Solved

Uninstall IE9,IE10,IE11 through Group Policy

Posted on 2013-12-26
24
3,263 Views
Last Modified: 2014-01-14
A simple requirement I have to downgrade all the domain computers to be downgraded to IE8 as most of the govt. websites are not compatible with higher IE version.

Please don't give me the links from google, I'd rather wait for experts personal experience regarding this issue.
0
Comment
Question by:ibrahim52
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 16
  • 3
  • 3
  • +2
24 Comments
 
LVL 1

Expert Comment

by:mayank1908
ID: 39741305
Yes there are Group Policy entries that will prohibit specified applications from running. You can disable IEXPLORE for specific logon groups. However if they can login to the local machine ‘Group Policy’ won’t work.

If you disable IE and they install another browser they still have ‘Internet’ access.

A better solution is gateway/firewall rules. Put the restricted employees on one subnet and block ports 80 and 443. The other employees still have access and the restricted employees can only get internal web pages.
0
 
LVL 7

Expert Comment

by:dsnegi_25dec
ID: 39741321
Hi Ibrahim,

I believe you have to decide on this like for me I was facing issue on IE 11 on Ex2010 sp2 rollup 6 where my OWA page is doing unexpected behavior but after upgrading Sp3 it is working fine  .

So recommendation always is go for upgrade rather than downgrade. If you are facing any issue then you have look solution . Here you are doing downgrade basically this is not a solution its a workaround.
0
 
LVL 12

Author Comment

by:ibrahim52
ID: 39741344
I am only looking for a way to save a lot of time by not going to each and every computer and then doing the downgrade till IE8 and simply pushing the script or group policy through GPO.

Actually I have already import the template of Block Toolkit and it works only if the PC already has been downgraded till IE8 but unfortunately I am too late to import the template because most of the computers already have IE11 installed.
0
Online Training Solution

Drastically shorten your training time with WalkMe's advanced online training solution that Guides your trainees to action. Forget about retraining and skyrocket knowledge retention rates.

 
LVL 26

Expert Comment

by:Leon Fester
ID: 39741369
You don't need to uninstall the higher versions of IE.
You need to setup IE to use compatibility mode so that the .govt sites displays in a IE 8 mode.

See discussion from other forum
http://social.technet.microsoft.com/Forums/en-US/8ffc9e6c-dfdb-428b-92aa-cd3ddb304d6c/internet-explorer-9-compatability-view-gpo

More info on compatibility view and GPO:
Group Policy and Internet Explorer 8
http://technet.microsoft.com/en-us/library/cc985351.aspx

Group Policies in Internet Explorer 9
http://technet.microsoft.com/en-us/library/gg699401.aspx
0
 
LVL 12

Author Comment

by:ibrahim52
ID: 39741681
Honestly, I know about the compatibility mode for a long time already but for a normal user or inexperienced guy sitting in front of Windows 7. That person panics and make me run to his computer out of 40 PCs of network over here, just to have him the downgraded version of IE8.
0
 
LVL 12

Author Comment

by:ibrahim52
ID: 39741682
Or is it possible to set the GPO for Compatibility view should be ie8 by default. No matter if its IE 11 or any higher version ?
0
 
LVL 47

Expert Comment

by:Donald Stewart
ID: 39742075
0
 
LVL 12

Author Comment

by:ibrahim52
ID: 39742172
I used "Turn on Compatibility View for all websites, using Group Policy" out of that link you gave me. Ill update you once the gpo applies properly and achieve what i am looking for. Thanks a load.
0
 
LVL 47

Expert Comment

by:Donald Stewart
ID: 39742185
Good luck
0
 
LVL 12

Author Comment

by:ibrahim52
ID: 39744699
dstewartjr. Is there anyway to test the compatibility by going to some website  to confirm if the settings are applied to all the domain PC as I have already applied the gp.
0
 
LVL 12

Author Comment

by:ibrahim52
ID: 39744709
I am asking you because I don't see any BROWSER MODE in IE11
0
 
LVL 47

Assisted Solution

by:Donald Stewart
Donald Stewart earned 250 total points
ID: 39746173
0
 
LVL 12

Author Comment

by:ibrahim52
ID: 39755635
Thanks dstewartjr, I checked on machine but it is still EDGE (Default)
0
 
LVL 12

Author Comment

by:ibrahim52
ID: 39755647
I just need every computer to be forced changed to IE8 or IE7 mode through group policy and any other GPO works fine because I keep making changes now & then, so there is no problem with Group policy applying to the computers.
0
 
LVL 12

Author Comment

by:ibrahim52
ID: 39757070
I checked it personally today by going to one of the computer and browsing the intranet website which needs IE to be on IE8 mode and it works smooth but for that I have to keep F12 developer tools pane open otherwise it jumps back to EDGE(DEFAULT)
0
 
