Yep. What's unfortunate is that MS did such a horrible job of making this easy for us admins. It should be a no-brainer, ugh. I hope those links at least helped!
I just noticed a typo in my last message those, where is said, "configuring home folders on IE10 on Win7" should have read, "configuring homepage on IE10 on Win7" but I'm guessing you figured that out, lol. JR ________________________________ From: [email protected] [[email protected]] on behalf of Miller Bonnie L. [[email protected]] Sent: Wednesday, February 12, 2014 10:42 AM To: [email protected] Subject: RE: [NTSysADM] GP confusion - Internet Explorer Maintenance? Ah, that makes sense—we’re both in GPP, but not looking at the same nodes. You’re using your own Registry GPPs under Windows Settings to add some values. I’m looking at the Internet Settings GPPs under Control Panel Settings. We have a pretty complex set of proxy server exceptions for various user groups, so it’s certainly easier for me to use these settings, once I was able to get to where I can add IE 10+ from Win 8.1 and figure out the secret click sequence to get the settings to stick. From: [email protected] [mailto:[email protected]] On Behalf Of Jesse Rink Sent: Tuesday, February 11, 2014 3:13 PM To: [email protected] Subject: RE: [NTSysADM] GP confusion - Internet Explorer Maintenance? HI Bonnie… Here’s what I did. Works pretty well and easy to setup. HOMEPAGE SETUP for IE10/IE11 http://community.spiceworks.com/topic/373560-ie10-homepage-group-policy-server-2008-quick-fix This option ^^ worked well for configuring home folders on IE10 on Win7 using GPOs on a 2008R2 server. IE FAVORITES SETUP for IE10/IE11 http://community.spiceworks.com/topic/315655-how-can-i-add-urls-to-the-favorites-bar-in-ie10-via-gpo-rsat-windows-8-2012 (look **specifically** at the post from: Frag_68<http://community.spiceworks.com/profile/show/Frag_68> Sep 10, 2013 at 12:16 PM<http://community.spiceworks.com/topic/post/2517518> on the bottom of the page) This option ^^^^ worked perfectly for a IE10 and IE11 machine with Win7 when using GPOs on a 2008R2 server JR From: [email protected]<mailto:[email protected]> [mailto:[email protected]] On Behalf Of Miller Bonnie L. Sent: Tuesday, February 11, 2014 2:24 PM To: [email protected]<mailto:[email protected]> Subject: RE: [NTSysADM] GP confusion - Internet Explorer Maintenance? What did you have to install to make it work? I have the updated admx files loaded in the central store as per http://www.microsoft.com/en-us/download/details.aspx?id=37009 and verified the server is loading from there. I also have the admx files for Win8.1 (copied over), and schema has been extended already in AD to 2012 R2 (although that shouldn't matter). When attempting to add an IE preference, the option for 10 simply isn't there. When you right-click on the "Internet Settings" preferences area to add one, it also reports: [cid:[email protected]] So, I add the prefs using my Win8.1 machine, but if I go back to look at the settings from 2008 R2 SP1, I get the above error and then the IE 10 settings don't even show. When searching the issue online, others having the problem seemed to indicate the GPMC for 2008 R2 SP1 simply doesn't have the capability of loading and reading the xml. People say you can modify the xml yourself, but it’s not the supported way to go about editing them. Here’s one thread: http://www.edugeek.net/forums/windows-7/122051-editing-ie10-gpp-windows-7-a.html -Bonnie -----Original Message----- From: [email protected]<mailto:[email protected]> [mailto:[email protected]] On Behalf Of Jesse Rink Sent: Tuesday, February 11, 2014 12:03 PM To: [email protected]<mailto:[email protected]> Subject: RE: [NTSysADM] GP confusion - Internet Explorer Maintenance? FWIW I have been able to change IE10 settings (homepage, IE favorite, etc.) from a Windows 2008R2 server. It's not done through Internet Explorer Maintenance but instead by using preferences. Works really well. JR -----Original Message----- From: [email protected]<mailto:[email protected]> [mailto:[email protected]] On Behalf Of Ken Cornetet Sent: Tuesday, February 11, 2014 1:09 PM To: [email protected]<mailto:[email protected]> Subject: RE: [NTSysADM] GP confusion - Internet Explorer Maintenance? <RANT> Someone at Microsoft should smack the whole lot of the Internet Explorer team upside the head and tell them to bury the Internet