Archive for August, 2011

IE 9 with romaing profiles, redirected folders and Vista/7

IE 9 has a problem when running in vista or Windows 7 and using roming profiles and redirected folders (you know, the configuration the MS tells you to do if your users move around???) Anyway, this one manifests it’s self as printing from IE 9 only prints a header and footer and nothing else. the fotter refers to a path in the user’s appdata\local\temp\low folder. when you look for that folder, you find that it didn’t get created. If you create it manually, it still doesn’t work. that’s because the integrity level isn’t set by default on anything that you create yourself. there are some MS Mr. fix-it patches available under KB973479, but they only work on the user/coputer combination you are on, they do not work at the roaming profile level. currently the only way around this is to turn off IE’s protected mode. (I know it’s not the best thing to do - but until MS un-breaks this, it’s all I’ve figured out how to fix it globally. You can turn off IE protected mode via GPO Computer (not user) policy. Administrative Templates, Windows components, Internet Explorer, Internet Control Panel, security Page, Internet Zone. Enable the policy and set protected mode to disabled.

another way around this is to add the following to the user’s login script:

If not exist %localappdata%\Temp\Low (mkdir %localappdata%\Temp\Low)
ICACLS “%localappdata%\Temp\Low” /setintegritylevel (OI)(CI)low



1 Comment

Mapped Drives in Vista/7 when elevated

Having finally been fed up with always having my mapped drives dissapear every time Vista/7 UAC wants elevated credentials and it being hard to search on the solution. Here it is. It involves a registry change at the computer level. The good news is you can make those changes pretty easy now with GPP being built in to Vista/7. so here is the value that needs to be added:


DWORD Value name: EnableLinkedConnections
Value of: 1

No Comments