Remote Desktop Services 2008 R2 – Internet Explorer Enhanced Security

I have noticed that when you disable IE enhanced security in the server manager it is not disabled for the users. MS documentation also states that it will automatically be disabled for normal users. Here is the screenshots of the server manager part where you configure this:

This GUI controls the behavior of the following registry keys:

(Users)
HKEY_LOCAL_MACHINE SOFTWAREMicrosoftActive SetupInstalled Components{A509B1A7-37EF-4b3f-8CFC-4F3A74704073}IsInstalled

and

(Admins)
HKEY_LOCAL_MACHINE SOFTWAREMicrosoftActive SetupInstalled Components{A509B1A8-37EF-4b3f-8CFC-4F3A74704073}IsInstalled.

A value of 0 means that is disabled.

In my case when this setting is off for the users, they still gets this in their face (both old and new profiles):

(ARG!)

So how do we disable this feature when the built in does not work? That’s right, regedit.

I use Group policy preferences to disable this. There Is a setting in the CURRENT_USER that controls this behavior.
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionInternet SettingsZoneMapIEHarden

This is default 1. If we change this to 0, it will be disabled. I could not find any GPO setting for this. This error/bug could also be related to IE9. (not the first time IE9 does strange things to the OS)