Disable Internet Explorer 7 Run Once using Group policy

 In this post I will discuss how to disable the very annoying feature of Internet Explorer 7: Run Once using group policy.

When Internet Explorer 7 is first launched the following welcome screen is displayed.

Internet Explorer 7 Run Once welcome screen

This is Run Once screen is displayed to invite the user to configure certain settings on Internet Explorer 7. It only takes several mouse clicks to go through Internet Explorer 7 Run Once settings but for most users this far too many! Other users tend to ignore this setting and continue to use Internet Explorer 7. However doing so will not remove the Run Once welcome screen. Every time Internet Explorer 7 is launched the Run Once screen is displayed until you take the route to click on the settings. To make matters worse Internet Explorer 7 Run Once is per user setting meaning each user that logs onto the computer must go through the Run Once settings. Argh! Painfu! Is there a way to disable the Run Once screen? Yes there is…

There is a Local Policy setting to disable the Run Once setting as outlined on from the screenshot below:

Internet Explorer 7 Run Once

To get to the Internet Explorer 7 policy setting click on Start->Run->gpedit.msc

Select “Prevent performance of First Run Customize settings”

The catch here is that this policy must be set for every machine.

Now to how do you disable the Run Once for every user using Group Policy?

Well firstly install then run Group Policy Management Console (gpmc.msc)

To start the Group Policy Management Console click on Start->Run->gpmc.msc

You should get the following:

Group Policy Object Editor template for gpmc.msc

But hey I don’t see the setting to disable Internet Explorer 7 Run Once as displayed from gpedit.msc from the first screenshot.

That’s correct for some reason the  Group Policy Object Editor doesnt have the policy settings to configure Internet Explorer 7 Run Once. Compare the screenshot from the first gpedit before and after installing the Group Policy Management Console. There’s a lot of Internet Explorer configurable settings missing.

To be able to configure and deploy policy for Internet Explorer 7 Run Once you must download the ADM file template for gpmc.msc.

You can download the group policy templates for gpmc.msc from the link below:

Administrative Templates for Internet Explorer 7 for Windows

Once downloaded you can add the template by right clicking on Administrative Templates and selecting Add/Remove Templates..on Group Policy Object Editor

Internet Explorer 7 Run Once Group Policy Template

From here you should be able to configure the Run Once setting and deploy to your users. (After testing of course!)

Please provide comments below if you found this article useful.

Related posts:

  1. Frequently asked Outlook Questions
  2. How resize pictures with Windows XP’s Image Resizer
  3. Quickly find user availability using Outlook Free-Busy to set up an appointment
  4. Windows XP Hard Drive Utility
  5. Alert Win32/Exploit.MSword.SMtag trojan – Nod32

12 Comments

  • 1
    July 31, 2008 - 1:47 pm | Permalink

    Worked great. To make the setting appear I had to download Administrative Templates for Internet Explorer 7 for Windows so “Prevent performance of First Run Customize settings” would appear in the GPO. Thanks for your links as they worked great.

    ALAN AVELLA

  • 2
    August 29, 2008 - 6:34 am | Permalink

    Alan, thanks for the feedback

  • 3
    Jeff
    September 26, 2008 - 11:52 am | Permalink

    For some reason, IE7 is ignoring GPO settings in a domain environment…

  • 4
    Ed
    September 30, 2008 - 3:19 pm | Permalink

    Good, i cant find the gpo to this and only add the inetres.adm template located in C:\Windows\Inf
    (if you have IE7 instaled on you server, if not just download the file in this post or import from another machine that have IE7 instaled.

  • 5
    Raj
    November 26, 2008 - 10:08 am | Permalink

    Thanks for the tip. It works great. We have Terminal servers (Citrix) and when we updated the IE to 7.0 every user was getting the run once. What a pain. Ran the gpedit on each of the Terminal servers and it seems to have taken care of the issue.

  • 6
    Bri-no
    December 2, 2008 - 4:07 pm | Permalink

    I already have the inetres.adm template added into Group Policy but I’m not seeing the option to “Prevent Performance of First Run Customize Settings”. I am on Server 2003 with IE6, but half of my users have IE7 now. Does the server need to have IE7 to see that option?
    I’m looking under User Configuration\Administrative Templates\Windows Components\Internet Explorer. Or is it possible the inetres.adm file is outdated? If so, is that ever updated without erasing the current settings?
    Thanks in advance.

  • 7
    Kabul
    February 12, 2009 - 8:28 am | Permalink

    Thank you very much!!! you are the Man! thanks once again for showing us this trick :)

    / Kabul Khan

  • 8
    February 20, 2009 - 11:04 pm | Permalink

    So many thanks for your help in solving this messy problem. I searched widely on the internet and got some clues. But it was only your time spent giving detailed instructions which was enough to get me all the way.

    However, something else was necessary in my case. Having downloaded the msi and installed and updated the adm file the IE configuration list was still in the original state. What I had to do was to install the admFiles_IE7.msi to another folder on mymachine, and then manually copy the resultingfile over the one in the Windows\inf folder. Then add the template to gpedit.msc again. Kind of weird but… maybe it results from having my server 2003 installed on drive E:\ instead of C:\.
    Thanks again.

  • 9
    Tom Cheng
    April 8, 2009 - 11:57 am | Permalink

    Me too I had to “install the admFiles_IE7.msi to another folder on mymachine, and then manually copy the resultingfile over the one in the Windows\inf folder. Then add the template to gpedit.msc again” like Jim did. Afterward it works fine though.

  • 10
    Matthew Aylard
    May 6, 2010 - 5:35 am | Permalink

    Nice article, thanks. I had to add the ADM file to windows\inf for this to work on the machine that i was editing the policy with, i couldnt just add adm from another location.

  • 11
    Tim
    May 17, 2011 - 10:23 am | Permalink

    Thank you !!!

    Worked pefectly :-)

  • 12
    June 2, 2011 - 12:12 am | Permalink

    Fantastic website, mate! Disable Internet Explorer 7 Run Once using Group policy is really a thing. I’ll be launching acquire shortly and I will surely backup elements of the one you have, lawfully of course :)

  • Leave a Reply

    Your email address will not be published. Required fields are marked *

    *

    You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>