Adding sites to compatibility mode and trusted sites, IE10 and Server 2008

We're having a challenge with configuring a GPO to add several sites to Compatibility View Settings as well as adding several others (the same sites, plus some others) to Trusted Sites. We are currently running VMware's Persona Management/floating
pools (thin provisioned linked clones), with the appdata folder redirected to the Persona server. Clients are running IE10, DCs are running Server 2008 R2 with IE8.
gpresult/r shows the GPO listed under Applied GPOs on the User Settings side (and all the settings are user settings); however, compatibility and trusted sites settings do not apply.
From prior research on the topic, I seem to recall that I needed to install the IE10 IEAK; however, I cannot install that without having IE10 installed first, and I cannot install IE10 without installing the pre-requisite elements, which I cannot install
(either through Windows Update or the IE10 standalone installer). When the IE10 install fails, it refers me to a Microsoft KB article that won't open. If I open the article on a workstation PC, I find links to five separate prerequisite files.
If I download all five files and attempt to install them, they say they're not applicable to my computer. I can't post links in this article yet (account hasn't been verified), but a Google search for "MS KB 2818833" leads to the page with
the links.
64-bit Server 2008 R2.
Any thoughts?

Hi,
Before going further, how did we configure the settings? Since Windows 8, the IEM settings have been deprecated. As a result, IEM settings won't apply to IE10 or above. However, in this situation, we should be able to use administrative templates
to configure the settings we want.
Regarding how to add web site to Compatibility View List via GPO, the following article can be referred to as reference.
How to add web site to Compatibility View List via GPO
http://blogs.msdn.com/b/asiatech/archive/2013/10/23/how-to-add-web-site-to-compatibility-view-list-via-gpo.aspx
Regarding how to Internet Explorer security zone sites via native policies, the following article can be referred to for more information.
How to configure Internet Explorer security zone sites using group polices
http://blogs.msdn.com/b/askie/archive/2012/06/05/how-to-configure-internet-explorer-security-zone-sites-using-group-polices.aspx
Best regards,
Frank Shen

Similar Messages

Updated iTunes to 10.5, iTunes won't work now! Everytime I open iTunes it just freezes and I can't click on anything. It says to take it out of compatibility mode and still doesn't work! any help??

Updated iTunes to 10.5, iTunes won't work now! Everytime I open iTunes it just freezes and I can't click on anything. It says to take it out of compatibility mode and still doesn't work! any help??
Thank you. Nick

Okay, we'll try the technique from the following post. Be sure to be logged in to your usual user account when doing so. (Otherwise you'll be editing the wrong set of HKEY_CURRENT_USER keys.)
Re: How do I turn off the compatibility mode for ITunes.
Does that clear up the compatibility message?

Enterprise Hotfix Rollup for Win7 and Server 2008 R2 via WSUS

I stumbled across the fact that Microsoft released a hotfix rollup for Win7 and Server 2008 R2 that contains 90 hotfixes
http://support.microsoft.com/kb/2775511/en-us
The articled I linked above talks about after installing 2775511 (the big hotfix rollup containing 90 hotfixes) it is also necessary to install three more hotfixes:
After this update is installed, you must install update 2732673 to fix a regression issue in the Rdbss.sys file
After this update is installed, you must install update 2728738 to fix a regression issue in the Profsvc.dll file
After this update is installed, you must install update 2878378 re-released on November 11, 2013 to fix a regression issue in the Advapi32.dll file
I have imported all four of these hotfixes into my WSUS server. Do I need to install 277551 first and then install the other three or can all four be approved and go out at once? I guess I am hung up on the language of "After this update is installed
.... ". I want to put all 4 of these on our Win7 machines as well as my 40+ WinServer 2008 R2 machines

I read somewhere that over half of the updates included in Win7 SP1 and WinServer 2008 R2 SP1 were originally released as hotfixes. This means Microsoft made the decision that a large number of hotfixes would benefit every user of these two OSs
I think your conclusion is flawed. The only thing that you can draw from the presented statistic, is that Microsoft determined that a significant percentage of updates originally released as hotfixes warranted the additional investment in regression testing
to subsequently release those hotfixes as updates.
The fact that they bundled these 90 hotfixes together leads me to the same conclusion.
In fact, exactly the opposite conclusion applies: What you have in this package is all the rest of the stuff that didn't make that cut. What you have in this package are still NOT-regression tested hotfixes, they've just been bundled up for easy deployment
(and note that three of them got further broken in the process of bundling), causing yet three more hotfixes to have to be released.
In fact I read the MS Team Blog about this big hotfix release and they say the same thing, all users of these OSs would benefit from the installation of this hotfix rollup, not just a subset of users.
I suspect there are a notable number of patch administrators and systems administrators who would disagree with that self-serving promotion. If, in fact, it's true that "all users" would benefit, then the product team should have invested the effort in properly
regression testing those hotfixes, and releasing them as REAL updates. They did not; ergo the *actual* value is less than claimed.
Of course the bugaboo here is the fact that three other individual hotfixes need to be installed after the big hotfix rollup is installed.
Exactly! (And those are just the attempted fixes that broke something. Who knows how many other "fixes" may still result in newly discovered "broken stuff" that was never broken in the first place.)
The second part of this question should revolve around an itemized review of the hotfixes contained in this rollup with one simple question asked for each:
Have we actually *experienced* the issue addressed by this hotfix.
Where hotfixes are concerned one very simple but important rule applies:
If it ain't broken, don't try to fix it!
Lawrence Garvin, M.S., MCSA, MCITP:EA, MCDBA
SolarWinds Head Geek
Microsoft MVP - Software Packaging, Deployment & Servicing (2005-2014)
My MVP Profile: http://mvp.microsoft.com/en-us/mvp/Lawrence%20R%20Garvin-32101
http://www.solarwinds.com/gotmicrosoft
The views expressed on this post are mine and do not necessarily reflect the views of SolarWinds.

Unable to execute embedded application windows azure in Windows Vista and Server 2008

I'm having problems to install the backup application Azure.
In Windows Vista and Server 2008 .
I segudo instructions :
http://support.microsoft.com/es-es/kb/2934202
But I still can not install the agent.
When I run it , it is decompressed and then a window with an error.
Anyone else happens ?

The message that Windows creates me exactly is:
Unable to execute the embedded application to complete the installation.
After being , checking this:
Microsoft .NET Framework 4
Microsoft Visual C++ 2008 Service Pack 1 Redistributable Package MFC Security Update
Windows PowerShell 3.0 (my machine is 2.0)
Microsoft.NET Framework 4 Client Profile (installed)
Microsoft Visual C++ 2008 Service Pack 1 Redistributable Package (installed)
The announcement of support Server 2008 64bit versions .
https://msdn.microsoft.com/es-es/library/azure/jj573031.aspx#BKMK_testsrv
I realize that my machine is 32bit Server 2008 Standard
http://azure.microsoft.com/blog/2014/10/06/announcing-support-for-backup-of-windows-server-2008-with-azure-backup/
It occurred to me descompri the MARSAgentInstaller package.
Run the application, but being 32bit my system , I think the Agent application is 64bit Copies Azure .
For this throws an error commenting same .

Server 2012 Kms Host and Server 2008 r2 client.

I have deployed a Server 2012 Kms host.
Windows 7, and 8 are activating just fine, and Office 2010 is working.
The issue I'm having is activating Server 2008 and Server 2008 r2.
It seems I have missed a step that would allow me to activate those clients.
Can someone please guide me as to what possibly needs to be done to allow these clients to activate?

