- Turn the tables on your organization with Adaxes 2018.1’s Web Interface and reporting capabilities - Thu, Sep 20 2018
- Review: Softerra Adaxes – Automating Active Directory management - Thu, Jun 4 2015
- Azure Multi-Factor Authentication – Part 8: Delegating Administration - Tue, Apr 28 2015
In Part 2 of this series, we’ve shown you how to manage Internet Explorer 10 with Group Policy settings. We’ve also given you six steps to successfully deploy Group Policy Objects. Most of these steps apply to Group Policy Preferences, too.
As I’ve mentioned in Part 1, both Group Policy settings and Group Policy Preferences share the distribution method, allowing for a hierarchical approach and WMI filtering, and the management tool: the Group Policy Management Console (gpmc.msc). However, you should be aware of two main differences between Group Policy Settings and Group Policy Preferences:
- The Internet Explorer-related Group Policy Preferences mimic the Internet Options screens from Internet Explorer, where Group Policy Settings use the Group Policy Settings hierarchy.
- Group Policy Preferences can be configured to be applied once, where Group Policy settings are applied at boot and/or logon and are refreshed in the background every 90 to 120 minutes.
Of course, we recommend you to use the same six steps for Group Policy Preferences as you did for Group Policy Settings. These steps can be found in Part 2 of this series.
Managing Internet Explorer 10 with Group Policy Preferences
Although the steps are the same, in step 3, where you configure the Internet Explorer 10 Group Policy Preferences, things are a bit different.
As a best practice tip, don’t combine Group Policy Settings and Group Policy Preferences in the same Group Policy Object. Due to the way Group Policy settings and Group Policy Preferences get applied, combining them will add significantly to the boot and logon times in your environment.
First of all, there are no Internet Explorer-related Group Policy Preferences in the Computer Configuration. You’ll find all the Internet Explorer-related Group Policy Preferences underneath the User Configuration node when you drill down to Preferences and then Control Panel.
There, when you right-click and select New from the context menu, you’ll find yourself breaking out of the Group Policy Hierarchy:
Group Policy Preferences for Internet Explorer
As you can see, within the Internet Explorer-related Group Policy Preferences, you immediately start with a filter: When you create a Group Policy Preferences for Internet Explorer 10, these preferences don’t apply to other versions of Internet Explorer.
Think of all the possibilities…
After you’ve selected the Internet Explorer version you want to manage, you can immediately begin managing settings in the interface that mimics the Internet Options screens of the Internet Explorer version of your choice:
The General Tab of an Internet Explorer 10 Group Policy Preference
Enabling and disabling settings with F5 - F8
As you can see, the tabs are exactly the same as in Internet Explorer, but with added green and dotted red lines underneath individual settings or red and green circles in front of individual settings:
- Settings with green lines underneath them or green circles in front of them get applied.
- Settings with red lines underneath them or red circles in front of them do not get applied.
You can change theses statuses with the F5, F6, F7 and F8 buttons. With F5 you can enable all settings on a tab, while F6 only enables the specific setting you edited last. F8 disables all settings on a tab, while F7 only disables the specific setting you edited last. Press OK when done configuring settings.
Adding Dial-up and Virtual Private Network settings
Although the interface shows the buttons to add and remove dial-up and Virtual Private Network (VPN) connections on the Connections tab, these buttons are greyed out. You cannot add them here. Instead, you can add dial-up and VPN connections through the Networking Options settings in the Control Panel node underneath Preferences in the Computer Configuration or the User Configuration.
The Common Tab is a tab that might not be familiar, because it’s not part of the Internet Options screens. Instead, this tab offers settings for the Group Policy Preference itself. Here, the Apply once and do not reapply setting is the option you select to make the settings in the Group Policy Preferences only apply once.
Want to write for 4sysops? We are looking for new authors.
Thanks for the nice article, but we have a small problem.
How did you manage to add the GPP settings for IE9 and IE10? I looked everywhere but I couldn’t find anything useful, a KP article says you may install a hotfix that will enable IE9 settings to be installed, but it doesn’t add anything for IE10.
The Group Policy Preferences (GPP) for Internet Explorer 10 are available by default on Windows 8.
Noor – The only official/supported way to manage Group Policy Preferences for IE10 is with a management station running the GPMC on Windows 8 or Windows Server 2012.
Is there no way to install IE10 Group Policy Preferences on Server 2008 R2? I installed the IE10 update on my server, and now my old-fashion Internet Explorer Maintenance has been removed from my Group Policies.
As I stated before, the only official/supported way to manage Group Policy Preferences for IE10 is Windows 8/Server 2012. The Internet Explorer Maintenance CSE is not supported for IE10. You’ll have to have a management station running the GPMC that is Windows 8 or Server 2012.
Encountered the same issue. A Win2008 R2 machine was configured for Automatic Updates and, therefore, received IE10. Thereafter, GPMC was unable to manage the settings under User Config > Policies > Windows Settings > Internet Explorer Maintance.
Note that the settings themselves persisted; only GPMC was unable to access them. The Group Policy Results tool also continued to list the settings … although they continued to list in their original locations.
To access these settings, I installed GPMC on a Win7 workstation which still had IE9 installed. This allowed for editing the existing GPO, then removing the old settings from “Internet Explorer Maintenance” section, then applying them under User Config > Preferences as appropriate.
I am trying to set the GPP for IE10 for Windows 7 systems. It will work if I do not set the “Apply once and do not reapply” setting. I want the apply once set so the GPP does not reapply. IS anyone else having this issue. I know about the F6 keys – as I can get it to work when the Apply once is not set. Thanks!
We have multilingual users and using the preferences the language preference for users is disabled.
It is not possible to turn the settings of by hitting F7