Monday, April 12, 2010

Internet Explorer Enhanced security runs despite being turned off

Problem:
In a Windows 2008 Terminal server non-administrative users get IE ESC prompts despite it is turned off for such users

Resolution:

Put these lines in a batch

---------------------------------------------------------------

Rundll32 iesetup.dll, IEHardenLMSettings
Rundll32 iesetup.dll, IEHardenUser
Rundll32 iesetup.dll, IEHardenAdmin

rem Optional to remove warning on first IE Run and set home page to blank or anything else.
REG DELETE "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main" /v "First Home Page" /f
REG ADD "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main" /v "Default_Page_URL" /t REG_SZ /d "about:blank" /f
REG ADD "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main" /v "Start Page" /t REG_SZ /d "about:blank" /f

---------------------------------------------------------

Use the following article to run the batch in the terminal server: http://support.microsoft.com/kb/195461

For more information about the reason for this problem, check this: http://social.technet.microsoft.com/Forums/en-US/windowsserver2008r2general/thread/c5572fc7-6e92-46f8-824d-baca246e3106

No comments:

Post a Comment