Overview of Internet Explorer Group Policies

re: Overview of Internet Explorer Group Policies

Andrew from Vancouver — Fri, 06 Jul 2007 18:23:06 GMT

Thanks, CC.

I've been here and done that, using multiple GP, the IEAK, login scripts, and default user settings to tweak the Internet Explorer settings (proxy settings/exceptions, zone security, membership in zones).

Can you lay out for us what the order of operations is here?

Andrew.

re: Overview of Internet Explorer Group Policies

Sean — Tue, 10 Jul 2007 16:55:44 GMT

The initial Internet Explorer configuration consists of a combination of copying a portion of the default user profile, as well as HKEY_LOCAL_MACHINE registry entrys (Installed Components and per-user stub paths).

Computer policies, if configured, would be applied during bootup.

During user profile load, user settings are applied via winlogon calls to the IE client-side extension, iedkcs32.dll. Logon scripts would be executed at about the same time.

If IEAK customization files exist (Program Files\Internet Explorer\Custom), these settings are ‘branded’ using the same IE client-side extension.

To summarize, the sequence of events would be:

1) Default user profile and HKEY_LOCAL_MACHINE registry entries

2) GPO (install.ins and any configured policies in the form of .inf files)

3) Logon scripts

4) IEAK customizations (install.ins and any configured policies in the form of .inf files)

It would be advisable to use Group Policy exclusively and remove IEAK customizations and logon scripts to reduce the number of machine/user 'touches', if at all possible.

re: Overview of Internet Explorer Group Policies

Dexter Mahadeo — Tue, 06 Nov 2007 18:28:17 GMT

Apparently there is a limit (259?) to the amount of characters you can enter when configuring an Exception List in a GPO for "IE Maintenance> Connection> Proxy Settings>" in order to bypass the proxy. As far as I can tell the actual data is stored in the GPT file "install.ins". I need to increase this limit by at least 2000 characters. How do I do this. I am a Sys Admin and not a programmer.

Dexter Mahadeo

Trinidad and Tobago

re: Overview of Internet Explorer Group Policies

Axel — Wed, 14 Nov 2007 23:31:55 GMT

When you populate the proxy exceptions list by using automatic configuration with the Internet Explorer Administration Kit (IEAK) Profile Manager (version 4.x or 5), the maximum number of characters that can be passed back by the .ins file is 259.

209252 Maximum Number of Characters That Can Be Specified in the Proxy Exceptions List

http://support.microsoft.com/default.aspx?scid=kb;EN-US;209252

re: Overview of Internet Explorer Group Policies

Larry — Wed, 09 Apr 2008 23:15:38 GMT

Is there any 'bleed-over' between IE security policy enforcement related to Java (e.g., the "Java permissions" setting) and non-IE invocation of Java? For example, the Tripp-Lite PowerAlert application's console executes on the JRE (Jave Runtime Environment). I suspect that the IE Java settings are interfering with the execution of this non-IE application.

re: Overview of Internet Explorer Group Policies

Yogi — Sun, 12 Jul 2009 06:06:25 GMT

Does all explorers use dcom?? I am having trouble with dcom, for some time now, and I basically tried every thing to fix it.which makes my computer restart randomly. So I was wondering if there is another explorer that doesn't use dcom, so I could try it to see if my trouble with dcom stops. thanks!!!!