diff --git a/README.md b/README.md index 729be484ec..bb0cd9ec13 100644 --- a/README.md +++ b/README.md @@ -1,2 +1,2 @@ # win-cpub-itpro-docs -This repo hosts the WDG IT Pro content that is published to TechNet. +This repo hosts the WDG ITPro content that is published to TechNet. diff --git a/browsers/TOC.md b/browsers/TOC.md new file mode 100644 index 0000000000..19efb74227 --- /dev/null +++ b/browsers/TOC.md @@ -0,0 +1,4 @@ +# Table of Contents +## [Edge](edge/) +## [Internet Explorer 11](internet-explorer-11/) + diff --git a/browsers/edge/TOC.md b/browsers/edge/TOC.md new file mode 100644 index 0000000000..7a2b957feb --- /dev/null +++ b/browsers/edge/TOC.md @@ -0,0 +1,6 @@ +#Table of Contents +##[Microsoft Edge - Deployment Guide for IT Pros](microsoft-edge-deployment-guide-for-it-pros.md) +##[Microsoft Edge requirements and language support](hardware-and-software-requirements.md) +##[Available policies for Microsoft Edge](available-policies.md) +##[Use Enterprise Mode to improve compatibility](emie-to-improve-compatibility.md) + diff --git a/browsers/edge/available-policies.md b/browsers/edge/available-policies.md new file mode 100644 index 0000000000..5564afcc19 --- /dev/null +++ b/browsers/edge/available-policies.md @@ -0,0 +1,118 @@ +--- +Description: 'Microsoft Edge works with Group Policy and Microsoft Intune to help you manage your organization''s computer settings.' +ms.assetid: 2E849894-255D-4F68-AE88-C2E4E31FA165 +ms.prod: edge +ms.mktglfcycl: explore +ms.sitesec: library +title: Available policies for Microsoft Edge +--- + +# Available policies for Microsoft Edge + + +**Last updated** + +- January 7, 2015 + +**Applies to:** + +- Windows 10 +- Windows 10 Mobile + +Microsoft Edge works with Group Policy and Microsoft Intune to help you manage your organization's computer settings. Group Policy objects (GPO's) can include registry-based Administrative Template policy settings, security settings, software deployment information, scripts, folder redirection, and preferences. + +By using Group Policy and Intune, you can set up a policy setting once, and then copy that setting onto many computers. For example, you can set up multiple security settings in a GPO that's linked to a domain, and then apply all of those settings to every computer in the domain. +

**Note**
For more info about Group Policy, see the [Group Policy TechCenter](http://go.microsoft.com/fwlink/?LinkId=214514). This site provides links to the latest technical documentation, videos, and downloads for Group Policy. For more info about the tools you can use to change your Group Policy objects, see the Internet Explorer 11 topics, [Group Policy and the Group Policy Management Console (GPMC)](http://go.microsoft.com/fwlink/?LinkId=617921), [Group Policy and the Local Group Policy Editor](http://go.microsoft.com/fwlink/?LinkId=617922), [Group Policy and the Advanced Group Policy Management (AGPM)](http://go.microsoft.com/fwlink/?LinkId=617923), and [Group Policy and Windows Powershell](http://go.microsoft.com/fwlink/?LinkId=617924). + +  + +## Group Policy settings + +Microsoft Edge works with these Group Policy settings (`Computer Configuration\Administrative Templates\Windows Components\Microsoft Edge\`) to help you manage your company's web browser configurations: + +| Policy name | Description | Options | +| -------------------------------------------- | ----------------------------- | ------------------------------------------------------- | +| Allow employees to send Do Not Track headers | Whether employees can send Do Not Track headers to websites that request tracking info. | **Enable:** Employees can send Do Not Track headers to websites requesting tracking info.

**Disable or not configured (default):** Stops employees from sending Do Not Track headers to websites requesting tracking info. | +| Turn off web content in new tab page | Decide what Microsoft Edge shows when opening a new tab. | **Enable or not configured (default):** Employees can see the new tab page with Top Sites, Top Sites with suggested content, or a blank page.

**Disable:** Employees see an empty tab and are unable to change the **Open new tabs with** setting. | +| Configure cookies | Decide how your company deals with cookies. | **Enable or not configured (default):** Lets you decide how your company treats cookies. If you use this option, you must also choose whether to

**Disable:** Allows all cookies from all websites. | +| Configure corporate Home pages | Choose which corporate Home pages should appear for domain-joined devices. | **Enable:** Configure corporate Home pages for domain-joined devices. If you use this option, you must also include site URLs.

**Example**
``````

**Note**
You must use this format and the angle brackets if you have multiple pages.

**Disable or not configured (default):** Uses the corporate Home pages and URLs specified in the App settings. | +| Configure the Enterprise Mode Site List | Whether your company uses Enterprise Mode and the Enterprise Mode Site List to address common compatibility problems with legacy apps. | **Enable:** Lets you use the Enterprise Mode Site List to address common compatibility problems with legacy apps, if it’s configured. If you use this option, you must also add the location to your site list in the **{URI}** box. When configured, any site on the list will always open in IE11.

**Disable or not configured:** You won't be able to use the Enterprise Mode Site List. | +| Configure Favorites | Decide what sites appear on the default **Favorites** list. | **Enable:** Configure the default list of **Favorite** sites for your employees. If you use this option, you must also add the actual names and URLs for the sites.

**Disable or not configured (default):** Uses the **Favorites** list names and URLs specified in the **Favorites** hub. | +| Don’t allow SmartScreen Filter warning overrides | Whether employees can override the SmartScreen Filter warnings about potentially malicious websites. | **Enable:** Stops employees from ignoring the SmartScreen Filter warnings and blocks them from visiting the site.

**Disable or not configured (default):** Lets employees ignore the SmartScreen Filter warnings about potentially malicious sites and continue to the site.

**Note**
You can also turn on the SmartScreen Filter, using the **Turn off the SmartScreen Filter** setting and stop employees from ignoring the SmartScreen Filter warnings about unverified file downloads, using the **Don’t allow SmartScreen Filter warning overrides for unverified files** setting. | +| Don’t allow SmartScreen Filter warning overrides for unverified files | Whether employees can override the SmartScreen Filter warnings about downloading unverified files. | **Enable:** Stops employees from ignoring the SmartScreen Filter warnings and stops them from downloading unverified files.

**Disable or not configured (default):** Lets employees ignore the SmartScreen Filter warnings about unverified files and lets them continue the download process.

**Note**
You can also turn on the SmartScreen Filter, using the **Turn off the SmartScreen Filter** setting and stop employees from ignoring the SmartScreen Filter warnings about potentially dangerous websites, using the **Don’t allow SmartScreen Filter warning overrides** setting. | +| Don't allow WebRTC to share the LocalHost IP address | Whether an employee’s LocalHost IP address shows while using the WebRTC protocol | **Enable:** Hides the LocalHost IP address while using the WebRTC protocol.

**Disable or not configured (default):** Shows the LocalHost IP address while using the WebRTC protocol. | +| Send all intranet sites to IE11 | Whether your intranet sites should all open using IE11.

**Important:** This setting should only be used if there are known compatibility problems with Microsoft Edge. | **Enable:** Automatically opens all intranet sites using IE11.

**Disable or not configured (default):** Automatically opens all intranet sites using Microsoft Edge. | +| Turn off **Address** bar search suggestions | Whether search suggestions should appear in the **Address** bar of Microsoft Edge. | **Enable or not configured (default):** Employees can see search suggestions in the **Address** bar of Microsoft Edge.

**Disable:** Employees can’t see search suggestions in the **Address** bar of Microsoft Edge. | +| Turn off Autofill | Whether employees can use Autofill to automatically fill in form fields while using Microsoft Edge. | **Enable or not configured (default):** Employees can use Autofill to complete form fields.

**Disable:** Employees can’t use Autofill to complete form fields. | +| Turn off Developer Tools | Whether the F12 Developer Tools are available on Microsoft Edge. | **Enable or not configured (default):** Shows the F12 Developer Tools on Microsoft Edge.

**Disable:** Hides the F12 Developer Tools on Microsoft Edge. | +| Turn off InPrivate browsing | Whether employees can browse using InPrivate website browsing. | **Enable or not configured (default):** Lets employees use InPrivate browsing while on the corporate network.

**Disable:** Stops employees from using inPrivate browsing on the corporate network. | +| Turn off Password Manager | Whether employees can save their passwords locally, using Password Manager. | **Enable or not configured (default):** Employees can use Password Manager to save passwords locally.

**Disable:** Employees can't use Password Manager to save passwords locally. | +| Turn off Pop-up Blocker | Whether to turn on Pop-up Blocker and allow pop-ups to appear in secondary windows. | **Enable or not configured (default):** Turns on Pop-up Blocker, stopping pop-up windows.

**Disable:** Turns off Pop-up Blocker, allowing pop-up windows. | +|Turn off the SmartScreen Filter | Whether to turn on SmartScreen Filter to help protect your employees from potential phishing scams and malicious software. | **Enable or not configured (default):** Turns on SmartScreen Filter, providing warning messages to your employees about potential phishing scams and malicious software.

**Disable:** Turns off SmartScreen Filter.

**Note**
You can also stop employees from ignoring the SmartScreen Filter warnings about potentially dangerous websites, using the **Don’t allow SmartScreen Filter warning overrides** setting and stop employees from ignoring the SmartScreen Filter warnings about unverified file downloads, using the **Don’t allow SmartScreen Filter warning overrides for unverified files** setting. | + +  + +## Using Microsoft Intune to manage your Mobile Data Management (MDM) settings for Microsoft Edge + + +If you manage your policies using Intune, you'll want to use these MDM policy settings. You can see the full list of available policies, on the [Policy CSP]( http://go.microsoft.com/fwlink/?LinkId=722885) page. + +

**Note**
The **Supports** column uses these options: + +- **Desktop.** Supports Windows 10 Pro and Windows 10 Enterprise computers that are enrolled with Intune only. + +- **Mobile.** Supports Windows 10 Mobile devices only. + +- **Both.** Supports both desktop and mobile devices. + +All devices must be enrolled with Intune if you want to use the Windows Custom URI Policy. + +| Policy name | Supports | Details | +| -------------------------------------------- | --------------------| ------------------------------------------------------- | +| AllowAutofill | Desktop |

| +| AllowBrowser | Mobile | | +| AllowCookies | Both | | +| AllowDeveloperTools | Desktop | | +| AllowDoNotTrack | Both | | +| AllowPasswordManager | Both | +| AllowPopups | Desktop | | +| AllowSearchSuggestionsinAddressBar | Both | | +| AllowSmartScreen | Both | | +| EnterpriseModeSiteList | Desktop | | +| Favorites | Both | | +| FirstRunURL | Mobile | | +| HomePages | Desktop | | +| PreventSmartScreenPromptOverride | Both | | +| PreventSmartScreenPromptOverrideForFiles | Both | | +| PreventUsingLocalHostIPAddressforWebRTC | Desktop | | + + +## Microsoft Edge and Windows 10-specific Group Policy and MDM settings + +These are additional Windows 10-specific settings that work with Microsoft Edge. + +| Group Policy setting | Description | Options | +| --------------------------------------- | ----------------------------------------- | ------------------------------------------------------- | +| Computer Configuration\Administrative Templates\Windows Components\Search\Allow Cortana | Whether employees can use Cortana. | **Enable or not configured:** Employees can use Cortana on their devices.

**Disable:** Stops employees from using Cortana on their devices.

**Note** Employees can still perform searches even with Cortana turned off. | +| Computer Configuration\Administrative Templates\Windows Components\sync your settings\Do not sync | Whether employees can use the **Sync your Settings** options to sync their settings to and from their device. | **Enable:** Turns off the **Sync your Settings** options and none of the **Sync your Setting** groups are synced on the device. You can use the **Allow users to turn syncing on** option to turn the feature off by default, but to let the employee change this setting.

**Disable or not configured (default):** Turns on the **Sync your Settings** area by default, letting employees pick what can sync on their device. | +| Computer Configuration\Administrative Templates\Windows Components\sync your settings\Do not sync browser settings | Whether a browser group can use the **Sync your Settings** options to sync their info to and from their device. This includes settings and info like **History** and **Favorites**. | **Enable:** Turns off the **Sync your Settings** options so that browser groups are unable to sync their settings and info. You can use the **Allow users to turn browser syncing on** option to turn the feature off by default, but to let the employee change this setting.

**Disable or not configured (default):** Turns on the **Sync your Settings** area by default, letting browser groups pick what can sync on their device. | + +## Additional Windows 10-specific MDM policy settings +These are additional Windows 10-specific MDM policy settings that work with Microsoft Edge. + +| MDM Policy name | Supports | Details | +| ---------------------------------------| ------------------- | ------------------------------------------------------------------------------ | +| AllowCortana | Both |

| +| AllowSyncMySettings | Desktop | | + +## Related topics +* [Group Policy TechCenter](http://go.microsoft.com/fwlink/?LinkId=214514) +* [Mobile Data Management (MDM) settings]( http://go.microsoft.com/fwlink/?LinkId=722885) +  + +  + +  + + + diff --git a/browsers/edge/emie-to-improve-compatibility.md b/browsers/edge/emie-to-improve-compatibility.md new file mode 100644 index 0000000000..92498c684e --- /dev/null +++ b/browsers/edge/emie-to-improve-compatibility.md @@ -0,0 +1,98 @@ +--- +Description: If you have specific web sites and apps that you know have compatibility problems with Microsoft Edge, you can use the Enterprise Mode site list so that the web sites will automatically open using Internet Explorer 11. +ms.assetid: 89C75F7E-35CA-4CA8-96FA-B3B498B53BE4 +ms.prod: edge +ms.mktglfcycl: support +ms.sitesec: library +ms.pagetype: appcompat +title: Use Enterprise Mode to improve compatibility (Microsoft Edge) +--- + +# Use Enterprise Mode to improve compatibility + + +**Last updated** + +- November 12, 2015 + +**Applies to:** + +- Windows 10 +- Windows 10 Mobile + + +If you have specific web sites and apps that you know have compatibility problems with Microsoft Edge, you can use the Enterprise Mode site list so that the web sites will automatically open using Internet Explorer 11. Additionally, if you know that your intranet sites aren't going to work properly with Microsoft Edge, you can set all intranet sites to automatically open using IE11. + +Using Enterprise Mode means that you can continue to use Microsoft Edge as your default browser, while also ensuring that your apps continue working on IE11. +

**Note**
If you want to use Group Policy to set Internet Explorer as your default browser, you can find the info here, [Set the default browser using Group Policy]( http://go.microsoft.com/fwlink/?LinkId=620714). + +## Fix specific websites + +Microsoft Edge doesn't support ActiveX controls, Browser Helper Objects, VBScript, or other legacy technology. If you have websites or web apps that still use this technology and need IE11, you can add them to the Enterprise Mode site list, using the Enterprise Mode Site List Manager. + +**To add sites to your list** + +1. In the Enterprise Mode Site List Manager tool, click **Add**.

If you already have an existing site list, you can import it into the tool. After it's in the tool, the xml updates the list, checking **Open in IE** for each site. For info about importing the site list, see [Import your Enterprise Mode site list to the Enterprise Mode Site List Manager](http://go.microsoft.com/fwlink/?LinkId=618322).

![Enterprise Mode Site List Manager with Open in IE box](images/emie_open_in_ie.png) + +2. Type or paste the URL for the website that’s experiencing compatibility problems, like *<domain>*.com or *<domain>*.com/*<path>* into the **URL** box.

You don’t need to include the `http://` or `https://` designation. The tool will automatically try both versions during validation. + +3. Type any comments about the website into the **Notes about URL** box.

Administrators can only see comments while they’re in this tool. + +4. Click **Open in IE** next to the URL that should automatically open in IE11.

The path within a domain can require a different compatibility mode from the domain itself. For example, the domain might look fine in the default IE11 browser, but the path might have problems and require the use of Enterprise Mode. If you added the domain previously, your original compatibility choice is still selected. However, if the domain is new, Enterprise Mode is automatically selected. + +5. Click **Save** to validate your website and to add it to the site list for your enterprise.

If your site passes validation, it’s added to the global compatibility list. If the site doesn’t pass validation, you’ll get an error message explaining the problem. You’ll then be able to either cancel the site or ignore the validation problem and add it to your list anyway. + +6. On the **File** menu, go to where you want to save the file, and then click **Save to XML**.

You can save the file locally or to a network share. However, you must make sure you deploy it to the location specified in your Group Policy setting. For more info, see [Turn on Enterprise Mode and use a site list](http://go.microsoft.com/fwlink/?LinkId=618952). + +### Set up Microsoft Edge to use the Enterprise Mode site list + +You must turn on the **Use Enterprise Mode Site List** Group Policy setting before Microsoft Edge can use the Enterprise Mode site list. This Group Policy applies to both Microsoft Edge and IE11, letting Microsoft Edge switch to IE11 as needed, based on the Enterprise Mode site list. For more info about IE11 and Enterprise Mode, see [Enterprise Mode for Internet Explorer 11 (IE11)](http://go.microsoft.com/fwlink/p/?linkid=618377). + +**To turn on Enterprise Mode using Group Policy** + +1. Open your Group Policy editor and go to the **Administrative Templates\\Windows Components\\Microsoft Edge\\Allows you to configure the Enterprise Mode Site list** setting.

Turning this setting on also requires you to create and store a site list.

![Local Group Policy Editor for using a site list](images/edge-emie-grouppolicysitelist.png) + +2. Click **Enabled**, and then in the **Options** area, type the location to your site list. + +3. Refresh your policy in your organization and then view the affected sites in Microsoft Edge.

The site shows a message in Microsoft Edge, saying that the page needs IE. At the same time, the page opens in IE11; in a new frame if it's not yet running, or in a new tab if it is. + +**To turn on Enterprise Mode using the registry** + +1. **To turn on Enterprise Mode for all users on the PC:** Open a registry editor, like regedit.exe and go to `HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\MicrosoftEdge\Main\EnterpriseMode`. + +2. Edit the `SiteList` registry key to point to where you want to keep your Enterprise Mode site list file. For example:

![Enterprise mode with site list in the registry](images/edge-emie-registrysitelist.png) + + - **HTTP location**: *“SiteList”=”http://localhost:8080/sites.xml”* + + - **Local network**: *"SiteList"="\\\\network\\shares\\sites.xml"* + + - **Local file**: *"SiteList"="file:///c:\\\\Users\\\\<user>\\\\Documents\\\\testList.xml"* + + All of your managed devices must have access to this location if you want them to be able to access and use Enterprise Mode and your site list. + +3. Refresh your policy in your organization and then view the affected sites in Microsoft Edge.

The site shows a message in Microsoft Edge, saying that the page needs IE. At the same time, the page opens in IE11; in a new frame if it's not yet running, or in a new tab if it is. + +## Fix your intranet sites + +You can add the **Send all intranet traffic over to Internet Explorer** Group Policy setting for Windows 10 so that all of your intranet sites open in IE11. This means that even if your employees are using Microsoft Edge, they will automatically switch to IE11 while viewing the intranet. +

**Note**
If you want to use Group Policy to set IE as the default browser for Internet sites, you can find the info here, [Set the default browser using Group Policy]( http://go.microsoft.com/fwlink/?LinkId=620714). + +**To turn on Sends all intranet traffic over to Internet Explorer using Group Policy** + +1. Open your Group Policy editor and go to the `Administrative Templates\Windows Components\Microsoft Edge\Sends all intranet traffic over to Internet Explorer` setting.

![Local Group Policy Editor with setting to send all intranet traffic to IE11](images/sendintranettoie.png) + +2. Click **Enabled**. + +3. Refresh your policy in your organization and then view the affected sites in Microsoft Edge.

The site shows a message in Microsoft Edge, saying that the page needs IE. At the same time, the page opens in IE11; in a new frame if it's not yet running, or in a new tab if it is. + +## Related topics +* [Blog: How Microsoft Edge and Internet Explorer 11 on Windows 10 work better together in the Enterprise](http://go.microsoft.com/fwlink/?LinkID=624035) +* [Enterprise Mode Site List Manager download](http://go.microsoft.com/fwlink/?LinkId=394378) +* [Enterprise Mode for Internet Explorer 11 (IE11)](http://go.microsoft.com/fwlink/p/?linkid=618377) +* [Set the default browser using Group Policy]( http://go.microsoft.com/fwlink/?LinkId=620714) +  + +  + + + diff --git a/browsers/edge/hardware-and-software-requirements.md b/browsers/edge/hardware-and-software-requirements.md new file mode 100644 index 0000000000..f93b1182cb --- /dev/null +++ b/browsers/edge/hardware-and-software-requirements.md @@ -0,0 +1,169 @@ +--- +Description: Microsoft Edge is pre-installed on all Windows 10-capable devices that meet the minimum system requirements and are on the supported language list. +ms.assetid: 3C5BC4C4-1060-499E-9905-2504EA6DC6AA +ms.prod: edge +ms.mktglfcycl: support +ms.sitesec: library +ms.pagetype: appcompat +title: Microsoft Edge requirements and language support +--- + +# Microsoft Edge requirements and language support + + +**Last updated** + +- November 12, 2015 + +**Applies to:** + +- Windows 10 +- Windows 10 Mobile + + +Microsoft Edge is pre-installed on all Windows 10-capable devices that meet the minimum system requirements and are on the supported language list. + +## Minimum system requirements +Some of the components in this table might also need additional system resources. Check the component's documentation for more information. + + +| Item | Minimum requirements | +| ------------------ | -------------------------------------------- | +| Computer/processor | 1 gigahertz (GHz) or faster (32-bit (x86) or 64-bit (x64)) | +| Operating system |

**Note**
For specific Windows 10 Mobile requirements, see the [Minimum hardware requirements for Windows 10 Mobile](http://go.microsoft.com/fwlink/?LinkID=699266) topic. | +| Memory |

| +| Hard drive space | | +| DVD drive | DVD-ROM drive (if installing from a DVD-ROM) | +| Display | Super VGA (800 x 600) or higher-resolution monitor with 256 colors | +| Graphics card | Microsoft DirectX 9 or later with Windows Display Driver Model (WDDM) 1.0 driver | +| Peripherals | Internet connection and a compatible pointing device | + +  + +## Supported languages + + +Microsoft Edge supports all of the same languages as Windows 10, including: + + +| Language | Country/Region | Code | +| ------------------------ | -------------- | ------ | +| Afrikaans (South Africa) | South Africa | af-ZA | +| Albanian (Albania) | Albania | sq-AL | +| Amharic | Ethiopia | am-ET | +| Arabic (Saudi Arabia) | Saudi Arabia | ar-SA | +| Armenian | Armenia | hy-AM | +| Assamese | India | as-IN | +| Azerbaijani (Latin, Azerbaijan) | Azerbaijan | az-Latn-AZ | +| Bangla (Bangladesh) | Bangladesh | bn-BD | +| Bangla (India) | India | bn-IN | +| Basque (Basque) | Spain | eu-ES | +| Belarusian (Belarus) | Belarus | be-BY | +| Bosnian (Latin) | Bosnia and Herzegovina | bs-Latn-BA | +| Bulgarian (Bulgaria) | Bulgaria | bg-BG | +| Catalan (Catalan) | Spain | ca-ES | +| Central Kurdish (Arabic) | Iraq | ku-Arab-IQ | +| Cherokee (Cherokee) | United States | chr-Cher-US | +| Chinese (Hong Kong SAR) | Hong Kong Special Administrative Region | zh-HK | +| Chinese (Simplified, China) | People's Republic of China | zh-CN | +| Chinese (Traditional, Taiwan) | Taiwan | zh-TW | +| Croatian (Croatia) | Croatia | hr-HR | +| Czech (Czech Republic) | Czech Republic | cs-CZ | +| Danish (Denmark) | Denmark | da-DK | +| Dari | Afghanistan | prs-AF | +| Dutch (Netherlands) | Netherlands | nl-NL | +| English (United Kingdom) | United Kingdom | en-GB | +| English (United States) | United States | en-US | +| Estonian (Estonia) | Estonia | et-EE | +| Filipino (Philippines) | Philippines | fil-PH | +| Finnish (Finland) | Finland | fi_FI | +| French (Canada) | Canada | fr-CA | +| French (France) | France | fr-FR | +| Galician (Galician) | Spain | gl-ES | +| Georgian | Georgia | ka-GE | +| German (Germany) | Germany | de-DE | +| Greek (Greece) | Greece | el-GR | +| Gujarati | India | gu-IN | +| Hausa (Latin, Nigeria) | Nigeria | ha-Latn-NG | +| Hebrew (Israel) | Israel | he-IL | +| Hindi (India) | India | hi-IN | +| Hungarian (Hungary) | Hungary | hu-HU | +| Icelandic | Iceland | is-IS | +| Igbo | Nigeria | ig-NG | +| Indonesian (Indonesia) | Indonesia | id-ID | +| Irish | Ireland | ga-IE | +| isiXhosa | South Africa | xh-ZA | +| isiZulu | South Africa | zu-ZA | +| Italian (Italy) | Italy | it-IT | +| Japanese (Japan) | Japan | ja-JP | +| Kannada | India | kn-IN | +| Kazakh (Kazakhstan) | Kazakhstan | kk-KZ | +| Khmer (Cambodia) | Cambodia | km-KH | +| K'iche' | Guatemala | quc-Latn-GT | +| Kinyarwanda | Rwanda | rw-RW | +| KiSwahili | Kenya, Tanzania | sw-KE | +| Konkani | India | kok-IN | +| Korean (Korea) | Korea | ko-KR | +| Kyrgyz | Kyrgyzstan | ky-KG | +| Lao (Laos) | Lao P.D.R. | lo-LA | +| Latvian (Latvia) | Latvia | lv-LV | +| Lithuanian (Lithuania) | Lithuania | lt-LT | +| Luxembourgish (Luxembourg) | Luxembourg | lb-LU | +| Macedonian (Former Yugoslav Republic of Macedonia) | Macedonia (FYROM) | mk-MK | +| Malay (Malaysia) | Malaysia, Brunei, and Singapore | ms-MY | +| Malayalam | India | ml-IN | +| Maltese | Malta | mt-MT | +| Maori | New Zealand | mi-NZ | +| Marathi | India | mr-IN | +| Mongolian (Cyrillic) | Mongolia | mn-MN | +| Nepali | Federal Democratic Republic of Nepal | ne-NP | +| Norwegian (Nynorsk) | Norway | nn-NO | +| Norwegian, Bokmål (Norway) | Norway | nb-NO | +| Odia | India | or-IN | +| Polish (Poland) | Poland | pl-PL | +| Portuguese (Brazil) | Brazil | pt-BR | +| Portuguese (Portugal) | Portugal | pt-PT | +| Punjabi | India | pa-IN | +| Punjabi (Arabic) | Pakistan | pa-Arab-PK | +| Quechua | Peru | quz-PE | +| Romanian (Romania) | Romania | ro-RO | +| Russian (Russia) | Russia | ru-RU | +| Scottish Gaelic | United Kingdom | gd-GB | +| Serbian (Cyrillic, Bosnia, and Herzegovina) | Bosnia and Herzegovina | sr-Cyrl-BA | +| Serbian (Cyrillic, Serbia) | Serbia | sr-Cyrl-RS | +| Serbian (Latin, Serbia) | Serbia | sr-Latn-RS | +| Sesotho sa Leboa | South Africa | nso-ZA | +| Setswana (South Africa) | South Africa and Botswana | tn-ZA | +| Sindhi (Arabic) | Pakistan | sd-Arab-PK | +| Sinhala | Sri Lanka | si-LK | +| Slovak (Slovakia) | Slovakia | sk-SK | +| Slovenian (Slovenia) | Slovenia | sl-SL | +| Spanish (Mexico) | Mexico | es-MX | +| Spanish (Spain, International Sort) | Spain | en-ES | +| Swedish (Sweden) | Sweden | sv-SE | +| Tajik (Cyrillic) | Tajikistan | tg-Cyrl-TJ | +| Tamil (India) | India and Sri Lanka | ta-IN | +| Tatar | Russia | tt-RU | +| Telugu | India | te-IN | +| Thai (Thailand) | Thailand | th-TH | +| Tigrinya (Ethiopia) | Ethiopia | ti-ET | +| Turkish (Turkey) | Turkey | tr-TR | +| Turkmen | Turkmenistan | tk-TM | +| Ukrainian (Ukraine) | Ukraine | uk-UA | +| Urdu | Pakistan | ur-PK | +| Uyghur | People's Republic of China | ug-CN | +| Uzbek (Latin, Uzbekistan) | Uzbekistan | uz-Latn-UZ | +| Valencian | Spain | ca-ES-valencia | +| Vietnamese | Vietnam | vi-VN | +| Welsh | United Kingdom | cy-GB | +| Wolof | Senegal | wo-SN | +| Yoruba | Nigeria | yo-NG | + +  + +  + +  + + + diff --git a/browsers/edge/images/edge-emie-grouppolicysitelist.png b/browsers/edge/images/edge-emie-grouppolicysitelist.png new file mode 100644 index 0000000000..82ffc30895 Binary files /dev/null and b/browsers/edge/images/edge-emie-grouppolicysitelist.png differ diff --git a/browsers/edge/images/edge-emie-registrysitelist.png b/browsers/edge/images/edge-emie-registrysitelist.png new file mode 100644 index 0000000000..9e9ece9c1a Binary files /dev/null and b/browsers/edge/images/edge-emie-registrysitelist.png differ diff --git a/browsers/edge/images/emie_open_in_ie.png b/browsers/edge/images/emie_open_in_ie.png new file mode 100644 index 0000000000..40bb22123b Binary files /dev/null and b/browsers/edge/images/emie_open_in_ie.png differ diff --git a/browsers/edge/images/emieopeninie.png b/browsers/edge/images/emieopeninie.png new file mode 100644 index 0000000000..40bb22123b Binary files /dev/null and b/browsers/edge/images/emieopeninie.png differ diff --git a/browsers/edge/images/sendintranettoie.png b/browsers/edge/images/sendintranettoie.png new file mode 100644 index 0000000000..a90909e19f Binary files /dev/null and b/browsers/edge/images/sendintranettoie.png differ diff --git a/browsers/edge/microsoft-edge-deployment-guide-for-it-pros.md b/browsers/edge/microsoft-edge-deployment-guide-for-it-pros.md new file mode 100644 index 0000000000..4623986deb --- /dev/null +++ b/browsers/edge/microsoft-edge-deployment-guide-for-it-pros.md @@ -0,0 +1,56 @@ +--- +Description: Microsoft Edge is the new, default web browser for Windows 10, helping you to experience modern web standards, better performance, improved security, and increased reliability. +ms.assetid: 70377735-B2F9-4B0B-9658-4CF7C1D745BB +ms.prod: edge +ms.mktglfcycl: general +ms.sitesec: library +title: Microsoft Edge - Deployment Guide for IT Pros +--- + +# Microsoft Edge - Deployment Guide for IT Pros + + +**Last updated** + +- July 28, 2015 + +**Applies to:** + +- Windows 10 +- Windows 10 Mobile + + +Microsoft Edge is the new, default web browser for Windows 10, helping you to experience modern web standards, better performance, improved security, and increased reliability. Microsoft Edge also introduces new features like Web Note, Reading View, and Cortana that you can use along with your normal web browsing abilities. + +Microsoft Edge lets you stay up-to-date through the Windows Store and to manage your enterprise through Group Policy or your mobile device management (MDM) tools. +

**Note**
This content isn't meant to be a step-by-step guide, so not everything that's talked about in this guide will be necessary for you to manage and deploy Microsoft Edge in your company. + +## In this section + +| Topic | Description | +| -----------------------| ----------------------------------- | +| [Microsoft Edge requirements and language support](hardware-and-software-requirements.md) | Microsoft Edge is pre-installed on all Windows 10-capable devices that meet the minimum system requirements and are on the supported language list.| +| [Available policies for Microsoft Edge](available-policies.md) | Microsoft Edge works with Group Policy and Microsoft Intune to help you manage your organization's computer settings.

Group Policy objects (GPO's) can include registry-based Administrative Template policy settings, security settings, software deployment information, scripts, folder redirection, and preferences. By using Group Policy and Intune, you can set up a policy setting once, and then copy that setting onto many computers. For example, you can set up multiple security settings in a GPO that's linked to a domain, and then apply all of those settings to every computer in the domain. | +| [Use Enterprise Mode to improve compatibility](emie-to-improve-compatibility.md) | If you have specific web sites and apps that you know have compatibility problems with Microsoft Edge, you can use the Enterprise Mode site list so that the web sites will automatically open using Internet Explorer 11. Additionally, if you know that your intranet sites aren't going to work properly with Microsoft Edge, you can set all intranet sites to automatically open using IE11.

Using Enterprise Mode means that you can continue to use Microsoft Edge as your default browser, while also ensuring that your apps continue working on IE11. | + +## Interoperability goals and enterprise guidance + +Our primary goal is that your modern websites work in Microsoft Edge. To that end, we've made Microsoft Edge the default browser. + +However, if you're running web apps that continue to use: + +* ActiveX controls + +* x-ua-compatible headers + +* <meta> tags + +* Enterprise mode or compatibility view to address compatibility issues + +* legacy document modes + +You'll need to keep running them using IE11. If you don't have IE11 installed anymore, you can download it from the Windows Store or from the [Internet Explorer 11 download page](http://go.microsoft.com/fwlink/p/?linkid=290956). Alternatively, you can also use Enterprise Mode with Microsoft Edge to transition only the sites that need these technologies to load in IE11. For info about Enterprise Mode and Edge, see [Use Enterprise Mode to improve compatibility](emie-to-improve-compatibility.md). + +## Related topics + +* [Download Internet Explorer 11](http://go.microsoft.com/fwlink/p/?linkid=290956) \ No newline at end of file diff --git a/browsers/internet-explorer-11/TOC.md b/browsers/internet-explorer-11/TOC.md new file mode 100644 index 0000000000..3c84a97433 --- /dev/null +++ b/browsers/internet-explorer-11/TOC.md @@ -0,0 +1,9 @@ +#Table of Contents +#[Internet Explorer 11](internet-explorer-11.md) +##[ActiveX installation using group policy](ie11-deploy-guide/activex-installation-using-group-policy.md) +##[Add multiple sites to the Enterprise Mode site list using a file and the Windows 10 Enterprise Mode Site List Manager tool](ie11-deploy-guide/add-multiple-sites-to-the-enterprise-mode-site-list-using-a-file-and-enterprise-mode-site-list-manager.md) +##[Add multiple sites to the Enterprise Mode site list using a file and the Windows 7 and Windows 8.1 Enterprise Mode Site List Manager tool](ie11-deploy-guide/add-multiple-sites-to-the-enterprise-mode-site-list-using-a-file-and-the-enterprise-mode-manager.md) +##[Add sites to the Enterprise Mode site list using the Windows 10 Enterprise Mode Site List Manager tool](ie11-deploy-guide/add-sites-to-the-enterprise-mode-site-list-using-the-enterprise-mode-site-list-manager.md) +##[Add sites to the Enterprise Mode site list using the Windows 7 and Windows 8.1 Enterprise Mode Site List Manager tool](ie11-deploy-guide/add-sites-to-the-enterprise-mode-site-list-using-the-windows-7-and-windows-8-1-enterprise-mode-site-list-manager.md) +##[Administrative templates and Internet Explorer 11](ie11-deploy-guide/administrative-templates-and-internet-explorer-11.md) +##[Auto configuration and auto proxy problems with Internet Explorer 11](ie11-deploy-guide/auto-configuration-and-auto-proxy-problems-with-internet-explorer-11.md) \ No newline at end of file diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/activex-installation-using-group-policy.md b/browsers/internet-explorer-11/ie11-deploy-guide/activex-installation-using-group-policy.md new file mode 100644 index 0000000000..48ec14b875 --- /dev/null +++ b/browsers/internet-explorer-11/ie11-deploy-guide/activex-installation-using-group-policy.md @@ -0,0 +1,42 @@ +--- +Description: ActiveX installation using group policy +ms.assetid: 59185370-558c-47e0-930c-8a5ed657e9e3 +ms.prod: IE11 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: security +title: ActiveX installation using group policy +--- + +# ActiveX installation using group policy + +ActiveX controls are installed and invoked using the HTML object tag with the CODEBASE attribute. This attribute, through a URL, makes Internet Explorer: + +- Get the ActiveX control if it's not already installed. + +- Download the installation package. + +- Perform trust verification on the object. + +- Prompt for installation permission, using the IE Information Bar. + +During installation, the rendering page registers and invokes the control, so that after installation, any standard user can invoke the control. + +**Important**
ActiveX control installation requires administrator-level permissions. + +## Group Policy for the ActiveX Installer Service + +You use the ActiveX Installer Service (AXIS) and Group Policy to manage your ActiveX control deployment. The AXIS-related settings can be changed using either the Group Policy Management Console (GPMC) or the Local Group Policy Editor, and include: + +- **Approved Installation Sites for ActiveX Controls.** A list of approved installation sites used by AXIS to determine whether it can install a particular ActiveX control. + +- **ActiveX installation policy for sites in trusted zones.** Identifies how AXIS should behave when a website tries to install an ActiveX control. First, AXIS looks to see if the site appears in either the list of approved installation sites or in the **Trusted sites** zone. If the does, then AXIS checks to make sure the control meets your company's policy requirements. If the ActiveX control meets all of these requirements, the control is installed. + +For more information about the ActiveX Installer Service, see [Administering the ActiveX Installer Service in Windows 7](http://go.microsoft.com/fwlink/?LinkId=214503). + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/add-multiple-sites-to-enterprise-mode-site-list-using-the-version-1-schema-and-enterprise-mode-tool.md b/browsers/internet-explorer-11/ie11-deploy-guide/add-multiple-sites-to-enterprise-mode-site-list-using-the-version-1-schema-and-enterprise-mode-tool.md new file mode 100644 index 0000000000..c5491e7939 --- /dev/null +++ b/browsers/internet-explorer-11/ie11-deploy-guide/add-multiple-sites-to-enterprise-mode-site-list-using-the-version-1-schema-and-enterprise-mode-tool.md @@ -0,0 +1,109 @@ +--- +Description: You can add multiple sites to your Enterprise Mode site list by creating a custom text (TXT) or Extensible Markup Language (XML) file of problematic sites and then adding it in the Bulk add from file area of the Enterprise Mode Site List Manager tool. +ms.assetid: 20AF07C4-051A-451F-9C46-5A052D9AE27C +ms.prod: IE11 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: appcompat +title: Add multiple sites to the Enterprise Mode site list using a file and the Windows 7 and Windows 8.1 Enterprise Mode Site List Manager tool +--- + +# Add multiple sites to the Enterprise Mode site list using a file and the Windows 7 and Windows 8.1 Enterprise Mode Site List Manager tool + +**Last updated** + +- November 12, 2015 + +**Applies to:** + +- Windows 8.1 +- Windows 7 + +You can add multiple sites to your Enterprise Mode site list by creating a custom text (TXT) or Extensible Markup Language (XML) file of problematic sites and then adding it in the **Bulk add from file** area of the Enterprise Mode Site List Manager tool. You can only add specific URLs, not Internet or Intranet Zones. + +If you want to add your websites one at a time, see Add sites to the [Enterprise Mode site list using the Windows 7 and Windows 8.1 Enterprise Mode Site List Manager tool](aadd-single-sites-to-enterprise-mode-site-list-using-the-version-1-enterprise-mode-tool.md). + +## Create an Enterprise Mode site list (TXT) file +You can create and use a custom text file to add multiple sites to your Enterprise Mode site list at the same time.

