Error 127 when you apply the Internet Explorer Maintenance Group Policy setting to Windows-based computers

View products that this article applies to.

Symptoms

Assume that you configure the Internet Explorer Maintenance Group Policy setting and apply the Group Policy setting to computers that is running Windows 8.1, Windows Server 2012 R2, Windows 8, Windows Server 2012, Windows 7 Service Pack 1 (SP1), or Windows Server 2008 R2 SP1. Internet Explorer 11 or Internet Explorer 10 is installed on the computers. In this situation, the Group Policy setting is not applied, and the following event is logged on the computers:

↑ Back to the top

Cause

This issue occurs because Internet Explorer Maintenance, also known as Internet Explorer Branding, is removed from Internet Explorer 10 and later versions. The Internet Explorer Branding Group Policy client-side extension remains configured in Windows 8.1, Windows Server 2012 R2, Windows 8, Windows Server 2012, Windows 7, and Windows Server 2008 R2. However, the procedure to apply Internet Explorer Branding Policy setting no longer exists. This configuration causes a Group Policy processing error when the computer tries to apply the Internet Explorer Maintenance Group Policy setting.

↑ Back to the top

Resolution

Update information

To resolve this issue, install the most recent cumulative security update for Internet Explorer. To do this, go to Microsoft Update.

For technical information about the most recent cumulative security update for Internet Explorer, go to the following Microsoft website:

http://www.microsoft.com/technet/security/current.aspx

Note This update was first included in security update 2975687.

For more information, click the following article number to view the article in the Microsoft Knowledge Base:

2975687 MS14-037: Cumulative security update for Internet Explorer: July 8, 2014

↑ Back to the top

Workaround

To work around this issue, remove the Internet Explorer Branding Group Policy client-side extension registration from the registry. To do this, follow these steps.

Remove the Internet Explorer Branding Group Policy client-side extension

As a local administrator, run Registry Editor.
Explore to the HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{A2E30F80-D7DE-11d2-BBDE-00C04F86AE3B}.
Right-click ProcessGroupPolicy registry entry, and then click Rename. Rename ProcessGroupPolicy to _ProcessGroupPolicy.
Right-click ProcessGroupPolicyEx registry entry, and then click Rename. Rename ProcessGroupPolicyEx to _ProcessGroupPolicyEx.