Creating Script to change local group policy settings / Smart Card Removal Behavior

j***@gmail.com

2013-12-12 22:21:52 UTC

I'm having the same issue. Did you figure this out?

Post by GuardianTai
Want to create a script which will make changes on the local group
policy. I want to change the following entries
in gpedit.msc
Computer Configuration > Administrative Templates > Windows Components

Internet Explorer

1. "Security Zones: Do Not Allow Users to Chnage Policies" - Disable
2. "Security Zones: Do Not Allow Users to Add/Delete Sites" - Disable

Internet Control Panel> Security Page > (For each zone:)

1. "Submit non-encrypted form data" - Enable (both locations)
It needs to be done locally as these computers (multiple computers)
will not be connected to any domain. I don't know anything about
scripting and I'm sure i can learn I just don't have much time right
now. I've never had a reason to learn till now. Is there a quick
script that will allow me to do this?
Additionally, I have another seperate issue but it still falls under
the GP arena.
In GPEDIT.MSC
Computer configurations > Windows Settings > Security Settings> Local
Policies > Security options
1. "Interactive logon: Smart Card removal behavior" - No action
Here's my problem, everytime I remove my smart card, it locks up my
workstation. Obviously the gp is set for no action but the computer
seems to ignore it. I also can't seem to edit this specific entry in
GPEDIT. I'm a network admin, I can change other gp settings but not
this one. Is there something in the registry that will override this?
I may be an elementry(sp?) question for some of you out there but it's
driving me nutts! I don't claim to be an expert even though I'm an NA
so any suggestions would be greatly appreciated no matter how silly
they may be, I overlook things all the time.
Please Help!
Tai