Block IE9/IE10 using ADM via GPO isn't creating the Key value name: DoNotAllowIE90 RRS feed

  • Question

  • Hi,

    On a WS2003 x32 Domain Controller I've created a GPO to block IE9 and IE10 from being installed by Windows Updates. I've imported the Block IE9 ADM and Block IE10 ADM into said GPO which is linked to the computers OU.

    Do not allow delivery of Internet Explorer 9 through Automatic Updates. [Enabled]

    Do not allow delivery of Internet Explorer 10 through Automatic Updates. [Enabled]

    However, even though the GPO was successfully applied to a Windows 7 x64 workstation on the domain the IE9 nor IE10 reg key, as indicated below, is not created.

    Registry key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Setup\9.0

    Key value name: DoNotAllowIE90

    1. Should this reg key be created when IE9/10 is blocked via GPO with Block IE9/IE10 ADM?

    2. If so, any idea how best to go about figuring out why its not been applied?

    Its not anti-virus, nor firewall, nothing in event logs and gpresult on the Windows 7 x64 workstation says the Block IE9/10 GPO was successfully applied.



    Tuesday, March 26, 2013 12:06 PM

All replies