Enterprise Mode: Enable but do not let user disable

I'm in the midst of reconfiguring IE Enterprise mode for a customer. Here's the current state:

  • There is a site list at http://ieem.internal.domain/production.xml
  • The site list is readable by all users and contains the correct current list of sites and rendering modes (maintained by the Site Manager tool)
  • Active Group Policy settings:
  • Computer Configuration > Policies > Administrative Templates > Windows Components > Internet Explorer > Use the Enterprise Mode IE website list: Enabled, Location = http://ieem.internal.domain/production.xml
  • User Configuration > Policies > Administrative Templates > Windows Components > Internet Explorer > Use the Enterprise Mode IE website list: Enabled, Location = http://ieem.internal.domain/production.xml

If I browse to a site in the Site List, Enterprise Mode is not enabled.

If I now set EITHER of these policy settings:

  • Computer Configuration > Policies > Administrative Templates > Windows Components > Internet Explorer > Let users turn on and use Enterprise Mode from the Tools Menu: Enabled; OR
  • User Configuration > Policies > Administrative Templates > Windows Components > Internet Explorer > Let users turn on and use Enterprise Mode from the Tools Menu: Enabled;

the user is still not forced into Enterprise Mode. However, they can turn on Enterprise Mode manually and the site list appears to apply correctly (as long as they turn it on on a page where it's supposed to be on - otherwise they get Enterprise mode enabled for whatever URL they were viewing when they turn EM on in addition to the site list).

We do not want users to be able to change the settings for Enterprise Mode. We only want the site list to apply, consistently, to all users. We cannot find any setting for "Force users to use Enterprise Mode" or similar.

We also do not believe Microsoft would create this without a way to enforce the policy to on - an organisation of 5 users isn't a problem, an organisation of 5000 can't afford the 5000 helpdesk calls to enable this manually.

I therefore believe I am missing something, but I cannot see what. Suggestions and questions wel

August 25th, 2015 12:34am

Just in case it's related to the XML somehow, the current (sanitised) ruleset is here (the clients do record (in the registry) using V5 of the site list):

<rules version="5"> <docMode> <domain docMode="10"> server1.internal.domain <path docMode="10">/workspace/</path> <path docMode="10">/*</path> </domain> </docMode> <emie> <domain exclude="true"> server2.internal.domain <path exclude="false">/AppForIE10</path> </domain> </emie>

</rules>


Free Windows Admin Tool Kit Click here and download it now
August 25th, 2015 3:40am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics