locked
GPO changes not refliecting in registry RRS feed

  • Question

  • Hi Guys,

    I have a very strange issue, we had disabled XSS filter for IE8 through gpo (trusted sites and intranet sites zones).  It is reflecting properly on rsop.msc output, however when I checked the subsequent registry values it is not updated at all due to which one of my application is not functioning.

    GPO implemented

    computer configuration\Administrative Templates\Windows Components\Internet Explorer\Internet control Panel\Security Page\Intranet Zone\Turn on Cross-Site Scripting (XSS) filter to disabled

    computer configuration\Administrative Templates\Windows Components\Internet Explorer\Internet control Panel\Security Page\Trusted Sites Zone\Turn on Cross-Site Scripting (XSS) filter to disabled

    Couldn't find the updated registry value as below

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1\1409 (3)

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2\1409 (3)

    We have Win7 (64-bit) and XP pro clients, we observed the same issue in both OS.

    Wednesday, February 20, 2013 7:12 AM

Answers

  • Hi,

    You can turn on the template for "Turn On XSS filter" form the machine hive to get the keys populated under

    "HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2" DWORD==1409

    and checked and confirmed that the policy was setting the value to "3" as expected.

    For GPO related issue, it is recommended to post the question on Group Policy forum for further assistance.

    The reason why we recommend posting appropriately is you will get the most qualified pool of respondents, and other partners who read the forums regularly can either share their knowledge or learn from your interaction with us. Thank you for your understanding.


    Tracy Cai
    TechNet Community Support

    • Marked as answer by tracycai Monday, February 25, 2013 8:58 AM
    Thursday, February 21, 2013 7:54 AM