Solved

IE 11

Posted on 2013-12-16
13
1,164 Views
Last Modified: 2013-12-28
We have a Windows 2008 Active Directory (not R2), which is running 2008 forest and domain functional levels. Our clients are running Windows 7 with Internet Explorer 8. We have a need to upgrade the clients to Internet Explorer 11 and use Group Policies to manage IE 11 on them, specifically proxy settings and compatibility modes. We understand that Group Policies have changed for IE 11.

We have two questions:

Can IE 11 be managed by Group Policies on Windows Server 2008?
If so, how?

Thanks, Marco
0
Comment
Question by:MCCAsw
13 Comments
 
LVL 18

Expert Comment

by:awawada
ID: 39722548
Can IE 11 be managed by Group Policies on Windows Server 2008?

Yes

If so, how?

You need the Administrative templates for Internet Explorer 11:
http://technet.microsoft.com/en-us/library/dn321438.aspx
http://www.microsoft.com/en-us/download/details.aspx?id=40905
0
 

Author Comment

by:MCCAsw
ID: 39725187
It didn't work so it is not the solution.
0
 

Author Comment

by:MCCAsw
ID: 39725190
The templates at:
http://www.microsoft.com/en-us/download/details.aspx?id=40905
are for Windows Server 2003.

However, this:
http://technet.microsoft.com/en-us/library/dn321438.aspx
says, "you can copy the updated Inetres.admx and Inetres.adml files from another computer to the PolicyDefinitions folder on this computer."

So I copied those files from a 2008 R2 box with IE 11 installed on it to the 2008 server in the %SystemRoot%\PolicyDefinitions folder. I then fired up Group Policy Management, edited the GPO, and navigated to User Configuration, Policies, Administrative Templates, Windows Components, Internet Explorer. The settings in there are different, so that appears to have worked. (Unfortunately, it will be hard to see if Compatibility mode is turned on for a site because Microsoft turned off the button...see: http://technet.microsoft.com/en-us/library/dn321449.aspx)

However, it did not affect the ability to set proxy settings. They are no longer set in Internet Explorer Maintenance. See:
http://technet.microsoft.com/en-us/library/dn338129.aspx

Since they are not in that section of Group Policy, the proxy settings do not appear to be controlled by Administrative Templates. This:
http://johnfail.wordpress.com/2013/06/15/configuring-internet-explorer-10s-proxy-via-group-policy/
describes (with screenshots) how to configure proxy settings for IE 10 on a 2012 server. I'm assuming that proxy settings for IE 11 are similar.

On my 2008 server in the GPO, when I navigate to User Configuration, Preferences, Control Panel Settings, right-click on Interent Settings and select New, all I see is Internet Explorer 5, 6, and 7.

How do I get Internet Explorer 8, 9, 10, and 11 (especially 11) to show up?
0
 
LVL 14

Assisted Solution

by:BlueCompute
BlueCompute earned 250 total points
ID: 39726493
Is there any reason why you can't install RSAT and GPMC on a Windows 7 SP1 box and configure your GPOs from there?
0
 

Author Comment

by:MCCAsw
ID: 39726576
@BlueCompute: I'll try that and post back my results
0
How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

 
LVL 34

Expert Comment

by:Seth Simmons
ID: 39726756
the link posted earlier for the administrative templates does show only 2003 for system requirements - however, if you look at the installation instructions, it shows 2008 in the list and has a link that explains how to do it

http://technet.microsoft.com/en-us/library/cc709647.aspx
0
 
LVL 32

Assisted Solution

by:PowerEdgeTech
PowerEdgeTech earned 250 total points
ID: 39726773
Is there any reason why you can't install RSAT and GPMC on a Windows 7 SP1 box [with IE11] and configure your GPOs from there?
By doing this, the appropriate template files will automatically be uploaded to the DC ... you simply use the GP MMC snap-in to set/edit group policies regarding IE11.
0
 

Author Comment

by:MCCAsw
ID: 39729876
It didn't work.

Specifically, I installed a Win7 box in the lab, installed RSAT, installed all updates, installed IE 9, 10, and 11. In Group Policy Management when I navigate to User Configuration, Preferences, Control Panel Settings, right-click on Interent Settings and select New, all I see is Internet Explorer 5, 6, 7, and 8.

