IE8 Group Policy not applied at logon
Hi
I have a group policy with IE-specific settings. The problem I have is that the policy does not get applied at logon. It only gets applied if I run a gpupdate / force or if I make a change to the policy settings. I have had a read through this post (http://social.technet.microsoft.com/Forums/en-US/winserverGP/thread/a698c5b2-4889-487d-be49-1320901efa82) but it does not quite resolve my issue.
The Group Policy I have configured has computer settings disabled and gets applied to all users. Apart from the IE settings, this GPO also has the following setting:
User Configuration -> Administrative Templates -> System/Group Policy:-
Group Policy refresh interval for users: Enabled
I then have another group policy which has the user settings disabled and gets applied to all computers. Amongst other settings this GPO has the following options set:
Computer Configuration -> Administrative Templates -> System/Group Policy:-
Internet Explorer Maintenance policy processing: Enabled
Process even if the Group Policy objects have not changed: Enabled
Would I need to enable these computer configuration settings in the IE policy as well?
Thanks
Ответы
- I found the solution to the problem.
You need to set the following setting:-
Computer Configuration -> Administrative Templates -> System/Group Policy:-
Registry policy processing: Enabled
Process even if the Group Policy objects have not changed: Enabled- Помечено в качестве ответаVard0 27 ноября 2009 г. 13:35
Все ответы
The Internet Explorer Maintenance policy is probably running in preference mode.
Preference mode is designed to provide initial settings to a user without enforcing them.
If you want to enforce a specific configuration on a client, do not use preference mode.http://support.microsoft.com/kb/825685/en-us
http://technet.microsoft.com/en-us/library/cc732686(WS.10).aspx
Your policies for Internet Explorer Maintenance policy processing seems to be OK. Have you verofoed that it is applied sucessfully?
You can use GPResult.exe for that.
Patrick- Thanks for your reply Patrick
The IE Maintenance policy is not running in preference mode (as far as I can tell anyway).
The policies are applying correctly and are showing up in GPResult. The problem is that they don't apply at each login (or every 90 mins for background processing) - If you are running preference mode can be verified by right clicking the IE Maintenance Mode node in GPEdit.
(see also the second link I provided).
What I meant when asking for verifying poliy appliance was NOT your user based IE maintenance policy,
but the machine based settings that force the CSE to update even without having changed anything.
Use RSOP.msc to look for that specfic setting in Computer Configuration -> Administrative Templates -> System -> Group Policy
Is it applied?
Patrick - Thanks Patrick.
I was looking in the right place originally but I have double-checked anyway that IE maintenance is not running in preference mode.
I ran RSOP.msc and this is showing that the setting Computer Configuration -> Administrative Templates -> System -> Group Policy has been applied.
However the specific settings I have made to I.E are not being implemented, even though thay are also showing up in RSOP.
Any ideas? - I found the solution to the problem.
You need to set the following setting:-
Computer Configuration -> Administrative Templates -> System/Group Policy:-
Registry policy processing: Enabled
Process even if the Group Policy objects have not changed: Enabled- Помечено в качестве ответаVard0 27 ноября 2009 г. 13:35
