Tag Info

Hot answers tagged

19

Go to Server Manager > Configure IE ESC (under Security Information) and disable Internet Explorer Enhanced Configuration for administrators. Alternatively (and probably safer) is to either download from a workstation and save it to a share on the server or add the site in question to the trusted sites temporarily/permanently, depending on how often ...


9

A 64-bit version of Internet Explorer is available for 64-bit versions of Windows Vista/7. Nobody uses it, primarily because plug-in developers cough Adobe, specifically Flash cough will not bother writing a 64-bit version of their plug-ins, and who will browse the net if YouTube doesn't work? ;) It would work fine for opening large HTML files however. ...


9

Excellent question. Ironically, this very functionality was exposed in the older Microsoft JVM (10 years ago). Controlling Java in Internet Explorer https://blogs.msdn.com/b/ieinternals/archive/2011/05/15/controlling-java-in-internet-explorer.aspx Recently, there’s been some interest in how to control the use of Java within Internet Explorer. Java is a ...


8

Solved it (finally). http://support.microsoft.com/kb/838028 explains how Office uses Microsoft Office Protocol Discovery to determine if the document server has WebDAV capabilities. It sends a HTTP 1.1 OPTIONS request and expects a 200 OK reply detailing available DAV features. The Subversion server has (limited) DAV support and replies as such, and Office ...


8

I know of this NTLM work around for Firefox, but I am uncertain about the other browsers. 1) Open Firefox and type “about:config” in the address bar. (without the quotes of course) 2) In the ‘Filter’ field type the following “network.automatic-ntlm-auth.trusted-uris” 3) Double click the name of the preference that we just searched for 4) Enter the URLs ...


8

The only proper way of disabling browser caching is by HTTP headers from the webapp itself. The HTTP 1.1 "Cache-Control" header alone should suffice for any post-year-2000 browser. But for extra protection the server can emit both HTTP 1.1 "Cache-Control" and HTTP 1.0 "Expires" headers together. A hack'ish but sometimes seen way of handling cache ...


7

No, you cannot control FF via GPO (without an add-on or script) or update via WSUS. You may be able to push patches with SCCM, but that would be overkill if you don't have it in your environment. In short, unless you have an explicit need for FF, or something is totally incompatible with IE in your environment, stick with IE if you want ease of updates.


7

KB836941 suggests these addresses: http://*update.microsoft.com https://*update.microsoft.com http://download.windowsupdate.com Better still: http://*.microsoft.com http://*.windowsupdate.com


6

I think that you can try and use Software Restriction Policies (SRP) and deny access to "Program Files\Internet Explorer\iexplore.exe" to restrict IE. Also if you have Win2008 R2 as a DC and all of your clients have Win7, then you can use the new feature that is similar to SRP but much better and it is called AppLocker, which can also be found on the list ...


6

Do it properly, and don't use the server's browser to download software. You download software from a workstation, either "directly" to the server in question by saving to a shared folder on the server, or you download it onto your workstation and then transfer the file over. Shared folders, copy and paste through an RDP session, USB drive, or any other ...


6

You can't. Two-factor authentication with one-time passwords (OTPs?) would be the first requirement, as your keystrokes and login procedure no doubt will be recorded. This would make it harder for an attacker to reuse anything another time... ...however even if you then establish an encrypted tunnel - there is of course nothing preventing all the ...


6

Yes, temporarily disabling Update Rollups is the way to do it. You won't really be missing out on anything - it will still download the update rollups metadata, it just won't automatically approve them. Once the IE9 metadata has downloaded to your WSUS server, you can switch the auto-approval of update rollups back on if you so desire (personally the only ...


5

Just figured this out -- I forgot to give the subdomain its own IP address. More info: http://nginx.org/en/docs/http/configuring_https_servers.html#sni http://en.wikipedia.org/wiki/Server_Name_Indication


5

IE settings are located in the registry. So if you prepare .reg files for the user, he can import the new settings just by double-clicking on the files. Here are some articles that can get you started: How can I manage Internet Explorer Security Zones via the registry Internet Explorer Restriction Internet Explorer security zones registry entries for ...