Explorer Admin Kit (IEAK) and just put their damn policy settings under the POLICIES registry keys like everything else does. I've NEVER understood why MS has made us suffer this broken crap for so long. </RANT> -----Original Message----- From: [email protected]<mailto:[email protected]> [mailto:[email protected]] On Behalf Of Miller Bonnie L. Sent: Monday, February 10, 2014 11:50 AM To: [email protected]<mailto:[email protected]> Subject: RE: [NTSysADM] GP confusion - Internet Explorer Maintenance? I'm just finishing going through this cutover myself in our primary domain, and have a few more settings to do still for an external forest. We have used the IE Maintenance node for a long time, and as you've seen what's happened is as soon as you install IE 10 or higher, you will no longer see the node. http://technet.microsoft.com/en-us/library/jj890998.aspx http://technet.microsoft.com/library/dn338129.aspx To edit the old settings, you will need to install a Win7/Server 2008 R2 tools machine with IE 9 and GPMC, or successfully roll back one that you have that is running IE 10. Then, getting moved to gpp is a little tougher and will take some testing in your specific environment. In our case, I have been using GPP on our RDS servers, so had some "templates" to start from. Testing showed that I had to it this way: 1) To get GPP settings for IE 10 and higher (it will say IE 10 but the code is version 10 to 99, so applies to 11), you MUST edit the preference from a Windows 8.1 or server 2012 R2 machine--it will not work from WS08 R2/Win7, even if you've updated your templates, and you just won't see the option for IE 10 GPP. I have a Win8.1 machine for "tools" (GPMC/RSAT), and then also temporarily have the Win7 with IE9 "tools" machine--you need both. 2) Apply the new GPP template settings to the same GPO that contains your IE Maintenance settings. Wait a few days for all machines to get these applied. Watch out for any IE settings you may have configured using Administrative templates as well--these could interfere or cause things to act strangely. 3) As quickly as possible, use the IE 9 tools machine to remove the IE maintenance settings from the GPO, then open the same policy on the Win8.1 tools machine, refresh, and tickle a change to the each of the IE GPP settings to update the GPP settings. Without doing step 3 this way, my test machines ended up with no proxy server settings as soon as I removed the IE Maintenance settings (but without tickling a change to the GPP). Doing it in the order above, we had no gap without the correct settings. One last caveat you may run into is that in the GPP editor for IE 10+ settings, if you have a bypass proxy server and manual server definition, the interface is pretty broken. There is a way to get the interface to take your settings, but you have to do it in just the right order. Let me know if you have trouble here and I can send more info. Good luck! -Bonnie -----Original Message----- From: [email protected]<mailto:[email protected]> [mailto:[email protected]] On Behalf Of Michael Leone Sent: Monday, February 10, 2014 6:44 AM To: [email protected]<mailto:[email protected]> Subject: [NTSysADM] GP confusion - Internet Explorer Maintenance? I am confused about something. We have a Win2008 R2 domain (domain and forest level). We have a number of Group Policies. If I go to one in the GP Management Console, and then click on "Settings", I see (among other things", User Configuration, Policies, Windows Settings, Internet Explorer Maintenance. If I click "show" next to that, I see all the settings. Including ones for sites in the "Trusted Sites" under "Security Zones". Yet when I edit the policy, I have no "IE Maintenance". From what I can gather from searching, I now need some server side *and* some client-side extensions? (Technet: http://technet.microsoft.com/en-us/library/gg699413.aspx). I get that IE Maintenance has (apparently) been deprecated in favor of settings in Group Policy Preferences, but why am I even seeing IE Maintenance at all? Especially if I can't edit them? I also get that I need GPP to set those settings for IE 10 and newer, but IE 9 settings are still in the IE Maintenance section that I can't access at the moment? We have a lot of people still with IE 9 out there. Very confusing. Anybody have a simple explanation they can slap me with? :-)
<<inline: image002.jpg>>
