REM Disable IE First Run Wizard and RSS Feeds
REG ADD "HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer\Main" /v "DisableFirstRunCustomize" /t REG_DWORD /d 1 /f
REM Disable Internet Explorer Enhanced Security Enhanced
REG ADD "HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{A509B1A7-37EF-4b3f-8CFC-4F3A74704073}" /v "IsInstalled" /t REG_DWORD /d 0 /f
REG ADD "HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{A509B1A8-37EF-4b3f-8CFC-4F3A74704073}" /v "IsInstalled" /t REG_DWORD /d 0 /f
REM Force off-screen composition in IE
REG ADD "HKCU\Software\Microsoft\Internet Explorer\Main" /v "Force Offscreen Composition" /t REG_DWORD /d 1 /f
REM Don t check if IE default browser
REG ADD "HKCU\Software\Microsoft\Internet Explorer\Main" /v "Check_Associations" /t REG_SZ /d "no" /f
REM Don t check if IE default browser
REG ADD "HKCU\Software\Microsoft\Internet Explorer\Main" /v "Default_Page_URL" /t REG_SZ /d "http://www.google.fr" /f
REM Disable warm is mix for secure and not secure elements
REG ADD "HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings" /v "WarnonZoneCrossing" /t REG_DWORD /d 0 /f
Lien vers le fichier : cliquez ici
Un script Powershell pour paramétrer une GPO pour qu'elle pose ces clés de registre
Set-StrictMode -Version 2
# load required modules
Import-Module ActiveDirectory
Import-Module GroupPolicy
#define variables
$GPOName = 'Gpo-Parametres-IE'
$defaultNC = ( [ADSI]"LDAP://RootDSE" ).defaultNamingContext.Value
#$TargetOU = 'OU=Serveurs,' + $defaultNC
$TargetOU = $defaultNC
#create new GPO shell
$GPO = New-GPO -Name $GPOName
#Pose d'éléments pour modifier des clés de registre par GPO
#Disable IE First Run Wizard and RSS Feeds
Set-GPPrefRegistryValue -Name $GPOName -Action Update -Context User -Key 'HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer\Main' -Type DWord -ValueName 'DisableFirstRunCustomize' -Value 1 | out-null
#Disable Internet Explorer Enhanced Security Enhanced
Set-GPPrefRegistryValue -Name $GPOName -Action Update -Context User -Key 'HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{A509B1A7-37EF-4b3f-8CFC-4F3A74704073' -Type DWord -ValueName 'IsInstalled' -Value 0 | out-null
Set-GPPrefRegistryValue -Name $GPOName -Action Update -Context User -Key 'HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{A509B1A8-37EF-4b3f-8CFC-4F3A74704073' -Type DWord -ValueName 'IsInstalled' -Value 0 | out-null
#Force off-screen composition in IE
Set-GPPrefRegistryValue -Name $GPOName -Action Update -Context User -Key 'HKCU\Software\Microsoft\Internet Explorer\Main' -Type DWord -ValueName 'Force Offscreen Composition' -Value 1 | out-null
#Don t check if IE default browser
Set-GPPrefRegistryValue -Name $GPOName -Action Update -Context User -Key 'HKCU\Software\Microsoft\Internet Explorer\Main' -Type String -ValueName 'Check_Associations' -Value 'no' | out-null
#IE default browser
Set-GPPrefRegistryValue -Name $GPOName -Action Update -Context User -Key 'HKCU\Software\Microsoft\Internet Explorer\Main' -Type String -ValueName 'Default_Page_URL' -Value 'http://www.google.fr' | out-null
#Disable warm is mix for secure and not secure elements
Set-GPPrefRegistryValue -Name $GPOName -Action Update -Context User -Key 'HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings' -Type DWord -ValueName 'WarnonZoneCrossing' -Value 0 | out-null
Lien vers le fichier : cliquez ici
Article(s) suivant(s)
Article(s) précédent(s)