Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Is there anyway I can reset the Advanced security settings in IE8 for all users on a 2003 terminal server without using group policy?

We are having a issue with Enhanced security showing enabled for most users but Enhanced security is not currently installed. So far resetting the security settings back to default seems to clear this.

Anyone know of another way?

share|improve this question

Sure.

Open notepad, and copy/paste the following into the file:

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"IEHardenIENoWarn"=dword:00000000

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IEHarden"=dword:00000000

Save the file as "IEHardenFix.reg" in a directory that all users have access to. In my case, I used my "Scripts" directory, but the %systemroot%\system32 works too.

Then, modify %systemroot%\system32\usrlogon.cmd. At the end, after the line that contains ":DONE" add a new line that looks like this:

regedit /s "%systemroot%\system32\IEHardenFix.reg"

Save and close the usrlogon.cmd file.

Now, when the users log on, this reg file will be silently imported into their registry, disabling the Enhanced Security Configuration for that user.

Hope this helps,

Glenn

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.