LVL 12

Author Comment

by:ibrahim52
ID: 39757072
I have also posted the same question to Microsoft forums meanwhile because I need this to be solved really urgent.
0
 
LVL 12

Author Comment

by:ibrahim52
ID: 39757682
http://technet.microsoft.com/en-us/library/dn321453.aspx

It is clearly mentioned that

 Internet Explorer 11 no longer supports these Group Policy settings:

    Turn on Internet Explorer 7 Standards Mode

    Turn off Compatibility View button

    Turn off Quick Tabs functionality

    Turn off the quick pick menu

    Use large icons for command buttons
0
 
LVL 12

Author Comment

by:ibrahim52
ID: 39764398
What if I host an additional domain controller of Windows Server 2012 on any virtual machine ?
0
 
LVL 12

Author Comment

by:ibrahim52
ID: 39764403
The Group policies of server 2012 as an additional domain controller would apply for IE11 for all the users ?
0
 
LVL 26

Assisted Solution

by:Leon Fester
Leon Fester earned 250 total points
ID: 39764509
You don't need a Windows 2012 server to get the Group Policy settings for IE 11.
http://www.microsoft.com/en-us/download/details.aspx?id=40905

Taken from the above link:
Windows Server 2008 R2 SP1: 1.If you install Internet Explorer 11, the Administrative Template files (interes.admx and inetres.adml) will be installed automatically.
2.Follow the instructions as described in the following article: http://technet.microsoft.com/en-us/library/cc709647.aspx

Windows Server 2008 and Windows Server 2008 R2:

 Follow the instructions as described in the following article: http://technet.microsoft.com/en-us/library/cc709647.aspx 

Once you have the template installed you should be able to apply the GPO for Compatibility mode.
http://technet.microsoft.com/library/dn321457.aspx
The option you're looking for the second item on the list:
Turn on Compatibility View for all websites, using Group Policy

If you are battling with the workaround then you could ask your users to do a manual workaround.

I had to do the same for one of my clients before we could apply the GPO in order to get them working. The issue arose when some users upgraded to Windows 8.1 and then SharePoint sites started failing with some InfoPath components.

If it's OK with your bosses then send out an email explaining that there is a known issue with sites xyz and you are working with the Vendors to fix it. In the meantime they can create a manual workaround by following the following steps. [It's a once-off action]
In IE, Click Tools, Click Compatibility View Settings and then add the URL to the list of sites.
This works best if you are on the site that is not displaying correctly so that you can see the effects of the change and it will auto-populate the URL in the compatibility settings mentioned above.
0
 
LVL 12

Author Comment

by:ibrahim52
ID: 39764563
but if it is really possible to apply the group policy through 2012, i am asking because sooner or later I am looking forward to upgrade with 2012 replacing 2008 but again meanwhile was thinking if I could keep it as additional domain controller and also apply policies for OS like Windows 8 and 8.1
0
 
LVL 12

Accepted Solution

by:
ibrahim52 earned 0 total points
ID: 39768698
Thanks dvt_localboy. The problem is solved and it is confirmed that it is solved through a registry tweak from group policy. I did the following

1. First, make sure the IE11 is installed on Server 2008 R2 or Main DC.
2. Restart the server so the settings for IE11 should appear in GP.
3. Then add the websites or URL you need to be run in comp view in IE11 COMP VIEW LIST SETTINGS of IE11 in Server.
4. Final step, go to GPO and navigate to User Configuration ---> Preferences ---> Registry and NEW then Update and keeping the HKEY CURRENT USER as it is , browse to Software\Microsoft\Internet Explorer\BrowserEmulation\ClearableListData and chose UserFilter entry and restart the computers to apply the registry settings.

I tried the websites and automatically browser changes to IE5 mode which is what I was really looking for.
0
 
LVL 26

Expert Comment

by:Leon Fester
ID: 39770386
Windows Server 2012 already has this group policy template added so you should be fine with Server 2012.
I think it is mentioned in the download link I posted above.

Just remember, when you do go with 2012 they you need to run the Group Policy manager on Server 2012 in order to get all the templates available...don't just do it from your workstation.
0
 
LVL 12

Author Closing Comment

by:ibrahim52
ID: 39778768
It took time but it worked.
0

Featured Post

Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I was prompted to write this article after the recent World-Wide Ransomware outbreak. For years now, System Administrators around the world have used the excuse of "Waiting a Bit" before applying Security Patch Updates. This type of reasoning to me …
After seeing many questions for JRNL_WRAP_ERROR for replication failure, I thought it would be useful to write this article.
To efficiently enable the rotation of USB drives for backups, storage pools need to be created. This way no matter which USB drive is installed, the backups will successfully write without any administrative intervention. Multiple USB devices need t…
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…

719 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question