MBSA 2.2 on WHS 2011 reports Severe Risk in IE Zones - "Internet Explorer zones do not have secure settings for some users." RRS feed

  • Question

  • For the "WHS/MediaStreamingAdmin" user, MSBA reports a "Severe Risk" due to the following IE Zone settings for Internet Zone:

    Run components not signed with Authenticode = enabled

    Run components signed with Authenticode = enabled

    The Zone Security is set to "High", but has been customized (by WHS) for the above-listed tasks to be enabled, however, MSBA determines they should be disabled.

    What should be the configuration for WHS? This makes me pretty uncomfortable considering it's in the Internet Zone. If it should be changed, can someone tell me where to find the registry entries to do so? It's not like I can logon as "MediaStreamingAdmin" and then change them directly in the IE options.



    Saturday, May 7, 2011 7:26 AM