Differences

This shows you the differences between two versions of the page.

--- microsoft:faq_about_internet_explorer_enhanced_security_configuration_esc [2021/07/29 19:21] – aperez
+++ microsoft:faq_about_internet_explorer_enhanced_security_configuration_esc [2021/07/29 19:29] (current) – aperez
@@ Line 3: / Line 3: @@
 **Internet Explorer Enhanced Security Configuration**
-Internet Explorer Enhanced Security Configuration (ESC) establishes security settings that define how users browse the internet and intranet websites. These settings also reduce the exposure of servers to websites that might present a security risk. This process is also known as IEHarden. For more information, see Internet Explorer: .[[https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/dd883248(v=ws.10)|Enhanced Security Configuration]]
+Internet Explorer Enhanced Security Configuration (ESC) establishes security settings that define how users browse the internet and intranet websites. These settings also reduce the exposure of servers to websites that might present a security risk. This process is also known as IEHarden. For more information, see Internet Explorer:[[https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/dd883248(v=ws.10)|Enhanced Security Configuration.]]
 Original product version:   Internet Explorer
@@ Line 40: / Line 40: @@
 {{:microsoft:m5.png?600|}}
-[[https://www.microsoft.com/en-us/videoplayer/embed/RE4omno|The following video demonstrates this procedure]]
+[[https://www.microsoft.com/en-us/videoplayer/embed/RE4omno|The following video demonstrates this procedure.]]
 [[https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/dn789190(v=ws.11)#how-to-assign-user-logon-scripts|For more information, see Manage the Local Server and the Server Manager Console.]]
@@ Line 109: / Line 109: @@
 .  In the navigation pane, right-click the Registry object, and then select New > Registry Item.
-{{:microsoft:m6.png?600|}}
+{{:microsoft:m6.png?300|}}
-In IEHarden Properties, specify the following settings:
+.  In IEHarden Properties, specify the following settings:
-Location: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
+  * Location: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
-Value name: IEHarden
+  * Value name: IEHarden
-Value Type: REG_DWORD
+  * Value Type: REG_DWORD
+  * Value data: 0 or 00000000
+{{:microsoft:m1.jpg?600|}}
+Select **Apply** and **OK** to complete this GPP configuration.
+  Note:
+  You may also want to check the following registry subkeys if this value does not resolve the problem. In most cases, this is not necessary.
+  HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
+  HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
+  HKEY_CURRENT_USER\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
+**Internet Explorer doesn't seem to work after you disable ESC by using Server Manager**
+To troubleshoot this scenario, refer to [[https://docs.microsoft.com/en-us/troubleshoot/browsers/cannot-turn-off-enhanced-security|Standard users can't turn off Internet Explorer Enhanced Security feature on a Windows Server 2003-based terminal server or a later version]]. Basically, you may have to enable or disable ESC again. Targeting the registry may be the easiest way to resolve this problem.
-Value data: 0 or 00000000