I needed to Create a Web URL Desktop Shortcut that Opens in Internet Explorer IE via Group Policy because a client has an internal Web Application that only works within IE.
Outside of the apparently non-obvious disadvantages of using a shitty browser for all web browsing, I’ve found that GPO’s that dictate your default browser cause more issues than their worth.
I decided to have the shortcut to their web app have a line to dictate which browser will open the URL, in the below example we use Internet Explorer (IE).
How to Create a Web URL Desktop Shortcut that Opens in Internet Explorer IE, Edge Chrome, Firefox or any Web Browser using Group Policy:
- On your domain controller, open up Group Policy
- Create a new GP (best practice is to always have separate GPOs for each item rather than 1 GPO that has multiple setting because its easier to turn off a failing GPO)
- Create a Test OU in Active Directory
- Make a Test User in Active Directory
- Make sure that your test user is within that Test OU (or it will not apply)
- Right-click on your GPO and select edit
- Expand User “Configuration”, “Preferences”, and “Windows Settings”
- Select “Shortcuts”
- Right-click in the empty space and select “New” and “Shortcut”
- For “Action” select “Replace” (so that if you want to delete it later it will remove it from everyone’s desktop)
- In the “Name” Field put an appropriate display name for the Web Application shortcut
- For “Target type” select “File System Object”
- For “Location” select “Desktop”
- In the “Target Path” text box put C:Program Files\Internet Explorer\iexplore.exe or use the browse button to navigate to the location of Internet Explorer (you don’t need quotes for any of these fields)
- In the “Arguments” text box put the URL that you need to open with Internet Explorer
- If you want a dedicated Icon for the shortcut, in the “Icon file path” type the file path of the icon or use the browse button to navigate to the location of the icon (make sure the users have rights to that folder/icon)
- Click on the Common tab and check “Remove this item when it is no longer needed“)
- Click OK and Close all open windows
- Now go to a computer and log in as your test user and you should see the Shortcut with the icon and correct URL
What to do if you do not see the URL Desktop Shortcut after you created the Group Policy:
- Run GPRESULT /R with admin rights from the command line and confirm the GPO is listed
- If the GPO isn’t listed, then that user is not in the right OU in AD or has not been assigned to the GPO
- If the GPO is listed, you will need to confirm your GPO settings
For more IT consulting services, click here.
Looking for a Cybersecurity Consulting Company, check us out