Internet Explorer 9(IE9) Group Policy Preferences (GPP)
New Update: Hotfix was just released to resolve this issue. https://support.microsoft.com/kb/2530309
Symptom:
Some customers reported GPP is not applying IE9, prior to Upgrading the browser to IE9.0 it was working OK with IE 8.0.
Enabled Logging for Group Policy Preferences and found the below:
--------------------------------------------------------------------------------------
Non-Working Scenario :
------------------------------------------------------------------------------------------------------------------------------
2011-03-29 09:56:37.131 [pid=0x3a0,tid=0xb18] {683F7AD7-E782-4232-8A6D-F22431F12DB5}
2011-03-29 09:56:37.147 [pid=0x3a0,tid=0xb18] Starting class <IE8> - Internet Explorer 8.
2011-03-29 09:56:37.147 [pid=0x3a0,tid=0xb18] Starting filter [AND FilterFile].
2011-03-29 09:56:37.147 [pid=0x3a0,tid=0xb18] Adding child elements to RSOP.
2011-03-29 09:56:37.147 [pid=0x3a0,tid=0xb18] Set user security context.
2011-03-29 09:56:37.147 [pid=0x3a0,tid=0xb18] C:\Program Files\Internet Explorer\iexplore.exe
2011-03-29 09:56:37.147 [pid=0x3a0,tid=0xb18] apmGetFileVersionEx
2011-03-29 09:56:37.147 [pid=0x3a0,tid=0xb18] apmCompareVersionTokens [SUCCEEDED(S_FALSE)]
2011-03-29 09:56:37.147 [pid=0x3a0,tid=0xb18] Set system security context.
2011-03-29 09:56:37.147 [pid=0x3a0,tid=0xb18] Failed hidden filter [FilterFile].
2011-03-29 09:56:37.163 [pid=0x3a0,tid=0xb18] Filters not passed.
2011-03-29 09:56:37.163 [pid=0x3a0,tid=0xb18] Completed class <IE8> - Internet Explorer 8.
2011-03-29 09:56:37.163 [pid=0x3a0,tid=0xb18] Completed class <InternetSettings>.
------------------------------------------------------------------------------------------------------------------------------
When you try to edit a GPP Policy on the Domain Controller you only see an option for IE 5 / 6 / 7 and 8.
Cause:
Windows Server 2008 R2 GPP Internet Explorer preference items does not support IE 9. The problem is clear in the debug log as the filter did not pass. The problem is viewable from the XML file
The released version of Internet Explorer 9 is not 9.0.0.0.
The trick is editing the xml and set "max Version=9.1.0.0", anyway, it is not supported.
More information:
https://technet.microsoft.com/en-au/library/gg699429.aspx
Reference:
Comments
Anonymous
January 01, 2003
Thank you.Anonymous
January 01, 2003
You can do the trick that editing the xml and set "max Version=9.1.0.0", anyway, it is not officially supported.Anonymous
March 29, 2011
What can we do for use this function -GPP+IE9 Settings-? Will GPP be eventually updated for IE9?Anonymous
March 29, 2011
OK! Do you know approximate date for the "fix"? Thank you very much!Anonymous
March 30, 2011
Thanks so much for the great information. I always love to read more about social media and marketing. I have my own site. I hope to offer tips as well. Thank you. marketing-mistress.com/JoinMyNewsletter.htmlAnonymous
March 30, 2011
good to read www.grouppolicy.biz/.../how-to-enable-group-policy-preferences-support-for-ie9Anonymous
March 30, 2011
All the fuss from Microsoft back in 2009 about how great Group Policy Preferences are, and they neglect to support their latest browser less than 2 years later. Pretty poor form, Microsoft.Anonymous
June 21, 2011
Daniel is 100% right.Anonymous
August 18, 2012
Most is supported via group policy settings which apply to most versions. The few settings you may with to tweak can be done via a registry tweak. Problem solved.Anonymous
July 12, 2013
Hi, InternetSettings xml is found in c:windowssysvoldomainPolicies..userPreferencesInternetSettings in windows 2008 R2 I set max value="10.1.0.0" in xml. so that it should reflect IE 10 GPP in internet settings. but nothing works.. still GPP shows up to Internet Explorer 8. Can you pls tell me what is the workaround for this..?Anonymous
February 04, 2014
Thank you for this, especially with your link to the Microsoft hotfix (didn't work for us and also required a reboot which their KB article stated it would not). We'd already deployed our settings via registry as you suggest but your post solidifies our extreme frustration with Microsoft's new path in ignoring its supporters. The same thing that happened to Blackberry is going to happen to Microsoft.Anonymous
June 04, 2014
Same thing here. Applied hotfix and it did require a reboot. The hotfix also did not work. Back to the beginning .Anonymous
June 18, 2014
Ok Folks - what is the fix for this! Thie IE stuff and managing this properly in an enterprise is a complete painAnonymous
December 11, 2014
If your domain policy files are for IE 8 or older then you won't see IE 9. You must update your policy files to get access to all of the newer policy settings. This gives domain admins a chance to control the policies that are applied in their environment. It would be bad of Microsoft to just update these files through updates or something without you having a chance to test and validate your policies against the new files and settings.