Want to win a PS4? Go Premium and enter to win our High-Tech Treats giveaway. Enter to Win


Setting IE Temp File Cache File with Active Directory GPO.

Posted on 2004-08-03
Medium Priority
Last Modified: 2012-06-21
I'm sure this must be possible with GPO's in Active directory but I can't find any info on it.

We have approx 60 PC's (mostly Win2K & some XP Pro) on a single Win2K Active Directory domain.
After scanning some C: drives I see that some have IE Temporary Internet cache files of up to 500MB!
I want some way to automatically adjust this down to say 20MB on every machine without having to visit each PC.

Is there a way of setting this with a GPO or can it be done automatically some other way?


Question by:livingan
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2

Accepted Solution

jdeclue earned 250 total points
ID: 11707097
I was not able to find a policy setting but was able to find the registry settings which change the cache size. You can use regedit.exe make the changes on a machine and then export the registry key. After you do that you can use the exported file and the reg.exe program to import the changes to the machines with their login script.

Cache Size Limits
The following settings in the HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache registry key and subkeys specify initial cache limits, in kilobytes.

[Subkey\]Value : type Description
Signature : REG_SZ "Client UrlCache MMF Ver 4.7"
QuotaAdjustCheck : REG_DWORD Default setting is 00000001, which represents the minimum cache size of 256 KB. If this entry is not in the registry, the initial cache limit is 8192 KB.
Content\CachePrefix : REG_SZ "Content:"
Content\CacheLimit : REG_DWORD Default setting is 00000200, which represents a cache size of 512 KB. For example, to change the cache size to 4096 KB, change the value to 00001000 (4096 hex). The upper limit is determined by the amount of free space on the device.
Cookies\CachePrefix : REG_SZ "Cookie:"
Cookies\CacheLimit : REG_DWORD Default setting is 00000100, which represents a cache size of 256 KB.
History\CachePrefix : REG_SZ "Visited:"
History\CacheLimit : REG_DWORD Default setting is 00000100, which represents a cache size of 256 KB.  

Cache Configuration
The following setting in the HKEY_CURRENT_USER\SOFTWARE\Microsoft\windows\CurrentVersion\Internet Settings\ registry key specifies when the browser should check for updated Web pages.

Value : type Description
SyncMode5 : REG_DWORD Default value is 00000004, which instructs the browser to automatically check for updated Web pages. Other valid values are:
0: Never check for updates (always use cached page).

2: Check for updates once per session.

3: Always check for updates.


Expert Comment

ID: 11710017
How abt. calling this script from the log on script to clean up all users temp internet files anyway:

cd %homedrive%%homepath%
rd /s/q locals~1\tempor~1
rd /s/q locals~1\temp
rd /s/q cookies
rd /s/q temp
rd /s/q locals~1\temp\history
rd /s/q locals~1\temp
md locals~1\temp

(above works with 2k and XP)

Hope this helps


Author Comment

ID: 11725989
Not quite what I was after but following some extensive investigation myself it doesn't seem to be possible via GPO's.
The setting seems to be configured in each users profile so you cannot make one global setting for each PC.

Best way does seem to be to set the desired settings on one PC and export the relevent reg keys using regedit.
Keys to export are:
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Cache]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Content]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Cookies]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\History]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache]
"Signature"="Client UrlCache MMF Ver 5.2"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]

dword = size in KB converted to Hex e.g 5000 (hex) = 20480 KB = 20MB

Then import these registry keys to the PC when the user logs in.
-- Save the above keys to a file with extension .reg
-- Somewhere in the login script import the file using reg.exe

Not neat but workable with a bit of effort...


Expert Comment

ID: 11726094
It is possible in GPO's but you have to learn to write GPO policies within administrative templates. Anything that can be done in the registry can be set with a GPO. If you are up for some learning, search for writing ADM files on Microsoft's web site

Here is an example of some settings a customer required, so I ADM file to do it in a GPO.





