• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 316
  • Last Modified:

Internet Explorer Group Policies

Hi there

I have a Windows 2003 server and xp sp2 clients.

I want a single internet policy that permits and disallows certain behaviour for any user logging into the network. My question is, should group policies for Internet Explorer, such activex downloads,meta fresh and the like be configured in the "Internet Explorer Maintence" or under the security page/internet control panel/internet explorer/windows components for the users?

Does it make any difference?
1 Solution
With the latter, it's easier to read the effective settings and to change settings later. The settings made by importing from the current machine do not appear in GPMC/RSOP.

Internet Explorer Maintenance is nice if you have a system completely set up the way you like it, including security zones and restrictions, and want to import those into a policy. If you want to change settings later, you'll have to make sure the settings you're importing really reflect what you want.

Also, on a server that has enhanced security configuration enabled, the settings under IE maintenance are only applied to computers with enhanced security installed. This makes me believe it depends too much on the browser and configuration on the machine you're configuring the policy on.

I'd use Administrative Templates/Windows components/etc for policies as much as possible.
Hi markf100,

i woul tend to agree with rant on this, we have a rather nice policy that locks down users just how we like i and after months of trialling and implementing and finalising the thing across the board, we found that all our policies site under  admintemplates\windows components\etc in regards to internet  - we set proxies and security boundaries etc


Featured Post

Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Tackle projects and never again get stuck behind a technical roadblock.
Join Now