GPO third party cookies

[Matthew2013]

Hello,

 

Can anyone advise me on how to disable third party cookies with internet explorer 10 using Group policy either a registry tweak or a GPO add in ?

 

Thank you

[themightymrp]

If you have access to Windows 8 RSAT or Server 2012 then you can edit IE10 settings using Group Policy Preferences.

 

Go to User Settings --> Preferences --> Control Panel Settings. Right click Internet Settings and choose 'New Internet Explorer 10'. Modify this policy with your necessary connection settings etc. To block the 3rd party cookies its under the Privacy tab --> Advanced button. Turn on the override automatic cookie handling and this check the radio button for blocking 3rd party cookies

[Matthew2013]

Nope,

 

This is a server 2008 R2 server with a mixture of windows and Windows 7 Machines and also terminal server.

[themightymrp]

OK. You can create a GPP for Internet Explorer 8 using the above method. Then use the XML 'hack' mentioned on this page but set the max version to 10.5.0.0

 

I am assured this still works (the hack is originally to allow IE9 GPP edits)

 

How to enable Group Policy Preferences support for IE9

[themightymrp]

Or...... install a trial version of Windows 8, add the RSAT tools to it, edit your policy and then delete the Win 8 machine when you've finished.

 

This is not the nicest method I admit

[Matthew2013]

I'd rather no install Windows 8 if I can help it as I hate it to bits. Other than what you've suggested is it possible to edit the registry ?

[themightymrp]

According to this KB article the info can be found in the registry. But I just looked through it and got seriously confused!

 

Internet Explorer security zones registry entries for advanced users

[themightymrp]

OK may have something - but TEST IT FIRST!!!! I can't guarantee this will work for you

 

Using the website Diff Checker - Online diff tool to find the difference between two text files I compared a registry key export both before and after setting the override cookie/block 3rd party cookies thing.

 

The first part DEFINETLY enables the override default cookie handling. The next 2 parts seem to be what the result is of checking "block 3rd party cookies"

 

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"PrivacyAdvanced"=dword:00000001

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3]
"{AEBA21FA-782A-4A90-978D-B72164C80120}"=hex:1a,37,61,59,23,52,35,0c,7a,5f,20,\
 17,2f,1e,1a,19,0e,2b,01,73,13,37,13,12,14,1a,15,2a
"{A8A88C49-5EB2-4990-A1A2-0876022C854F}"=hex:1a,37,61,59,23,52,35,0c,7a,5f,20,\
 17,2f,1e,1a,19,0e,2b,01,73,13,37,13,12,14,1a,15,39

[Matthew2013]

Nice that's works perfect. One further question where would I find the registry key for enabling session cookies ?

[themightymrp]

It just needs the values of two of those keys changing. The full settings you should need are:

 

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"PrivacyAdvanced"=dword:00000001

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3]
"{AEBA21FA-782A-4A90-978D-B72164C80120}"=hex:1a,37,61,59,23,52,35,0c,7a,5f,20,\
 17,2f,1e,1a,19,0e,2b,01,73,13,37,13,12,14,1a,15,2a,4e,2c,08,0d,20,1b,28,18,\
 36,32
"{A8A88C49-5EB2-4990-A1A2-0876022C854F}"=hex:1a,37,61,59,23,52,35,0c,7a,5f,20,\
 17,2f,1e,1a,19,0e,2b,01,73,13,37,13,12,14,1a,15,39,4e,2c,08,0d,20,1b,28,18,\
 36,32

[Matthew2013]

Is that compatible with IE 10 ?

[themightymrp]

I'm using IE10 so I guess so

[themightymrp]

Can you confirm if this worked for you? I just want to know for future reference if I ever need to do the same....

 

Cheers

[santimac]

Hi, I got the same problem, here is my history: I wanted to enable the cookies and allow it on firts and third, via GPO, I went to my DC and enable it on the IE Settings, then I created the Registries on the Policy Edit, first like Create, then like Replace and it works!! Buuuut, I change them to Update cause on another Registry is was like that, but now the Options on the PCs on Domain is not working, I chane it again to Replace and nothing, I delete them and created again like 10 more times and NOthing!!!!!!!!! I force de GPUPDATE on DC and PC and does not WORK!!

 

ANYONE COULD HELP ME PLEASE???