Solved

IE 11

Posted on 2013-12-16
13
1,176 Views
Last Modified: 2013-12-28
We have a Windows 2008 Active Directory (not R2), which is running 2008 forest and domain functional levels. Our clients are running Windows 7 with Internet Explorer 8. We have a need to upgrade the clients to Internet Explorer 11 and use Group Policies to manage IE 11 on them, specifically proxy settings and compatibility modes. We understand that Group Policies have changed for IE 11.

We have two questions:

Can IE 11 be managed by Group Policies on Windows Server 2008?
If so, how?

Thanks, Marco
0
Comment
Question by:MCCAsw
13 Comments
 
LVL 18

Expert Comment

by:awawada
ID: 39722548
Can IE 11 be managed by Group Policies on Windows Server 2008?

Yes

If so, how?

You need the Administrative templates for Internet Explorer 11:
http://technet.microsoft.com/en-us/library/dn321438.aspx
http://www.microsoft.com/en-us/download/details.aspx?id=40905
0
 

Author Comment

by:MCCAsw
ID: 39725187
It didn't work so it is not the solution.
0
 

Author Comment

by:MCCAsw
ID: 39725190
The templates at:
http://www.microsoft.com/en-us/download/details.aspx?id=40905 
are for Windows Server 2003.

However, this:
http://technet.microsoft.com/en-us/library/dn321438.aspx
says, "you can copy the updated Inetres.admx and Inetres.adml files from another computer to the PolicyDefinitions folder on this computer."

So I copied those files from a 2008 R2 box with IE 11 installed on it to the 2008 server in the %SystemRoot%\PolicyDefinitions folder. I then fired up Group Policy Management, edited the GPO, and navigated to User Configuration, Policies, Administrative Templates, Windows Components, Internet Explorer. The settings in there are different, so that appears to have worked. (Unfortunately, it will be hard to see if Compatibility mode is turned on for a site because Microsoft turned off the button...see: http://technet.microsoft.com/en-us/library/dn321449.aspx)

However, it did not affect the ability to set proxy settings. They are no longer set in Internet Explorer Maintenance. See:
http://technet.microsoft.com/en-us/library/dn338129.aspx

Since they are not in that section of Group Policy, the proxy settings do not appear to be controlled by Administrative Templates. This:
http://johnfail.wordpress.com/2013/06/15/configuring-internet-explorer-10s-proxy-via-group-policy/
describes (with screenshots) how to configure proxy settings for IE 10 on a 2012 server. I'm assuming that proxy settings for IE 11 are similar.

On my 2008 server in the GPO, when I navigate to User Configuration, Preferences, Control Panel Settings, right-click on Interent Settings and select New, all I see is Internet Explorer 5, 6, and 7.

How do I get Internet Explorer 8, 9, 10, and 11 (especially 11) to show up?
0
Optimizing Cloud Backup for Low Bandwidth

With cloud storage prices going down a growing number of SMBs start to use it for backup storage. Unfortunately, business data volume rarely fits the average Internet speed. This article provides an overview of main Internet speed challenges and reveals backup best practices.

 
LVL 14

Assisted Solution

by:BlueCompute
BlueCompute earned 250 total points
ID: 39726493
Is there any reason why you can't install RSAT and GPMC on a Windows 7 SP1 box and configure your GPOs from there?
0
 

Author Comment

by:MCCAsw
ID: 39726576
@BlueCompute: I'll try that and post back my results
0
 
LVL 34

Expert Comment

by:Seth Simmons
ID: 39726756
the link posted earlier for the administrative templates does show only 2003 for system requirements - however, if you look at the installation instructions, it shows 2008 in the list and has a link that explains how to do it

http://technet.microsoft.com/en-us/library/cc709647.aspx
0
 
LVL 32

Assisted Solution

by:PowerEdgeTech
PowerEdgeTech earned 250 total points
ID: 39726773
Is there any reason why you can't install RSAT and GPMC on a Windows 7 SP1 box [with IE11] and configure your GPOs from there?
By doing this, the appropriate template files will automatically be uploaded to the DC ... you simply use the GP MMC snap-in to set/edit group policies regarding IE11.
0
 

Author Comment

by:MCCAsw
ID: 39729876
It didn't work.

