Internet Explorer 9(IE9) Group Policy Preferences (GPP)

New Update: Hotfix was just released to resolve this issue.


Some customers reported GPP is not applying IE9, prior to Upgrading the browser to IE9.0 it was working OK with IE 8.0.

Enabled Logging for Group Policy Preferences and found the below:
Non-Working Scenario :
2011-03-29 09:56:37.131 [pid=0x3a0,tid=0xb18] {683F7AD7-E782-4232-8A6D-F22431F12DB5}
2011-03-29 09:56:37.147 [pid=0x3a0,tid=0xb18] Starting class <IE8> - Internet Explorer 8.
2011-03-29 09:56:37.147 [pid=0x3a0,tid=0xb18] Starting filter [AND FilterFile].
2011-03-29 09:56:37.147 [pid=0x3a0,tid=0xb18] Adding child elements to RSOP.
2011-03-29 09:56:37.147 [pid=0x3a0,tid=0xb18] Set user security context.
2011-03-29 09:56:37.147 [pid=0x3a0,tid=0xb18] C:\Program Files\Internet Explorer\iexplore.exe
2011-03-29 09:56:37.147 [pid=0x3a0,tid=0xb18] apmGetFileVersionEx
2011-03-29 09:56:37.147 [pid=0x3a0,tid=0xb18] apmCompareVersionTokens [SUCCEEDED(S_FALSE)]
2011-03-29 09:56:37.147 [pid=0x3a0,tid=0xb18] Set system security context.
2011-03-29 09:56:37.147 [pid=0x3a0,tid=0xb18] Failed hidden filter [FilterFile].
2011-03-29 09:56:37.163 [pid=0x3a0,tid=0xb18] Filters not passed.
2011-03-29 09:56:37.163 [pid=0x3a0,tid=0xb18] Completed class <IE8> - Internet Explorer 8.
2011-03-29 09:56:37.163 [pid=0x3a0,tid=0xb18] Completed class <InternetSettings>.

When you try to edit a GPP Policy on the Domain Controller you only see an option for IE 5 / 6 / 7 and 8. 


Windows Server 2008 R2 GPP Internet Explorer preference items does not support IE 9.  The problem is clear in the debug log as the filter did not pass.  The problem is viewable from the XML file

The released version of Internet Explorer 9 is not

The trick is editing the xml and set "max Version=", anyway, it is not supported.

More information:





Comments (14)

  1. danma_ says:

    You can do the trick that editing the xml and set "max Version=", anyway, it is not officially supported.

  2. Anonymous says:

    What can we do for use this function -GPP+IE9 Settings-?

    Will GPP be eventually updated for IE9?

  3. Anonymous says:


    Do you know approximate date for the "fix"?

    Thank you very much!

  4. Stephanie34 says:

    Thanks so much for the great information. I always love to read more about social media and marketing.

    I have my own site. I hope to offer tips as well. Thank you.

  5. Daniel says:

    All the fuss from Microsoft back in 2009 about how great Group Policy Preferences are, and they neglect to support their latest browser less than 2 years later. Pretty poor form, Microsoft.

  6. Martin says:

    Daniel is 100% right.

  7. Baldeep says:

    Most is supported via group policy settings which apply to most versions. The few settings you may with to tweak can be done via a registry tweak. Problem solved.

  8. Shilp says:


    InternetSettings xml is found in c:windowssysvoldomainPolicies..userPreferencesInternetSettings  in windows 2008 R2

    I set max value="" in xml. so that it should reflect IE 10 GPP in internet settings. but nothing works.. still GPP shows up to Internet Explorer 8.

    Can you pls tell me what is the workaround for this..?

  9. William says:

    Thank you for this, especially with your link to the Microsoft hotfix (didn’t work for us and also required a reboot which their KB article stated it would not). We’d already deployed our settings via registry as you suggest but your post solidifies our
    extreme frustration with Microsoft’s new path in ignoring its supporters. The same thing that happened to Blackberry is going to happen to Microsoft.

  10. Me says:

    Same thing here. Applied hotfix and it did require a reboot. The hotfix also did not work. Back to the beginning .

  11. Aliant says:

    Ok Folks – what is the fix for this! Thie IE stuff and managing this properly in an enterprise is a complete pain

  12. ryan says:

    If your domain policy files are for IE 8 or older then you won’t see IE 9. You must update your policy files to get access to all of the newer policy settings. This gives domain admins a chance to control the policies that are applied in their environment.
    It would be bad of Microsoft to just update these files through updates or something without you having a chance to test and validate your policies against the new files and settings.

Skip to main content