Group Policy Blog

Using Group Policy & PowerShell to Mitigate Recent Internet Explorer Vulnerability

Over this last weekend, Microsoft published warnings of yet another zero-day “memory corruption” Internet Explorer vulnerability to all versions of the venerable browser . Since there is no current patch for this yet, IT administrators are left to mitigate against it using a variety of less than ideal workarounds, which are documented here. If you scan this […]

Circumventing IE Proxy Policy with…Charms!

An astute reader of this blog brought an interesting scenario to my attention, and I spent some time confirming it. For those of you running Windows 8 (or 8.1) there’s a neat “feature” that allows your users to circumvent controls you put in place for controlling proxy server settings in Internet Explorer. Here’s the scenario. […]

GP Preferences for Internet Explorer 11

With IE 11 now generally available for Windows 7 and newer versions, the obvious question is, how do I manage IE 11 configuration using Group Policy? Of course, now that IE Maintenance Policy has been deprecated, your choices for managing IE using GP include either the Admin Template settings (inetres.admx) that come with the version […]

WARNING: Installing IE 10 on your Windows 7 Workstation Removes IE Maintenance Policy from Group Policy

Thanks to fellow Group Policy MVP  Alan Burchill for warning about this–apparently if you install Internet Explorer 10 on your Windows 7 workstation, and you also happen to manage Group Policy from that machine, the IE 10 installation removes the option to edit IE Maintenance policy from that machine completely. I even confirmed that the MMC […]

Using Group Policy to Manage the Internet Explorer Popup Blocker Allow List

A recent thread on the GPOGUY.COM GPTalk Mailing list prompted me to write about managing IE settings using Group Policy. In an article I wrote for Windows IT Pro Magazine in 2011, I talked about the various technologies in Group Policy that you can use to manage IE configuration. It’s definitely a mixed bag, with no […]

GPMC report errors related to IE Maintenance

There been a long-standing issue, ever since IE 7 was introduced, related to GPMC and the use of IE Maintenance Policy. Specifically, if you defined zone security in IE Maintenance policy from a machine running IE 7, and then tried to view a settings report on that GPO from GPMC running on  Vista or XP (and presumably also 2003), […]