• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1221
  • Last Modified:

IE 11

We have a Windows 2008 Active Directory (not R2), which is running 2008 forest and domain functional levels. Our clients are running Windows 7 with Internet Explorer 8. We have a need to upgrade the clients to Internet Explorer 11 and use Group Policies to manage IE 11 on them, specifically proxy settings and compatibility modes. We understand that Group Policies have changed for IE 11.

We have two questions:

Can IE 11 be managed by Group Policies on Windows Server 2008?
If so, how?

Thanks, Marco
3 Solutions
Can IE 11 be managed by Group Policies on Windows Server 2008?


If so, how?

You need the Administrative templates for Internet Explorer 11:
MCCAswAuthor Commented:
It didn't work so it is not the solution.
MCCAswAuthor Commented:
The templates at:
are for Windows Server 2003.

However, this:
says, "you can copy the updated Inetres.admx and Inetres.adml files from another computer to the PolicyDefinitions folder on this computer."

So I copied those files from a 2008 R2 box with IE 11 installed on it to the 2008 server in the %SystemRoot%\PolicyDefinitions folder. I then fired up Group Policy Management, edited the GPO, and navigated to User Configuration, Policies, Administrative Templates, Windows Components, Internet Explorer. The settings in there are different, so that appears to have worked. (Unfortunately, it will be hard to see if Compatibility mode is turned on for a site because Microsoft turned off the button...see: http://technet.microsoft.com/en-us/library/dn321449.aspx)

However, it did not affect the ability to set proxy settings. They are no longer set in Internet Explorer Maintenance. See:

Since they are not in that section of Group Policy, the proxy settings do not appear to be controlled by Administrative Templates. This:
describes (with screenshots) how to configure proxy settings for IE 10 on a 2012 server. I'm assuming that proxy settings for IE 11 are similar.

On my 2008 server in the GPO, when I navigate to User Configuration, Preferences, Control Panel Settings, right-click on Interent Settings and select New, all I see is Internet Explorer 5, 6, and 7.

How do I get Internet Explorer 8, 9, 10, and 11 (especially 11) to show up?
Improve Your Query Performance Tuning

In this FREE six-day email course, you'll learn from Janis Griffin, Database Performance Evangelist. She'll teach 12 steps that you can use to optimize your queries as much as possible and see measurable results in your work. Get started today!

Is there any reason why you can't install RSAT and GPMC on a Windows 7 SP1 box and configure your GPOs from there?
MCCAswAuthor Commented:
@BlueCompute: I'll try that and post back my results
Seth SimmonsSr. Systems AdministratorCommented:
the link posted earlier for the administrative templates does show only 2003 for system requirements - however, if you look at the installation instructions, it shows 2008 in the list and has a link that explains how to do it

PowerEdgeTechIT ConsultantCommented:
Is there any reason why you can't install RSAT and GPMC on a Windows 7 SP1 box [with IE11] and configure your GPOs from there?
By doing this, the appropriate template files will automatically be uploaded to the DC ... you simply use the GP MMC snap-in to set/edit group policies regarding IE11.
MCCAswAuthor Commented:
It didn't work.

Specifically, I installed a Win7 box in the lab, installed RSAT, installed all updates, installed IE 9, 10, and 11. In Group Policy Management when I navigate to User Configuration, Preferences, Control Panel Settings, right-click on Interent Settings and select New, all I see is Internet Explorer 5, 6, 7, and 8.

I'm now going to try Windows 8.
MCCAswAuthor Commented:
I used Windows 8 in both the lab and in production with mixed results. At least with Windows 8, I can now see IE 10 as it looks in here:

And based on this:
I should be able to set proxy settings on the IE 10 object and those settings get set on IE 11.

However, not all of the proxy settings come down to an IE 11 client. Specifically, the proxy server comes down, but none of the exceptions are there, and “Bypass proxy server for local addresses” is not checked. Does anyone know why that those would not be set?

Also, when I add sites to User Config, Policies, Admin Templates, Windows Components, Internet Explorer, Compatibility View, Use Policy List of Internet Explorer 7 sites, why do they NOT show up in IE 11 when you open the Compatibility View Settings dialog box?
MCCAswAuthor Commented:
I found the answer in another forum. So to give proper credit, it can be found here:

You have to use Windows 8 or Server 2012 and:

This article should explain why you can't see the compat view site listed in the UI:
 As I understand it, the sites in the policy *are* successfully treated, just don't appear visible in the UI.

For the proxy settings, and the bypass list, a lot of people seem to have trouble with this.
 I haven't had trouble myself, but we use WPAD and proxy.pac, so I don't have a need to set proxy and bypass at all.

 There are a few notes around the web, suggesting that it's often due to lack of familiarity with the F5-F6-F7-F8 usage (each setting can be individually enabled/configured or disabled/not-configured).
 Also, GPP can be inconsistent in the configuration UI, in that, if you drill down into some "Advanced" settings (to check them out, or acquaint yourself with the various settings options), sometimes, when you back out of the settings dialog, you are "locked out" of changing those higher-level settings. So you might need to create a fresh set of settings (one where you haven't dug around).

From here:

Daan_Udink Sep 24, 2013 at 10:57 PM

Found a method to do it with the GPO. It's all about in which order you fill the proxy options.

This is the order:
• Check "Use a proxy setting for...".
• Press F5.
• Check "Bypass proxy for local.."
• Click the "Advanced.." Button
• Fill in your exceptions.
• Check the "Use the same proxy for all protocols" button.
• Click "OK".
• Fill in the IP and Port of your proxy server.
• Click "OK"

In this order eveything is filled in. Only problem is that you never can go back to the Advanced.. screen.
If you do so the proxy's IP & Port will be cleared again.
So the only way to add something to your exceptions is to make a new rule for IE10 in same order as written above.

Hope this will help you!

 (Please take a moment to "Vote as Helpful" and/or "Mark as Answer", where applicable.
 This helps the community, keeps the forums tidy, and recognises useful contributions. Thanks!)

Edited by DonPick Friday, December 20, 2013 10:26 PM
MCCAswAuthor Commented:
My solution is actually someone else's from another forum post. I gave credit in my post.
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Network Scalability - Handle Complex Environments

Monitor your entire network from a single platform. Free 30 Day Trial Now!

Tackle projects and never again get stuck behind a technical roadblock.
Join Now