Ie11 administrative template settings not applied

2008 R2 domain with mostly windows 7 clients running ie8. upcoming project to upgrade them to ie11.
I copied the inetres.admx and inetres.adml files from the PolicyDefinitions folder on a windows 8.1 PC with ie11 and pasted them into the central store.
I created a new GPO that configures "access data across domains" to "disabled" from user configuration/policies/administrative templates/windows components/internet explorer/internet control panel/security page/internet zone.
I logged into four test machines with the same user account.
windows 7 with ie8
windows 7 with ie9
windows 8 with ie10
windows 8.1 with ie11
all four machines show this setting correctly Disabled with my GPO as the winning GPO in RSOP, but *only* the ie8 machine properly shows this setting as Disabled in its Internet Settings. the ie9, ie10, and ie11 machines all have the setting Enabled in their
Internet Settings.
full disclosure: there is an old-school Internet Explorer Maintenance GPO in place that sets this to Enabled. but in theory, that GPO should only affect the ie8 and ie9 machines, right? and yet the ie8 machine is the only one getting the correct
setting from my new administrative template GPO.
is there an easy way in GPMC to tell if i'm actually working with the ie11 version of inetres.admx or not? some setting that's new for this version?

ARRRGHHH!!!
found it. *somebody* set up a Computer Settings GPO applying these same administrative template IE settings to all workstations. I'm going to guess this GPO was set up prior to my arrival at this job in 2005 because I don't remember doing it, and
it would never have occurred to me to put these settings on the machine side--as evidenced by the fact that i've only been looking at the user side in RSOP during this whole thread. the IE settings in this machine GPO also match up with the settings
in the old IEM GPO we've been using, so it appeared as though IEM was configuring everything.
thanks everybody for your time and your help.

Similar Messages

AcroRead.mst settings not applied in installation

Hello,
I downloaded Adobe reader 11, dutch (AdbeRdr11000_nl_NL.exe) and extracted it:
AdbeRdr11000_nl_NL.exe -nos_oc:\temp\temp1\files\2 -nos_ne
Then I opened the .MSI file with the Adobe customization wizard and changed some settings (Eula, updates etc).
After that I saved it and AcroRead.mst was created.
Then on the client (logged in as Administrator) I copied all the files in c:\temp and entered:
msiexec.exe /i AcroRead.msi TRANSFORMS="AcroRead.mst" /quiet
Adobe reader gets installed and I can open it but the changes from the customization wizard are NOT applied.
When I start adobe, I get the EULA and the product updates are still configured as automatic.
I tried with other settings and full path names like these:
msiexec.exe /i "c:\temp\adobe\AcroRead.msi" TRANSFORMS="c:\temp\adobe\AcroRead.mst" /quiet
msiexec.exe /i AcroRead.msi TRANSFORMS=AcroRead.mst /quiet
msiexec.exe /i /qn AcroRead.msi TRANSFORMS=AcroRead.mst
msiexec.exe /i "AcroRead.msi" /q TRANSFORMS="AcroRead.mst"
msiexec.exe /i AcroRead.msi /q TRANSFORMS="AcroRead.mst"
But the result is the same, Adobe reader is installed but without the changed settings.
Could someone help with this please ?
I don't know anymore what to do.
thanks.

Copy the examples from http://www.adobe.com/devnet-docs/acrobatetk/tools/AdminGuide/cmdline.html#command-line-exa mples so that you don't have to try random cmd lines. For example, quotes are only used around property params.
Enable logging, and if you still have problems, post you cmd line and log.
hth,
Ben

User Group Policy Settings not applied to new user profiles at first logon

Good Afternoon,
We have an issue that occurs to a new user when they first log on to their machines. They log on and a new profile creates from the Default User Profile. We can see that a number of our Group Policy Settings applied as "User Configuration" are
not applying.A log off and back on is required before the policies apply.
Any thoughts to this behaviour please?
Regards
LeeB
Lee Bowman MCITP MCTS

