Home | Site Map | Cisco How ToNet How To | Wireless |Search | Forums | Services | Donations | Careers | About Us | Contact Us|

Some group policies missing after installing win 2008

Active Directory, Domain, DNS, WINS, DHCP, SBS, New Releases.

Some group policies missing after installing win 2008

Postby guest » Fri Sep 05, 2008 10:30 pm

after joining two 2008 DC to the 2003 domain, the Security Zones and Content Ratings settings are missing when you edit the GPO from a 2008 DC.


Analysis:
========
When we configure the "Security Zones and Content Ratings" group policy on
a DC which does not install "Internet Explorer Enhanced Security
Configuration"(IE ESC), the DC will read the local IE Security Zone
settings and store them to the GPO.

However, if a DC has enabled "IE ESC", when we edit the "Security Zones and
Content Ratings" of a existed GPO from this DC, the DC will read the local
IE SEC Security Zone settings of itself.

Since the IE Security Zone settings and the IE SEC Security Zone settings
are stored in different registry keys, the Security Zones settings on one
DC will not be displayed in another DC's console if the two DC have
different "IE ESC" configurations.

I suppose that the "IE ESC" was uninstalled on the 2003 DCs. But this
feature is enabled on 2008 by default.


Suggestion:
==========
Please try to disable "IE ESC" on the 2008 DCs with these steps:

1. Open "Server Manager" on the 2008 DC.

2. Click the root node in the left pane.

3. In the right pane, in the "Server Summary"->"Security Information",
click "Configure IE ESC".

4. Disable "IE ESC" for all users, and click "OK".
Tablet and Smartphone Setup Guide
http://www.quicksetupguide.com

Troubleshooting Vista Wireless
http://chicagotech.net/
guest
 
Posts: 10191
Joined: Mon Nov 27, 2006 1:10 pm

Return to Windows

Your Ad Here

Who is online

Users browsing this forum: No registered users and 7 guests