Search This Blog

Monday, May 5, 2014

Internet Explorer and no access to Security tab

Some times I find my self working on a machine with administrative rights but Internet Explorer Security tab has been removed by a Group Policy.

image

For testing only I really need to add an address to the trusted zoned.

Because of my local administrative rights I am able to temporary remove the policy until next time the GPO will be applied.

Go to the registry key:

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Internet Explorer\Control Panel\SecurityTab

And change the value from 1 to 0

image

Then go to Internet Options in Internet Explorer again and you should see the security tab.

image

If the policy has been defined on user level instead of computer level, you will find the registry entry here:

HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel\SecurityTab

image

The next thing you might find is that you are unable to add new sites because the add button is grayed out.

image

Go to the registry key:

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Security_zones_map_edit

And change the value from 1 to 0

image

And the add button is back:

image

In some situations Custom Level may also be grayed out and you are unable to change settings.

image

Go to the registry key:

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Security_options_edit

And change the value from 1 to 0

image

And Custom level is available again (but remember only temporary).

image

The GPO settings in play here are:

Computer Configuration\Policies\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Disable the Security page

or

User Configuration\Policies\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Disable the Security page

Computer Configuration\Policies\Administrative Templates\Windows Components\Internet Explorer\Security Zones: Do not allow users to add/delete sites

Computer Configuration\Policies\Administrative Templates\Windows Components\Internet Explorer\Security Zones: Do not allow users to change policies

image

No comments:

Post a Comment