DIfference between IEAK and AD for IE changes

[Guest]

Currently we make use of IEAK for customizations to IE. We are running in a
fully native AD Windows 2000 environment. Is there anything that I can't set
with a GPO that would exist in a distribution of IEAK? Primarily I use IEAK
to set trusted sites, set the proxy settings, label the top bar with our
name, and make a few changes in how Active-X and Java things are handled.
I don't mind using the IEAK, but it would be nice to abandon them and go to
AD GPO.
Thanx...

 

[Norbert Fehlauer [MVP]]

Jon Yiesla wrote:
Hi,

anything that I can't set with a GPO that would exist in a
distribution of IEAK?

I have to admit, that it's some time ago I've used the IEAK but afair it
gives you exact the same possibilities as a GPO (more or less ).

Primarily I use IEAK to set trusted sites,
possible.

set the proxy settings,
possible

label the top bar with our name
possible.

, and make a few
changes in how Active-X and Java things are handled.
possible.

I don't mind using the IEAK, but it would be nice to abandon them and
go to AD GPO.

Then go take a look

Bye
Norbert

 

[Gerry Hickman]

Hi,

As you have AD, it will be easier in the long run to use group policy,
although I'm not convinced you have as much control unless you create custom
ADM files. There's also the issue of understanding "preferences" vs
"restrictions".

One thing to look out for, however, that caught me out, is you have to make
sure the two don't conflict. If you try to put group policy on top of an
IEAK build with heavy customization, you can get a lot of subtle problems.
What I did was create a new IE build with close to zero customizations
first, then use GP on top of this. That works well, but some of machines
have the old build of IE and these cause problems because the IEAK settings
kick-in the first time a new user logs on. I'm fixing that now, but it's
something to look out for.