Solved

Server 2003 / Server 2012 / GPO / IE Maintenace

Posted on 2014-02-18
7
489 Views
Last Modified: 2014-03-05
Hi,

We have a server 2003 environment that has just been upgraded to server 2012.

It looks like the GPOs haven't been changed as there are GPOs that still reference IE maintenance that have specified a proxypac file

I understand the process to be that these GPOs should be replaced with new GPOs using group policy preferences.
0
Comment
Question by:cmatchett
  • 2
  • 2
  • 2
  • +1
7 Comments
 
LVL 57

Assisted Solution

by:Cliff Galiher
Cliff Galiher earned 333 total points
ID: 39867195
There is no automated changing of GPOs when migrating or upgrading server OSes. If you want to take advantage if new features, it is up to you to turn off old GPO settings and turn on new ones.
0
 
LVL 37

Expert Comment

by:bbao
ID: 39867217
Just a quick question:

Have you used GPUpdate.exe to refresh the GPO settings you have applied?
0
 

Author Comment

by:cmatchett
ID: 39867275
No changes have been made to GPOs, yet

Ok, so part of the upgrade process would be to identity GPOs that can no longer be modified using the group policy management console in Server 2012 with new gpos that can
0
Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

 
LVL 36

Accepted Solution

by:
Mahesh earned 167 total points
ID: 39867426
IE maintenance section have been removed from 2012 GPO and replaced with GP preferences

But existing 2003 GPO settings will be remains there and you may not be able to edit those settings from 2012 server

You need to install 2003 \ 2008 \ 2008 R2 member server in existing environment and need to install GPMC console through RSAT tools if you want to manage old IE maintenance GPO

This is required in order to manage old IE clients upto IE 9

IE10 and above doesn't support IE maintenance settings from old OS GPO and it requires GPO console on 2012 \ win8 servers and you need to modify GP Preferences Item there

http://technet.microsoft.com/en-us/library/jj574108.aspx#BKMK_IEpolicy

Mahesh
0
 

Author Comment

by:cmatchett
ID: 39885272
so the only way to set proxy pac file is through group policy preferences?
0
 
LVL 57

Assisted Solution

by:Cliff Galiher
Cliff Galiher earned 333 total points
ID: 39885303
IEM was simply not a scalable solution because it was too browser version specific. Almost every setting that could be set by IEM can now be set using other tools, such as the IE administration template (ADM,ADMX), group policy preferences, or even via DHCP/DNS in some cases, just like how Outlook can now use autodiscover.

For pushing out proxy settings, the last is the best option. More info:

http://technet.microsoft.com/en-us/library/gg598505.aspx
0
 
LVL 36

Expert Comment

by:Mahesh
ID: 39885354
Yes, that is true.
basically what you can do, just unlink old policies (IE maintenance) and use 2012 \ win 8 management server \ machine with GPMC installed to create new polices and then set IE preferences from there.
You will find there IE Preferences for IE 5,6 and IE 7 and IE 8,9 and IE 10 as well
IE 10 will also take care of IE 11 as well if your client has that installed

Mahesh
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

A quick step-by-step overview of installing and configuring Carbonite Server Backup.
Sometimes drives fill up and we don't know why.  If you don't understand the best way to use the tools available, you may end up being stumped as to why your drive says it's not full when you have no space left!  Here's how you can find out...
In this Micro Tutorial viewers will learn how they can get their files copied out from their unbootable system without need to use recovery services. As an example non-bootable Windows 2012R2 installation is used which has boot problems.
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

770 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question