Managing file downloads via AD How are you doing it !!

[mullet_man]

You could try adding this Linguascope in as a trusted site in GP, and allow file downloads for that trusted site.

 

We are currently doing this for the DIDA site. We deny all file downloads from every site expect DIDA.

 

 

Started to work this route, we have DIDA also, hence original question.

However I have hit a problem, having had file downloads (Pupil policy only) disabled for some time I changed the GP to enable downloads as a starting point but I cannot get file downloading enabled again !!

Looked at the policy for ages, ran Gpupdate, Group Policy Modeling,

All show downloads enabled, IE zones at default settings. Have tried copying profile from working user to default user profile on a test PC but has no effect. - having some senior moments here !! what am I missing ??

 

Roger

 

I hit a similer problem as well, make sure you don't have " Disable Save this program to disk option" disabled as well. So it would come to the point of do you want to save or open this file it would just say "restricted"

 

I had a few moments as well, but it was that setting getting in the way.

 

Also are you using the "Site To Zone Assignment" list to put in this site as a Trusted Site?

[ChrisH]

Thats the setting I was waffling on about mullet I knew there was another one somewhere

[mullet_man]

Thats the setting I was waffling on about mullet I knew there was another one somewhere

 

Yeah its a bit confussing because it should say file download instead of program.

 

Cause this setting is the save dialog box, when you download any file.

[Roger]

Doesn`t appear to be that setting fellas, it was enabled but changing has not had any effect, did run a gpupdate after changing - back to the drawing board !

be obvious when its foundas usual.

 

Roger

[DMcCoy]

Doesn`t appear to be that setting fellas, it was enabled but changing has not had any effect, did run a gpupdate after changing - back to the drawing board !

be obvious when its foundas usual.

 

Roger

 

have you tried running a rsop on the machine remotely with the user logged in to see if its picked up the changes.

[mullet_man]

Doesn`t appear to be that setting fellas, it was enabled but changing has not had any effect, did run a gpupdate after changing - back to the drawing board !

be obvious when its foundas usual.

 

Roger

 

did you do a gpupdate /force?

 

Should want to restart!

 

When you visit the site it should change from Internet to Trusted Site in the bottom right hand side, does this happen?

[Roger]

Doesn`t appear to be that setting fellas, it was enabled but changing has not had any effect, did run a gpupdate after changing - back to the drawing board !

be obvious when its foundas usual.

 

Roger

 

have you tried running a rsop on the machine remotely with the user logged in to see if its picked up the changes.

 

Have just run that - something looks strange.

Internet Explorer Maintenance only shows first 3 entries

Title Bar

Connection setting

Proxy settings are all listed

URL`s/important URLs

 

No security zone settings are listed, next entry is:

administrative templates/control panel

 

Could this be the problem the Zone Settings are not being enabled ??

 

Not sure why they are not listed? keep digging

Ta, Roger

[Geoff]

Are you using Folder Redirection to redirect Application Data?

[DMcCoy]

Are you using Folder Redirection to redirect Application Data?

 

Because Geoff is probably suspecting you are, as if you do it breaks IE maintenance settings.

 

http://support.microsoft.com/?kbid=888254

[Roger]

No, not using that Fellas.

 

Brain dead now :?: (what few cells I have left), going home in 30 mins will sleep on it !!

 

Ta,

 

Roger

[mullet_man]

Do you create new group policys for each settings you make, e.g. we have a few for IE, proxy setttings, file downloads etc.

 

You might have one that is overiding the other?

[mullet_man]

You cracked it yet Roger?

[Roger]

You cracked it yet Roger?

 

 

Came in today (Sat, no interruptions!!)

Created a new policy from scatch for a test pupil, tested ok, no problems with Inet.

 

Copied changes to existing pupil policy and it worked !!

Only difference I can see is that in IE `Browser menus` ( I still have `Disable Save this program to disk option ` Enabled, the one you mentioned) but I have `Disable Open in a New Window menu option` set as `Not configured` don`t think this can be the problem, will test again, ran out of time.

 

The only other problem i have is the PC`s in one ICT room do not appear to be updating the policy to the new settings ? ran a gpupdate /force.

All other clients are updating to the new policy OK.

Thanks for help so far, going home now.

 

Roger