We help IT Professionals succeed at work.

How to modify the GPO --> User Configuration --> Policies --> Windows settings --> Internet Explorer Maintenance --> connection / Proxy Settings

2,629 Views
Last Modified: 2015-03-01
Hello All

How to modify the GPO --> User Configuration --> Policies --> Windows settings --> Internet Explorer Maintenance --> connection / Proxy Settings.

This is not listed under GPO --> User Configuration --> Policies --> Windows settings --> here I have listed Scripts (logon . Logoff), Security settings, Folder redirections, Policy Based QoS.

How is this setting Internet Explorer Maintenance --> connection / Proxy Settings edited / changed?

GPO SettingsGPO tree missing 2
Thanks in advance.
Comment
Watch Question

Commented:
Hello,
Are you performing this maintenance on a Windows 7 system running IE10?
Looks like you may have encountered this issue when IE10 is installed on Win7:
http://sdmsoftware.com/group-policy-blog/ie-policy/warning-installing-ie-10-on-your-windows-7-workstation-removes-ie-maintenance-policy-from-group-policy/
Read through the comments after the article for more information.
I would suggest trying to modify the policy directly from your Domain Controller or another workstation that has not been upgraded.
-JB

Author

Commented:
Hello JB

I should have mentioned, this is a windows server 2008 R2 terminal server, no clients involved here.
IEM is depreciated with no real good replacement.


I have since read over
http://social.technet.microsoft.com/Forums/windowsserver/en-US/42060454-1e1d-492f-b774-836f6fd1e5bf/gpo-internet-explorer-maintenance-missing-in-ws-2008-r2 

http://technet.microsoft.com/en-us/library/jj890998.aspx 

http://blogs.technet.com/b/asiasupp/archive/2011/03/30/internet-explorer-9-ie9-group-policy-preferences-gpp.aspx

http://www.grouppolicy.biz/2011/03/how-to-enable-group-policy-preferences-support-for-ie9/

None of which really help other than to state IEM is not available any more.

As I understand it, working with GPP --> control panel remove the ability for individual users to add their own sites to trusted sites. 1 step forward 3 years backward.

Author

Commented:
Follow up - the current IEM setting is working, my problem now is how do I remove it so I can at least attempt an alternative off-system solution.?

Commented:
At the moment, the best alternative that comes to mind is to abandon the GPO with the IEM settings and start again - Hopefully the policy is not too complicated to re-create with all the settings that you still want. Since you don't have access to the setting directly through the GPMC, you could try to manually delete the IEM settings from the policy (after making a backup, of course!).

Domain policy files are stored in the folder \\FQDN\Sysvol\FQDN\Policies\<GPOGUID>\User\Microsoft\IEAK
Local Machine policy files are stored in the folder %windir%\System32\GroupPolicy\User\Microsoft\IEAK

See this article for more information:
How Internet Explorer Maintenance Extension Works
http://technet.microsoft.com/en-us/library/cc728403(v=WS.10).aspx
David Johnson, CDSimple Geek from the '70s
CERTIFIED EXPERT
Distinguished Expert 2019

Commented:
the new settings are in user configuration/preferencesnew location/control panel/internet settings

Author

Commented:
Hello JohnBB42

The file locates at \\FQDN\Sysvol\FQDN\Policies\<GPOGUID>\User\Microsoft\IEAK\install.ins can this be edited directly, i.e. I would like to add a string of IP to the value "Proxy_Override" ?
i.e. add Office365 host URL's to get exchange / Outlook to work.

[Proxy]
Proxy_Enable=1
HTTP_Proxy_Server=127.0.0.1:80
Use_Same_Proxy=1
FTP_Proxy_Server=127.0.0.1:80
Gopher_Proxy_Server=127.0.0.1:80
Secure_Proxy_Server=127.0.0.1:80
Socks_Proxy_Server=127.0.0.1:80
Proxy_Override=1.2.3.4; 1.3.4.5; 5.6.7.8;
somehost.domain.com;
anotherhost.anotherdomain.com;<local>"
[Branding]
GPVersion=9.00.8112.16421
The Internet Explorer Maintenance setting will not be available if you have installed ie10 or 11.

Author

Commented:
Another odd thing here, IE 11 is installed, IEM policy is applied and impacting on any user that was created before IE11 was installed, any user created after IE 11 was installed does not have the policy applied.

David Johnson, CD, MVP, how did you get Internet Explorer 10 setting under configuration/preferences /control panel/internet settings ?

I only have Internet Explorer 5, 6, 7, and 8.
David Johnson, CDSimple Geek from the '70s
CERTIFIED EXPERT
Distinguished Expert 2019

Commented:
you need to download and install the administrative templates.

Commented:
The file locates at \\FQDN\Sysvol\FQDN\Policies\<GPOGUID>\User\Microsoft\IEAK\install.ins can this be edited directly, i.e. I would like to add a string of IP to the value "Proxy_Override" ?
i.e. add Office365 host URL's to get exchange / Outlook to work.

[Proxy]
Proxy_Enable=1
HTTP_Proxy_Server=127.0.0.1:80
Use_Same_Proxy=1
FTP_Proxy_Server=127.0.0.1:80
Gopher_Proxy_Server=127.0.0.1:80
Secure_Proxy_Server=127.0.0.1:80
Socks_Proxy_Server=127.0.0.1:80
Proxy_Override=1.2.3.4; 1.3.4.5; 5.6.7.8;
somehost.domain.com;
anotherhost.anotherdomain.com;<local>"
[Branding]
GPVersion=9.00.8112.16421
My suggestion was to delete the settings if you wanted to somehow try and "save" the GPO that included the IEM settings that were still applying since you could not edit them directly. With that said, If you wanted to update these settings, I believe you could use the IEAK Profile Manager to update the install.ins file for the version of IE you're targeting.

Internet Explorer Administration Kit (IEAK) Information and Downloads
http://technet.microsoft.com/en-us/ie/bb219517.aspx

Another odd thing here, IE 11 is installed, IEM policy is applied and impacting on any user that was created before IE11 was installed, any user created after IE 11 was installed does not have the policy applied.
I think this has to do with the way the policy was initially applied to the users where the settings are copied to the user's profile. They may be located here: Documents and Settings\<<username>>\Application Data\Microsoft\Internet Explorer\Custom Settings\Custom0\. See the section "Applying GPO Settings to a Client Computer" in http://technet.microsoft.com/en-us/library/cc728403(v=ws.10).aspx.
This one is on us!
(Get your first solution completely free - no credit card required)
UNLOCK SOLUTION

Author

Commented:
I've requested that this question be closed as follows:

Accepted answer: 0 points for hairylots's comment #a40629946

for the following reason:

Only solution I could find
David Johnson, CDSimple Geek from the '70s
CERTIFIED EXPERT
Distinguished Expert 2019

Commented:
This is only a short term solution where the long term solution has been given.. Microsoft will be phasing out versions of IE < 11

     Beginning January 12, 2016, only the most current version of Internet Explorer available for a supported operating system will receive technical support and security updates
http://support.microsoft.com/gp/Microsoft-Internet-Explorer

Gain unlimited access to on-demand training courses with an Experts Exchange subscription.

Get Access
Why Experts Exchange?

Experts Exchange always has the answer, or at the least points me in the correct direction! It is like having another employee that is extremely experienced.

Jim Murphy
Programmer at Smart IT Solutions

When asked, what has been your best career decision?

Deciding to stick with EE.

Mohamed Asif
Technical Department Head

Being involved with EE helped me to grow personally and professionally.

Carl Webster
CTP, Sr Infrastructure Consultant
Empower Your Career
Did You Know?

We've partnered with two important charities to provide clean water and computer science education to those who need it most. READ MORE

Ask ANY Question

Connect with Certified Experts to gain insight and support on specific technology challenges including:

  • Troubleshooting
  • Research
  • Professional Opinions
Unlock the solution to this question.
Join our community and discover your potential

Experts Exchange is the only place where you can interact directly with leading experts in the technology field. Become a member today and access the collective knowledge of thousands of technology experts.

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

OR

Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.