We have an application that has to run on IE8 so it has been requested thatI block IE8 from accessing anything outside of 10.0.0.0/8. In order to detect the devices that are running this version of IE my thought was to use location awareness. Now for the most part we just use the default location but for our test group I've gone and added a second location called IE8 Restrictions to apply the firewall rule. Default is still the default and I've added no rules whereas for the IE8 Restrictions location I've set it to match on the Version string of HKLM\Software\Microsoft\Internet Explorer which has the string Version with the value for that version as below.
However the test machine is not changing location but remains in the default location. Remember last location is enabled. Not sure if I should be adding \Version on the key name (looks like it would look further down in the registry tree) or if I need to add criteria to Default to NOT match the Version 8 string.