Specifically, I installed a Win7 box in the lab, installed RSAT, installed all updates, installed IE 9, 10, and 11. In Group Policy Management when I navigate to User Configuration, Preferences, Control Panel Settings, right-click on Interent Settings and select New, all I see is Internet Explorer 5, 6, 7, and 8.

I'm now going to try Windows 8.
0
 

Author Comment

by:MCCAsw
ID: 39732533
I used Windows 8 in both the lab and in production with mixed results. At least with Windows 8, I can now see IE 10 as it looks in here:
http://johnfail.wordpress.com/2013/06/15/configuring-internet-explorer-10s-proxy-via-group-policy/

And based on this:
http://www.grouppolicy.biz/2013/11/internet-explorer-11-group-policy-preferences/
I should be able to set proxy settings on the IE 10 object and those settings get set on IE 11.

However, not all of the proxy settings come down to an IE 11 client. Specifically, the proxy server comes down, but none of the exceptions are there, and “Bypass proxy server for local addresses” is not checked. Does anyone know why that those would not be set?

Also, when I add sites to User Config, Policies, Admin Templates, Windows Components, Internet Explorer, Compatibility View, Use Policy List of Internet Explorer 7 sites, why do they NOT show up in IE 11 when you open the Compatibility View Settings dialog box?
0
 

Accepted Solution

by:
MCCAsw earned 0 total points
ID: 39736273
I found the answer in another forum. So to give proper credit, it can be found here:
http://social.technet.microsoft.com/Forums/windowsserver/en-US/fb6ff7a5-d8e5-4f6f-b964-1b79da6d8dea/ie-11-group-policy-and-windows-server-2008?forum=winserverGP

You have to use Windows 8 or Server 2012 and:

This article should explain why you can't see the compat view site listed in the UI:
http://blogs.msdn.com/b/asiatech/archive/2013/10/23/how-to-add-web-site-to-compatibility-view-list-via-gpo.aspx 
 As I understand it, the sites in the policy *are* successfully treated, just don't appear visible in the UI.

For the proxy settings, and the bypass list, a lot of people seem to have trouble with this.
 I haven't had trouble myself, but we use WPAD and proxy.pac, so I don't have a need to set proxy and bypass at all.

 There are a few notes around the web, suggesting that it's often due to lack of familiarity with the F5-F6-F7-F8 usage (each setting can be individually enabled/configured or disabled/not-configured).
 Also, GPP can be inconsistent in the configuration UI, in that, if you drill down into some "Advanced" settings (to check them out, or acquaint yourself with the various settings options), sometimes, when you back out of the settings dialog, you are "locked out" of changing those higher-level settings. So you might need to create a fresh set of settings (one where you haven't dug around).

From here:
http://community.spiceworks.com/topic/342202-ie-10-group-policy-help-needed-i-think-i-ve-found-a-bug

Daan_Udink Sep 24, 2013 at 10:57 PM

Found a method to do it with the GPO. It's all about in which order you fill the proxy options.

This is the order:
• Check "Use a proxy setting for...".
• Press F5.
• Check "Bypass proxy for local.."
• Click the "Advanced.." Button
• Fill in your exceptions.
• Check the "Use the same proxy for all protocols" button.
• Click "OK".
• Fill in the IP and Port of your proxy server.
• Click "OK"

In this order eveything is filled in. Only problem is that you never can go back to the Advanced.. screen.
If you do so the proxy's IP & Port will be cleared again.
So the only way to add something to your exceptions is to make a new rule for IE10 in same order as written above.

Hope this will help you!




Don
 (Please take a moment to "Vote as Helpful" and/or "Mark as Answer", where applicable.
 This helps the community, keeps the forums tidy, and recognises useful contributions. Thanks!)

 
Edited by DonPick Friday, December 20, 2013 10:26 PM
0
 

Author Closing Comment

by:MCCAsw
ID: 39743285
My solution is actually someone else's from another forum post. I gave credit in my post.
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

If you don't have the right permissions set for your WordPress location in IIS, you won't be able to perform automatic updates. Here's how to fix the problem.
Learn about cloud computing and its benefits for small business owners.
This Micro Tutorial will demonstrate how to add subdomains to your content reports. This can be very importing in having a site with multiple subdomains.
This Micro Tutorial will demonstrate how nuggets on the Web are formatted by using Chrome Developer Tools. These tools would not only view the site's CSS but it can also modify it and save the CSS to use on your own site.

776 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question