Disable IE Enhanced Security does not work RDS-Session Host 2008 R2

Hi there,

we have a problem with disabling the IE ESC on Server 2008 R2. It's a fully patched Server 2008 R2 Standard english. When installing the RDS-Session Host Role the IE ESC for Users was enabled. After adding the role IE ESC was automatically disabled.

When a new user logs on to the system, IE ESC is still enabled. When we Reset the IE (Advanced Tab, Reset) IE ESC is disabled for the users. But that's nothing we can deal with.

After searching the web, I found a similar Thread here: http://social.technet.microsoft.com/Forums/en/windowsserver2008r2rds/thread/5bd202d3-7f77-4631-9afc-d6a8a7821c42

What I figured out:

1. When RDS-Session Host Role is enabled, IE ESC for Users is automatically disabled. Why?

2. When enabling it for users, IE ESC is still disabled. When we Reset IE, IE ESC is enabled.

3. When disabling it for users, IE ESC is still enabled. When we Reset IE, IE ESC is disabled.

I have also reproduced this on a test machine (this machine is not patched)

Any suggestions how to disable IE ESC for all users without resetting IE first?