How to modify the GPO --> User Configuration --> Policies --> Windows settings --> Internet Explorer Maintenance --> connection / Proxy Settings

Hello All

How to modify the GPO --> User Configuration --> Policies --> Windows settings --> Internet Explorer Maintenance --> connection / Proxy Settings.

This is not listed under GPO --> User Configuration --> Policies --> Windows settings --> here I have listed Scripts (logon . Logoff), Security settings, Folder redirections, Policy Based QoS.

How is this setting Internet Explorer Maintenance --> connection / Proxy Settings edited / changed?

GPO SettingsGPO tree missing 2
Thanks in advance.
hairylotsAsked:
Who is Participating?
 
hairylotsAuthor Commented:
Uninstall IE 11 back to IE9 restored ability to edit require GPO.
0
 
JohnB442Commented:
Hello,
Are you performing this maintenance on a Windows 7 system running IE10?
Looks like you may have encountered this issue when IE10 is installed on Win7:
http://sdmsoftware.com/group-policy-blog/ie-policy/warning-installing-ie-10-on-your-windows-7-workstation-removes-ie-maintenance-policy-from-group-policy/
Read through the comments after the article for more information.
I would suggest trying to modify the policy directly from your Domain Controller or another workstation that has not been upgraded.
-JB
0
 
hairylotsAuthor Commented:
Hello JB

I should have mentioned, this is a windows server 2008 R2 terminal server, no clients involved here.
IEM is depreciated with no real good replacement.


I have since read over
http://social.technet.microsoft.com/Forums/windowsserver/en-US/42060454-1e1d-492f-b774-836f6fd1e5bf/gpo-internet-explorer-maintenance-missing-in-ws-2008-r2 

http://technet.microsoft.com/en-us/library/jj890998.aspx 

http://blogs.technet.com/b/asiasupp/archive/2011/03/30/internet-explorer-9-ie9-group-policy-preferences-gpp.aspx

http://www.grouppolicy.biz/2011/03/how-to-enable-group-policy-preferences-support-for-ie9/

None of which really help other than to state IEM is not available any more.

As I understand it, working with GPP --> control panel remove the ability for individual users to add their own sites to trusted sites. 1 step forward 3 years backward.
0
Making Bulk Changes to Active Directory

Watch this video to see how easy it is to make mass changes to Active Directory from an external text file without using complicated scripts.

 
hairylotsAuthor Commented:
Follow up - the current IEM setting is working, my problem now is how do I remove it so I can at least attempt an alternative off-system solution.?
0
 
JohnB442Commented:
At the moment, the best alternative that comes to mind is to abandon the GPO with the IEM settings and start again - Hopefully the policy is not too complicated to re-create with all the settings that you still want. Since you don't have access to the setting directly through the GPMC, you could try to manually delete the IEM settings from the policy (after making a backup, of course!).

Domain policy files are stored in the folder \\FQDN\Sysvol\FQDN\Policies\<GPOGUID>\User\Microsoft\IEAK
Local Machine policy files are stored in the folder %windir%\System32\GroupPolicy\User\Microsoft\IEAK

See this article for more information:
How Internet Explorer Maintenance Extension Works
http://technet.microsoft.com/en-us/library/cc728403(v=WS.10).aspx
0
 
David Johnson, CD, MVPOwnerCommented:
the new settings are in user configuration/preferencesnew location/control panel/internet settings
0
 
hairylotsAuthor Commented:
Hello JohnBB42

The file locates at \\FQDN\Sysvol\FQDN\Policies\<GPOGUID>\User\Microsoft\IEAK\install.ins can this be edited directly, i.e. I would like to add a string of IP to the value "Proxy_Override" ?
i.e. add Office365 host URL's to get exchange / Outlook to work.

[Proxy]
Proxy_Enable=1
HTTP_Proxy_Server=127.0.0.1:80
Use_Same_Proxy=1
FTP_Proxy_Server=127.0.0.1:80
Gopher_Proxy_Server=127.0.0.1:80
Secure_Proxy_Server=127.0.0.1:80
Socks_Proxy_Server=127.0.0.1:80
Proxy_Override=1.2.3.4; 1.3.4.5; 5.6.7.8;
somehost.domain.com;
anotherhost.anotherdomain.com;<local>"
[Branding]
GPVersion=9.00.8112.16421
0
 
AbhishekJhaCommented:
The Internet Explorer Maintenance setting will not be available if you have installed ie10 or 11.
0
 
AbhishekJhaCommented:
0
 
hairylotsAuthor Commented:
Another odd thing here, IE 11 is installed, IEM policy is applied and impacting on any user that was created before IE11 was installed, any user created after IE 11 was installed does not have the policy applied.

David Johnson, CD, MVP, how did you get Internet Explorer 10 setting under configuration/preferences /control panel/internet settings ?

I only have Internet Explorer 5, 6, 7, and 8.
0
 
David Johnson, CD, MVPOwnerCommented:
you need to download and install the administrative templates.
0
 
JohnB442Commented:
The file locates at \\FQDN\Sysvol\FQDN\Policies\<GPOGUID>\User\Microsoft\IEAK\install.ins can this be edited directly, i.e. I would like to add a string of IP to the value "Proxy_Override" ?
i.e. add Office365 host URL's to get exchange / Outlook to work.

[Proxy]
Proxy_Enable=1
HTTP_Proxy_Server=127.0.0.1:80
Use_Same_Proxy=1
FTP_Proxy_Server=127.0.0.1:80
Gopher_Proxy_Server=127.0.0.1:80
Secure_Proxy_Server=127.0.0.1:80
Socks_Proxy_Server=127.0.0.1:80
Proxy_Override=1.2.3.4; 1.3.4.5; 5.6.7.8;
somehost.domain.com;
anotherhost.anotherdomain.com;<local>"
[Branding]
GPVersion=9.00.8112.16421
My suggestion was to delete the settings if you wanted to somehow try and "save" the GPO that included the IEM settings that were still applying since you could not edit them directly. With that said, If you wanted to update these settings, I believe you could use the IEAK Profile Manager to update the install.ins file for the version of IE you're targeting.

Internet Explorer Administration Kit (IEAK) Information and Downloads
http://technet.microsoft.com/en-us/ie/bb219517.aspx

Another odd thing here, IE 11 is installed, IEM policy is applied and impacting on any user that was created before IE11 was installed, any user created after IE 11 was installed does not have the policy applied.
I think this has to do with the way the policy was initially applied to the users where the settings are copied to the user's profile. They may be located here: Documents and Settings\<<username>>\Application Data\Microsoft\Internet Explorer\Custom Settings\Custom0\. See the section "Applying GPO Settings to a Client Computer" in http://technet.microsoft.com/en-us/library/cc728403(v=ws.10).aspx.
0
 
hairylotsAuthor Commented:
I've requested that this question be closed as follows:

Accepted answer: 0 points for hairylots's comment #a40629946

for the following reason:

Only solution I could find
0
 
David Johnson, CD, MVPOwnerCommented:
This is only a short term solution where the long term solution has been given.. Microsoft will be phasing out versions of IE < 11

     Beginning January 12, 2016, only the most current version of Internet Explorer available for a supported operating system will receive technical support and security updates
http://support.microsoft.com/gp/Microsoft-Internet-Explorer
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.