Forum Discussion
Internet Properties (AKA Internet Options) settings apply not only to Internet Explorer
I hope this helps in answering your questions... Internet Options is a control panel in Windows that allows users to customize their web browsing experience. In Windows 11, Internet Explorer is still available but it's not the default browser anymore; instead, Microsoft Edge is the "Microsoft" recommended browser. However, Internet Options is still available in Windows 11, and some software connections can be influenced by its settings.
Here are answers to your questions:
1. How to determine which software connections are influenced by IO's settings, including its browsing story/temporary files?
Internet Options settings can affect various software connections, but it's difficult to determine which connections are impacted as it depends on the specific software and the settings that have been configured. However, in general, the settings can affect web browsing, downloading files, and accessing certain types of content on the internet. Additionally, the settings can also affect the temporary files and browsing history stored on the computer.
2. Will IO's settings be moved to another menu (e.g. "Settings")? Since some software is affected by IO's settings, shouldn't it be placed in a more convenient place?
In Windows 11, Internet Options is still available in the same location as it was in earlier versions of Windows. It's unlikely that the settings will be moved to another menu, but it's possible that some of the settings may be moved to a more convenient location in the future. However, for now, if you need to access the Internet Options settings, you can do so by opening Internet Explorer and clicking on the "Settings" gear icon in the top-right corner of the window.
3. Would poor IO configuration pose a security risk?
Yes, a poor configuration of Internet Options settings can pose a security risk. For example, if you don't configure the security settings correctly, you may be vulnerable to malware, phishing attacks, and other security threats. Additionally, if you don't clear your browsing history and temporary files regularly, it may be possible for others to access your personal information.
4. Why was "Enhanced Protection Mode" removed from IO?
In Windows 11, Internet Explorer has been updated to version 11, and Enhanced Protection Mode has been removed. This is because Enhanced Protection Mode was introduced in Internet Explorer 10 to provide additional security protections against certain types of attacks, but these protections are no longer necessary in Internet Explorer 11 as it includes modern security features like SmartScreen and AppContainer.
5. Are IOs settings found elsewhere?
Internet Options settings are only available in Internet Explorer. However, if you're using Microsoft Edge as your default browser, you can access similar settings in the Edge settings menu. To access these settings, open Microsoft Edge, click on the three-dot menu in the top-right corner of the window, and select "Settings". From there, you can access various settings related to your browsing experience.
Greetings!
Thanks for answering my questions.
I did some additional research and found the following information.
At least in theory, both "protected mode" and "enhanced protected mode" are still available and can be enabled by the user.
For protected mode, see:
1- https://learn.microsoft.com/en-us/dynamics365/unified-service-desk/admin/internet-explorer-settings-bpa?view=dynamics-usd-4.2
2- https://learn.microsoft.com/en-us/answers/questions/979690/(edge)-turn-off-protected-mode-in-internet-explore
Basically, using the registry editor, go to HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\[zone number]\2500, where "zone number" is a number ranging from 0 to 4.
Then, set the file "2500" to "0" (enabled) or "3" (disabled). If it isn't present, create it with New > DWORD (32-bit) Value.
For enhanced protected mode, refer to:
1- https://learn.microsoft.com/en-us/dynamics365/unified-service-desk/admin/internet-explorer-settings-bpa?view=dynamics-usd-4.2
2- https://learn.microsoft.com/en-us/windows/client-management/mdm/policy-csp-internetexplorer
3- https://learn.microsoft.com/en-us/internet-explorer/ie11-deploy-guide/enhanced-protected-mode-problems-with-ie11
4- https://learn.microsoft.com/en-us/internet-explorer/ie11-deploy-guide/group-policy-objects-and-ie11
It can be enabled in Local Group Policy Editor > Administrative Templates > Windows Components > Internet Explorer > Internet Control Panel > Advanced Page > enable "Turn on enhanced protected mode".
As an alternative, using the registry editor, go to HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Main and change the key "isolation" to "PMEM" (enabled) or "PMIL" (disabled).
For 64-bit tab processes:
1- https://learn.microsoft.com/en-us/windows/client-management/mdm/policy-csp-internetexplorer
To keep it short: Local Group Policy Editor > Administrative Templates > Windows Components > Internet Explorer > Internet Control Panel > Advanced Page > enable "Turn on 64-bit tab processes when running in Enhanced Protected Mode on 64-bit versions of Windows".
Location in the registry: HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Main, file "isolation64Bit".
Please note that HKEY_CURRENT_USER could probably be replaced, e.g., by HKEY_LOCAL_MACHINE.
S
o, my point is: the official documentation is lacking and even Microsoft seems to overlook the fact that those settings are used by other programs/processes, which could pose a security risk.
As an example, I haven't been able to find anything official regarding "Sending_Security" and "Viewing_Security" under HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Security. Needless to say, it seems to be related to security settings.
I will try to find more information about it.
- I found a solution.
Go to registry editor and find:
Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings
Then find these to keys and change the value from 1 to 0:
Security_options_edit
Security_zones_map_edit- Hey there! Thanks for your contribution. But I am not sure if I follow: what solution are you talking about, exactly?
Thiago27 Well, between Mark and Diamedca they pretty much told us nothing.
Mark hit the nail about as close as Microsoft ever does when trying to explain something without quite giving us the answer we actually needed, although I have to admit he came closer and put in more effort than most. eg Does it effect security? M: Of course it does, and it will on some 3rd party software.....but as usual not specific enough to be an actual actionable answer.
I was kind of hoping Diamedca would get back to you, she has the answer to 'something'
She should go on Jeopardy, see who can question the answer
Explanation for security zones below, they are hiding the link ,