**Important**
This text file is only lets you add multiple sites at the same time. You can’t use this file to deploy Enterprise Mode into your company. + +You must separate each site using commas or carriage returns. For example: + +``` +microsoft.com, bing.com, bing.com/images +``` +**-OR-** + +``` +microsoft.com +bing.com +bing.com/images +``` + +## Create an Enterprise Mode site list (XML) file using the v.1 version of the Enterprise Mode schema +You can create and use a custom XML file with the Enterprise Mode Site List Manager tool to add multiple sites to your Enterprise Mode site list at the same time. For more info about the v.1 version of the Enterprise Mode schema, see [Enterprise Mode schema v.1 guidance for Windows 7 and Windows 8.1 devices](enterprise-mode-schema-version-1-guidance.md). + +Each XML file must include: + +- **Version number.** This number must be incremented with each version of the Enterprise Mode site list, letting Internet Explorer know whether the list is new. Approximately 65 seconds after Internet Explorer 11 starts, it compares your site list version to the stored version number. If your file has a higher number, the newer version is loaded.

**Important**
After this check, IE11 won’t look for an updated list again until you restart the browser. + +- **<emie> tag.** This tag specifies the domains and domain paths that must be rendered using IE7 Enterprise Mode, IE8 Enterprise Mode, or the default IE11 browser environment.

**Important**
If you decide a site requires IE7 Enterprise Mode, you must add `forceCompatView=”true”` to your XML file. That code tells Enterprise Mode to check for a `DOCTYPE` tag on the specified webpage. If there is, the site renders using Windows Internet Explorer 7. If there’s no tag, the site renders using Microsoft Internet Explorer 5. + +- **<docMode> tag.**This tag specifies the domains and domain paths that need either to appear using the specific doc mode you assigned to the site. Enterprise Mode takes precedence over document modes, so sites that are already included in the Enterprise Mode site list won’t be affected by this update and will continue to load in Enterprise Mode, as usual. For more specific info about using document modes, see [Fix web compatibility issues using document modes and the Enterprise Mode site list](fix-compat-issues-with-doc-modes-and-enterprise-mode-site-list.md). + +### Enterprise Mode v.1 XML schema example +The following is an example of what your XML file should look like when you’re done adding your sites. For more info about how to create your XML file, see [Enterprise Mode schema v.1 guidance for Windows 7 and Windows 8.1 Update devices](enterprise-mode-schema-version-1-guidance.md). + +``` + + + www.cpandl.com + www.woodgrovebank.com + adatum.com + contoso.com + relecloud.com + /about + + fabrikam.com + /products + + + + contoso.com + /travel + + fabrikam.com + /products + + + +``` + +To make sure your site list is up-to-date; wait 65 seconds after opening IE and then check that the `CurrentVersion` value in the `HKEY\CURRENT\USER\Software\Microsoft\Internet Explorer\Main\EnterpriseMode\` registry key matches the version number in your file.

**Important**
If `CurrentVersion` is not set or is wrong, it means that the XML parsing failed. This can mean that the XML file isn’t there, that there are access problems, or that the XML file format is wrong. Don’t manually change the `CurrentVersion` registry setting. You must make your changes to your site list and then update the list using the import function in the Windows 7 and Windows 8.1 Enterprise Mode Site List Manager tool. + +## Add multiple sites to the Windows 7 and Windows 8.1 Enterprise Mode Site List Manager tool +After you create your .xml or .txt file, you can bulk add the sites to the Windows 7 and Windows 8.1 Enterprise Mode Site List Manager tool. + +**To add multiple sites** + +1. In the Windows 7 and Windows 8.1 Enterprise Mode Site List Manager tool, click **Bulk add from file**. + +2. Go to your site list (either .txt or .xml) to add the included sites to the tool, and then click **Open**.

+Each site is validated and if successful, added to the global site list when you click **OK** to close the menu. If a site doesn’t pass validation, you can try to fix the issues or pick the site and click **Add to list** to ignore the validation problem. For more information about fixing validation problems, see [Fix validation problems using the Enterprise Mode Site List Manager tool](fix-compat-issues-with-doc-modes-and-enterprise-mode-site-list.md). + +3. Click **OK** to close the **Bulk add sites to the list** menu. + +4. On the **File** menu, click **Save to XML**, and save your file.

+You can save the file locally or to a network share. However, you must make sure you deploy it to the location specified in your registry key. For more information about the registry key, see [Turn on Enterprise Mode and use a site list](turn-on-enterprise-mode-and-use-a-site-list.md). + +## Next steps +After you’ve added all of your sites to the tool and saved the file to XML, you can configure the rest of the Enterprise Mode functionality to use it. You can also turn Enterprise Mode on locally, so your users have the option to use Enterprise Mode on individual websites from the **Tools** menu. For more information, see [Turn on local control and logging for Enterprise Mode](turn-on-local-control-and-logging-for-enterprise-mode.md). + +## Related topics +- [Enterprise Mode schema v.1 guidance for Windows 7 and Windows 8.1 Update devices](enterprise-mode-schema-version-1-guidance.md) +- [Download the Enterprise Mode Site List Manager for Windows 7 and Windows 8.1 tool](http://go.microsoft.com/fwlink/?LinkID=394378) +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/add-multiple-sites-to-enterprise-mode-site-list-using-the-version-2-schema-and-enterprise-mode-tool.md b/browsers/internet-explorer-11/ie11-deploy-guide/add-multiple-sites-to-enterprise-mode-site-list-using-the-version-2-schema-and-enterprise-mode-tool.md new file mode 100644 index 0000000000..8d381194f9 --- /dev/null +++ b/browsers/internet-explorer-11/ie11-deploy-guide/add-multiple-sites-to-enterprise-mode-site-list-using-the-version-2-schema-and-enterprise-mode-tool.md @@ -0,0 +1,115 @@ +--- +Description: You can add multiple sites to your Enterprise Mode site list by creating a custom text (TXT) or Extensible Markup Language (XML) file of problematic sites and then adding it in the Bulk add from file area of the Windows 10 Enterprise Mode Site List Manager tool. You can only add specific URLs, not Internet or Intranet Zones.To add your websites one at a time, see Add sites to the Enterprise Mode site list using the Windows 10 Enterprise Mode Site List Manager tool. +ms.assetid: da659ff5-70d5-4852-995e-4df67c4871dd +ms.prod: IE11 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: appcompat +title: Add multiple sites to the Enterprise Mode site list using a file and the Windows 10 Enterprise Mode Site List Manager tool +--- + +# Add multiple sites to the Enterprise Mode site list using a file and the Windows 10 Enterprise Mode Site List Manager tool + +**Last updated** + +- November 12, 2015 + +**Applies to:** + +- Windows 10 + +You can add multiple sites to your Enterprise Mode site list by creating a custom text (TXT) or Extensible Markup Language (XML) file of problematic sites and then adding it in the **Bulk add from file** area of the Windows 10 Enterprise Mode Site List Manager tool. You can only add specific URLs, not Internet or Intranet Zones. + +To add your websites one at a time, see [Add sites to the Enterprise Mode site list using the Windows 10 Enterprise Mode Site List Manager tool](add-single-sites-to-enterprise-mode-site-list-using-the-version-2-enterprise-mode-tool.md). + +## Create an Enterprise Mode site list (TXT) file + +You can create and use a custom text file with the Windows 10 Enterprise Mode Site List Manager tool to add multiple sites to your Enterprise Mode site list at the same time.

**Important:**
This text file is only lets you add multiple sites at the same time. You can’t use this file to deploy Enterprise Mode into your company. + +You must separate each site using commas or carriage returns. For example: + +``` +microsoft.com, bing.com, bing.com/images +``` +**-OR-** + +``` +microsoft.com +bing.com +bing.com/images +``` + +## Create an Enterprise Mode site list (XML) file using the v.2 version of the Enterprise Mode schema + +You can create and use a custom XML file with the Windows 10 Enterprise Mode Site List Manager tool to add multiple sites to your Enterprise Mode site list at the same time. + +Each XML file must include: + +- **site-list version number**. This number must be incremented with each version of the Enterprise Mode site list, letting Internet Explorer know whether the list is new. Approximately 65 seconds after Internet Explorer 11 starts, it compares your site list version to the stored version number. If your file has a higher number, the newer version is loaded.

**Important**
After this check, IE11 won’t look for an updated list again until you restart the browser.  + +- **<compat-mode> tag.** This tag specifies what compatibility setting are used for specific sites or domains. + +- **<open-in> tag.** This tag specifies what browser opens for each sites or domain. + +### Enterprise Mode v.2 XML schema example + +The following is an example of what your XML file should look like when you’re done adding your sites. For more info about how to create your XML file, see [Enterprise Mode schema v.2 guidance for Windows 10 devices](enterprise-mode-schema-version-2-guidance.md). + +``` + + + + EnterpriseSitelistManager + 10240 + 20150728.135021 + + + + IE8Enterprise + MSEdge + + + IE7Enterprise + IE11 + + + default + IE11 + + +``` +In the above example, the following is true: + +- cpandl.com, as the main domain, must use IE8 Enterprise Mode. However, bing.com/images must use IE7 Enterprise Mode. + +- contoso.com, and all of its domain paths, can use the default compatibility mode for the site. + +To make sure your site list is up-to-date; wait 65 seconds after opening IE and then check that the `CurrentVersion` value in the `HKEY\CURRENT\USER\Software\Microsoft\Internet Explorer\Main\EnterpriseMode\` registry key matches the version number in your file.

**Important**
If `CurrentVersion` is not set or is wrong, it means that the XML parsing failed. This can mean that the XML file isn’t there, that there are access problems, or that the XML file format is wrong. Don’t manually change the `CurrentVersion` registry setting. You must make your changes to your site list and then update the list using the import function in the Windows 10 Enterprise Mode Site List Manager tool. + +## Add multiple sites to the Windows 10 Enterprise Mode Site List Manager tool +After you create your .xml or .txt file, you can bulk add the sites to the Windows 10 Enterprise Mode Site List Manager tool. + +**To add multiple sites** + +1. In the Windows 10 Enterprise Mode Site List Manager tool, click **Bulk add from file**. + +2. Go to your site list (either .txt or .xml) to add the included sites to the tool, and then click **Open**.

+Each site is validated and if successful, added to the global site list when you click **OK** to close the menu. If a site doesn’t pass validation, you can try to fix the issues or pick the site and click **Add to list** to ignore the validation problem. For more information about fixing validation problems, see [Fix validation problems using the Enterprise Mode Site List Manager tool](fix-validation-problems-using-the-enterprise-mode-site-list-manager-tool.md). + +3. Click **OK** to close the **Bulk add sites to the list** menu. + +4. On the **File** menu, click **Save to XML**, and save your file.

+You can save the file locally or to a network share. However, you must make sure you deploy it to the location specified in your registry key. For more information about the registry key, see [Turn on Enterprise Mode and use a site list](turn-on-enterprise-mode-and-use-a-site-list.md). + +## Next steps +After you’ve added all of your sites to the tool and saved the file to XML, you can configure the rest of the Enterprise Mode functionality to use it. You can also turn Enterprise Mode on locally, so your users have the option to use Enterprise Mode on individual websites from the **Tools** menu. For more information, see [Turn on local control and logging for Enterprise Mode](turn-on-local-control-and-logging-for-enterprise-mode.md). + +## Related topics +- [Download the Enterprise Mode Site List Manager for Windows 10 tool](http://go.microsoft.com/fwlink/?LinkId=716853) +- [Enterprise Mode schema v.2 guidance for Windows 10 devices](enterprise-mode-schema-version-2-guidance.md) +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/add-single-sites-to-enterprise-mode-site-list-using-the-version-1-enterprise-mode-tool.md b/browsers/internet-explorer-11/ie11-deploy-guide/add-single-sites-to-enterprise-mode-site-list-using-the-version-1-enterprise-mode-tool.md new file mode 100644 index 0000000000..b978db9767 --- /dev/null +++ b/browsers/internet-explorer-11/ie11-deploy-guide/add-single-sites-to-enterprise-mode-site-list-using-the-version-1-enterprise-mode-tool.md @@ -0,0 +1,63 @@ +--- +Description: Enterprise Mode is a compatibility mode that runs on Internet Explorer 11, letting websites render using a modified browser configuration that''s designed to emulate either Windows Internet Explorer 7 or Windows Internet Explorer 8, avoiding the common compatibility problems associated with web apps written and tested on older versions of Internet Explorer. +ms.assetid: 042E44E8-568D-4717-8FD3-69DD198BBF26 +ms.prod: IE11 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: appcompat +title: Add sites to the Enterprise Mode site list using the Windows 7 and Windows 8.1 Enterprise Mode Site List Manager tool +--- + +# Add single sites to the Enterprise Mode site list using the Windows 7 and Windows 8.1 Enterprise Mode Site List Manager tool + +**Last updated** + +- November 12, 2015 + +**Applies to:** + +- Windows 8.1 +- Windows 7 +- Windows Server 2008 R2 with Service Pack 1 (SP1) + +Enterprise Mode is a compatibility mode that runs on Internet Explorer 11, letting websites render using a modified browser configuration that’s designed to emulate either Windows Internet Explorer 7 or Windows Internet Explorer 8, avoiding the common compatibility problems associated with web apps written and tested on older versions of Internet Explorer.

**Important**
You can only add specific URLs, not Internet or Intranet Zones. + +

**Note**
If you need to include a lot of sites, instead of adding them one at a time, you can create a list of websites and add them all at the same time. For more information, see [Add multiple sites to the Enterprise Mode site list using a file and the Windows 7 and 8.1 Enterprise Mode Site List Manager tool](add-single-sites-to-enterprise-mode-site-list-using-the-version-1-enterprise-mode-tool.md). + +## Adding a site to your compatibility list +You can add individual sites to your compatibility list by using the Enterprise Mode Site List Manager tool. +

**Note**
If you're using Windows 10 and the v.2 version of the Enterprise Mode schema, you'll need to use the Windows 10 Enterprise Mode Site List Manager tool. For more info, see [Add sites to the Enterprise Mode site list using the Windows 10 Enterprise Mode Site List Manager tool](aadd-single-sites-to-enterprise-mode-site-list-using-the-version-2-enterprise-mode-tool.md). + +**To add a site to your compatibility list using the Windows 7 and Windows 8.1 Enterprise Mode Site List Manager tool** + +1. In the Windows 7 and Windows 8.1 Enterprise Mode Site List Manager tool, click **Add**. + +2. Type the URL for the website that’s experiencing compatibility problems, like *<domain>.com* or *<domain>.com*/*<path>* into the **URL** box.

+Don't include the `http://` or `https://` designation. The tool automatically tries both versions during validation. + +3. Type any comments about the website into the **Notes about URL** box.

+Administrators can only see comments while they’re in this tool. + +4. Choose **IE7 Enterprise Mode**, **IE8 Enterprise Mode**, or the appropriate document mode for sites that must be rendered using the emulation of a previous version of IE, or pick **Default IE** if the site should use the latest version of IE. + +The path within a domain can require a different compatibility mode from the domain itself. For example, the domain might look fine in the default IE11 browser, but the path might have problems and require the use of Enterprise Mode. If you added the domain previously, your original compatibility choice is still selected. However, if the domain is new, **IE8 Enterprise Mode** is automatically selected. + +Enterprise Mode takes precedence over document modes, so sites that are already included in the Enterprise Mode site list won’t be affected by this update and will continue to load in Enterprise Mode, as usual. For more specific info about using document modes, see [Fix web compatibility issues using document modes and the Enterprise Mode site list](fix-compat-issues-with-doc-modes-and-enterprise-mode-site-list.md). + +5. Click **Save** to validate your website and to add it to the site list for your enterprise.

+If your site passes validation, it’s added to the global compatibility list. If the site doesn’t pass validation, you’ll get an error message explaining the problem. You’ll then be able to either cancel the site or ignore the validation problem and add it to your list anyway. + +6. On the **File** menu, go to where you want to save the file, and then click **Save to XML**.

+You can save the file locally or to a network share. However, you must make sure you deploy it to the location specified in your registry key. For more information about the registry key, see [Turn on local control and logging for Enterprise Mode](turn-on-local-control-and-logging-for-enterprise-mode.md). + +## Next steps +After you’ve added all of your sites to the tool and saved the file to XML, you can configure the rest of the Enterprise Mode functionality to use it. You can also turn Enterprise Mode on locally, so your users have the option to use Enterprise Mode on individual websites from the **Tools** menu. For more information, see [Turn on local control and logging for Enterprise Mode](turn-on-local-control-and-logging-for-enterprise-mode.md). + +## Related topics +- [Download the Enterprise Mode Site List Manager for Windows 7 and Windows 8.1 tool](http://go.microsoft.com/fwlink/?LinkID=394378) +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/add-single-sites-to-enterprise-mode-site-list-using-the-version-2-enterprise-mode-tool.md b/browsers/internet-explorer-11/ie11-deploy-guide/add-single-sites-to-enterprise-mode-site-list-using-the-version-2-enterprise-mode-tool.md new file mode 100644 index 0000000000..cab9694c40 --- /dev/null +++ b/browsers/internet-explorer-11/ie11-deploy-guide/add-single-sites-to-enterprise-mode-site-list-using-the-version-2-enterprise-mode-tool.md @@ -0,0 +1,78 @@ +--- +Description: Enterprise Mode is a compatibility mode that runs on Internet Explorer 11, letting websites render using a modified browser configuration that''s designed to emulate either Windows Internet Explorer 8 or Windows Internet Explorer 7, avoiding the common compatibility problems associated with web apps written and tested on older versions of Internet Explorer. +ms.assetid: 513e8f3b-fedf-4d57-8d81-1ea4fdf1ac0b +ms.prod: IE11 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: appcompat +title: Add sites to the Enterprise Mode site list using the Windows 10 Enterprise Mode Site List Manager tool +--- + +# Add single sites to the Enterprise Mode site list using the Windows 10 Enterprise Mode Site List Manager tool + + +**Last updated** + +- November 12, 2015 + +**Applies to:** + +- Windows 10 + +Enterprise Mode is a compatibility mode that runs on Internet Explorer 11, letting websites render using a modified browser configuration that’s designed to emulate either Windows Internet Explorer 8 or Windows Internet Explorer 7, avoiding the common compatibility problems associated with web apps written and tested on older versions of Internet Explorer.

**Important**
You can only add specific URLs, not Internet or Intranet Zones. + +

**Note**
If you need to include a lot of sites, instead of adding them one at a time, you can create a list of websites and add them all at the same time. For more information, see the [Add multiple sites to the Enterprise Mode site list using a file and the Windows 10 Enterprise Mode Site List Manager tool](add-multiple-sites-to-enterprise-mode-site-list-using-the-version-2-schema-and-enterprise-mode-tool.md) or the [Add multiple sites to the Enterprise Mode site list using a file and the Windows 7 and 8.1 Enterprise Mode Site List Manager tool](add-multiple-sites-to-enterprise-mode-site-list-using-using-the-version-1-schema-and-enterprise-mode-tool.md) topic, based on your operating system. + +## Adding a site to your compatibility list +You can add individual sites to your compatibility list by using the Enterprise Mode Site List Manager tool.

+**Note**
If you're using Windows 7 and Windows 8.1 or the v.1 version of the Enterprise Mode schema, you'll need to use the Windows 7 and Windows 8.1 Enterprise Mode Site List Manager tool. For more info, see [Add sites to the Enterprise Mode site list using the Windows 7 and Windows 8.1 Enterprise Mode Site List Manager tool](add-single-sites-to-enterprise-mode-site-list-using-the-version-1-enterprise-mode-tool.md). + +**To add a site to your compatibility list using the Windows 10 Enterprise Mode Site List Manager tool** + +1. In the Windows 10 Enterprise Mode Site List Manager tool, click **Add**. + +2. Type the URL for the website that’s experiencing compatibility problems, like *<domain>.com* or *<domain>.com*/*<path>* into the **URL** box.

+Don't include the `http://` or `https://` designation. The tool automatically tries both versions during validation. + +3. Type any comments about the website into the **Notes about URL** box.

+Administrators can only see comments while they’re in this tool. + +4. In the **Compat Mode** box, choose one of the following: + + - **IE8Enterprise**. Loads the site in IE8 Enterprise Mode. + + - **IE7Enterprise**. Loads the site in IE7 Enterprise Mode. + + - **IE\[*x*\]**. Where \[x\] is the document mode number and the site loads in the specified document mode. + + - **Default Mode**. Loads the site using the default compatibility mode for the page. + + The path within a domain can require a different compatibility mode from the domain itself. For example, the domain might look fine in the default IE11 browser, but the path might have problems and require the use of Enterprise Mode. If you added the domain previously, your original compatibility choice is still selected. However, if the domain is new, **IE8 Enterprise Mode** is automatically selected. + + Enterprise Mode takes precedence over document modes, so sites that are already included in the Enterprise Mode site list won’t be affected by this update and will continue to load in Enterprise Mode, as usual. For more specific info about using document modes, see [Fix web compatibility issues using document modes and the Enterprise Mode site list](fix-compat-issues-with-doc-modes-and-enterprise-mode-site-list.md). + +5. In conjunction with the compatibility mode, you'll need to use the **Open in** box to pick which browser opens the site. + + - **IE11**. Opens the site in IE11, regardless of which browser is opened by the employee. + + - **MSEdge**. Opens the site in Microsoft Edge, regardless of which browser is opened by the employee. + + - **None**. Opens in whatever browser the employee chooses. + +6. Click **Save** to validate your website and to add it to the site list for your enterprise.

+If your site passes validation, it’s added to the global compatibility list. If the site doesn’t pass validation, you’ll get an error message explaining the problem. You’ll then be able to either cancel the site or ignore the validation problem and add it to your list anyway. + +7. On the **File** menu, go to where you want to save the file, and then click **Save to XML**.

+You can save the file locally or to a network share. However, you must make sure you deploy it to the location specified in your registry key. For more information about the registry key, see [Turn on local control and logging for Enterprise Mode](turn-on-local-control-and-logging-for-enterprise-mode.md). + +## Next steps +After you’ve added all of your sites to the tool and saved the file to XML, you can configure the rest of the Enterprise Mode functionality to use it. You can also turn Enterprise Mode on locally, so your users have the option to use Enterprise Mode on individual websites from the **Tools** menu. For more information, see [Turn on local control and logging for Enterprise Mode](turn-on-local-control-and-logging-for-enterprise-mode.md). + +## Related topics +- [Download the Enterprise Mode Site List Manager for Windows 10 tool](http://go.microsoft.com/fwlink/?LinkId=716853) +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/administrative-templates-and-ie11.md b/browsers/internet-explorer-11/ie11-deploy-guide/administrative-templates-and-ie11.md new file mode 100644 index 0000000000..42b09d22aa --- /dev/null +++ b/browsers/internet-explorer-11/ie11-deploy-guide/administrative-templates-and-ie11.md @@ -0,0 +1,70 @@ +--- +Description: Administrative templates and Internet Explorer 11 +ms.assetid: 2b390786-f786-41cc-bddc-c55c8a4c5af3 +ms.prod: IE11 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: security +title: Administrative templates and Internet Explorer 11 +--- + +# Administrative templates and Internet Explorer 11 + +Administrative Templates are made up of a hierarchy of policy categories and subcategories that define how your policy settings appear in the Local Group Policy Editor, including: + +- What registry locations correspond to each setting. + +- What value options or restrictions are associated with each setting. + +- The default value for many settings. + +- Text explanations about each setting and the supported version of Internet Explorer. + +For a conceptual overview of Administrative Templates, see [Managing Group Policy ADMX Files Step-by-Step Guide](http://go.microsoft.com/fwlink/?LinkId=214519). + +## What are Administrative Templates? +Administrative Templates are XML-based, multi-language files that define the registry-based Group Policy settings in the Local Group Policy Editor. There are two types of Administrative Templates: + +- **ADMX.** A language-neutral setup file that states the number and type of policy setting, and the location by category, as it shows up in the Local Group Policy Editor. + +- **ADML.** A language-specific setup file that provides language-related information to the ADMX file. This file lets the policy setting show up in the right language in the Local Group Policy Editor. You can add new languages by adding new ADML files in the required language. + +## How do I store Administrative Templates? +As an admin, you can create a central store folder on your SYSVOL directory, named **PolicyDefinitions**. For example, %*SystemRoot*%\\PolicyDefinitions. This folder provides a single, centralized storage location for your Administrative Templates (both ADMX and ADML) files, so they can be used by your domain-based Group Policy Objects (GPOs). +

**Important**
Your Group Policy tools use the ADMX files in your store, ignoring any local copies. For more information about creating a central store, see [Scenario 1: Editing the Local GPO Using ADMX Files](http://go.microsoft.com/fwlink/?LinkId=276810). + +## Administrative Templates-related Group Policy settings +When you install Internet Explorer 11, it updates the local administrative files, Inetres.admx and Inetres.adml, both located in the **PolicyDefinitions** folder. +

**Note**
You won't see the new policy settings if you try to view or edit your policy settings on a computer that isn't running IE11. To fix this, you can either install IE11, or you can copy the updated Inetres.admx and Inetres.adml files from another computer to the **PolicyDefinitions** folder on this computer. + +IE11 provides these new policy settings, which are editable in the Local Group Policy Editor, and appear in the following policy paths: + +- Computer Configuration\\Administrative Templates\\Windows Components\\ + +- User Configuration\\Administrative Templates\\Windows Components\\ + + +|Catalog |Description | +| ------------------------------------------------ | --------------------------------------------| +|IE |Turns standard IE configuration on and off. | +|Internet Explorer\Accelerators |Sets up and manages Accelerators. | +|Internet Explorer\Administrator Approved Controls |Turns ActiveX controls on and off. | +|Internet Explorer\Application Compatibility |Turns the **Cut**, **Copy**, or **Paste** operations on or off. This setting also requires that `URLACTION_SCRIPT_PASTE` is set to **Prompt**. | +|Internet Explorer\Browser Menus |Shows or hides the IE menus and menu options.| +|Internet Explorer\Corporate Settings |Turns off whether you specify the code download path for each computer. | +|Internet Explorer\Delete Browsing History |Turns the **Delete Browsing History** settings on and off. | +|Internet Explorer\Internet Control Panel |Turns pages on and off in the **Internet Options** dialog box. Also turns on and off the subcategories that manage settings on the **Content**, **General**, **Security** and **Advanced** pages. | +|Internet Explorer\Internet Settings |Sets up and manages the **Advanced settings**, **AutoComplete**, **Display Settings**, and **URL Encoding** options. | +|Internet Explorer\Persistence Behavior |Sets up and manages the file size limits for Internet security zones. | +|Internet Explorer\Privacy |Turns various privacy-related features on and off. | +|Internet Explorer\Security Features |Turns various security-related features on and off in the browser, Windows Explorer, and other applications. | +|Internet Explorer\Toolbars |Turns on and off the ability for users to edit toolbars in the browser. You can also set the default toolbar buttons here. | +|RSS Feeds |Sets up and manages RSS feeds in the browser. | + + +## Editing Group Policy settings +Regardless which tool you're using to edit your Group Policy settings, you'll need to follow one of these guides for step-by-step editing instructions: + +- **If you're using the Group Policy Management Console (GPMC) or the Local Group Policy Editor.** See [Edit Administrative Template Policy Settings](http://go.microsoft.com/fwlink/?LinkId=214521) for step-by-step instructions about editing your Administrative Templates. + +- **If you're using GPMC with Advanced Group Policy Management (AGPM).** See [Checklist: Create, Edit, and Deploy a GPO](http://go.microsoft.com/fwlink/?LinkId=214522) for step-by-step instructions about how to check out a GPO from the AGPM archive, edit it, and request deployment. \ No newline at end of file diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/auto-configuration-and-auto-proxy-problems-with-ie11.md b/browsers/internet-explorer-11/ie11-deploy-guide/auto-configuration-and-auto-proxy-problems-with-ie11.md new file mode 100644 index 0000000000..86c13cd1ec --- /dev/null +++ b/browsers/internet-explorer-11/ie11-deploy-guide/auto-configuration-and-auto-proxy-problems-with-ie11.md @@ -0,0 +1,55 @@ +--- +Description: Auto configuration and auto proxy problems with Internet Explorer 11 +ms.assetid: 3fbbc2c8-859b-4b2e-abc3-de2c299e0938 +ms.prod: IE11 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: networking +title: Auto configuration and auto proxy problems with Internet Explorer 11 +--- + +# Auto configuration and auto proxy problems with Internet Explorer 11 +You might experience some problems using automatic configuration and auto-proxy with Internet Explorer 11. + +## Branding changes aren't distributed using automatic configuration +If you've turned on the **Disable external branding of Internet Explorer** Group Policy Object, you won't be able to use automatic configuration to distribute your branding changes to your users' computers. When this object is turned on, it prevents the branding of IE by a non-Microsoft company or entity, such as an Internet service provider or Internet content provider. For more information about automatic configuration, see [Auto configuration settings for Internet Explorer 11](auto-configuration-settings-for-ie11.md) and [Automatic Configuration: Internet Explorer Customization Wizard](http://go.microsoft.com/fwlink/p/?linkid=327743). For more information about Group Policy settings, see [Group policy objects and Internet Explorer 11 (IE11)](gpo-and-ie11.md). + +## Proxy server setup issues +If you experience issues while setting up your proxy server, you can try these troubleshooting steps: + +- Check to make sure the proxy server address is right. + +- Check that both **Automatically detect settings** and **Automatic configuration** are turned on in the browser. + +- Check that the browser is pointing to the right automatic configuration script location. + +**To check your proxy server address** + +1. On the **Tools** menu, click **Internet Options**, and then **Connections**. + +2. Click **Settings** or **LAN Settings**, and then look at your proxy server address. + +3. If you have multiple proxy servers, click **Advanced** to look at all of the additional addresses.

**Note**
If IE11 uses a proxy server for local IP addresses, regardless whether you turned on the **Bypass Proxy Server for Local Addresses** option, see [Internet Explorer Uses Proxy Server for Local IP Address Even if the "Bypass Proxy Server for Local Addresses" Option Is Turned On](http://go.microsoft.com/fwlink/?LinkId=85652). + +**To check that you've turned on the correct settings** + +1. On the **Tools** menu, click **Internet Options**, and then click **Connections**. + +2. Click **Settings** or **LAN Settings**. + +3. In the **Automatic configuration** area, check that you've clicked the **Automatically detect settings** box. If you've turned on automatic configuration, check to make sure that you've also clicked the **Use automatic configuration script** box.

**Note**
If at this point everything is set up correctly, but the proxy server still isn't behaving properly, click the **Detect my network settings** box in the **Error** dialog box to try to detect the proxy server, again. + +**To check that you're pointing to the correct automatic configuration script location** + +1. On the **Tools** menu, click **Internet Options**, and then click **Connections**. + +2. Click **Settings** or **LAN Settings**. + +3. In the **Automatic configuration** area, check that you've chosen the **Use automatic configuration script** box, and that it has the correct location to your automatic configuration script or for your automatic proxy URL. + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/auto-configuration-settings-for-ie11.md b/browsers/internet-explorer-11/ie11-deploy-guide/auto-configuration-settings-for-ie11.md new file mode 100644 index 0000000000..e3f0c97df4 --- /dev/null +++ b/browsers/internet-explorer-11/ie11-deploy-guide/auto-configuration-settings-for-ie11.md @@ -0,0 +1,67 @@ +--- +Description: Auto configuration settings for Internet Explorer 11 +ms.assetid: 90308d59-45b9-4639-ab1b-497e5ba19023 +ms.prod: IE11 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: networking +title: Auto configuration settings for Internet Explorer 11 +--- + +# Auto configuration settings for Internet Explorer 11 +Automatic configuration lets you apply custom branding and graphics to your internal Internet Explorer installations, running on Windows 8.1 or Windows Server 2012 R2. For more information about adding custom branding and graphics to your IE package, see [IEAK 11: Customization guidelines for your Toolbar button and Favorites list icons](http://go.microsoft.com/fwlink/p/?linkid=327742).

**Important**
You'll only see and be able to use the **IE Customization Wizard 11 - Automatic Configuration** page if you're creating an internal IE installation package. For more information about the **IE Customization Wizard 11 - Automatic Configuration** page, see [Automatic Configuration: Internet Explorer Customization Wizard](http://go.microsoft.com/fwlink/p/?linkid=327743). + +## Adding the automatic configuration registry key +For custom graphics and branding, add the `FEATURE\AUTOCONFIG\BRANDING` registry key to your IE installation package.

**Important**
Follow these directions carefully because serious problems can occur if you update your registry incorrectly. For added protection, back up your registry so you can restore it if a problem occurs. + +**To add the registry key** + +1. On the **Start** screen, type **regedit**, and then click **Regedit.exe**. + +2. Right-click the `HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl` subkey, point to **New**, and then click **Key**. + +3. Enter the new key name, `FEATURE\AUTOCONFIG\BRANDING`, and then press Enter. + +4. Right-click `FEATURE\AUTOCONFIG\BRANDING`, point to **New**, and then click **DWORD (32-bit) Value**. + +5. Enter the new DWORD value name, **iexplore.exe**, and then press Enter. + +6. Right-click **iexplore.exe**, and then click **Modify**. + +7. In the **Value data** box, enter **1**, and then click **OK**. + +8. Exit the registry editor. + +## Updating your automatic configuration settings +After adding the `FEATURE\AUTOCONFIG\BRANDING` registry key, you can change your automatic configuration settings to pick up the updated branding. +

**Important**
Your branding changes won't be added or updated if you've previously chosen the **Disable external branding of IE** setting in the `User Configuration\Administrative Templates\Windows Components\Internet Explorer` Group Policy object. This setting is intended to prevent branding by a third-party, like an Internet service or content provider. For more information about Group Policy, including videos and the latest technical documentation, see the [Group Policy TechCenter](http://go.microsoft.com/fwlink/?LinkId=214514). + +**To update your settings** + +1. Open the IE Customization Wizard 11, and go to the **Automatic Configuration** page. + +2. Choose the **Automatically detect configuration settings** check box to allow automatic detection of browser settings. + +3. Choose the **Enable Automatic Configuration** box to let you change the rest of the configuration options, including: + + - **Automatically configure every box:** Type how often IE should check for configuration updates. Typing **0** (zero), or not putting in any number, means that automatic configuration only happens when the computer restarts. + + - **Automatic Configuration URL (.INS file) box:** Type the location of your automatic configuration script. + + - **Automatic proxy URL (.JS, .JVS, or .PAC file) box:** Type the location of your automatic proxy script.

**Important**
Internet Explorer 11 no longer supports using file server locations with your proxy configuration (.pac) files. To keep using your .pac files, you have to keep them on a web server and reference them using a URL, like *http://share/test.ins*. + +If your branding changes aren't correctly deployed after running through this process, see [Auto configuration and auto proxy problems with Internet Explorer 11](auto-configuration-and-auto-proxy-problems-with-ie11.md). + +## Locking your automatic configuration settings +You have two options to restrict your users' ability to override the automatic configuration settings, based on your environment. + +- **Using Microsoft Active Directory.** Choose **Disable changing Automatic Configuration settings** from the Administrative Templates setting. + +- **Not Using Active Directory.** Choose the **Disable changing Automatic Configuration settings** setting in the `User Configuration\Administrative Templates\Windows Components\Internet Explorer` Group Policy object. + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/auto-detect-settings-for-ie11.md b/browsers/internet-explorer-11/ie11-deploy-guide/auto-detect-settings-for-ie11.md new file mode 100644 index 0000000000..ed65abcd13 --- /dev/null +++ b/browsers/internet-explorer-11/ie11-deploy-guide/auto-detect-settings-for-ie11.md @@ -0,0 +1,48 @@ +--- +Description: Auto detect settings Internet Explorer 11 +ms.assetid: c6753cf4-3276-43c5-aae9-200e9e82753f +ms.prod: IE11 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: networking +title: Auto detect settings Internet Explorer 11 +--- + +# Auto detect settings Internet Explorer 11 +After you specify the specific settings related to automatic detection on your Dynamic Host Configuration Protocol (DHCP) and Domain Name System (DNS) servers, you can set up your users' browser settings from a central location. + +Automatic detection works even if the browser wasn't originally set up or installed by the administrator. + +- **Using DHCP servers:** For local area network (LAN)-based users. This server type lets you specify your global and subnet TCP/IP parameters centrally, defining your users' parameters by using reserved addresses. By doing it this way, a computer can move between subnets, automatically reconfiguring for TCP/IP when it starts. + +- **Using DNS servers:** For users on dial-up connections. This server type uses a set of protocols and services on a TCP/IP network, which lets users search for other computers by using hierarchical, user-friendly names (hosts), instead of numeric IP addresses.

**Note**
DHCP has a higher priority than DNS for automatic configuration. If DHCP provides the URL to a .pac, .jvs, .js, or .ins configuration file, the process stops and the DNS lookup doesn't happen. + +## Updating your automatic detection settings +To use automatic detection, you have to set up your DHCP and DNS servers.

**Note**
Your DHCP servers must support the `DHCPINFORM` message, to obtain the DHCP options. + +**To turn on automatic detection for DHCP servers** + +1. Open the Internet Explorer Customization Wizard 11, and go to the **Automatic Configuration** page. + +2. Choose the **Automatically detect configuration settings** box to automatically detect your browser settings. For more information about the **Automatic Configuration** page, see [Automatic Configuration: Internet Explorer Customization Wizard](http://go.microsoft.com/fwlink/p/?linkid=327743). + +3. Open the [DHCP Administrative Tool](http://go.microsoft.com/fwlink/?LinkId=302212), create a new option type, using the code number 252, and then associate it with the URL to your configuration file. For detailed instructions about how to do this, see [Create an option 252 entry in DHCP](http://go.microsoft.com/fwlink/p/?LinkId=294649). + +**To turn on automatic detection for DNS servers** + +1. Open the IE Customization Wizard 11, and go to the **Automatic Configuration** page. + +2. Choose the **Automatically detect configuration settings** box to automatically detect your browser settings. + +3. In your DNS database file, create a host record named, **WPAD**. This record has the IP address of the web server storing your automatic configuration (.js, .jvs, .pac, or .ins) file.

**-OR-**

Create a canonical name (CNAME) alias record named, **WPAD**. This record has the resolved name (not the IP address) of the server storing your automatic configuration (.pac) file.

**Note**
For more information about creating a **WPAD** entry, see [Creating a WPAD entry in DNS](http://go.microsoft.com/fwlink/?LinkId=294651).  + +4. After the database file propagates to the server, the DNS name, `wpad..com` resolves to the server name that includes your automatic configuration file.