Hi,
How about your problem now? How many system encounter this problem? Is all policy couldn't be applied? Is there any feedback when using gpresult to check policy applied status?
As Group Policy applies after user identity authentication, generally speaking, user logoff and back doesn't helpful with this problem.
When this problem occures, have you checked event log if it identify this problem?
Roger Lu
TechNet Community Support

Connection settings not applied

We have a X60s that has configured several connection profiles. On the wireless broadband it is not applying the network settings correctly. We have set WINS-server, lmhosts and Netbios in the adapter and the profile to the correct settings. But when it connects it removes all this settings from the adapter. Other settings like printers are applyed correctly.
Connection Manager V 5.02 Build 7VC55WW

Try to verify if you have AnyConnect for Mobile enable
Licensed features for this platform:
Maximum Physical Interfaces       : Unlimited      perpetual
Maximum VLANs                     : 100            perpetual
Inside Hosts                      : Unlimited      perpetual
Failover                          : Active/Active perpetual
VPN-DES                           : Enabled        perpetual
VPN-3DES-AES                      : Enabled        perpetual
Security Contexts                 : 2              perpetual
GTP/GPRS                          : Disabled       perpetual
AnyConnect Premium Peers          : 50             perpetual
AnyConnect Essentials             : Disabled       perpetual
Other VPN Peers                   : 250            perpetual
Total VPN Peers                   : 250            perpetual
Shared License                    : Disabled       perpetual
AnyConnect for Mobile             : Disabled       perpetual
AnyConnect for Cisco VPN Phone    : Disabled       perpetual
Advanced Endpoint Assessment      : Disabled       perpetual
UC Phone Proxy Sessions           : 2              perpetual
Total UC Proxy Sessions           : 2              perpetual
Botnet Traffic Filter             : Disabled       perpetual
Intercompany Media Engine         : Disabled       perpetual
Saludos,
Jose Luis B.
No te olvides de calificar si te sirvio la ayuda.
Please do rate if the given information helps.

[solved][laptop-mode-tools] hard drive power settings not applied

I've used the laptop-mode-tools now for quite some time. However, recently the power management settings are not applied anymore. Possibly since updating to systemd...
My laptop-mode.conf looks as follows:
CONTROL_HD_POWERMGMT=1
# Power management for HD (hdparm -B values)
BATT_HD_POWERMGMT=254
LM_AC_HD_POWERMGMT=254
NOLM_AC_HD_POWERMGMT=254
However, even after doing a systemctl restart laptop-mode-tools.service I always get
$ sudo hdparm -B /dev/sda
/dev/sda:
APM_level = 96
Setting it manually works:
$ sudo hdparm -B 254 /dev/sda
/dev/sda:
setting Advanced Power Management level to 0xfe (254)
APM_level = 254
$ sudo hdparm -B /dev/sda
/dev/sda:
APM_level = 254
Of course, the settings are lost upon rebooting in this case.
Any idea where the problem could be?
Last edited by rggjan (2012-10-08 12:25:04)

I apologize if it is bad style to answer to a post marked as [solved] but:
Same problem here!
HDParm-settings are not applied on boot by LMT.
laptop-mode.conf:
# Should laptop mode tools control the hard drive power management settings?
# Set to 0 to disable
CONTROL_HD_POWERMGMT="auto"
# Power management for HD (hdparm -B values)
BATT_HD_POWERMGMT=100
LM_AC_HD_POWERMGMT=200
NOLM_AC_HD_POWERMGMT=254
# hdparm -B /dev/sda
/dev/sda:
APM_level = 96
Any ideas or solutions on this so far?
And why is this post marked as 'solved'?
edit:
1.) manual set hdparm-settings survive reboot but not suspend!
2.) no difference between CONTROL_HD_POWERMGMT="auto" or "1"
3.)
# systemctl status laptop-mode
laptop-mode.service - Laptop Mode Tools
Loaded: loaded (/usr/lib/systemd/system/laptop-mode.service; enabled)
Active: active (exited) since Do 2013-01-24 14:05:20 CET; 8min ago
Process: 664 ExecStart=/usr/sbin/laptop_mode init auto (code=exited, status=0/SUCCESS)
4.) pointed out that this seems to be a bug: https://bugs.archlinux.org/task/33262 as systemd does not restore apm values on wake up.
Last edited by renegat (2013-03-09 11:01:42)

