IE10 ADM Template on Windows 2003 domain Controller.

Need to push out Group Policy settings for IE 10 on Win 7 PCs in our 2003 AD domain.

Downloaded the ADM template from here.
 http://www.microsoft.com/en-us/download/details.aspx?id=37009
Will Follow these instructions for installing the template on my DC.....

Windows Server 2003:
1.Copy inetres.adm into %WINDIR%\inf\
2.Open the Group Policy Editor
•Click Start, click Run, type gpedit.msc, and then click OK.
•Expand Local Computer Policy, expand Computer Configuration.
•Right click on Administrative Templates. If you see Inetres template on this list, click Remove, and then click Close.
•Right click on Administrative Templates and click on Add/Remove Templates. Click Add and locate inetres.adm in %WINDIR%\inf\ and click Open to add it again. Then click Close.

However there is already an inetres.adm in %windir%\inf\, most likely for IE8 as the date on the file is 3/8/2009.

So my question, should i rename the existing inetres.adm file, copy the new file into %windir%\inf\ and continue as per the above instructions? If I do, will this blow away my current GPO settings for IE ? or will it retain them?

What is best way to do this?
keamalsaSystem AdministratorAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

McKnifeCommented:
Hi.

I favor using RSAT to do this from  a win7 machine that has IE10 installed. It will enable 2003 to control IE10.
0
keamalsaSystem AdministratorAuthor Commented:
Explain how this works in more detail please.
0
McKnifeCommented:
RSAT= Remote Server Administration Tools. http://www.microsoft.com/en-us/download/details.aspx?id=7887
Installed on win7 and started as domain admin, you can connect to your DC and no matter what version the DC is, you can use and configure any policies for which the client you start RSAT from has administrative templates for. Example: RSAT on win7, with IE10 installed will enable you to use a 2003 DC to configure all policies of win7 and IE10 without the need to import administrative templates.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
10 Tips to Protect Your Business from Ransomware

Did you know that ransomware is the most widespread, destructive malware in the world today? It accounts for 39% of all security breaches, with ransomware gangsters projected to make $11.5B in profits from online extortion by 2019.

keamalsaSystem AdministratorAuthor Commented:
So I can push out IE10 GP maintenance settings to ALL Win7 PCs on my domain thru my PC if I have  RSAT installed and connected to my DC?
0
keamalsaSystem AdministratorAuthor Commented:
Can someone else answer my original question as well?
0
McKnifeCommented:
> So I can push out IE10 GP maintenance settings to ALL Win7 PCs on my domain thru my PC if I have  RSAT installed and connected to my DC?
Right.
0
keamalsaSystem AdministratorAuthor Commented:
So that would mean my PC would need to stay running at all times, and backed up as though it were one of my servers I assume...?
0
McKnifeCommented:
No.
GPOs are just files. Files that are stored at your DC. The RSAT-PC is only instructing the DC to build these files, hosting/distributing the files is still done by the DC, the RSAT PC can be offline anytime you want.
0
VirastaRUC Tech Consultant Commented:
Hi,

Hope this answers your question..

Recommendations for managing Group Policy administrative template (.adm) files
http://support.microsoft.com/kb/816662

By default, when GPOs are edited, Group Policy Object Editor compares the timestamps of the ADM files in the workstation’s %windir%\Inf folder with those that are stored in the GPTs Adm folder. If the workstation’s files are newer, Group Policy Object Editor copies these files to the GPT Adm folder, overwriting any existing files of the same name. This comparison occurs when the Administrative Templates node (computer or user configuration) is selected in Group Policy Object Editor, regardless of whether the administrator actually edits the GPO.

Hope that helps :)
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Microsoft Legacy OS

From novice to tech pro — start learning today.