**Note**
Internet Explorer 11 creates a default URL template based on the host name, **wpad**. For example, `http://wpad..com/wpad.dat`. Because of this, you need to set up a file or redirection point in your web server **WPAD** record, named **wpad.dat**. The **wpad.dat** record delivers the contents of your automatic configuration file. + +   + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/auto-proxy-configuration-settings-for-ie11.md b/browsers/internet-explorer-11/ie11-deploy-guide/auto-proxy-configuration-settings-for-ie11.md new file mode 100644 index 0000000000..421bab5f04 --- /dev/null +++ b/browsers/internet-explorer-11/ie11-deploy-guide/auto-proxy-configuration-settings-for-ie11.md @@ -0,0 +1,43 @@ +--- +Description: Auto proxy configuration settings for Internet Explorer 11 +ms.assetid: 5120aaf9-8ead-438a-8472-3cdd924b7d9e +ms.prod: IE11 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: networking +title: Auto proxy configuration settings for Internet Explorer 11 +--- + +# Auto proxy configuration settings for Internet Explorer 11 +Configure and maintain your proxy settings, like pointing your users' browsers to your automatic proxy script, through the Internet Explorer Customization Wizard 11 running on either Windows 8.1 or Windows Server 2012 R2. + +## Updating your auto-proxy settings +You can use your Internet settings (.ins) files to set up your standard proxy settings. You can also specify script files (.js, .jvs, or .pac) to configure and maintain your advanced proxy settings. IE uses your auto-proxy script files to dynamically determine whether to connect to a host or use a proxy server. If a proxy server connection fails, Internet Explorer 11 automatically attempts to connect to another proxy server that you have specified. + +**To update your settings** + +1. Create a script file with your proxy information, copying it to a server location. + +2. Open the IE Customization Wizard 11, and go to the **Automatic Configuration** page. + +3. Choose the **Enable Automatic Configuration** box to let you change the rest of the configuration options, including: + + - **Automatically configure every box:** Type how often IE should check for configuration updates. Typing **0** (zero), or not putting in any number, means that updates only happen when the computer restarts. + + - **Automatic Configuration URL (.INS file) box:** Type the location of the .ins file you want to use for automatic configuration. For more information about setting up **Automatic Configuration**, see [Auto configuration settings for Internet Explorer 11](auto-configuration-settings-for-ie11.md). + + - **Automatic proxy URL (.JS, .JVS, or .PAC file) box:** Type the location of your automatic proxy script. This script runs whenever IE11 makes a network request and can include multiple proxy servers for each protocol type.

**Important**
IE11 no longer supports using file server locations with your proxy configuration (.pac) files. To keep using your .pac files, you have to keep them on a web server and reference them using a URL, like `http://share/test.ins`. + +## Locking your auto-proxy settings +You have two options to restrict your users' ability to override the automatic configuration settings, based on your environment. + +- **Using Microsoft Active Directory.** Choose **Disable changing proxy settings** from the Administrative Templates setting. + +- **Not Using Active Directory.** Choose the **Prevent changing proxy settings** setting in the `User Configuration\Administrative Templates\Windows Components\Internet Explorer` Group Policy object. For more information about Group Policy, see the [Group Policy TechCenter](http://go.microsoft.com/fwlink/?LinkId=214514). + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/browser-cache-changes-and-roaming-profiles.md b/browsers/internet-explorer-11/ie11-deploy-guide/browser-cache-changes-and-roaming-profiles.md new file mode 100644 index 0000000000..6e77400ac7 --- /dev/null +++ b/browsers/internet-explorer-11/ie11-deploy-guide/browser-cache-changes-and-roaming-profiles.md @@ -0,0 +1,31 @@ +--- +Description: Browser cache changes and roaming profiles +ms.assetid: 85f0cd01-6f82-4bd1-9c0b-285af1ce3436 +ms.prod: IE11 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: performance +title: Browser cache changes and roaming profiles +--- + +# Browser cache changes and roaming profiles +We’ve redesigned the browser cache to improve the performance, flexibility, reliability, and scalability of Internet Explorer and the apps that rely on the Windows Internet (WinINet) cache. Our new database design stops multiple clients from simultaneously accessing and using cached information, while also providing a higher level of data integrity. + +You won’t notice any changes to the management of your roaming profile data if you use our new database implementation in conjunction with the [roaming user profile guidelines](http://go.microsoft.com/fwlink/?LinkId=401544). This means that IE data that’s stored in the `AppData\Roaming` user profile folder is still be uploaded to your normal profile storage location after a user successfully logs off.

**Note**
Cookies in a roaming profile can only be set by Internet Explorer for the desktop, with Enhanced Protected Mode turned off. Cookies set by the immersive version of IE or by Windows Store apps, can’t be part of a roaming profile. For more information about persistent cookies and roaming, see [Persistent cookies are not roamed in Internet Explorer](http://go.microsoft.com/fwlink/?LinkId=401545). + +To get the best results while using roaming profiles, we strongly recommend the following: + +- Create a separate roaming repository for each domain account that uses roaming. + +- Restrict roaming user profiles so they work on only one computer at a time. Using a single roaming profile on multiple computers isn’t supported (via console or Remote Desktop) and can cause unpredictable results, including cookie loss. + +- Allow all computers that let users sign-on with a roaming profile have identical IE cookie policies and settings. + +- Make sure to delete the user’s local roaming profile at sign off for any computer using user profile roaming. You can do this by turning on the **Delete cached copies of roaming profiles** Group Policy Object. + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/check-for-new-enterprise-mode-site-list-xml-file.md b/browsers/internet-explorer-11/ie11-deploy-guide/check-for-new-enterprise-mode-site-list-xml-file.md new file mode 100644 index 0000000000..cb0665342d --- /dev/null +++ b/browsers/internet-explorer-11/ie11-deploy-guide/check-for-new-enterprise-mode-site-list-xml-file.md @@ -0,0 +1,47 @@ +--- +Description: You can have centralized control over Enterprise Mode by creating a single, global XML site list that includes the list of websites to render using Enterprise Mode. +ms.assetid: 2bbc7017-622e-4baa-8981-c0bbda10e9df +ms.prod: IE11 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: appcompat +title: Check for a new Enterprise Mode site list xml file +--- + +# Check for a new Enterprise Mode site list xml file +**Last updated** + +- November 12, 2015 + +**Applies to:** + +- Windows 10 and later +- Windows 8.1 +- Windows 7 +- Windows Server 2012 R2 +- Windows Server 2008 R2 with Service Pack 1 (SP1) + +You can have centralized control over Enterprise Mode by creating a single, global XML site list that includes the list of websites to render using Enterprise Mode. You can add and remove sites from your XML list as frequently as you want, changing which sites should render in Enterprise Mode for your employees. For information about turning on Enterprise Mode and using site lists, see [Turn on Enterprise Mode and use a site list](turn-on-enterprise-mode-and-use-a-site-list.md). + +The information in this topic only covers HTTP protocol. We strongly recommend that you use HTTP protocol instead of file protocol due to increased performance. + +**How Internet Explorer 11 looks for an updated site list** + +1. Internet Explorer starts up and looks for an updated site list in the following places: + + 1. **In the cache container.** IE first checks the cache container to see if it finds your XML site list. + + 2. **In the local cache.** If there’s nothing in the cache container, IE checks your local cache for the site list. + + 3. **On the server.** Based on standard IE caching rules, IE might look for a copy of your site list in the location you put specified in the **SiteList** value of the registry. + +2. If there’s an .xml file in the cache container, IE waits 65 seconds and then checks the local cache for a newer version of the file from the server, based on standard caching rules. If the server file has a different version number than the version in the cache container, the server file is used and stored in the cache container.

**Note**
If you’re already using a site list, enterprise mode continues to work during the 65 second wait; it just uses your existing site list instead of your new one. + +   + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/choose-how-to-deploy-ie11.md b/browsers/internet-explorer-11/ie11-deploy-guide/choose-how-to-deploy-ie11.md new file mode 100644 index 0000000000..8bf696faf8 --- /dev/null +++ b/browsers/internet-explorer-11/ie11-deploy-guide/choose-how-to-deploy-ie11.md @@ -0,0 +1,23 @@ +--- +Description: Choose how to deploy Internet Explorer 11 (IE11) +ms.assetid: 21b6a301-c222-40bc-ad0b-27f66fc54d9d +ms.prod: IE11 +ms.mktglfcycl: deploy +ms.sitesec: library +title: Choose how to deploy Internet Explorer 11 (IE11) +--- + +# Choose how to deploy Internet Explorer 11 (IE11) +In this section, you can learn about how to deploy your custom version of Internet Explorer using Automatic Version Synchronization (AVS) or using your software distribution tools. + +## In this section +| Topic | Description | +|------------------------------------------------------------- | ------------------------------------------------------ | +|[Deploy IE11 using Automatic Version Synchronization (AVS)](deploy-ie11-using-automatic-version-synchronization-avs.md) |Guidance about how to deploy your custom browser packages using Automatic Version Synchronization (AVS). | +|[Deploy IE11 using software distribution tools](deploy-ie11-using-software-distribution-tools.md) |Guidance about how to deploy your custom browser packages using System Center 2012 R2, Windows Server Update Services (WSUS), Group Policy software installation, or Microsoft Deployment toolkit (MDT). | +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/choose-how-to-install-ie11.md b/browsers/internet-explorer-11/ie11-deploy-guide/choose-how-to-install-ie11.md new file mode 100644 index 0000000000..8c9ed125c9 --- /dev/null +++ b/browsers/internet-explorer-11/ie11-deploy-guide/choose-how-to-install-ie11.md @@ -0,0 +1,30 @@ +--- +Description: Choose how to install Internet Explorer 11 (IE11) +ms.assetid: 572f5f1-5d67-483e-bd63-ffea95053481 +ms.prod: IE11 +ms.mktglfcycl: deploy +ms.sitesec: library +title: Choose how to install Internet Explorer 11 (IE11) +--- + +# Choose how to install Internet Explorer 11 (IE11) +Before you install Internet Explorer 11, you should: + +- **Migrate Group Policy Objects.** Decide if your Group Policy Objects should migrate to the new version. + +- **Check vendor support for updated functionality.** Check whether third-party vendors have new versions or updates to necessary add-ons, apps, or code libraries. + +- **Choose the right version of Internet Explorer.** IE11 comes pre-installed on Windows 8.1 and Windows Server 2012 R2 or you can download it for Windows 7 SP1 or Windows Server 2008 R2 with Service Pack 1 (SP1) from the [Internet Explorer Downloads](http://go.microsoft.com/fwlink/?LinkId=214251) site. + +- **Choose how you'll deploy your installation package.** Your deployment method should be based on whether you're installing to computers already running Windows, or if you're deploying IE11 as part of a Windows installation. + + - **Existing computers running Windows.** Use System Center R2 2012 System Center 2012 R2 Configuration Manager, System Center Essentials 2010, Windows Server Updates Services (WSUS), or Microsoft Intune to deploy IE11. For more information about how to use these systems, see [System Center 2012 R2 Configuration Manager](http://go.microsoft.com/fwlink/p/?LinkID=276664), [System Center Essentials 2010](http://go.microsoft.com/fwlink/?LinkId=395200), [Windows Server Update Services](http://go.microsoft.com/fwlink/p/?LinkID=276790), and [Microsoft Intune Overview](http://go.microsoft.com/fwlink/p/?linkid=276667). + + - **As part of a Windows deployment.** Update your Windows images to include IE11, and then add the update to your MDT deployment share or to your Windows image. For instructions about how to create and use Windows images, see [Create and Manage a Windows Image Using DISM](http://go.microsoft.com/fwlink/?LinkId=299408). For general information about deploying IE, see [Microsoft Deployment Toolkit (MDT)](http://go.microsoft.com/fwlink/?LinkId=331148), [Windows ADK Overview](http://go.microsoft.com/fwlink/?LinkId=276669). + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/collect-data-using-enterprise-site-discovery.md b/browsers/internet-explorer-11/ie11-deploy-guide/collect-data-using-enterprise-site-discovery.md new file mode 100644 index 0000000000..21dc89563f --- /dev/null +++ b/browsers/internet-explorer-11/ie11-deploy-guide/collect-data-using-enterprise-site-discovery.md @@ -0,0 +1,377 @@ +--- +Description: Use Internet Explorer to collect data on computers running Windows Internet Explorer 8 through Internet Explorer 11 on Windows 10, Windows 8.1, or Windows 7. +ms.assetid: a145e80f-eb62-4116-82c4-3cc35fd064b6 +ms.prod: IE11 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: appcompat +title: Collect data using Enterprise Site Discovery +--- + +# Collect data using Enterprise Site Discovery +**Last updated** + +- January 14, 2015 + +**Applies to:** + +- Windows 10 +- Windows 8.1 Update +- Windows 7 with Service Pack 1 (SP1) + +Use Internet Explorer to collect data on computers running Windows Internet Explorer 8 through Internet Explorer 11 on Windows 10, Windows 8.1, or Windows 7. This inventory information helps you build a list of websites used by your company so you can make more informed decisions about your IE deployments, including figuring out which sites might be at risk or require overhauls during future upgrades. + +## Requirements +Before you start, you need to make sure you have the following: + +- Latest cumulative security update (for all supported versions of Internet Explorer): + + 1. Go to the [Microsoft Security Bulletin](http://go.microsoft.com/fwlink/?LinkID=718223) page, and change the filter to **Windows Internet Explorer 11**. + + ![microsoft security bulletin techcenter](images/securitybulletin-filter.png) + + 2. Click the title of the latest cumulative security update, and then scroll down to the **Affected software** table. + + ![affected software section](images/affectedsoftware.png) + + 3. Click the link that represents both your operating system version and Internet Explorer 11, and then follow the instructions in the **How to get this update** section. + +- [Setup and configuration package](http://go.microsoft.com/fwlink/?LinkId=517719), including: + + - Configuration-related PowerShell scripts + + - IETelemetry.mof file + + - Sample System Center 2012 report templates + + You must use System Center 2012 R2 Configuration Manager or later for these samples to work. + +Both the PowerShell script and .mof file need to be copied to the same location on the client computer, before you run the scripts. + +## What data is collected? +Data is collected on the configuration characteristics of IE and the sites it browses, as shown here. + +|Data point |IE11 |IE10 |IE9 |IE8 |Description | +|------------------------|-----|-----|-----|-----|------------------------------------------------------------------------| +|URL | X | X | X | X |URL of the browsed site, including any parameters included in the URL. | +|Domain | X | X | X | X |Top-level domain of the browsed site. | +|ActiveX GUID | X | X | X | X |GUID of the ActiveX controls loaded by the site. | +|Document mode | X | X | X | X |Document mode used by IE for a site, based on page characteristics. | +|Document mode reason | X | X | | |The reason why a document mode was set by IE. | +|Browser state reason | X | X | | |Additional information about why the browser is in its current state. Also called, browser mode. | +|Hang count | X | X | X | X |Number of visits to the URL when the browser hung. | +|Crash count | X | X | X | X |Number of visits to the URL when the browser crashed. | +|Most recent navigation failure (and count) | X | X | X | X |Description of the most recent navigation failure (like, a 404 bad request or 500 internal server error) and the number of times it happened. | +|Number of visits | X | X | X | X |Number of times a site has been visited. | +|Zone | X | X | X | X |Zone used by IE to browse sites, based on browser settings. | + +

**Important**
By default, IE doesn’t collect this data; you have to turn this feature on if you want to use it. After you turn on this feature, data is collected on all sites visited by IE, except during InPrivate sessions. + +The data collection process is silent, so there’s no notification to the employee. Therefore, you must get consent from the employee before you start collecting info. You must also make sure that using this feature complies with all applicable local laws and regulatory requirements. + +## Where is the data stored and how do I collect it? +The data is stored locally, in an industry-standard WMI class, Managed Object Format (.MOF) file or in an XML file, depending on your configuration. This file remains on the client computer until it’s collected. To collect the files, we recommend: + +- **WMI file**. Use Microsoft Configuration Manager or any agent that can read the contents of a WMI class on your computer. + +- **XML file**. Any agent that works with XML can be used. + +## WMI Site Discovery suggestions +We recommend that you collect your data for at most a month at a time, to capture a user’s typical workflow. We don’t recommend collecting data longer than that because the data is stored in a WMI provider and can fill up your computer’s hard drive. You may also want to collect data only for pilot users or a representative sample of people, instead of turning this feature on for everyone in your company. + +On average, a website generates about 250bytes of data for each visit, causing only a minor impact to Internet Explorer’s performance. Over the course of a month, collecting data from 20 sites per day from 1,000 users, you’ll get about 150MB of data:
\[250bytes (per site visit) \* 20sites/day\* 30days = (approximately) 150KB \*1000users = (approximately) 150MB\]. +

**Important**
The data collection process is silent, so there’s no notification to the employee. Therefore, you must get consent from the employee before you start collecting info. You must also make sure that using this feature complies with all applicable local laws and regulatory requirements. + +## Getting ready to use Enterprise Site Discovery +You need to set up your computers for data collection by running the provided PowerShell script (IETelemetrySetUp.ps1) to compile the .mof file and to update security privileges for the new WMI classes. +

**Important**
You must run this script if you’re using WMI as your data output. It's not necessary if you're using XML as your data output. + +**To set up Enterprise Site Discovery** + +- Start PowerShell in elevated mode (using admin privileges) and run IETElemetrySetUp.ps1 by by-passing the PowerShell execution policy, using this command: `powershell -ExecutionPolicy Bypass .\IETElemetrySetUp.ps1`. For more info, see [about Execution Policies](http://go.microsoft.com/fwlink/p/?linkid=517460). + +### Optional: Set up your firewall for WMI data + +If you choose to use WMI as your data output, you need to make sure that your WMI data can travel through your firewall for the domain. If you’re sure, you can skip this section; otherwise, follow these steps: + +**To set up your firewall** + +1. In **Control Panel**, click **System and Security**, and then click **Windows Firewall**. + +2. In the left pane, click **Allow an app or feature through Windows Firewall** and scroll down to check the box for **Windows Management Instrumentation (WMI)**. + +3. Restart your computer to start collecting your WMI data. + +## Setting up Enterprise Site Discovery using PowerShell +After you finish the initial setup for Site Discovery using PowerShell, you have the option to continue with PowerShell or to switch to Group Policy. +

**Important**
The .ps1 file updates turn on Enterprise Site Discovery and WMI collection for all users on a device. + +### Setting up zones or domains for data collection +You can determine which zones or domains are used for data collection, using PowerShell. + +- **Domain allow list.** If you have a domain allow list, a comma-separated list of domains that should have this feature turned on, you should use this process. + +- **Zone allow list.** If you have a zone allow list, a comma-separated list of zones that should have this feature turned on, you should use this process. + +**To set up data collection using a domain allow list** + +- Start PowerShell in elevated mode (using admin privileges) and run IETElemetrySetUp.ps1, using this command: `.\IETElemetrySetUp.ps1 [other args] -SiteAllowList sharepoint.com,outlook.com,onedrive.com`. +

**Important**
Wildcards, like \*.microsoft.com, aren’t supported. + +**To set up data collection using a zone allow list** + +- Start PowerShell in elevated mode (using admin privileges) and run IETElemetrySetUp.ps1, using this command: `.\IETElemetrySetUp.ps1 [other args] -ZoneAllowList Computer,Intranet,TrustedSites,Internet,RestrictedSites`. +

**Important**
Only Computer, Intranet, TrustedSites, Internet, and RestrictedSites are supported. + +## Setting up Enterprise Site Discovery using Group Policy +If you don’t want to continue using PowerShell, you can switch to Group Policy after the initial Site Discovery setup. +

**Note**
 All of the Group Policy settings can be used individually or as a group. + +**To set up Enterprise Site Discovery using Group Policy** + +- Open your Group Policy editor, and go to these new settings: + +|Setting name and location |Description |Options | +|---------------------------|-------------|---------| +|Administrative Templates\Windows Components\Internet Explorer\Turn on Site Discovery WMI output |Writes collected data to a WMI class, which can be aggregated using a client-management solution like Configuration Manager. |

| +|Administrative Templates\Windows Components\Internet Explorer\Turn on Site Discovery XML output |Writes collected data to an XML file, which is stored in your specified location. | | +|Administrative Templates\Windows Components\Internet Explorer\Limit Site Discovery output by Zone |Manages which zone can collect data. |To specify which zones can collect data, you must include a binary number that represents your selected zones, based on this order:

0 – Restricted Sites zone
0 – Internet zone
0 – Trusted Sites zone
0 – Local Intranet zone
0 – Local Machine zone

**Example 1:** Include only the Local Intranet zone

Binary representation: *00010*, based on:

0 – Restricted Sites zone
0 – Internet zone
0 – Trusted Sites zone
1 – Local Intranet zone
0 – Local Machine zone

**Example 2:** Include only the Restricted Sites, Trusted Sites, and Local Intranet zones

Binary representation: *10110*, based on:

1 – Restricted Sites zone
0 – Internet zone
1 – Trusted Sites zone
1 – Local Intranet zone
1 – Local Machine zone | +|Administrative Templates\Windows Components\Internet Explorer\Limit Site Discovery output by domain |Manages which domains can collect data |To specify which domains can collect data, you must include your selected domains, one domain per line, in the provided box. It should look like:

microsoft.sharepoint.com
outlook.com
onedrive.com
timecard.contoso.com
LOBApp.contoso.com | + +### Combining WMI and XML Group Policy settings + +You can use both the WMI and XML settings individually or together, based on: + +**To turn off Enterprise Site Discovery** +

+ +**To turn on WMI recording only** + + +**To turn on XML recording only** + + +**To turn on both WMI and XML recording** + + + +## Use Configuration Manager to collect your data +After you’ve collected your data, you’ll need to get the local files off of your employee’s computers. To do this, use the hardware inventory process in Configuration Manager, in one of the following ways. + +### Collect your hardware inventory using the MOF Editor while connecting to a computer +You can collect your hardware inventory using the MOF Editor, while you’re connected to your client computers. + +**To collect your inventory** + +1. From the Configuration Manager, click **Administration**, click **Client Settings**, double-click **Default Client Settings**, click **Hardware Inventory**, and then click **Set Classes**. + + ![Configuration Manager, showing the hardware inventory settings for client computers](images/configmgrhardwareinventory.png) + +2. Click **Add**, click **Connect**, and connect to a computer that has completed the setup process and has already existing classes. + +3. Change the **WMI Namespace** to `root\cimv2\IETelemetry`, and click **Connect**. + + ![Configuration Manager, with the Connect to Windows Management Instrumentation (WMI) box](images/ie11-inventory-addclassconnectscreen.png) + +4. Select the check boxes next to the following classes, and then click **OK**: + + - IESystemInfo + + - IEURLInfo + + - IECountInfo + +5. Click **OK** to close the default windows.
+Your environment is now ready to collect your hardware inventory and review the sample reports. + +### Collect your hardware inventory using the MOF Editor with a MOF import file +You can collect your hardware inventory using the MOF Editor and a MOF import file. + +**To collect your inventory** + +1. From the Configuration Manager, click **Administration**, click **Client Settings**, double-click **Default Client Settings**, click **Hardware Inventory**, and then click **Set Classes**. + +2. Click **Import**, choose the MOF file from the downloaded package we provided, and click **Open**. + +3. Pick the inventory items to install, and then click **Import**. + +4. Click **OK** to close the default windows.
+Your environment is now ready to collect your hardware inventory and review the sample reports. + +### Collect your hardware inventory using the SMS\DEF.MOF file +You can collect your hardware inventory using the using the Systems Management Server (SMS\DEF.MOF) file. + +**To collect your inventory** + +1. Using a text editor like Notepad, open the SMS\DEF.MOF file, located in your `\inboxes\clifiles.src\hinv` directory. + +2. Add this text to the end of the file: + + ``` + [SMS_Report (TRUE), + SMS_Group_Name ("IESystemInfo"), + SMS_Class_ID ("MICROSOFT|IESystemInfo|1.0"), + Namespace ("root\\\\cimv2\\\\IETelemetry") ] + Class IESystemInfo: SMS_Class_Template + { + [SMS_Report (TRUE), Key ] + String SystemKey; + [SMS_Report (TRUE) ] + String IEVer; + }; + + [SMS_Report (TRUE), + SMS_Group_Name ("IEURLInfo"), + SMS_Class_ID ("MICROSOFT|IEURLInfo|1.0"), + Namespace ("root\\\\cimv2\\\\IETelemetry") ] + Class IEURLInfo: SMS_Class_Template + { + [SMS_Report (TRUE), Key ] + String URL; + [SMS_Report (TRUE) ] + String Domain; + [SMS_Report (TRUE) ] + UInt32 DocMode; + [SMS_Report (TRUE) ] + UInt32 DocModeReason; + [SMS_Report (TRUE) ] + UInt32 Zone; + [SMS_Report (TRUE) ] + UInt32 BrowserStateReason; + [SMS_Report (TRUE) ] + String ActiveXGUID[]; + [SMS_Report (TRUE) ] + UInt32 CrashCount; + [SMS_Report (TRUE) ] + UInt32 HangCount; + [SMS_Report (TRUE) ] + UInt32 NavigationFailureCount; + [SMS_Report (TRUE) ] + UInt32 NumberOfVisits; + [SMS_Report (TRUE) ] + UInt32 MostRecentNavigationFailure; + }; + + [SMS_Report (TRUE), + SMS_Group_Name ("IECountInfo"), + SMS_Class_ID ("MICROSOFT|IECountInfo|1.0"), + Namespace ("root\\\\cimv2\\\\IETelemetry") ] + Class IECountInfo: SMS_Class_Template + { + [SMS_Report (TRUE), Key ] + String CountKey; + [SMS_Report (TRUE) ] + UInt32 CrashCount; + [SMS_Report (TRUE) ] + UInt32 HangCount; + [SMS_Report (TRUE) ] + UInt32 NavigationFailureCount; + }; + ``` + +3. Save the file and close it to the same location.
+Your environment is now ready to collect your hardware inventory and review the sample reports. + +### Viewing the sample reports +The sample reports, **SCCM Report Sample – ActiveX.rdl** and **SCCM Report Sample – Site Discovery.rdl**, work with System Center 2012, so you can review your collected data. + +### SCCM Report Sample – ActiveX.rdl +Gives you a list of all of the ActiveX-related sites visited by the client computer. + +![ActiveX.rdl report, lists all ActiveX-related sites visited by the client computer](images/configmgractivexreport.png) + +### SCCM Report Sample – Site Discovery.rdl +Gives you a list of all of the sites visited by the client computer. + +![Site Discovery.rdl report, lists all websites visited by the client computer](images/ie-site-discovery-sample-report.png) + +## View the collected XML data +After the XML files are created, you can use your own solutions to extract and parse the data. The data will look like: + +``` xml + + + [dword] + [dword] + [dword] + + + [string] + + [guid] + + [dword] + [dword] + [dword] + [dword] + [dword] + [dword] + [dword] + [dword] + [string] + [dword] + + … + … + +``` +You can import this XML data into the [Enterprise Mode Site List Manager](http://go.microsoft.com/fwlink/p/?linkid=394378), automatically adding the included sites to your Enterprise Mode site list. + +**To add your XML data to your Enterprise Mode site list** + +1. Open the Enterprise Mode Site List Manager tool, click **File**, and then click **Bulk add from file**. +![Enterprise Mode Site List Manager with Bulk add from file option](images/bulkadd-emiesitelistmgr.png) + +2. Go to your XML file to add the included sites to the tool, and then click **Open**.
+Each site is validated and if successful, added to the global site list when you click **OK** to close the menu. If a site doesn’t pass validation, you can try to fix the issues or pick the site and click **Add to list** to ignore the validation problem. For more information about fixing validation problems, see [Fix validation problems using the Enterprise Mode Site List Manager tool](fix-validation-problems-using-the-enterprise-mode-site-list-manager-tool.md). + +3. Click **OK** to close the **Bulk add sites to the list** menu. + +## Turn off data collection on your client computers +After you’ve collected your data, you’ll need to turn Enterprise Site Discovery off. + +**To stop collecting data, using PowerShell** + +- On your client computer, start Windows PowerShell in elevated mode (using admin privileges) and run `IETelemetrySetUp.ps1`, using this command: `powershell -ExecutionPolicy Bypass .\IETElemetrySetUp.ps1 –IEFeatureOff`.

**Note**
+Turning off data collection only disables the Enterprise Site Discovery feature – all data already written to WMI stays on your employee’s computer. + +   +**To stop collecting data, using Group Policy** + +1. Open your Group Policy editor, go to `Administrative Templates\Windows Components\Internet Explorer\Turn on Site Discovery WMI output`, and click **Off**. + +2. Go to `Administrative Templates\Windows Components\Internet Explorer\Turn on Site Discovery XML output`, and clear the file path location. + +### Delete already stored data from client computers +You can completely remove the data stored on your employee’s computers. + +**To delete all existing data** + +- On the client computer, start PowerShell in elevated mode (using admin privileges) and run these four commands: + + - `Remove-WmiObject -Namespace root/cimv2/IETelemetry IEURLInfo` + + - `Remove-WmiObject -Namespace root/cimv2/IETelemetry IESystemInfo` + + - `Remove-WmiObject -Namespace root/cimv2/IETelemetry IECountInfo` + + - `Remove-Item -Path 'HKCU:\Software\Microsoft\Internet Explorer\WMITelemetry'` + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/create-install-packages-for-multiple-operating-systems-or-languages.md b/browsers/internet-explorer-11/ie11-deploy-guide/create-install-packages-for-multiple-operating-systems-or-languages.md new file mode 100644 index 0000000000..3e61e28520 --- /dev/null +++ b/browsers/internet-explorer-11/ie11-deploy-guide/create-install-packages-for-multiple-operating-systems-or-languages.md @@ -0,0 +1,36 @@ +--- +Description: Create packages for multiple operating systems or languages +ms.assetid: 44051f9d-63a7-43bf-a427-d0a0a1c717da +ms.prod: IE11 +ms.mktglfcycl: deploy +ms.sitesec: library +title: Create packages for multiple operating systems or languages +--- + +# Create packages for multiple operating systems or languages +You'll create multiple versions of your custom browser package if: + +- You support more than 1 version of Windows®. + +- You support more than 1 language. + +- You have custom installation packages with only minor differences. Like, having a different phone number. + +**To create a new package** + +1. Create an installation package using the Internet Explorer Customization Wizard 11, as described in the [Internet Explorer Customization Wizard 11 options](http://go.microsoft.com/fwlink/p/?linkid=328022) topic. + +2. Go to your **CIE/Custom** folder and rename the `Install.ins`file. For example, if you need a version for employees in Texas, rename the file to Texas.ins. + +3. Run the wizard again, using the Custom folder as the destination directory.

+**Important**
+Except for the **Title bar** text, **Favorites**, **Links bar**, **Home page**, and **Search bar**, keep all of your wizard settings the same for all of your build computers. + +   + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/customize-ie11-install-packages.md b/browsers/internet-explorer-11/ie11-deploy-guide/customize-ie11-install-packages.md new file mode 100644 index 0000000000..2b5be7deff --- /dev/null +++ b/browsers/internet-explorer-11/ie11-deploy-guide/customize-ie11-install-packages.md @@ -0,0 +1,37 @@ +--- +Description: Customize Internet Explorer 11 installation packages +ms.assetid: 10a14a09-673b-4f8b-8d12-64036135e7fd +ms.prod: IE11 +ms.mktglfcycl: deploy +ms.sitesec: library +title: Customize Internet Explorer 11 installation packages +--- + +# Customize Internet Explorer 11 installation packages +You can customize Internet Explorer 11 to support various browser behaviors, multiple operating system versions and languages, and Setup information (.inf) files. + +|Topic |Description | +|------------------------------------------------------------------------|----------------------------------------------------| +|[Using IEAK 11 to create packages](using-ieak-11-to-create-install-packages.md) |How to use the Internet Explorer Administration Kit 11 (IEAK 11) and the IE Customization Wizard 11 to set up, configure, deploy, and maintain IE11 | +|[Create packages for multiple operating systems or languages](create-install-packages-for-multiple-operating-systems-or-languages.md) |How to create multiple versions of your custom installation package, to support multiple operating systems or languages. | +|[Using .INF files to create packages](using-inf-files-to-create-install-packages.md) |How to use the Microsoft® Windows Setup Engine to automate setup tasks and customize your component installations. | + + + +In addition, you can configure IE before, during, or after deployment, using these tools: + +- **IE Administration Kit 11 (IEAK 11)**. Creates customized installation packages that can be deployed through your software distribution system. For more information about the IEAK 11, see [IEAK 11 - Internet Explorer Administration Kit 11 Users Guide](http://go.microsoft.com/fwlink/p/?linkid=327741). + +- **Group Policy**. Configures and enforces IE11 settings. For more information about settings and configuration options, see [Group policy objects and Internet Explorer 11 (IE11)](gpo-and-ie11.md). + +- **Unattend.xml**. Customizes some of the IE settings during your Windows installation. This option only applies if you're updating a Windows image with IE11.

**Note**
+You'll only see the new IE11 Unattend.xml settings if your Unattend.xml file's associated with a Windows image that includes the IE11 update. For more information about editing and using the Unattend.xml file, see [Unattended Windows Setup Reference](http://go.microsoft.com/fwlink/?LinkId=276788). For more information about using the Windows System Image Manager, see [Windows System Image Manager Technical Reference](http://go.microsoft.com/fwlink/?LinkId=276789). + +   + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/delete-sites-from-your-enterprise-mode-site-list-in-the-enterprise-mode-site-list-manager.md b/browsers/internet-explorer-11/ie11-deploy-guide/delete-sites-from-your-enterprise-mode-site-list-in-the-enterprise-mode-site-list-manager.md new file mode 100644 index 0000000000..e914da5071 --- /dev/null +++ b/browsers/internet-explorer-11/ie11-deploy-guide/delete-sites-from-your-enterprise-mode-site-list-in-the-enterprise-mode-site-list-manager.md @@ -0,0 +1,45 @@ +--- +Description: You can delete a single site from your global Enterprise Mode site list. If you delete a site by mistake, you’ll need to manually add it back using the instructions in the following topics, based on operating system. +title: Delete sites from your Enterprise Mode site list in the Enterprise Mode Site List Manager +ms.assetid: 41413459-b57f-48da-aedb-4cbec1e2981a +ms.prod: IE11 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: appcompat +--- + +# Delete sites from your Enterprise Mode site list in the Enterprise Mode Site List Manager +**Last updated** + +- November 12, 2015 + +**Applies to:** + +- Windows 10 +- Windows 8.1 +- Windows 7 +- Windows Server 2012 R2 +- Windows Server 2008 R2 with Service Pack 1 (SP1) + + +**To delete a single site from your global Enterprise Mode site list** + +- From the Enterprise Mode Site List Manager, pick the site you want to delete, and then click **Delete**.
+The site is permanently removed from your list. + +If you delete a site by mistake, you’ll need to manually add it back using the instructions in the following topics, based on operating system. + +- [Add sites to the Enterprise Mode site list using the Windows 10 Enterprise Mode Site List Manager tool](add-single-sites-to-enterprise-mode-site-list-using-the-version-2-enterprise-mode-tool.md) + +- [Add sites to the Enterprise Mode site list using the Windows 7 and Windows 8.1 Enterprise Mode Site List Manager tool](add-single-sites-to-enterprise-mode-site-list-using-the-version-1-enterprise-mode-tool.md) + +## Related topics +- [Download the Enterprise Mode Site List Manager for Windows 10 tool](http://go.microsoft.com/fwlink/?LinkId=716853) +- [Download the Enterprise Mode Site List Manager for Windows 7 and Windows 8.1 tool](http://go.microsoft.com/fwlink/?LinkID=394378) +- [Use the Enterprise Mode Site List Manager tool](use-the-enterprise-mode-site-list-manager-tool.md) +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/deploy-ie11-using-automatic-version-synchronization-avs.md b/browsers/internet-explorer-11/ie11-deploy-guide/deploy-ie11-using-automatic-version-synchronization-avs.md new file mode 100644 index 0000000000..bc9e27aade --- /dev/null +++ b/browsers/internet-explorer-11/ie11-deploy-guide/deploy-ie11-using-automatic-version-synchronization-avs.md @@ -0,0 +1,27 @@ +--- +Description: You can deploy Internet Explorer 11 to your users' computers by using your custom browser packages and Automatic Version Synchronization (AVS). +ms.assetid: f51224bd-3371-4551-821d-1d62310e3384 +ms.prod: IE11 +ms.mktglfcycl: deploy +ms.sitesec: library +title: Deploy Internet Explorer 11 using Automatic Version Synchronization (AVS) +--- +# Deploy Internet Explorer 11 using Automatic Version Synchronization (AVS) +You can deploy Internet Explorer 11 to your users' computers by using your custom browser packages and Automatic Version Synchronization (AVS). + +## What is Automatic Version Synchronization? +Automatic Version Synchronization (AVS) lets you use the Internet Explorer Administration Kit 11 (IEAK 11) to synchronize the IE11 setup files on a local computer with the latest setup files on the web. + +You must synchronize the setup files at least once on the local computer, for each language and operating system combination, before proceeding through the rest of the wizard. If your packages have more than one version of IE, you need to keep the versions in separate component download folders, which can be pointed to from the **File Locations** page of the IEAK 11. For more information about using the AVS feature, see [Automatic Version Synchronization: Internet Explorer Customization Wizard](http://go.microsoft.com/fwlink/p/?linkid=327744). + +##Related topics +- [IEAK 11 - Internet Explorer Administration Kit 11 Users Guide](https://technet.microsoft.com/en-us/library/dn454924.aspx) +- [Customize Internet Explorer 11 installation packages](customize-ie11-install-packages.md) + + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/deploy-ie11-using-software-distribution-tools.md b/browsers/internet-explorer-11/ie11-deploy-guide/deploy-ie11-using-software-distribution-tools.md new file mode 100644 index 0000000000..f360e7606b --- /dev/null +++ b/browsers/internet-explorer-11/ie11-deploy-guide/deploy-ie11-using-software-distribution-tools.md @@ -0,0 +1,26 @@ +--- +Description: Deploy Internet Explorer 11 using software distribution tools +ms.assetid: fd027775-651a-41e1-8ec3-d32eca876d8a +ms.prod: IE11 +ms.mktglfcycl: deploy +ms.sitesec: library +title: Deploy Internet Explorer 11 using software distribution tools +--- + +# Deploy Internet Explorer 11 using software distribution tools +If you already manage software distribution and updates on your network through software distribution tools, you can also use these tools for ongoing deployments of Internet Explorer. Software distribution tools include: + +- **System Center R2 2012 System Center 2012 R2 Configuration Manager.** Deploy and install Internet Explorer 11 on your user's computers through a software distribution package. For more information about using this tool, see [System Center R2 2012 Configuration Manager](http://go.microsoft.com/fwlink/p/?LinkID=276664). + +- **Windows Server Update Services (WSUS).** Download a single copy of the IE11 updates, caching them to local servers so your users' computers can receive the updates directly from the WSUS servers, instead of through Windows Update. For more information about using this tool, see [Windows Server Update Services](http://go.microsoft.com/fwlink/p/?LinkID=276790). + +- **Group Policy Software Installation.** Deploy and install IE11 on your user's computers through a combination of Group Policy and Microsoft Active Directory. For more information about using this tool, see [Group Policy Software Installation overview](http://go.microsoft.com/fwlink/p/?LinkId=296365). + +- **Microsoft Deployment Toolkit (MDT).** Add the IE11 update to your deployment share, using MDT to update your previously-deployed Windows image. For more information about using this tool, see [Microsoft Deployment Toolkit (MDT)](http://go.microsoft.com/fwlink/p/?LinkID=331148). + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/deploy-pinned-sites-using-mdt-2013.md b/browsers/internet-explorer-11/ie11-deploy-guide/deploy-pinned-sites-using-mdt-2013.md new file mode 100644 index 0000000000..42c1820efd --- /dev/null +++ b/browsers/internet-explorer-11/ie11-deploy-guide/deploy-pinned-sites-using-mdt-2013.md @@ -0,0 +1,117 @@ +--- +Description: 'You can pin websites to the Windows 8.1 taskbar for quick access.' +ms.assetid: 24f4dcac-9032-4fe8-bf6d-2d712d61cb0c +ms.prod: IE11 +ms.mktglfcycl: deploy +ms.sitesec: library +title: 'Deploy pinned websites using Microsoft Deployment Toolkit (MDT) 2013' +--- + +# Deploy pinned websites using Microsoft Deployment Toolkit (MDT) 2013 +**Last updated** + +- November 12, 2015 + +**Applies to:** + +- Windows 10 +- Windows 8.1 +- Windows 7 +- Windows Server 2012 R2 +- Windows Server 2008 R2 with Service Pack 1 (SP1) + +You can pin websites to the Windows 8.1 taskbar for quick access. You pin a website simply by dragging its tab to the taskbar. Some websites can also extend the icon’s Jump List. + +The ability to pin websites to the Windows 8.1 taskbar can help make end users in businesses more productive. As an IT professional, for example, you can pin intranet and SharePoint websites to the taskbar to make them immediately available to users. In this article, you learn how to deploy pinned websites by using Lite Touch Installation in the [Microsoft Deployment Toolkit (MDT) 2013](http://go.microsoft.com/fwlink/?LinkId=398474). + +## Deploying pinned websites in MDT 2013 +This topic requires that you have a complete MDT 2013 deployment share that contains Windows 8.1 which comes with Internet Explorer 11. If you’re deploying to Windows 7 clients and need to learn how to add IE11 to an MDT 2013 deployment share as an update, see [Installing Internet Explorer 11 using Microsoft Deployment Toolkit (MDT)](http://go.microsoft.com/fwlink/?LinkId=398475) in the TechNet library. + +Deploying pinned websites in MDT 2013 is a 4-step process: + +1. Create a .website file for each website that you want to deploy. When you pin a website to the taskbar, Windows 8.1 creates a .website file that describes how the icon should look and feel. + +2. Copy the .website files to your deployment share. + +3. Copy the .website files to your target computers. + +4. Edit the task sequence of your Unattend.xml answer files to pin the websites to the taskbar. In particular, you want to add each .website file to the **TaskbarLinks** item in Unattend.xml during oobeSystem phase. You can add up to six .website files to the **TaskbarLinks** item. + +Pinned websites are immediately available to every user who logs on to the computer although the user must click each icon to populate its Jump List. + +**Important**
+To follow the examples in this topic, you’ll need to pin the Bing (http://www.bing.com/) and MSN (http://www.msn.com/) websites to the taskbar. + +### Step 1: Creating .website files +The first step is to create a .website file for each website that you want to pin to the Windows 8.1 taskbar during deployment. A .website file is like a shortcut, except it’s a plain text file that describes not only the website’s URL but also how the icon looks. + +**To create each .website file** + +1. Open the website in IE11. + +2. Drag the website’s tab and drop it on the Windows 8.1 taskbar. + +3. Go to `%USERPROFILE%\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar` in Windows Explorer, and copy the bing.website and msn.website files to your desktop. + +### Step 2: Copying the .website files to the deployment share +Next, you must enable your deployment share to copy the bing.website and msn.website files to the **Start** menu on each target computer. + +**To copy .website files to the deployment share** + +1. Open your MDT 2013 deployment share in Windows Explorer. + +2. In the `$OEM$` folder, create the path `$1\Users\Public\Public Links`. If the `$OEM$` folder doesn’t exist, create it at the root of your deployment share. + +3. Copy the bing.website and msn.website files from your desktop to `$OEM$\$1\Users\Public\Public Links` in your deployment share.
