Solved

Uninstall IE9,IE10,IE11 through Group Policy

Posted on 2013-12-26
24
3,111 Views
Last Modified: 2014-01-14
A simple requirement I have to downgrade all the domain computers to be downgraded to IE8 as most of the govt. websites are not compatible with higher IE version.

Please don't give me the links from google, I'd rather wait for experts personal experience regarding this issue.
0
Comment
Question by:ibrahim52
  • 16
  • 3
  • 3
  • +2
24 Comments
 
LVL 1

Expert Comment

by:mayank1908
ID: 39741305
Yes there are Group Policy entries that will prohibit specified applications from running. You can disable IEXPLORE for specific logon groups. However if they can login to the local machine ‘Group Policy’ won’t work.

If you disable IE and they install another browser they still have ‘Internet’ access.

A better solution is gateway/firewall rules. Put the restricted employees on one subnet and block ports 80 and 443. The other employees still have access and the restricted employees can only get internal web pages.
0
 
LVL 7

Expert Comment

by:dsnegi_25dec
ID: 39741321
Hi Ibrahim,

I believe you have to decide on this like for me I was facing issue on IE 11 on Ex2010 sp2 rollup 6 where my OWA page is doing unexpected behavior but after upgrading Sp3 it is working fine  .

So recommendation always is go for upgrade rather than downgrade. If you are facing any issue then you have look solution . Here you are doing downgrade basically this is not a solution its a workaround.
0
 
LVL 12

Author Comment

by:ibrahim52
ID: 39741344
I am only looking for a way to save a lot of time by not going to each and every computer and then doing the downgrade till IE8 and simply pushing the script or group policy through GPO.

Actually I have already import the template of Block Toolkit and it works only if the PC already has been downgraded till IE8 but unfortunately I am too late to import the template because most of the computers already have IE11 installed.
0
 
LVL 26

Expert Comment

by:Leon Fester
ID: 39741369
You don't need to uninstall the higher versions of IE.
You need to setup IE to use compatibility mode so that the .govt sites displays in a IE 8 mode.

See discussion from other forum
http://social.technet.microsoft.com/Forums/en-US/8ffc9e6c-dfdb-428b-92aa-cd3ddb304d6c/internet-explorer-9-compatability-view-gpo

More info on compatibility view and GPO:
Group Policy and Internet Explorer 8
http://technet.microsoft.com/en-us/library/cc985351.aspx

Group Policies in Internet Explorer 9
http://technet.microsoft.com/en-us/library/gg699401.aspx
0
 
LVL 12

Author Comment

by:ibrahim52
ID: 39741681
Honestly, I know about the compatibility mode for a long time already but for a normal user or inexperienced guy sitting in front of Windows 7. That person panics and make me run to his computer out of 40 PCs of network over here, just to have him the downgraded version of IE8.
0
 
LVL 12

Author Comment

by:ibrahim52
ID: 39741682
Or is it possible to set the GPO for Compatibility view should be ie8 by default. No matter if its IE 11 or any higher version ?
0
 
LVL 47

Expert Comment

by:dstewartjr
ID: 39742075
0
 
LVL 12

Author Comment

by:ibrahim52
ID: 39742172
I used "Turn on Compatibility View for all websites, using Group Policy" out of that link you gave me. Ill update you once the gpo applies properly and achieve what i am looking for. Thanks a load.
0
 
LVL 47

Expert Comment

by:dstewartjr
ID: 39742185
Good luck
0
 
LVL 12

Author Comment

by:ibrahim52
ID: 39744699
dstewartjr. Is there anyway to test the compatibility by going to some website  to confirm if the settings are applied to all the domain PC as I have already applied the gp.
0
 
LVL 12

Author Comment

by:ibrahim52
ID: 39744709
I am asking you because I don't see any BROWSER MODE in IE11
0
 
LVL 47

Assisted Solution

by:dstewartjr
dstewartjr earned 250 total points
ID: 39746173
0
How to run any project with ease

Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
- Combine task lists, docs, spreadsheets, and chat in one
- View and edit from mobile/offline
- Cut down on emails

 
LVL 12

Author Comment

by:ibrahim52
ID: 39755635
Thanks dstewartjr, I checked on machine but it is still EDGE (Default)
0
 
LVL 12

Author Comment

by:ibrahim52
ID: 39755647
I just need every computer to be forced changed to IE8 or IE7 mode through group policy and any other GPO works fine because I keep making changes now & then, so there is no problem with Group policy applying to the computers.
0
 
LVL 12

Author Comment

by:ibrahim52
ID: 39757070
I checked it personally today by going to one of the computer and browsing the intranet website which needs IE to be on IE8 mode and it works smooth but for that I have to keep F12 developer tools pane open otherwise it jumps back to EDGE(DEFAULT)
0
 
LVL 12

Author Comment

by:ibrahim52
ID: 39757072
I have also posted the same question to Microsoft forums meanwhile because I need this to be solved really urgent.
0
 
LVL 12

Author Comment

by:ibrahim52
ID: 39757682
http://technet.microsoft.com/en-us/library/dn321453.aspx

It is clearly mentioned that

 Internet Explorer 11 no longer supports these Group Policy settings:

    Turn on Internet Explorer 7 Standards Mode

    Turn off Compatibility View button

    Turn off Quick Tabs functionality

    Turn off the quick pick menu

    Use large icons for command buttons
0
 
LVL 12

Author Comment

by:ibrahim52
ID: 39764398
What if I host an additional domain controller of Windows Server 2012 on any virtual machine ?
0
 
LVL 12

Author Comment

by:ibrahim52
ID: 39764403
The Group policies of server 2012 as an additional domain controller would apply for IE11 for all the users ?
0
 
LVL 26

Assisted Solution

by:Leon Fester
Leon Fester earned 250 total points
ID: 39764509
You don't need a Windows 2012 server to get the Group Policy settings for IE 11.
http://www.microsoft.com/en-us/download/details.aspx?id=40905

Taken from the above link:
Windows Server 2008 R2 SP1: 1.If you install Internet Explorer 11, the Administrative Template files (interes.admx and inetres.adml) will be installed automatically.
2.Follow the instructions as described in the following article: http://technet.microsoft.com/en-us/library/cc709647.aspx

Windows Server 2008 and Windows Server 2008 R2:

 Follow the instructions as described in the following article: http://technet.microsoft.com/en-us/library/cc709647.aspx

Once you have the template installed you should be able to apply the GPO for Compatibility mode.
http://technet.microsoft.com/library/dn321457.aspx
The option you're looking for the second item on the list:
Turn on Compatibility View for all websites, using Group Policy

If you are battling with the workaround then you could ask your users to do a manual workaround.

I had to do the same for one of my clients before we could apply the GPO in order to get them working. The issue arose when some users upgraded to Windows 8.1 and then SharePoint sites started failing with some InfoPath components.

If it's OK with your bosses then send out an email explaining that there is a known issue with sites xyz and you are working with the Vendors to fix it. In the meantime they can create a manual workaround by following the following steps. [It's a once-off action]
In IE, Click Tools, Click Compatibility View Settings and then add the URL to the list of sites.
This works best if you are on the site that is not displaying correctly so that you can see the effects of the change and it will auto-populate the URL in the compatibility settings mentioned above.
0
 
LVL 12

Author Comment

by:ibrahim52
ID: 39764563
but if it is really possible to apply the group policy through 2012, i am asking because sooner or later I am looking forward to upgrade with 2012 replacing 2008 but again meanwhile was thinking if I could keep it as additional domain controller and also apply policies for OS like Windows 8 and 8.1
0
 
LVL 12

Accepted Solution

by:
ibrahim52 earned 0 total points
ID: 39768698
Thanks dvt_localboy. The problem is solved and it is confirmed that it is solved through a registry tweak from group policy. I did the following

1. First, make sure the IE11 is installed on Server 2008 R2 or Main DC.
2. Restart the server so the settings for IE11 should appear in GP.
3. Then add the websites or URL you need to be run in comp view in IE11 COMP VIEW LIST SETTINGS of IE11 in Server.
4. Final step, go to GPO and navigate to User Configuration ---> Preferences ---> Registry and NEW then Update and keeping the HKEY CURRENT USER as it is , browse to Software\Microsoft\Internet Explorer\BrowserEmulation\ClearableListData and chose UserFilter entry and restart the computers to apply the registry settings.

I tried the websites and automatically browser changes to IE5 mode which is what I was really looking for.
0
 
LVL 26

Expert Comment

by:Leon Fester
ID: 39770386
Windows Server 2012 already has this group policy template added so you should be fine with Server 2012.
I think it is mentioned in the download link I posted above.

Just remember, when you do go with 2012 they you need to run the Group Policy manager on Server 2012 in order to get all the templates available...don't just do it from your workstation.
0
 
LVL 12

Author Closing Comment

by:ibrahim52
ID: 39778768
It took time but it worked.
0

Featured Post

Free Trending Threat Insights Every Day

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

Join & Write a Comment

Resolve DNS query failed errors for Exchange
Possible fixes for Windows 7 and Windows Server 2008 updating problem. Solutions mentioned are from Microsoft themselves. I started a case with them from our Microsoft Silver Partner option to open a case and get direct support from Microsoft. If s…
This tutorial will walk an individual through locating and launching the BEUtility application and how to execute it on the appropriate database. Log onto the server running the Backup Exec database. In a larger environment, this would generally be …
This tutorial will walk an individual through setting the global and backup job media overwrite and protection periods in Backup Exec 2012. Log onto the Backup Exec Central Administration Server. Examine the services. If all or most of them are stop…

708 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

17 Experts available now in Live!

Get 1:1 Help Now