We help IT Professionals succeed at work.

Enable Integrated Windows Authentication* for Internet Explorer 11 through Group Policy

Hi folks.

I'm working on a GPO for Internet Explorer 11, to turn on "Enable Integrated windows Authentication*" in the internet options, advanced settings, then almost to the bottom of the list.

I just cannot find the settings in group policy management or GPO editor for IE 11. I've been doing a lot of forum trolling and came across here as the best link by far so far.

From this link: http://www.experts-exchange.com/Software/Server_Software/Active_Directory/Q_24235444.html  Thought I was there, but no joy either.

Thanks again for your help!
Watch Question

Distinguished Expert 2019
Create new GPO and apply it to OU containing users

In GPO navigate to user configuration\administrative templates\windows components\internet explorer\internet control panel\security page and find setting called "Site to Zone assignment"
Enable this setting and add all intranet sites as shown below
Site to Zone AssignmentThis setting will ensure that whenever user tries to access those web sites, there current logon credentials will get automatically passed (integrated windows authentication) and no need to enter username \ password again

The same setting will be found under computer configuration as well at same path
Only difference is you need to apply this policy to OU containing computers


Mahesh, thank you VERY MUCH!

Should I have "Turn on automatic detection of Intranet" setting to on? I had turned that one on as well.

I had turned on "Site to zone assignment list"  for the computer settings (but not user_ already while trying to find the one setting to make the changes to internet Explorer, which can be done for earlier versions of IE, but not 9, 10 or 11 the same way.

For example in GPO editor, preferences, control panel settings, internet settings" then new and make a setting for IE at that point.

Thank you again for your help!


Thanks Mahesh, quick response and fast answer!