Hi,
The following steps are needed to set up Volume Activation Services in a Windows Server 2012 test lab:
1. Step 1: Set up the base test lab configuration
2. Step 2: Install the Volume Activation Services server role
3. Step 3: Configure Active Directory-based Activation
4. Step 4: Verify that Active Directory-based Activation works
5. Step 5: Configure Key Management Services (KMS)
6. Step 6: Verify that KMS volume activation works
At same time KMS volume activation requires
a minimum threshold of 25 computers before activation quests will be processed. The verification process described here will increment the activation count each time a client computer contacts the KMS host. However, unless the activation threshold
is reached, the verification will take the form of an error message rather than a confirmation message.
The related KB:
Test Lab Guide: Demonstrate Volume Activation Services
http://technet.microsoft.com/en-us/library/hh831794.aspx
Hope this helps.
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

Unable to open Office files on SharePoint 2010 sites on Windows Server 2008 R2

Setup: Windows SharePoint Server 2010 sp1 on Windows Server 2008 R2 (hosted on VMWare VSphere ESXi 5.1)
Secured using Domain SSL from GlobalSign.
Client OS: Windows 7 Professional 32bit & Windows XP SP3 32 bit
Browsers: IE10, IE9,IE8
Office: Office 2010, Office 2010 sp2 (both 32bit), Office 2007
Problem Description: Only recently, users started having issues with opening Office files (Word, Excel) on SharePoint sites. When you click on an Office file e.g. Word Document, it comes up with the option to select "Ready only" or "Edit"
and choosing either options and re-entering the login credentials results in the
application hanging. If you leave it for a while (about 5 minutes) sometimes the file opens and other times it gives the error "Could not open https://portal.com/XXX/XXX/Document.docx". Even when it opens, it's extremely
sluggish and can't do anything other than end it via Task Manager. Same with excel files.
This happens to all the users all different OS and browsers.
On XP Pro SP3 w/ IE8, when you click on the file, the login prompt keeps popping back up repeatedly and if you click cancel, the file loads up anyway but no way of saving back onto the SharePoint site.
IMPORTANT: One exception is when logged in as a Site Collection Administrator, it
works like a dream bizarrely!!!! Opens, Edits and saves back fine on the SharePoint site.
Have tried following:
1. Repaired Office 2010 Pro; Uninstalled/Re-installed Office 2010 Pro
2. Reset Browser, unticked automatically detect proxy settings.
3. Emptied OfficeOfflineCache on Client
4. Removed WebDAV from the SharePoint server
5. Added Antivirus folder exclusion (We use SEP 11) on the SharePoint Server
Note: PDF files opens fine for all users.
I would immensely appreciate if anybody has got any advice/pointers/suggestions. Desperately out of ideas at the moment.
regards,
Compter Sez No!

Hi,
According to your description, When you try to open a Microsoft Office document from a SharePoint 2010 site in a client application, the document opens slowly and you are prompted to enter your credentials multiple times.
This issue may be because of SharePoint Web Front End (WFE) server(s) has Antivirus software installed and the exceptions are not set correctly.
I recommend to remove the antivirus software or set the correct permissions for the antivirus software to resolve the issue.
To configure the antivirus exceptions, please follow the guidelines in the below articles:
KB943620:
Folders to exclude when you perform a file-level antivirus scan on a server operating system.
KB952167:
Certain folders may have to be excluded from antivirus scanning when you use a file-level antivirus program in SharePoint.
KB943556:
Recommended file and folder exclusions for Microsoft Forefront Client Security or Forefront Endpoint Protection 2010.
Best regards.
Thanks

Want to upgrade 2008 R2 to 2012. Upgrade advisor giving errors relating to Database Compatability Level and Server Collation

I want to upgrade a SQL Server from 2008 R2 to 2012. When I run upgrade advisor, I get the following error messages:
Rule "Valid Database compatibility level and successful connection" failed.
The report server database is not a supported compatibility level or a connection cannot be established. Use Reporting Services Configuration Manager to verify the report server configuration and SQL Server management tools to verify the compatibility
level.
Rule "Valid Database server collation and successful connection" failed.
The SQL Server Database Engine is not configured with a valid server collation and cannot be used as the Reporting Services SharePoint Shared Service catalog database.
The database called ReportServer has Collation = Latin1_General_Cl_AS_KS_WS and Compatibility level = 100

