+ Post New Thread
Results 1 to 13 of 13
Internet Related/Filtering/Firewall Thread, GPO Settings for IE9 in Technical; I've accidentally deployed IE9 across our network (it would appear that one of the recent monthly "critical update for IE8" ...
  1. #1
    enjay's Avatar
    Join Date
    Apr 2007
    Location
    Reading, Berkshire, UK
    Posts
    4,497
    Thank Post
    282
    Thanked 196 Times in 167 Posts
    Rep Power
    76

    GPO Settings for IE9

    I've accidentally deployed IE9 across our network (it would appear that one of the recent monthly "critical update for IE8" installs IE9!) - what, if any, GPO changes do I need to make in order to ensure that it remains appropriately locked down, or will my IE8 ones still hold for IE9?

  2. #2

    Join Date
    Jun 2008
    Posts
    736
    Thank Post
    118
    Thanked 67 Times in 55 Posts
    Rep Power
    32
    Your IE8 will still hold for IE9. But you will need to make further changes to lock it down further.

  3. #3
    enjay's Avatar
    Join Date
    Apr 2007
    Location
    Reading, Berkshire, UK
    Posts
    4,497
    Thank Post
    282
    Thanked 196 Times in 167 Posts
    Rep Power
    76
    Quote Originally Posted by Chuckster View Post
    But you will need to make further changes to lock it down further.
    Such as...?

  4. #4

    Join Date
    Jun 2008
    Posts
    736
    Thank Post
    118
    Thanked 67 Times in 55 Posts
    Rep Power
    32
    E.g. "Disable Broswer Location" and/or "Prevent user from bypassing SmartScreen Filter's application..." etc

  5. #5
    enjay's Avatar
    Join Date
    Apr 2007
    Location
    Reading, Berkshire, UK
    Posts
    4,497
    Thank Post
    282
    Thanked 196 Times in 167 Posts
    Rep Power
    76
    Not seeing those settings at present, presumably because the server still has IE8 on it. Anything I need to be wary of before updating our server to IE9?

    This really isn't how I'd wanted to do this! This will hopefully teach me to read the scope of the monthly updates more carefully, and not just apply all of the monthly ones without really thinking about it...

  6. #6

    Join Date
    Jun 2008
    Posts
    736
    Thank Post
    118
    Thanked 67 Times in 55 Posts
    Rep Power
    32
    Nothing to be wary of; it's straightforward and easy (all done through WSUS).

    If you don't feel like upgrading your servers to IE9, then there is an IE9 ADM template you could use and import into GPMC: Download: Administrative Templates for Windows Internet Explorer 9 - Microsoft Download Center - Download Details

  7. #7

    Michael's Avatar
    Join Date
    Dec 2005
    Location
    Birmingham
    Posts
    9,297
    Thank Post
    242
    Thanked 1,586 Times in 1,263 Posts
    Rep Power
    344
    Yes - IE8 GPO settings are pretty much the same as IE9. I install it on 2008 R2 and Windows 7 and it works absolutely fine. Generally there are only isolated problems with IE9, but this is mainly due to poorly coded websites.

  8. #8
    enjay's Avatar
    Join Date
    Apr 2007
    Location
    Reading, Berkshire, UK
    Posts
    4,497
    Thank Post
    282
    Thanked 196 Times in 167 Posts
    Rep Power
    76
    Thanks Chuckster, I spent a long time (unsuccessfully) looking for that. I think I'll just go ahead and put IE9 on the server though.

  9. #9

    Join Date
    Jan 2008
    Location
    South West
    Posts
    1,830
    Thank Post
    219
    Thanked 271 Times in 219 Posts
    Rep Power
    69
    I don't have ie9 on my 2003 servers and can access the IE9 GPO settings fine. I do have IE9 on my workstation. A nice new feature is the ability to stop active x from running at all

  10. #10
    enjay's Avatar
    Join Date
    Apr 2007
    Location
    Reading, Berkshire, UK
    Posts
    4,497
    Thank Post
    282
    Thanked 196 Times in 167 Posts
    Rep Power
    76
    Quote Originally Posted by chazzy2501 View Post
    A nice new feature is the ability to stop active x from running at all
    Ah, now that would explain why I couldn't get Capita's remote support app to work this afternoon...

  11. #11

    Join Date
    Jan 2008
    Location
    South West
    Posts
    1,830
    Thank Post
    219
    Thanked 271 Times in 219 Posts
    Rep Power
    69
    Quote Originally Posted by enjay View Post
    Ah, now that would explain why I couldn't get Capita's remote support app to work this afternoon...
    Yeap, this stopped flash working everywhere! Took a while to see what I'd done

  12. #12
    enjay's Avatar
    Join Date
    Apr 2007
    Location
    Reading, Berkshire, UK
    Posts
    4,497
    Thank Post
    282
    Thanked 196 Times in 167 Posts
    Rep Power
    76
    May well explain why a drag-and-drop exercise on a particular website has stopped working too.

    Whereabouts in the GPO are these settings?

  13. #13

    Join Date
    Jan 2008
    Location
    South West
    Posts
    1,830
    Thank Post
    219
    Thanked 271 Times in 219 Posts
    Rep Power
    69
    computer-admin-windowscomp-internetexplorer-turn on activex filtering....I think.



SHARE:
+ Post New Thread

Similar Threads

  1. Replies: 10
    Last Post: 18th September 2011, 04:54 PM
  2. Replies: 5
    Last Post: 26th January 2007, 12:22 AM
  3. Replies: 7
    Last Post: 27th November 2006, 12:26 PM
  4. GPO settings for IE
    By GrumbleDook in forum Windows
    Replies: 3
    Last Post: 1st September 2006, 12:52 PM
  5. Replies: 11
    Last Post: 27th September 2005, 01:30 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •