Learn how to a build a cloud-first strategyRegister Now

x
?
Solved

How to modify the GPO --> User Configuration --> Policies --> Windows settings --> Internet Explorer Maintenance --> connection / Proxy Settings

Posted on 2014-08-31
14
Medium Priority
?
361 Views
Last Modified: 2015-03-01
Hello All

How to modify the GPO --> User Configuration --> Policies --> Windows settings --> Internet Explorer Maintenance --> connection / Proxy Settings.

This is not listed under GPO --> User Configuration --> Policies --> Windows settings --> here I have listed Scripts (logon . Logoff), Security settings, Folder redirections, Policy Based QoS.

How is this setting Internet Explorer Maintenance --> connection / Proxy Settings edited / changed?

GPO SettingsGPO tree missing 2
Thanks in advance.
0
Comment
Question by:hairylots
  • 6
  • 3
  • 3
  • +1
14 Comments
 
LVL 2

Expert Comment

by:JohnB442
ID: 40296078
Hello,
Are you performing this maintenance on a Windows 7 system running IE10?
Looks like you may have encountered this issue when IE10 is installed on Win7:
http://sdmsoftware.com/group-policy-blog/ie-policy/warning-installing-ie-10-on-your-windows-7-workstation-removes-ie-maintenance-policy-from-group-policy/
Read through the comments after the article for more information.
I would suggest trying to modify the policy directly from your Domain Controller or another workstation that has not been upgraded.
-JB
0
 

Author Comment

by:hairylots
ID: 40296108
Hello JB

I should have mentioned, this is a windows server 2008 R2 terminal server, no clients involved here.
IEM is depreciated with no real good replacement.


I have since read over
http://social.technet.microsoft.com/Forums/windowsserver/en-US/42060454-1e1d-492f-b774-836f6fd1e5bf/gpo-internet-explorer-maintenance-missing-in-ws-2008-r2 

http://technet.microsoft.com/en-us/library/jj890998.aspx 

http://blogs.technet.com/b/asiasupp/archive/2011/03/30/internet-explorer-9-ie9-group-policy-preferences-gpp.aspx

http://www.grouppolicy.biz/2011/03/how-to-enable-group-policy-preferences-support-for-ie9/

None of which really help other than to state IEM is not available any more.

As I understand it, working with GPP --> control panel remove the ability for individual users to add their own sites to trusted sites. 1 step forward 3 years backward.
0
 

Author Comment

by:hairylots
ID: 40296112
Follow up - the current IEM setting is working, my problem now is how do I remove it so I can at least attempt an alternative off-system solution.?
0
VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

 
LVL 2

Expert Comment

by:JohnB442
ID: 40296165
At the moment, the best alternative that comes to mind is to abandon the GPO with the IEM settings and start again - Hopefully the policy is not too complicated to re-create with all the settings that you still want. Since you don't have access to the setting directly through the GPMC, you could try to manually delete the IEM settings from the policy (after making a backup, of course!).

Domain policy files are stored in the folder \\FQDN\Sysvol\FQDN\Policies\<GPOGUID>\User\Microsoft\IEAK
Local Machine policy files are stored in the folder %windir%\System32\GroupPolicy\User\Microsoft\IEAK

See this article for more information:
How Internet Explorer Maintenance Extension Works
http://technet.microsoft.com/en-us/library/cc728403(v=WS.10).aspx
0
 
LVL 84

Expert Comment

by:David Johnson, CD, MVP
ID: 40296204
the new settings are in user configuration/preferencesnew location/control panel/internet settings
0
 

Author Comment

by:hairylots
ID: 40296287
Hello JohnBB42

The file locates at \\FQDN\Sysvol\FQDN\Policies\<GPOGUID>\User\Microsoft\IEAK\install.ins can this be edited directly, i.e. I would like to add a string of IP to the value "Proxy_Override" ?
i.e. add Office365 host URL's to get exchange / Outlook to work.

