Removing old internet settings from GPO

[newpersn]

Got a slight problem with my group policy. I got some strange internet settings in a GPO and I can't remove them. (Internet explorer maintenance I think. I'll double check that later)

 

Does anyone know how I can remove them?

[speckytecky]

I posted something similar today at http://www.edugeek.net/forums/security/174042-strange-proxy-setting-issue.html

[newpersn]

I posted something similar today at http://www.edugeek.net/forums/security/174042-strange-proxy-setting-issue.html

 

Yep. Ours was picking up an old Homepage and proxy settings that hasn't been used since server 2003.

 

It's in our default domain policy. If I can't remove it I'll have to rewrite it. (Could be a while to rewrite)

[speckytecky]

Oddly our issue doesn't currently affect student log on (thank goodness) but just the main staff. Office staff have a different logon. We have searched high and low to try and find where the wrong proxy setting is lurking but so far can't see any sign of it. Oddly despite the errant setting not commencing sslfilter it does seem to work.

 

Yep. Ours was picking up an old Homepage and proxy settings that hasn't been used since server 2003.

 

It's in our default domain policy. If I can't remove it I'll have to rewrite it. (Could be a while to rewrite)

[snagrat]

Internet Explorer maintenance settings will not apply to machines with IE11 on so you can kinda ignore it is there

[Jamo]

If I recall the IE maintenance policy has a disable function if you right click on the policy node in the GPO editor itself. (That is in the pane on the left not the right)

[newpersn]

Internet Explorer maintenance settings will not apply to machines with IE11 on so you can kinda ignore it is there

 

I would ignore but some of my windows 10 computers are picking this up instead of the gpp for Internet.

[Jamo]

Just looked it up, official MS steps suggest right clicking on the policy itself and it should allow you to "Reset" the policy back to a default state which basially wipes the policy.

[newpersn]

Just looked it up, official MS steps suggest right clicking on the policy itself and it should allow you to "Reset" the policy back to a default state which basially wipes the policy.

 

Could you share the link please?

[newpersn]

 

Doesn't show up when I look for internet explorer maintenance.

[DJ-1701]

Unfortunately you'll need either Windows XP with the Admin Pack tools or Windows 2003 to eradicate the settings.

Fire up a temporary PC and install the tools, edit the policy and remove the settings.

 

It's either that or going through the \\DomainNameHere\SysVol\{GUIDOfPolicyHere}\ and having a look if you can manually change the information... which if you try that I would suggest backing up the policy first.

[newpersn]

Unfortunately you'll need either Windows XP with the Admin Pack tools or Windows 2003 to eradicate the settings.

Fire up a temporary PC and install the tools, edit the policy and remove the settings.

 

It's either that or going through the \\DomainNameHere\SysVol\{GUIDOfPolicyHere}\ and having a look if you can manually change the information... which if you try that I would suggest backing up the policy first.

 

I guess that now. I got a old file server that's on 2003 but I can't see how to add the group policy management

[DJ-1701]

I guess that now. I got a old file server that's on 2003 but I can't see how to add the group policy management

 

In the old Active Directory, you could right click and go and look at GPOs, but this would be easier... https://www.microsoft.com/en-us/download/details.aspx?id=21895

[Jamo]

[ATTACH]38534[/ATTACH]

 

Doesn't show up when I look for internet explorer maintenance.

 

I see what you mean!!!

 

I'm sure I saw that in Windows 7 though, have you tried using a Windows 7 station? Haven't used Windows 10 in enterprise yet, I find most of the updates since 7 awful...

[Jaan]

I think IE maintenance disappears if IE10 is installed on the DC, so you might has seen it on win7 at some point if rsat was installed. i ended up making a 2008 server vm on our hyper-v and installing gpo manager just to remove the settings. I couldn't reset the GPO as other elements of it were still being used. I now have internet settings in its own GPO. Worked fine.

[nicholab]

I just picked up this old thread I thought it would help if the whole process was in here.

 

Copy GPO that you are going to edit.

 

Open Active Directory Users and computers go to System > Policies > you need to match the guid to your gpo.

Select Attribute Editor > and find gPCUserExtensionNames

Past the contents into a text editor and find {A2E30F80-D7DE-11d2-BBDE-00C04F86AE3B}

Delete everything in the square bracket with it.

Paste back in the the value in the Attribute Editor.