Control Ie 10 + via server 2008r2

[round2it]

After my complete and utter idiotic attempt of installing ie 11 on my server can anyone give me a step by step guide on how to manage IE10 + via server 2008r2

 

I have a 2012 server Just running DNS and Hyper V for exchange 2010 can this be used to manage IE 10+?

 

We have IE8 IE9 at the moment on xp and windows 7 (xp nearly eradicated) clients

 

How do i add the new ADMX templates while still keeping current Group policy for proxy settings etc

 

I think that i need to create a central store and pop the templates in policydefinitions but how will this affect other group policy?

 

can i install Active directory role on the 2012 (what effect will this have on my 2008 DC) and control from that Machine?

 

I know we have hundreds of threads about this but I am getting confused on the little differences people have?

 

Can anyone point me in the right direction (really dont want to break Group policy again)

 

Thanks In Advance

Edited November 11, 2014 by round2it

[sted]

easiest way?

 

install gpmc on your domained 2012 box or install them on a windows 8/8/1 vm.

 

You can use any windows 8 based os just need the gpmc tool installing and it needs to be a domain member

[round2it]

Ok I have my server 2012 server as a DC

 

How does the GPMC work with server 2008r2

 

will the server 2008 still dish out group policy as normal

how will it effect the server 2008r2 GPMC will the new settings applied from the 2012 server show in the 2008r2 GPMC

 

Sorry for being dumb but they must be linked in some way

[3s-gtech]

You didn't need to make your 2012 box a DC - if it's running Hyper-V as well I suggest you undo this change.

 

You only need to install GPMC. That will then allow you to modify the Group Policies that you can't see in GPMC on the 2008 R2 server, once you have updated your Policy Definitions folder. It will also let you create and edit an IE10 GPP, in User configuration / Preferences / Control Panel Settings / Internet Settings. Bear in mind that this won't work for IE11 (you'll need Server 2012 R2 for that).

 

The new settings from the 2012 server will not show up on the 2008 R2 one, you're best off no longer managing GP via the older servers once you start this process.

[round2it]

Sorry the server is 2012r2

 

this is my plan of action

 

Install GPMC on the 2012r2 box

 

will my old Group policy still work that are using the old way of setting proxy settings etc

 

as i have not installed IE 11 anywhere yet

 

I dont want to loose what I have

[3s-gtech]

2012 R2 - even better.

 

Yes your policies will work absolutely fine. You just won't be able to actually edit some of them from Server 2008 R2, but they will be hosted fine (it's just a set of registry entries and XML files at the end of the day). Your old IE Group Policy settings, usually set via IEM in Group Policy, will continue to work with IE9. This option will disappear from the console when you install IE11 onto the server though.

Edited November 11, 2014 by 3s-gtech
Some clarification

[round2it]

wont be installing ie11 on a server for a while (see crys for help yesterday)

 

I will be waiting for a week while the staff are off as doing this on a live system is not the best (no money for spare test rigs at the moment)

thanks it is all coming into place now

all gpos are present but not editable by 2008r2 thats the answer i was looing for.

 

Thanks given

[jonnykewell1]

We have an MMC snap in for group policy installed on a 2012 servers desktop which connects into our 2008R2 domain controller. we use this purely for the IE10+ GPO's. All other GPO's are edited on the 2008R2 Server or via MMC from my windows 7 machine. To get the latest GPO's to show up I created a policy definitions folder in \\server\c$\Windows\SYSVOL\domain\Policies and all the admx templates are in there. Now when you go into group policies preferences you will see the option for Internet explorer 10 and you can then add in the settings you require.

 

All your old policies will remain in place, untouched. If you want to have a chat about it, feel free to drop me a message. I did this for our machines over the summer.

Edited November 11, 2014 by jonnykewell1

[round2it]

this would be a central store then for group policy (if i am on the correct lines here)

I was worried about doing this as after reading horror stories on the internet about all group policies going awol after creating central store

 

so if i create the policydefinitions folder in \\server\c$\Windows\SYSVOL\domain\Policies

 

and copy the internet explorer 11 admx files and associated language adml files i should be good to go.

 

this should leave my old proxy setting gpo as it is currently servicing all my users and i can get a new policy created for IE 11 ready for the rollout

[3s-gtech]

You should be using a policydefinitions folder already if you have multiple DCs, but if not it just means that any managing server is using the same admx files so is very useful to implement. Nothing should go awol, but it's a good idea to backup/shadow copy your sysvol anyway (I'm not 100% on whether SC is supported).

[round2it]

putting this on hold until the next holiday even though it should be quite simple

[3s-gtech]

It's not a bad one to leave for a holiday - plenty of testing time will reduce the stress that I can see you've been under! It's not so bad as a job, honestly. I did all of my setup and testing for IE10 and IE11 on a Windows 8/8.1 VM, so I could play with it in isolation. The steps we've explained above are all there is really, but it's a very different method of management.