+ +### Step 3: Copying .website files to target computers +After your operating system is installed on the target computer, you need to copy the .website files over so they can be pinned to the taskbar. + +**To copy .website files to target computers** + +1. In the **Deployment Workbench** of MDT 2013, open the deployment share containing the task sequence during which you want to deploy pinned websites, and then click **Task Sequences**. + +2. In the right pane of the **Deployment Workbench**, right-click your task sequence (create a new one if you don’t have one yet), and click **Properties**. + +3. In the **Task Sequence** tab, click the **Postinstall** folder, click **General** from the **Add** button, and then click **Run Command Line**. + +4. Rename the newly created item to *Copy Files* and move it up to the top of the **Postinstall** folder. + +5. In the **Command Line** box enter the following text, `xcopy “%DEPLOYROOT%\$OEM$\$1” “%OSDisk%\” /yqe`. + +6. Click the **Apply** button to save your changes. + +### Step 4: Pinning .website files to the Taskbar +With the .website files ready to copy to the **Public Links** folder on target computers for all users, the last step is to edit the Unattend.xml answer files to pin those .website files to the taskbar. You will need to complete the following steps for each task sequence during which you want to pin these websites to the taskbar. + +**To pin .website files to the Taskbar** + +1. Open the Windows System Image Manager (Windows SIM). + +2. On the **OS Info** tab, click **Edit Unattend.xml** to open the Unattend.xml file. + +2. In the **Windows Image** pane, under **Components** and then **Microsoft-Windows-Shell-Setup**, right-click **TaskbarLinks**, and then click **Add Setting to Pass 7 oobeSystem**. + +3. In the **TaskbarLinks Properties** pane, add the relative path to the target computer’s (not the deployment share’s) .website files that you created earlier. You can add up to six links to the **TaskbarLinks** item. For example, `%PUBLIC%\Users\Public\Public Links\Bing.website` and `%PUBLIC%\Users\Public\Public Links\MSN.website` + +4. On the **File** menu, click **Save Answer File**, and then close Windows SIM. + +5. To close the task sequence, click **OK**. + +## Updating intranet websites for pinning +The MDT 2013 deployment share and task sequences are now ready to pin websites to the taskbar during deployment. This pinning feature can include intranet sites important in your organization. + +You can make your intranet websites act more like applications by extending them to fully support the Windows 8.1 taskbar. This includes creating custom Jump Lists, thumbnail previews, and notifications. For info about extending your intranet websites, see [Pinned Sites Developer Documentation](http://go.microsoft.com/fwlink/?LinkId=398484) on MSDN. For more ideas about what to pin, see [Add-ons](http://go.microsoft.com/fwlink/?LinkId=398483) in the Internet Explorer Gallery. + +## Related topics +- [Unattended Windows Setup Reference](http://go.microsoft.com/fwlink/?LinkId=276788) +- [Windows System Image Manager Technical Reference](http://go.microsoft.com/fwlink/?LinkId=276789) +- [Microsoft Deployment Toolkit (MDT)](http://go.microsoft.com/fwlink/?LinkId=331148) +- [Windows ADK Overview](http://go.microsoft.com/fwlink/?LinkId=276669) + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/deprecated-document-modes.md b/browsers/internet-explorer-11/ie11-deploy-guide/deprecated-document-modes.md new file mode 100644 index 0000000000..8c73beb8bb --- /dev/null +++ b/browsers/internet-explorer-11/ie11-deploy-guide/deprecated-document-modes.md @@ -0,0 +1,57 @@ +--- +Description: 'Windows Internet Explorer 8 introduced document modes as a way to move from the proprietary coding of web features to a more standardized type of coding that could run on multiple browsers and devices.' +ms.assetid: 00cb1f39-2b20-4d37-9436-62dc03a6320b +ms.prod: IE11 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: appcompat +title: Deprecated document modes and Internet Explorer 11 +--- + +# Deprecated document modes and Internet Explorer 11 +**Last updated** + +- November 12, 2015 + +**Applies to:** + +- Windows 10 +- Windows 8.1 +- Windows 7 +- Windows Server 2012 R2 +- Windows Server 2008 R2 with Service Pack 1 (SP1) + +Windows Internet Explorer 8 introduced document modes as a way to move from the proprietary coding of web features to a more standardized type of coding that could run on multiple browsers and devices. Starting with Windows 10, we’re deprecating document modes. + +This means that while Internet Explorer 11 will continue to support document modes, Microsoft Edge won’t. And because of that, it also means that if you want to use Microsoft Edge, you’re going to have to update your legacy webpages and apps to support modern features, browsers, and devices. + +**Note**
+For specific details about the technologies and APIs that are no longer supported in Microsoft Edge, see [A break from the past, part 2: Saying goodbye to ActiveX, VBScript, attachEvent](http://go.microsoft.com/fwlink/?LinkId=615953). + +## What is document mode? +Each release after Internet Explorer 8 has helped with the transition by introducing additional document modes that emulated previously supported versions, while also introducing support for features defined by industry standards. During this time, numerous websites and apps were updated to the latest and greatest industry standards, while many other sites and apps continued to simply rely on document modes to work properly. + +Because our goal with Microsoft Edge is to give users the best site and app viewing experience possible, we’ve decided to stop support for document modes. All websites and apps using legacy features and code will need to be updated to rely on the new modern standards and practices. + +If you have legacy sites and apps that can’t be updated to modern standards, you can continue to use IE11 and document modes. We recommend that you use the **IE11 Standards document mode** because it represents the highest support available for modern standards. You should also use the HTML5 document type declaration to turn on the latest supported standards while using IE11:``. + +## Document modes and IE11 +The compatibility improvements made in IE11 lets older websites just work in the latest standards mode, by default, without requiring emulation of the previous browser behavior. Because older websites are now just working, we’ve decided that Internet Explorer 10 document mode will be the last new document mode. Instead, developers will need to move to using the IE11 document mode going forward. + +## Document mode selection flowchart +This flowchart shows how IE11 works when document modes are used. + +![Flowchart detailing how document modes are chosen in IE11](images/docmodeflow2.png) + +## Known Issues with Internet Explorer 8 document mode in Enterprise Mode +The default document mode for Enterprise Mode is Internet Explorer 8. While this mode provides a strong emulation of that browser, it isn’t an exact match. For example, Windows Internet Explorer 9 fundamentally changed how document modes work with iframes and document modes can’t undo architectural changes. It’s also a known issue that Windows 10 supports GDI font rendering while using Enterprise Mode, but uses natural metrics once outside of Enterprise Mode. + +## Related topics +- [Enterprise Mode for Internet Explorer 11](enterprise-mode-overview-for-ie11.md) + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/edit-the-enterprise-mode-site-list-using-the-enterprise-mode-site-list-manager.md b/browsers/internet-explorer-11/ie11-deploy-guide/edit-the-enterprise-mode-site-list-using-the-enterprise-mode-site-list-manager.md new file mode 100644 index 0000000000..17cb2ac50b --- /dev/null +++ b/browsers/internet-explorer-11/ie11-deploy-guide/edit-the-enterprise-mode-site-list-using-the-enterprise-mode-site-list-manager.md @@ -0,0 +1,49 @@ +--- +Description: 'You can use Internet Explorer 11 and the Enterprise Mode Site List Manager tool to change whether page rendering should use Enterprise Mode or the default Internet Explorer browser configuration. You can also add, remove, or delete associated comments.' +ms.assetid: 76aa9a85-6190-4c3a-bc25-0f914de228ea +ms.prod: IE11 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: appcompat +title: Edit the Enterprise Mode site list using the Enterprise Mode Site List Manager +--- + +# Edit the Enterprise Mode site list using the Enterprise Mode Site List Manager +**Last updated** + +- December 3, 2015 + +**Applies to:** + +- Windows 10 +- Windows 8.1 +- Windows 7 +- Windows Server 2012 R2 +- Windows Server 2008 R2 with Service Pack 1 (SP1) + +You can use Internet Explorer 11 and the Enterprise Mode Site List Manager tool to change whether page rendering should use Enterprise Mode or the default Internet Explorer browser configuration. You can also add, remove, or delete associated comments. + +If you need to edit a lot of websites, you probably don’t want to do it one at a time. Instead, you can edit your saved XML or TXT file and add the sites back again. For information about how to do this, depending on your operating system and schema version, see [Add multiple sites to the Enterprise Mode site list using a file and Windows 10 Enterprise Mode Site List Manager tool](add-multiple-sites-to-enterprise-mode-site-list-using-the-version-2-schema-and-enterprise-mode-tool.md) or [Add multiple sites to the Enterprise Mode site list using a file and the Windows 7 and Windows 8.1 Enterprise Mode Site List Manager tool](add-multiple-sites-to-enterprise-mode-site-list-using-using-the-version-1-schema-and-enterprise-mode-tool.md). + +**To change how your page renders** + +1. In the Enterprise Mode Site List Manager tool, double-click the site you want to change. + +2. Change the comment or the compatibility mode option. + +3. Click **Save** to validate your changes and to add the updated information to your site list.
+If your change passes validation, it’s added to the global site list. If the update doesn’t pass validation, you’ll get an error message explaining the problem. You’ll then be able to either cancel the update or ignore the validation problem and add it to your list anyway. For more information about fixing validation issues, see [Fix validation problems using the Enterprise Mode Site List Manager tool](fix-validation-problems-using-the-enterprise-mode-site-list-manager-tool.md). + +4. On the **File** menu, click **Save to XML**, and save the updated file.
+You can save the file locally or to a network share. However, you must make sure you deploy it to the location specified in your registry key. For more information about the registry key, see [Turn on Enterprise Mode and use a site list](turn-on-enterprise-mode-and-use-a-site-list.md). + +## Related topics +- [Download the Enterprise Mode Site List Manager for Windows 10 tool](http://go.microsoft.com/fwlink/?LinkId=716853) +- [Download the Enterprise Mode Site List Manager for Windows 7 and Windows 8.1 tool](http://go.microsoft.com/fwlink/?LinkID=394378) +- [Use the Enterprise Mode Site List Manager tool](use-the-enterprise-mode-site-list-manager-tool.md) +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/enable-and-disable-add-ons-using-administrative-templates-and-group-policy.md b/browsers/internet-explorer-11/ie11-deploy-guide/enable-and-disable-add-ons-using-administrative-templates-and-group-policy.md new file mode 100644 index 0000000000..9be3e431ab --- /dev/null +++ b/browsers/internet-explorer-11/ie11-deploy-guide/enable-and-disable-add-ons-using-administrative-templates-and-group-policy.md @@ -0,0 +1,94 @@ +--- +Description: 'Enable and disable add-ons using administrative templates and group policy' +ms.assetid: c6fe1cd3-0bfc-4d23-8016-c9601f674c0b +ms.prod: IE11 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: security +title: 'Enable and disable add-ons using administrative templates and group policy' +--- + +# Enable and disable add-ons using administrative templates and group policy +Add-ons let your employees personalize Internet Explorer. You can manage IE add-ons using Group Policy and Group Policy templates. + +There are 4 types of add-ons: + +- **Search Providers.** Type a term and see suggestions provided by your search provider. + +- **Accelerators.** Highlight text on a web page and then click the blue **Accelerator** icon to email, map, search, translate, or do many other tasks. + +- **Web Slices.** Subscribe to parts of a website to get real-time information on the Favorites bar. + +- **Toolbars.** Add features (like stock tickers) to your browser. + +## Using the Local Group Policy Editor to manage group policy objects +You can use the Local Group Policy Editor to change how add-ons work in your organization. + +**To manage add-ons** + +1. In the Local Group Policy Editor, go to `Computer Configuration\Administrative Templates\Windows Components\Internet Explorer`. + +2. Change any or all of these settings to match your company’s policy and requirements. + + - Turn off add-on performance notifications + + - Automatically activate newly installed add-ons + + - Do not allow users to enable or disable add-ons + +3. Go into the **Internet Control Panel\\Advance Page** folder, where you can change: + + - Do not allow resetting IE settings + + - Allow third-party browser extensions + +4. Go into the **Security Features\\Add-on Management** folder, where you can change: + + - Add-on List + + - Deny all add-ons unless specifically allowed in the Add-on List + + - Turn off Adobe Flash in IE and prevent applications from using IE technology to instantiate Flash objects + +5. Close the Local Group Policy Editor when you’re done. + +## Using the CLSID and Administrative Templates to manage group policy objects +Because every add-on has a Class ID (CLSID), you can use it to enable and disable specific add-ons, using Group Policy and Administrative Templates. + +**To manage add-ons** + +1. Get the CLSID for the add-on you want to enable or disable: + + 1. Open IE, click **Tools**, and then click **Manage Add-ons**. + + 2. Pick the add-on you want to change, and then right-click **More Information**. + + 3. Click **Copy** and then close **Manage Add-ons** and IE. + +2. From the copied information, select and copy just the **Class ID** value. + +3. Open the Group Policy Management Editor and go to `Computer Configuration\Policies\Administrative Templates\Windows Components\Internet Explorer\Security Features\Add-on Management`. +
**-OR-**
+Open the Local Group Policy Editor and go to `Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Add-on Management`. + +4. Open the **Add-on List** Group Policy Object, pick **Enabled**, and then click **Show**.
+**Show Contents** box appears. + +5. In **Value Name**, put your copied Class ID. + +6. In **Value**, put: + + - **0**. The add-on is disabled and your employees can’t change it. + + - **1**. The add-on is enabled and your employees can’t change it. + + - **2**. The add-on is enabled and your employees can change it. + +7. Click **OK** and close the Group Policy editor. + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/enhanced-protected-mode-problems-with-ie11.md b/browsers/internet-explorer-11/ie11-deploy-guide/enhanced-protected-mode-problems-with-ie11.md new file mode 100644 index 0000000000..f6c1cc838b --- /dev/null +++ b/browsers/internet-explorer-11/ie11-deploy-guide/enhanced-protected-mode-problems-with-ie11.md @@ -0,0 +1,23 @@ +--- +Description: Enhanced Protected Mode problems with Internet Explorer +ms.assetid: 15890ad1-733d-4f7e-a318-10399b389f45 +ms.prod: IE11 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: security +title: Enhanced Protected Mode problems with Internet Explorer +--- + +# Enhanced Protected Mode problems with Internet Explorer +Enhanced Protected Mode further restricts Protected Mode to deny potential attackers access to sensitive or personal information. If this feature is turned on, users might start to see errors asking them to turn it off, like **This webpage wants to run "npctrl.dll. If you trust this site, you can disable Enhanced Protected Mode for this site to run the control**. If your users click the **Disable** box, Enhanced Protected Mode is turned off for only the single visit to that specific site. After the user leaves the site, Enhanced Protected Mode is automatically turned back on. + +You can use your company’s Group Policy to turn Enhanced Protected Mode on or off for all users. For more information, see the [Group policy objects and Internet Explorer 11 (IE11)](gpo-and-ie11.md) information in this guide. + +For more information about Enhanced Protected Mode, see the [Enhanced Protected Mode](http://go.microsoft.com/fwlink/p/?LinkId=267512) post on IEBlog, and both the [Understanding Enhanced Protected Mode](http://go.microsoft.com/fwlink/?LinkId=282662) and the [Enhanced Protected Mode and Local Files](http://go.microsoft.com/fwlink/?LinkId=282663) blog posts on IEInternals. + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/enterprise-mode-overview-for-ie11.md b/browsers/internet-explorer-11/ie11-deploy-guide/enterprise-mode-overview-for-ie11.md new file mode 100644 index 0000000000..5636404280 --- /dev/null +++ b/browsers/internet-explorer-11/ie11-deploy-guide/enterprise-mode-overview-for-ie11.md @@ -0,0 +1,49 @@ +--- +Description: 'Use the topics in this section to learn how to set up and use Enterprise Mode and the Enterprise Mode Site List Manager tool in your company.' +ms.assetid: d52ba8ba-b3c7-4314-ba14-0610e1d8456e +ms.prod: IE11 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: appcompat +title: Enterprise Mode for Internet Explorer 11 +--- + +# Enterprise Mode for Internet Explorer 11 +**Last updated** + +- November 12, 2015 + +**Applies to:** + +- Windows 10 +- Windows 8.1 +- Windows 7 +- Windows Server 2012 R2 +- Windows Server 2008 R2 with Service Pack 1 (SP1) + +Use the topics in this section to learn how to set up and use Enterprise Mode and the Enterprise Mode Site List Manager tool in your company. + +## In this section +|Topic |Description | +|----------------------------------------------------------------------------|-----------------------------------------------------------------------------------| +|[What is Enterprise Mode?](what-is-enterprise-mode.md) |Includes descriptions of the features of Enterprise Mode. | +|[Set up Enterprise Mode logging and data collection](set-up-enterprise-mode-logging-and-data-collection.md) |Guidance about how to turn on local control of Enterprise Mode and how to use ASP or the GitHub sample to collect data from your local computers. | +|[Turn on Enterprise Mode and use a site list](turn-on-enterprise-mode-and-use-a-site-list.md) |Guidance about how to turn on Enterprise Mode and set up a site list, using Group Policy or the registry. | +|[Enterprise Mode schema v.2 guidance for Windows 10 devices](enterprise-mode-schema-version-2-guidance.md) |Guidance about how to write the XML for your site list, including what not to include, how to use trailing slashes, and info about how to target specific sites. | +|[Enterprise Mode schema v.1 guidance for Windows 7 and Windows 8.1 devices](enterprise-mode-schema-version-1-guidance.md) |Guidance about how to write the XML for your site list, including what not to include, how to use trailing slashes, and info about how to target specific sites. | +|[Check for a new Enterprise Mode site list xml file](check-for-new-enterprise-mode-site-list-xml-file.md) |Guidance about how the Enterprise Mode functionality looks for your updated site list. | +|[Turn on local control and logging for Enterprise Mode](turn-on-local-control-and-logging-for-enterprise-mode.md) |Guidance about how to turn on local control of Enterprise Mode, using Group Policy or the registry.| +|[Use the Enterprise Mode Site List Manager tool](use-the-enterprise-mode-site-list-manager-tool.md) |Guidance about how to use the Enterprise Mode Site List Manager tool, including how to add and update sites on your site list. | +|[Using Enterprise Mode](using-enterprise-mode.md) |Guidance about how to turn on either IE7 Enterprise Mode or IE8 Enterprise Mode. | +|[Fix web compatibility issues using document modes and the Enterprise Mode Site List](fix-compat-issues-with-doc-modes-and-enterprise-mode-site-list.md) |Guidance about how to decide and test whether to use document modes or Enterprise Mode to help fix compatibility issues. | +|[Remove sites from a local Enterprise Mode site list](remove-sites-from-a-local-enterprise-mode-site-list.md) |Guidance about how to remove websites from a device's local Enterprise Mode site list. | +|[Remove sites from a local compatibility view list](remove-sites-from-a-local-compatibililty-view-list.md) |Guidance about how to remove websites from a device's local compatibility view list. | +|[Turn off Enterprise Mode](turn-off-enterprise-mode.md) |Guidance about how to stop using your site list and how to turn off local control, using Group Policy or the registry. | +  + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/enterprise-mode-schema-version-1-guidance.md b/browsers/internet-explorer-11/ie11-deploy-guide/enterprise-mode-schema-version-1-guidance.md new file mode 100644 index 0000000000..965a5214f9 --- /dev/null +++ b/browsers/internet-explorer-11/ie11-deploy-guide/enterprise-mode-schema-version-1-guidance.md @@ -0,0 +1,271 @@ +--- +Description: Use the Enterprise Mode Site List Manager tool to create and update your Enterprise Mode site list for devices running Windows 7 or Windows 8.1 Update. +ms.assetid: 17C61547-82E3-48F2-908D-137A71938823 +ms.prod: IE11 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: appcompat +title: 'Enterprise Mode schema v.1 guidance for Windows 7 and Windows 8.1 Update devices' +--- + +# Enterprise Mode schema v.1 guidance for Windows 7 and Windows 8.1 Update devices +**Last updated** + +- November 12, 2015 + +**Applies to:** + +- Windows 8.1 +- Windows 7 + +Use the Enterprise Mode Site List Manager tool to create and update your Enterprise Mode site list for devices running Windows 7 or Windows 8.1 Update. If you don't want to use the Enterprise Mode Site List Manager, you also have the option to update your XML schema using Notepad, or any other XML-editing app. + +If you're using a Windows 10-based device, we strongly recommend moving to the new schema, v.2. For more info, see [Enterprise Mode schema v.2 guidance for Windows 10 devices](enterprise-mode-schema-version-2-guidance.md). + +## Enterprise Mode schema v.1 example +The following is an example of the Enterprise Mode schema v.1. This schema can run on devices running Windows 7, Windows 8.1, and Windows 10. + +**Important**
+Make sure that you don't specify a protocol when adding your URLs. Using a URL like `contoso.com` automatically applies to both http://contoso.com and https://contoso.com. + +``` xml + + + www.cpandl.com + www.woodgrovebank.com + adatum.com + contoso.com + relecloud.com + /about + + fabrikam.com + /products + + + + contoso.com + /travel + + fabrikam.com + /products + + + +``` + +### Schema elements +This table includes the elements used by the Enterprise Mode schema. + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
ElementDescriptionSupported browser
<rules>Root node for the schema. +

Example +

+<rules version="205">
+  <emie>
+    <domain>contoso.com</domain>
+  </emie>
+</rules>
Internet Explorer 11 and Microsoft Edge
<emie>The parent node for the Enterprise Mode section of the schema. All <domain> entries will have either IE8 Enterprise Mode or IE7 Enterprise Mode applied. +

Example +

+<rules version="205">
+  <emie>
+    <domain>contoso.com</domain>
+  </emie>
+</rules>>
Internet Explorer 11 and Microsoft Edge
<docMode>The parent node for the document mode section of the section. All <domain> entries will get IE5 - IE11 document modes applied. If there's a <domain> element in the <docMode> section that uses the same value as a <domain> element in the <emie> section, the <emie> element is applied. +

Example +

+<rules version="205">
+  <docMode>
+    <domain docMode="7">contoso.com</domain>
+  </docMode>
+</rules>
Internet Explorer 11
<domain>A unique entry added for each site you want to put on the Enterprise Mode site list. The first <domain> element will overrule any additional <domain> elements that use the same value for the section. You can use port numbers for this element. +

Example +

+<emie>
+  <domain>contoso.com:8080</domain>
+</emie>
Internet Explorer 11 and Microsoft Edge
<path>A unique entry added for each path under a domain you want to put on the Enterprise Mode site list. The <path> element is a child of the <domain> element. Additionally, the first <path> element will overrule any additional <path> elements in the schema section. +

Example +

+<emie>
+  <domain exclude="false">fabrikam.com
+    <path exclude="true">/products</path>
+  </domain>
+</emie>

+Where http://fabrikam.com doesn't use IE8 Enterprise Mode, but http://fabrikam.com/products does.

Internet Explorer 11 and Microsoft Edge
+ +### Schema attributes +This table includes the attributes used by the Enterprise Mode schema. + + + + + + + + + + + + + + + + + + + + + + + + + +
AttributeDescriptionSupported browser
<version>Specifies the version of the Enterprise Mode Site List. This attribute is supported for the <rules> element.Internet Explorer 11 and Microsoft Edge
<exclude>Specifies the domain or path that is excluded from getting the behavior applied. This attribute is supported on the <domain> and <path> elements. +

Example +

+<emie>
+  <domain exclude="false">fabrikam.com
+    <path exclude="true">/products</path>
+  </domain>
+</emie>

+Where http://fabrikam.com doesn't use IE8 Enterprise Mode, but http://fabrikam.com/products does.

Internet Explorer 11 and Microsoft Edge
<docMode>Specifies the document mode to apply. This attribute is only supported on <domain> or <path> elements in the <docMode> section. +

Example +

+<docMode>
+  <domain exclude="false">fakrikam.com
+    <path docMode="7">/products</path>
+  </domain>
+</docMode>
Internet Explorer 11
+ +### What not to include in your schema +We recommend that you not add any of the following items to your schema because they can make your compatibility list behave in unexpected ways: +- Don’t use protocols. For example, `http://`, `https://`, or custom protocols. They break parsing. +- Don’t use wildcards. +- Don't use IP Addresses. +- Don’t use query strings, ampersands break parsing. + +## How to use trailing slashes +You can use trailing slashes at the path-level, but not at the domain-level: +- **Domain-level.** Don’t add trailing slashes to a domain, it breaks parsing. +- **Path-level.** Adding a trailing slash to a path means that the path ends at that point. By not adding a trailing slash, the rule applies to all of the sub-paths. + +**Example** + +``` xml +contoso.com + /about/ + +``` +In this example, `contoso.com/about/careers` will use the default version of Internet Explorer, even though `contoso.com/about/` uses Enterprise Mode. + + +## How to target specific sites +If you want to target specific sites in your organization. + + + + + + + + + + + + + + + + + + + + + + + + + + +
Targeted siteExampleExplanation
You can specify subdomains in the domain tag +
+<docMode>
+  <domain docMode="5">contoso.com</domain>
+  <domain docMode="9">info.contoso.com</domain>
+<docMode>
 +
    +
  • contoso.com uses document mode 5.
    • +
  • info.contoso.com uses document mode 9.
    • +
  • test.contoso.com also uses document mode 5.
    • +
+
You can specify exact URLs by listing the full path +
+<emie>
+  <domain exclude="false">bing.com</domain>
+  <domain exclude="false" forceCompatView="true">contoso.com</domain>
+<emie>
 +
    +
  • bing.com uses IE8 Enterprise Mode.
    • +
  • contoso.com uses IE7 Enterprise Mode.
    • +
+
You can nest paths underneath domains +
+<emie>
+  <domain exclude="true">contoso.com
+    <path exclude="false">/about</path>
+    <path exclude="true">/about/business</path>
+  </domain>
+</emie>
 +
    +
  • contoso.com will use the default version of IE.
    • +
  • contoso.com/about and everything underneath that node will load in Enterprise Mode, except contoso.com/about/business, which will load in the default version of IE.
    • +
+
You can’t add a path underneath a path. The file will still be parsed, but the sub-path will be ignored +
+<emie>
+  <domain exclude="true">contoso.com
+    <path>/about
+    <path exclude="true">/business</path>
+    </path>
+  </domain>
+</emie>
 +
    +
  • contoso.com will use the default version of IE.
    • +
  • contoso.com/about and everything underneath that node will load in Enterprise Mode, including contoso.com/about/business because the last rule is ignored.
    • +
+
+ + diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/enterprise-mode-schema-version-2-guidance.md b/browsers/internet-explorer-11/ie11-deploy-guide/enterprise-mode-schema-version-2-guidance.md new file mode 100644 index 0000000000..488656793c --- /dev/null +++ b/browsers/internet-explorer-11/ie11-deploy-guide/enterprise-mode-schema-version-2-guidance.md @@ -0,0 +1,269 @@ +--- +Description: Use the Enterprise Mode Site List Manager tool to create and update your Enterprise Mode site list for devices running Windows 10. +ms.assetid: 909ca359-5654-4df9-b9fb-921232fc05f5 +ms.prod: IE11 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: appcompat +title: 'Enterprise Mode schema v.2 guidance for Windows 10-based devices' +--- + +# Enterprise Mode schema v.2 guidance for Windows 10-based devices +**Last updated** + +- November 12, 2015 + +**Applies to:** + +- Windows 10 + +Use the Enterprise Mode Site List Manager tool to create and update your site list for devices running Windows 10, using the version 2.0 (v.2) of the Enterprise Mode schema. If you don't want to use the Enterprise Mode Site List Manager, you also have the option to update your XML schema using Notepad, or any other XML-editing app. + +**Important**
+These schema updates only apply to devices running Windows 10. For devices running Windows 7 or Windows 8.1, see [Enterprise Mode schema guidance for Windows 7 and Windows 8.1 devices](enterprise-mode-schema-version-1-guidance.md). + +## Enterprise Mode schema v.2 updates +Because of the schema changes, you can't combine the old version (v.1) with the new version (v.2) of the schema. If you look at your XML file, you can tell which version you're using by: + +- <rules>. If your schema root node includes this key, you're using the v.1 version of the schema. + +- <site-list>. If your schema root node includes this key, you're using the v.2 version of the schema. + +You can continue to use the v.1 version of the schema on Windows 10, but you won't have the benefits of the new v.2 version schema updates and new features. Additionally, if you save the v.1 version of the schema in the new Enterprise Mode Site List Manager tool for Windows 10, it will automatically update the file to use the v.2 version of the schema. + +### Enterprise Mode v.2 schema example +The following is an example of the v.2 version of the Enterprise Mode schema. + +**Important**
+Make sure that you don't specify a protocol when adding your URLs. Using a URL like ``, automatically applies to both http://contoso.com and https://contoso.com. +  +``` xml + + + + EnterpriseSitelistManager + 10240 + 20150728.135021 + + + + IE8Enterprise + MSEdge + + + default + IE11 + + + IE7Enterprise + IE11 + + + default + IE11 + + + default + none + + IE8Enterprise" + + + IE7 + IE11 + + + IE8Enterprise + IE11 + + + IE7 + IE11 + + +``` + +### Updated schema elements +This table includes the elements used by the v.2 version of the Enterprise Mode schema. + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
ElementDescriptionSupported browser
<site-list>A new root node with this text is using the updated v.2 version of the schema. It replaces <rules>. +

Example +

+<site-list version="205">
+  <site url="contoso.com">
+    <compat-mode>IE8Enterprise</compat-mode>
+    <open-in>IE11</open-in>
+  </site>
+</site-list>
Internet Explorer 11 and Microsoft Edge
<site>A unique entry added for each site you want to put on the Enterprise Mode site list. The first <site> element will overrule any additional <site> elements that use the same value for the <url> element. +

Example +

+<site url="contoso.com">
+  <compat-mode>default</compat-mode>
+  <open-in>none</open-in>
+</site>

+You can also use the self-closing version, <url="contoso.com" />, which also sets: +

    +
  • <compat-mode>default</compat-mode>
    • +
  • <open-in>none</open-in>
    • +
Internet Explorer 11 and Microsoft Edge
<compat-mode>A child element that controls what compatibility setting is used for specific sites or domains. This element is only supported in IE11. +

Example +

+<site url="contoso.com">
+  <compat-mode>IE8Enterprise</compat-mode>
+</site>

+Where: +

    +
  • IE8Enterprise. Loads the site in IE8 Enterprise Mode.
    This element is required for sites included in the EmIE section of the v.1 schema and is needed to load in IE8 Enterprise Mode.

    • +

  • IE7Enterprise. Loads the site in IE7 Enterprise Mode.
    This element is required for sites included in the EmIE section of the v.1 schema and is needed to load in IE7 Enterprise Mode.

    Important
    This tag replaces the combination of the `"forceCompatView"="true"` attribute and the list of sites specified in the EmIE section of the v.1 version of the schema.

    • +

  • IE[x]. Where [x] is the document mode number into which the site loads.

    • +

  • Default or not specified. Loads the site using the default compatibility mode for the page. In this situation, X-UA-compatible meta tags or HTTP headers are honored.
    • +
Internet Explorer 11
<open-in>A child element that controls what browser is used for sites. This element supports the Open in IE11 or Open in Microsoft Edge experiences, for devices running Windows 10. +

Example +

+<site url="contoso.com">
+  <open-in>none</open-in>
+</site>

+Where: +

    +
  • IE11. Opens the site in IE11, regardless of which browser is opened by the employee.

    • +

  • MSEdge. Opens the site in Microsoft Edge, regardless of which browser is opened by the employee.

    • +

  • None or not specified. Opens in whatever browser the employee chooses.
    • +
Internet Explorer 11 and Microsoft Edge
+ +### Updated schema attributes +The <url> attribute, as part of the <site> element in the v.2 version of the schema, replaces the <domain> element from the v.1 version of the schema. + + + + + + + + + + + + + + + + + + + + +
AttributeDescriptionSupported browser
versionSpecifies the version of the Enterprise Mode Site List. This attribute is supported for the <site-list> element.Internet Explorer 11 and Microsoft Edge
urlSpecifies the URL (and port number using standard port conventions) to which the child elements apply. The URL can be a domain, sub-domain, or any path URL. +
Note
+Make sure that you don't specify a protocol. Using <site url="contoso.com"> applies to both http://contoso.com and https://contoso.com. +

Example +

+<site url="contoso.com:8080">
+  <compat-mode>IE8Enterprise</compat-mode>
+  <open-in>IE11</open-in>
+</site>
+In this example, going to http://contoso.com:8080 using Microsoft Edge, causes the site to open in IE11 and load in IE8 Enterprise Mode.		Internet Explorer 11 and Microsoft Edge
+ +### Deprecated attributes +These v.1 version schema attributes have been deprecated in the v.2 version of the schema: + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Deprecated attributeNew attributeReplacement example
<forceCompatView><compat-mode>Replace <forceCompatView="true"> with <compat-mode>IE7Enterprise</compat-mode>
<docMode><compat-mode>Replace <docMode="IE5"> with <compat-mode>IE5</compat-mode>
<doNotTransition><open-in>Replace <doNotTransition="true"> with <open-in>none</open-in>
<domain> and <path><site>Replace: +
+<emie>
+  <domain exclude="false">contoso.com</domain>
+</emie>
+With: +
+<site url="contoso.com"/>
+  <compat-mode>IE8Enterprise</compat-mode>
+</site>
+-AND-

+Replace: +

+<emie>
+  <domain exclude="true">contoso.com
+     <path exclude="false" forceCompatView="true">/about</path>
+  </domain>
+</emie>
+With: +
+<site url="contoso.com/about">
+  <compat-mode>IE7Enterprise</compat-mode>
+</site>
+ +While the old, replaced attributes aren't supported in the v.2 version of the schema, they'll continue to work in the v.1 version of the schema. If, however, you're using the v.2 version of the schema and these attributes are still there, the v.2 version schema takes precedence. We don’t recommend combining the two schemas, and instead recommend that you move to the v.2 version of the schema to take advantage of the new features. + +**Important**
+Saving your v.1 version of the file using the new Enterprise Mode Site List Manager tool for Windows 10 automatically updates the XML to the new v.2 version of the schema. + +### What not to include in your schema +We recommend that you not add any of the following items to your schema because they can make your compatibility list behave in unexpected ways: + +- Don’t use protocols. For example, http://, https://, or custom protocols. They break parsing. +- Don’t use wildcards. +- Don't use IP Addresses. +- Don’t use query strings, ampersands break parsing. + +## Related topics +- [Use the Enterprise Mode Site List Manager tool](https://technet.microsoft.com/en-us/library/dn640701.aspx) + + + + diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/export-your-enterprise-mode-site-list-from-the-enterprise-mode-site-list-manager.md b/browsers/internet-explorer-11/ie11-deploy-guide/export-your-enterprise-mode-site-list-from-the-enterprise-mode-site-list-manager.md new file mode 100644 index 0000000000..cd2d7a7477 --- /dev/null +++ b/browsers/internet-explorer-11/ie11-deploy-guide/export-your-enterprise-mode-site-list-from-the-enterprise-mode-site-list-manager.md @@ -0,0 +1,45 @@ +--- +Description: After you create your Enterprise Mode site list in the Enterprise Mode Site List Manager, you can export the contents to an Enterprise Mode (.EMIE) file. +ms.assetid: 9ee7c13d-6fca-4446-bc22-d23a0213a95d +ms.prod: IE11 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: appcompat +title: Export your Enterprise Mode site list from the Enterprise Mode Site List Manager tool +--- + +# Export your Enterprise Mode site list from the Enterprise Mode Site List Manager tool +**Last updated** + +- November 12, 2015 + +**Applies to:** + +- Windows 10 +- Windows 8.1 +- Windows 7 +- Windows Server 2012 R2 +- Windows Server 2008 R2 with Service Pack 1 (SP1) + +After you create your Enterprise Mode site list in the Enterprise Mode Site List Manager, you can export the contents to an Enterprise Mode (.EMIE) file. This file includes all of your URLs, including your compatibility mode selections and should be stored somewhere safe. If your list gets deleted by mistake you can easily import this file and return everything back to when this file was last saved. + +**Important**
  +This file is not intended for distribution to your managed devices. Instead, it is only for transferring data and comments from one manager to another. For example, if one administrator leaves and passes the existing data to another administrator. Internet Explorer doesn’t read this file. + +**To export your compatibility list** + +1. On the **File** menu of the Enterprise Mode Site List Manager, click **Export**. + +2. Export the file to your selected location. For example, `C:\Users\\Documents\sites.emie`. + +## Related topics + +- [Download the Enterprise Mode Site List Manager for Windows 10 tool](http://go.microsoft.com/fwlink/?LinkId=716853) +- [Download the Enterprise Mode Site List Manager for Windows 7 and Windows 8.1 tool](http://go.microsoft.com/fwlink/?LinkID=394378) +- [Use the Enterprise Mode Site List Manager tool](use-the-enterprise-mode-site-list-manager-tool.md) +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/fix-compat-issues-with-doc-modes-and-enterprise-mode-site-list.md b/browsers/internet-explorer-11/ie11-deploy-guide/fix-compat-issues-with-doc-modes-and-enterprise-mode-site-list.md new file mode 100644 index 0000000000..a5e1bc2050 --- /dev/null +++ b/browsers/internet-explorer-11/ie11-deploy-guide/fix-compat-issues-with-doc-modes-and-enterprise-mode-site-list.md @@ -0,0 +1,102 @@ +--- +Description: The Internet Explorer 11 Enterprise Mode site list lets you specify document modes for specific websites, helping you fix compatibility issues without changing a single line of code on the site. +ms.assetid: 4b21bb27-aeac-407f-ae58-ab4c6db2baf6 +ms.prod: IE11 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: appcompat +title: Fix web compatibility issues using document modes and the Enterprise Mode site list +--- + +# Fix web compatibility issues using document modes and the Enterprise Mode site list +The Internet Explorer 11 Enterprise Mode site list lets you specify document modes for specific websites, helping you fix compatibility issues without changing a single line of code on the site. This addition to the site list is a continuation of our commitment to help you upgrade and stay up-to-date on the latest version of Internet Explorer, while still preserving your investments in existing apps. + +## What does this mean for me? +Enterprises can have critical apps that are coded explicitly for a specific browser version and that might not be in their direct control, making it very difficult and expensive to update to modern standards or newer browser versions. Because you can decide which URLs should open using specific document modes, this update helps ensure better compatibility, faster upgrades, and reduced testing and fixing costs. + +## How does this fix work? +You can continue to use your legacy and orphaned web apps, by specifying a document mode in the centralized Enterprise Mode site list. Then, when IE11 goes to a site on your list, the browser loads the page in the specified document mode just as it would if it were specified through an X-UA-Compatible meta tag on the site. For more information about document modes and X-UA-compatible headers, see [Defining document compatibility](http://go.microsoft.com/fwlink/?LinkId=518412). + +**Important**
+Enterprise Mode takes precedence over document modes, so sites that are already included in the Enterprise Mode site list won’t be affected by this update and will continue to load in Enterprise Mode, as usual. + +### When do I use document modes versus Enterprise Mode? +While the `` functionality provides great compatibility for you on Windows Internet Explorer 8 or Windows Internet Explorer 7, the new `` capabilities can help you stay up-to-date regardless of which versions of IE are running in your environment. Because of this, we recommend starting your testing process like this: + +- If your enterprise primarily uses Internet Explorer 8 or Internet Explorer 7 start testing using Enterprise Mode. + +- If your enterprise primarily uses Windows Internet Explorer 9 or Internet Explorer 10, start testing using the various document modes. + +Because you might have multiple versions of IE deployed, you might need to use both Enterprise Mode and document modes to effectively move to IE11. + +### Test your sites for document mode compatibility +To see if this fix might help you, run through this process one step at a time, for each of your problematic sites: + +1. Go to a site having compatibility problems, press **F12** to open the **F12 Developer Tools**, and go to the **Emulation** tool. + + ![Emulation tool showing document mode selection](images/docmode-f12.png) + +2. Starting with the **11 (Default)** option, test your broken scenario.
