Internet Explorer advanced settings\security\"check for server certificate
revocation"

I could not find a GPO setting to manipulate this flag. Does anbody know if
there is one?

If not, I think I'll create a custom ADM for it.
It appears to toggle HKCU\software\microsoft\windows\currentversion\internet
settings\
CertificateRevocation REG_DWORD 1 = enabled or 0 = disabled.

Does this security setting require any other changes to the registry?


--
Glenn L
CCNA, MCSE 2000/2003 + Security

Hi Glenn :-)

Try the following and see if it helps:

Check for server certificate revocation

Go to Tools>Internet Options>Advanced tab
Under Security: uncheck "Check for Server Certificate Revocation (requires
restart)

Hope this helps :-)

Jan
Smiles are meant to be shared,
that's why they're so contagious.

Replies are posted only to the newsgroup for the benefit or other readers.
How to make a good newsgroup post:
http://www.dts-l.org/goodpost.htm



> Internet Explorer advanced settings\security\"check for server certificate
> revocation"
>
> I could not find a GPO setting to manipulate this flag. Does anbody know
> if there is one?
>
> If not, I think I'll create a custom ADM for it.
> It appears to toggle
> HKCU\software\microsoft\windows\currentversion\internet settings\
> CertificateRevocation REG_DWORD 1 = enabled or 0 = disabled.
>
> Does this security setting require any other changes to the registry?
>
>
> --
> Glenn L
> CCNA, MCSE 2000/2003 + Security
>
>

Thanks Jan.

I am well aware of how to do this in the browser.
My goal is to avoid having to visit a thousand workstations to check the
box.

I want an automated solution.
GPO would be best.


--
Glenn L
CCNA, MCSE 2000/2003 + Security

"Jan Il" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> Hi Glenn :-)
>
> Try the following and see if it helps:
>
> Check for server certificate revocation
>
> Go to Tools>Internet Options>Advanced tab
> Under Security: uncheck "Check for Server Certificate Revocation (requires
> restart)
>
> Hope this helps :-)
>
> Jan
> Smiles are meant to be shared,
> that's why they're so contagious.
>
> Replies are posted only to the newsgroup for the benefit or other readers.
> How to make a good newsgroup post:
> http://www.dts-l.org/goodpost.htm
>
>
>
>> Internet Explorer advanced settings\security\"check for server
>> certificate revocation"
>>
>> I could not find a GPO setting to manipulate this flag. Does anbody know
>> if there is one?
>>
>> If not, I think I'll create a custom ADM for it.
>> It appears to toggle
>> HKCU\software\microsoft\windows\currentversion\internet settings\
>> CertificateRevocation REG_DWORD 1 = enabled or 0 = disabled.
>>
>> Does this security setting require any other changes to the registry?
>>
>>
>> --
>> Glenn L
>> CCNA, MCSE 2000/2003 + Security
>>
>>
>
>

"Glenn L" <the.only(delete)@gmail dot com> wrote in message
news:(E-Mail Removed)...
> Thanks Jan.
>
> I am well aware of how to do this in the browser.
> My goal is to avoid having to visit a thousand workstations to check the
> box.
>
> I want an automated solution.
> GPO would be best.

Sorry...can't help you with that. Good luck. :-)

Jan
Smiles are meant to be shared,
that's why they're so contagious
>
>
> --
> Glenn L
> CCNA, MCSE 2000/2003 + Security
>
> "Jan Il" <(E-Mail Removed)> wrote in message
> news:(E-Mail Removed)...
>> Hi Glenn :-)
>>
>> Try the following and see if it helps:
>>
>> Check for server certificate revocation
>>
>> Go to Tools>Internet Options>Advanced tab
>> Under Security: uncheck "Check for Server Certificate Revocation
>> (requires restart)
>>
>> Hope this helps :-)
>>
>> Jan
>> Smiles are meant to be shared,
>> that's why they're so contagious.
>>
>> Replies are posted only to the newsgroup for the benefit or other
>> readers.
>> How to make a good newsgroup post:
>> http://www.dts-l.org/goodpost.htm
>>
>>
>>
>>> Internet Explorer advanced settings\security\"check for server
>>> certificate revocation"
>>>
>>> I could not find a GPO setting to manipulate this flag. Does anbody know
>>> if there is one?
>>>
>>> If not, I think I'll create a custom ADM for it.
>>> It appears to toggle
>>> HKCU\software\microsoft\windows\currentversion\internet settings\
>>> CertificateRevocation REG_DWORD 1 = enabled or 0 = disabled.
>>>
>>> Does this security setting require any other changes to the registry?
>>>
>>>
>>> --
>>> Glenn L
>>> CCNA, MCSE 2000/2003 + Security
>>>
>>>
>>
>>
>
>