IE11 Enterprise Mode Template missing from GPMC

Artigo
06/17/2014

Want to share a scenario I worked on recently that may help others understand what could cause Enterprise Mode not show in GPMC.

Condition:

You want to manage IE11 Enterprise Mode GPO from a Central location using your Central Store Group Policies configuration
You have already installed IE11 on the machine you are using to manage these group policies
You have already install the require IE Cumulative update that introduces Enterprise Mode MS14-018

When you open GPMC on your Domain controller you do not see the 2 new Enterprise Mode Group Policy entries:

Let Users turn on and use Enterprise Mode from the Tools menu
Use the Enterprise Mode IE website list

Reason:

You have not copied the new IE11 Enterprise Mode ADMX templates on your Sysvol Policies PolicyDefinitions directory
You had GPMC opened when copying the files

Actions taken to get your IE 11 Enterprise Mode GPO settings show in GPMC when using Central Store Group Policy Configuration

Minimum requirement: Install Microsoft Security Bulletin MS14-018 - Critical April 8, 2014 - https://technet.microsoft.com/en-us/library/security/ms14-018.aspx and preferably the latest IE Cumulative update to get the latest inetres.admx and inetres.adml files. To see all Security Bulleting go to https://technet.microsoft.com/en-us/library/security/dn631937.aspx.

NOTE: You need to get the inetres.admx and interest.adml files from a machine with IE11 installed !

Make sure GPMC is close!
Copy both the new IE11 Templates into its respective policy folders.
- Copy inetres.admx from C:\Windows\PolicyDefinitions to the Domain Sysvol\Domain\policies\PolicyDefinitions folder.
- Copy inetres.adml from C:\Windows\PolicyDefinitions\en-US to the Domain Sysvol\Domain\policies\PolicyDefinitions\en-US policy folder.

NOTE: Verify, the new files have the new EMIE entries present.

Open GPMC to confirm the new IE11 Enterprise Mode GPOs are present

The key to this scenario was to make sure that GPMC console was closed and validate the new files were copied successfully to the Central Store!

Here are the EMIE entries we need to have in the templates. You can search for it.

Inetres.adm entries: EnterpriseModeEnable and EnterpriseModeSiteList

Inetres.adml entries: EnterpriseModeEnable and EnterpriseModeSiteList

If you disable or do not configure this policy setting, users can pin sites.</string>
<string id="EnterpriseModeEnable">Let users turn on and use Enterprise Mode from the Tools menu</string>
<string id="IE_ExplainEnterpriseModeEnable">This policy setting lets you decide whether users can turn on Enterprise Mode for websites with compatibility issues. Optionally, this policy also lets you specify where to get reports (through post messages) about the websites for which users turn on Enterprise Mode using the Tools menu.

If you turn this setting on, users can see and use the Enterprise Mode option from the Tools menu. If you turn this setting on, but don't specify a report location, Enterprise Mode will still be available to your users, but you won't get any reports.

If you disable or don't configure this policy setting, the menu option won't appear and users won't be able to run websites in Enterprise Mode.</string>
<string id="EnterpriseModeSiteList">Use the Enterprise Mode IE website list</string>
<string id="IE_ExplainEnterpriseModeSiteList">This policy setting lets you specify where to find the list of websites you want opened using Enterprise Mode IE, instead of Standard mode, because of compatibility issues. Users can't edit this list.

If you enable this policy setting, Internet Explorer downloads the website list from your location (HKCU or HKLM\Software\policies\Microsoft\Internet Explorer\Main\EnterpriseMode), opening all listed websites using Enterprise Mode IE.

<presentation id="EnterpriseModeEnable_1">
        <textBox refId="EnterReportBackPrompt">
          <label>Type the location (URL) of where to receive reports about the websites for which users turn on and use Enterprise Mode</label>
        </textBox>
      </presentation>
      <presentation id="EnterpriseModeSiteList_1">
        <textBox refId="EnterSiteListPrompt">
          <label>Type the location (URL) of your Enterprise Mode IE website list</label>
        </textBox>
      </presentation>

This blog has been provided to you by the IE Support Team.

