Security – Can’t disable Enhanced Security Configuration after upgrading to IE9

internet explorerSecuritywindows-server-2008-r2

I disabled ESC in Server Manager on 2008 R2, originally just for Administrators but have tried to disable it for users and Administrators to try and solve this problem. Despite it being completely disabled I keep getting warnings as though it were still enabled.

You can see here I have it disable in my config and here is an example of the warning that I continually get, despite ESC being apparently disabled.

What changed in IE9 as far as the ESC goes that I can't disable it?

Best Answer

This may be a little bit outdated, but nevertheless, but probably somebody can found this helpful.

Try to set the registry IEHarden REG_DWORD key to 0 in regedit:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\InternetSettings\ZoneMap\IEHarden.

Related Solutions

Security – Our security auditor is an idiot. How to give him the information he wants

First, DON'T capitulate. He is not only an idiot but DANGEROUSLY wrong. In fact, releasing this information would violate the PCI standard (which is what I'm assuming the audit is for since it's a payment processor) along with every other standard out there and just plain common sense. It would also expose your company to all sorts of liabilities.

The next thing I would do is send an email to your boss saying he needs to get corporate counsel involved to determine the legal exposure the company would be facing by proceeding with this action.

This last bit is up to you, but I would contact VISA with this information and get his PCI auditor status pulled.

Windows – Enable Internet Explorer Enhanced Security Configuration via Registry

The IE These are the values I set to make sure the IE Enhanced Security Configuration is disabled on my terminal servers. To enable it, I believe you just need to use a value of 1 instead of 0 for both settings.

Hive HKEY_CURRENT_USER 
Key path Software\Microsoft\Windows\CurrentVersion\Internet Settings 
Value name IEHardenIENoWarn 
Value type REG_DWORD 
Value data 0x0 (0) 


Hive HKEY_CURRENT_USER 
Key path Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap 
Value name IEHarden 
Value type REG_DWORD 
Value data 0x0 (0)

Refs:

Best Answer

Related Solutions

Security – Our security auditor is an idiot. How to give him the information he wants

Windows – Enable Internet Explorer Enhanced Security Configuration via Registry

Related Topic