Solved

Server 2003 / Server 2012 / GPO / IE Maintenace

Posted on 2014-02-18
7
495 Views
Last Modified: 2014-03-05
Hi,

We have a server 2003 environment that has just been upgraded to server 2012.

It looks like the GPOs haven't been changed as there are GPOs that still reference IE maintenance that have specified a proxypac file

I understand the process to be that these GPOs should be replaced with new GPOs using group policy preferences.
0
Comment
Question by:cmatchett
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
  • 2
  • +1
7 Comments
 
LVL 58

Assisted Solution

by:Cliff Galiher
Cliff Galiher earned 333 total points
ID: 39867195
There is no automated changing of GPOs when migrating or upgrading server OSes. If you want to take advantage if new features, it is up to you to turn off old GPO settings and turn on new ones.
0
 
LVL 37

Expert Comment

by:bbao
ID: 39867217
Just a quick question:

Have you used GPUpdate.exe to refresh the GPO settings you have applied?
0
 

Author Comment

by:cmatchett
ID: 39867275
No changes have been made to GPOs, yet

Ok, so part of the upgrade process would be to identity GPOs that can no longer be modified using the group policy management console in Server 2012 with new gpos that can
0
Visualize your virtual and backup environments

Create well-organized and polished visualizations of your virtual and backup environments when planning VMware vSphere, Microsoft Hyper-V or Veeam deployments. It helps you to gain better visibility and valuable business insights.

 
LVL 37

Accepted Solution

by:
Mahesh earned 167 total points
ID: 39867426
IE maintenance section have been removed from 2012 GPO and replaced with GP preferences

But existing 2003 GPO settings will be remains there and you may not be able to edit those settings from 2012 server

You need to install 2003 \ 2008 \ 2008 R2 member server in existing environment and need to install GPMC console through RSAT tools if you want to manage old IE maintenance GPO

This is required in order to manage old IE clients upto IE 9

IE10 and above doesn't support IE maintenance settings from old OS GPO and it requires GPO console on 2012 \ win8 servers and you need to modify GP Preferences Item there

http://technet.microsoft.com/en-us/library/jj574108.aspx#BKMK_IEpolicy

Mahesh
0
 

Author Comment

by:cmatchett
ID: 39885272
so the only way to set proxy pac file is through group policy preferences?
0
 
LVL 58

Assisted Solution

by:Cliff Galiher
Cliff Galiher earned 333 total points
ID: 39885303
IEM was simply not a scalable solution because it was too browser version specific. Almost every setting that could be set by IEM can now be set using other tools, such as the IE administration template (ADM,ADMX), group policy preferences, or even via DHCP/DNS in some cases, just like how Outlook can now use autodiscover.

For pushing out proxy settings, the last is the best option. More info:

http://technet.microsoft.com/en-us/library/gg598505.aspx
0
 
LVL 37

Expert Comment

by:Mahesh
ID: 39885354
Yes, that is true.
basically what you can do, just unlink old policies (IE maintenance) and use 2012 \ win 8 management server \ machine with GPMC installed to create new polices and then set IE preferences from there.
You will find there IE Preferences for IE 5,6 and IE 7 and IE 8,9 and IE 10 as well
IE 10 will also take care of IE 11 as well if your client has that installed

Mahesh
0

Featured Post

What Is Transaction Monitoring and who needs it?

Synthetic Transaction Monitoring that you need for the day to day, which ensures your business website keeps running optimally, and that there is no downtime to impact your customer experience.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

On July 14th 2015, Windows Server 2003 will become End of Support, leaving hundreds of thousands of servers around the world that still run this 12 year old operating system vulnerable and potentially out of compliance in many organisations around t…
What to do when Windows Update is not working correctly? What tools can I use to detect the cause of the malfunction problem? What does this numeric error code mean? These and other questions that you have been asking in the past are answered here (…
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…

717 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question