5

You'll want to push these out through Group Policy. In GPME, User Configuration/Windows Settings/Internet Explorer Maintenance are some options for security and URL options. In User Configuration/Administrative Templates/Windows Components/Internet Explorer are more settings that you can customize. Since you didn't specify what level domain you're in, ...


5

Compile your list, and script the downloads with something like: $downloads = get-content C:\url.list $wc = new-object system.net.webclient $dest = "C:\updates\<filename>" $downloads | foreach{ $wc.downloadfile($_,$dest) } Now, 2 things: I confirms this works on a server with ESC enabled (like it would matter, but MS does weird stuff with ...


5

It can easily be done via a GPO. See the TechNet article for how to do this, but it is pretty easy if you understand GPOs already: Manage Favorites and Links SPECIAL THING TO NOTE ON THAT PAGE: To delete existing links: If you are a corporate administrator, select the Delete existing Favorites and Links, if present check box to delete the items on ...


5

Chrome has group policies for deployment. I just started rolling it out in our org and there is a setting in their group policy templates to have it automatically import favorites without user intervention. It also lets you set whether or not it should become the default browser, automatically install extensions, and set a whole host of other settings. It ...


4

You could accomplish this using registry hacks in your batch files, but GPO would be the appropriate and best way to go. With a GPO, you can control the the settings from being changed back by a user or rougue website. GPOs will apply every hour and 1/2 or so in most environments, whereas your scripts (I'm guessing) are more manual in nature. Here's a ...


4

Known bug. Microsoft Internet Explorer 9 was released after development for Adobe Reader X was complete. While we made every effort to anticipate the way the final release version of IE9 would behave, our PDF viewer plugin is not yet compatible with IE9. This is being worked on by our engineering department. In the interim, when trying to open a PDF ...


4

If you login over a VPN and the resulting network you are connected to has sight of your AD domain then your computer should synchronise properly. Assuming of course your computer is domain-joined and the VPN can deal with AD traffic. Usual tricks to 'synchronise' the account is to connect to VPN, then lock and unlock the computer. This will reveal whether ...


4

You can edit it directly, but you need to make sure that you're 100% correct with your syntax, otherwise the GPO won't be processed by the clients. There is no validation when you do this, so it's strongly encouraged that you use the GPMC for this rather than notepad.


4

What vendor is the SSL certificate from? I'm going to assume that it could be from a lesser known vendor that doesn't have a trusted root certificate bundled in IE8, or the machine with IE8 doesn't have the latest root certificate updates. Honestly though, this is just a guess. You haven't provided near enough information for a definitive answer. Edit: ...


4

When I accessed the website https://www.menswearireland.com from my company LAN (firewall proxy and all) I got an SSL error: VERIFY DENY: depth=0, (18) self signed certificate: "Parallels Panel" VERIFY DENY: depth=0, CommonName "Parallels Panel" does not match URL "www.menswearireland.com" This would mean that the certificate is apparently a ...


4

The only information I've been able to find on this error is from Josh Poley's MSDN blog. 1190 0x800704A6 A system shutdown has already been scheduled. ERROR_SHUTDOWN_IS_SCHEDULED However, the message implies that you get this when trying to schedule a shutdown. The only thing I can think of is that an installation/Windows update is waiting for a ...


4

I'm wondering why would you want to launch such a behemoth just to access a URL? Nevermind... Here are some things that can help: A set of command-line Windows website tools WGET for Windows (win32) cURL Those are all command line utilities that can make your life easier.


4

You sure can. In your Group Policy Editor Go to Computer Configuration > Administrative Templates > Windows Components > Internet Explorer and set Prevent performance of First Run Customize Settings to Enabled You can aso then set whether the browser will display the your default home page, or the 'Welcome to IE' page.


4

Yes of course it will protect your system (windows, office etc.). Because regular users don't have editing rights on windows and program files folders (where target files for viruses and exploits stored in). All that viruses and exploits can do in this case - infect user's profile, which can simply be fixed under Administrator's account by just deleting ...


4

No doubt that it's a better browser to use and to develop for from me, but that's only a small part of what makes a good platform in the workplace. Your admins don't so much have "a" point as they do a whole zoo full of points and a large family group of baby little pointlings all waiting to grow up into points themselves. We discussed Firefox's suitability ...



Only top voted, non community-wiki answers of a minimum length are eligible