Hi Andrew,
Regarding to the first error message, please check the Reporting Service Configuration Manager, make sure that you connect to ReportServer database from the correct server
and use servername\instancename format connection string. For more details, please review this similar
thread.
Regarding to the second error, it is caused by that the current SQL Server Database Engine server is using an incompatible server collation.
SQL Server 2012 Reporting Services SharePoint mode utilizes the SharePoint shared services architecture. SharePoint does not support SQL Server Database Engine configured for case sensitive or server collations or binary server collations.
And since the SQL Server Database Engine server collation property cannot be changed, you will not be able to complete an upgrade of Reporting Services. You will need to migrate your Reporting Services installation to a new server which is using a compatible
server collation. For more details, please review the following article:
Incompatible Database Engine Server Collation:
https://msdn.microsoft.com/en-us/library/hh759335%28v=sql.110%29.aspx?f=255&MSPPError=-2147217396
Thanks,
Lydia Zhang
Lydia Zhang
TechNet Community Support

Problem with m1319f mfp on WIndows 7 and Server 2008

Hi there,
I just bought a m1319f mfp.
Plugged it in an old D-Link dp-300u print server.
The printer work fine on Windows XP.
Not working on Windows 7 and Windows server 2008.
I configured the port as in XP (adress, lp, queue name) and when i print from 7 or server 2008, there is a message on the printer saying "printing document". It stays there for a couple of minutes but no printing. No stuck document on the computer printing queue.
Every time i install the printer from 7 or server 2008, the print server have to be restarted (lights flashing).
The print server seems to fail when i'm on the Windows printer searching part (windows trying to find the printer when adding a new printer).
Maybe the dp-300u is too old?
I have another printer on it (LPT this time) and its working fine. Brother MFC7220 it is.
ANy idea?
Thank
Hope i have been clear, English is not my first language...

BUmp

OID and Server 2008 R2 AD

Hi,
We have recently decided to upgrade our Active Directory Domain to Server 2008 R2. We use Oracle OID 10g but are experiencing problems pointing OID at a 2008 R2 domain controller because only 250 results are returned. Below is a message we have recieved from Oracle support blaming Microsoft AD for the problem but we think there may be something else going on.
Can anyone help us out please?
Many thanks,
Tim
Hello.
Please have a look at Note 944298.1
Although DIP synchronization of OID 10g with MS Windows 2008 / AD 2008 may work, it is not officially compatible / certified due to known issues.
You can try to fix the synchronization but it's possible that may not work, or other components may not work (for example WNA).
Current error at bootstrap is
[LDAP: error code 12 - 00002040: SvcErr: DSID-031401E0, problem 5010 (UNAVAIL_EXTENSION)
This error is thrown by Microsoft AD when searching for more than 250 entries.
This is an AD issue, and if you would like to fix the uncertified setup, you will need to first raise a case with Microsoft Support for this error.
For opening a case, more details would need to be provided to Microsoft.
I have seen the exact same error recently with AD2008 and I know that the problem is with Microsoft's pagination control "1.2.840.113556.1.4.319 (pagedResultsControl)" when reading the second page.
In order to confirm this before opening a case with Microsoft, please use following note to capture network trace during bootstrap and check the controlType of the frame which returns UNAVAIL_EXTENSION.

Thought I'd follow up with you guys. Been working with Ritesh Mishra at Microsoft. He had us install the patch referenced in KB977180 on our 2008 R2 domain controller followed by a reboot, which did not work by itself. But after adding the following registry key to the 2008 R2 domain controller followed by another reboot, everything started working.
HKLM\System\CurrentControlSet\Services\NTDS\Parameters
Add String value “DSA Heuristics”
Set the value to 000000000001
I hope this helps.
Edited by: user13336785 on Aug 4, 2010 12:38 PM

PKI SCCM Client Certificate Template not viewable by Windows 7 and Server 2008 workgroup machines.