+If that doesn’t work, continue down to the next lowest document mode, stopping as soon as you find a document mode that fixes your problems. For more information about the Emulation tool, see [Emulate browsers, screen sizes, and GPS locations](http://go.microsoft.com/fwlink/?LinkId=518417). + +3. If none of the document modes fix your issue, change the **Browser Profile** to **Enterprise**, pick the mode you want to test with starting with **8** (IE8 Enterprise Mode), and then test your broken scenario. + +### Add your site to the Enterprise Mode site list +After you’ve figured out the document mode that fixes your compatibility problems, you can add the site to your Enterprise Mode site list. + +**Note**
+There are two versions of the Enterprise Mode site list schema and the Enterprise Mode Site List Manager tool, based on your operating system. For more info about the schemas, see [Enterprise Mode schema v.2 guidance for Windows 10 devices](enterprise-mode-schema-version-2-guidance.md) or [Enterprise Mode schema v.1 guidance for Windows 7 and Windows 8.1 devices](enterprise-mode-schema-version-1-guidance.md). For more info about the different site list management tools, see [Use the Enterprise Mode Site List Manager tool](use-the-enterprise-mode-site-list-manager-tool.md). + +**To add your site to the site list** + +1. Open the Enterprise Mode Site List Manager tool, and click **Add**. + + ![Enterprise Mode Site List Manager, showing the available modes](images/emie-listmgr.png) + +2. Add the **URL** and pick the document mode from the **Launch in** box. This should be the same document mode you found fixed your problems while testing the site.
+Similar to Enterprise Mode, you can specify a document mode for a particular web path—such as contoso.com/ERP—or at a domain level. In the above, the entire contoso.com domain loads in Enterprise Mode, while microsoft.com is forced to load into IE8 Document Mode and bing.com loads in IE11. + +**Note**
+For more information about Enterprise Mode, see [What is Enterprise Mode?](what-is-enterprise-mode.md) For more information about the Enterprise Mode Site List Manager tool and how to add sites to your site list, see [Enterprise Mode Site List Manager tool](use-the-enterprise-mode-site-list-manager-tool.md). + + +### Review your Enterprise Mode site list +Take a look at your Enterprise Mode site list and make sure everything is the way you want it. The next step will be to turn the list on and start to use it in your company. The Enterprise Mode Site List Manager tool will look something like: + +![Enterprise Mode Site List Manager tool, showing the different modes](images/emie-sitelistmgr.png) + +And the underlying XML code will look something like: + +``` xml + + + bing.com/images + www.msn.com/news + + + + timecard + tar + msdn.microsoft.com + + +``` + +### Turn on Enterprise Mode and using your site list +If you haven’t already turned on Enterprise Mode for your company, you’ll need to do that. You can turn on Enterprise Mode using Group Policy or your registry. For specific instructions and details, see [Turn on Enterprise Mode and use a site list](turn-on-enterprise-mode-and-use-a-site-list.md). + +## Turn off default Compatibility View for your intranet sites +By default, IE11 uses the **Display intranet sites in Compatibility View** setting. However, we’ve heard your feedback and know that you might want to turn this functionality off so you can continue to upgrade your web apps to more modern standards. + +To help you move forward, you can now use the Enterprise Mode site list to specify sites or web paths to use the IE7 document mode, which goes down to IE5 “Quirks” mode if the page doesn’t have an explicit `DOCTYPE` tag. Using this document mode effectively helps you provide the Compatibility View functionality for single sites or a group of sites, which after thorough testing, can help you turn off Compatibility View as the default setting for your intranet sites. + +## Related topics +- [Download the Enterprise Mode Site List Manager for Windows 10 tool](http://go.microsoft.com/fwlink/?LinkId=716853) +- [Download the Enterprise Mode Site List Manager for Windows 7 and Windows 8.1 tool](http://go.microsoft.com/fwlink/?LinkID=394378) +- [Enterprise Mode Site List Manager tool](use-the-enterprise-mode-site-list-manager-tool.md) +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/fix-validation-problems-using-the-enterprise-mode-site-list-manager.md b/browsers/internet-explorer-11/ie11-deploy-guide/fix-validation-problems-using-the-enterprise-mode-site-list-manager.md new file mode 100644 index 0000000000..71893665cf --- /dev/null +++ b/browsers/internet-explorer-11/ie11-deploy-guide/fix-validation-problems-using-the-enterprise-mode-site-list-manager.md @@ -0,0 +1,44 @@ +--- +Description: When you add multiple sites to your Enterprise Mode site list entries, they’re validated by the Enterprise Mode Site List Manager before they’re entered into your global list. +ms.assetid: 9f80e39f-dcf1-4124-8931-131357f31d67 +ms.prod: IE11 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: appcompat +title: Fix validation problems using the Enterprise Mode Site List Manager tool +--- + +# Fix validation problems using the Enterprise Mode Site List Manager tool +**Last updated** + +- November 12, 2015 + +**Applies to:** + +- Windows 10 +- Windows 8.1 +- Windows 7 +- Windows Server 2012 R2 +- Windows Server 2008 R2 with Service Pack 1 (SP1) + +When you add multiple sites to your Enterprise Mode site list entries, they’re validated by the Enterprise Mode Site List Manager tool before they’re entered into your global list. If a site doesn’t pass validation, you’ll have a couple of options to address it. + +There are typically 3 types of errors you’ll see: + +- **Validation**. The site caused a validation error. Typically these occur because of typos, malformed URLs, or access-related issues. You can pick the site, click **Add to list** to ignore the problem and accept the site to your site list, or you can click **OK** to keep the site off of your site list. + +- **Duplicate**. The site already exists in the global compatibility list with a different compatibility mode. For example, the site was originally rendered in Enterprise Mode, but this update is for Default IE. You can pick the site, click **Add to list** to ignore the problem and accept the change to your site list, or you can click **OK** to keep your original compatibility mode. + +- **Redirection**. This is the least common type of validation error. Typically in this situation, a site redirects from an easy-to-remember URL to a longer URL. Like `\\tar` redirects to `\\timecard`. You can add the short URL or you can add both the short and long versions to your list.
+Another possibility is that redirection happens multiple times, with an intermediary site experiencing compatibility issues. For example, an employee types a short URL that then redirects multiple times, finally ending up on a non-intranet site. In this situation, you might want to add the intermediary URLs to your Enterprise Mode site list, in case there’s logic in one of them that has compatibility issues. + +## Related topics +- [Download the Enterprise Mode Site List Manager for Windows 10 tool](http://go.microsoft.com/fwlink/?LinkId=716853) +- [Download the Enterprise Mode Site List Manager for Windows 7 and Windows 8.1 tool](http://go.microsoft.com/fwlink/?LinkID=394378) +- [Use the Enterprise Mode Site List Manager tool](use-the-enterprise-mode-site-list-manager-tool.md) +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/group-policy-and-advanced-group-policy-mgmt-ie11.md b/browsers/internet-explorer-11/ie11-deploy-guide/group-policy-and-advanced-group-policy-mgmt-ie11.md new file mode 100644 index 0000000000..14f48ccfcf --- /dev/null +++ b/browsers/internet-explorer-11/ie11-deploy-guide/group-policy-and-advanced-group-policy-mgmt-ie11.md @@ -0,0 +1,36 @@ +--- +Description: Overview about Group Policy, Advanced Group Policy Management (AGPM), and Internet Explorer 11 +ms.assetid: 63a7ef4a-6de2-4d08-aaba-0479131e3406 +ms.prod: IE11 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: security +title: Group Policy, Advanced Group Policy Management (AGPM), and Internet Explorer 11 +--- + +# Group Policy, Advanced Group Policy Management (AGPM), and Internet Explorer 11 +Advanced Group Policy Management (AGPM) is an add-on license that available for the Microsoft Desktop Optimization Pack (MDOP). This license gives you change control and a role assignment-model that helps optimize Group Policy management and reduce the risk of widespread failures. + +From AGPM you can: + +- **Edit GPOs outside of your production environment.** Your GPOs are stored in an outside archive for editing, reviewing, and approving. Then, when you deploy, AGPM moves the GPOs to your production environment. + +- **Assign roles to your employees.** You can assign 3 roles to your employees or groups, including: + + - **Reviewer.** Can view and compare GPOs in the archive. This role can't edit or deploy GPOs. + + - **Editor.** Can view, compare, check-in and out, and edit GPOs in the archive. This role can also request GPO deployment. + + - **Approver.** Can approve GPO creation and deployment to the production environment. + +- **Manage your GPO lifecycle with change control features.** You can use the available version-control, history, and auditing features to help you manage your GPOs while moving through your archive, to your editing process, and finally to your GPO deployment. + +**Note**
+For more information about AGPM, and to get the license, see [Microsoft Advanced Group Policy Management 4.0 SP1 Step-by-Step Guide](http://go.microsoft.com/fwlink/?LinkId=294916). + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/group-policy-and-group-policy-mgmt-console-ie11.md b/browsers/internet-explorer-11/ie11-deploy-guide/group-policy-and-group-policy-mgmt-console-ie11.md new file mode 100644 index 0000000000..010dacd928 --- /dev/null +++ b/browsers/internet-explorer-11/ie11-deploy-guide/group-policy-and-group-policy-mgmt-console-ie11.md @@ -0,0 +1,41 @@ +--- +Description: Overview about Group Policy, the Group Policy Management Console (GPMC), and Internet Explorer 11 +ms.assetid: ae3d227d-3da7-46b8-8a61-c71bfeae0c63 +ms.prod: IE11 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: security +title: Group Policy, the Group Policy Management Console (GPMC), and Internet Explorer 11 +--- + +# Group Policy, the Group Policy Management Console (GPMC), and Internet Explorer 11 +A Microsoft Management Console (MMC)-based tool that uses scriptable interfaces to manage Group Policy. The 32-bit and 64-bit versions are included with Windows Server R2 with Service Pack 1 (SP1) and Windows Server 2012 R2. + +## Why use the GPMC? +The GPMC lets you: + +- Import, export, copy, paste, backup and restore GPOs. + +- Search for existing GPOs. + +- Create reports, including providing the Resultant Set of Policy (RSoP) data in HTML reports that you can save and print. + +- Use simulated RSoP data to prototype your Group Policy before implementing it in the production environment. + +- Obtain RSoP data to view your GPO interactions and to troubleshoot your Group Policy deployment. + +- Create migration tables to let you import and copy GPOs across domains and across forests. Migration tables are files that map references to users, groups, computers, and Universal Naming Convention (UNC) paths in the source GPO to new values in the destination GPO. + +- Create scriptable interfaces to support all of the operations available within the GPMC. You can't use scripts to edit individual policy settings in a GPO. + +For more information about the GPMC, see [Group Policy Management Console](http://go.microsoft.com/fwlink/?LinkId=214515) on TechNet. + +## Searching for Group Policy settings +To search for Group Policy settings in the Group Policy Management Console (GPMC), use the [Group Policy Search tool](http://go.microsoft.com/fwlink/p/?LinkId=279857). To find the Group Policy settings, click **Windows Components**, and then click **Internet Explorer**. + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/group-policy-and-ie11.md b/browsers/internet-explorer-11/ie11-deploy-guide/group-policy-and-ie11.md new file mode 100644 index 0000000000..1e245243f5 --- /dev/null +++ b/browsers/internet-explorer-11/ie11-deploy-guide/group-policy-and-ie11.md @@ -0,0 +1,43 @@ +--- +Description: 'Use the topics in this section to learn about Group Policy and how to use it to manage Internet Explorer.' +ms.assetid: 50383d3f-9ac9-4a30-8852-354b6eb9434a +ms.prod: IE11 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: security +title: 'Group Policy and Internet Explorer 11 (IE11)' +--- + +**Last updated** + +- November 12, 2015 + +**Applies to:** + +- Windows 10 +- Windows 8.1 +- Windows 7 +- Windows Server 2012 R2 +- Windows Server 2008 R2 with Service Pack 1 (SP1) + +Use the topics in this section to learn about Group Policy and how to use it to manage Internet Explorer. + +## In this section + +|Topic |Description | +|----------------------------------------------------|-----------------------------------------------------------------| +|[New group policy settings for Internet Explorer 11](new-group-policy-settings-for-ie11.md) |Info about many of the new group policy settings added for Internet Explorer 11. | +|[Group Policy management tools](group-policy-objects-and-ie11.md) |Guidance about how to use Microsoft Active Directory Domain Services (AD DS) to manage your Group Policy settings. | +|[ActiveX installation using group policy](activex-installation-using-group-policy.md) |Info about using the ActiveX Installer Service (AXIS) and Group Policy to manage your ActiveX control deployment. | +|[Group Policy and compatibility with Internet Explorer 11](group-policy-compatability-with-ie11.md) |Our Group Policy recommendations for security, performance, and compatibility with previous versions of IE, regardless of which Zone the website is in. | +|[Group policy preferences and Internet Explorer 11](group-policy-preferences-and-ie11.md) |Info about Group Policy preferences, as compared to Group Policy settings. | +|[Administrative templates and Internet Explorer 11](administrative-templates-and-ie11.md) |Info about Administrative Templates, including where to store them and the related Group Policy settings. | +|[Enable and disable add\-ons using administrative templates and group policy](enable-and-disable-add-ons-using-administrative-templates-and-group-policy.md) |Guidance about how to use your local Group Policy editor or the CLSID and Administrative Templates to manage your Group Policy objects. +  + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/group-policy-and-local-group-policy-editor-ie11.md b/browsers/internet-explorer-11/ie11-deploy-guide/group-policy-and-local-group-policy-editor-ie11.md new file mode 100644 index 0000000000..85de37b827 --- /dev/null +++ b/browsers/internet-explorer-11/ie11-deploy-guide/group-policy-and-local-group-policy-editor-ie11.md @@ -0,0 +1,29 @@ +--- +Description: 'Group Policy, the Local Group Policy Editor, and Internet Explorer 11' +ms.assetid: 6fc30e91-efac-4ba5-9ee2-fa77dcd36467 +ms.prod: IE11 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: security +title: 'Group Policy, the Local Group Policy Editor, and Internet Explorer 11' +--- + +# Group Policy, the Local Group Policy Editor, and Internet Explorer 11 +A Microsoft Management Console (MMC)-based tool that manages both computer and user-related configurations for an individual computer policy. This tool is included with Windows® 7 Service Pack 1 (SP1) and Windows 8.1. + +Here's a list of the policy settings you can use, based on the configuration type. For more info, see [Local Group Policy Editor](http://go.microsoft.com/fwlink/p/?LinkId=294912). + +|Computer configuration |User configuration | +|-----------------------|-------------------| +|Windows settings:

|Windows settings: | +|Administrative templates: |Administrative templates: | + + +  + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/group-policy-compatability-with-ie11.md b/browsers/internet-explorer-11/ie11-deploy-guide/group-policy-compatability-with-ie11.md new file mode 100644 index 0000000000..cca5cc6af7 --- /dev/null +++ b/browsers/internet-explorer-11/ie11-deploy-guide/group-policy-compatability-with-ie11.md @@ -0,0 +1,31 @@ +--- +Description: Group Policy suggestions for compatibility with Internet Explorer 11 +ms.assetid: 7482c99f-5d79-4344-9e1c-aea9f0a68e18 +ms.prod: IE11 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: security +title: Group Policy and compatibility with Internet Explorer 11 +--- + +# Group Policy and compatibility with Internet Explorer 11 +Internet Explorer 11 has many Group Policy entries that can be configured for keeping your environment managed and safe. This table includes all of our recommendations around security, performance, and compatibility with the previous versions of Internet Explorer, regardless of which Zone the website is in. + +|Activity |Location |Setting the policy object | +|---------------------------------|----------------------------------------------|-------------------------------------------------------------------------| +|Turn on Compatibility View for all intranet zones |`Administrative Templates\Windows Components\Internet Explorer\Compatibility View` |Double-click **Turn on IE Standards Mode for local intranet** , and then click **Disabled**. | +|Turn on Compatibility View for selected websites, using Group Policy |`Administrative Templates\Windows Components\Internet Explorer\Compatibility View` |Double-click **Use Policy List of Windows Internet Explorer 7 sites** , and then click **Enabled**.Users will be able to add or remove sites manually to their local Compatibility View list, but they won’t be able to remove the sites you specifically added. | +|Turn on Quirks mode for selected websites, using Group Policy |`Administrative Templates\Windows Components\Internet Explorer\Compatibility View` |Double-click **Use Policy List of Quirks Mode sites**, and then click **Enabled**. | +|Ensure your users are using the most up-to-date version of Microsoft’s compatibility list. |`Administrative Templates\Windows Components\Internet Explorer\Compatibility View` |Double-click **Include updated Web site lists from Microsoft**, and then click **Enabled**. | +|Restrict users from making security zone configuration changes. |`Administrative Templates\ Windows Components\Internet Explorer\Internet Control Panel` |Double-click **Disable the Security Page**, and then click **Enabled**. | +|Control which security zone settings are applied to specific websites. |`Administrative Templates\ Windows Components\Internet Explorer\Internet Control Panel\Security Page` |Double-click **Site to Zone Assignment List**, click **Enabled**, and then enter your list of websites and their applicable security zones. | +|Turn off Data Execution Prevention (DEP). |`Administrative Templates\ Windows Components\Internet Explorer\Security Features` |Double-click **Turn off Data Execution Prevention**, and then click **Enabled**. | + +  + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/group-policy-objects-and-ie11.md b/browsers/internet-explorer-11/ie11-deploy-guide/group-policy-objects-and-ie11.md new file mode 100644 index 0000000000..b77818823b --- /dev/null +++ b/browsers/internet-explorer-11/ie11-deploy-guide/group-policy-objects-and-ie11.md @@ -0,0 +1,48 @@ +--- +Description: Overview of the available Group Policy management tools +ms.assetid: e33bbfeb-6b80-4e71-8bba-1d0369a87312 +ms.prod: IE11 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: security +title: Group Policy management tools +--- + +# Group Policy management tools +Group Policy, based on Microsoft Active Directory Domain Services (AD DS), lets you manage your organization's computer and user settings as part of your Group Policy objects (GPOs), which are added and changed in the Group Policy Management Console (GPMC). GPOs can include registry-based Administrative Template policy settings, security settings, software deployment information, scripts, folder redirection, and preferences. The most effective way to target a specific GPO is to use Windows Management Instrumentation (WMI) filters. Like, creating a WMI filter that applies a GPO only to computers with a specific make and model. + +By using Group Policy, you can set up a policy setting once, and then copy that setting onto many computers. For example, you can set up multiple Internet Explorer 11 security settings in a GPO that's linked to a domain, and then apply all of those settings to every computer in the domain. + +**Note**
   +For more information about Group Policy, see the [Group Policy TechCenter](http://go.microsoft.com/fwlink/?LinkId=214514). This site provides links to the latest technical documentation, videos, and downloads for Group Policy. + +## Managing settings with GPOs +After deploying IE11 to your organization, you can continue to manage the browser settings by using Active Directory Domain Services (AD DS) together with the following Group Policy-related setting management groups: + +- [Administrative templates and Internet Explorer 11](administrative-templates-and-ie11.md). Used to manage registry-based policies and options. + +- [Group policy preferences and Internet Explorer 11](group-policy-preferences-and-ie11.md). Used to set up and manage options that can be changed by the user after installation. + +**Note**
+Whenever possible, we recommend that you manage IE11 using Administrative Templates, because these settings are always written to secure policy branches in the registry. In addition, we recommend that you deploy using standard user accounts instead of letting your users log on to their computers as administrators. This helps to prevent your users from making unwanted changes to their systems or overriding Group Policy settings. + +   +Users won't be able to use the IE11 user interface or the registry to change any managed settings on their computers. However, they will be able to change many of the preferences associated with the settings you set up using the Internet Explorer Administration Kit 11 (IEAK 11). + +## Which GPO tool should I use? +You can use any of these tools to create, manage, view, and troubleshoot Group Policy objects (GPOs). For information about each, see: + +- [Group Policy, the Group Policy Management Console (GPMC), and Internet Explorer 11](group-policy-and-group-policy-mgmt-console-ie11.md). Provides a single location to manage all GPOs, WMI filters, and Group Policy–related permissions across multiple forests in an organization. + +- [Group Policy, the Local Group Policy Editor, and Internet Explorer 11](group-policy-and-local-group-policy-editor-ie11.md). Provides a user interface that lets you edit settings within individual GPOs. + +- [Group Policy, Advanced Group Policy Management (AGPM), and Internet Explorer 11](group-policy-and-advanced-group-policy-mgmt-ie11.md). An add-on license for the Microsoft Desktop Optimization Pack (MDOP) that helps to extend Group Policy for Software Assurance customers. + +- [Group Policy, Windows Powershell, and Internet Explorer 11](group-policy-windows-powershell-ie11.md). A command-line shell and scripting language that helps automate Windows and application administration on a single computer locally, or across many computers remotely. + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/group-policy-preferences-and-ie11.md b/browsers/internet-explorer-11/ie11-deploy-guide/group-policy-preferences-and-ie11.md new file mode 100644 index 0000000000..28b2684586 --- /dev/null +++ b/browsers/internet-explorer-11/ie11-deploy-guide/group-policy-preferences-and-ie11.md @@ -0,0 +1,31 @@ +--- +Description: Info about Group Policy preferences versus Group Policy settings +ms.assetid: f2264c97-7f09-4f28-bb5c-58ab80dcc6ee +ms.prod: IE11 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: security +title: Group policy preferences and Internet Explorer 11 +--- + +# Group policy preferences and Internet Explorer 11 +Group Policy preferences are less strict than Group Policy settings, based on: + +| |Group Policy preferences |Group Policy settings | +|-----|-------------------------|----------------------| +|Enforcement | | | +|Flexibility |Lets you create preference items for registry settings, files, and folders. | | +|Local Group Policy |Not available |Available +|Awareness |Supports apps that aren't Group Policy-aware |Requires apps to be Group Policy-aware | +|Storage | | | +|Targeting and filtering | | | + + +For more information about Group Policy preferences, see the [Group Policy Settings Reference for Windows and Windows Server](http://go.microsoft.com/fwlink/?LinkId=279876). + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/group-policy-problems-ie11.md b/browsers/internet-explorer-11/ie11-deploy-guide/group-policy-problems-ie11.md new file mode 100644 index 0000000000..594538188b --- /dev/null +++ b/browsers/internet-explorer-11/ie11-deploy-guide/group-policy-problems-ie11.md @@ -0,0 +1,22 @@ +--- +Description: Links to troubleshooting topics and log files that can help address Group Policy problems with Internet Explorer 11. +ms.assetid: 0da0d9a9-200c-46c4-96be-630e82de017b +ms.prod: IE11 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: security +title: Group Policy problems with Internet Explorer 11 +--- + +# Group Policy problems with Internet Explorer 11 +If you're having problems with Group Policy and Internet Explorer 11, or if you're looking for high-level information about the concepts and techniques used to troubleshoot Group Policy, as well as links to detailed reference topics, procedures, and troubleshooting scenario guides, see [Group Policy Analysis and Troubleshooting Overview](http://go.microsoft.com/fwlink/?LinkId=279872). + +## Group Policy Object-related Log Files +You can use the Event Viewer to review Group Policy-related messages in the **Windows Logs**, **System** file. All of the Group Policy-related events are shown with a source of **GroupPolicy**. For more information about the Event Viewer, see [What information appears in event logs? (Event Viewer)](http://go.microsoft.com/fwlink/p/?LinkId=294917). + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/group-policy-shortcut-extensions-ie11.md b/browsers/internet-explorer-11/ie11-deploy-guide/group-policy-shortcut-extensions-ie11.md new file mode 100644 index 0000000000..5291ac1879 --- /dev/null +++ b/browsers/internet-explorer-11/ie11-deploy-guide/group-policy-shortcut-extensions-ie11.md @@ -0,0 +1,42 @@ +--- +Description: Instructions about how to create and configure shortcut preference extensions to file system objects, URLs, and shell objects. +ms.assetid: c6fbf990-13e4-4be7-9f08-5bdd43179b3b +ms.prod: IE11 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: security +title: 'Group Policy, Shortcut Extensions, and Internet Explorer 11' +--- + +# Group Policy, Shortcut Extensions, and Internet Explorer 11 +Group Policy includes the Shortcuts preference extension, which lets you configure shortcuts to: + +- **File system objects.** Traditional shortcuts that link to apps, files, folders, drives, shares, or computers. For example, linking a shortcut to an app from the **Start** screen. + +- **URLs.** Shortcuts to webpages or FTP sites. For example, a link to your intranet site from your employee's **Favorites** folder. + +- **Shell objects.** Shortcuts to objects that appear in the shell namespace, such as printers, desktop items, Control Panel items, the Recycle Bin, and so on. + +## How do I configure shortcuts? +You can create and configure shortcuts for any domain-based Group Policy Object (GPO) in the Group Policy Management Console (GPMC). + +**To create a new Shortcut preference item** + +1. Open GPMC, right-click the Group Policy object that needs the new shortcut extension, and click **Edit**. + +2. From **Computer Configuration** or **User Configuration**, go to **Preferences**, and then go to **Windows Settings**. + +3. Right-click **Shortcuts**, click **New**, and then choose **Shortcut**. + +4. Choose what the shortcut should do, including **Create**, **Delete**, **Replace**, or **Update**. + +5. Type the required shortcut settings and your comments into the **Description** box, and click **OK**. + +For more information about shortcut extensions, including step-by-step guidance, see [Shortcuts Extension](http://go.microsoft.com/fwlink/?LinkId=214525) and [Configure a Shortcut Item](http://go.microsoft.com/fwlink/?LinkId=301837). + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/group-policy-windows-powershell-ie11.md b/browsers/internet-explorer-11/ie11-deploy-guide/group-policy-windows-powershell-ie11.md new file mode 100644 index 0000000000..6f8d472834 --- /dev/null +++ b/browsers/internet-explorer-11/ie11-deploy-guide/group-policy-windows-powershell-ie11.md @@ -0,0 +1,31 @@ +--- +Description: 'Overview about how Group Policy works with Windows Powershell and Internet Explorer 11' +ms.assetid: e3607cde-a498-4e04-9daa-b331412967fc +ms.prod: IE11 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: security +title: 'Group Policy, Windows Powershell, and Internet Explorer 11' +--- + +# Group Policy, Windows Powershell, and Internet Explorer 11 +Your domain-joined Group Policy Objects (GPOs) can use any of Group Policy-related “cmdlets” that run within Windows PowerShell. + +Each cmdlet is a single-function command-line tool that can: + +- Create, edit, remove, back up, and import GPOs. + +- Create, update, and remove Group Policy links. + +- Set inheritance flags and permissions on organizational units (OU) and domains. + +- Configure registry-based policy settings and registry settings for Group Policy preferences. + +For more info about PowerShell and Group Policy management, see [Use Windows PowerShell to Manage Group Policy](http://go.microsoft.com/fwlink/?LinkId=276828). + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/ie11-deployment-guide-for-it-pros.md b/browsers/internet-explorer-11/ie11-deploy-guide/ie11-deployment-guide-for-it-pros.md new file mode 100644 index 0000000000..d58715929f --- /dev/null +++ b/browsers/internet-explorer-11/ie11-deploy-guide/ie11-deployment-guide-for-it-pros.md @@ -0,0 +1,56 @@ +--- +Description: Use this guide to learn about the several options and processes you''ll need to consider while you''re planning for, deploying, and customizing Internet Explorer 11 for your employee''s computers. +ms.assetid: bddc2d97-c38d-45c5-9588-1f5bbff2e9c3 +ms.prod: IE11 +ms.mktglfcycl: deploy +ms.sitesec: library +title: Internet Explorer 11 (IE11) - Deployment Guide for IT Pros +--- + +# Internet Explorer 11 (IE11) - Deployment Guide for IT Pros + + +**Last updated** + +- December 17, 2015 + +**Applies to:** + +- Windows 10 +- Windows 8.1 +- Windows 7 +- Windows Server 2012 R2 +- Windows Server 2008 R2 with Service Pack 1 (SP1) + +Use this guide to learn about the several options and processes you'll need to consider while you're planning for, deploying, and customizing Internet Explorer 11 for your employee's computers. + +**Important**
+Because this content isn't intended to be a step-by-step guide, not all of the steps are necessary to deploy IE11. + +## In this guide +|Topic |Description | +|------|------------| +|[System requirements and language support for Internet Explorer 11 (IE11)](system-requirements-and-language-support-for-ie11.md) |IE11 is available for a number of systems and languages. This topic provides info about the minimum system requirements and language support. | +|[List of updated features and tools - Internet Explorer 11 (IE11)](updated-features-and-tools-with-ie11.md) |IE11 includes several new features and tools. This topic includes high-level info about the each of them. | +|[Install and Deploy Internet Explorer 11 (IE11)](install-and-deploy-ie11.md) |Use the topics in this section to learn how to customize your Internet Explorer installation package, how to choose the right method for installation, and how to deploy IE into your environment. You can also find more info about your virtualization options for legacy apps. | +|[Collect data using Enterprise Site Discovery](collect-data-using-enterprise-site-discovery.md) |Use IE to collect data on computers running Windows Internet Explorer 8 through IE11 on Windows 10, Windows 8.1, or Windows 7. This inventory information helps you build a list of websites used by your company so you can make more informed decisions about your IE deployments, including figuring out which sites might be at risk or require overhauls during future upgrades. | +|[Enterprise Mode for Internet Explorer 11 (IE11)](enterprise-mode-overview-for-ie11.md) |Use the topics in this section to learn how to set up and use Enterprise Mode and the Enterprise Mode Site List Manager tool in your company. | +|[Group Policy and Internet Explorer 11 (IE11)](group-policy-and-ie11.md) |Use the topics in this section to learn about Group Policy and how to use it to manage IE. | +|[Manage Internet Explorer 11](manage-ie11-overview.md) |Use the topics in this section to learn about how to auto detect your settings, auto configure your configuration settings, and auto configure your proxy configuration settings for IE. | +|[Troubleshoot Internet Explorer 11 (IE11)](troubleshoot-ie11-.md) |Use the topics in this section to learn how to troubleshoot several of the more common problems experienced with IE. | +|[Out-of-date ActiveX control blocking](out-of-date-activex-control-blocking.md) |ActiveX controls are small apps that let websites provide content, like videos, games, and let you interact with content like toolbars. Unfortunately, because many ActiveX controls aren’t automatically updated, they can become outdated as new versions are released. It’s very important that you keep your ActiveX controls up-to-date because malicious software (or malware) can target security flaws in outdated controls, damaging your computer by collecting info from it, installing unwanted software, or by letting someone else control it remotely. To help avoid this situation, IE includes a new security feature, called out-of-date ActiveX control blocking. | +|[Deprecated document modes and Internet Explorer 11](deprecated-document-modes.md) |Internet Explorer 8 introduced document modes as a way to move from the proprietary coding of web features to a more standardized type of coding that could run on multiple browsers and devices. Starting with Windows 10, we’re deprecating document modes.

This means that while IE11 will continue to support document modes, Microsoft Edge won’t. And because of that, it also means that if you want to use Microsoft Edge, you’re going to have to update your legacy webpages and apps to support modern features, browsers, and devices.

Note
For specific details about the technologies and APIs that are no longer supported in Microsoft Edge, see [A break from the past, part 2: Saying goodbye to ActiveX, VBScript, attachEvent](http://go.microsoft.com/fwlink/?LinkId=615953). | +|[What is the Internet Explorer 11 Blocker Toolkit?](what-is-the-internet-explorer-11-blocker-toolkit.md) |The IE11 Blocker Toolkit lets you turn off the automatic delivery of IE11 through the Automatic Updates feature of Windows Update. | +|[Missing Internet Explorer Maintenance (IEM) settings for Internet Explorer 11](missing-internet-explorer-maintenance-settings-for-ie11.md) |The Internet Explorer Maintenance (IEM) settings have been deprecated in favor of Group Policy preferences, Administrative Templates (.admx), and the Internet Explorer Administration Kit 11 (IEAK 11).

Because of this change, your IEM-configured settings will no longer work on computers running Internet Explorer 10 or newer. To fix this, you need to update the affected settings using Group Policy preferences, Administrative Templates (.admx), or the IEAK 11.

Because Group Policy Preferences and IEAK 11 run using asynchronous processes, you should choose to use only one of the tools within each group of settings. For example, using only IEAK 11 in the Security settings or Group Policy Preferences within the Internet Zone settings. Also, it's important to remember that policy is enforced and can't be changed by the user, while preferences are configured, but can be changed by the user. | +|[Missing the Compatibility View Button](missing-the-compatibility-view-button.md) |Compatibility View was introduced in Internet Explorer 8 to help existing content continue to work with Windows Internet Explorer 7, while developers updated their content to support modern interoperable web standards. Since then, the IE web platform, and the web itself, have changed so that most public web content looks for standards-based features instead of IE 7-compatible behavior.

Thanks to these changes, using IE11 in the latest standards mode is more compatible with the web than ever before. As a result, IE11 simplifies web page compatibility for users by removing the Compatibility View button and reducing the number of compatibility options in the F12 developer tools for developers. | +|[Deploy pinned websites using Microsoft Deployment Toolkit (MDT) 2013](deploy-pinned-sites-using-mdt-2013.md) |You can pin websites to the Windows 8.1 taskbar for quick access. You pin a website simply by dragging its tab to the taskbar. Some websites can also extend the icon’s Jump List.

The ability to pin websites to the Windows 8.1 taskbar can help make end-users in businesses more productive. As an IT professional, for example, you can pin intranet and SharePoint websites to the taskbar to make them immediately available to employees. In this article, you learn how to deploy pinned websites by using Lite Touch Installation in the [Microsoft Deployment Toolkit (MDT) 2013](http://go.microsoft.com/fwlink/?LinkId=398474). + + +## IE11 naming conventions +IE11 offers differing experiences in Windows 8.1: + +|Name |Description | +|-----|------------| +|Internet Explorer or IE |The immersive browser, or IE, without a specific version. | +|Internet Explorer for the desktop |The desktop browser. This is the only experience available when running IE11 on Windows 7 SP1 | +|Internet Explorer 11 or IE11 |The whole browser, which includes both IE and Internet Explorer for the desktop. | \ No newline at end of file diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/images/affectedsoftware.png b/browsers/internet-explorer-11/ie11-deploy-guide/images/affectedsoftware.png new file mode 100644 index 0000000000..df63b88432 Binary files /dev/null and b/browsers/internet-explorer-11/ie11-deploy-guide/images/affectedsoftware.png differ diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/images/bulkadd-emiesitelistmgr.png b/browsers/internet-explorer-11/ie11-deploy-guide/images/bulkadd-emiesitelistmgr.png new file mode 100644 index 0000000000..040df5bb07 Binary files /dev/null and b/browsers/internet-explorer-11/ie11-deploy-guide/images/bulkadd-emiesitelistmgr.png differ diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/images/configmgractivexreport.png b/browsers/internet-explorer-11/ie11-deploy-guide/images/configmgractivexreport.png new file mode 100644 index 0000000000..a782b6657c Binary files /dev/null and b/browsers/internet-explorer-11/ie11-deploy-guide/images/configmgractivexreport.png differ diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/images/configmgrhardwareinventory.png b/browsers/internet-explorer-11/ie11-deploy-guide/images/configmgrhardwareinventory.png new file mode 100644 index 0000000000..d2508016be Binary files /dev/null and b/browsers/internet-explorer-11/ie11-deploy-guide/images/configmgrhardwareinventory.png differ diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/images/docmode-f12.png b/browsers/internet-explorer-11/ie11-deploy-guide/images/docmode-f12.png new file mode 100644 index 0000000000..28adf37af6 Binary files /dev/null and b/browsers/internet-explorer-11/ie11-deploy-guide/images/docmode-f12.png differ diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/images/docmodeflow2.png b/browsers/internet-explorer-11/ie11-deploy-guide/images/docmodeflow2.png new file mode 100644 index 0000000000..d3c91e12e7 Binary files /dev/null and b/browsers/internet-explorer-11/ie11-deploy-guide/images/docmodeflow2.png differ diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/images/emie-listmgr.png b/browsers/internet-explorer-11/ie11-deploy-guide/images/emie-listmgr.png new file mode 100644 index 0000000000..f3a1773a45 Binary files /dev/null and b/browsers/internet-explorer-11/ie11-deploy-guide/images/emie-listmgr.png differ diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/images/emie-sitelistmgr.png b/browsers/internet-explorer-11/ie11-deploy-guide/images/emie-sitelistmgr.png new file mode 100644 index 0000000000..ccd5c9cd4b Binary files /dev/null and b/browsers/internet-explorer-11/ie11-deploy-guide/images/emie-sitelistmgr.png differ diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/images/ie-emie-editbindings.png b/browsers/internet-explorer-11/ie11-deploy-guide/images/ie-emie-editbindings.png new file mode 100644 index 0000000000..3d22ce267e Binary files /dev/null and b/browsers/internet-explorer-11/ie11-deploy-guide/images/ie-emie-editbindings.png differ diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/images/ie-emie-editpolicy.png b/browsers/internet-explorer-11/ie11-deploy-guide/images/ie-emie-editpolicy.png new file mode 100644 index 0000000000..f2b011d717 Binary files /dev/null and b/browsers/internet-explorer-11/ie11-deploy-guide/images/ie-emie-editpolicy.png differ diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/images/ie-emie-editregistrystring.png b/browsers/internet-explorer-11/ie11-deploy-guide/images/ie-emie-editregistrystring.png new file mode 100644 index 0000000000..dc365fc8ad Binary files /dev/null and b/browsers/internet-explorer-11/ie11-deploy-guide/images/ie-emie-editregistrystring.png differ diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/images/ie-emie-grouppolicy.png b/browsers/internet-explorer-11/ie11-deploy-guide/images/ie-emie-grouppolicy.png new file mode 100644 index 0000000000..115e7d8a05 Binary files /dev/null and b/browsers/internet-explorer-11/ie11-deploy-guide/images/ie-emie-grouppolicy.png differ diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/images/ie-emie-grouppolicysitelist.png b/browsers/internet-explorer-11/ie11-deploy-guide/images/ie-emie-grouppolicysitelist.png new file mode 100644 index 0000000000..e386b956fc Binary files /dev/null and b/browsers/internet-explorer-11/ie11-deploy-guide/images/ie-emie-grouppolicysitelist.png differ diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/images/ie-emie-logfile.png b/browsers/internet-explorer-11/ie11-deploy-guide/images/ie-emie-logfile.png new file mode 100644 index 0000000000..b58e2a21b8 Binary files /dev/null and b/browsers/internet-explorer-11/ie11-deploy-guide/images/ie-emie-logfile.png differ diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/images/ie-emie-logging.png b/browsers/internet-explorer-11/ie11-deploy-guide/images/ie-emie-logging.png new file mode 100644 index 0000000000..becf942ecd Binary files /dev/null and b/browsers/internet-explorer-11/ie11-deploy-guide/images/ie-emie-logging.png differ diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/images/ie-emie-packageupdate.png b/browsers/internet-explorer-11/ie11-deploy-guide/images/ie-emie-packageupdate.png new file mode 100644 index 0000000000..66480b5f6c Binary files /dev/null and b/browsers/internet-explorer-11/ie11-deploy-guide/images/ie-emie-packageupdate.png differ diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/images/ie-emie-publishsolution.png b/browsers/internet-explorer-11/ie11-deploy-guide/images/ie-emie-publishsolution.png new file mode 100644 index 0000000000..a3daa4e483 Binary files /dev/null and b/browsers/internet-explorer-11/ie11-deploy-guide/images/ie-emie-publishsolution.png differ diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/images/ie-emie-publishweb.png b/browsers/internet-explorer-11/ie11-deploy-guide/images/ie-emie-publishweb.png new file mode 100644 index 0000000000..eaf44305e2 Binary files /dev/null and b/browsers/internet-explorer-11/ie11-deploy-guide/images/ie-emie-publishweb.png differ diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/images/ie-emie-registrysitelist.png b/browsers/internet-explorer-11/ie11-deploy-guide/images/ie-emie-registrysitelist.png new file mode 100644 index 0000000000..dd547ed5f2 Binary files /dev/null and b/browsers/internet-explorer-11/ie11-deploy-guide/images/ie-emie-registrysitelist.png differ diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/images/ie-emie-reportwdetails.png b/browsers/internet-explorer-11/ie11-deploy-guide/images/ie-emie-reportwdetails.png new file mode 100644 index 0000000000..7209452cf3 Binary files /dev/null and b/browsers/internet-explorer-11/ie11-deploy-guide/images/ie-emie-reportwdetails.png differ diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/images/ie-emie-toolsmenu.png b/browsers/internet-explorer-11/ie11-deploy-guide/images/ie-emie-toolsmenu.png new file mode 100644 index 0000000000..66e8ecf082 Binary files /dev/null and b/browsers/internet-explorer-11/ie11-deploy-guide/images/ie-emie-toolsmenu.png differ diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/images/ie-site-discovery-sample-report.png b/browsers/internet-explorer-11/ie11-deploy-guide/images/ie-site-discovery-sample-report.png new file mode 100644 index 0000000000..c53b4d160e Binary files /dev/null and b/browsers/internet-explorer-11/ie11-deploy-guide/images/ie-site-discovery-sample-report.png differ diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/images/ie11-inventory-addclassconnectscreen.png b/browsers/internet-explorer-11/ie11-deploy-guide/images/ie11-inventory-addclassconnectscreen.png new file mode 100644 index 0000000000..629267fb62 Binary files /dev/null and b/browsers/internet-explorer-11/ie11-deploy-guide/images/ie11-inventory-addclassconnectscreen.png differ diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/images/ieoutdatedcontroloutsideofie.png b/browsers/internet-explorer-11/ie11-deploy-guide/images/ieoutdatedcontroloutsideofie.png new file mode 100644 index 0000000000..8c1d246aaf Binary files /dev/null and b/browsers/internet-explorer-11/ie11-deploy-guide/images/ieoutdatedcontroloutsideofie.png differ diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/images/ieoutdatedcontrolwarning.png b/browsers/internet-explorer-11/ie11-deploy-guide/images/ieoutdatedcontrolwarning.png new file mode 100644 index 0000000000..4a6ea00e6f Binary files /dev/null and b/browsers/internet-explorer-11/ie11-deploy-guide/images/ieoutdatedcontrolwarning.png differ diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/images/outdatedcontrolwarning.png b/browsers/internet-explorer-11/ie11-deploy-guide/images/outdatedcontrolwarning.png new file mode 100644 index 0000000000..87e49b5093 Binary files /dev/null and b/browsers/internet-explorer-11/ie11-deploy-guide/images/outdatedcontrolwarning.png differ diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/images/securitybulletin-filter.png b/browsers/internet-explorer-11/ie11-deploy-guide/images/securitybulletin-filter.png new file mode 100644 index 0000000000..73d11e3644 Binary files /dev/null and b/browsers/internet-explorer-11/ie11-deploy-guide/images/securitybulletin-filter.png differ diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/images/setdefaultbrowsergp.png b/browsers/internet-explorer-11/ie11-deploy-guide/images/setdefaultbrowsergp.png new file mode 100644 index 0000000000..2a52b20e23 Binary files /dev/null and b/browsers/internet-explorer-11/ie11-deploy-guide/images/setdefaultbrowsergp.png differ diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/import-into-the-enterprise-mode-site-list-manager.md b/browsers/internet-explorer-11/ie11-deploy-guide/import-into-the-enterprise-mode-site-list-manager.md new file mode 100644 index 0000000000..2bea587cb7 --- /dev/null +++ b/browsers/internet-explorer-11/ie11-deploy-guide/import-into-the-enterprise-mode-site-list-manager.md @@ -0,0 +1,46 @@ +--- +Description: If you need to replace your entire site list because of errors, or simply because it’s out of date, you can import your exported Enterprise Mode site list using the Enterprise Mode Site List Manager. +ms.assetid: cacd5d68-700b-4a96-b4c9-ca2c40c1ac5f +ms.prod: IE11 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: appcompat +title: Import your Enterprise Mode site list to the Enterprise Mode Site List Manager (Internet Explorer 11) +--- + +# Import your Enterprise Mode site list to the Enterprise Mode Site List Manager +**Last updated** + +- November 12, 2015 + +**Applies to:** + +- Windows 10 +- Windows 8.1 +- Windows 7 +- Windows Server 2012 R2 +- Windows Server 2008 R2 with Service Pack 1 (SP1) + +If you need to replace your entire site list because of errors, or simply because it’s out of date, you can import your exported Enterprise Mode site list using the Enterprise Mode Site List Manager. + +**Important**   +Importing your file overwrites everything that’s currently in the tool, so make sure it’s what you really mean to do. + +**To import your compatibility list** + +1. On the **File** menu of the Enterprise Mode Site List Manager, click **Import**. + +2. Go to your exported .EMIE file (for example, `C:\users\\documents\sites.emie`), and then click **Open**. + +3. Review the alert message about all of your entries being overwritten. If you still want to import the file, click **Yes**. + +## Related topics +- [Download the Enterprise Mode Site List Manager for Windows 10 tool](http://go.microsoft.com/fwlink/?LinkId=716853) +- [Download the Enterprise Mode Site List Manager for Windows 7 and Windows 8.1 tool](http://go.microsoft.com/fwlink/?LinkID=394378) +- [Use the Enterprise Mode Site List Manager tool](use-the-enterprise-mode-site-list-manager-tool.md) +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/install-and-deploy-ie11.md b/browsers/internet-explorer-11/ie11-deploy-guide/install-and-deploy-ie11.md new file mode 100644 index 0000000000..c7003bdd99 --- /dev/null +++ b/browsers/internet-explorer-11/ie11-deploy-guide/install-and-deploy-ie11.md @@ -0,0 +1,40 @@ +--- +Description: Use the topics in this section to learn how to customize your Internet Explorer installation package, how to choose the right method for installation, and how to deploy IE into your environment. +ms.assetid: caca18c1-d5c4-4404-84f8-d02bc562915f +ms.prod: IE11 +ms.mktglfcycl: deploy +ms.sitesec: library +title: Install and Deploy Internet Explorer 11 (IE11) +--- + +# Install and Deploy Internet Explorer 11 (IE11) +**Last updated** + +- November 12, 2015 + +**Applies to:** + +- Windows 10 +- Windows 8.1 Update +- Windows 7 with Service Pack 1 (SP1) +- Windows Server 2012 R2 +- Windows Server 2008 R2 with Service Pack 1 (SP1) + +Use the topics in this section to learn how to customize your Internet Explorer installation package, how to choose the right method for installation, and how to deploy IE into your environment. You can also find more info about your virtualization options for legacy apps. + +## In this section + +|Topic |Description | +|------|------------| +|[Customize Internet Explorer 11 installation packages](customize-ie11-install-packages.md) |Guidance about how to use .INF files or the IE Administration Kit 11 (IEAK 11) to create custom packages and about how to create those packages for multiple operating systems. | +|[Choose how to install Internet Explorer 11 (IE11)](choose-how-to-install-ie11.md) |Guidance for the different ways you can install IE, including using System Center 2012 R2 Configuration Manager, Windows Server Update Services (WSUS), Microsoft Intune, your network, the operating system deployment system, or third-party tools. | +|[Choose how to deploy Internet Explorer 11 (IE11)](choose-how-to-deploy-ie11.md) |Guidance about how to deploy your custom version of IE using Automatic Version Synchronization (AVS) or using your software distribution tools. | +|[Virtualization and compatibility with Internet Explorer 11](virtualization-and-compatibility-with-ie11.md) |Info about the Microsoft-supported options for virtualizing web apps. | +  + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/install-ie11-using-microsoft-intune.md b/browsers/internet-explorer-11/ie11-deploy-guide/install-ie11-using-microsoft-intune.md new file mode 100644 index 0000000000..40c77ca43f --- /dev/null +++ b/browsers/internet-explorer-11/ie11-deploy-guide/install-ie11-using-microsoft-intune.md @@ -0,0 +1,47 @@ +--- +Description: How to add and deploy the Internet Explorer 11 update, using Microsoft Intune. +ms.assetid: b2dfc08c-78af-4c22-8867-7be3b92b1616 +ms.prod: IE11 +ms.mktglfcycl: deploy +ms.sitesec: library +title: Install Internet Explorer 11 (IE11) - Microsoft Intune +--- + +# Install Internet Explorer 11 (IE11) using Microsoft Intune +Internet Explorer 11 is available as an update in Microsoft Intune. Microsoft Intune uses Windows cloud services to help you manage updates, monitor and protect your computers, provide remote assistance, track hardware and software inventory, and set security policies. For more information, see the [Documentation Library for Microsoft Intune](http://go.microsoft.com/fwlink/?LinkId=301805). + +## Adding and deploying the IE11 package +You can add and then deploy the IE11 package to any computer that's managed by Microsoft Intune. + +**To add the IE11 package** + +1. From the Microsoft Intune administrator console, start the Microsoft Intune Software Publisher. + +2. Add your IE11 package as either an external link or as a Windows installer package (.exe or .msi). + +For more info about how to decide which one to use, and how to use it, see [Adding Software Packages](http://go.microsoft.com/fwlink/?LinkId=301806). + +**To automatically deploy and install the IE11 package** + +1. From the Microsoft Intune administrator console, start and run through the Deploy Software wizard. + +2. Deploy the package to any of your employee computers that are managed by Microsoft Intune. + +3. After the package is on your employee's computers, the installation process runs, based on what you set up in your wizard. + +For more info about this, see [Automatically Deploying Software Packages to Devices and Users](http://go.microsoft.com/fwlink/?LinkId=301807) + +**To let your employees install the IE11 package** + +1. Install the package on your company's Microsoft Intune site, marking it as **Available** for the appropriate groups. + +2. Any employee in the assigned group can now install the package. + +For more info about this, see [User Initiated Software Installation](http://go.microsoft.com/fwlink/?LinkId=301808) + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/install-ie11-using-operating-system-deployment-systems.md b/browsers/internet-explorer-11/ie11-deploy-guide/install-ie11-using-operating-system-deployment-systems.md new file mode 100644 index 0000000000..e56c608ee9 --- /dev/null +++ b/browsers/internet-explorer-11/ie11-deploy-guide/install-ie11-using-operating-system-deployment-systems.md @@ -0,0 +1,58 @@ +--- +Description: 'Install Internet Explorer 11 (IE11) - Operating system deployment systems' +MS-HAID: 'p\_ie11deploy.install\_internet\_explorer\_11\_\_ie11\_\_\_\_operating\_system\_deployment\_systems' +MSHAttr: 'PreferredLib:/library' +title: 'Install Internet Explorer 11 (IE11) - Operating system deployment systems' +--- + +# - Operating system deployment systems + + +You can install Internet Explorer 11 (IE11) using Microsoft Deployment Toolkit (MDT) and your Windows images. + +You'll need to extract the .cab file for each supported operating system and platform combination and the .msu file for each prerequisite update. Download the IE11 update and prerequisites here: + +- [Microsoft Download Center](http://go.microsoft.com/fwlink/?LinkId=279697) + +- [Microsoft Update Catalog](http://go.microsoft.com/fwlink/?LinkId=214287) + +After you install the .msu file updates, you'll need to add them to your MDT deployment. You'll also need to extract the IE11 .cab update file from the IE11 installation package, using the `/x` command-line option. For example, `IE11-Windows6.1-x64-en-us.exe /x:c:\ie11cab`. + +## + + +MDT adds IE11 to your Windows images, regardless whether you are creating or deploying a customized or non-customized image. MDT also lets you perform offline servicing during the System Center 2012 R2 Configuration Manager task sequence, letting you add IE11 before starting Windows. For info, see [Microsoft Deployment Toolkit (MDT)](http://go.microsoft.com/fwlink/p/?linkid=331148). + +![](../common/wedge.gif)**To add IE11 to a MDT deployment share** + +1. Right-click **Packages** from each **Deployment Shares** location, and then click **Import OS Packages**. + +2. Go to the **Specify Directory** page, search for your folder with your update files (.cab and .msu) for import, and click **Next**. + +3. Go to the **Summary** page and click **Next**. + + MDT starts importing your update files. + + **Note**   + Ignore any warnings that say, "Skipping invalid CAB file". This shows up because the **Import OS Packages** wizard skips the IE11\_Support.cab file, which isn't an actual update file. + +   + +4. After the import finishes, click **Finish**. + +### Offline servicing with MDT + +You can add the IE11 update while you're performing offline servicing, or slipstreaming, of your Windows images. This method lets you deploy IE11 without needing any additional installation after you've deployed Windows. + +These articles have step-by-step details about adding packages to your Windows images: + +- For Windows 8.1, see [Add or Remove Packages Offline Using DISM](http://go.microsoft.com/fwlink/?LinkId=276791). + +- For Windows 7 SP1, see [Add or Remove Packages Offline](http://go.microsoft.com/fwlink/?LinkId=214490). + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/install-ie11-using-system-center-configuration-manager.md b/browsers/internet-explorer-11/ie11-deploy-guide/install-ie11-using-system-center-configuration-manager.md new file mode 100644 index 0000000000..1e92354322 --- /dev/null +++ b/browsers/internet-explorer-11/ie11-deploy-guide/install-ie11-using-system-center-configuration-manager.md @@ -0,0 +1,30 @@ +--- +Description: 'Install Internet Explorer 11 (IE11) - System Center 2012 R2 Configuration Manager' +MS-HAID: 'p\_ie11deploy.install\_internet\_explorer\_11\_\_ie11\_\_\_\_system\_center\_2012\_r2\_configuration\_manager' +MSHAttr: 'PreferredLib:/library' +title: 'Install Internet Explorer 11 (IE11) - System Center 2012 R2 Configuration Manager' +--- + +# - System Center 2012 R2 Configuration Manager + + +You can install Internet Explorer 11 (IE11) by using [System Center R2 2012 Configuration Manager](http://go.microsoft.com/fwlink/p/?linkid=276664). Complete these steps for each operating system and platform combination. + +![](../common/wedge.gif)**To install IE11** + +1. Download and approve the [System requirements and language support for Internet Explorer 11 (IE11)](system-requirements-and-language-support-for-ie11.md). + +2. Create a software distribution package that includes the IE11 installation package. + +3. Create a program that includes the command-line needed to run the IE11 installation package. To run the package silently, without restarting and without checking the Internet for updates, use:`ie11_package.exe /quiet /norestart /update-no`. + +4. Move the installation package to your distribution points, and then advertise the package. + +You can also use System Center Essentials 2010 to deploy IE11 installation packages. For info, see [System Center Essentials 2010](http://go.microsoft.com/fwlink/p/?linkid=395200) and the [System Center Essentials 2010 Operations Guide](http://go.microsoft.com/fwlink/?LinkId=214266). + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/install-ie11-using-the-network.md b/browsers/internet-explorer-11/ie11-deploy-guide/install-ie11-using-the-network.md new file mode 100644 index 0000000000..dd26eee056 --- /dev/null +++ b/browsers/internet-explorer-11/ie11-deploy-guide/install-ie11-using-the-network.md @@ -0,0 +1,38 @@ +--- +Description: 'Install Internet Explorer 11 (IE11) - Network' +MS-HAID: 'p\_ie11deploy.install\_internet\_explorer\_11\_\_ie11\_\_\_\_network' +MSHAttr: 'PreferredLib:/library' +title: 'Install Internet Explorer 11 (IE11) - Network' +--- + +# - Network + + +You can install Internet Explorer 11 (IE11) over your network by putting your custom IE11 installation package in a shared network folder and letting your employees run the Setup program on their own computers. You can create the network folder structure manually, or you can run IEAK 11. + +**Note**   +If you support multiple architectures and operating systems, create a subfolder for each combination. If you support multiple languages, create a subfolder for each localized installation file. + +  + +![](../common/wedge.gif)**To manually create the folder structure** + +- Copy your custom IE11 installation file into a folder on your network, making sure it's available to your employees. + +![](../common/wedge.gif)**To create the folder structure using IEAK 11** + +- Run the Internet Explorer Customization Wizard 11 using the **Full Installation Package** option. + + The wizard automatically puts your custom installation files in your \\*build\_directory*\\Flat folder. Where *build\_directory* is the location of your other build files. + + **Note**   + Use the localized versions of the IE Customization Wizard 11 to create localized IE11 installation packages. + +   + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/install-ie11-using-third-party-tools.md b/browsers/internet-explorer-11/ie11-deploy-guide/install-ie11-using-third-party-tools.md new file mode 100644 index 0000000000..7c06e33310 --- /dev/null +++ b/browsers/internet-explorer-11/ie11-deploy-guide/install-ie11-using-third-party-tools.md @@ -0,0 +1,107 @@ +--- +Description: 'Install Internet Explorer 11 (IE11) - Third-party tools' +MS-HAID: 'p\_ie11deploy.install\_internet\_explorer\_11\_\_ie11\_\_\_\_third\_party\_tools' +MSHAttr: 'PreferredLib:/library' +title: 'Install Internet Explorer 11 (IE11) - Third-party tools' +--- + +# - Third-party tools + + +You can install Internet Explorer 11 (IE11) using third-party electronic software distribution (ESD) systems and these command-line options: + +## Setup Modes + + + ++++ + + + + + + + + + + + + + + +

Command-line options

Description

/passive

Installs without customer involvement.

/quiet

Installs without customer involvement and without showing the UI.

+ +  + +## Setup Options + + + ++++ + + + + + + + + + + + + + + + + + + +

Command-line options

Description

/update-no

Installs without checking for updates.

+
+Important   +

If you don't use this option, you'll need an Internet connection to finish your installation.

+
+
+  +

/no-default

Installs without making IE11 the default web browser.

/closeprograms

Automatically closes running programs.

+ +  + +## Restart Options + + + ++++ + + + + + + + + + + + + + + +

Command-line options

Description

/norestart

Installs without restarting the computer.

/forcerestart

Installs and restarts after installation.

+ +  + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/install-ie11-using-windows-server-update-services-wsus.md b/browsers/internet-explorer-11/ie11-deploy-guide/install-ie11-using-windows-server-update-services-wsus.md new file mode 100644 index 0000000000..7c44109b1d --- /dev/null +++ b/browsers/internet-explorer-11/ie11-deploy-guide/install-ie11-using-windows-server-update-services-wsus.md @@ -0,0 +1,46 @@ +--- +Description: 'Install Internet Explorer 11 (IE11) - Windows Server Update Services (WSUS)' +MS-HAID: 'p\_ie11deploy.install\_internet\_explorer\_11\_\_ie11\_\_\_\_windows\_server\_update\_services\_\_wsus\_' +MSHAttr: 'PreferredLib:/library' +title: 'Install Internet Explorer 11 (IE11) - Windows Server Update Services (WSUS)' +--- + +# + + +Windows Server Update Services (WSUS) lets you download a single copy of the Microsoft product update and cache it on your local WSUS servers. You can then configure your computers to get the update from your local servers instead of Windows Update. For more information about WSUS, see [Windows Server Update Services](http://go.microsoft.com/fwlink/p/?LinkID=276790). + +![](../common/wedge.gif)**To import from Windows Update to WSUS** + +1. Open your WSUS admin site. For example, `http://WSUSServerName/WSUSAdmin/`. + + Where *WSUSServerName* is the name of your WSUS server. + +2. Choose the top server node or the **Updates** node, and then click **Import Updates**. + +3. To get the updates, install the Microsoft Update Catalog ActiveX control. + +4. Search for Internet Explorer 11 and add its contents to your basket. + +5. After you're done browsing, go to your basket and click **Import**. + + You can also download the updates without importing them by unchecking the **Import directly into Windows Server Update Services** box. + +![](../common/wedge.gif)**To approve Internet Explorer in WSUS for installation** + +1. Open your WSUS admin site and check the **Review synchronization settings** box from the **To Do** list. + +2. Click **Synchronize now** to sync your WSUS server with Windows Update, and then click **Updates** from the navigation bar. + +3. Enter **Internet Explorer 11** into the **Search Contains** box, and then click **Apply**. + +4. Choose the right version of IE11 for your operating system, and click **Approve for installation**. + +5. Click each computer group you want to set up for the WSUS server, picking the right approval level, and then click **OK**. + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/install-problems-with-ie11.md b/browsers/internet-explorer-11/ie11-deploy-guide/install-problems-with-ie11.md new file mode 100644 index 0000000000..b7c418b0b2 --- /dev/null +++ b/browsers/internet-explorer-11/ie11-deploy-guide/install-problems-with-ie11.md @@ -0,0 +1,57 @@ +--- +Description: Install problems with Internet Explorer 11 +MS-HAID: 'p\_ie11deploy.install\_problems\_with\_internet\_explorer\_11' +MSHAttr: 'PreferredLib:/library' +title: Install problems with Internet Explorer 11 +--- + +# Install problems with Internet Explorer 11 + + +Most Internet Explorer 11 installations are straightforward and work the way they should. But it's possible that you might have problems. + +If you do, you can: + +- Check that you meet the minimum operating system requirements and have the prerequisites installed. + +- Check that there are no other updates or restarts waiting. + +- Temporarily turn off your antispyware and antivirus software. + +- Try another IE11 installer. For example from [Windows Update](http://go.microsoft.com/fwlink/?LinkId=302315) or from the [Download Internet Explorer 11](http://go.microsoft.com/fwlink/p/?linkid=327753) website. + +- Review the IE11\_main.log file in the \\Windows folder. This log file has information about each installation and is appended for each subsequent installation. + +- Make sure you use the same download server URLs that you entered during the Setup process. + +## Internet Explorer didn't finish installing + + +If Internet Explorer doesn't finish installing, it might mean that Windows Update wasn't able to install an associated update, that you have a previous, unsupported version of IE installed, or that there's a problem with your copy of IE. We recommend you try this: + +![](../common/wedge.gif)**To fix this issue** + +1. Uninstall IE: + + 1. In the Control Panel, open the **Programs and Features** box, scroll down to IE11, and then click **Uninstall**. + + 2. After the uninstall finishes, restart your computer. + +2. Run [Windows Update](http://go.microsoft.com/fwlink/?LinkId=302315), clicking **Check for updates**. + +3. Check the list for IE11. If it's included in the list of updates for download, exclude it before you update your computer. + + If you get an error during the Windows Update process, see [Fix the problem with Microsoft Windows Update that is not working](http://go.microsoft.com/fwlink/?LinkId=302316). + +4. Restart your computer, making sure all of your the updates are finished. + +5. Try to reinstall IE11 from either Windows Update (if you saw it in Step 3) or from the [Download Internet Explorer 11](http://go.microsoft.com/fwlink/p/?linkid=327753) website. + +If these steps didn't fix your problem, see [Troubleshooting a failed installation of Internet Explorer 11](http://go.microsoft.com/fwlink/?LinkId=304130). + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/intranet-problems-and-ie11.md b/browsers/internet-explorer-11/ie11-deploy-guide/intranet-problems-and-ie11.md new file mode 100644 index 0000000000..8e1dfb19fd --- /dev/null +++ b/browsers/internet-explorer-11/ie11-deploy-guide/intranet-problems-and-ie11.md @@ -0,0 +1,39 @@ +--- +Description: Intranet problems with Internet Explorer 11 +MS-HAID: 'p\_ie11deploy.intranet\_problems\_with\_internet\_explorer\_11' +MSHAttr: 'PreferredLib:/library' +title: Intranet problems with Internet Explorer 11 +--- + +# Intranet problems with Internet Explorer 11 + + +You might experience the following issues with your intranet site, after upgrading to the latest version of Internet Explorer. + +## Why is my intranet redirecting me to search results? + + +Internet Explorer 11 works differently with search, based on whether your organization is domain-joined. + +- **Domain-joined computers.** A single word entry is treated as a search term. However, IE11 also checks for available intranet sites and offers matches through the **Notification bar**. If you select **Yes** from the **Notification bar** to navigate to the intranet site, IE11 associates that word with the site so that the next time you type in the intranet site name, inline auto-complete will resolve to the intranet site address. + +- **Non-domain-joined computers.** A single word entry is treated as an intranet site. However, if the term doesn't resolve to a site, IE11 then treats the entry as a search term and opens your default search provider. + +To explicitly go to an intranet site, regardless of the environment, users can type either a trailing slash, like" contoso/", or the http:// prefix. Either of these will cause IE11 to treat the entry as an intranet search. + +You can change the default behavior so that IE11 treats your single word entry in the address bar as an intranet site, regardless of your environment. + +![](../common/wedge.gif)**To enable single-word intranet search** + +1. Open Internet Explorer for the desktop, click the **Tools** menu, and then click **Internet Options**. + +2. Click **Advanced**, check the **Go to an intranet site for a single word entry in the Address bar** box, and then click **OK**. + +If you'd like your entire organization to have single word entries default to an intranet site, you can turn on the **Go to an intranet site for a single word entry in the Address bar** Group Policy. With this policy turned on, a search for “contoso” automatically resolves to http://contoso. + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/manage-ie11-overview.md b/browsers/internet-explorer-11/ie11-deploy-guide/manage-ie11-overview.md new file mode 100644 index 0000000000..0312b3bd74 --- /dev/null +++ b/browsers/internet-explorer-11/ie11-deploy-guide/manage-ie11-overview.md @@ -0,0 +1,62 @@ +--- +Description: 'Use the topics in this section to learn about how to auto detect your settings, auto configure your configuration settings, and auto configure your proxy configuration settings for Internet Explorer.' +MS-HAID: 'p\_ie11deploy.manage\_internet\_explorer\_11' +MSHAttr: 'PreferredLib:/library' +title: Manage Internet Explorer 11 +--- + +# Manage Internet Explorer 11 + + +**Last updated** + +- November 12, 2015 + +**Applies to:** + +- Windows 10 +- Windows 8.1 +- Windows 7 +- Windows Server 2012 R2 +- Windows Server 2008 R2 with Service Pack 1 (SP1) + +Use the topics in this section to learn about how to auto detect your settings, auto configure your configuration settings, and auto configure your proxy configuration settings for Internet Explorer. + +## In this section + + + ++++ + + + + + + + + + + + + + + + + + + + + +
TopicDescription

[Auto detect settings Internet Explorer 11](auto-detect-settings-for-ie11.md)

Guidance about how to update your automatic detection of DHCP and DNS servers.

[Auto configuration settings for Internet Explorer 11](auto-configuration-settings-for-ie11.md)

Guidance about how to add, update and lock your auto configuration settings.

[Auto proxy configuration settings for Internet Explorer 11](auto-proxy-configuration-settings-for-ie11.md)

Guidance about how to add, update, and lock your auto-proxy settings.

+ +  + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/missing-internet-explorer-maintenance-settings-for-ie11.md b/browsers/internet-explorer-11/ie11-deploy-guide/missing-internet-explorer-maintenance-settings-for-ie11.md new file mode 100644 index 0000000000..e79b12f9b5 --- /dev/null +++ b/browsers/internet-explorer-11/ie11-deploy-guide/missing-internet-explorer-maintenance-settings-for-ie11.md @@ -0,0 +1,230 @@ +--- +Description: 'The Internet Explorer Maintenance (IEM) settings have been deprecated in favor of Group Policy Preferences, Administrative Templates (.admx), and the IE Administration Kit 11 (IEAK 11).Because of this change, your IEM-configured settings will no longer work on computers running Internet Explorer 10 or newer. To fix this, you need to update the affected settings using Group Policy Preferences, Administrative Templates (.admx), or IE Administration Kit 11 (IEAK 11).Because Group Policy Preferences and IEAK 11 run using asynchronous processes, you should choose to use only one of the tools within each group of settings. For example, using only IEAK 11 in the Security settings or Group Policy Preferences within the Internet Zone settings. Also, it''s important to remember that policy is enforced and can''t be changed by the user, while preferences are configured, but can be changed by the user.' +MS-HAID: 'p\_ie11deploy.missing\_internet\_explorer\_maintenance\_settings\_for\_internet\_explorer\_11' +MSHAttr: 'PreferredLib:/library' +title: Missing Internet Explorer Maintenance settings for Internet Explorer 11 +--- + +# Missing Internet Explorer Maintenance settings for Internet Explorer 11 + + +**Last updated** + +- November 12, 2015 + +**Applies to:** + +- Windows 10 +- Windows 8.1 +- Windows 7 +- Windows Server 2012 R2 +- Windows Server 2008 R2 with Service Pack 1 (SP1) + +The Internet Explorer Maintenance (IEM) settings have been deprecated in favor of Group Policy Preferences, Administrative Templates (.admx), and the IE Administration Kit 11 (IEAK 11). + +Because of this change, your IEM-configured settings will no longer work on computers running Internet Explorer 10 or newer. To fix this, you need to update the affected settings using Group Policy Preferences, Administrative Templates (.admx), or IE Administration Kit 11 (IEAK 11). + +Because Group Policy Preferences and IEAK 11 run using asynchronous processes, you should choose to use only one of the tools within each group of settings. For example, using only IEAK 11 in the **Security** settings or Group Policy Preferences within the **Internet Zone** settings. Also, it's important to remember that policy is enforced and can't be changed by the user, while preferences are configured, but can be changed by the user. + +For more information about all of the new options and Group Policy, see: + +- [Group policy preferences and Internet Explorer 11](group-policy-preferences-and-ie11.md) + +- [Administrative templates and Internet Explorer 11](aadministrative-templates-and-ie11.md) + +- [IEAK 11 - Internet Explorer Administration Kit 11 Guide](http://go.microsoft.com/fwlink/p/?linkid=327741) + +- [Group Policy Settings Reference for Windows and Windows Server](http://go.microsoft.com/fwlink/?LinkId=279876) + +- [Group Policy ADMX Syntax Reference Guide](http://go.microsoft.com/fwlink/?LinkId=276830) + +- [Enable and Disable Settings in a Preference Item](http://go.microsoft.com/fwlink/?LinkId=282671) + +## IEM replacements + + +The IEM settings have replacements you can use in either Group Policy Preferences or IEAK 11. + +IEM setting +Description +Replacement tool +**Browser User Interface** + +Browser title + +Lets you customize the text that shows up in the title bar of the browser. + +On the **Browser User Interface** page of IEAK 11, click **Customize Title Bars**, and then type the text that appears on the title bar of the **Title Bar Text** box. + +Your text is appended to the text," Microsoft Internet Explorer provided by". + +Browser toolbar customizations (background and buttons) + +Lets you customize the buttons on the browser toolbar. + +- **Buttons.** Customizes the buttons on the Internet Explorer 11 toolbar. + +- **Background.** No longer available. + +On the **Browser User Interface** page of IEAK 11, click **Add**, type your new toolbar caption, action, and icon, and if the button should appear by default, and then click **OK**. You can also edit, remove, or delete an existing toolbar button from this page. + +**Important**   +This setting isn't available anymore. + +  + +Custom logo and animated bitmaps + +Lets you replace the static and animated logos in the upper-right corner of the IE window with customized logos. + +**Important**   +This setting isn't available anymore. + +  + +**Connection** + +Connection settings + +Lets you import your connection settings from a previously set up computer. These settings define how your employees interact with the connection settings on the **System Polices and Restrictions** page. You can also remove old dial-up connections settings from your employee's computers. + +In the **Internet Settings Group Policy Preferences** dialog box, click the **Connections** tab, and set up your proxy settings. + +-or- + +On the **Connection Settings** page of IEAK 11, change your connection settings, including importing your current connection settings and deleting existing dial-up connection settings (as needed). + +Automatic browser configuration + +Lets you update your employee's computer after you've deployed IE11, by specifying a URL to an .ins file, an auto-proxy URL, or both. You can decide when the update occurs, in minutes. Typing zero, or not putting in any number, means that automatic configuration only happens after the browser is started and used to go to a page. + +In the **Internet Settings Group Policy Preferences** dialog box, click the **Automatic Configuration** tab, and then add your URL. + +On the **Automatic Configuration** page of IEAK 11, modify the configuration settings, including providing the URL to an .ins file or an auto-proxy site. + +Proxy settings + +Lets you specify your proxy servers. + +In the **Internet Settings Group Policy Preferences** dialog box, click the **Connections** tab, click **LAN Settings**, and then choose whether to turn on automatic detection of your configuration settings and if you want to use proxy servers. + +-or- + +On the **Proxy Settings** page of IEAK 11, turn on your proxy settings, adding your proxy server addresses and exceptions. + +User Agent string + +Lets the browser provide identification to visited servers. This string is often used to keep Internet traffic statistics. + +This setting isn't available anymore. + +**Important**   +This setting isn't available anymore. + +  + +**URLs** + +Favorites and links + +Lets you use custom URLs for the **Favorites** and **Links** folders. You can also specify the folder order, disable IE Suggested Sites, and import an existing folder structure. + +On the **Favorites, Favorites Bar and Feeds** page of IEAK 11, add your custom URLs to the **Favorites**, **Favorites Bar**, or **RSS Feeds** folders, or create new folders. + +You can also edit, test, or remove your URLs, sort the list order, or disable IE Suggested Sites. + +Important URLs + +Lets you add custom **Home** pages that can open different tabs. You can also add a **Support** page that shows up when an employee clicks online Help. + +In the **Internet Settings Group Policy Preferences** dialog box, click the **General** tab, and add your custom **Home** page. + +On the **Important URLs - Home page and Support** page of IEAK 11, add the custom URLs to your **Home** and **Support** pages. + +You can also click to retain the previous home page information when the user upgrades to a newer version of IE. + +**Security Zones and Content Ratings** + +Security zones + +Lets you change your security settings, by zone. + +In the **Internet Settings Group Policy Preferences** dialog box, click the **Security** tab, and update your security settings, based on zone. + +-or- + +On the **Security and Privacy Settings** page of IEAK 11, choose your **Security Zones and Privacy** setting, changing it, as necessary. + +Content ratings + +Lets you change your content ratings so your employees can't view sites with risky content. + +On the **Security and Privacy Settings** page of IEAK 11, choose your **Content Ratings** setting, changing it, as necessary. + +Authenticode settings + +Lets you pick your trustworthy software publishers and stop your employees from adding new, untrusted publishers while browsing. + +**Important**   +These settings aren't available anymore. + +  + +**Programs** + +Programs + +Lets you import your default program settings, which specify the programs Windows uses for each Internet service. + +In the **Internet Settings Group Policy Preferences** dialog box, click the **Programs** tab, and choose how to open IE11 links. + +-or- + +On the **Programs** page of IEAK 11, choose whether to customize or import your program settings. + +  + +The Advanced IEM settings, including Corporate and Internet settings, were also deprecated. However, they also have replacements you can use in either Group Policy Preferences or IEAK 11. + +**Note**   +Advanced IEM Settings were shown under **Programs** and only available when running in **Preference** mode. + +  + + +++++ + + + + + + + + + + + + + + + + + + + +
IEM settingDescriptionNew tool

Corporate settings

Specifies the location of the file with the settings you use to make IE work best in your organization.

On the Additional Settings page of IEAK 11, expand Corporate Settings, and then customize how your organization handles temporary Internet files, code downloads, and menu items and toolbar buttons.

Internet settings

Specifies the location of the file that includes your default IE settings.

In the Internet Settings Group Policy Preferences dialog box, click the Advanced tab, and then update your Internet-related settings, as required

+

-or-

+

On the Additional Settings page of IEAK 11, expand Internet Settings, and then customize your default values in the Internet Options dialog box.

