[gptalk] Re: Questions about IE Maintenance in Preference Mode

  • From: David Cliffe <David.Cliffe@xxxxxxxxxxx>
  • To: gptalk@xxxxxxxxxxxxx
  • Date: Thu, 06 Mar 2008 16:31:35 -0500

Thanks for taking the time to reply Jamie.  To address your last points
first...couldn't agree more...thanks for reinforcing it  :-)
Not sure I completely agree with your first paragraph assesment though -
unless you intended it specifically to answer my #5 below?  Reason is
because I think modifying a different part of the same pref mode GPO
might still  be a [admittedly poor] method to get those additional
settings to the users.
I'm already discussing with the client alternative methods for acheiving
this without IE Maintenance.  Mostly my post was to try and understand
it better for when I come across it again.


        From: gptalk-bounce@xxxxxxxxxxxxx
[mailto:gptalk-bounce@xxxxxxxxxxxxx] On Behalf Of Nelson, Jamie R
        Sent: Thursday, March 06, 2008 3:30 PM
        To: gptalk@xxxxxxxxxxxxx
        Subject: [gptalk] Re: Questions about IE Maintenance in
Preference Mode

        Modifying the existing IE Maintenance GPO will not update your
currently deployed browser settings since preference mode was used to
configure them. They only get applied once for each user. Users who have
yet to process the GPO would get the complete set of "new" settings, but
you would still have to have a solution for users who had already
processed the initial GPO.


        You could reset the browser settings and start over (or create a
new GPO altogether). However, if you do that you are potentially
overwriting any specific settings those users configured for themselves
after initially applying the preference settings.


        If all you are trying to do is ensure that some sites are added
to the Local Intranet zone, I would look into just adding them with a GP
based logon script. This way they get appended to the list of sites and
nothing actually gets overwritten.


        For future reference, I wouldn't use Preference Mode unless it
is an absolute necessity for your users to be able to configure settings
for themselves. In fact, I don't recommend using IE Maintenance Policy
at all. The ADM based settings for Internet Explorer are much more
reliable and easy to use.


        Jamie Nelson | Systems Engineer | Systems Support, Information
Technology | I N T E G R I S Health | Phone 405.552.0903 | Fax
405.553.5687 | http://www.integrisok.com <http://www.integrisok.com/> 


        From: gptalk-bounce@xxxxxxxxxxxxx
[mailto:gptalk-bounce@xxxxxxxxxxxxx] On Behalf Of David Cliffe
        Sent: Thursday, March 06, 2008 12:11 PM
        To: gptalk@xxxxxxxxxxxxx
        Subject: [gptalk] Questions about IE Maintenance in Preference




        Sorry to bring up this age old topic.  I've managed to
successfully avoid IE Maintenance GPOs for a long while now so haven't
been forced to truly grasp their nature or read any of the comments
about them  :-)


        A client has an existing user GPO [linked to the root of a
domain and set to Enforced**] which configures multiple URLs to be
placed in the Trusted Sites zone.  This was done via IE Maintenance in
Preference Mode.


        [ ** not sure this accomplishes much in this scenario, although
maybe there are other settings in there as well (not sure yet) ]


        Their objective is to modify that same GPO.  They would like to
add new URLs to the Local Intranet zone.  There are currently no plans
to add or remove any URLs from the existing list in Trusted Sites.


        My questions:


        1) Will the new URLs show up in Local Intanet zone when the
policy is next processed ?

        2) Assuming the end user has not modified the Trusted Sites
zone, will the existing URLs there remain as is?

        3) Would making this single modification change any other aspect
of an end user's IE config?  For example, if a proxy is being configured
via Pref Mode from a completely different GPO linked to a different OU
in the hierarchy, will that get removed/modified as a result of this?

        4) If [by chance] something were to go wrong and multiple end
users lose some IE config settings, what's the easiest way to push [or
pull] them back from those same PrefMode GPOs?  I'm trying to get my
head around whether or not the client will ignore them since have
already been applied once?  I imagine these possibile remedies:


            a) Reset browser settings on GPO, import from a backup copy,
but now leave GPO as 'Policy Mode' in order to get settings back down to

            b) Just make some other innocuous change in the GPO simply
to cause version number to increase and client side to process it again?

            c) Other?


        5) Hypothetical - if the list of URLs inside Trusted Sites
*did*  need to be modified ... what would be the expected behavior
during next proc cycle for this policy in Pref mode?  Does it just pull
the whole new list in, or ??  I suppose this might correlate with 4b


        Thanks again for your indulgence,


This email was sent to you by Reuters, the global news and information company. 
To find out more about Reuters visit www.about.reuters.com

Any views expressed in this message are those of the individual sender, 
except where the sender specifically states them to be the views of Reuters 

Reuters Limited is part of the Reuters Group of companies, of which Reuters 
Group PLC is the ultimate parent company.
Reuters Group PLC - Registered office address: The Reuters Building, South 
Colonnade, Canary Wharf, London E14 5EP, United Kingdom
Registered No: 3296375
Registered in England and Wales

Other related posts: