Internet Explorer Enhanced Security

[letsdoamazing]

Do you know how to turn this off in Windows 7?

 

[cluberti]

IE ESC only exists on Windows Server versions of Windows, not Windows 7. If you're seeing this on a Windows 7 machine, that usually means that someone has created an IE group policy from the IE Maintenance node on a Server-class OS, and thus imported all of the (unnecessary) IE ESC registry information from that machine.

Are you perhaps seeing this on a domain-joined Windows 7 machine, or is this really a Server 2008 or 2008 R2 machine?

 

[letsdoamazing]

domain joined

 

[DeaconFrost]

If it was set up by your IT staff as a group policy, I wouldn't change it without them knowing. That seems a little restrictive on their part.

 

[cluberti]

No, it means they are creating IE policies for clients on servers, so at the least they've put clients in an unsupported state. I could make intelligence comments, but those are inappropriate. They might be accurate, but they're still inappropriate .

 

[letsdoamazing]

No, it means they are creating IE policies for clients on servers, so at the least they've put clients in an unsupported state. I could make intelligence comments, but those are inappropriate. They might be accurate, but they're still inappropriate .

No I have no clue what this policy is? What does it restrict? Does it make the clients safer in any aspect?

 

[cluberti]

No, it does nothing for the client (but potentially cause breakage), because the client does not have the additional registry and IE binary capability to use the ESC settings on a server. This could only find it's way onto a Win7 or Vista client machine when coming down from an IE Maintenance group policy, therefore there's not much you can do to fix this until your group policy administrators do the following:

1. Remove the offending IE Maintenance group policy or policies that have applied these settings to your client
2. Recreate policies for IE Maintenance that will apply to client machines, *from* a client machine that matches that environment

You will then be able to do a Reset of the client configuration and Restore Advanced Settings in the IE settings from the Tools > Internet Options > Advanced tab.

You cannnot do this last part and have it actually stick until at the very least #1 is done, otherwise policy will simply keep re-applying the offending registry data.