ZONES VIA GPO's

[Pasi Heino]

Hello,

I have W2K3 Domain and XP Pro workstations. Now I need to deploy specific
Security Zone settings to wks. When I am trying to modify Security Zone
settings there's announcement, which needs Enhaced Security Settings to XP
Pro workstations. I know that there is this option on W2K2 Servers, but how
I can deploy my own security zone settings to workstations via Group Policy.
Now it's not working properly.

I have uninstalled enhanced security settings from server and nothing
happens?

If somebody have resolved this problem share information!!

I have also problem with ActiveX components, because normal users cannot
install any components? Now I need to make MSI packages of those web
programs which needs ActiveX. Where's user needs rights and is it possible
to install ActiveX in Windows XP with user rights?

Thanks,

Pasi Heino

 

[Paul Adare]

microsoft.public.windowsxp.security_admin news group, Pasi Heino

Hello,

I have W2K3 Domain and XP Pro workstations. Now I need to deploy specific
Security Zone settings to wks. When I am trying to modify Security Zone
settings there's announcement, which needs Enhaced Security Settings to XP
Pro workstations. I know that there is this option on W2K2 Servers, but how
I can deploy my own security zone settings to workstations via Group Policy.
Now it's not working properly.

I have uninstalled enhanced security settings from server and nothing
happens?

This is not a good idea, you should re-enable the enhanced security
configuration on your server.

If somebody have resolved this problem share information!!

To deploy IE security settings to both Windows Server 2003 servers, and
to XP computers, you need at least 2 GPOs. For deploying to servers,
create the GPO on one of the servers. This GPO will contain the enhanced
security configuration settings (which will be ignored by the XP
computers). To create the GPO for the XP computers, you need to create
the GPO on a computer running XP Pro. Open MMC.exe and add the Group
Policy snap-in, browse to your domain, and create a new GPO in the
domain. Import the IE security settings from the XP computer, make the
modifications you need to make to the GPO, and then link the GPO to
whatever container you need to link it to.

I have also problem with ActiveX components, because normal users cannot
install any components? Now I need to make MSI packages of those web
programs which needs ActiveX. Where's user needs rights and is it possible
to install ActiveX in Windows XP with user rights?

A lot of ActiveX components require either Power Users or Administrator
privileges to install. If that's the case, then as far as I know, the
only ways to install them are by belonging to Power Users or
Administrators, or with an MSI like you're doing now.