1 00:00:03,040 --> 00:00:08,710 Now let's dig in to group policy preferences, internet settings and see how we can use this to configure 2 00:00:08,710 --> 00:00:09,220 i.e.. 3 00:00:10,090 --> 00:00:15,640 So the first thing to note about it is I think I showed you this in the UI, but you can configure different 4 00:00:15,640 --> 00:00:19,570 browser versions using these group policy preferences, internet settings, options. 5 00:00:19,570 --> 00:00:25,240 If you right click on the node and say new, you'll see all of the different browser versions that are 6 00:00:25,240 --> 00:00:29,110 configured or that are configurable using group policy preferences. 7 00:00:30,050 --> 00:00:35,930 Again, note that this is only per user, so you can only configure this and targeted at user objects 8 00:00:35,930 --> 00:00:36,290 in AD. 9 00:00:37,460 --> 00:00:43,040 Now what you're seeing in this screenshot reflects what's available on Windows Server 2012 or two and 10 00:00:43,040 --> 00:00:44,390 or Windows 8.1. 11 00:00:45,230 --> 00:00:50,510 And what's a little bit misleading is that even though the last option says Internet Explorer ten only, 12 00:00:50,660 --> 00:00:54,560 it actually will support configuring Internet Explorer ten and 11. 13 00:00:55,430 --> 00:00:58,490 So similar to the one before it, eight and nine. 14 00:00:58,520 --> 00:01:01,940 You can configure i.e. ten and 11 using this last option. 15 00:01:02,810 --> 00:01:08,780 And so you can support multiple browser versions using the options that I showed here within a particular 16 00:01:08,780 --> 00:01:09,530 GPO. 17 00:01:10,370 --> 00:01:16,640 So you can have configuration settings for i.e. five and six, i7 eight and nine and i.e. ten all in 18 00:01:16,640 --> 00:01:22,820 the same GPO and group policy preference is smart enough to target only those machines that have the 19 00:01:22,820 --> 00:01:25,760 appropriate browser version installed for those settings. 20 00:01:26,720 --> 00:01:32,450 So that's kind of a handy thing to be able to do now with the group policy preferences UI. 21 00:01:32,450 --> 00:01:37,430 Once they dig into it, you'll see that it looks a lot like the Tools Internet Options menu selections 22 00:01:37,430 --> 00:01:39,050 that you see in when you're in IEEE. 23 00:01:39,950 --> 00:01:45,680 So the UI for configuring group policy preferences is almost identical to the browser that you see the 24 00:01:45,680 --> 00:01:48,230 option that you see in the browser when you configure it. 25 00:01:49,100 --> 00:01:54,110 Now, each option that you see that's underlined for colored has and is individually sellable. 26 00:01:55,010 --> 00:02:00,080 So you could click that delete browser history on exit and that will set that option within the group 27 00:02:00,080 --> 00:02:01,310 policy preferences. 28 00:02:02,210 --> 00:02:08,030 So there's obviously ways to tell it which settings you want to configure and which you don't read. 29 00:02:08,060 --> 00:02:13,010 The dotted red line that you see under the homepage that indicates that the setting is disabled. 30 00:02:13,910 --> 00:02:19,220 That means that group policy preferences won't configure this on the client when the user processes 31 00:02:19,220 --> 00:02:20,090 this policy. 32 00:02:20,990 --> 00:02:26,420 Now if it's green, like the delete browsing history on exit option, well that means that it will configure 33 00:02:26,420 --> 00:02:27,320 it that it's enabled. 34 00:02:28,240 --> 00:02:33,790 And you can actually control these green or red toggles either on preceding basis or on an entire tab, 35 00:02:33,790 --> 00:02:35,410 as you see it here in the UI. 36 00:02:36,280 --> 00:02:39,730 So Microsoft has made these kind of secret hotkeys available. 37 00:02:39,780 --> 00:02:42,760 F5, f6, f7 and f8. 38 00:02:43,640 --> 00:02:49,070 And they can be used to configure or turn off or on or disable or enable each of these options. 39 00:02:49,950 --> 00:02:57,690 And these these hotkeys, these f f keys are actually universal to all group policy preferences, not 40 00:02:57,690 --> 00:02:59,640 just the internet settings area. 41 00:03:00,570 --> 00:03:07,140 This works across all the different areas, so you can either enable all or disable all, or enable 42 00:03:07,140 --> 00:03:12,990 or disable specific ones, or this particular page or a particular setting using these hotkeys, these 43 00:03:12,990 --> 00:03:13,680 f keys. 44 00:03:14,610 --> 00:03:17,400 So it's really kind of a powerful capability. 45 00:03:18,280 --> 00:03:23,290 The thing to keep in mind here is, let's say, for example, you put a home page entry in and left 46 00:03:23,290 --> 00:03:24,970 the line as a red underline. 47 00:03:25,810 --> 00:03:31,510 Well, it's simply going to be ignored by the user that processes this policy because it's set to essentially 48 00:03:31,510 --> 00:03:32,080 disable. 49 00:03:32,950 --> 00:03:40,630 So some of the common things that you can do with preferences, you can set the home page, you can 50 00:03:40,630 --> 00:03:42,640 set security levels for zones. 51 00:03:43,570 --> 00:03:50,680 So Internet zone, intranet zone, trusted sites, zone or local zone, you can set the security levels 52 00:03:50,680 --> 00:03:54,790 that the browser configures for each of those zones using preferences. 53 00:03:55,720 --> 00:04:00,730 Now, you can't do what's called site to zone assignments, which means you can't add particular domain 54 00:04:00,730 --> 00:04:03,370 names that should be placed into particular zones. 55 00:04:04,300 --> 00:04:10,990 So you can't say that, for example, w ww dot microsoft.com should always be put in the trusted site 56 00:04:11,000 --> 00:04:13,510 zone and therefore have a different level of security. 57 00:04:14,420 --> 00:04:18,950 You can do that admin templates, but it's not supported with TP preferences. 58 00:04:19,880 --> 00:04:24,920 You can do things like controlling the pop up blockers behavior and the sites that get exceptions to 59 00:04:24,920 --> 00:04:26,000 the pop up blockers. 60 00:04:26,900 --> 00:04:31,790 So you can add a web domain that does not respect the pop up blocker if you choose to do so. 61 00:04:32,660 --> 00:04:37,400 And you can control which versions of SSL and TLC are supported in the browser. 62 00:04:37,490 --> 00:04:40,250 So you can configure that through preferences. 63 00:04:41,150 --> 00:04:44,780 And most importantly, you can set proxy configuration. 64 00:04:45,680 --> 00:04:51,080 So you can set which the address of the proxy server for the browser or any other options related to 65 00:04:51,080 --> 00:04:56,000 proxy exceptions to the proxy and port specific proxy configurations if needed. 66 00:04:56,900 --> 00:04:59,870 You can control i.e. history and cache behavior. 67 00:05:00,770 --> 00:05:06,020 So how long history is kept or it's kept whether the cache is cleared on browser exit. 68 00:05:06,950 --> 00:05:10,730 Those kind of options are all configurable in preferences.