Hide Display Settings not applied in User GPO

Hello,
I am trying to hide the display settings via a GPO so folks can't change the resolution. I set the "Disable the Display Control Panel" setting to enable, but users can still go to the Control Panel and change the display settings. Other parts of
the GPO are applying, like the Ctrl+Alt+Del settings. The GPO has the loopback function set to replace. From my understanding, that should force all user settings in that GPO on everyone who logs into the computer, whether they are in that OU or not.
Some settings apply, just not the Display settings. Is there something else I have to enable to get that working?
Thanks
Jason Watkins MCSE, MCSA, MCDBA, CCNA

Hi Jason,
It's been a while. How is it going? If it still doesn't work out, we can run command
gpresult/h report.html to collect group policy result to check this. Note: to collect computer part group policy settings, we need to run the command with administrative privileges.
In addition, regarding troubleshooting group policy issues, the following thread can be referred to as reference.
[Forum FAQ] Common steps to start troubleshooting Group Policy application issues
https://social.technet.microsoft.com/Forums/windowsserver/en-US/382c97e8-93c8-4022-b8fe-22401037d14c/forum-faq-common-steps-to-start-troubleshooting-group-policy-application-issues?forum=winserverGP
Best regards,
Frank Shen
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

Group Policy IE Maintenance settings not applied locally

Users with cached Group Policies, logging in "workstation only", are not receiving all of the settings specified.
I have followed the steps in TID 3655065, but security tab settings, and homepage are still incorrect.
Windows XP SP2
Zenworks 7
ZDM 7 SP1 IR4 HP4 applied
Workstation policy package GPO:
Computer and Security checked - with persist
User policy package GPO
User checked - with Cache set
When logging in to Novell client on network, the policies work fine.
Logging in workstation only is when the problem exists.
Two errors show -
Error 2 reading Cache User Settings
Error 0x2 refreshing User policy.
Attached is the WMGrpPolUser.log

mdavidso,
It appears that in the past few days you have not received a response to your
posting. That concerns us, and has triggered this automated reply.
Has your problem been resolved? If not, you might try one of the following options:
- Visit http://support.novell.com and search the knowledgebase and/or check all
the other self support options and support programs available.
- You could also try posting your message again. Make sure it is posted in the
correct newsgroup. (http://forums.novell.com)
Be sure to read the forum FAQ about what to expect in the way of responses:
http://forums.novell.com/faq.php
If this is a reply to a duplicate posting, please ignore and accept our apologies
and rest assured we will issue a stern reprimand to our posting bot.
Good luck!
Your Novell Product Support Forums Team
http://support.novell.com/forums/

X11 Keyboard Settings Not Applied on Boot

I'm having problems setting my keyboard layout on boot in X11 using Xorg.conf.d. Specifically, I would like to set the default X keyboard to be Programmer Dvorak on boot with the caps:swapescape option on. I have followed the instructions on the Wiki for setting the default X keyboard; however, on boot the caps:swapescape option is applied but otherwise the layout is the standard US QWERTY layout. Setting the keyboard manually using the following command always works:
setxkbmap us -variant "dvp" -option "caps:swapescape
Here is the relevant Xorg.conf.d (10-keyboard.conf) file:
Section "InputClass"
Identifier "Keyboard Defaults"
MatchIsKeyboard "yes"
Option "XkbLayout" "us"
Option "XkbVariant" "dvp"
Option "XkbOptions" "caps:swapescape"
EndSection
The other thing that is strange is that the output of setxkbmap doesn't change between boot (incorrect keymap) and when the keymap is set manually.
$ setxkbmap -query -print -verbose 10
Setting verbose level to 10
locale is C
Trying to load rules file ./rules/evdev...
Trying to load rules file /usr/share/X11/xkb/rules/evdev...
Success.
Applied rules from evdev:
rules: evdev
model: evdev
layout: us
variant: dvp
options: caps:swapescape
Trying to build keymap using the following components:
keycodes: evdev+aliases(qwerty)
types: complete
compat: complete
symbols: pc+us(dvp)+inet(evdev)+capslock(swapescape)
geometry: pc(pc104)
xkb_keymap {
xkb_keycodes { include "evdev+aliases(qwerty)" };
xkb_types { include "complete" };
xkb_compat { include "complete" };
xkb_symbols { include "pc+us(dvp)+inet(evdev)+capslock(swapescape)" };
xkb_geometry { include "pc(pc104)" };
rules: evdev
model: evdev
layout: us
variant: dvp
options: caps:swapescape
Any pointers in the correct direction would be greatly appreciated.