Hello everyone,
I’m having issues with workgroup computers, not domain systems when I request a certificate.
It’s extremely weird. It has something to do with Windows 7 and Windows 2008 machines. In 2003 server I can request a certificate manually with certutil and it see the certificate template. I copy over the exact command
on windows 7 and it can’t see the certificate template.
I have the following configuration:
CA Enterprise
I have created the SCCM Client Certificate
I have created the SCCM Web Server Certificate
I have created the SCCM Distribution Point Certificate
GPO is configured
SCCM 2012 R2 CU2 configured to do HTTP and HTTPS
Installed SCCM Client Certificate
Installed SCCM Web Server Certificate
Installed Distribution Point Certificate
Deployed to a domain computer good on PKI
Workgroup Computers:
I’m having issues with deploying certificates
Windows 7 –
(ERROR) not successful
Windows Server 2008 R2 –
(ERROR) not successful
Windows Server 2003 - successful
Windows XP – successful
How I’m getting the certs for the clients is by utilizing the following scripts from this URL.
http://www.ithierarchy.com/ITH/node/48
I did find a couple of errors in the code, but if it’s working on my Server 2003, then it should work on the others. Windows 7 and Windows 2008 R2 seem to have the same issue. The error I’m getting is the following:
Command line requesting the cert ---- CertReq –new –f testcomputer.home.pvt.inf c:\client\testcomputer.home.pvt.req
Error --- Template not found.
SCCMClientCertificate (this is my template)

Just to give an update on what’s happening with this. I found out this format is unsupported by MS with Windows Vista and newer OS’s.
Instead you must utilize two other additional roles on the CA to have this work. The caviate is, I’m down to the testing and it’s not working as in the document. I have MS Support
working with me to resolve this issue since it was written by MSFT.
http://blogs.technet.com/b/askds/archive/2010/05/25/enabling-cep-and-ces-for-enrolling-non-domain-joined-computers-for-certificates.aspx
and use this doc for similar workgroup computers for rolling out certs. This was written for RT devices, however, it should work once I get to that point.
http://blogs.technet.com/b/pki/archive/2012/12/11/certificate-for-winrt-devices-and-non-domain-member-devices.aspx

PKI Client Certificate Template not viewable by Windows 7 and Server 2008 workgroup machines.

Hello everyone,
I’m having issues with workgroup computers, not domain systems when I request a certificate.
It’s extremely weird. It has something to do with Windows 7 and Windows 2008 machines. In 2003 server I can request a certificate manually with certutil and it see the certificate template. I copy over the exact command
on windows 7 and it can’t see the certificate template.
I have the following configuration:
CA Enterprise
I have created the SCCM Client Certificate
I have created the SCCM Web Server Certificate
I have created the SCCM Distribution Point Certificate
GPO is configured
SCCM 2012 R2 CU2 configured to do HTTP and HTTPS
Installed SCCM Client Certificate
Installed SCCM Web Server Certificate
Installed Distribution Point Certificate
Deployed to a domain computer good on PKI
Workgroup Computers:
I’m having issues with deploying certificates
Windows 7 –
(ERROR) not successful
Windows Server 2008 R2 –
(ERROR) not successful
Windows Server 2003 - successful
Windows XP – successful
How I’m getting the certs for the clients is by utilizing the following scripts from this URL.
http://www.ithierarchy.com/ITH/node/48
I did find a couple of errors in the code, but if it’s working on my Server 2003, then it should work on the others. Windows 7 and Windows 2008 R2 seem to have the same issue. The error I’m getting is the following:
Command line requesting the cert ---- CertReq –new –f testcomputer.home.pvt.inf c:\client\testcomputer.home.pvt.req
Error --- Template not found.
SCCMClientCertificate (this is my template)

