Link to home
Start Free TrialLog in
Avatar of hairylots
hairylotsFlag for Australia

asked on

How to modify the GPO --> User Configuration --> Policies --> Windows settings --> Internet Explorer Maintenance --> connection / Proxy Settings

Hello All

How to modify the GPO --> User Configuration --> Policies --> Windows settings --> Internet Explorer Maintenance --> connection / Proxy Settings.

This is not listed under GPO --> User Configuration --> Policies --> Windows settings --> here I have listed Scripts (logon . Logoff), Security settings, Folder redirections, Policy Based QoS.

How is this setting Internet Explorer Maintenance --> connection / Proxy Settings edited / changed?

User generated imageUser generated image
Thanks in advance.
Avatar of JohnB442
JohnB442
Flag of United States of America image

Hello,
Are you performing this maintenance on a Windows 7 system running IE10?
Looks like you may have encountered this issue when IE10 is installed on Win7:
http://sdmsoftware.com/group-policy-blog/ie-policy/warning-installing-ie-10-on-your-windows-7-workstation-removes-ie-maintenance-policy-from-group-policy/
Read through the comments after the article for more information.
I would suggest trying to modify the policy directly from your Domain Controller or another workstation that has not been upgraded.
-JB
Avatar of hairylots

ASKER

Hello JB

I should have mentioned, this is a windows server 2008 R2 terminal server, no clients involved here.
IEM is depreciated with no real good replacement.


I have since read over
http://social.technet.microsoft.com/Forums/windowsserver/en-US/42060454-1e1d-492f-b774-836f6fd1e5bf/gpo-internet-explorer-maintenance-missing-in-ws-2008-r2 

http://technet.microsoft.com/en-us/library/jj890998.aspx 

http://blogs.technet.com/b/asiasupp/archive/2011/03/30/internet-explorer-9-ie9-group-policy-preferences-gpp.aspx

http://www.grouppolicy.biz/2011/03/how-to-enable-group-policy-preferences-support-for-ie9/

None of which really help other than to state IEM is not available any more.

As I understand it, working with GPP --> control panel remove the ability for individual users to add their own sites to trusted sites. 1 step forward 3 years backward.
Follow up - the current IEM setting is working, my problem now is how do I remove it so I can at least attempt an alternative off-system solution.?
At the moment, the best alternative that comes to mind is to abandon the GPO with the IEM settings and start again - Hopefully the policy is not too complicated to re-create with all the settings that you still want. Since you don't have access to the setting directly through the GPMC, you could try to manually delete the IEM settings from the policy (after making a backup, of course!).

Domain policy files are stored in the folder \\FQDN\Sysvol\FQDN\Policies\<GPOGUID>\User\Microsoft\IEAK
Local Machine policy files are stored in the folder %windir%\System32\GroupPolicy\User\Microsoft\IEAK

See this article for more information:
How Internet Explorer Maintenance Extension Works
http://technet.microsoft.com/en-us/library/cc728403(v=WS.10).aspx
Avatar of David Johnson, CD
the new settings are in user configuration/preferencesUser generated image/control panel/internet settings
Hello JohnBB42

The file locates at \\FQDN\Sysvol\FQDN\Policies\<GPOGUID>\User\Microsoft\IEAK\install.ins can this be edited directly, i.e. I would like to add a string of IP to the value "Proxy_Override" ?
i.e. add Office365 host URL's to get exchange / Outlook to work.

[Proxy]
Proxy_Enable=1
HTTP_Proxy_Server=127.0.0.1:80
Use_Same_Proxy=1
FTP_Proxy_Server=127.0.0.1:80
Gopher_Proxy_Server=127.0.0.1:80
Secure_Proxy_Server=127.0.0.1:80
Socks_Proxy_Server=127.0.0.1:80
Proxy_Override=1.2.3.4; 1.3.4.5; 5.6.7.8;
somehost.domain.com;
anotherhost.anotherdomain.com;<local>"
[Branding]
GPVersion=9.00.8112.16421
Avatar of AbhishekJha
AbhishekJha

The Internet Explorer Maintenance setting will not be available if you have installed ie10 or 11.
Another odd thing here, IE 11 is installed, IEM policy is applied and impacting on any user that was created before IE11 was installed, any user created after IE 11 was installed does not have the policy applied.

David Johnson, CD, MVP, how did you get Internet Explorer 10 setting under configuration/preferences /control panel/internet settings ?

I only have Internet Explorer 5, 6, 7, and 8.
you need to download and install the administrative templates.
The file locates at \\FQDN\Sysvol\FQDN\Policies\<GPOGUID>\User\Microsoft\IEAK\install.ins can this be edited directly, i.e. I would like to add a string of IP to the value "Proxy_Override" ?
i.e. add Office365 host URL's to get exchange / Outlook to work.

[Proxy]
Proxy_Enable=1
HTTP_Proxy_Server=127.0.0.1:80
Use_Same_Proxy=1
FTP_Proxy_Server=127.0.0.1:80
Gopher_Proxy_Server=127.0.0.1:80
Secure_Proxy_Server=127.0.0.1:80
Socks_Proxy_Server=127.0.0.1:80
Proxy_Override=1.2.3.4; 1.3.4.5; 5.6.7.8;
somehost.domain.com;
anotherhost.anotherdomain.com;<local>"
[Branding]
GPVersion=9.00.8112.16421
My suggestion was to delete the settings if you wanted to somehow try and "save" the GPO that included the IEM settings that were still applying since you could not edit them directly. With that said, If you wanted to update these settings, I believe you could use the IEAK Profile Manager to update the install.ins file for the version of IE you're targeting.

Internet Explorer Administration Kit (IEAK) Information and Downloads
http://technet.microsoft.com/en-us/ie/bb219517.aspx

Another odd thing here, IE 11 is installed, IEM policy is applied and impacting on any user that was created before IE11 was installed, any user created after IE 11 was installed does not have the policy applied.
I think this has to do with the way the policy was initially applied to the users where the settings are copied to the user's profile. They may be located here: Documents and Settings\<<username>>\Application Data\Microsoft\Internet Explorer\Custom Settings\Custom0\. See the section "Applying GPO Settings to a Client Computer" in http://technet.microsoft.com/en-us/library/cc728403(v=ws.10).aspx.
ASKER CERTIFIED SOLUTION
Avatar of hairylots
hairylots
Flag of Australia image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
I've requested that this question be closed as follows:

Accepted answer: 0 points for hairylots's comment #a40629946

for the following reason:

Only solution I could find
This is only a short term solution where the long term solution has been given.. Microsoft will be phasing out versions of IE < 11

     Beginning January 12, 2016, only the most current version of Internet Explorer available for a supported operating system will receive technical support and security updates
http://support.microsoft.com/gp/Microsoft-Internet-Explorer