[gptalk] Vista - Enable Protected Mode

  • From: "Tim Bolton" <jsclmedave@xxxxxxxxx>
  • To: gptalk@xxxxxxxxxxxxx
  • Date: Tue, 19 Aug 2008 15:46:39 -0500

I am working with a new site and was setting the Internet Security Zones for
IE6 and IE7.

The GP was Linked but not enforced.  I was setting them to the Default Zone
Settings when an issue arose with access to a site for a user completing
payroll.

This turned out to be a Server Side error.  However, for a just in case
measure, the new GP was un-linked and then deleted.  I ran gpupdate /force
to clean up any issues.

We installed an ISA server about a month ago.  Since then no changes have
been made to it.


Now I am told that the Vista PCs are getting prompted to add ActiveX
controls.  When the user RT clicks they only get info not the ability to
add.  The users are able to add the site to the Trusted List and that takes
care of the prompt.

However, the users do not want to have to perform this task for every site
they go to and they are indicating that this started a couple of weeks ago,
even though they have had these Vista PCs for over a year.

I am checking ISA one more time.

I have run the modeling test with that user and all indications are that the
Default Domain policy is winning out.

However, since I am RDPing into a 2003 Server, I cannot even see the Vista
UAC settings or anything else that would affect Vista.

Would the settings to IE6 and IE7 apply to the Vista instance even though it
was not enforced?

The ONLY thing I done this last week and this week is document AND gpupdate
/force.  I am wondering if I woke up the Vista PCs..?


Any advice will be greatly appreciated...



-- 
Tim Bolton

Other related posts: