Solved

Missing IE Maintenance (Preference Mode) in GPO

Posted on 2014-03-25
12
11,139 Views
Last Modified: 2014-03-28
The Main Policy was created many years ago. In the summary report, it clearly shows Internet Explorer Maintenance (Preference Mode)>URLs/Important URLs>Home page URL (set to school web page).

Editing the GPO, the option to change the settings "Internet Explorer Maintenance" under User Configuration\Policies\Windows Settings\ does not appear. Verified it does not exist on any of the other GPOs, as well.

All Browser settings have been moved to another policy, with the exception of this setting because it can't be reset or removed (or seen).

How can I remove this setting altogether from this policy?

Other info if needed: The GP Mgmt is v.6.0.0.1, running on virtual domain controller Windows Server 2008 R2 SP1.
0
Comment
Question by:cssunetadmin
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 6
  • 4
  • 2
12 Comments
 
LVL 19

Assisted Solution

by:Peter Hutchison
Peter Hutchison earned 250 total points
ID: 39953664
Login to a PC or Server with Internet Explorer 9 or less, then you should be able to view the IE Maintenance options again.
0
 
LVL 37

Accepted Solution

by:
Mahesh earned 250 total points
ID: 39955323
You must have installed IE 10 on 2008 R2 DC
With IE 10, IE maintenance is gone from GPO and also IE 10 do not understand IE maintenance
The one option could be install GPMC on windows 2003 \ XP \ Win 7 \ 2008 R2 member server where IE 10 is not installed and from there remove this settings and wait for 1 or two days so that it will get applied to all workstations and then you can remove that policy

Also if you wanted to set these kind of polices in feature, then check below EE link
http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Windows/Windows_8/Q_28383822.html

Mahesh.
0
 

Author Closing Comment

by:cssunetadmin
ID: 39955827
Both answers are correct, although in this situation, the solutions provided are not feasible. This is the only location where group policy is administered to the school. The Main Policy was created a long time ago and contains certificates and more touchy items than I care to mess with. It would not be wise of me to remove the entire policy.

I should have added that I already knew about IE needs to be version 9 or less, just can't figure out how to accomplish that without jeopardizing the stability of the system. I was hoping someone had a quick registry hack for just the home page setting... or a tweaked adm to install to change the home page to nothing, then remove the adm.

Mahesh, thank you for the link regarding Win 8. We are not there yet, but it will be something to refer to in the future.
0
Office 365 Training for IT Pros

Learn how to provision tenants, synchronize on-premise Active Directory, implement Single Sign-On, customize Office deployment, and protect your organization with eDiscovery and DLP policies.  Only from Platform Scholar.

 
LVL 37

Expert Comment

by:Mahesh
ID: 39955957
Please check below GPO setting, you can definitely do that with your existing 2008 R2 GPMC

http://social.technet.microsoft.com/Forums/en-US/20061e82-f857-4d38-a494-e8af18a5b51a/enforcing-an-ie-default-page-via-gpo?forum=winserverGP

Enable the setting and keep it blank, It should work with all versions of IE

Mahesh.
0
 

Author Comment

by:cssunetadmin
ID: 39956056
Hi Mahesh, the problem is that the old homepage setting is still existing on the Main Policy GPO for the IE Maintenance (which we can see in report, but not touch in settings). When we enter the new homepage in, like you suggest in the link, the old still applies. Even with a gpupdate /force.

That is what lead us to posting the question in Experts-Exchange.
0
 
LVL 19

Expert Comment

by:Peter Hutchison
ID: 39956096
It is possible to uninstall the IE 10 installation and revert to a previous version of Internet Explorer. It will need a reboot to do this. This will only apply for Windows Server 2008/ 2008 R2 or Windows 7 machines.

To uninstall IE10:
1. Open Control Panel
2. Select Programs and Features
3. Select View installed updates
4. Locate 'Windows Internet Explorer 10' in the list
5. Select Uninstall.
0
 

Author Comment

by:cssunetadmin
ID: 39956121
cmsxpjh,

Thank you, I was thinking this might be one of the offered solutions. I am nervous to try this without knowing what impact it will have on the one server that is controlling the GPOs for the network. So many settings are attached to IE (intranet zones, etc.) in some way or another.

I would like to have this as my last resort, though. It seems like a logical idea.
0
 
LVL 37

Expert Comment

by:Mahesh
ID: 39956410
If you have any workstation (Win7 \ Win XP) without IE 10, you can probably install GPMC on that and then undone that setting from main GPO
I am sure it will work and actually same is communicated in my earlier comment

Mahesh.
0
 

Author Comment

by:cssunetadmin
ID: 39956492
Mahesh, so are you saying take any computer (Win7) that is on the network, (downgrading to something IE9 or less), install the GPMC on it, add all the computers from the domain/network (wouldn't there be a conflict of policy management?), change the setting for Home Page on a new policy that allows for IE Maintenance changes... wait a few days, then remove it...

...and this will remove the Home Page setting from the original Windows 2008 server Main Policy??

This doesn't seem to be logical to me. Please help me understand how the setting from one GPMC affects the settings on the other GPMC. Thank you.
0
 
LVL 37

Expert Comment

by:Mahesh
ID: 39956535
Your comment:
add all the computers from the domain/network

Why you are adding all computers and where .......its not required at all

All you need to do, take any win7 domain joined machine without IE 10, install GPMC and simply edit your main policy and remove \ keep blank that setting from GPO

Once you done from there it will automatically get removed from DC as in reality you are connecting to policy on DC for this task (Because GPO does exists on windows 2008 R2 DC and not on Win7 workstation, workstation is just management workstation)

Then allow workstations to logoff \ reboot for some days and check if setting is removed from client computers or not

No need to remove GPO as it might contains another settings

Hope that clear now

Mahesh.
1
 

Author Comment

by:cssunetadmin
ID: 39956566
Thank you for providing those instructions. I was over thinking it. Let me give it a try this evening and I'll get back with the results.
0
 

Author Comment

by:cssunetadmin
ID: 39962089
A good night's sleep allowed me to get past my mental block. So yes, I created a virtual Windows 7 machine and joined it to the domain (which happens to be off site), first uninstalled the IE Update (to v11) from Programs and Features (view installed updates), then verified IE 9 or less was under Windows Features (happened to be IE 8), installed the Remote Server Administrative Tools, but just the Group Policy Management. Then, low and behold, as you predicted, the correct IE Maintenance section was available for editing. Cleared the wrong homepage out. Went into the actual Group Policy Management Console and the setting is gone, homepage removed, and everything is right with the world. Thank you for hanging in with me on this.
0

Featured Post

What Is Transaction Monitoring and who needs it?

Synthetic Transaction Monitoring that you need for the day to day, which ensures your business website keeps running optimally, and that there is no downtime to impact your customer experience.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

A company’s centralized system that manages user data, security, and distributed resources is often a focus of criminal attention. Active Directory (AD) is no exception. In truth, it’s even more likely to be targeted due to the number of companies …
This article demonstrates probably the easiest way to configure domain-wide tier isolation within Active Directory. If you do not know tier isolation read https://technet.microsoft.com/en-us/windows-server-docs/security/securing-privileged-access/s…
This Micro Tutorial will demonstrate how to add subdomains to your content reports. This can be very importing in having a site with multiple subdomains.
How to create a custom search shortcut to site-search Experts Exchange using Google in the Firefox browser. This eliminates the need to type out site:experts-exchange.com whenever you want to search the site. Launch your Bookmark Menu: Press 'Ctrl +…

688 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question