+ +  + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/missing-the-compatibility-view-button.md b/browsers/internet-explorer-11/ie11-deploy-guide/missing-the-compatibility-view-button.md new file mode 100644 index 0000000000..52a29fbed5 --- /dev/null +++ b/browsers/internet-explorer-11/ie11-deploy-guide/missing-the-compatibility-view-button.md @@ -0,0 +1,57 @@ +--- +Description: 'Compatibility View was introduced in Windows Internet Explorer 8 to help existing content continue to work with Windows Internet Explorer 7, while developers updated their content to support modern interoperable web standards.' +MS-HAID: 'p\_ie11deploy.missing\_the\_compatibility\_view\_button' +MSHAttr: 'PreferredLib:/library' +title: Missing the Compatibility View Button +--- + +# Missing the Compatibility View Button + + +**Last updated** + +- November 12, 2015 + +**Applies to:** + +- Windows 10 +- Windows 8.1 +- Windows 7 +- Windows Server 2012 R2 +- Windows Server 2008 R2 with Service Pack 1 (SP1) + +Compatibility View was introduced in Windows Internet Explorer 8 to help existing content continue to work with Windows Internet Explorer 7, while developers updated their content to support modern interoperable web standards. Since then, the Internet Explorer web platform, and the web itself, have changed so that most public web content looks for standards-based features instead of IE 7-compatible behavior. + +Thanks to these changes, using Internet Explorer 11 in the latest standards mode is more compatible with the web than ever before. As a result, IE11 simplifies web page compatibility for users by removing the **Compatibility View** button and reducing the number of compatibility options in the F12 developer tools for developers. + +## What happened to the Compatibility View button? + + +In previous versions of IE, the **Compatibility View** button would attempt to fix a broken standards-based website, by getting the page to appear like it did in Internet Explorer 7. Today however, more standards-based websites are broken by attempting to appear like they did in Internet Explorer 7. So instead of implementing and using Compatibility View, developers are updating their server configuration to add X-UA-Compatible meta tags, which forces the content to the “edge”, making the **Compatibility View** button disappear. In support of these changes, the Compatibility View button has been completely removed for IE11. + +## What if I still need Compatibility View? + + +There might be extenuating circumstances in your company, which require you to continue to use Compatibility View. In this situation, this process should be viewed strictly as a workaround. You should work with the website vendor to make sure that the affected pages are updated to match the latest web standards. The functionality described here is currently deprecated and will be removed at a time in the future. + +**Important**   +This functionality is only available in Internet Explorer for the desktop. + +  + +![](../common/wedge.gif)**To change your Compatibility View settings** + +1. Open Internet Explorer for the desktop, click **Tools**, and then click **Compatibility View settings**. + +2. In the **Compatibility View Settings** box, add the problematic website URL, and then click **Add**. + + Compatibility View is turned on for this single website, for this specific computer. + +3. Decide if you want your intranet sites displayed using Compatibility View, decide whether to use Microsoft compatibility lists, and then click **Close**. + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/net-framework-problems-with-ie11.md b/browsers/internet-explorer-11/ie11-deploy-guide/net-framework-problems-with-ie11.md new file mode 100644 index 0000000000..3bba3b576e --- /dev/null +++ b/browsers/internet-explorer-11/ie11-deploy-guide/net-framework-problems-with-ie11.md @@ -0,0 +1,28 @@ +--- +Description: '.NET Framework problems with Internet Explorer 11' +MS-HAID: 'p\_ie11deploy.net\_framework\_problems\_with\_internet\_explorer\_11' +MSHAttr: 'PreferredLib:/library' +title: '.NET Framework problems with Internet Explorer 11' +--- + +# .NET Framework problems with Internet Explorer 11 + + +If you’re having problems launching your legacy apps while running Internet Explorer 11, it’s most likely because Internet Explorer no longer starts apps that use managed browser hosting controls, like in the .NET Framework 1.1 and 2.0. + +You can get IE11 to use managed browser hosting controls again, by: + +![](../common/wedge.gif)**To turn managed browser hosting controls back on** + +1. **For x86 systems or for 32-bit processes on x64 systems:** Go to the HKLM/SOFTWARE/MICROSOFT/.NETFramework registry key and change the **EnableIEHosting** value to 1. + +2. **For x64 systems or for 64-bit processes on x64 systems:** Go to the HKLM/SOFTWARE/Wow6432Node/.NETFramework registry key and change the **EnableIEHosting** value to 1. + +For more information, see the [Web Applications](http://go.microsoft.com/fwlink/?LinkId=308903) section of the Application Compatibility in the .NET Framework 4.5 page. + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/new-group-policy-settings-for-ie11.md b/browsers/internet-explorer-11/ie11-deploy-guide/new-group-policy-settings-for-ie11.md new file mode 100644 index 0000000000..9df4461171 --- /dev/null +++ b/browsers/internet-explorer-11/ie11-deploy-guide/new-group-policy-settings-for-ie11.md @@ -0,0 +1,217 @@ +--- +Description: New group policy settings for Internet Explorer 11 +MS-HAID: 'p\_ie11deploy.new\_group\_policy\_settings\_for\_internet\_explorer\_11' +MSHAttr: 'PreferredLib:/library' +title: New group policy settings for Internet Explorer 11 +--- + +# New group policy settings for Internet Explorer 11 + + +Internet Explorer 11 gives you some new Group Policy settings to help you manage your company's web browser configurations, including: + + ++++++ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
PolicyCategory pathSupported onExplanation

Turn off loading websites and content in the background to optimize performance

Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Advanced Page

IE11

This policy setting determines whether Internet Explorer preemptively loads websites and content in the background, speeding up performance such that when the user clicks a hyperlink, the background page seamlessly switches into view.

+

If you enable this policy setting, IE doesn't load any websites or content in the background.

+

If you disable this policy setting, IE preemptively loads websites and content in the background.

+

If you don’t configure this policy setting, users can turn this behavior on or off, using IE settings. This feature is turned on by default.

Allow Microsoft services to provide enhanced suggestions as the user types in the Address bar

Administrative Templates\Windows Components\Internet Explorer

IE11

This policy setting allows IE to provide enhanced suggestions as the user types in the Address bar. To provide enhanced suggestions, the user’s keystrokes are sent to Microsoft through Microsoft services.

+

If you enable this policy setting, users receive enhanced suggestions while typing in the Address bar. In addition, users won’t be able to change the Suggestions setting on the Settings charm.

+

If you disable this policy setting, users won’t receive enhanced suggestions while typing in the Address bar. In addition, users won’t be able to change the Suggestions setting on the Settings charm.

+

If you don’t configure this policy setting, users can change the Suggestions setting on the Settings charm.

Turn off phone number detection

Administrative Templates\Windows Components\Internet Explorer\Internet Settings\Advanced settings\Browsing

IE11

This policy setting determines whether phone numbers are recognized and turned into hyperlinks, which can be used to invoke the default phone application on the system.

+

If you enable this policy setting, phone number detection is turned off. Users won’t be able to modify this setting.

+

If you disable this policy setting, phone number detection is turned on. Users won’t be able to modify this setting.

+

If you don't configure this policy setting, users can turn this behavior on or off, using IE settings. The default is on.

Allow IE to use the HTTP2 network protocol

Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Advanced Page

IE11 on Windows 8.1

This policy setting determines whether IE uses the HTTP2 network protocol. HTTP2 works with HTTP requests to optimize the latency of network requests through compression, multiplexing, and prioritization.

+

If you enable this policy setting, IE uses the HTTP2 network protocol.

+

If you disable this policy setting, IE won't use the HTTP2 network protocol.

+

If you don't configure this policy setting, users can turn this behavior on or off, using IE Advanced Internet Options settings. The default is on.

Don't run antimalware programs against ActiveX controls

+

(Internet, Restricted Zones)

    +

  • Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone

    • +

  • Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Internet Zone

    • +

  • Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone

    • +

  • Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Restricted Sites Zone

    • +

IE11

This policy setting determines whether IE runs antimalware programs against ActiveX controls, to check if they're safe to load on pages.

+

If you enable this policy setting, IE won't check with your antimalware program to see if it's safe to create an instance of the ActiveX control.

+

If you disable this policy setting, IE always checks with your antimalware program to see if it's safe to create an instance of the ActiveX control.

+

If you don't configure this policy setting, IE always checks with your antimalware program to see if it's safe to create an instance of the ActiveX control. Users can turn this behavior on or off, using IE Security settings.

Don't run antimalware programs against ActiveX controls

+

(Intranet, Trusted, Local Machine Zones)

    +

  • Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Intranet Zone

    • +

  • Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Intranet Zone

    • +

  • Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Trusted Sites Zone

    • +

  • Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Trusted Sites Zone

    • +

  • Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Local Machine Zone

    • +

  • Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Local Machine Zone

    • +

IE11

This policy setting determines whether IE runs antimalware programs against ActiveX controls, to check if they're safe to load on pages.

+

If you enable this policy setting, IE won't check with your antimalware program to see if it's safe to create an instance of the ActiveX control.

+

If you disable this policy setting, IE always checks with your antimalware program to see if it's safe to create an instance of the ActiveX control.

+

If you don't configure this policy setting, IE won't check with your antimalware program to see if it's safe to create an instance of the ActiveX control. Users can turn this behavior on or off, using IE Security settings.

Turn on 64-bit tab processes when running in Enhanced Protected Mode on 64-bit versions of Windows

Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Advanced Page

IE11

This policy setting determines whether IE11 uses 64-bit processes (for greater security) or 32-bit processes (for greater compatibility) when running in Enhanced Protected Mode on 64-bit versions of Windows.

+

Important: Some ActiveX controls and toolbars may not be available when 64-bit processes are used.

+

If you enable this policy setting, IE11 will use 64-bit tab processes when running in Enhanced Protected Mode on 64-bit versions of Windows.

+

If you disable this policy setting, IE11 will use 32-bit tab processes when running in Enhanced Protected Mode on 64-bit versions of Windows.

+

If you don't configure this policy setting, users can turn this feature on or off using IE settings. This feature is turned off by default.

Turn off sending UTF-8 query strings for URLs

Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Advanced Page

IE11

This policy setting determines whether IE uses 8-bit Unicode Transformation Format (UTF-8) to encode query strings in URLs before sending them to servers or to proxy servers.

+

If you enable this policy setting, you must specify when to use UTF-8 to encode query strings:

+

0) Never encode query strings.

+

1) Only encode query strings for URLs that aren't in the Intranet zone.

+

2) Only encode query strings for URLs that are in the Intranet zone.

+

3) Always encode query strings.

+

If you disable or don't configure this policy setting, users can turn this behavior on or off, using IE Advanced Options settings. The default is to encode all query strings in UTF-8.

Turn off sending URL path as UTF-8

User Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Settings\URL Encoding

At least Windows Internet Explorer 7

This policy setting determines whether to let IE send the path portion of a URL using the UTF-8 standard. This standard defines characters so they're readable in any language and lets you exchange Internet addresses (URLs) with characters included in any language.

+

If you enable this policy setting, UTF-8 is not allowed. Users won't be able to change this setting.

+

If you disable this policy setting, UTF-8 is allowed. Users won't be able to change this setting.

+

If you don't configure this policy setting, users can turn this behavior on or off.

Turn off the flip ahead with page prediction feature

Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Advanced Page

At least Internet Explorer 10 on Windows 8

This policy setting determines whether a user can swipe across a screen or click Forward to go to the next pre-loaded page of a website.

+

Microsoft collects your browsing history to improve how flip ahead with page prediction works. This feature isn’t available for Internet Explorer for the desktop.

+

If you enable this policy setting, flip ahead with page prediction is turned off and the next webpage isn’t loaded into the background.

+

If you disable this policy setting, flip ahead with page prediction is turned on and the next webpage is loaded into the background.

+

If you don’t configure this setting, users can turn this behavior on or off, using the Settings charm.

Prevent deleting ActiveX Filtering, Tracking Protection and Do Not Track data

Administrative Templates\Windows Components\Internet Explorer\Delete Browsing History

At least Windows Internet Explorer 9

In Internet Explorer 9 and Internet Explorer 10:

+

This policy setting prevents users from deleting ActiveX Filtering and Tracking Protection data, which includes the list of websites for which the user has chosen to disable ActiveX Filtering or Tracking Protection. In addition, Tracking Protection data is also collected if users turn on the Personalized Tracking Protection List, which blocks third-party items while the user is browsing.

+

With IE11:

+

This policy setting prevents users from deleting ActiveX Filtering, Tracking Protection data, and Do Not Track exceptions stored for visited website.

+

This feature is available in the Delete Browsing History dialog box.

+

If you enable this policy setting, ActiveX Filtering, Tracking Protection and Do Not Track data is preserved when the user clicks Delete.

+

If you disable this policy setting, ActiveX Filtering, Tracking Protection and Do Not Track data is deleted when the user clicks Delete.

+

If you don’t configure this policy setting, users can turn this feature on and off, determining whether to delete ActiveX Filtering, Tracking Protection, and Do Not Track data when clicking Delete.

Always send Do Not Track header

Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Advanced Page

At least Internet Explorer 10

This policy setting allows you to configure how IE sends the Do Not Track (DNT) header.

+

If you enable this policy setting, IE sends a DNT:1 header with all HTTP and HTTPS requests. The DNT:1 header signals to the servers not to track the user.

+

For Internet Explorer 9 and 10:

+

If you disable this policy setting, IE only sends the Do Not Track header if a Tracking Protection List is enabled or inPrivate Browsing mode is used.

+

At least IE11:

+

If you disable this policy setting, IE only sends the Do Not Track header if inPrivate Browsing mode is used.

+

If you don't configure the policy setting, users can select the Always send Do Not Track header option on the Advanced tab of the Internet Options dialog box. By selecting this option, IE sends a DNT:1 header with all HTTP and HTTPS requests; unless the user grants a site-specific exception, in which case IE sends a DNT:0 header. By default, this option is enabled.

Let users turn on and use Enterprise Mode from the Tools menu

Administrative Templates\Windows Components\Internet Explorer

IE11

This policy setting lets you decide whether users can turn on Enterprise Mode for websites with compatibility issues. Optionally, this policy also lets you specify where to get reports (through post messages) about the websites for which users turn on Enterprise Mode using the Tools menu.

+

If you turn this setting on, users can see and use the Enterprise Mode option from the Tools menu. If you turn this setting on, but don’t specify a report location, Enterprise Mode will still be available to your users, but you won’t get any reports.

+

If you disable or don’t configure this policy setting, the menu option won’t appear and users won’t be able to turn on Enterprise Mode locally.

Use the Enterprise Mode IE website list

Administrative Templates\Windows Components\Internet Explorer

IE11

This policy setting lets you specify where to find the list of websites you want opened using Enterprise Mode, instead of Standard mode, because of compatibility issues. Users can’t edit this list.

+

If you enable this policy setting, IE downloads the website list from HKCU or HKLM\Software\policies\Microsoft\Internet Explorer\Main\EnterpriseMode, opening all included websites using Enterprise Mode. We recommend storing and downloading your list from a secure web server (https://), to help protect against data tampering.

+

If you disable or don’t configure this policy setting, IE opens all websites using Standard mode.

+ +  + +## Removed Group Policy settings + + +IE11 no longer supports these Group Policy settings: + +- Turn on Internet Explorer 7 Standards Mode + +- Turn off Compatibility View button + +- Turn off Quick Tabs functionality + +- Turn off the quick pick menu + +- Use large icons for command buttons + +## Viewing your policy settings + + +After you've finished updating and deploying your Group Policy, you can use the Resultant Set of Policy (RSoP) snap-in to view your settings. + +![](../common/wedge.gif)**To use the RSoP snap-in** + +1. Open and run the Resultant Set of Policy (RSoP) wizard, specifying the information you want to see. + +2. Open your wizard results in the Group Policy Management Console (GPMC). + + For complete instructions about how to add, open, and use RSoP, see [Use the RSoP Snap-in](http://go.microsoft.com/fwlink/p/?LinkId=395201) + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/out-of-date-activex-control-blocking.md b/browsers/internet-explorer-11/ie11-deploy-guide/out-of-date-activex-control-blocking.md new file mode 100644 index 0000000000..4180d6f7e7 --- /dev/null +++ b/browsers/internet-explorer-11/ie11-deploy-guide/out-of-date-activex-control-blocking.md @@ -0,0 +1,457 @@ +--- +Description: 'ActiveX controls are small apps that let websites provide content, like videos, games, and let you interact with content like toolbars.' +MS-HAID: 'p\_ie11deploy.out\_of\_date\_activex\_control\_blocking' +MSHAttr: 'PreferredLib:/library' +title: 'Out-of-date ActiveX control blocking' +--- + +# Out-of-date ActiveX control blocking + + +**Last updated** + +- November 12, 2015 + +**Applies to:** + +- Windows 10 +- Windows 8.1 +- Windows 7 +- Windows Server 2012 R2 +- Windows Server 2008 R2 with Service Pack 1 (SP1) +- Windows Vista SP2 + +ActiveX controls are small apps that let websites provide content, like videos, games, and let you interact with content like toolbars. Unfortunately, because many ActiveX controls aren’t automatically updated, they can become outdated as new versions are released. It’s very important that you keep your ActiveX controls up-to-date because malicious software (or malware) can target security flaws in outdated controls, damaging your computer by collecting info from it, installing unwanted software, or by letting someone else control it remotely. To help avoid this situation, Internet Explorer includes a new security feature, called *out-of-date ActiveX control blocking*. + +Out-of-date ActiveX control blocking lets you: + +- Know when IE prevents a webpage from loading common, but outdated ActiveX controls. + +- Interact with other parts of the webpage that aren’t affected by the outdated control. + +- Update the outdated control, so that it’s up-to-date and safer to use. + +The out-of-date ActiveX control blocking feature works with all [Security Zones](http://go.microsoft.com/fwlink/?LinkId=403863), except the Local Intranet Zone and the Trusted Sites Zone. + +It also works with these operating system and IE combinations: + + ++++ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Windows operating systemIE version

Windows 10

All supported versions of IE.

+

Microsoft Edge doesn't support ActiveX controls.

Windows 8.1 and Windows 8.1 Update

All supported versions of IE.

Windows 7 SP1

All supported versions of IE.

Windows Server 2012

All supported versions of IE.

Windows Server 2008 R2 SP1

All supported versions of IE.

Windows Server 2008 SP2

Windows Internet Explorer 9 only

Windows Vista SP2

Windows Internet Explorer 9 only

+ +  + +For more info about this new feature, see [Internet Explorer begins blocking out-of-date ActiveX controls](http://go.microsoft.com/fwlink/?LinkId=507691) blog. To see the complete list of out-of-date Active controls blocked by this feature, go [here](http://go.microsoft.com/fwlink/?LinkId=517023). + +## What does the out-of-date ActiveX control blocking notification look like? + + +When IE blocks an outdated ActiveX control, you’ll see a notification bar similar to this, depending on your version of IE: + +**Internet Explorer 9 through Internet Explorer 11** + +![warning about outdated activex controls (ie9+)](images/outdatedcontrolwarning.png) +**Windows Internet Explorer 8** + +![warning about outdated activex controls (ie8)](images/ieoutdatedcontrolwarning.png) +Out-of-date ActiveX control blocking also gives you a security warning that tells you if a webpage tries to launch specific outdated apps, outside of IE: + +![warning about outdated activex controls outside ie](images/ieoutdatedcontroloutsideofie.png) +## How do I fix an outdated ActiveX control or app? + + +From the notification about the outdated ActiveX control, you can go to the control’s website to download its latest version. + +![](../common/wedge.gif)**To get the updated ActiveX control** + +1. From the notification bar, tap or click **Update**. + + IE opens the ActiveX control’s website. + +2. Download the latest version of the control. + +**Security Note:  ** + +If you don’t fully trust a site, you shouldn’t allow it to load an outdated ActiveX control. However, although we don’t recommend it, you can view the missing webpage content by tapping or clicking **Run this time**. This option runs the ActiveX control without updating or fixing the problem. The next time you visit a webpage running the same outdated ActiveX control, you’ll get the notification again. + +![](../common/wedge.gif)**To get the updated app** + +1. From the security warning, tap or click **Update** link. + + IE opens the app’s website. + +2. Download the latest version of the app. + +**Security Note:  ** + +If you don’t fully trust a site, you shouldn’t allow it to launch an outdated app. However, although we don’t recommend it, you can let the webpage launch the app by tapping or clicking **Allow**. This option opens the app without updating or fixing the problem. The next time you visit a webpage running the same outdated app, you’ll get the notification again. + +## How does IE decide which ActiveX controls to block? + + +IE uses Microsoft’s versionlist.xml file to determine whether an ActiveX control should be stopped from loading. This file is updated with newly-discovered out-of-date ActiveX controls, which IE automatically downloads to your local copy of the file. + +You can see your copy of the versionlist.xml file here `%LOCALAPPDATA%\Microsoft\Internet Explorer\VersionManager\versionlist.xml`, or you can view Microsoft’s version at [Internet Explorer version list](http://go.microsoft.com/fwlink/?LinkId=403864). + +**Security Note:  ** + +Although we strongly recommend against it, if you don’t want your computer to automatically download the updated version list from Microsoft, run the following command from a command prompt: + +`reg add "HKCU\Software\Microsoft\Internet Explorer\VersionManager" /v DownloadVersionList /t REG_DWORD /d 0 /f` + +Turning off this automatic download breaks the out-of-date ActiveX control blocking feature by not letting the version list update with newly outdated controls, potentially compromising the security of your computer. Use this configuration option at your own risk. + +## Out-of-date ActiveX control blocking on managed devices + + +Out-of-date ActiveX control blocking includes 4 new Group Policy settings that you can use to manage your web browser configuration, based on your domain controller. You can download the administrative templates, including the new settings, from the [Administrative Templates for Internet Explorer](http://go.microsoft.com/fwlink/?LinkId=444484) page. + +### Group Policy settings + +Here’s a list of the new Group Policy info, including the settings, location, requirements, and Help text strings. All of these settings can be set in either the Computer Configuration or User Configuration scope, but Computer Configuration takes precedence over User Configuration. + +**Important**   +Out-of-date ActiveX control blocking is turned off in the Local Intranet Zone; therefore, intranet websites and line-of-business apps will continue to use out-of-date ActiveX controls without disruption. + +  + + ++++++ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
SettingCategory pathSupported onHelp text

Turn on ActiveX control logging in IE

Administrative Templates\Windows Components\Internet Explorer\Security Features\Add-on Management

Internet Explorer 8 through IE11

This setting determines whether IE saves log information for ActiveX controls.

+

If you enable this setting, IE logs ActiveX control information (including the source URI that loaded the control and whether it was blocked) to a local file.

+

If you disable or don't configure this setting, IE won't log ActiveX control information.

+

Note that you can turn this setting on or off regardless of the Turn off blocking of outdated ActiveX controls for IE or Turn off blocking of outdated ActiveX controls for IE on specific domains settings.

Remove the Run this time button for outdated ActiveX controls in IE

Administrative Templates\Windows Components\Internet Explorer\Security Features\Add-on Management

Internet Explorer 8 through IE11

This setting allows you stop users from seeing the Run this time button and from running specific outdated ActiveX controls in IE.

+

If you enable this setting, users won't see the Run this time button on the warning message that appears when IE blocks an outdated ActiveX control.

+

If you disable or don't configure this setting, users will see the Run this time button on the warning message that appears when IE blocks an outdated ActiveX control. Clicking this button lets the user run the outdated ActiveX control once.

Turn off blocking of outdated ActiveX controls for IE on specific domains

Administrative Templates\Windows Components\Internet Explorer\Security Features\Add-on Management

Internet Explorer 8 through IE11

This setting allows you to manage a list of domains on which IE will stop blocking outdated ActiveX controls. Outdated ActiveX controls are never blocked in the Intranet Zone.

+

If you enable this setting, you can enter a custom list of domains for which outdated ActiveX controls won't be blocked in IE. Each domain entry must be formatted like one of the following:

+
    +

  • "domainname.TLD". For example, if you want to include *.contoso.com/*, use "contoso.com".

    • +

  • "hostname". For example, if you want to include http://example, use "example".

    • +

  • "file:///path/filename.htm". For example, use file:///C:/Users/contoso/Desktop/index.htm.

    • +
+

If you disable or don't configure this setting, the list is deleted and IE continues to block specific outdated ActiveX controls on all domains in the Internet Zone.

Turn off blocking of outdated ActiveX controls for IE

Administrative Templates\Windows Components\Internet Explorer\Security Features\Add-on Management

Internet Explorer 8 through IE11

This setting determines whether IE blocks specific outdated ActiveX controls. Outdated ActiveX controls are never blocked in the Intranet Zone.

+

If you enable this setting, IE stops blocking outdated ActiveX controls.

+

If you disable or don't configure this setting, IE continues to block specific outdated ActiveX controls.

Remove the Update button in the out-of-date ActiveX control blocking notification for IE

This functionality is only available through the registry

Internet Explorer 8 through IE11

This setting determines whether the out-of-date ActiveX control blocking notification shows the Update button. This button points users to update specific out-of-date ActiveX controls in IE.

+ +  + +If you don't want to use Group Policy, you can also turn these settings on or off using the registry. You can update the registry manually or you can use an elevated command prompt and these commands to automatically turn on the settings. + + ++++ + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
SettingRegistry setting

Turn on ActiveX control logging in IE

reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Ext" /v AuditModeEnabled /t REG_DWORD /d 1 /f

+

Where:

+
    +

  • 0 or not configured = Logs ActiveX control information (including the source URI that loaded the control and whether it was blocked) to a local file.

    • +

  • 1 = Logs ActiveX control information.

    • +

Remove Run this time button for outdated ActiveX controls in IE

reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Ext" /v RunThisTimeEnabled /t REG_DWORD /d 0 /f

+

Where:

+
    +

  • 0 = Removes the Run this time button.

    • +

  • 1 or not configured = Leaves the Run this time button.

    • +

Turn off blocking of outdated ActiveX controls for IE on specific domains

reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Ext\Domain" /v contoso.com /t REG_SZ /f

+

Where:

+
    +

  • contoso.com = A single domain on which outdated ActiveX controls won't be blocked in IE. Use a new reg add command for each domain you wish to add to the Allow list.

    • +

Turn off blocking of outdated ActiveX controls for IE

reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Ext" /v VersionCheckEnabled /t REG_DWORD /d 0 /f

+

Where:

+
    +

  • 0 = Stops blocking outdated ActiveX controls.

    • +

  • 1 or not configured = Continues to block specific outdated ActiveX controls.

    • +

Remove the Update button in the out-of-date ActiveX control blocking notification for IE

reg add "HKCU\Software\Microsoft\Internet Explorer\VersionManager" /v UpdateEnabled /t REG_DWORD /d 0 /f

+
    +

  • 0 = Removes the Update button.

    • +

  • 1 or not configured = Leaves the Update button.

    • +
+ +  + +## Inventory your ActiveX controls + + +You can inventory the ActiveX controls being used in your company, by turning on the **Turn on ActiveX control logging in IE** setting: + +- **Windows 10:** Through a comma-separated values (.csv) file or through a local Windows Management Instrumentation (WMI) class. + +- **All other versions of Microsoft Windows:** Through a .csv file only. + +### Inventory your ActiveX controls by using a .CSV file + +If you decide to inventory the ActiveX controls being used in your company by turning on the **Turn on ActiveX control logging in IE** setting, IE logs the ActiveX control information to the ` %LOCALAPPDATA%\Microsoft\Internet Explorer\AuditMode\VersionAuditLog.csv` file. + +Here’s a detailed example and description of what’s included in the VersionAuditLog.csv file. + + +++++++++ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Source URIFile pathProduct versionFile versionAllowed/BlockedReasonEPM-compatible

http://contoso.com/test1.html

C:\Windows\System32\Macromed\Flash\Flash.ocx

14.0.0.125

14.0.0.125

Allowed

Not in blocklist

EPM compatible

http://contoso.com/test2.html

C:\Program Files\Java\jre6\bin\jp2iexp.dll

6.0.410.2

6.0.410.2

Blocked

Out of date

Not EPM compatible

+ +  + +- **Source URI.** The URL of the page that loaded the ActiveX control. + +- **File path.** The location of the binary that implements the ActiveX control. + +- **Product version.** The product version of the binary that implements the ActiveX control. + +- **File version.** The file version of the binary that implements the ActiveX control. + +- **Allowed/Blocked** Whether IE blocked the ActiveX control. + +- **Reason.** The ActiveX control can be blocked or allowed for any of these reasons: + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
ReasonCorresponds toDescription

Version not in blocklist

Allowed

The version of the loaded ActiveX control is explicitly allowed by the IE version list.

Trusted domain

Allowed

The ActiveX control was loaded on a domain listed in the Turn off blocking of outdated ActiveX controls for IE on specific domains setting.

File doesn’t exist

Allowed

The loaded ActiveX control is missing required binaries to run correctly.

Out-of-date

Blocked

The loaded ActiveX control is explicitly blocked by the IE version list because it is out-of-date.

Not in blocklist

Allowed

The loaded ActiveX control isn’t in the IE version list.

Managed by policy

Allowed

The loaded ActiveX control is managed by a Group Policy setting that isn’t listed here, and will be managed in accordance with that Group Policy setting.

Trusted Site Zone or intranet

Allowed

The ActiveX control was loaded in the Trusted Sites Zone or the Local Intranet Zone.

Hardblocked

Blocked

The loaded ActiveX control is blocked in IE because it contains known security vulnerabilities.

Unknown

Allowed or blocked

None of the above apply.

