[gptalk] Re: Internet Explorer - Program / Manage Add-Ons / Active X controls via policy[Scanned]

  • From: "Darren Mar-Elia" <darren@xxxxxxxxxx>
  • To: <gptalk@xxxxxxxxxxxxx>
  • Date: Tue, 13 Nov 2007 07:50:55 -0800

:-). Well I keep saying it in the hopes that *someone* will fix it, that
someone being Microsoft.

Darren

-----Original Message-----
From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
Behalf Of Nelson, Jamie R Contr 72 CS/SCBAF
Sent: Tuesday, November 13, 2007 7:46 AM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Internet Explorer - Program / Manage Add-Ons / Active
X controls via policy[Scanned]

...and the award for Understatement of The Year goes to 'Darren'

"IE Maintenance policy is notoriously buggy"

Regards,
Jamie Nelson


-----Original Message-----
From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx]
On Behalf Of Darren Mar-Elia
Sent: Tuesday, November 13, 2007 9:39 AM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Internet Explorer - Program / Manage Add-Ons /
Active X controls via policy[Scanned]

IE Maintenance policy is notoriously buggy. One thing I typically tell
people to try is the to enable the per-computer policy at Computer
Config\Admin Templates\System\Group Policy\IE Maintenance Policy
Processing\Always process even if GPOs have not changed. That can
sometimes
kick-start IE Maintenance.

-----Original Message-----
From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx]
On
Behalf Of Craig Judd
Sent: Tuesday, November 13, 2007 7:39 AM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Internet Explorer - Program / Manage Add-Ons /
Active
X controls via policy[Scanned]

Darren, understood but It certainly appears that policy is being applied
to the workstations, what it now looks like is that the settings I want
to apply can't be deployed via group policy.  What I am trying to get at
is under 
USERS / WINDOWS SETTING / INTERNET EXPLORER MAINTENANCE / PROGRAMS / 
Properties you get the option to import settings, which I take, and in
there you have Manage add-ons, and its in this dialogue that I want to
disable a setting and deploy.

It appears that we can make this change on a per-user basis, but fail to
make the change globally for all users.



-----Original Message-----
From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx]
On Behalf Of Darren Mar-Elia
Sent: 13 November 2007 15:19
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Internet Explorer - Program / Manage Add-Ons /
Active X controls via policy[Scanned]

How about if you run GPMC modeling? Does it appear there? What I'm
trying to
get down to is whether it's a configuration issue or a processing issue.
If
GPMC modeling says it should be applying, then its probably a processing
issue and we can work on that. 

-----Original Message-----
From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx]
On
Behalf Of Craig Judd
Sent: Tuesday, November 13, 2007 7:01 AM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Internet Explorer - Program / Manage Add-Ons /
Active
X controls via policy[Scanned]

It's a user level setting and I cant see it anywhere in the results.

-----Original Message-----
From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx]
On Behalf Of Darren Mar-Elia
Sent: 13 November 2007 14:39
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Internet Explorer - Program / Manage Add-Ons /
Active X controls via policy[Scanned]

Craig-
Are you sure you don't have block inheritance set on an OU somewhere?
Also,
when you run GPResults, does it show your GPO getting denied or simply
not
delivered?

Darren

-----Original Message-----
From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx]
On
Behalf Of Craig Judd
Sent: Tuesday, November 13, 2007 6:38 AM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Internet Explorer - Program / Manage Add-Ons /
Active
X controls via policy[Scanned]

No 1702's some 1704's which show successful policy deployment, but it
looks like the inheritance stops prior to the user settings, or at least
this user setting, and it propagates from the default domain policy in
this instance.  Very frustrating as it should just be a simple change.