I'm now going to try Windows 8.
0
 

Author Comment

by:MCCAsw
ID: 39732533
I used Windows 8 in both the lab and in production with mixed results. At least with Windows 8, I can now see IE 10 as it looks in here:
http://johnfail.wordpress.com/2013/06/15/configuring-internet-explorer-10s-proxy-via-group-policy/

And based on this:
http://www.grouppolicy.biz/2013/11/internet-explorer-11-group-policy-preferences/
I should be able to set proxy settings on the IE 10 object and those settings get set on IE 11.

However, not all of the proxy settings come down to an IE 11 client. Specifically, the proxy server comes down, but none of the exceptions are there, and “Bypass proxy server for local addresses” is not checked. Does anyone know why that those would not be set?

Also, when I add sites to User Config, Policies, Admin Templates, Windows Components, Internet Explorer, Compatibility View, Use Policy List of Internet Explorer 7 sites, why do they NOT show up in IE 11 when you open the Compatibility View Settings dialog box?
0
 

Accepted Solution

by:
MCCAsw earned 0 total points
ID: 39736273
I found the answer in another forum. So to give proper credit, it can be found here:
http://social.technet.microsoft.com/Forums/windowsserver/en-US/fb6ff7a5-d8e5-4f6f-b964-1b79da6d8dea/ie-11-group-policy-and-windows-server-2008?forum=winserverGP

You have to use Windows 8 or Server 2012 and:

This article should explain why you can't see the compat view site listed in the UI:
http://blogs.msdn.com/b/asiatech/archive/2013/10/23/how-to-add-web-site-to-compatibility-view-list-via-gpo.aspx
 As I understand it, the sites in the policy *are* successfully treated, just don't appear visible in the UI.

For the proxy settings, and the bypass list, a lot of people seem to have trouble with this.
 I haven't had trouble myself, but we use WPAD and proxy.pac, so I don't have a need to set proxy and bypass at all.

 There are a few notes around the web, suggesting that it's often due to lack of familiarity with the F5-F6-F7-F8 usage (each setting can be individually enabled/configured or disabled/not-configured).
 Also, GPP can be inconsistent in the configuration UI, in that, if you drill down into some "Advanced" settings (to check them out, or acquaint yourself with the various settings options), sometimes, when you back out of the settings dialog, you are "locked out" of changing those higher-level settings. So you might need to create a fresh set of settings (one where you haven't dug around).

From here:
http://community.spiceworks.com/topic/342202-ie-10-group-policy-help-needed-i-think-i-ve-found-a-bug

Daan_Udink Sep 24, 2013 at 10:57 PM

Found a method to do it with the GPO. It's all about in which order you fill the proxy options.

This is the order:
• Check "Use a proxy setting for...".
• Press F5.
• Check "Bypass proxy for local.."
• Click the "Advanced.." Button
• Fill in your exceptions.
• Check the "Use the same proxy for all protocols" button.
• Click "OK".
• Fill in the IP and Port of your proxy server.
• Click "OK"

In this order eveything is filled in. Only problem is that you never can go back to the Advanced.. screen.
If you do so the proxy's IP & Port will be cleared again.
So the only way to add something to your exceptions is to make a new rule for IE10 in same order as written above.

Hope this will help you!




Don
 (Please take a moment to "Vote as Helpful" and/or "Mark as Answer", where applicable.
 This helps the community, keeps the forums tidy, and recognises useful contributions. Thanks!)

 
Edited by DonPick Friday, December 20, 2013 10:26 PM
0
 

Author Closing Comment

by:MCCAsw
ID: 39743285
My solution is actually someone else's from another forum post. I gave credit in my post.
0

Featured Post

What Is Threat Intelligence?

Threat intelligence is often discussed, but rarely understood. Starting with a precise definition, along with clear business goals, is essential.

Join & Write a Comment

Suggested Solutions

Title # Comments Views Activity
Firefox 38.2.0 is caching when it should not 3 35
File conversion question 5 57
PDF links 3 46
server plus 2 47
Hyper-convergence systems have taken the IT world by storm and have quickly started to change our point of view of how the data center should and could be architected. In this article, I’ll explain the benefits of employing a hyper-converged system …
Learn about cloud computing and its benefits for small business owners.
This Micro Tutorial will demonstrate how to add subdomains to your content reports. This can be very importing in having a site with multiple subdomains.
How to create a custom search shortcut to site-search Experts Exchange using Google in the Firefox browser. This eliminates the need to type out site:experts-exchange.com whenever you want to search the site. Launch your Bookmark Menu: Press 'Ctrl +…

747 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

8 Experts available now in Live!

Get 1:1 Help Now