hairylots
asked on
How to modify the GPO --> User Configuration --> Policies --> Windows settings --> Internet Explorer Maintenance --> connection / Proxy Settings
Hello All
How to modify the GPO --> User Configuration --> Policies --> Windows settings --> Internet Explorer Maintenance --> connection / Proxy Settings.
This is not listed under GPO --> User Configuration --> Policies --> Windows settings --> here I have listed Scripts (logon . Logoff), Security settings, Folder redirections, Policy Based QoS.
How is this setting Internet Explorer Maintenance --> connection / Proxy Settings edited / changed?
Thanks in advance.
How to modify the GPO --> User Configuration --> Policies --> Windows settings --> Internet Explorer Maintenance --> connection / Proxy Settings.
This is not listed under GPO --> User Configuration --> Policies --> Windows settings --> here I have listed Scripts (logon . Logoff), Security settings, Folder redirections, Policy Based QoS.
How is this setting Internet Explorer Maintenance --> connection / Proxy Settings edited / changed?
Thanks in advance.
ASKER
Hello JB
I should have mentioned, this is a windows server 2008 R2 terminal server, no clients involved here.
IEM is depreciated with no real good replacement.
I have since read over
http://social.technet.microsoft.com/Forums/windowsserver/en-US/42060454-1e1d-492f-b774-836f6fd1e5bf/gpo-internet-explorer-maintenance-missing-in-ws-2008-r2
http://technet.microsoft.com/en-us/library/jj890998.aspx
http://blogs.technet.com/b/asiasupp/archive/2011/03/30/internet-explorer-9-ie9-group-policy-preferences-gpp.aspx
http://www.grouppolicy.biz/2011/03/how-to-enable-group-policy-preferences-support-for-ie9/
None of which really help other than to state IEM is not available any more.
As I understand it, working with GPP --> control panel remove the ability for individual users to add their own sites to trusted sites. 1 step forward 3 years backward.
I should have mentioned, this is a windows server 2008 R2 terminal server, no clients involved here.
IEM is depreciated with no real good replacement.
I have since read over
http://social.technet.microsoft.com/Forums/windowsserver/en-US/42060454-1e1d-492f-b774-836f6fd1e5bf/gpo-internet-explorer-maintenance-missing-in-ws-2008-r2
http://technet.microsoft.com/en-us/library/jj890998.aspx
http://blogs.technet.com/b/asiasupp/archive/2011/03/30/internet-explorer-9-ie9-group-policy-preferences-gpp.aspx
http://www.grouppolicy.biz/2011/03/how-to-enable-group-policy-preferences-support-for-ie9/
None of which really help other than to state IEM is not available any more.
As I understand it, working with GPP --> control panel remove the ability for individual users to add their own sites to trusted sites. 1 step forward 3 years backward.
ASKER
Follow up - the current IEM setting is working, my problem now is how do I remove it so I can at least attempt an alternative off-system solution.?
At the moment, the best alternative that comes to mind is to abandon the GPO with the IEM settings and start again - Hopefully the policy is not too complicated to re-create with all the settings that you still want. Since you don't have access to the setting directly through the GPMC, you could try to manually delete the IEM settings from the policy (after making a backup, of course!).
Domain policy files are stored in the folder \\FQDN\Sysvol\FQDN\Policie s\<GPOGUID >\User\Mic rosoft\IEA K
Local Machine policy files are stored in the folder %windir%\System32\GroupPol icy\User\M icrosoft\I EAK
See this article for more information:
How Internet Explorer Maintenance Extension Works
http://technet.microsoft.com/en-us/library/cc728403(v=WS.10).aspx
Domain policy files are stored in the folder \\FQDN\Sysvol\FQDN\Policie
Local Machine policy files are stored in the folder %windir%\System32\GroupPol
See this article for more information:
How Internet Explorer Maintenance Extension Works
http://technet.microsoft.com/en-us/library/cc728403(v=WS.10).aspx
ASKER
Hello JohnBB42
The file locates at \\FQDN\Sysvol\FQDN\Policie s\<GPOGUID >\User\Mic rosoft\IEA K\install. ins can this be edited directly, i.e. I would like to add a string of IP to the value "Proxy_Override" ?
i.e. add Office365 host URL's to get exchange / Outlook to work.
