1
00:00:03,080 --> 00:00:07,350
So now I just want to illustrate how Windows IEEE Maintenance Policy works.

2
00:00:07,370 --> 00:00:09,740
Some of the concepts that I just talked about.

3
00:00:10,640 --> 00:00:16,070
So let's go in under Internet Explorer Maintenance, and I'm on this Windows seven system that has IEEE

4
00:00:16,070 --> 00:00:16,740
nine on it.

5
00:00:17,660 --> 00:00:21,740
So I can still see IEEE Maintenance Policy in the editor.

6
00:00:22,590 --> 00:00:25,680
And let's say I wanted to go in and make a proxy setting.

7
00:00:26,520 --> 00:00:31,980
You'll note that it throws this message that says Settings you make on this page will import will overwrite

8
00:00:31,980 --> 00:00:34,500
imported settings from the connection settings page.

9
00:00:35,380 --> 00:00:38,470
And I can go in and actually make changes to the proxy.

10
00:00:39,380 --> 00:00:44,060
I can tell it to use the same for all of them, whatever happens to be.

11
00:00:44,090 --> 00:00:45,710
I can just set that on here.

12
00:00:46,580 --> 00:00:48,500
If I go in under connection settings.

13
00:00:48,710 --> 00:00:53,510
This is where I was mentioning earlier that it actually imports the current settings of this machine

14
00:00:53,510 --> 00:00:55,400
that I'm on into the GPO.

15
00:00:56,240 --> 00:01:02,510
So if I come in under LON settings, these are the settings that it's finding on the machine and I can

16
00:01:02,510 --> 00:01:06,350
go ahead and set proxy dot POC file or whatever I want to do.

17
00:01:07,160 --> 00:01:15,080
And these settings are now stored in the GPO, so a lot similar user experience to the preferences area.

18
00:01:16,010 --> 00:01:18,380
I can do things like set the browser title.

19
00:01:19,330 --> 00:01:22,720
So whatever title I want will appear as the browser's window.

20
00:01:23,590 --> 00:01:27,730
So I could say, you know, Internet Explorer from my company dot com.

21
00:01:28,570 --> 00:01:32,900
And that's something that you can do in either preferences or admin templates.

22
00:01:33,820 --> 00:01:36,910
So that's sort of unique to IEEE Maintenance Policy.

23
00:01:37,820 --> 00:01:41,930
I can add favorites to the browser so I can push favorites to the user.

24
00:01:42,800 --> 00:01:46,790
And that's another thing that I can't do with either of those other two areas.

25
00:01:47,720 --> 00:01:50,220
Now, there are other ways to push favorites.

26
00:01:51,140 --> 00:01:56,450
You can use preferences, shortcuts to to send favorites to the to the user's browser.

27
00:01:57,370 --> 00:02:00,620
So that's it's not this is sort of an old school way of doing it.

28
00:02:00,640 --> 00:02:06,820
And the new school way would be to just create new URL shortcuts, essentially using preferences shortcuts.

29
00:02:07,750 --> 00:02:12,940
So even though there are some things in high maintenance policy that perhaps you don't see, obviously

30
00:02:12,940 --> 00:02:17,290
in the other areas, things like favorites, URLs, those sorts of things are doable.

31
00:02:18,210 --> 00:02:21,210
You just have to get a little bit more creative about them.

32
00:02:22,080 --> 00:02:26,730
Now, remember I mentioned that if you want to get rid of the settings in here, you can go ahead and

33
00:02:26,730 --> 00:02:31,200
reset the browser settings and it'll give you this message saying that it'll delete all the browser

34
00:02:31,200 --> 00:02:37,590
settings stored in the GPO and asked me if I want to continue and that once it's done, the the browser

35
00:02:37,590 --> 00:02:42,600
or the GPO will essentially be devoid of all Internet Explorer maintenance policy settings.

36
00:02:43,490 --> 00:02:48,860
And again, you have to sort of manage on the client which of those settings remain behind and which

37
00:02:48,860 --> 00:02:52,070
ones get removed because not all of them will get removed.