I remember having had the same issue with Gnome which ignores the settings in Xorg.d completely. I would assume the same for Xfce although not for WMFS.
Does this help?
https://bbs.archlinux.org/viewtopic.php?id=154983

Template changes not applying in Edit Region

I created a template - 3 tables - the top & bottom table
are NOT editable regions. The middle table IS in an editable
region. On the template I changed the table in the middle region -
changed the background color, deleted a cell, added a picture
placeholder, etc. Also on the template I made changes to the top
& bottom tables. When I saved the template it asked if I wanted
to change all the pages that use this template - I said yes. But
only the changes made to the sections NOT in the editable region
update!!!
Sidenote: I took a Dreamweaver class in August 2006 (fab!)
but went and had a baby and am now FINALLY sitting down to develop
a few new sites. Prior to that I was a self-taught FrontPage user
(ugh). Point is: I'm a novice Dreamweaver user (and rusty no less!)
so forgive me if I'm missing something REAL basic here!

On Thu, 28 Jun 2007 19:48:12 +0000 (UTC), "Datanomics"
<[email protected]> wrote:
>Doesn't that defeat the point of the template...? If I
create 20 pages based
>on a template and then decide to change the color of a
table that's in an
>editable region then I would have to go to all 20 pages
to change that
>table....?
No, changing the EDITABLE regions in the child pages would
defeat the
point of a template.
Look at it this way. The template manages all the stuff that
is NOT
in the editable regions. You put the site header, footer,
navigation,
sidebar, whatever doesn't change, into the areas that are NOT
editable.
The editable region sits as a container on each child page to
hold the
stuff that is unique to the page.
If you changed that container in the template and the change
propagated down to the child pages, you would immediately and
permanently LOSE ALL YOUR UNIQUE PAGE CONTENT.
However, if you were using CSS to style everything, then all
you would
have to do is change the colour in the CSS file - and no
matter where
the targeted piece is, it would reflect the change.
Win
Win Day, Wild Rose Websites
http://www.wildrosewebsites.com
[email protected]
Skype winifredday

ACR settings not applied to jpegs in Explorer?

I use Camera Raw in Bridge to batch edit photos which are jpegs. At the moment, when I make changes and click "done", the changes are applied to the photos in Bridge, but when I view them in Explorer, they are still in the original state.
Before I installed Windows 7, the above procedure would change the photos in Explorer as well as Bridge, is there any way to resolve my problem?
I have xml files disabled and are having changes saved in the ACR database, if that information helps.

The ACR edits are recorded in a text section within the jpeg, do not actually change the image pixels. Therefore, when viewed outside of ACR/Bridge/PS they appear as before the edits, since no other apps use the exif data.
To make this work, you need to "Save" out of ACR, creating new jpegs, which then incorprates the edits into the image pixels.
Richard Southworth

Office 2013 Administrative Template files (ADMX/ADML) and Office Customization Tool

When I download the Office 2013 Admin Template files (ADMX/ADML) and OCT I get 3 files. Admin, AMDX and a excel spreadsheet. Is the Admin
folder the ADML folder? Reason I ask is b/c I'm trying to disable the Offie 2013 Startup screen via GPO and I have been directed to save the ADMX to %systemroot%PolicyDefinitions and ADML to %systemroot%PolicyDefinitions\en-us
on my base image that I am creating so obviously the ADMX is straight forward, but not the ADML since all I see is Admin. thanks,
SSC

Hi,
When you downloaded an Office Administrative Template files, please extract them to your driver, say
D:\. You need to copy all .admx file under D:\..\ADMX folder into
%systemroot%\PolicyDefinitions. It’s a root-level folder, which contains all language-neutral ADMX files.
Then please copy all .adml files under D:\...\ADML\en-us into
%systemroot%\PolicyDefinitions\EN-US. This subfolder contains the language-specific ADML resource files. You can create subfolder of %systemroot\PolicyDefinitions for each language that you will use.
For how to load the Administrative Template files, please follow the instructions for "Loading the ADMX templates" in Use Group Policy to enforce Office 2010 settings:
http://technet.microsoft.com/en-us/library/cc179081.aspx . Although the article is for Office 2010, the Administrative Templates information also applies to Office 2013.

Windows 8.1 - Security policies not applying

Hi All,
I'm having a bit of an issue with group policy settings not applying on Windows 8.1. Most of the policies are applying as they should but for some
reason certain security settings (Password policy, Account lockout policy, Interactive logon message etc.) are not.
I can see from GPResult that the policy is not filtered out and can confirm that some of the settings from the policy are getting applied!
FYI: The DC is WS2003 and we have not imported the Windows 8.1 ADMX templates... Could that be causing the issue?
Any help you guys might be able offer would be greatly appreciated!

As I know, Security policy like Password policy, Account lockout policy, Interactive logon message should work even the DC is Win Server 2003.
I suggest you check whether these policy are overridden by other GPOs due to the the GPO Priority, you can find detailed information in this link
Group Policy processing and precedence
http://technet.microsoft.com/en-us/library/cc785665(v=ws.10).aspx
Yolanda Zhu
TechNet Community Support

Group Policy Administrative Templates not applying on Windows XP SP3 - Windows Server 2008 R2

I have a Windows 2008 R2 domain with windows 7, and Windows XP SP3 client workstations.
I have a group policy to deny all access to removable storage in policies/administrative templates/system in user configuration (actually its in the computer configuration as well)
The problem is the policy is having no effect on the Windows XP machines. It works perfectly on Windows 7 machines.
Group policy in general is working on the Windows XP machines, as I can successfully map drives, push out scheduled tasks, and push out printers. (All preferences I know and I have GP Preferences client side extensions installed).
Its almost like the windows XP machines can't "understand" the admin templates from Windows Server 2008 R2.
Do I need to install something on the windows XP machines? What could be the problem?

> Its almost like the windows XP machines can't "understand" the admin
> templates from Windows Server 2008 R2.
Simply read the "supported on" of these settings... Vista and above
required.
Martin
Mal ein
GUTES Buch über GPOs lesen?
NO THEY ARE NOT EVIL, if you know what you are doing:
Good or bad GPOs?
And if IT bothers me - coke bottle design refreshment :))

How to roll back settings applied by a Group Policy Custom Administrative Template

Hi,
I have disabled USB port on a number of workstations using a Group Policy Custom Administrative Template. Now I need to enable it again. Is it possible to do it through Group Policy Custom Administrative Template again? If not how can I enable the USB ports?
TIA
Bijan