Comments

Anonymous
July 17, 2014
Is it me or does the inetres.admx and .adml files contained in the recently released 'Administrative Templates (.admx) for Windows 8.1 Update and Windows Server 2012 R2 Update' NOT contain the IE11 Enterprise Mode entries? Seem to be missing for me....
Anonymous
July 22, 2014
@SteveMake sure you have the latest Cumulative Update. Enterprise Mode was first introduced in IE Cumulative MS14-18 technet.microsoft.com/.../ms14-018.aspx. Any IE cumulative after that, should include the templates.
Anonymous
September 09, 2014
I downloaded all the 8.1 Update admx and adml files from www.microsoft.com/.../details.aspx.i can't find the word "EnterpriseModeEnable" in the inetres.admx installed by the msi at that link.i am editing group policy with a fully patched (as of 9/9/2014) Windows 8.1 Update workstation.if i try to run the msu file for IE11 on Windows 8.1 x64 (or 32-bit, for that matter) at technet.microsoft.com/.../ms14-018.aspx, it says it is not applicable to my system.what am i missing?
Anonymous
September 09, 2014
@CurtissThe ms14-018 was the minimum requirement to have the ADMX installed. If you installed the latest IE Cumulative that came out this week, ms14-052 you should have the ADMX and ADML installed.Are you opening GPEDIT.MSC or GPMC.MSC ?Are you using Central Store Group Policy configuration?If you open IExplore and hit the Alt key to bring up the menus and select the Help and About Internet ExplorerWhat is your Updated version?
Anonymous
September 10, 2014
Axel,I got it. I needed to manually copy the inetres.admx/adml files from my updated workstation's PolicyDefinitions folder into the Central Store. I don't know why, but I guess I thought that the Central Store's templates would automagically update just by editing GPOs (GPMC) from my updated machine.
Anonymous
September 10, 2014
The comment has been removed
Anonymous
September 11, 2014
@Curtiss Correct. You have to copy the admx and adml to your central store.You can follow the following article on setting up a web server for logging:Set up Enterprise Mode logging and data collectiontechnet.microsoft.com/.../dn781326.aspx
Anonymous
September 19, 2014
I have done the above instructions for our domain, and I am the only one when logging in to a test machine, whom can use enterprise mode. When I go into Local Policies on the machine, Enterprise Mode is disabled. I have updated GPO and double checked everything, but I am the only user who can use it the way its intended for a policy rollout. Why is this? What am I missing? Why can't anyone else have Enterprise Mode enabled when using IE 11 under their login?
Anonymous
October 07, 2014
This guy is saying the same thing:www.itsupportforum.net/.../ie-11-enterprise-mode-missing-from-ie-11-gpoBut one thing I've noticed from both articles, is that neither talks about the ADM template (just the ADMX template). Does IE 11 Enterprise mode not work with ADM templates? I'm using a 2003 domain functional level - can I still do IE 11 Enterprise Mode?Any help / advice is appreciated!
Anonymous
October 13, 2014
@James Kurtis Enterprise Mode is an IE11 feature. You have to manage IE Enterprise from a machine that have IE11 installed and latest IE Cumulative update(Minimum is MS14-018).This is not included in the ADM Legacy template.
Anonymous
December 04, 2014
On Windows 2012 R2 server I do not see option to configure Enterprise Mode in IE11 on GPMC.MSCI have Windows 2012 R2 Server. Below are the pionts:Windows 2012 R2 Server is having Internet Explorer 11 installed. Update Versions: 11.0.14 KB3003057I updated the admx and adml templates as shown in below link:-www.microsoft.com/.../details.aspx Still its not coming, Am I missing something ?. Please provide steps to resolve and help me. I will be very grateful to you, Thanks in advance.
Anonymous
December 26, 2014
@Sourabh KIf you are using Central Store, make sure you are copying the admx and adml to the correct directory.I recommend you install IE11 on a machine and the latest IE Cumulative update. Then, copy the ADMX and ADML to the Central Store. Make sure, your GPMC console is close... then once you copy the files, load GPMC and check...• Copy both the new IE11 Templates into its respective policy folders.◦ Copy inetres.admx from C:WindowsPolicyDefinitions to the Domain SysvolDomainpoliciesPolicyDefinitions folder.◦ Copy inetres.adml from C:WindowsPolicyDefinitionsen-US to the Domain SysvolDomainpoliciesPolicyDefinitionsen-US policy folder.Here is the online GPO Search with the location:Let Users turn on and use Enterprise Mode from the Tools menuUSER CONFIGURATION: gpsearch.azurewebsites.netMACHINE CONFIGURATION: gpsearch.azurewebsites.netUse the Enterprise Mode IE website listUSER CONFIGURATION: gpsearch.azurewebsites.netMACHINE CONFIGURATION: gpsearch.azurewebsites.net
Anonymous
September 28, 2015
hello, i installed ie 11 but in too the enterprise mode is missing . IE Version is 11.0.9600.17843IS and updated version is 11.0.20(KB3058515).
Anonymous
September 29, 2015
@Niki Please make sure you have the latest IE Cumulative update installed. MS15-094 is the September 2015 cumulative technet.microsoft.com/.../ms15-094.aspx MS15-094: Description of the cumulative security update for Internet Explorer: September 8, 2015 support.microsoft.com/.../3087038

Compartilhar via