MBSA 2.2 on WHS 2011 reports Severe Risk in IE Zones - "Internet Explorer zones do not have secure settings for some users."

• Question

• 

  

  0

  Sign in to vote

  For the "WHS/MediaStreamingAdmin" user, MSBA reports a "Severe Risk" due to the following IE Zone settings for Internet Zone:

  Run components not signed with Authenticode = enabled

  Run components signed with Authenticode = enabled

  The Zone Security is set to "High", but has been customized (by WHS) for the above-listed tasks to be enabled, however, MSBA determines they should be disabled.

  What should be the configuration for WHS? This makes me pretty uncomfortable considering it's in the Internet Zone. If it should be changed, can someone tell me where to find the registry entries to do so? It's not like I can logon as "MediaStreamingAdmin" and then change them directly in the IE options.

  Thanks,

  Steve

  Saturday, May 7, 2011 7:26 AM