there you can turn off the blasted Customer Improvement Annoy the Hell out me program.

    For Media Player, replaced the "Internet Explorer" with Media Player and that option is Do Not Show First Use Dialog Boxes, does the same thing but with WMP, again works like a chalm.
    Like you say John, works perfectly with IE7. But I just can't find that policy setting for WMP10. In fact there are very few settings available for Windows Media Player in GPO edit. Any chance of u/l your wmplayer.adm file?

    Thanks

  15. #15

    john's Avatar
    Join Date
    Sep 2005
    Location
    London
    Posts
    10,507
    Thank Post
    1,492
    Thanked 1,050 Times in 919 Posts
    Rep Power
    302

    Re: Policy problem

    Are you opening the GP viewer on a machine with WMP11 installed on it? If not do it on one and you will see they magically appear

SHARE:
+ Post New Thread

Similar Threads

  1. server Group Policy editor Problem
    By DaveP in forum Windows
    Replies: 3
    Last Post: 13th December 2007, 09:17 PM
  2. Replies: 22
    Last Post: 6th July 2007, 08:56 AM
  3. problem with software access policy
    By goodhead in forum Windows
    Replies: 10
    Last Post: 23rd February 2007, 11:19 AM
  4. default computer policy problem
    By standunstan in forum Windows
    Replies: 24
    Last Post: 19th May 2006, 02:36 PM
  5. Group Policy / Kerberos problem
    By ajbritton in forum Windows
    Replies: 2
    Last Post: 25th March 2006, 06:18 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •