Client can't modify local Internet Options

[azevon]

Greetings All,

I'm running a Windows 2003SP2 TS server with Citrix Meteframe 3.0.

In the past, I have successfully added users (using computer
management\local users & groups) and then added them into the group "Remote
Desktop Users"

Then I have successfully logged onto this server via a citrix client (or TS
client), and modified that user"s Internet Option Security tab (my goal is to
add my local UNC paths into trusted local intranet sites).

Butr suddenly, when I add a new user onto the server (and give them the same
rights as old users), when I log on as that user remotely, the icons in the
IE Security tab are grayed out, with grayed locked keys on top of them. I am
not able to modify the settings.

What am I missing?

Thanks in advance,

-andy-

 

[Jeff Pitsch]

Group Policy.....

Jeff Pitsch
Microsoft MVP - Terminal Server
Citrix Technology Professional
Provision Networks VIP

Forums not enough?
Get support from the experts at your business
http://jeffpitschconsulting.com

azevon wrote:
> Greetings All,
>
> I'm running a Windows 2003SP2 TS server with Citrix Meteframe 3.0.
>
> In the past, I have successfully added users (using computer
> management\local users & groups) and then added them into the group "Remote
> Desktop Users"
>
> Then I have successfully logged onto this server via a citrix client (or TS
> client), and modified that user"s Internet Option Security tab (my goal is to
> add my local UNC paths into trusted local intranet sites).
>
> Butr suddenly, when I add a new user onto the server (and give them the same
> rights as old users), when I log on as that user remotely, the icons in the
> IE Security tab are grayed out, with grayed locked keys on top of them. I am
> not able to modify the settings.
>
> What am I missing?
>
> Thanks in advance,
>
> -andy-

 

[azevon]

I am in Group Policy - what needs to be modified? Why would this happen
after creating other users that didn't have this restriction?

Thanks for your help.

"Jeff Pitsch" wrote:

> Group Policy.....
>
> Jeff Pitsch
> Microsoft MVP - Terminal Server
> Citrix Technology Professional
> Provision Networks VIP
>
> Forums not enough?
> Get support from the experts at your business
> http://jeffpitschconsulting.com
>
> azevon wrote:
> > Greetings All,
> >
> > I'm running a Windows 2003SP2 TS server with Citrix Meteframe 3.0.
> >
> > In the past, I have successfully added users (using computer
> > management\local users & groups) and then added them into the group "Remote
> > Desktop Users"
> >
> > Then I have successfully logged onto this server via a citrix client (or TS
> > client), and modified that user"s Internet Option Security tab (my goal is to
> > add my local UNC paths into trusted local intranet sites).
> >
> > Butr suddenly, when I add a new user onto the server (and give them the same
> > rights as old users), when I log on as that user remotely, the icons in the
> > IE Security tab are grayed out, with grayed locked keys on top of them. I am
> > not able to modify the settings.
> >
> > What am I missing?
> >
> > Thanks in advance,
> >
> > -andy-
>

 

[Vera Noest [MVP]]

As Jeff wrote, greyed out options usually mean that a Group Policy
has enforced the settings.
Use Resultant Set of Policies for this user on this Terminal Server
to see which policies are affecting the user.
Chances are that someone created a policy higher up in the forest
which enforces these settings, most likely by enabling this
setting:

Computer Configuration - Administrative templates - Windows
Components - Internet Explorer
"Security zones: Do not allow users to change policies"

_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
___ please respond in newsgroup, NOT by private email ___

=?Utf-8?B?YXpldm9u?= <azevon@discussions.microsoft.com> wrote on
24 jul 2007 in microsoft.public.windows.terminal_services:

> I am in Group Policy - what needs to be modified? Why would
> this happen after creating other users that didn't have this
> restriction?
>
> Thanks for your help.
>
> "Jeff Pitsch" wrote:
>
>> Group Policy.....
>>
>> Jeff Pitsch
>> Microsoft MVP - Terminal Server
>> Citrix Technology Professional
>> Provision Networks VIP
>>
>> Forums not enough?
>> Get support from the experts at your business
>> http://jeffpitschconsulting.com
>>
>> azevon wrote:
>> > Greetings All,
>> >
>> > I'm running a Windows 2003SP2 TS server with Citrix Meteframe
>> > 3.0.
>> >
>> > In the past, I have successfully added users (using computer
>> > management\local users & groups) and then added them into the
>> > group "Remote Desktop Users"
>> >
>> > Then I have successfully logged onto this server via a citrix
>> > client (or TS client), and modified that user"s Internet
>> > Option Security tab (my goal is to add my local UNC paths
>> > into trusted local intranet sites).
>> >
>> > Butr suddenly, when I add a new user onto the server (and
>> > give them the same rights as old users), when I log on as
>> > that user remotely, the icons in the IE Security tab are
>> > grayed out, with grayed locked keys on top of them. I am
>> > not able to modify the settings.
>> >
>> > What am I missing?
>> >
>> > Thanks in advance,
>> >
>> > -andy-

 

[Jeff Pitsch]

Someone has started applying Group Policies that affect the IE control
panel. You need to use RSOP (resultant set of policies) to figure out
which one is doing it. Before that htough you need to get with your
team (or the AD team or whoever) to find out why they have locked this
down.



azevon wrote:
> I am in Group Policy - what needs to be modified? Why would this happen
> after creating other users that didn't have this restriction?
>
> Thanks for your help.
>
> "Jeff Pitsch" wrote:
>
>> Group Policy.....
>>
>> Jeff Pitsch
>> Microsoft MVP - Terminal Server
>> Citrix Technology Professional
>> Provision Networks VIP
>>
>> Forums not enough?
>> Get support from the experts at your business
>> http://jeffpitschconsulting.com
>>
>> azevon wrote:
>>> Greetings All,
>>>
>>> I'm running a Windows 2003SP2 TS server with Citrix Meteframe 3.0.
>>>
>>> In the past, I have successfully added users (using computer
>>> management\local users & groups) and then added them into the group "Remote
>>> Desktop Users"
>>>
>>> Then I have successfully logged onto this server via a citrix client (or TS
>>> client), and modified that user"s Internet Option Security tab (my goal is to
>>> add my local UNC paths into trusted local intranet sites).
>>>
>>> Butr suddenly, when I add a new user onto the server (and give them the same
>>> rights as old users), when I log on as that user remotely, the icons in the
>>> IE Security tab are grayed out, with grayed locked keys on top of them. I am
>>> not able to modify the settings.
>>>
>>> What am I missing?
>>>
>>> Thanks in advance,
>>>
>>> -andy-

 

[azevon]

Hi Jeff - considering I'm a one man show, no one has played with any
settings. A few weeks ago I added users, and they can easily add/remove
trusted sites. Only thing I did, was perform MS server updates via Windows
Update. I am assuming this changed some sort of policy settings. I ran RSOP
on 2 users - 1 that works and 1 that doesn't. I see no differences in their
configs. Also, not that I think it matters, but I'm not using AD. I also
disabled the setting that Vera suggested, but these users still don"t have
rights.

"Jeff Pitsch" wrote:

> Someone has started applying Group Policies that affect the IE control
> panel. You need to use RSOP (resultant set of policies) to figure out
> which one is doing it. Before that htough you need to get with your
> team (or the AD team or whoever) to find out why they have locked this
> down.
>
>
>
> azevon wrote:
> > I am in Group Policy - what needs to be modified? Why would this happen
> > after creating other users that didn't have this restriction?
> >
> > Thanks for your help.
> >
> > "Jeff Pitsch" wrote:
> >
> >> Group Policy.....
> >>
> >> Jeff Pitsch
> >> Microsoft MVP - Terminal Server
> >> Citrix Technology Professional
> >> Provision Networks VIP
> >>
> >> Forums not enough?
> >> Get support from the experts at your business
> >> http://jeffpitschconsulting.com
> >>
> >> azevon wrote:
> >>> Greetings All,
> >>>
> >>> I'm running a Windows 2003SP2 TS server with Citrix Meteframe 3.0.
> >>>
> >>> In the past, I have successfully added users (using computer
> >>> management\local users & groups) and then added them into the group "Remote
> >>> Desktop Users"
> >>>
> >>> Then I have successfully logged onto this server via a citrix client (or TS
> >>> client), and modified that user"s Internet Option Security tab (my goal is to
> >>> add my local UNC paths into trusted local intranet sites).
> >>>
> >>> Butr suddenly, when I add a new user onto the server (and give them the same
> >>> rights as old users), when I log on as that user remotely, the icons in the
> >>> IE Security tab are grayed out, with grayed locked keys on top of them. I am
> >>> not able to modify the settings.
> >>>
> >>> What am I missing?
> >>>
> >>> Thanks in advance,
> >>>
> >>> -andy-
>

 

[azevon]

Problem Solved - I had to enable IE Enhanced Security Configuration in
Add/Remove Programs, for users.

Thanks for everyone's help!

"azevon" wrote:

> Hi Jeff - considering I'm a one man show, no one has played with any
> settings. A few weeks ago I added users, and they can easily add/remove
> trusted sites. Only thing I did, was perform MS server updates via Windows
> Update. I am assuming this changed some sort of policy settings. I ran RSOP
> on 2 users - 1 that works and 1 that doesn't. I see no differences in their
> configs. Also, not that I think it matters, but I'm not using AD. I also
> disabled the setting that Vera suggested, but these users still don"t have
> rights.
>
> "Jeff Pitsch" wrote:
>
> > Someone has started applying Group Policies that affect the IE control
> > panel. You need to use RSOP (resultant set of policies) to figure out
> > which one is doing it. Before that htough you need to get with your
> > team (or the AD team or whoever) to find out why they have locked this
> > down.
> >
> >
> >
> > azevon wrote:
> > > I am in Group Policy - what needs to be modified? Why would this happen
> > > after creating other users that didn't have this restriction?
> > >
> > > Thanks for your help.
> > >
> > > "Jeff Pitsch" wrote:
> > >
> > >> Group Policy.....
> > >>
> > >> Jeff Pitsch
> > >> Microsoft MVP - Terminal Server
> > >> Citrix Technology Professional
> > >> Provision Networks VIP
> > >>
> > >> Forums not enough?
> > >> Get support from the experts at your business
> > >> http://jeffpitschconsulting.com
> > >>
> > >> azevon wrote:
> > >>> Greetings All,
> > >>>
> > >>> I'm running a Windows 2003SP2 TS server with Citrix Meteframe 3.0.
> > >>>
> > >>> In the past, I have successfully added users (using computer
> > >>> management\local users & groups) and then added them into the group "Remote
> > >>> Desktop Users"
> > >>>
> > >>> Then I have successfully logged onto this server via a citrix client (or TS
> > >>> client), and modified that user"s Internet Option Security tab (my goal is to
> > >>> add my local UNC paths into trusted local intranet sites).
> > >>>
> > >>> Butr suddenly, when I add a new user onto the server (and give them the same
> > >>> rights as old users), when I log on as that user remotely, the icons in the
> > >>> IE Security tab are grayed out, with grayed locked keys on top of them. I am
> > >>> not able to modify the settings.
> > >>>
> > >>> What am I missing?
> > >>>
> > >>> Thanks in advance,
> > >>>
> > >>> -andy-
> >

 

[Jeff Pitsch]

Be aware this is weird first of all but IE enhanced security can cause
other issues as well. You may have opened up a hornets nest....

Jeff Pitsch
Microsoft MVP - Terminal Server
Citrix Technology Professional
Provision Networks VIP

Forums not enough?
Get support from the experts at your business
http://jeffpitschconsulting.com

azevon wrote:
> Problem Solved - I had to enable IE Enhanced Security Configuration in
> Add/Remove Programs, for users.
>
> Thanks for everyone's help!
>
> "azevon" wrote:
>
>> Hi Jeff - considering I'm a one man show, no one has played with any
>> settings. A few weeks ago I added users, and they can easily add/remove
>> trusted sites. Only thing I did, was perform MS server updates via Windows
>> Update. I am assuming this changed some sort of policy settings. I ran RSOP
>> on 2 users - 1 that works and 1 that doesn't. I see no differences in their
>> configs. Also, not that I think it matters, but I'm not using AD. I also
>> disabled the setting that Vera suggested, but these users still don"t have
>> rights.
>>
>> "Jeff Pitsch" wrote:
>>
>>> Someone has started applying Group Policies that affect the IE control
>>> panel. You need to use RSOP (resultant set of policies) to figure out
>>> which one is doing it. Before that htough you need to get with your
>>> team (or the AD team or whoever) to find out why they have locked this
>>> down.
>>>
>>>
>>>
>>> azevon wrote:
>>>> I am in Group Policy - what needs to be modified? Why would this happen
>>>> after creating other users that didn't have this restriction?
>>>>
>>>> Thanks for your help.
>>>>
>>>> "Jeff Pitsch" wrote:
>>>>
>>>>> Group Policy.....
>>>>>
>>>>> Jeff Pitsch
>>>>> Microsoft MVP - Terminal Server
>>>>> Citrix Technology Professional
>>>>> Provision Networks VIP
>>>>>
>>>>> Forums not enough?
>>>>> Get support from the experts at your business
>>>>> http://jeffpitschconsulting.com
>>>>>
>>>>> azevon wrote:
>>>>>> Greetings All,
>>>>>>
>>>>>> I'm running a Windows 2003SP2 TS server with Citrix Meteframe 3.0.
>>>>>>
>>>>>> In the past, I have successfully added users (using computer
>>>>>> management\local users & groups) and then added them into the group "Remote
>>>>>> Desktop Users"
>>>>>>
>>>>>> Then I have successfully logged onto this server via a citrix client (or TS
>>>>>> client), and modified that user"s Internet Option Security tab (my goal is to
>>>>>> add my local UNC paths into trusted local intranet sites).
>>>>>>
>>>>>> Butr suddenly, when I add a new user onto the server (and give them the same
>>>>>> rights as old users), when I log on as that user remotely, the icons in the
>>>>>> IE Security tab are grayed out, with grayed locked keys on top of them. I am
>>>>>> not able to modify the settings.
>>>>>>
>>>>>> What am I missing?
>>>>>>
>>>>>> Thanks in advance,
>>>>>>
>>>>>> -andy-