Internet explorer settings

andreas bright 561 Reputation points
2020-12-07T22:10:23.797+00:00

Hi,

We are using MS default baseline, and when we apply this, then there are some IE settings that are causing problems.
We are trying to locate which setting that causes this to happen, but have not been able to find it. We have tried to configure every setting under MDM Security Baseline > Settings > Internet Explorer to "Not Configured" but we are still not allowed to change anything.

Start IE, go to Internet Options > Security TAB and there everything is grey and the info that this is controlled by system administrator

If we remove the Baseline, we are able to configure the settings.... so that means that there are some settings in the Baseline from MS that cause this, but not sure which one....

(We need to use IE + Java for an application):

Suggestions ?

/R
Andy

Microsoft Intune Application management
Microsoft Intune Application management
Microsoft Intune: A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.Application management: The process of creating, configuring, managing, and monitoring applications.
884 questions
Microsoft Intune
Microsoft Intune
A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.
4,416 questions
0 comments
Accepted answer
  1. Lu Dai-MSFT 28,356 Reputation points
    2020-12-09T06:39:38.14+00:00

    @andreas bright Thanks for your update. From your description, I know that it takes long time for IE settings in Baseline Security to work. If there is any misunderstanding, feel free to let us know.

    I have done the test in my lab. I change Internet Explorer encryption support from TLS 1.1 and 1.2 to Not Configured. I find It works at about 5-10 minutes. Also, I notice this setting is deployed via CSP “./Device/Vendor/MSFT/Policy/Config/InternetExplorer/DisableEncryptionSupport”

    But in our environment, it takes a log time. To check why it takes such a long time, we need to do log analysis to identify. With Q&A limitation, Q&A is not the best channel for such log analysis case. So we suggest to open a case to check on this. The following link describe how to open a case, we can refer to it:
    https://learn.microsoft.com/en-us/mem/intune/fundamentals/get-support

    Thanks for the understanding and have a nice day.

    If the response is helpful, please click "Accept Answer" and upvote it.
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    1 person found this answer helpful.
    0 comments

1 additional answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Lu Dai-MSFT 28,356 Reputation points
    2020-12-08T06:02:15.79+00:00

    @andreas bright Thanks for posting in our Q&A. From your description, I know that you wonder which settings in the Baseline Security cause that we can’t change anything in IE. If there is any misunderstanding, feel free to let us know.

    For this issue, I have done the test in my lab. I configure all “Not configured” to IE in Baseline Security and deploy to the windows 10 device. However, when I login the device with AzureAD account and see the security tab in IE option, there everything can be changed.

    To clarify this issue, we appreciate your help to collect the following information:

    1. Check the windows version of the device that we deploy the IE configuration.
    2. Get screen shots of the settings in the Baseline Security policy to let us test the same policy.
    3. Which group we have assigned the policy, user group or device group?

    If there is any unclear, feel free to let us know.

    If the response is helpful, please click "Accept Answer" and upvote it.
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.