Networks

Ask something
Discussion Locked

Internet Explorer Secruity Settings & GPO

0 helpful
7 replies

by cttechguy72 2 views

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
I have a user who needs to access a website that requires third party cookies. Our Group policies do not allow this since we block all access to the internet explorer secruity pages. In order to accomplish this I created a seperate OU and moved the user into this OU.I then created a seperate GPO and disabled all the settings in the User configuration\administrative templates\internet control panel to allow me to change the settings to overide automatic cookie handling. When I logged in as the user the internet explorer secruity pages were enabled and allowed me to make the changes. The user was able to access the website. The problem is now when the user logs off or restarts the machine the settings go back to the defaults and the user cant access the site. The settings will not save. am I missing a setting in the policy? I tried setting this new GPO to No override but it didnt work. Does anyone have any suggestions?

7 replies

by cg it

where in the hiearchy is the seperate OU? and to what OU is the block GPO applied? e.g. to computers or users?

sound suspiciously like the OU in which the user is in has more than 1 GPO applied to it.

by cttechguy72

I made sure that I blocked the policy from the about OU and it still didnt work correctly. The OU above is using a GPO called Lightly Managed. Its one of these microsoft common scenrios. After some further tseting I modified the Internet Explorer Maintenace options of the GPO and the settings filtered correctly to the users workstation .

by adembo

Its essential to know if you applied this by user or machine.

If that's not it, where is the policy set? Is it the default domain policy. Is that set to No overide? If that is, then you would definately get it applied.

If it is a child OU, its going to inherit the parent policy, unless you have the Block Inheratance checked, and again, the higher level policy is not set to No Overide.

Or, as the other guy said, you have conflicting policies.

Are you using 2000 or 2003? 2003 lets you test the policy to see how it will be applied.

by cttechguy72

Our default domain policy is not set to "no override". yes i installed the updated admin pack and was able to further test this to figure out the problem. I modified the Internet Explorer Maintenace options of the new policy and imported the changes to the explorer privacy tab. The settings are being applied correclty to the users workstation.

Thank you for your help and suggestions

This discussion is closed to new replies.