0

我試圖與AWS + userdataAWS的Windows 2012 R2關閉IE增強的安全配置

我發現了一些功能,在線幫助我做到這一點推出的Windows 2012 R2實例時自動的Internet Explorer Enhanced Security Configuration禁用。當我在Server Manager下登記Local Server時,它說IE Enhanced Security Configuration已關閉。但是,當我啓動IE時,它表示已啓用。我怎樣才能正確地禁用這個殘疾人?

這裏是我傳遞到用戶數據用於AWS文件:

<powershell> 
    function Disable-InternetExplorerESC { 
    $AdminKey = "HKLM:\SOFTWARE\Microsoft\Active Setup\Installed Components\{A509B1A7-37EF-4b3f-8CFC-4F3A74704073}" 
    $UserKey = "HKLM:\SOFTWARE\Microsoft\Active Setup\Installed Components\{A509B1A8-37EF-4b3f-8CFC-4F3A74704073}" 
    Set-ItemProperty -Path $AdminKey -Name "IsInstalled" -Value 0 
    Set-ItemProperty -Path $UserKey -Name "IsInstalled" -Value 0 
    Stop-Process -Name Explorer 
    Write-Host "IE Enhanced Security Configuration (ESC) has been disabled." -ForegroundColor Green 
    } 
    function Enable-InternetExplorerESC { 
     $AdminKey = "HKLM:\SOFTWARE\Microsoft\Active Setup\Installed Components\{A509B1A7-37EF-4b3f-8CFC-4F3A74704073}" 
     $UserKey = "HKLM:\SOFTWARE\Microsoft\Active Setup\Installed Components\{A509B1A8-37EF-4b3f-8CFC-4F3A74704073}" 
     Set-ItemProperty -Path $AdminKey -Name "IsInstalled" -Value 1 
     Set-ItemProperty -Path $UserKey -Name "IsInstalled" -Value 1 
     Stop-Process -Name Explorer 
     Write-Host "IE Enhanced Security Configuration (ESC) has been enabled." -ForegroundColor Green 
    } 
    function Disable-UserAccessControl { 
     Set-ItemProperty "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" -Name "ConsentPromptBehaviorAdmin" -Value 00000000 
     Write-Host "User Access Control (UAC) has been disabled." -ForegroundColor Green  
    } 

    Disable-InternetExplorerESC 
</powershell> 

enter image description here

enter image description here

+0

它可能是重新啓動後只能完全更新的那些設置之一? –

+0

您是否嘗試將註冊表項添加到GPO?這樣他們申請登錄管理員/用戶。 – AngryCarrotTop

+0

@AngryCarrotTop對於Windows系統來說很抱歉。我不確定你在說什麼= [ – Liondancer

回答

1

我有同樣的問題,終於得到了這個工作使用下面的用戶數據的腳本:

<powershell> 
function Disable-InternetExplorerESC { 
    $AdminKey = "HKLM:\SOFTWARE\Microsoft\Active Setup\Installed Components\{A509B1A7-37EF-4b3f-8CFC-4F3A74704073}" 
    $UserKey = "HKLM:\SOFTWARE\Microsoft\Active Setup\Installed Components\{A509B1A8-37EF-4b3f-8CFC-4F3A74704073}" 
    Set-ItemProperty -Path $AdminKey -Name "IsInstalled" -Value 0 -Force 
    Set-ItemProperty -Path $UserKey -Name "IsInstalled" -Value 0 -Force 
    Remove-ItemProperty -Path $AdminKey -Name "IsInstalled" -Force 
    Remove-ItemProperty -Path $UserKey -Name "IsInstalled" -Force 
} 

Disable-InternetExplorerESC 
</powershell> 

The訣竅是實際上刪除鍵,然後導致IE實際禁用ESC。

相關問題