Configure IE10 - Which Settings by IEAK and which by GPO? RRS feed

  • Question

  • Hi everybody,

    I want to re-design our GPOs and IEAK configuration for the IE 10. 

    I wonder which settings I need to set by IEAK and which by GPO, because there are some which you can set by both ways (which is not recommended). In a Technet article it says: 

    "Because Group Policy Preferences and IEAK 10 use asynchronous processes when they run, we recommend that you choose to use only one of the tools within each group of settings, for example using only IEAK 10 within the Security settings or Group Policy Preferences within the Internet Zone settings. In addition, it's important to remember that policy is enforced and can't be changed by the user, while preferences are configured, but can be changed by the user."

    Is there a recommended way how to split the settings?

    Tuesday, September 24, 2013 8:17 AM

All replies

  • Hi Bert,

    I think that means by User or Machine....

    IEAK provides a baseline settings that are deployed by Machine... security zone templates, security zone domain lists, Intranet zone settings, compatibility view settings, Internet settings panels. Help URL's and Favorites and Accelerators..Allowed Addons and ActiveX controls. With the IEAK package you may also choose to install other components such as Flash and WebM support... Assuming that you have the one deployment package for all your clients.

    Use GPO or IEAK Profile Manager to set user settings, based on their Role in your organization. this could be things like Intranet domain lists, ability to change settings (eg.. don't allow users to add/remove sites from the security zone lists or change compatibility view settings)

    there is a hierarchy to which Administered settings are applied... those settings applied at HKLM over-ride those set at HKCU...

    Here are two links that may be helpful (although they pertain to IE8). - Managing IE settings through IEAK Profile Manager - Managing IE settings with Group Policy tools.


    Tuesday, September 24, 2013 9:41 AM
  • Thanks for your answer Rob,

    the Profile Manager was removed anyway in IEAK 10:

    I just thought there is a strict rule, such as "rather set proxy setting by GPP than IEAK, to keep it flexible" or something like that.

    Friday, September 27, 2013 9:17 AM