In a Windows 2003 environment with Active Directory and Group Policies, it is
no longer possible for users to download files from the internet.
I suspect this is a policy, but I don't know which one.

Does someone know which policy to enable/disable?

Thanks, Martin

Are you using the server to attempt a download, or are you trying it from a
client?

what OS do the clients have?

have you got GPMC installed?

Server 2003 comes with the IE advanced security program installed, this can
be uninstalled from windows components.

I am trying to download on a Windows XP Pro SP1 client.
GPMC is installed on the server.
Users who don't get the policies are able to download.

Therefor my conclusion is that a policy is prohibiting the downloads.

TIA, Martin

"JustAnotherMCP" wrote:

> Are you using the server to attempt a download, or are you trying it from a
> client?
>
> what OS do the clients have?
>
> have you got GPMC installed?
>
> Server 2003 comes with the IE advanced security program installed, this can
> be uninstalled from windows components.

Is it a policy effecting users or computers??

by this i mean if a user who can download at one worksation moves to
another, is he/she still able to download?
if not then it is a computer policy not a user policy and:

I would suggest then that you first identify each pc with the problem by its
name, and find out wether they share the same OU on the server. Then use gpmc
to find out which policies are effective on that OU.

Similarly if it is a user problem, find out which OU the effected users are
in and use GPMC to find out which policies are effecting the OU.

First off all, the problem is solved!

It was definitely an user policy:
User Configuration
Administrative Templates
Internet Explorer
Browser Menus
Policy: Disable Save this progam to disk option

This policy was set to enable and I changed it to not configured.

I do not have a real testing environment, so I created a testing environment
in the Active Directory on a production server.
In there I created a new policy set by adding line by line copied from the
existing policy set, until I found myself unable to download.

I know this is a clumsy way to test policies, but after spending a couple of
days looking for what policy was affecting the download, I found this one of
the last resorts.

Thanks anyway, you helped me looking in the right direction.


Martin

"JustAnotherMCP" wrote:

> Is it a policy effecting users or computers??
>
> by this i mean if a user who can download at one worksation moves to
> another, is he/she still able to download?
> if not then it is a computer policy not a user policy and:
>
> I would suggest then that you first identify each pc with the problem by its
> name, and find out wether they share the same OU on the server. Then use gpmc
> to find out which policies are effective on that OU.
>
> Similarly if it is a user problem, find out which OU the effected users are
> in and use GPMC to find out which policies are effecting the OU.

Martin van der Kroef wrote:

> First off all, the problem is solved!
>
> It was definitely an user policy:
> User Configuration
> Administrative Templates
> Internet Explorer
> Browser Menus
> Policy: Disable Save this progam to disk option
>
> This policy was set to enable and I changed it to not configured.
>
> I do not have a real testing environment, so I created a testing
> environment in the Active Directory on a production server.
> In there I created a new policy set by adding line by line copied from
> the existing policy set, until I found myself unable to download.
>
> I know this is a clumsy way to test policies, but after spending a
> couple of days looking for what policy was affecting the download, I
> found this one of the last resorts.
>
> Thanks anyway, you helped me looking in the right direction.
>
I'm glad you got it sorted, but ooh doing testing in a production
environment is a no-no. Look into getting something like VirtualPC and
running it on a spare machine. You can safely play and experiment
there.

Malke
--
MS MVP - Windows Shell/User
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"