Article: KB25303 - Group Policy Preferences do not apply to Internet Explorer 9 (Hotf

[Arthur]

You can view the page at http://www.edugeek.net/content.php?r=327-KB25303-Group-Policy-Preferences-do-not-apply-to-Internet-Explorer-9-(Hotfix)

[Michael]

Interestingly without this fix, allowed pop-ups configured by GPO are not processed (as if they're not there at all).

[Michael]

I've managed to get around the IE9 and Pop-up blocker issue as follows:

 

Scenario: Running 2008 R2 SP1, with Windows 7 SP1 + IE9 clients. Setting Pop-up exceptions on this GPO (even with the KB2530309 fix) does not work:

 

User Config > Policies > Admin Templates > Windows Components > Internet Explorer - Pop-up allow list - Enabled

 

To get around this problem, install KB2530309, then navigate to:

 

User Config > Preferences > Control Panel Settings - Internet Settings

 

Right click Internet Settings > New > Internet Explorer 8 (Note: With the KB2530309 fix, this applies to both IE8 and IE9).

 

Select the Privacy tab > Settings. Enter your Pop-up exceptions here and apply changes.

 

Now run gpupdate /force on your workstation or restart your workstation. Pop-up exceptions will now work correctly with IE9.

Edited November 3, 2011 by Michael

[tushan]

Thanks Michael for sharing this solution. What can people like me do without people like you. I'm about to implement your solution but out of interest, does this inlude the likes of Adobe Readers and flash constantly asking you to upgrade, even if you don't want to.Kind regardstushan

[Michael]

Thanks Michael for sharing this solution. What can people like me do without people like you. I'm about to implement your solution but out of interest, does this inlude the likes of Adobe Readers and flash constantly asking you to upgrade, even if you don't want to.Kind regardstushan

 

Newer versions of Adobe Reader and Adobe Flash do have built in auto-updaters. As a recommendation, you should be using Adobe Reader 9 or 10 and Adobe Flash 11.1.

[Arthur]

Just to add to what Michael said, the easiest way to disable the updater in Adobe Reader is to use the Customization Wizard. To do the same with Flash Player, you need to create a text file called mms.cfg containing the text below, and place it into %SystemRoot%\System32\Macromed\Flash (for 32-bit editions of Windows) and/or %SystemRoot%\SysWOW64\Macromed\Flash (for 64-bit editions) on each PC you are installing it to. For more info regarding deployment, click here (Flash Player) or here (Reader).

 

AutoUpdateDisable=1

 

If the updates section of the Flash Player Settings Manager is greyed out (in the Control Panel) you will know the mms.cfg file has worked.

 

http://i.imgur.com/viWPN.png

[Alis_Klar]

Does this this only affect domains running Win Server 2008 R2. What about 2003 domains?

[Michael]

Well GPP is only available on 2008/2008 R2 Server and IE9 Windows Vista or later.

 

2003 Server isn't affected by this at all as it only supports IE8.

 

If you mean a 2003 Server with 7 clients + IE9 (using RSAT) then yes this would apply, but to be honest I would avoid using GPP with IE8 or IE9 as in my experience (and a few others here) it appears to break IE. It's something Microsoft will probably fix in 2008 R2 SP2 and Windows 7 SP2.