USGCB IE8 profile remediation implications

The USGCB Internet Explorer (IE) security recommendations cover security settings that prevent users from making changes to IE configuration.

ESRS can remediate these configuration settings, but does not manage IE configurations. To our knowledge there is no product functionality available on the SMP that does allow management of IE configurations, such as Security Zones and ActiveX components.

The USGCB IE8 remediation functionality is available in Active Directory Group Policy and might block IE access to content such as the SMP or Thycotic consoles to users without Group Policy Management. If this occurs, you can restore access by deleting the following registry keys:

• HKLM\Software\Policies\Microsoft\Internet Explorer
• HKLM\Software\Policies\Microsoft\Windows\Current Version\Internet Settings