Just to give an update on what’s happening with this. I found out this format is unsupported by MS with Windows Vista and newer OS’s.
Instead you must utilize two other additional roles on the CA to have this work. The caviate is, I’m down to the testing and it’s not working as in the document. I have MS
Support working with me to resolve this issue since it was written by MSFT.
http://blogs.technet.com/b/askds/archive/2010/05/25/enabling-cep-and-ces-for-enrolling-non-domain-joined-computers-for-certificates.aspx
and use this doc for similar workgroup computers for rolling out certs. This was written for RT devices, however, it should work once I get to that point.
http://blogs.technet.com/b/pki/archive/2012/12/11/certificate-for-winrt-devices-and-non-domain-member-devices.aspx

880GM-E41 and Server 2008 / Windows Home Server 2011

I am building a WHS 2011 machine (which is based on Server 2008) and am considering the 880GM-E41 mainboard. However when I go to the product website:
http://www.msi.com/product/mb/880GM-E41.html
I don't see drivers listed for Server 2008. Specifically, there are chipset, audio, raid (etc) drivers listed for Windows 7 64-bit, but nothing for Windows Server 2008. However in the past I have experienced mainboards which 'just work' regardless of the drivers that are downloadable. My question is... before I purchase this mainboard, does anybody know if the motherboard works on Windows Server 2008? Or which devices/features will not work?
I actually don't require the RAID drivers to work since I won't be using hardware raid, but I will need the system, chipset, and audio drivers working (whether they get pulled from Windows Update or downloaded from MSI).
Thanks!

WHS 2011 is built on the Windows Server 2008 R2 code base, which is built on Windows NT 6.1, the same core operating system used with the end-user oriented Windows 7. So basically, you need to use Windows 7 64bit drivers and everything will be fine.

Pre-provision BitLocker and Server 2008 R2

Hi,
I am trying to pre-provision BitLocker during WinPE and then install Windows Server 2008 R2. This results in a BSOD after the operating system image has been applied. Does anyone know if pre-provisioning bitlocker is supported or works on Server 2008 R2
(like it works on Windows 7 SP1)?
On technet I found the following regarding Server 2012: http://technet.microsoft.com/en-us/library/jj612864.aspx
There it states:
For all Windows Server editions, BitLocker must be installed using Server Manager. However, you can still provision BitLocker before
the server operating system is installed as part of your deployment.
Has anyone pre-provisioned BitLocker on Server 2008 R2?
Regards,
Carl

I am creating the BDE partition as mentioned and have used pre-provisioning of bitlocker without issues on win7, but the same thing does not seem to work on server 2008 r2 and results in BSOD. I suspect it could be related to the fact that BitLocker is not
installed on server 2008 r2 by default, so I'll try to add bitlocker using DISM and see if it makes any difference.
Another issue is that I have to create 2 partitions on the drive besides the BDEDrive (so 3 partitions in total), this messes up SCCM and it looks for the media from the wrong location, more info in this thread:
http://social.technet.microsoft.com/Forums/en-US/0b24b745-b890-494e-993c-1f1f307af960/configmgr-client-does-not-install-during-osd-trying-to-use-wrong-setup-path?forum=configmanagerosd#a4914c0d-1f56-4ba2-a745-b43fb0005e55
Carl

Just installed after lots of conflict to 11.1 version it tells me to turn off compatibility mode and i dont know how

got an i pad mini wouldnt connect to itunes downloaded 11.1 version with much difficulty now it want me to disable compatablity mode before opening and i dont know how.

Not on my Windows 7 box at the moment, but it's generally in the same place as in the following screenshot of the iTunes.exe properties on XP:

Firefox updated to latest version, now I can not enter data in a discussion board dialog box in Blackboard. IE8 had same problem, change to compatability mode and IE functions. Any fix for firefox?

Am using Blackboard to teach classes at college. Have not updated firefox at college, works great. Wife hit yes to update to latest version last week. Now can nan not reply in the discussion board, the curser is not recognized in the dialog box.

Try to disable hardware acceleration in Firefox.
*Firefox > Preferences > Advanced > General > Browsing: "Use hardware acceleration when available"
*https://support.mozilla.org/kb/Troubleshooting+extensions+and+themes

Adding sites to compatibility mode and trusted sites, IE10 and Server 2008

Similar Messages

Maybe you are looking for