[Proxy]
Proxy_Enable=1
HTTP_Proxy_Server=127.0.0. 1:80
Use_Same_Proxy=1
FTP_Proxy_Server=127.0.0.1 :80
Gopher_Proxy_Server=127.0. 0.1:80
Secure_Proxy_Server=127.0. 0.1:80
Socks_Proxy_Server=127.0.0 .1:80
Proxy_Override=1.2.3.4; 1.3.4.5; 5.6.7.8;
somehost.domain.com;
anotherhost.anotherdomain. com;<local >"
[Branding]
GPVersion=9.00.8112.16421
The file locates at \\FQDN\Sysvol\FQDN\Policie
i.e. add Office365 host URL's to get exchange / Outlook to work.
[Proxy]
Proxy_Enable=1
HTTP_Proxy_Server=127.0.0.
Use_Same_Proxy=1
FTP_Proxy_Server=127.0.0.1
Gopher_Proxy_Server=127.0.
Secure_Proxy_Server=127.0.
Socks_Proxy_Server=127.0.0
Proxy_Override=1.2.3.4; 1.3.4.5; 5.6.7.8;
somehost.domain.com;
anotherhost.anotherdomain.
[Branding]
GPVersion=9.00.8112.16421
The Internet Explorer Maintenance setting will not be available if you have installed ie10 or 11.
Refer below link for more info http://msdn.microsoft.com/en-us/library/dn338129.aspx
ASKER
Another odd thing here, IE 11 is installed, IEM policy is applied and impacting on any user that was created before IE11 was installed, any user created after IE 11 was installed does not have the policy applied.
David Johnson, CD, MVP, how did you get Internet Explorer 10 setting under configuration/preferences /control panel/internet settings ?
I only have Internet Explorer 5, 6, 7, and 8.
David Johnson, CD, MVP, how did you get Internet Explorer 10 setting under configuration/preferences /control panel/internet settings ?
I only have Internet Explorer 5, 6, 7, and 8.
you need to download and install the administrative templates.
The file locates at \\FQDN\Sysvol\FQDN\PolicieMy suggestion was to delete the settings if you wanted to somehow try and "save" the GPO that included the IEM settings that were still applying since you could not edit them directly. With that said, If you wanted to update these settings, I believe you could use the IEAK Profile Manager to update the install.ins file for the version of IE you're targeting.s\<GPOGUID >\User\Mic rosoft\IEA K\install. ins can this be edited directly, i.e. I would like to add a string of IP to the value "Proxy_Override" ?
i.e. add Office365 host URL's to get exchange / Outlook to work.
[Proxy]
Proxy_Enable=1
HTTP_Proxy_Server=127.0.0.1:80
Use_Same_Proxy=1
FTP_Proxy_Server=127.0.0.1:80
Gopher_Proxy_Server=127.0.0.1:80
Secure_Proxy_Server=127.0.0.1:80
Socks_Proxy_Server=127.0.0.1:80
Proxy_Override=1.2.3.4; 1.3.4.5; 5.6.7.8;
somehost.domain.com;
anotherhost.anotherdomain.com;<local >"
[Branding]
GPVersion=9.00.8112.16421
Internet Explorer Administration Kit (IEAK) Information and Downloads
http://technet.microsoft.com/en-us/ie/bb219517.aspx
Another odd thing here, IE 11 is installed, IEM policy is applied and impacting on any user that was created before IE11 was installed, any user created after IE 11 was installed does not have the policy applied.I think this has to do with the way the policy was initially applied to the users where the settings are copied to the user's profile. They may be located here: Documents and Settings\<<username>>\Appl
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
I've requested that this question be closed as follows:
Accepted answer: 0 points for hairylots's comment #a40629946
for the following reason:
Only solution I could find
Accepted answer: 0 points for hairylots's comment #a40629946
for the following reason:
Only solution I could find
This is only a short term solution where the long term solution has been given.. Microsoft will be phasing out versions of IE < 11
Beginning January 12, 2016, only the most current version of Internet Explorer available for a supported operating system will receive technical support and security updateshttp://support.microsoft.com/gp/Microsoft-Internet-Explorer
Are you performing this maintenance on a Windows 7 system running IE10?
Looks like you may have encountered this issue when IE10 is installed on Win7:
http://sdmsoftware.com/group-policy-blog/ie-policy/warning-installing-ie-10-on-your-windows-7-workstation-removes-ie-maintenance-policy-from-group-policy/
Read through the comments after the article for more information.
I would suggest trying to modify the policy directly from your Domain Controller or another workstation that has not been upgraded.
-JB