38
00:02:52,970 --> 00:02:56,240
Some of them will just get left or tattooed on to the system.

39
00:02:57,140 --> 00:03:01,710
So overall, i.e., maintenance policy really doesn't have anything we can't live without.

40
00:03:01,760 --> 00:03:07,010
And given that Microsoft is deprecating, it now would be a good time to get rid of it from your environment

41
00:03:07,010 --> 00:03:09,890
if you're already using it and don't use it if you're not.

42
00:03:10,790 --> 00:03:17,240
09. Summary So to summarize this module, there are three ways that you can configure Internet Explorer

43
00:03:17,240 --> 00:03:18,410
using group policy.

44
00:03:19,280 --> 00:03:23,840
There's group policy preferences, i.e. maintenance policy and admin templates.

45
00:03:23,840 --> 00:03:26,660
And of course IEEE maintenance has been around the longest.

46
00:03:27,540 --> 00:03:32,970
And it has now been deprecated on any system where IEEE ten is installed, and that includes all Windows

47
00:03:32,970 --> 00:03:39,540
eight systems because they came with Windows with Ie11 and any Windows seven systems that have IEEE

48
00:03:39,540 --> 00:03:41,850
ten or IEEE 11 installed on them.

49
00:03:42,720 --> 00:03:48,210
So what that essentially means is that you can no longer either edit or process IEEE Maintenance Policy

50
00:03:48,210 --> 00:03:49,110
on those systems.

51
00:03:50,010 --> 00:03:53,940
Now, preferences lets you configure most IEEE options.

52
00:03:54,830 --> 00:03:55,140
It.

53
00:03:55,160 --> 00:04:00,440
It does cover a lot of the things that IEEE Maintenance Policy did but does not enforce those settings.

54
00:04:01,370 --> 00:04:06,890
So as as I showed in my demo in this module, you can set the proxy setting, but the user can come

55
00:04:06,890 --> 00:04:09,440
along and change it unless you do something about it.

56
00:04:10,310 --> 00:04:15,680
And that's something is admin templates, which does the sort of lockdown part of IEEE configuration.

57
00:04:16,550 --> 00:04:22,340
It doesn't give you as many options for configuring, i.e. as GP preferences does, but it does enforce

58
00:04:22,340 --> 00:04:23,090
those settings.

59
00:04:24,020 --> 00:04:29,510
So for things like site to zone assignments and for disabling the proxy screen and other things, the

60
00:04:29,510 --> 00:04:31,790
IEEE admin templates can be really helpful.

61
00:04:32,660 --> 00:04:38,090
Now you can use a combination of the two, as I did in my demo, to get the biggest bang for your IEEE

62
00:04:38,090 --> 00:04:43,370
configuration buck and I highly recommend that as your approach because it just allows you to sort of

63
00:04:43,370 --> 00:04:49,490
mix and match the two to do lock down in cases where you need it, or to just simply deliver preferred

64
00:04:49,490 --> 00:04:51,350
settings in cases where you don't.

65
00:04:52,250 --> 00:04:58,250
Now, if you are using IEEE Maintenance Policy, I highly recommend moving towards removing it or replacing

66
00:04:58,250 --> 00:05:00,980
it with a combination of the other two policy areas.

67
00:05:01,860 --> 00:05:07,500
And I did show a couple different ways of removing the settings, either on kicking the GPIO or using

68
00:05:07,500 --> 00:05:10,920
the reset browser's settings option on IEEE Maintenance Policy.

69
00:05:11,790 --> 00:05:17,220
Now, one thing to keep in mind is make sure you keep around a system that can still edit IEEE Maintenance

70
00:05:17,220 --> 00:05:21,870
Policy, because if you don't, then you'll have you'll be hard pressed to be able to actually remove

71
00:05:21,870 --> 00:05:22,020
it.

72
00:05:22,920 --> 00:05:28,410
So it's important to keep at least one system running with IEEE nine on Windows seven, for example,

73
00:05:28,410 --> 00:05:33,480
and that will allow you to continue to edit and potentially reset and remove those IEEE maintenance

74
00:05:33,480 --> 00:05:34,530
policy settings.