Justin- Yes, you've got it right and it makes total sense. The combination of IE Maintenance and IE related ADM lockdown is the correct approach for controlling IE. However, if you really don't want the user to change their IE settings you don't really need preference mode. It is really meant for "suggestive" settings rather than mandatory ones. Darren
________________________________ From: [EMAIL PROTECTED] on behalf of Salandra, Justin A. Sent: Tue 11/23/2004 7:50 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Configure "Check for newer versions of stored pag es" OK, lets try this, If I configure in Preference mode all the URL's, the Security Settings, Privacy settings and Advanced Settings, they all get applied one time. Preference mode basically means "I would like for you to have these settings but feel free to change them". Since we then cannot enforce these settings, we then used the ADM templates to lock down the settings that we have configured. For example, URL for homepage is configured in Preference Mode and then in the ADM we configure the ADM to disable changing the homepage to lock it down. Does this make sense? -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Salandra, Justin A. Sent: Tuesday, November 23, 2004 8:57 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Configure "Check for newer versions of stored pag es" SO let me see if I understand you here. If I am in Preference mode and I configure IE to check for newer versions automatically and I configure the home URL in the same policy, will users be able to change the home URL if I locked it down in the Administrative Templates section of the policy? If the URL does happen to get changed on the local machines IE Properties will the policy change it back? I read somewhere that in Preference Mode, the policy will apply only once and then each time you change a setting. So if the Home page changes, the home page will not be reset unless you actually modify the policy. Is this correct? If I have a separate policy just for preference mode of the IE Maintenance section and only configure the advanced settings that are added by doing this and I have my regular policy that modifies all other aspects of IE Maintenance, will inheritance work and the client get the settings from both policies with nothing being overwritten? -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darren Mar-Elia Sent: Monday, November 22, 2004 9:08 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Configure "Check for newer versions of stored pag es" Sometimes I really wonder who writes some of these KB articles--and do they get vetted for readability? I agree with you Justin. Totally non-sensical. I'm not sure what they're trying to say but the bottom line is, when you use preference mode, you have to additionally lockdown the areas that you specify in IE Maintenance using Admin. Template policy if you really don't want the user to change the setting after its initially been delivered. In any case, what happens when you enable Preference mode is you get this additional set of ADMs that are loaded into the IE Maintenance namespace. Specifically inetcorp.adm and inetset.adm. However, these ADMs haven't been updated in a while and in the testing I've done, certain things just don't work in IE6--like specifying IE TIF size. However, I did just test the setting you are interested in within inetcorp.adm and it works just fine on IE 6. Darren -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Salandra, Justin A. Sent: Monday, November 22, 2004 1:56 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Configure "Check for newer versions of stored pag es" http://support.microsoft.com/kb/274846 An administrator must also combine GPOs, an organizational unit, a user, or a computer by implementing both a Preference mode and a MAINTENANCE MODE GPO. I don't understand this comment in the article. Does anyone have any insight? -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Salandra, Justin A. Sent: Monday, November 22, 2004 3:54 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Configure "Check for newer versions of stored pag es" For IE -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mulnick, Al Sent: Monday, November 22, 2004 3:02 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Configure "Check for newer versions of stored pag es" For IE or some other app? -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Salandra, Justin A. Sent: Monday, November 22, 2004 2:35 PM To: [EMAIL PROTECTED] Subject: [ActiveDir] Configure "Check for newer versions of stored pages" How can you configure "Check for newer versions of stored pages" to Automatically through Group Policy? Justin A. Salandra, MCSE Senior Network Engineer Catholic Healthcare System 212.752.7300 - office 917.455.0110 - cell [EMAIL PROTECTED] List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
<<winmail.dat>>
