Keep all intranet sites in Internet Explorer
Verified with Windows 11 25H2 — updated on July 30, 2026
Supported on: At least Internet Explorer 11.0
Path in the GPO console
Computer Configuration\Administrative Templates\Windows Components\Internet Explorer User Configuration\Administrative Templates\Windows Components\Internet Explorer Description
Prevents intranet sites from being opened in any browser except Internet Explorer. But note that If the ‘Send all sites not included in the Enterprise Mode Site List to Microsoft Edge’ (‘RestrictIE’) policy isn’t enabled, this policy has no effect. If you enable this policy, all intranet sites are opened in Internet Explorer 11. The only exceptions are sites listed in your Enterprise Mode Site List. If you disable or don’t configure this policy, all intranet sites are automatically opened in Microsoft Edge. We strongly recommend keeping this policy in sync with the ‘Send all intranet sites to Internet Explorer’ (‘SendIntranetToInternetExplorer’) policy. Additionally, it’s best to enable this policy only if your intranet sites have known compatibility problems with Microsoft Edge. Related policies: - Send all intranet sites to Internet Explorer (‘SendIntranetToInternetExplorer’) - Send all sites not included in the Enterprise Mode Site List to Microsoft Edge (‘RestrictIE’) For more info about how to use this policy together with other related policies to create the optimal configuration for your organization, see https://go.microsoft.com/fwlink/?linkid=2094210.
Registry
Software\Policies\Microsoft\Internet Explorer\Main\EnterpriseMode Software\Policies\Microsoft\Internet Explorer\Main\EnterpriseMode Value name: KeepIntranetSitesInInternetExplorer
Enabled: KeepIntranetSitesInInternetExplorer = 1
Disabled: KeepIntranetSitesInInternetExplorer = 0
MDM / Intune (CSP)
./Device/Vendor/MSFT/Policy/Config/InternetExplorer/KeepIntranetSitesInInternetExplorer ./User/Vendor/MSFT/Policy/Config/InternetExplorer/KeepIntranetSitesInInternetExplorer Microsoft Learn documentation Mapping data: Microsoft Learn (CC BY 4.0)
Export Builder
BETAConfigure the state, scope and options, then generate .reg, PowerShell, Intune and SCCM outputs — or add the setting to a multi-setting collection.
These exports write the registry — this is not a managed GPO. ⓘ
Applying both scopes creates an ambiguous configuration (computer takes precedence over user). Only do this intentionally.
.reg file
Windows Registry Editor Version 5.00
; Exported from gporais.com
; Policy: Keep all intranet sites in Internet Explorer
; State: Enabled
; Scope: Computer (HKLM)
; Supported on: At least Internet Explorer 11.0
[HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\EnterpriseMode]
"KeepIntranetSitesInInternetExplorer"=dword:00000001More formats (PowerShell, Intune, SCCM)
PowerShell
# Exported from gporais.com
# Policy: Keep all intranet sites in Internet Explorer
# State: Enabled
# Scope: Computer (HKLM)
# Supported on: At least Internet Explorer 11.0
$path = 'HKLM:\Software\Policies\Microsoft\Internet Explorer\Main\EnterpriseMode'
New-Item -Path $path -Force | Out-Null
Set-ItemProperty -Path $path -Name 'KeepIntranetSitesInInternetExplorer' -Value 1 -Type DWordIntune XML
OMA-URI: ./Device/Vendor/MSFT/Policy/Config/InternetExplorer/KeepIntranetSitesInInternetExplorer
Data type: String
Value:
<enabled/>Intune Remediation
# === Detection script ===
# Exported from gporais.com
# Policy: Keep all intranet sites in Internet Explorer
# State: Enabled
# Scope: Computer (HKLM)
# Supported on: At least Internet Explorer 11.0
function Test-RegistryValue {
param(
[Parameter(Mandatory = $true)][string]$Path,
[Parameter(Mandatory = $true)][string]$Name,
[object]$Expected,
