IE Group Policy Related Settings Changed Unexpectedly

  • 7012482
  • 24-May-2013
  • 31-Aug-2015

Environment

Novell ZENworks Configuration Management 11.2

Situation

Internet Explorer settings that are configurable via Group Policy Settings may change even when there are not any IE group policies assigned to the user.

Resolution

This is fixed in version 11.2.4 - see KB 7012027 "ZENworks Configuration Management 11.2.4 - update information and list of fixes" which can be found at https://support.microfocus.com/kb/doc.php?id=7012027

 

Cause

"Drive:\WINDOWS\system32\GroupPolicy\User\MICROSOFT\IEAK\install.ins" is processed on every ZCM refresh, even if there is not an effective GPO assigned to the user or the device.

Additional Information

It is recommended to make sure that "install.ins" does not exist under  "Drive:\WINDOWS\system32\GroupPolicy\User\MICROSOFT\IEAK"  or "%zenworks_home%\bin\handlers\cachefiles\originalcache\" if IE settings are not being controlled by GPOs.
Otherwise, there is a chance that either ZCM or Windows itself may reprocess this file and alter IE settings to match the values in this file.