                  KEYNAME "System\CurrentControlSet\Services\Cdrom"
                  #if version >= 4
                      SUPPORTED !!SUPPORTED_Win2k
                  EXPLAIN !!CDROMAUTORUN_Help
                  VALUENAME "Autorun"
                  VALUEON NUMERIC 0
                  VALUEOFF NUMERIC 1
            END POLICY

                  KEYNAME "Software\Classes\regfile\shell\open\command"
                  #if version >= 4
                      SUPPORTED !!SUPPORTED_Win2k
                  EXPLAIN !!REGEDITASSOC_Help
                  VALUENAME ""
                  VALUEON "notepad.exe %1"
                  VALUEOFF "regedit.exe %1"
            END POLICY

                  KEYNAME "System\CurrentControlSet\Control\Session Manager\Subsystems"
                  #if version >= 4
                      SUPPORTED !!SUPPORTED_Win2k
                  EXPLAIN !!REMOVEOS2KEY_Help
                  VALUENAME "Os2"
                  VALUEON "%SystemRoot%\system32\os2ss.not"
                  VALUEOFF "%SystemRoot%\system32\os2ss.exe"
            END POLICY


                  KEYNAME "System\CurrentControlSet\Control\Session Manager\Subsystems"
                  #if version >= 4
                      SUPPORTED !!SUPPORTED_Win2k
                  EXPLAIN !!REMOVEPOSIXKEY_Help
                  VALUENAME "Posix"
                  VALUEON "%SystemRoot%\system32\psxss.not"
                  VALUEOFF "%SystemRoot%\system32\psxss.exe"
            END POLICY




CNCSREGSERVERS="**** Server Registry Modifications"
CNCSREGSERVERS_Help="These are **** Specific Registry Setings."

CDROMAUTORUN="Turn Off Auto Run for CD-ROM"
CDROMAUTORUN_Help="Turns off Auto Run settings for CD-ROMs"

REGEDITASSOC="Change .reg extension to open with NotePad."
REGEDITASSOC_Help="Change Defualt .reg Editor to Notepad."

REMOVEOS2KEY="Disable Registry Entry for OS/2 System."
REMOVEOS2KEY_Help="Sets the OS\2 Registry Entry to an invalid file."

REMOVEPOSIXKEY="Disable Registry Entry for Posix System."
REMOVEPOSIXKEY_Help="Sets the Posix Registry Entry to an invalid file."

SUPPORTED_Win2k="At least Microsoft Windows 2000"
SUPPORTED_Win2kOnly="Only works on Microsoft Windows 2000"
SUPPORTED_Win2kSP1="At least Microsoft Windows 2000 Service Pack 1"
SUPPORTED_Win2kSP3="At least Microsoft Windows 2000 Service Pack 3"
SUPPORTED_WindowsXP="At least Microsoft Windows XP Professional"
SUPPORTED_WindowsXPSP1="At least Microsoft Windows XP Pro with SP1 or Windows .NET Server family"
SUPPORTED_WindowsXP_SP1_W2K_SP4_NETSERVER="At least Microsoft Windows 2000 Service Pack 4, Microsoft Windows XP Pro Service Pack 1 or Microsoft Windows .NET Server Family"

Featured Post

Free Backup Tool for VMware and Hyper-V

Restore full virtual machine or individual guest files from 19 common file systems directly from the backup file. Schedule VM backups with PowerShell scripts. Set desired time, lean back and let the script to notify you via email upon completion.  

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Auditing domain password hashes is a commonly overlooked but critical requirement to ensuring secure passwords practices are followed. Methods exist to extract hashes directly for a live domain however this article describes a process to extract u…
After seeing many questions for JRNL_WRAP_ERROR for replication failure, I thought it would be useful to write this article.
This video shows how to use Hyena, from SystemTools Software, to bulk import 100 user accounts from an external text file. View in 1080p for best video quality.
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …

610 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question