Internet Explorer Enhanced security runs despite being turned off

Problem:
In a Windows 2008 Terminal server non-administrative users get IE ESC prompts despite it is turned off for such users

Resolution:

Put these lines in a batch

---------------------------------------------------------------

Rundll32 iesetup.dll, IEHardenLMSettings
Rundll32 iesetup.dll, IEHardenUser
Rundll32 iesetup.dll, IEHardenAdmin

rem Optional to remove warning on first IE Run and set home page to blank or anything else.
REG DELETE "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main" /v "First Home Page" /f
REG ADD "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main" /v "Default_Page_URL" /t REG_SZ /d "about:blank" /f
REG ADD "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main" /v "Start Page" /t REG_SZ /d "about:blank" /f

---------------------------------------------------------

Use the following article to run the batch in the terminal server: http://support.microsoft.com/kb/195461

For more information about the reason for this problem, check this: http://social.technet.microsoft.com/Forums/en-US/windowsserver2008r2general/thread/c5572fc7-6e92-46f8-824d-baca246e3106

disabling adobe updater from running

Extract from: http://blog.stealthpuppy.com/deployment/deploying-adobe-reader-9-for-windows

To disable Updater from running automatically you can run the following command line as an administrator (or an elevated command prompt in Windows Vista /2008):

REG ADD "HKLM\SOFTWARE\Policies\Adobe\Acrobat Reader\9.0\FeatureLockdown" /v bUpdater /d 0 /t REG_DWORD /f

Alternatively, to completely remove Adobe Updater, after installation, delete this folder:

• C:\Program Files\Common Files\Adobe\Updater6 (32-bit Windows)


• C:\Program Files (x86)\Common Files\Adobe\Updater6 (64-bit Windows)

If Adobe Reader is running as a standard (or limited) user account, Adobe Updater won’t run at all, so it shouldn’t be an issue if you don’t give users administrative access to their workstations.

If you are virtualising Adobe Reader, then disabling or removing Updater is a must.

Cannot see more than 4GB of RAM in task manager

Problem: You have a system with Windows Vista, Windows 7 or Windows 2008 with more than 4 GB of RAM. You can see in the System Properties that there is more than 4GB but when you see the Memory value in task manager you see only 4 GB of RAM

Solution: open an elevated command line window (run as administrator) and type the command

BCDEdit /set PAE forceenable.

Reboot the machine

Word and PowerPoint documents suddenly shows unformatted text and boxes

Problem: When you open a Word or PowerPoint document which had been correctly saved days ago, some text or text boxes looks unformatted or are not displaying as you remember when the document was saved.

Troubleshooting: Check your default printer, may be it was changed to an local offline or generic printer or, if it is a network printer, it was disconnected a lot of days from the print server. Word and PowerPoint are particular reliant on Printer settings in order to show document content.

Office documents prompt for password in anonymous SharePoint site

Problem: In a SharePoint site published in the Internet as anonymous, opening Office Documents in Internet Explorer prompts for password. Pressing the Cancel button opens the file.

Solution: You can check the solution in http://www.objectsharp.com/cs/blogs/max/archive/2008/04/21/enabling-anonymous-access-on-moss-2007-wss-3-0-web-applications.aspx. We implemented it but after a while (may be weeks) the problem rose again. Trying to implement the same solution again did not work.

Our environment uses Microsoft ISA Server 2006 as firewall so we configure the http filter on the web site publishing rule so that it do not allow the verb OPTIONS. After that, the problem was solved. Using this approach, our internal users can still use the advanced features that are disabled when you implement the solution in the link above and our external users can open the files without the prompt.