Regards
Craig

-----Original Message-----
From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx]
On Behalf Of jfvanmeter@xxxxxxxxxxx
Sent: 13 November 2007 13:58
To: gptalk@xxxxxxxxxxxxx; gptalk@xxxxxxxxxxxxx
Cc: Craig Judd
Subject: [gptalk] Re: Internet Explorer - Program / Manage Add-Ons /
Active X controls via policy[Scanned]

On the workstation are you getting 1702s in event viewer? Have you tried
deleting the group policy cache c:\windows\security\templates\policies?
I had a workstation that appeared to be getting policy correctly but the
setting was no showing up. Once I deleted the workstations cached
policies and ran gpudate /force the settings appeared in RSOP.
Hope this helps.

Take Care and Have Fun --john

 -------------- Original message ----------------------
From: "Craig Judd" <Craig.Judd@xxxxxxxxxxxxxxxxxxxxxx>
> Hi
> 
>  
> 
> We are having trouble deploying changes to IE7 for controlling the 
> active-x components that the browser manages.  We have a couple that 
> we need to disable by default, and as such would like to deploy via 
> group policy.  However attempts at trying to deploy these changes from

> the server don't seem to land on the machines they are directed at.  
> Even after several attempts at GPUPDATE, the policy changes don't 
> appear in the RSOP listing or indeed in the group policy changes /
under tools.
> 
>  
> 
> Any ideas, on how to force deployment of these browser settings?
> 
>  
> 
> Any help welcomed.
> 
>  
> 
> Regards
> 
>  
> 
> Craig Judd
> 
> ICT Network Manager
> 
>  
> 
> Parkstone Grammar School,
> 
> Sopers Lane,
> 
> Poole,
> 
> Dorset.
> 
> BH17 7EP
> 
>  
> 
> 01202 605617
> 
> 07920 523601
> 
>  
> 
> Parkstone Grammar School has taken every reasonable precaution to 
> ensure that any attachment to this email has been swept for viruses.  
> However, the school cannot accept liability for any damage sustained 
> as a result of software viruses and would advise that you carry out 
> your own virus check before opening any attachment. If you have any 
> queries please contact ICT Support at Parkstone Grammar School.
> 


Parkstone Grammar School has taken every reasonable precaution to ensure
that any 
attachment to this email has been swept for viruses.  However, the
school 
cannot accept liability for any damage sustained as a result of software

viruses and would advise that you carry out your own virus check before 
opening any attachment. If you have any queries please contact ICT
Support
at Parkstone Grammar School.
***********************
You can unsubscribe from gptalk by sending email to
gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR
by
logging into the freelists.org Web interface. Archives for the list are
available at //www.freelists.org/archives/gptalk/
************************

***********************
You can unsubscribe from gptalk by sending email to
gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR
by logging into the freelists.org Web interface. Archives for the list
are available at //www.freelists.org/archives/gptalk/
************************
***********************
You can unsubscribe from gptalk by sending email to
gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR
by
logging into the freelists.org Web interface. Archives for the list are
available at //www.freelists.org/archives/gptalk/
************************

***********************
You can unsubscribe from gptalk by sending email to
gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR
by logging into the freelists.org Web interface. Archives for the list
are available at //www.freelists.org/archives/gptalk/
************************
Parkstone Grammar School has taken every reasonable precaution to ensure
that any 
attachment to this email has been swept for viruses.  However, the
school 
cannot accept liability for any damage sustained as a result of software

viruses and would advise that you carry out your own virus check before 
opening any attachment. If you have any queries please contact ICT
Support
at Parkstone Grammar School.
***********************
You can unsubscribe from gptalk by sending email to
gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR
by
logging into the freelists.org Web interface. Archives for the list are
available at //www.freelists.org/archives/gptalk/
************************

***********************
You can unsubscribe from gptalk by sending email to
gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR
by logging into the freelists.org Web interface. Archives for the list
are available at //www.freelists.org/archives/gptalk/
************************
***********************
You can unsubscribe from gptalk by sending email to
gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by
logging into the freelists.org Web interface. Archives for the list are
available at //www.freelists.org/archives/gptalk/
************************

***********************
You can unsubscribe from gptalk by sending email to 
gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by 
logging into the freelists.org Web interface. Archives for the list are 
available at //www.freelists.org/archives/gptalk/
************************

Other related posts: