Article ID: 316116 - Last Review: January 31, 2007 - Revision: 6.9

You cannot manage Internet Explorer 6 Group Policy settings on a Windows 2000-based computer

This article was previously published under Q316116
Expand all | Collapse all

SYMPTOMS

You cannot manage Internet Explorer 6 settings for Microsoft Windows 2000-based computers by using Active Directory Users and Computers, Active Directory Sites and Services, or the stand-alone Group Policy snap-in in Microsoft Management Console (MMC) on a Windows 2000-based computer that has Internet Explorer 6 or Internet Explorer 6 Service Pack 1 (SP1) installed. For example, you may experience any of the following symptoms when you use the stand-alone Group Policy snap-in:
  • The Disable the Privacy page policy setting is missing from the Group Policy object name\User Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel folder in the console tree.
  • The Privacy settings (that are used to configure Internet Explorer cookie handling) that you specify when you click Modify Settings in the Security Zones and Content Ratings dialog box (in the Group Policy object name\User Configuration\Windows Settings\Internet Explorer Maintenance\Security folder in the console tree) are not applied to the selected Group Policy object (GPO).
  • When you are in Preference Mode for Internet Explorer Maintenance, the Don't show HTML Content in the Media Bar setting is missing from the Internet Settings Properties dialog box (in the Group Policy object name\User Configuration\Windows Settings\Internet Explorer Maintenance\Advanced folder in the console tree).
Note These Internet Explorer 6 policy settings are available on a Microsoft Windows XP-based or Windows Server 2003-based computer.

CAUSE

Internet Explorer 6 policy settings are implemented in the Ieakeng.dll, Ieaksie.dll, Ieakui.dll, Inetres.adm, and Inetset.adm files. Internet Explorer 6 Setup does not update these dynamic-link library (DLL) files or the administrative templates (the .adm files). Internet Explorer 6 SP1 Setup updates the .dll files but does not update the .adm files.

WORKAROUND

To work around this problem and manage Internet Explorer 6 settings for Windows 2000-based computers by using Active Directory Users and Computers, Active Directory Sites and Services, or the stand-alone Group Policy snap-in on a Microsoft Window 2000-based computer that has Internet Explorer 6 or Internet Explorer 6 Service Pack 1 (SP1) installed, follow these steps:
  1. Install Internet Explorer 6 SP1.

    For additional information about how to obtain the latest Internet Explorer 6 service pack, click the following article number to view the article in the Microsoft Knowledge Base:
    328548  (http://support.microsoft.com/kb/328548/ ) How to obtain the latest service pack for Internet Explorer 6
  2. Contact Microsoft Product Support Services (PSS) to obtain the Q316116.exe hotfix. For information about how to contact Microsoft PSS, visit the following Microsoft Web site:
    http://support.microsoft.com/default.aspx?scid=fh;EN-US;CNTACTMS (http://support.microsoft.com/default.aspx?scid=fh;en-us;cntactms)
    This hotfix package replaces the Inetres.adm file in the %SystemRoot%\Inf folder with the Inetres.adm file from the Q316116.exe hotfix package.

    Notes
    • The English version of the Internet Explorer 6 SP1 hotfix (Q316116.exe) should have the following file attributes or later:
         Date         Time   Size     File name
         ----------------------------------------
         06-Jun-2002  22:36  247,026  Inetres.adm
    • The English version of the Internet Explorer 6 hotfix (Q316116.exe) should have the following file attributes or later:
         Date         Time   Version         Size     File name
         --------------------------------------------------------
         17-Aug-2001  22:43  6.00.2600.0000  221,184  Ieakui.dll
         15-Mar-2002  14:01  6.00.2600.0000  203,776  Ieaksie.dll
         15-Mar-2002  14:01  6.00.2600.0000  126,976  Ieakeng.dll
         23-Jan-2002  10:18                  247,026  Inetres.adm
      				
      If this hotfix was installed before you upgraded to Internet Explorer 6 SP1, you already have the updated Inetres.adm file and can skip Step 2.
    • If you have to configure advanced settings for Internet Explorer in Preference Mode, use a Windows XP-based or a Windows Server 2003-based computer. These settings are contained in the Inetset.adm file on a Windows XP-based or Windows Server 2003-based computer.
  3. Contact Microsoft PSS to obtain the hotfix that is described in the following Microsoft Knowledge Base article:
    325666  (http://support.microsoft.com/kb/325666/ ) Access violation error message in Mmc.exe after you apply Internet Explorer Privacy Update from Q316116 or after you apply Internet Explorer 6 Service Pack 1
  4. Add the Inetres.adm administrative template to your Group Policy Editor. For example, to add the Inetres.adm template to the local Group Policy (Gpedit.msc), follow these steps:
    1. In Group Policy Editor, right-click Administrative Templates, and then click Add/Remove Templates.
    2. Click Add, click the %SystemRoot%\Inf\Inetres.adm file that you replaced in step 2, and then click Open.
    3. Click Yes to confirm that you want to replace the existing file, and then click Close.
  5. If you have to import advanced privacy settings and per-site privacy actions into Group Policy, contact Microsoft PSS to obtain the hotfix that is described in the following Microsoft Knowledge Base article:
    323061  (http://support.microsoft.com/kb/323061/ ) Advanced privacy settings and per-site privacy actions are not imported by the IEAK

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

MORE INFORMATION

After you follow the steps in the Workaround section, the following changes are made in the user configuration and in the Windows Settings folder in the console tree when you use Active Directory Users and Computers, Active Directory Sites and Services, or the stand-alone Group Policy snap-in:
  • Three user interface settings are listed in the Browser User Interface policy (instead of four) because the Animated Bitmaps settings dialog box is consolidated into the Custom Logo settings dialog box.
  • The Channels item is no longer listed in the URLs policy because channels are not a feature of Internet Explorer 6.
  • When you click Modify Settings on the Security Zones and Content Ratingsdialog box in the Security policy, the Privacy tab settings are correctly applied to the selected GPO.
The following changes occur in the Internet Explorer policy that you can access by expanding Administrative Templates and Windows Components in the same Group Policy snap-in:
  • In the Browser Menus policy, the item to remove the Tour command from the Help menu is removed. The tour is not a feature of Internet Explorer 6.
  • The Internet Control Panel policy has seven items instead of six because of the new option to disable the Privacy page.
  • The Internet Explorer policy has two additional policy settings:
    • Configure Outlook Express
    • Configure Media Explorer Bar

APPLIES TO
  • Microsoft Internet Explorer 6.0 Service Pack 1, when used with:
    • Microsoft Windows 2000 Standard Edition
  • Microsoft Internet Explorer 6.0, when used with:
    • Microsoft Windows 2000 Standard Edition
Keywords: 
kbhotfixserver kbqfe kbbug kbfix kbie600presp1fix kbshell kbwinxpsp1fix kbie600sp1fix KB316116