We help IT Professionals succeed at work.

We've partnered with Certified Experts, Carl Webster and Richard Faulkner, to bring you a podcast all about Citrix Workspace, moving to the cloud, and analytics & intelligence. Episode 2 coming soon!Listen Now


Internet Explorer Group Policies

markf100 asked
Medium Priority
Last Modified: 2010-04-18
Hi there

I have a Windows 2003 server and xp sp2 clients.

I want a single internet policy that permits and disallows certain behaviour for any user logging into the network. My question is, should group policies for Internet Explorer, such activex downloads,meta fresh and the like be configured in the "Internet Explorer Maintence" or under the security page/internet control panel/internet explorer/windows components for the users?

Does it make any difference?
Watch Question

With the latter, it's easier to read the effective settings and to change settings later. The settings made by importing from the current machine do not appear in GPMC/RSOP.

Internet Explorer Maintenance is nice if you have a system completely set up the way you like it, including security zones and restrictions, and want to import those into a policy. If you want to change settings later, you'll have to make sure the settings you're importing really reflect what you want.

Also, on a server that has enhanced security configuration enabled, the settings under IE maintenance are only applied to computers with enhanced security installed. This makes me believe it depends too much on the browser and configuration on the machine you're configuring the policy on.

I'd use Administrative Templates/Windows components/etc for policies as much as possible.

Not the solution you were looking for? Getting a personalized solution is easy.

Ask the Experts
Top Expert 2006

Hi markf100,

i woul tend to agree with rant on this, we have a rather nice policy that locks down users just how we like i and after months of trialling and implementing and finalising the thing across the board, we found that all our policies site under  admintemplates\windows components\etc in regards to internet  - we set proxies and security boundaries etc

Access more of Experts Exchange with a free account
Thanks for using Experts Exchange.

Create a free account to continue.

Limited access with a free account allows you to:

  • View three pieces of content (articles, solutions, posts, and videos)
  • Ask the experts questions (counted toward content limit)
  • Customize your dashboard and profile

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.


Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.