[ValidateSet('String', 'DWord', 'MultiString')][string]$Kind = 'String',
[switch]$Absent
)
try {
$item = Get-ItemProperty -LiteralPath $Path -Name $Name -ErrorAction Stop
} catch {
return $Absent.IsPresent
}
if ($Absent.IsPresent) { return $false }
$actual = $item.$Name
if ($Kind -eq 'DWord') { return ([int64]$actual) -eq ([int64]$Expected) }
if ($Kind -eq 'MultiString') {
$actualValues = @($actual)
$expectedValues = @($Expected)
if ($actualValues.Count -ne $expectedValues.Count) { return $false }
for ($i = 0; $i -lt $expectedValues.Count; $i++) {
if ([string]$actualValues[$i] -ne [string]$expectedValues[$i]) { return $false }
}
return $true
}
return [string]$actual -eq [string]$Expected
}
$checks = @(
(Test-RegistryValue -Path 'HKLM:\Software\Policies\Microsoft\Internet Explorer\Main\EnterpriseMode' -Name 'KeepIntranetSitesInInternetExplorer' -Expected 1 -Kind DWord)
)
if ($checks -notcontains $false) {
Write-Output 'Compliant'
exit 0
}
Write-Output 'Non-compliant'
exit 1
# === Remediation script ===
# Exported from gporais.com
# Policy: Keep all intranet sites in Internet Explorer
# State: Enabled
# Scope: Computer (HKLM)
# Supported on: At least Internet Explorer 11.0
$path = 'HKLM:\Software\Policies\Microsoft\Internet Explorer\Main\EnterpriseMode'
New-Item -Path $path -Force | Out-Null
Set-ItemProperty -Path $path -Name 'KeepIntranetSitesInInternetExplorer' -Value 1 -Type DWordSCCM scripts
# Exported from gporais.com
# Policy: Keep all intranet sites in Internet Explorer
# State: Enabled
# Scope: Computer (HKLM)
# Supported on: At least Internet Explorer 11.0
# SCCM Configuration Item guidance:
# Create a Configuration Item of type "Setting: Script".
# Discovery script: use the Detection script below.
# Remediation script: use the Remediation script below.
# Compliance rule: the Discovery script output equals 'Compliant'.
# === Detection script ===
# Exported from gporais.com
# Policy: Keep all intranet sites in Internet Explorer
# State: Enabled
# Scope: Computer (HKLM)
# Supported on: At least Internet Explorer 11.0
function Test-RegistryValue {
param(
[Parameter(Mandatory = $true)][string]$Path,
[Parameter(Mandatory = $true)][string]$Name,
[object]$Expected,
[ValidateSet('String', 'DWord', 'MultiString')][string]$Kind = 'String',
[switch]$Absent
)
try {
$item = Get-ItemProperty -LiteralPath $Path -Name $Name -ErrorAction Stop
} catch {
return $Absent.IsPresent
}
if ($Absent.IsPresent) { return $false }
$actual = $item.$Name
if ($Kind -eq 'DWord') { return ([int64]$actual) -eq ([int64]$Expected) }
if ($Kind -eq 'MultiString') {
$actualValues = @($actual)
$expectedValues = @($Expected)
if ($actualValues.Count -ne $expectedValues.Count) { return $false }
for ($i = 0; $i -lt $expectedValues.Count; $i++) {
if ([string]$actualValues[$i] -ne [string]$expectedValues[$i]) { return $false }
}
return $true
}
return [string]$actual -eq [string]$Expected
}
$checks = @(
(Test-RegistryValue -Path 'HKLM:\Software\Policies\Microsoft\Internet Explorer\Main\EnterpriseMode' -Name 'KeepIntranetSitesInInternetExplorer' -Expected 1 -Kind DWord)
)
if ($checks -notcontains $false) {
Write-Output 'Compliant'
exit 0
}
Write-Output 'Non-compliant'
exit 1
# === Remediation script ===
# Exported from gporais.com
# Policy: Keep all intranet sites in Internet Explorer
# State: Enabled
# Scope: Computer (HKLM)
# Supported on: At least Internet Explorer 11.0
$path = 'HKLM:\Software\Policies\Microsoft\Internet Explorer\Main\EnterpriseMode'
New-Item -Path $path -Force | Out-Null
Set-ItemProperty -Path $path -Name 'KeepIntranetSitesInInternetExplorer' -Value 1 -Type DWordBuilding a multi-setting collection? Add this setting and generate combined .reg / PowerShell / GPO scripts.