IE11 and inetres.adm

[kennysarmy]

I am having a blind-spot moment here.

 

I administer our Group Polices from my workstation running Windows 7 using the shortcut "Group Policy Management"

 

Domain Controllers are running Server 2008 R2.

 

I have installed IE11 on a test PC and wish to check out what features I can control centrally so have downloaded the inetres.adm file from Microsoft.

 

Do I just copy this adm file to :

 

\\DC-NAME\SYSVOL\domainname.local\Policies\PolicyDefinitions ?

 

I have it in my mind it should be an admx file though?

 

Can anyone clarify please.

 

Ta

[Manny-Tech]

I'd imagine that ADM will be for a Windows Server 2003 environment that can't read ADMX but has clients with IE11 installed. Can you not just download IE11 on your Windows 7 device and then copy the inetres.admx from your local %windir%\policydefinitions up to SYSVOL PolicyDefinitions?

[kennysarmy]

I have installed IE11 on my workstation and it's put:

 

inetres.admx

 

in the following folders:

 

C:\Windows\PolicyDefinitions

&

C:\Windows\winsxs\amd64_microsoft-windows-inetres-adm_31bf3856ad364e35_11.2.9600.16428_none_d0e66d66ace1ace5

[kennysarmy]

I'd imagine that ADM will be for a Windows Server 2003 environment that can't read ADMX but has clients with IE11 installed. Can you not just download IE11 on your Windows 7 device and then copy the inetres.admx from your local %windir%\policydefinitions up to SYSVOL PolicyDefinitions?

 

yes, thanks

[Manny-Tech]

I take it you just copied the local ADMX to the SYSVOL store?

[kennysarmy]

Yes, renamed the one that was there and copied in the new one....

[kennysarmy]

I now get this error when I create a new GPO

 

Edited March 12, 2014 by kennysarmy

[Steve21]

I remember having problems with IE10 when I was doing ours, and there were two files it wanted replacing.

 

\\DOMAIN\SYSVOL\DOMAIN.internal\Policies\PolicyDefinitions\inetres.admx

and

\\DOMAIN\SYSVOL\DOMAIN.internal\Policies\PolicyDefinitions\en-US\InetRes.adml

 

Not sure if it's somethign obvious for some reason, or a weird thing with our GPO cache etc, but yeah wouldn't work without both. (The ADML file wasn't in the AMDX download pack, it's in another one)

 

Steve

[kennysarmy]

Did nt copy the associated C:\Windows\PolicyDefinitions\en-US\InetRes.adml file over

[kennysarmy]

Now I get this error:

 

[ATTACH=CONFIG]23304[/ATTACH]

[Steve21]

Can't rename them, got to delete. Due to it scanning that folder. Sure I did that too and that was the answer

 

Copy it out the folder somewhere else.

 

Steve

[kennysarmy]

had to remove the renamed files....

[kennysarmy]

Thanks all.

[Steve21]

had to remove the renamed files....

 

It's stupid isn't it It seems to poll the whole folder for a "Function" rather than looking in the actual filename that it should be using.... Guessing you could effectively name the file bob.admx and bob.adml and it would work as it's just finding it, but oh well lol Silly MS!

 

Steve

[peterpan]

Good morning

 

Im running a 2008r2 server with IE11 installed.

 

I'm having a similar issue. I'm trying to install the IE11.admx file I have downloaded from here, ive copied the inetres.adml to the sysvol\domain\polices\polydefinitions\en-us and the inetres.admx to sysvol\domain\polices\polydefinitions.

 

Now when I go to userconfig/preferences/ control panel settings/ internet settings and right and go ne I only get setting for IE 5&6/7/8

 

can anyone help?

[Steve21]

Is it just a single server? As you wouldn't be using the central store normally if so

 

Assuming it's SP1 as well?

 

Steve

[3s-gtech]

You'll need a newer DC or PC (Server 2012 R2 or Windows 8.1 running RSAT) to change IE11 GPPs. Your 2008 R2 can host them fine, you just can't edit them unless you use an IE8 GPP and modify the XML of the policy itself to work with IE11 (which works fine).

[SHimmer45]

on a slightly different note but related to IE11 there is a "bug" in the IEAK toolkit which if you installed via this method it will leave a sqm file in the default user profile which when a new user logs in you will get a nice message of the user profile service cant log the person in, if the user already has a profile on the machine the problem doesnt appear.

grrr MS

 

blog post IEAK - User Profile Service Failed the Login