GPO Settings for IE9

[enjay]

I've accidentally deployed IE9 across our network (it would appear that one of the recent monthly "critical update for IE8" installs IE9!) - what, if any, GPO changes do I need to make in order to ensure that it remains appropriately locked down, or will my IE8 ones still hold for IE9?

[Chuckster]

Your IE8 will still hold for IE9. But you will need to make further changes to lock it down further.

[enjay]

But you will need to make further changes to lock it down further.

Such as...?

[Chuckster]

E.g. "Disable Broswer Location" and/or "Prevent user from bypassing SmartScreen Filter's application..." etc

[enjay]

Not seeing those settings at present, presumably because the server still has IE8 on it. Anything I need to be wary of before updating our server to IE9?

 

This really isn't how I'd wanted to do this! This will hopefully teach me to read the scope of the monthly updates more carefully, and not just apply all of the monthly ones without really thinking about it...

[Chuckster]

Nothing to be wary of; it's straightforward and easy (all done through WSUS).

 

If you don't feel like upgrading your servers to IE9, then there is an IE9 ADM template you could use and import into GPMC: Download: Administrative Templates for Windows Internet Explorer 9 - Microsoft Download Center - Download Details

[Michael]

Yes - IE8 GPO settings are pretty much the same as IE9. I install it on 2008 R2 and Windows 7 and it works absolutely fine. Generally there are only isolated problems with IE9, but this is mainly due to poorly coded websites.

[enjay]

Thanks Chuckster, I spent a long time (unsuccessfully) looking for that. I think I'll just go ahead and put IE9 on the server though.

[chazzy2501]

I don't have ie9 on my 2003 servers and can access the IE9 GPO settings fine. I do have IE9 on my workstation. A nice new feature is the ability to stop active x from running at all:)

[enjay]

A nice new feature is the ability to stop active x from running at all:)

Ah, now that would explain why I couldn't get Capita's remote support app to work this afternoon...

[chazzy2501]

Ah, now that would explain why I couldn't get Capita's remote support app to work this afternoon...

 

Yeap, this stopped flash working everywhere! Took a while to see what I'd done:)

[enjay]

May well explain why a drag-and-drop exercise on a particular website has stopped working too.

 

Whereabouts in the GPO are these settings?

[chazzy2501]

computer-admin-windowscomp-internetexplorer-turn on activex filtering....I think.