Table of contents
TOC
Collapse the table of content
Expand the table of content

Group Policy and compatibility with Internet Explorer 11

LizRoss|Last Updated: 8/3/2016
|
2 Contributors

Internet Explorer 11 has many Group Policy entries that can be configured for keeping your environment managed and safe. This table includes all of our recommendations around security, performance, and compatibility with the previous versions of Internet Explorer, regardless of which Zone the website is in.

ActivityLocationSetting the policy object
Turn on Compatibility View for all intranet zonesAdministrative Templates\Windows Components\Internet Explorer\Compatibility ViewDouble-click Turn on IE Standards Mode for local intranet , and then click Disabled.
Turn on Compatibility View for selected websites, using Group PolicyAdministrative Templates\Windows Components\Internet Explorer\Compatibility ViewDouble-click Use Policy List of Windows Internet Explorer 7 sites , and then click Enabled.Users will be able to add or remove sites manually to their local Compatibility View list, but they won’t be able to remove the sites you specifically added.
Turn on Quirks mode for selected websites, using Group PolicyAdministrative Templates\Windows Components\Internet Explorer\Compatibility ViewDouble-click Use Policy List of Quirks Mode sites, and then click Enabled.
Ensure your users are using the most up-to-date version of Microsoft’s compatibility list.Administrative Templates\Windows Components\Internet Explorer\Compatibility ViewDouble-click Include updated Web site lists from Microsoft, and then click Enabled.
Restrict users from making security zone configuration changes.Administrative Templates\ Windows Components\Internet Explorer\Internet Control PanelDouble-click Disable the Security Page, and then click Enabled.
Control which security zone settings are applied to specific websites.Administrative Templates\ Windows Components\Internet Explorer\Internet Control Panel\Security PageDouble-click Site to Zone Assignment List, click Enabled, and then enter your list of websites and their applicable security zones.
Turn off Data Execution Prevention (DEP).Administrative Templates\ Windows Components\Internet Explorer\Security FeaturesDouble-click Turn off Data Execution Prevention, and then click Enabled.
© 2017 Microsoft