[Proxy]
Proxy_Enable=1
HTTP_Proxy_Server=127.0.0.1:80
Use_Same_Proxy=1
FTP_Proxy_Server=127.0.0.1:80
Gopher_Proxy_Server=127.0.0.1:80
Secure_Proxy_Server=127.0.0.1:80
Socks_Proxy_Server=127.0.0.1:80
Proxy_Override=1.2.3.4; 1.3.4.5; 5.6.7.8;
somehost.domain.com;
anotherhost.anotherdomain.com;<local>"
[Branding]
GPVersion=9.00.8112.16421
0
 
LVL 5

Expert Comment

by:AbhishekJha
ID: 40296288
The Internet Explorer Maintenance setting will not be available if you have installed ie10 or 11.
0
 
LVL 5

Expert Comment

by:AbhishekJha
ID: 40296290
0
 

Author Comment

by:hairylots
ID: 40296398
Another odd thing here, IE 11 is installed, IEM policy is applied and impacting on any user that was created before IE11 was installed, any user created after IE 11 was installed does not have the policy applied.

David Johnson, CD, MVP, how did you get Internet Explorer 10 setting under configuration/preferences /control panel/internet settings ?

I only have Internet Explorer 5, 6, 7, and 8.
0
 
LVL 84

Expert Comment

by:David Johnson, CD, MVP
ID: 40296893
you need to download and install the administrative templates.
0
 
LVL 2

Expert Comment

by:JohnB442
ID: 40297242
The file locates at \\FQDN\Sysvol\FQDN\Policies\<GPOGUID>\User\Microsoft\IEAK\install.ins can this be edited directly, i.e. I would like to add a string of IP to the value "Proxy_Override" ?
i.e. add Office365 host URL's to get exchange / Outlook to work.

[Proxy]
Proxy_Enable=1
HTTP_Proxy_Server=127.0.0.1:80
Use_Same_Proxy=1
FTP_Proxy_Server=127.0.0.1:80
Gopher_Proxy_Server=127.0.0.1:80
Secure_Proxy_Server=127.0.0.1:80
Socks_Proxy_Server=127.0.0.1:80
Proxy_Override=1.2.3.4; 1.3.4.5; 5.6.7.8;
somehost.domain.com;
anotherhost.anotherdomain.com;<local>"
[Branding]
GPVersion=9.00.8112.16421
My suggestion was to delete the settings if you wanted to somehow try and "save" the GPO that included the IEM settings that were still applying since you could not edit them directly. With that said, If you wanted to update these settings, I believe you could use the IEAK Profile Manager to update the install.ins file for the version of IE you're targeting.

Internet Explorer Administration Kit (IEAK) Information and Downloads
http://technet.microsoft.com/en-us/ie/bb219517.aspx

Another odd thing here, IE 11 is installed, IEM policy is applied and impacting on any user that was created before IE11 was installed, any user created after IE 11 was installed does not have the policy applied.
I think this has to do with the way the policy was initially applied to the users where the settings are copied to the user's profile. They may be located here: Documents and Settings\<<username>>\Application Data\Microsoft\Internet Explorer\Custom Settings\Custom0\. See the section "Applying GPO Settings to a Client Computer" in http://technet.microsoft.com/en-us/library/cc728403(v=ws.10).aspx.
0
 

Accepted Solution

by:
hairylots earned 0 total points
ID: 40629946
Uninstall IE 11 back to IE9 restored ability to edit require GPO.
0
 

Author Comment

by:hairylots
ID: 40629964
I've requested that this question be closed as follows:

Accepted answer: 0 points for hairylots's comment #a40629946

for the following reason:

Only solution I could find
0
 
LVL 84

Expert Comment

by:David Johnson, CD, MVP
ID: 40629965
This is only a short term solution where the long term solution has been given.. Microsoft will be phasing out versions of IE < 11

     Beginning January 12, 2016, only the most current version of Internet Explorer available for a supported operating system will receive technical support and security updates
http://support.microsoft.com/gp/Microsoft-Internet-Explorer
0

Featured Post

Keep up with what's happening at Experts Exchange!

Sign up to receive Decoded, a new monthly digest with product updates, feature release info, continuing education opportunities, and more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Had a business requirement to store the mobile number in an environmental variable. This is just a quick article on how this was done.
Transferring FSMO roles is done when an admin wants to split roles between certain Domain Controllers or the Domain Controller holding the Roles has been forcefully demoted using dcpromo / forceremoval
To efficiently enable the rotation of USB drives for backups, storage pools need to be created. This way no matter which USB drive is installed, the backups will successfully write without any administrative intervention. Multiple USB devices need t…
This tutorial will show how to configure a new Backup Exec 2012 server and move an existing database to that server with the use of the BEUtility. Install Backup Exec 2012 on the new server and apply all of the latest hotfixes and service packs. The…
Suggested Courses

810 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question