General discussion


Group Policy

By arief ·
My network is made of windows 2000 server and XP clients. I have created a group policy (IB) in active directory by going to User Config->Internet Explorer Maintenance ->Security->Security zone and Content Rate->content rating modify setting , and added my trusted sites and block the rest. This group policy was assign to an OU. It worked fine during test, But after a week I noticed some users in OU are getting by the policy. I checked again, policy is there but it would not take effect. I had to enable it locally at each machine thru IE content advisor. I have updated group policy on local machine, there is no other policy on that OU, the group policy is marked with no override, block policy inheritance is marked. Why the policy is not forced thru the domain?
Thanks for your help.

This conversation is currently closed to new comments.

Thread display: Collapse - | Expand +

All Comments

Collapse -

by CG IT In reply to Group Policy

this is more of a suggestion than an answer to why your GP isn't being applied to users.

Open your GP MMC, under computer configuration, adimistrative templates, Windows Components, internet explorer, in the right pane, configure the security zones machine only, do not allow users to change policies, do not allow users to add/delete sites.

This will apply to to the machines and not users. The User Configuration ,Internet Explorer maintenance, security GP settings are import, modify and apply to users but users still can modifing the security content and ratings settings on the machine. Then on any machine, the user is blocked from making changes to internet explores. OR you can disable users from changing IE by greyout the tools option in IE.

Related Discussions

Related Forums