What I have exactly done is adding a custom administrative template which through it I can disable the removable medias. Sorry for the mistake, I was working on another issue and that made me confused. Anyway I put the content of adm file here to be inspected.
Disableportable.adm content:
CLASS MACHINE
CATEGORY !!category
CATEGORY !!categoryname
POLICY !!policynameusb
KEYNAME "SYSTEM\CurrentControlSet\Services\USBSTOR"
EXPLAIN !!explaintextusb
PART !!labeltextusb DROPDOWNLIST REQUIRED
VALUENAME "Start"
ITEMLIST
NAME !!Disabled VALUE NUMERIC 3 DEFAULT
NAME !!Enabled VALUE NUMERIC 4
END ITEMLIST
END PART
END POLICY
POLICY !!policynamecd
KEYNAME "SYSTEM\CurrentControlSet\Services\Cdrom"
EXPLAIN !!explaintextcd
PART !!labeltextcd DROPDOWNLIST REQUIRED
VALUENAME "Start"
ITEMLIST
NAME !!Disabled VALUE NUMERIC 1 DEFAULT
NAME !!Enabled VALUE NUMERIC 4
END ITEMLIST
END PART
END POLICY
POLICY !!policynameflpy
KEYNAME "SYSTEM\CurrentControlSet\Services\Flpydisk"
EXPLAIN !!explaintextflpy
PART !!labeltextflpy DROPDOWNLIST REQUIRED
VALUENAME "Start"
ITEMLIST
NAME !!Disabled VALUE NUMERIC 3 DEFAULT
NAME !!Enabled VALUE NUMERIC 4
END ITEMLIST
END PART
END POLICY
POLICY !!policynamels120
KEYNAME "SYSTEM\CurrentControlSet\Services\Sfloppy"
EXPLAIN !!explaintextls120
PART !!labeltextls120 DROPDOWNLIST REQUIRED
VALUENAME "Start"
ITEMLIST
NAME !!Disabled VALUE NUMERIC 3 DEFAULT
NAME !!Enabled VALUE NUMERIC 4
END ITEMLIST
END PART
END POLICY
END CATEGORY
END CATEGORY
[strings]
category="Custom Policy Settings"
categoryname="Restrict Drives"
policynameusb="Disable USB"
policynamecd="Disable CD-ROM"
policynameflpy="Disable Floppy"
policynamels120="Disable High Capacity Floppy"
explaintextusb="Disables the computers USB ports by disabling the usbstor.sys driver"
explaintextcd="Disables the computers CD-ROM Drive by disabling the cdrom.sys driver"
explaintextflpy="Disables the computers Floppy Drive by disabling the flpydisk.sys driver"
explaintextls120="Disables the computers High Capacity Floppy Drive by disabling the sfloppy.sys driver"
labeltextusb="Disable USB Ports"
labeltextcd="Disable CD-ROM Drive"
labeltextflpy="Disable Floppy Drive"
labeltextls120="Disable High Capacity Floppy Drive"
Enabled="Enabled"
Disabled="Disabled"
Bijan

"Make proxy settings per-machine (rather than per user)" Group Policy setting not applied until login as a local Administrator

We want to deploy to all our desktop the pac file to configure proxy. We have a Windows 2008 R2 server, and i've enabled the GPO "Make proxy settings per-machine (rather than per user)", and i've add a registry key AutoConfigURL in "HKLM\Software\Microsoft\Windows\Current
Version\Internet Settings" with the pac file link.
I've tested on my pc, and all was configured without any problem. I've try to login to my computer with another user (without admin rights) and the automatic configuration proxy was compiled and not modificable. It's seems that all works.
But, our users are not local admin, so i've tried to deploy the GPO in a collegue computer. I've forced the update of GPO, checked on registry that all new keys are added, and i've reboot the pc. When i've check on IE settings, autoconfig URL was empty and
grey. I'm disconnected from user and i've login to the pc with a local admin. With my surprise, the IE settings was compiled. When i'm come bac to the user profile the IE settings was compiled and not modificable.
The problem is: i've over 750 users in 3 countries, and i don't want grant them the local admin permissions. How can i configure proxy settings via GPO without login to every machine at least one time?

> have a Windows 2008 R2 server, and i've enabled the GPO "Make proxy
> settings per-machine (rather than per user)", and i've add a registry
> key AutoConfigURL in "HKLM\Software\Microsoft\Windows\Current
> Version\Internet Settings" with the pac file link.
In the past, we experienced various issues with machine proxy settings,
so we don't use them anymore. The simple approach:
Block access to the connections page through ADM template settings and
deploy the proxy through GPP Internet Settings.
This is what we do (with a pac file, too), and it works well :)
Martin
Mal ein
GUTES Buch über GPOs lesen?
NO THEY ARE NOT EVIL, if you know what you are doing:
Good or bad GPOs?
And if IT bothers me - coke bottle design refreshment :))

Ie11 administrative template settings not applied

Similar Messages

Maybe you are looking for