[gptalk] Re: Setting TLS/SSL for IE7 using GPP

Hi John,

 

When I was testing GPP I found quite a few bugs in the IE7 component,
especially when I was enabling/disabling subcomponents. Often it would
"forget" which setting was disabled, sometimes the component changed a
different component. Sometimes the edit session would just crash. 

 

Having said that, I have just tried to duplicate what I think you were doing
and it seemed to work OK.  I set the required settings in GPP (attached
gp1.jpg) which I assume you were applying, applied the policy, checked IE7
settings (IE1.jpg) and they seemed correct. I then reversed the policy
(GP2.jpg) and IE7 settings reversed (IE2.jpg).

 

I have recently upgraded my Policy log Reporting tool (see below) which is a
free utility for formatting the Trace log created by Group Policy
processing. It also now formats the trace logs created from GPP. So you may
like to download it and see what the trace log says. It may indicate what is
going wrong, although in my case it just said "everything worked fine". You
may like to also send me the actual Preference XML file and I can look at it
and see if there is anything strange. It sits under \\server\SYSVOL\domain
name\Policies\GUID\User\Preferences\InternetSettings. Feel free to email me
offline.

 

Ps. I also found it very "non intuitive" how you enable and disable sub
components of preferences. Why isn't it available as a right mouse click?
And you have to be smart enough to read the help file to learn that the
PF-Keys actually exist. And if you hit the wrong PF key, they all go green
or red and there is no "undo".. Maybe I should read more of the help file to
find if there is another PF key to undo the last PF Key...... I feel better
after getting that of my chest..  

 

 

Alan Cuthbertson

 

 

 Policy Management Software (Now with ADMX and Preference support):-

http://www.sysprosoft.com/index.php?ref=activedir
<http://www.sysprosoft.com/index.php?ref=activedir&f=pol_summary.shtml>
&f=pol_summary.shtml

 

ADM Template Editor(Now with ADMX support):-

http://www.sysprosoft.com/index.php?ref=activedir
<http://www.sysprosoft.com/index.php?ref=activedir&f=adm_summary.shtml>
&f=adm_summary.shtml

 

Policy Log Reporter(Free)

http://www.sysprosoft.com/index.php?ref=activedir
<http://www.sysprosoft.com/index.php?ref=activedir&f=policyreporter.shtml>
&f=policyreporter.shtml

 

 

 

 

-----Original Message-----
From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
Behalf Of Darren Mar-Elia
Sent: Tuesday, 21 October 2008 4:49 AM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] Re: Setting TLS/SSL for IE7 using GPP 

 

OK. So in RSOP does it explicitly show those settings as applying, rather

than just showing the GPO as applying?

 

Darren

 

-----Original Message-----

From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On

Behalf Of John Everyman

Sent: Monday, October 20, 2008 10:02 AM

To: gptalk@xxxxxxxxxxxxx

Subject: [gptalk] Re: Setting TLS/SSL for IE7 using GPP 

 

Hi Darren,

 

Yeah I saw that article which prompted me to investigate changing the SSL

settings via GPP as I didn't realise you could selectively ignore certain IE

settings using F5-F8! That article actually has a screenshot of the settings

I am trying to change. Use SSL2/3/TLS all have green circles and SSL2 is

unchecked. Still no dice.

 

cheers

 

-----Original Message-----

From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On

Behalf Of Darren Mar-Elia

Sent: Tuesday, 21 October 2008 3:49 AM

To: gptalk@xxxxxxxxxxxxx

Subject: [gptalk] Re: Setting TLS/SSL for IE7 using GPP 

 

It's a timely question--check out this recent GP Product team blog posting

and see if it doesn't help:

 

http://blogs.technet.com/grouppolicy/archive/2008/10/13/red-green-gp-prefere

nces-doesn-t-work-even-though-the-policy-applied-and-after-gpupdate-force.as

px

 

Darren

 

-----Original Message-----

From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On

Behalf Of John Everyman

Sent: Monday, October 20, 2008 9:43 AM

To: gptalk@xxxxxxxxxxxxx

Subject: [gptalk] Setting TLS/SSL for IE7 using GPP 

 

Hi all.

 

I am trying to disable SSL2 and enable TLS via GPP. We have IE7 deployed so

I am using the IE7 settings. I've set all settings to ignore and used F6 to

actively select the SSL/TLS settings (green circle). I've checked SSL3 and

TLS and unchecked SSL2 but after rebooting and logging in SSL2 is still

checked. I've done an RSOP and the GPO has applied. Any ideas?

 

***********************

You can unsubscribe from gptalk by sending email to

gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by

logging into the freelists.org Web interface. Archives for the list are

available at http://www.freelists.org/archives/gptalk/

************************

 

***********************

You can unsubscribe from gptalk by sending email to

gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by

logging into the freelists.org Web interface. Archives for the list are

available at http://www.freelists.org/archives/gptalk/

************************

 

***********************

You can unsubscribe from gptalk by sending email to

gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by

logging into the freelists.org Web interface. Archives for the list are

available at http://www.freelists.org/archives/gptalk/

************************

 

***********************

You can unsubscribe from gptalk by sending email to
gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by
logging into the freelists.org Web interface. Archives for the list are
available at http://www.freelists.org/archives/gptalk/

************************

Attachment: IE2.jpg
Description: JPEG image

Attachment: GP1.jpg
Description: JPEG image

Attachment: GP2.jpg
Description: JPEG image

Attachment: IE1.jpg
Description: JPEG image

Other related posts: