The USGCB Internet Explorer Security (IE) security recommendations cover security settings that disallow a user from making changes to Internet Explorer IE configuration.
ESRS can remediate these configuration settings. However ESRS does not manage Internet Explorer IE configuration, and to our knowledge there is no product functionality available on the SMP that does allow management of Internet Explorer IE configuration. Examples include Security Zones and ActiveX Component component configurations.
This functionality is available in Active Directory Group Policy.
As such USGCB IE8 remediations may make Internet Explorer IE locked down such that access to content such as the SMP or Arellia console unaccessible without Group Policy management.
...
- HKLM\Software\Policies\Microsoft\Internet Explorer
- HKLM\Software\Policies\Microsoft\Windows\Current Version\Internet Settings