+ +   + +- **Enhanced Protected Mode (EPM)-compatible.** Whether the loaded ActiveX control is compatible with [Enhanced Protected Mode](http://go.microsoft.com/fwlink/?LinkId=403865). + + **Note**   + Enhanced Protected Mode isn’t supported on Internet Explorer 9 or earlier versions of IE. Therefore, if you’re using Internet Explorer 8 or Internet Explorer 9, all ActiveX controls will always be marked as not EPM-compatible. + +   + +### Inventory your ActiveX controls by using a local WMI class + +For Windows 10 you also have the option to log your inventory info to a local WMI class. Info logged to this class includes all of info you get from the .csv file, plus the CLSID of the loaded ActiveX control or the name of any apps started from an ActiveX control. + +### Before you begin + +Before you can use WMI to inventory your ActiveX controls, you need to [download the configuration package (.zip file)](http://go.microsoft.com/fwlink/?LinkId=616971), which includes: + +- **ConfigureWMILogging.ps1**. A Windows PowerShell script. + +- **ActiveXWMILogging.mof**. A managed object file. + +Before running the PowerShell script, you must copy both the .ps1 and .mof file to the same directory location, on the client computer. + +![](../common/wedge.gif)**To configure IE to use WMI logging** + +1. Open your Group Policy editor and turn on the **Administrative Templates\\Windows Components\\Internet Explorer\\Turn on ActiveX control logging in IE** setting. + +2. On the client device, start PowerShell in elevated mode (using admin privileges) and run ConfigureWMILogging.ps1 by by-passing the PowerShell execution policy, using this command: `powershell –ExecutionPolicy Bypass .\ConfigureWMILogging.ps1`. For more info, see [about\_Execution\_Policies](http://go.microsoft.com/fwlink/p/?linkid=517460). + +3. **Optional:** Set up your domain firewall for WMI data. For more info, see [Collect data using Enterprise Site Discovery](collect-data-using-enterprise-site-discovery.md). + +The inventory info appears in the WMI class, `IEAXControlBlockingAuditInfo`, located in the WMI namespace, *root\\cimv2\\IETelemetry*. To collect the inventory info from your client computers, we recommend using System Center 2012 R2 Configuration Manager or any agent that can access the WMI data. For more info, see [Collect data using Enterprise Site Discovery](collect-data-using-enterprise-site-discovery.md). + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/problems-after-installing-ie11.md b/browsers/internet-explorer-11/ie11-deploy-guide/problems-after-installing-ie11.md new file mode 100644 index 0000000000..4f8dfb59fe --- /dev/null +++ b/browsers/internet-explorer-11/ie11-deploy-guide/problems-after-installing-ie11.md @@ -0,0 +1,77 @@ +--- +Description: Problems after installing Internet Explorer 11 +MS-HAID: 'p\_ie11deploy.problems\_after\_installing\_internet\_explorer\_11' +MSHAttr: 'PreferredLib:/library' +title: Problems after installing Internet Explorer 11 +--- + +# Problems after installing Internet Explorer 11 + + +After you install Internet Explorer 11 in your organization, you might run into the following issues. By following these suggestions, you should be able to fix them. + +## Internet Explorer is in an unusable state + + +If IE11 gets into an unusable state on an employee's computer, you can use the **Reset Internet Explorer Settings (RIES)** feature to restore the default settings for many of the browser features, including: + +- Search scopes + +- Appearance settings + +- Toolbars + +- ActiveX® controls (resets to the opt-in state, unless they're pre-approved) + +- Branding settings created with IEAK 11 + +RIES does not: + +- Clear the Favorites list, RSS feeds, or Web slices. + +- Reset connection or proxy settings. + +- Affect the applied Administrative Template Group Policy settings. + +RIES turns off all custom toolbars, browser extensions, and customizations installed with IE11. If you change your mind, you can turn each of the customizations back on through the **Manage Add-ons** dialog box. For more information about resetting IE settings, see [How to Reset Internet Explorer Settings](http://go.microsoft.com/fwlink/?LinkId=214528). + +## IE is crashing or seems slow + + +If you notice that CPU usage is running higher than normal, or that IE is frequently crashing or slowing down, you should check your browser add-ons and video card. By default, IE11 uses graphics processing unit (GPU) rendering mode. However, some outdated video cards and video drivers don't support GPU hardware acceleration. If IE11 determines that your current video card or video driver doesn't support GPU hardware acceleration, it'll use Software Rendering mode. + +![](../common/wedge.gif)**To check your browser add-ons** + +1. Start IE11 in **No Add-ons mode** by running the **Run** command from the **Start** menu, and then typing **iexplore.exe -extoff** into the box. + +2. Check if IE still crashes. + + If the browser doesn't crash, open Internet Explorer for the desktop, click the **Tools** menu, and click **Manage Add-ons**. + +3. Click **Toolbars and Extensions**, click each toolbar or extension, clicking **Disable** to turn off all of the browser extensions and toolbars. + +4. Restart IE11. Go back to the **Manage Add-Ons** window and turn on each item, one-by-one. + + After you turn each item back on, see if IE crashes or slows down. Doing it this way will help you identify the add-on that's causing IE to crash. + + After you've figured out which add-on was causing the problem, turn it off until you have an update from the manufacturer. + +![](../common/wedge.gif)**To check for Software Rendering mode** + +1. Open Internet Explorer for the desktop, click the **Tools** menu, and then click **Internet Options**. + +2. On the **Advanced** tab, go to the **Accelerated graphics** section, and then turn on Software Rendering mode by choosing the **Use software rendering instead of GPU rendering** box. + + If the **Use software rendering instead of GPU rendering** option is greyed out, it means that your current video card or video driver doesn't support GPU hardware acceleration. For more information, see [Is Internet Explorer slow? 5 things to try](http://go.microsoft.com/fwlink/?LinkId=214531). + +## Adaptive streaming and DRM playback don’t work with Windows Server 2012 R2 + + +IE11 in Windows Server 2012 R2 doesn’t include media features like adaptive streaming or Digital Rights Management (DRM) playback. To add these features, you’ll need to download and install the Media Feature Pack from the [Microsoft Download Center](http://go.microsoft.com/fwlink/?LinkId=320789), as well as an app that uses PlayReady DRM from the Windows Store, such as the Xbox Music app or Xbox Video app. The app must be installed to specifically turn on DRM features, while all other media features are installed with the Media Feature Pack. + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/remove-all-sites-from-your-enterprise-mode-site-list-in-the-enterprise-mode-site-list-manager.md b/browsers/internet-explorer-11/ie11-deploy-guide/remove-all-sites-from-your-enterprise-mode-site-list-in-the-enterprise-mode-site-list-manager.md new file mode 100644 index 0000000000..b5eadecb08 --- /dev/null +++ b/browsers/internet-explorer-11/ie11-deploy-guide/remove-all-sites-from-your-enterprise-mode-site-list-in-the-enterprise-mode-site-list-manager.md @@ -0,0 +1,49 @@ +--- +Description: 'You can clear all of the sites from your global Enterprise Mode site list.' +MS-HAID: 'p\_ie11deploy.remove\_all\_sites\_from\_your\_enterprise\_mode\_site\_list\_in\_the\_enterprise\_mode\_site\_list\_manager' +MSHAttr: 'PreferredLib:/library' +title: Remove all sites from your Enterprise Mode site list in the Enterprise Mode Site List Manager +--- + +# Remove all sites from your Enterprise Mode site list in the Enterprise Mode Site List Manager + + +**Last updated** + +- November 12, 2015 + +**Applies to:** + +- Windows 10 +- Windows 8.1 +- Windows 7 +- Windows Server 2012 R2 +- Windows Server 2008 R2 with Service Pack 1 (SP1) + +You can clear all of the sites from your global Enterprise Mode site list. + +**Important**   +This is a permanent removal and erases everything. However, if you determine it was a mistake, and you saved an XML copy of your list, you can add the file again by following the steps in the [Add multiple sites to the Enterprise Mode site list using a file and Windows 10 Enterprise Mode Site List Manager tool](add-multiple-sites-to-enterprise-mode-site-list-using-the-version-2-schema-and-enterprise-mode-tool.md) or [Add multiple sites to the Enterprise Mode site list using a file and the Windows 7 and Windows 8.1 Enterprise Mode Site List Manager tool](add-single-sites-to-enterprise-mode-site-list-using-the-version-1-enterprise-mode-tool.md), depending on your operating system. + +  + +![](../common/wedge.gif)**To clear your compatibility list** + +1. On the **File** menu of the Enterprise Mode Site List Manager, click **Clear list**. + +2. Click **Yes** in the warning message. + + Your sites are all cleared from your list. + +## Related topics + + +[Download the Enterprise Mode Site List Manager for Windows 10 tool](http://go.microsoft.com/fwlink/?LinkId=716853) +[Download the Enterprise Mode Site List Manager for Windows 7 and Windows 8.1 tool](http://go.microsoft.com/fwlink/?LinkID=394378) +[Use the Enterprise Mode Site List Manager tool](use-the-enterprise-mode-site-list-manager-tool.md) +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/remove-sites-from-a-local-compatibililty-view-list.md b/browsers/internet-explorer-11/ie11-deploy-guide/remove-sites-from-a-local-compatibililty-view-list.md new file mode 100644 index 0000000000..bd9dc5a5bd --- /dev/null +++ b/browsers/internet-explorer-11/ie11-deploy-guide/remove-sites-from-a-local-compatibililty-view-list.md @@ -0,0 +1,38 @@ +--- +Description: 'Remove websites that were added to a local compatibility view list by mistake or because they no longer have compatibility problems.' +MS-HAID: 'p\_ie11deploy.removing\_sites\_from\_a\_local\_compatibililty\_view\_list' +MSHAttr: 'PreferredLib:/library' +title: Remove sites from a local compatibility view list +--- + +# Remove sites from a local compatibility view list + + +**Last updated** + +- November 12, 2015 + +**Applies to:** + +- Windows 10 +- Windows 8.1 +- Windows 7 +- Windows Server 2012 R2 +- Windows Server 2008 R2 with Service Pack 1 (SP1) + +Remove websites that were added to a local compatibility view list by mistake or because they no longer have compatibility problems. + +![](../common/wedge.gif)**To remove sites from a local compatibility view list** + +1. Open Internet Explorer 11, click **Tools**, and then click **Compatibility View Settings**. + +2. Pick the site to remove, and then click **Remove**. + + Sites can only be removed one at a time. If one is removed by mistake, it can be added back using this same box and the **Add** section. + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/remove-sites-from-a-local-enterprise-mode-site-list.md b/browsers/internet-explorer-11/ie11-deploy-guide/remove-sites-from-a-local-enterprise-mode-site-list.md new file mode 100644 index 0000000000..dbebaedf24 --- /dev/null +++ b/browsers/internet-explorer-11/ie11-deploy-guide/remove-sites-from-a-local-enterprise-mode-site-list.md @@ -0,0 +1,61 @@ +--- +Description: 'Remove websites that were added to a local Enterprise Mode site list by mistake or because the sites no longer have compatibility problems.' +MS-HAID: 'p\_ie11deploy.removing\_sites\_from\_a\_local\_enterprise\_mode\_site\_list' +MSHAttr: 'PreferredLib:/library' +title: Remove sites from a local Enterprise Mode site list +--- + +# Remove sites from a local Enterprise Mode site list + + +**Last updated** + +- November 12, 2015 + +**Applies to:** + +- Windows 10 +- Windows 8.1 +- Windows 7 +- Windows Server 2012 R2 +- Windows Server 2008 R2 with Service Pack 1 (SP1) + +Remove websites that were added to a local Enterprise Mode site list by mistake or because the sites no longer have compatibility problems. + +**Note**   +The changes described in this topic only impact sites added to a local Enterprise Mode site list and not the list of sites deployed to all employees by an administrator. Employees can't delete sites added to the list by an administrator. + +  + +![](../common/wedge.gif)**To remove single sites from a local Enterprise Mode site list** + +1. Open Internet Explorer 11 and go to the site to remove. + +2. Click **Tools**, and then click **Enterprise Mode**. + + The checkmark disappears from next to Enterprise Mode and the site is removed from the list. + + **Note**   + If the site is removed by mistake, it can be added back by clicking **Enterprise Mode** again. + +   + +![](../common/wedge.gif)**To remove all sites from a local Enterprise Mode site list** + +1. Open IE11, click **Tools**, and then click **Internet options**. + +2. Click the **Delete** button from the **Browsing history** area. + +3. Click the box next to **Cookies and website data**, and then click **Delete**. + + **Note**   + This removes all of the sites from a local Enterprise Mode site list. + +   + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/save-your-site-list-to-xml-in-the-enterprise-mode-site-list-manager.md b/browsers/internet-explorer-11/ie11-deploy-guide/save-your-site-list-to-xml-in-the-enterprise-mode-site-list-manager.md new file mode 100644 index 0000000000..0a7524c21c --- /dev/null +++ b/browsers/internet-explorer-11/ie11-deploy-guide/save-your-site-list-to-xml-in-the-enterprise-mode-site-list-manager.md @@ -0,0 +1,44 @@ +--- +Description: 'You can save your current Enterprise Mode compatibility site list as an XML file, for distribution and use by your managed systems.' +MS-HAID: 'p\_ie11deploy.save\_your\_site\_list\_to\_xml\_in\_the\_enterprise\_mode\_site\_list\_manager' +MSHAttr: 'PreferredLib:/library' +title: Save your site list to XML in the Enterprise Mode Site List Manager +--- + +# Save your site list to XML in the Enterprise Mode Site List Manager + + +**Last updated** + +- November 12, 2015 + +**Applies to:** + +- Windows 10 +- Windows 8.1 +- Windows 7 +- Windows Server 2012 R2 +- Windows Server 2008 R2 with Service Pack 1 (SP1) + +You can save your current Enterprise Mode compatibility site list as an XML file, for distribution and use by your managed systems. + +![](../common/wedge.gif)**To save your list as XML** + +1. On the **File** menu of the Enterprise Mode Site List Manager, click **Save to XML**. + +2. Save the file to the location you specified in your Enterprise Mode registry key, set up when you turned on Enterprise Mode for use in your company. For information about the Enterprise Mode registry key, see [Turn on local control and logging for Enterprise Mode](turn-on-local-control-and-logging-for-enterprise-mode.md). + + The first time a user starts Internet Explorer 11 on a managed device; Internet Explorer will look for a new version of the site list at the specified location. If the browser finds an updated site list, IE downloads the new XML site list and uses it. + +## Related topics + + +[Download the Enterprise Mode Site List Manager for Windows 10 tool](http://go.microsoft.com/fwlink/?LinkId=716853) +[Download the Enterprise Mode Site List Manager for Windows 7 and Windows 8.1 tool](http://go.microsoft.com/fwlink/?LinkID=394378) +[Use the Enterprise Mode Site List Manager tool](use-the-enterprise-mode-site-list-manager-tool.md) +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/search-your-enterprise-mode-site-list-in-the-enterprise-mode-site-list-manager.md b/browsers/internet-explorer-11/ie11-deploy-guide/search-your-enterprise-mode-site-list-in-the-enterprise-mode-site-list-manager.md new file mode 100644 index 0000000000..ef421da47d --- /dev/null +++ b/browsers/internet-explorer-11/ie11-deploy-guide/search-your-enterprise-mode-site-list-in-the-enterprise-mode-site-list-manager.md @@ -0,0 +1,42 @@ +--- +Description: 'You can search to see if a specific site already appears in your global Enterprise Mode site list so you don’t try to add it again.' +MS-HAID: 'p\_ie11deploy.search\_your\_enterprise\_mode\_site\_list\_in\_the\_enterprise\_mode\_site\_list\_manager' +MSHAttr: 'PreferredLib:/library' +title: Search your Enterprise Mode site list in the Enterprise Mode Site List Manager +--- + +# Search your Enterprise Mode site list in the Enterprise Mode Site List Manager + + +**Last updated** + +- November 12, 2015 + +**Applies to:** + +- Windows 10 +- Windows 8.1 +- Windows 7 +- Windows Server 2012 R2 +- Windows Server 2008 R2 with Service Pack 1 (SP1) + +You can search to see if a specific site already appears in your global Enterprise Mode site list so you don’t try to add it again. + +![](../common/wedge.gif)**To search your compatibility list** + +- From the Enterprise Mode Site List Manager tool, type part of the URL into the **Search** box. + + The search query searches all of the text. For example, entering *“micro”* will return results like, www.microsoft.com, microsoft.com, and microsoft.com/images. Wildcard characters aren’t supported. + +## Related topics + + +[Download the Enterprise Mode Site List Manager for Windows 10 tool](http://go.microsoft.com/fwlink/?LinkId=716853) +[Download the Enterprise Mode Site List Manager for Windows 7 and Windows 8.1 tool](http://go.microsoft.com/fwlink/?LinkID=394378) +[Use the Enterprise Mode Site List Manager tool](use-the-enterprise-mode-site-list-manager-tool.md) +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/set-the-default-browser-using-group-policy.md b/browsers/internet-explorer-11/ie11-deploy-guide/set-the-default-browser-using-group-policy.md new file mode 100644 index 0000000000..5cae6e3c94 --- /dev/null +++ b/browsers/internet-explorer-11/ie11-deploy-guide/set-the-default-browser-using-group-policy.md @@ -0,0 +1,32 @@ +--- +Description: 'You can use the Group Policy setting, Set a default associations configuration file, to set the default browser for your company devices running Windows 10.' +MS-HAID: 'p\_ie11deploy.set\_the\_default\_browser\_using\_group\_policy' +MSHAttr: 'PreferredLib:/library' +title: Set the default browser using Group Policy +--- + +# Set the default browser using Group Policy + + +You can use the Group Policy setting, **Set a default associations configuration file**, to set the default browser for your company devices running Windows 10. + +![](../common/wedge.gif)**To set the default browser as Internet Explorer 11** + +1. Open your Group Policy editor and go to the **Administrative Templates\\Windows Components\\File Explorer\\Set a default associations configuration file** setting. + + Turning this setting on also requires you to create and store a default associations configuration file, locally or on a network share. For more information about creating this file, see [Export or Import Default Application Associations]( http://go.microsoft.com/fwlink/?LinkId=618268). + + ![set default associations group policy setting](images/setdefaultbrowsergp.png) + +2. Click **Enabled**, and then in the **Options** area, type the location to your default associations configuration file. + + If this setting is turned on and your employee's device is domain-joined, this file is processed and default associations are applied at logon. If this setting isn't configured or is turned off, or if your employee's device isn't domain-joined, no default associations are applied at logon. + +Your employees can change this setting by changing the Internet Explorer default value from the **Set Default Programs** area of the Control Panel. + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/set-up-enterprise-mode-logging-and-data-collection.md b/browsers/internet-explorer-11/ie11-deploy-guide/set-up-enterprise-mode-logging-and-data-collection.md new file mode 100644 index 0000000000..4318ef8f75 --- /dev/null +++ b/browsers/internet-explorer-11/ie11-deploy-guide/set-up-enterprise-mode-logging-and-data-collection.md @@ -0,0 +1,177 @@ +--- +Description: Set up Enterprise Mode logging and data collection +MS-HAID: 'p\_ie11deploy.set\_up\_enterprise\_mode\_logging\_and\_data\_collection' +MSHAttr: 'PreferredLib:/library' +title: Set up Enterprise Mode logging and data collection +--- + +# Set up Enterprise Mode logging and data collection + + +**Last updated** + +- December 3, 2015 + +**Applies to:** + +- Windows 10 +- Windows 8.1 +- Windows 7 +- Windows Server 2012 R2 +- Windows Server 2008 R2 with Service Pack 1 (SP1) + +Using Group Policy, you can turn on Enterprise Mode for Internet Explorer and then you can turn on local user control using the **Let users turn on and use Enterprise Mode from the Tools menu** setting, located in the Administrative Templates\\Windows Components\\Internet Explorer category path. After you turn this setting on, your users can turn on Enterprise Mode locally, from the IE **Tools** menu. + +![enterprise mode option on the tools menu](images/ie-emie-toolsmenu.png) +The **Let users turn on and use Enterprise Mode from the Tools menu** setting also lets you decide where to send the user reports (as a URL). + +**Note**   +We recommend creating a custom HTTP port 81 to let your incoming user information go to a dedicated site. A dedicated site is important so you can quickly pick out the Enterprise Mode traffic from your other website traffic. + +  + +![group policy to turn on enterprise mode](images/ie-emie-grouppolicy.png) +Getting these reports lets you find out about sites that aren’t working right, so you can add them to your Enterprise Mode site list, without having to locate them all yourself. For more information about creating and using a site list, see the [Add multiple sites to the Enterprise Mode site list using a file and the Windows 10 Enterprise Mode Site List Manager tool](add_multiple_sites_to_the_enterprise_mode_site_list_using_a_file_and_enterprise_mode_site_list_manager.md) or the [Add multiple sites to the Enterprise Mode site list using a file and the Windows 7 and Windows 8.1 Enterprise Mode Site List Manager tool](add_multiple_sites_to_the_enterprise_mode_site_list_using_a_file_and_the_enterprise_mode_manager.md) topic, based on your operating system. + +## Using ASP to collect your data + + +When you turn logging on, you need a valid URL that points to a server that can be listened to for updates to a user’s registry key. This means you need to set up an endpoint server for the incoming POST messages, which are sent every time the user turns Enterprise Mode on or off from the **Tools** menu. + +![](../common/wedge.gif)**To set up an endpoint server** + +1. Configure an IIS server to work with your Enterprise Mode data collection process. If you’re unsure how to set up IIS, see the [IIS installation webpage](http://go.microsoft.com/fwlink/?LinkId=507609). + +2. Open Internet Information Services (IIS) and turn on the ASP components from the **Add Roles and Features Wizard**, **Server Roles** page. + + This lets you create an ASP form that accepts the incoming POST messages. + +3. Open the Internet Information Services (IIS) Manager, click **Bindings**, highlight **Port 81**, click **Edit**, and then change the website information to point to Port 81 so it matches your custom-created port. + + ![iis manager editing website bindings](images/ie-emie-editbindings.png) + +4. Open the **Logging** feature, pick **W3C** for the format, and click **Select Fields** to open the **W3C Logging Fields** box. + + ![iis manager setting logging options](images/ie-emie-logging.png) + +5. Change the WC3 logging fields to include only the **Date**, **Client IP**, **User Name**, and **URI Query** standard fields, and then click **OK**. + + Using only these fields keeps the log file simple, giving you the date, client IP address, and the website URI information for any site changed by your users. + +6. Apply these changes to your default website and close the IIS Manager. + +7. Put your EmIE.asp file into the root of the web server, using this command: + + ``` syntax + <% @ LANGUAGE=javascript %> + <% + Response.AppendToLog(" ;" + Request.Form("URL") + " ;" + Request.Form("EnterpriseMode")); + %> + ``` + + This code logs your POST fields to your IIS log file, where you can review all of the collected data. + +### IIS log file information + +This is what your log files will look like after you set everything up and at least one of your users has turned on Enterprise Mode locally from the **Tools** menu. You can see the URL of the problematic website and client IP address of the user that turned on Enterprise Mode. + +![enterprise mode log file](images/ie-emie-logfile.png) +## Using the GitHub sample to collect your data + + +Microsoft has created the [EMIE-Data\_Collection\_Sample](http://go.microsoft.com/fwlink/?LinkId=507401) that shows how to collect your Enterprise Mode reports. This sample only shows how to collect data, it doesn’t show how to aggregate the data into your Enterprise Mode site list. + +This sample starts with you turning on Enterprise Mode and logging (either through Group Policy, or by manually setting the EnterpriseMode registry key) so that your users can use Enterprise Mode locally. For the steps to do this, go to [Turn on local control and logging for Enterprise Mode](turn-on-local-control-and-logging-for-enterprise-mode.md). + +**Note**   +If you decide to manually change the registry key, you can change the **Enable** setting to `[deployment url]/api/records/`, which automatically sends your reports to this page. + +  + +### Setting up, collecting, and viewing reports + +For logging, you’re going to need a valid URL that points to a server that can be listened to for updates to a user’s registry key. This means you need to set up an endpoint server for the incoming POST messages, which are sent every time the user turns Enterprise Mode on or off from the **Tools** menu. These POST messages go into your database, aggregating the report data by URL, giving you the total number of reports where users turned on Enterprise Mode, the total number of reports where users turned off Enterprise Mode, and the date of the last report. + +![](../common/wedge.gif)**To set up the sample** + +1. Set up a server to collect your Enterprise Mode information from your users. + +2. Go to the Internet Explorer/[EMIE-Data\_Collection\_Sample](http://go.microsoft.com/fwlink/?LinkId=507401) page on GitHub and tap or click the **Download ZIP** button to download the complete project. + +3. Open Microsoft Visual Studio 2013 with Update 2, and then open the PhoneHomeSample.sln file. + +4. On the **Build** menu, tap or click **Build Solution**. + + The required packages are automatically downloaded and included in the solution. + +![](../common/wedge.gif)**To set up your endpoint server** + +1. Right-click on the name, PhoneHomeSample, and click **Publish**. + + ![publish menu in visual studio](images/ie-emie-publishsolution.png) + +2. In the **Publish Web** wizard, pick the publishing target and options that work for your organization. + + **Important**   + Make sure you have a database associated with your publishing target. Otherwise, your reports won’t be collected and you’ll have problems deploying the website. + +   + + ![publish web wizard in visual studio](images/ie-emie-publishweb.png) + + After you finish the publishing process, you need to test to make sure the app deployed successfully. + +![](../common/wedge.gif)**To test, deploy, and use the app** + +1. Open a registry editor on the computer where you deployed the app, go to the HKEY\_LOCAL\_MACHINE\\SOFTWARE\\Policies\\Microsoft\\Internet Explorer\\Main\\EnterpriseMode key, and change the **Enable** string to: + + ``` syntax + "Enable"="http:///api/records/" + ``` + + Where *<deploy\_URL>* points to your deployment URL + +2. After you’re sure your deployment works, you can deploy it to your users using one of the following: + + - Turn on the **Let users turn on and use Enterprise Mode from the Tools menu** Group Policy setting, putting your *<deploy\_URL>* information into the **Options** box. + + - Deploy the registry key in Step 3 using System Center or other management software. + +3. Get your users to visit websites, turning Enterprise Mode on or off locally, as necessary. + +![](../common/wedge.gif)**To view the report results** + +- Go to http://*<deploy\_URL>*/List to see the report results. + + If you’re already on the webpage, you’ll need to refresh the page to see the results. + + ![enterprise mode result report with details](images/ie-emie-reportwdetails.png) + +### Troubleshooting publishing errors + +If you have errors while you’re publishing your project, you should try to update your packages. + +![](../common/wedge.gif)**To update your packages** + +1. From the **Tools** menu of Microsoft Visual Studio, click **NuGet Package Manager**, and click **Manage NuGet Packages for Solution**. + + ![nuget package manager for package updates](images/ie-emie-packageupdate.png) + +2. Click **Updates** on the left side of the tool, and click the **Update All** button. + + You may need to do some additional package cleanup to remove older package versions. + +## Related topics + + +[Download the Enterprise Mode Site List Manager for Windows 10 tool](http://go.microsoft.com/fwlink/?LinkId=716853) +[Download the Enterprise Mode Site List Manager for Windows 7 and Windows 8.1 tool](http://go.microsoft.com/fwlink/?LinkID=394378) +[What is Enterprise Mode?](what-is-enterprise-mode.md) +[Use the Enterprise Mode Site List Manager tool](use-the-enterprise-mode-site-list-manager-tool.md) +[Turn on Enterprise Mode and use a site list](turn-on-enterprise-mode-and-use-a-site-list.md) +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/setup-problems-with-ie11.md b/browsers/internet-explorer-11/ie11-deploy-guide/setup-problems-with-ie11.md new file mode 100644 index 0000000000..c661bb01c5 --- /dev/null +++ b/browsers/internet-explorer-11/ie11-deploy-guide/setup-problems-with-ie11.md @@ -0,0 +1,139 @@ +--- +Description: Setup problems with Internet Explorer 11 +MS-HAID: 'p\_ie11deploy.setup\_problems\_with\_internet\_explorer\_11' +MSHAttr: 'PreferredLib:/library' +title: Setup problems with Internet Explorer 11 +--- + +# Setup problems with Internet Explorer 11 + + +Installing Internet Explorer creates the following log files, which are stored in the Windows installation folder (typically, the C:\\Windows folder): + +- IE11\_main.log + +- IE11\_NR\_Setup.log + +- IE11\_uninst.log + +- cbs\*.log + +- WU\_ IE11\_LangPacks.log + +These log files continuously record the entire process from the moment the IE setup program starts running until the last .cab file is downloaded, including error codes. The possible error codes are: + + ++++ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Error CodeDescription

0

Success

1460

Timeout

3010

Success, reboot required

40001

USER_ERROR_CANNOT_OPEN_LOG_FILE

40003

USER_ERROR_CANNOT_INITIALIZE_APPLICATION

40004

USER_ERROR_OLD_OS_VERSION

40005

USER_ERROR_WRONG_PLATFORM

40006

USER_ERROR_BAD_SPVERSION

40007

USER_ERROR_MISSING_REQUIRED_PREREQUISITE

40008

USER_ERROR_IE_GREATERVERSION_INSTALLED

40010

USER_ERROR_BAD_LANGUAGE

40012

USER_ERROR_CRYPTO_VALIDATION_FAILED

40013

USER_ERROR_ALREADY_INSTALLED

40015

USER_ERROR_WRONG_OS

40016

USER_ERROR_EXTRACTION_FAILED

40019

USER_ERROR_WINDOWS_PRERELEASE_NOT_SUPPORTED

40021

USER_ERROR_UNSUPPORTED_VIDEO_HARDWARE

40022

USER_ERROR_UNSUPPORTED_VIDEO_DRIVER

40023

USER_ERROR_PREREQUISITE_INSTALL_FAILED

40024

USER_ERROR_NEUTRAL_CAB_DOWNLOAD_FAILED

40025

USER_ERROR_NEUTRAL_CAB_INSTALL_FAILED

41001

USER_ERROR_UNKNOWN

50005

USER_SUCCESS_USER_CANCELLED

+ +  + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/system-requirements-and-language-support-for-ie11.md b/browsers/internet-explorer-11/ie11-deploy-guide/system-requirements-and-language-support-for-ie11.md new file mode 100644 index 0000000000..3623b6a4cf --- /dev/null +++ b/browsers/internet-explorer-11/ie11-deploy-guide/system-requirements-and-language-support-for-ie11.md @@ -0,0 +1,116 @@ +--- +Description: 'Internet Explorer 11 is available for a number of systems and languages. This topic provides info about the minimum system requirements and language support.' +MS-HAID: 'p\_ie11deploy.system\_requirements\_and\_language\_support\_for\_internet\_explorer\_11\_\_ie11\_' +MSHAttr: 'PreferredLib:/library' +title: 'System requirements and language support for Internet Explorer 11 (IE11)' +--- + +# + + +**Last updated** + +- November 12, 2015 + +**Applies to:** + +- Windows 10 +- Windows 8.1 Update +- Windows 7 with Service Pack 1 (SP1) +- Windows Server 2012 R2 +- Windows Server 2008 R2 with Service Pack 1 (SP1) + +Internet Explorer 11 is available for a number of systems and languages. This topic provides info about the minimum system requirements and language support. + +## Minimum system requirements for IE11 + + +IE11 is pre-installed on Windows 8.1 and Windows Server 2012 R2 and is listed here for reference. It's also supported on Windows 10, but isn't pre-installed. For more info about IE11 on Windows 10, see [Browser: Microsoft Edge and Internet Explorer 11](p_ent_whats_new.microsoft_edge_and_internet_explorer_11). + +**Important**   +IE11 isn't supported on Windows 8 or Windows Server 2012. + +  + +Some of the components in this table might also need additional system resources. Check the component's documentation for more information. + + ++++ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
ItemMinimum requirements

Computer/processor

1 gigahertz (GHz) 32-bit (x86) or 64-bit (x64)

Operating system

Windows 10 (32-bit or 64-bit)

+

Windows 8.1 Update (32-bit or 64-bit)

+

Windows 7 with SP1 (32-bit or 64-bit)

+

Windows Server 2012 R2

+

Windows Server 2008 R2 with SP1 (64-bit only)

Memory

Windows 10 (32-bit)-1 GB

+

Windows 10 (64-bit)-2 GB

+

Windows 8.1 Update (32-bit)-1 GB

+

Windows 8.1 Update (64-bit)-2 GB

+

Windows 7 with SP1 (32-bit or 64-bit)-512 MB

+

Windows Server 2012 R2-512 MB

+

Windows Server 2008 R2 with SP1 (64-bit only)-512 MB

Hard drive space

Windows 10 (32-bit)-16 GB

+

Windows 10 (64-bit)-20 GB

+

Windows 8.1 Update (32-bit)-16 GB

+

Windows 8.1 Update (64-bit)-20 GB

+

Windows 7 with SP1 (32-bit)-70 MB

+

Windows 7 with SP1 (64-bit)-120 MB

+

Windows Server 2012 R2-32 GB

+

Windows Server 2008 R2 with SP1 (64-bit only)-200 MB

Drive

CD-ROM drive (if installing from a CD-ROM)

Display

Super VGA (800 x 600) or higher-resolution monitor with 256 colors

Peripherals

Internet connection and a compatible pointing device

+ +  + +## Support for .NET Framework + + +You might experience start up issues where IE11 fails to launch an application that uses managed browser hosting controls with your legacy apps. This is because, starting with Internet Explorer 10, the browser started blocking legacy apps from using the .NET Framework 1.1 and 2.0. To fix this problem, see [.NET Framework problems with Internet Explorer 11](net-framework-problems-with-ie11.md). + +## Support for multiple languages + + +IE11 is available in 108 languages for Windows 8.1 and 97 languages for Windows 7 with SP1. For the list of languages and download links, see [Windows 8 Language Packs](http://go.microsoft.com/fwlink/?LinkId=281818) and [Windows 7 Language Packs](http://go.microsoft.com/fwlink/?LinkId=281819). + +Computers running localized versions of Windows should run the same version of IE11. For example, if your employees use the Spanish edition of Windows, you should deploy the Spanish version of IE11. On the other hand, if your employees use multiple localized versions of Windows, like Spanish, French, and Catalan, you should install IE11 in one of the languages, and then install language packs for the others. + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/troubleshoot-ie11.md b/browsers/internet-explorer-11/ie11-deploy-guide/troubleshoot-ie11.md new file mode 100644 index 0000000000..f52d638cab --- /dev/null +++ b/browsers/internet-explorer-11/ie11-deploy-guide/troubleshoot-ie11.md @@ -0,0 +1,94 @@ +--- +Description: 'Use the topics in this section to learn how to troubleshoot several of the more common problems experienced with Internet Explorer.' +MS-HAID: 'p\_ie11deploy.troubleshoot\_internet\_explorer\_11\_\_ie11\_' +MSHAttr: 'PreferredLib:/library' +title: 'Troubleshoot Internet Explorer 11 (IE11)' +--- + +# + + +**Last updated** + +- November 12, 2015 + +**Applies to:** + +- Windows 10 +- Windows 8.1 +- Windows 7 +- Windows Server 2012 R2 +- Windows Server 2008 R2 with Service Pack 1 (SP1) + +Use the topics in this section to learn how to troubleshoot several of the more common problems experienced with Internet Explorer. + +## In this section + + + ++++ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
TopicDescription

[Setup problems with Internet Explorer 11](setup-problems-with-ie11.md)

Guidance about how to find and understand the error log files created when setup runs.

[Install problems with Internet Explorer 11](install-problems-with-ie11.md)

Guidance about how to address potential problems when IE doesn’t finish installing.

[Problems after installing Internet Explorer 11](problems-after-installing-ie11.md)

Guidance about how to troubleshoot and help fix instability problems, where IE crashes or seems slow or where Digital Rights Management (DRM) playback doesn’t work.

[Auto configuration and auto proxy problems with Internet Explorer 11](auto-configuration-and-auto-proxy-problems-with-ie11.md)

Guidance about how to troubleshoot and help fix problems where branding changes aren’t distributed or where you’re experiencing proxy server setup problems.

[User interface problems with Internet Explorer 11](user-interface-problems-with-ie11.md)

Guidance about changes to the IE Customization Wizard, security zones, Favorites, Command, and Status bars, and the search box.

[Group Policy problems with Internet Explorer 11](group-policy-problems-ie11.md)

Guidance about how to find the Group Policy Object-related log files for troubleshooting.

[.NET Framework problems with Internet Explorer 11](net-framework-problems-with-ie11.md)

Guidance about how to turn managed browser hosting controls back on.

[Enhanced Protected Mode problems with Internet Explorer](enhanced-protected-mode-problems-with-ie11.md)

Guidance about how to turn off Enhanced Protected Mode to address compatibility issues.

[Fix font rendering problems by turning off natural metrics](turn-off-natural-metrics.md)

Guidance about how to turn off natural metrics to address font rendering problems.

[Intranet problems with Internet Explorer 11](intranet-problems-and-ie11.md)

Guidance about how to turn on single-word intranet searches in the address bar.

[Browser cache changes and roaming profiles](browser-cache-changes-and-roaming-profiles.md)

Guidance about changes we’ve made to the browser cache to improve the performance, flexibility, reliability, and scalability and how to get the best results while using a roaming profile.

+ +  + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/turn-off-enterprise-mode.md b/browsers/internet-explorer-11/ie11-deploy-guide/turn-off-enterprise-mode.md new file mode 100644 index 0000000000..5f013b046b --- /dev/null +++ b/browsers/internet-explorer-11/ie11-deploy-guide/turn-off-enterprise-mode.md @@ -0,0 +1,84 @@ +--- +Description: 'It’s important that you test the sites you’re adding, or considering removing, from your Enterprise Mode site list.' +MS-HAID: 'p\_ie11deploy.turn\_off\_enterprise\_mode' +MSHAttr: 'PreferredLib:/library' +title: Turn off Enterprise Mode +--- + +# Turn off Enterprise Mode + + +**Last updated** + +- November 12, 2015 + +**Applies to:** + +- Windows 10 +- Windows 8.1 +- Windows 7 +- Windows Server 2012 R2 +- Windows Server 2008 R2 with Service Pack 1 (SP1) + +It’s important that you test the sites you’re adding, or considering removing, from your Enterprise Mode site list. To make this testing easier, you can turn off the site list or the entire Enterprise Mode functionality. For example, you might have an intranet site on your list that you’ve upgraded to be compatible with the new web standards . If you test the site while the site list is active, Internet Explorer 11 will automatically switch to Enterprise Mode. By turning off the site list, you can see what the page actually looks like and decide whether to remove it from your site list. + +In addition, if you no longer want your users to be able to turn Enterprise Mode on locally, you can remove Enterprise Mode from the local **Tools** menu. + +**Important**   +Turning off both of these features turns off Enterprise Mode for your company. Turning off Enterprise Mode also causes any websites included in your employee’s manual site lists to not appear in Enterprise Mode. + +  + +![](../common/wedge.gif)**To turn off the site list using Group Policy** + +1. Open your Group Policy editor, like Group Policy Management Console (GPMC). + +2. Go to the **Use the Enterprise Mode IE website list** setting, and then click **Disabled**. + + Enterprise Mode will no longer look for the site list, effectively turning off Enterprise Mode. However, if you previously turned on local control for your employees, Enterprise Mode will still be available from the **Tools** menu. You need to turn that part of the functionality off separately. + +![](../common/wedge.gif)**To turn off local control using Group Policy** + +1. Open your Group Policy editor, like Group Policy Management Console (GPMC). + +2. Go to the **Let users turn on and use Enterprise Mode from the Tools menu** setting, and then click **Disable**. + +3. Enterprise Mode no longer shows up on the **Tools** menu for your employees. However, if you are still using an Enterprise Mode site list, all of the globally listed sites will still appear in Enterprise Mode. If you want to turn off all of Enterprise Mode, you will need to also turn off the site list functionality. + +![](../common/wedge.gif)**To turn off the site list using the registry** + +1. Open a registry editor, such as regedit.exe. + +2. Go to `HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\EnterpriseMode`, and then delete the **SiteList** value. + + You can also use HKEY\_LOCAL\_MACHINE, depending whether you want to turn off the Enterprise Mode site list for users or for computers. + +3. Close all and restart all instances of Internet Explorer. + + IE11 stops looking at the site list for rendering instructions. However, Enterprise Mode is still available to your users locally (if it was turned on). + +![](../common/wedge.gif)**To turn off local control using the registry** + +1. Open a registry editor, such as regedit.exe. + +2. Go `HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\EnterpriseMode`, and then delete the **Enable** value. + + You can also use HKEY_CURRENT_USER, depending whether you want to turn off Enterprise Mode for users or for computers. + +3. Close and restart all instances of IE. + + Enterprise Mode is no longer a user option on the **Tools** menu in IE11. However, IE11 still looks at the site list (if it was turned on). + +## Related topics + + +[What is Enterprise Mode?](what-is-enterprise-mode.md) +[Turn on Enterprise Mode and use a site list](turn-on-enterprise-mode-and-use-a-site-list.md) +[Turn on local control and logging for Enterprise Mode](turn-on-local-control-and-logging-for-enterprise-mode.md) +[Use the Enterprise Mode Site List Manager tool](use-the-enterprise-mode-site-list-manager-tool.md) +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/turn-off-natural-metrics.md b/browsers/internet-explorer-11/ie11-deploy-guide/turn-off-natural-metrics.md new file mode 100644 index 0000000000..4a3469bf64 --- /dev/null +++ b/browsers/internet-explorer-11/ie11-deploy-guide/turn-off-natural-metrics.md @@ -0,0 +1,30 @@ +--- +Description: Turn off natural metrics for Internet Explorer 11 +ms.assetid: e31a27d7-662e-4106-a3d2-c6b0531961d5 +ms.prod: IE11 +ms.mktglfcycl: support +ms.sitesec: library +title: Fix font rendering problems by turning off natural metrics +--- + +# Fix font rendering problems by turning off natural metrics +By default, Internet Explorer 11 uses “natural metrics”. Natural metrics use inter-pixel spacing that creates more accurately rendered and readable text, avoiding many common font rendering problems with Windows Internet Explorer 9 or older sites. + +However, you might find that many intranet sites need you to use Windows Graphics Device Interface (GDI) metrics. To avoid potential compatibility issues, you must turn off natural metrics for those sites. + +**To turn off natural metrics** + +- Add the following HTTP header to each site: `X-UA-TextLayoutMetrics: gdi` + +

**-OR-**

+ +- Add the following <meta> tag to each site: `` + +Turning off natural metrics automatically turns on GDI metrics. + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/turn-on-enterprise-mode-and-use-a-site-list.md b/browsers/internet-explorer-11/ie11-deploy-guide/turn-on-enterprise-mode-and-use-a-site-list.md new file mode 100644 index 0000000000..47cbfbac36 --- /dev/null +++ b/browsers/internet-explorer-11/ie11-deploy-guide/turn-on-enterprise-mode-and-use-a-site-list.md @@ -0,0 +1,70 @@ +--- +Description: Turn on Enterprise Mode and use a site list +MS-HAID: 'p\_ie11deploy.turn\_on\_enterprise\_mode\_and\_use\_a\_site\_list' +MSHAttr: 'PreferredLib:/library' +title: Turn on Enterprise Mode and use a site list +--- + +# Turn on Enterprise Mode and use a site list + + +**Last updated** + +- December 3, 2015 + +**Applies to:** + +- Windows 10 +- Windows 8.1 +- Windows 7 +- Windows Server 2012 R2 +- Windows Server 2008 R2 with Service Pack 1 (SP1) + +Before you can use a site list with Enterprise Mode, you need to turn the functionality on and set up the system for centralized control. By allowing centralized control, you can create one global list of websites that render using Enterprise Mode. Approximately 65 seconds after Internet Explorer 11 starts, it looks for a properly formatted site list. If a new site list if found, with a different version number than the active list, IE11 loads and uses the newer version. After the initial check, IE11 won’t look for an updated list again until you restart the browser. + +**Note**   +We recommend that you store and download your website list from a secure web sever (https://), to help protect against data tampering. After the list is downloaded, it's stored locally on your employee’s computers so if the centralized file location is unavailable, they can still use Enterprise Mode. + +  + +![](../common/wedge.gif)**To turn on Enterprise Mode using Group Policy** + +1. Open your Group Policy editor and go to the **Administrative Templates\\Windows Components\\Internet Explorer\\Use the Enterprise Mode IE website list** setting. + + Turning this setting on also requires you to create and store a site list. For more information about creating your site list, see the [Use the Enterprise Mode Site List Manager tool](use-the-enterprise-mode-site-list-manager-tool.md) topics. + + ![local group policy editor for using a site list](images/ie-emie-grouppolicysitelist.png) + +2. Click **Enabled**, and then in the **Options** area, type the location to your site list. + +![](../common/wedge.gif)**To turn on Enterprise Mode using the registry** + +1. **To turn on Enterprise Mode for only the local user:** Open a registry editor, like regedit.exe and go to `HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Main\EnterpriseMode`. + + -or- + + **To turn on Enterprise Mode for all users on the PC:** Open a registry editor, like regedit.exe and go to `HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\EnterpriseMode`. + +2. Edit the `SiteList` registry key to point to where you want to keep your Enterprise Mode site list file. For example: + + ![enterprise mode with site list in the registry](images/ie-emie-registrysitelist.png) + + - **HTTP location**: *“SiteList”=”http://localhost:8080/sites.xml”* + + - **Local network**: *"SiteList"="\\\\network\\shares\\sites.xml"* + + - **Local file**: *"SiteList"="file:///c:\\\\Users\\\\<user>\\\\Documents\\\\testList.xml"* + + All of your managed devices must have access to this location if you want them to be able to access and use Enterprise Mode and your site list. For information about how to create and use an Enterprise Mode site list, see [Use the Enterprise Mode Site List Manager tool](use-the-enterprise-mode-site-list-manager-tool.md). + +## Related topics + + +[Download the Enterprise Mode Site List Manager for Windows 10 tool](http://go.microsoft.com/fwlink/?LinkId=716853) +[Download the Enterprise Mode Site List Manager for Windows 7 and Windows 8.1 tool](http://go.microsoft.com/fwlink/?LinkID=394378) +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/turn-on-local-control-and-logging-for-enterprise-mode.md b/browsers/internet-explorer-11/ie11-deploy-guide/turn-on-local-control-and-logging-for-enterprise-mode.md new file mode 100644 index 0000000000..43810653b7 --- /dev/null +++ b/browsers/internet-explorer-11/ie11-deploy-guide/turn-on-local-control-and-logging-for-enterprise-mode.md @@ -0,0 +1,65 @@ +--- +Description: Turn on local control and logging for Enterprise Mode +MS-HAID: 'p\_ie11deploy.turn\_on\_local\_control\_and\_logging\_for\_enterprise\_mode' +MSHAttr: 'PreferredLib:/library' +title: Turn on local control and logging for Enterprise Mode +--- + +# Turn on local control and logging for Enterprise Mode + + +**Last updated** + +- November 12, 2015 + +**Applies to:** + +- Windows 10 +- Windows 8.1 +- Windows 7 +- Windows Server 2012 R2 +- Windows Server 2008 R2 with Service Pack 1 (SP1) + +You can turn on local control of Enterprise Mode so that your users can turn Enterprise Mode on from the **Tools** menu. Turning on this feature also adds the **Enterprise** browser profile to the **Emulation** tab of the F12 developer tools. + +Besides turning on this feature, you also have the option to provide a URL for Enterprise Mode logging. If you turn logging on, Internet Explorer initiates a simple POST back to the supplied address, including the URL and a specification that **EnterpriseMode** was turned on or off through the **Tools** menu. + +![](../common/wedge.gif)**To turn on local control of Enterprise Mode using Group Policy** + +1. Open your Group Policy editor and go to the **Administrative Templates\\Windows Components\\Internet Explorer\\Let users turn on and use Enterprise Mode from the Tools menu** setting. + + ![group policy editor with emie setting](images/ie-emie-editpolicy.png) + +2. Click **Enabled**, and then in the **Options** area, type the location for where to receive reports about when your employees use this functionality to turn Enterprise Mode on or off from the **Tools** menu. + +![](../common/wedge.gif)**To turn on local control of Enterprise Mode using the registry** + +1. Open a registry editor, like regedit.exe and go to `HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\EnterpriseMode`. + +2. In the right pane, right-click and click **New**, click **String Value**, and then name the new value **Enable**. + +3. Right-click the **Enable** key, click **Modify**, and then type a **Value data** to point to a server that you can listen to for updates. + + ![edit registry string for data collection location](images/ie-emie-editregistrystring.png) + + Your **Value data** location can be any of the following types: + + - **URL location (like, http://www.emieposturl.com/api/records or http://localhost:13000)**. IE sends a POST message to the URL every time a change is made to Enterprise Mode from the **Tools** menu. + + **Important**   + The http://www.emieposturl.com/api/records example will only work if you’ve downloaded the sample discussed in the [Set up Enterprise Mode logging and data collection](set-up-enterprise-mode-logging-and-data-collection.md) topic. If you don’t have the sample, you won’t have the web API. + +   + + - **Local network location (like, http://*emieposturl*/)**. IE sends a POST message to your specified local network location every time a change is made to Enterprise Mode from the **Tools** menu. + + - **Empty string**. If you leave the **Value data** box blank; your employees will be able to turn Enterprise Mode on and off from the **Tools** menu, but you won’t collect any logging data. + +For information about how to collect the data provided when your employees turn Enterprise Mode on or off from the **Tools** menu, see [Set up Enterprise Mode logging and data collection](set-up-enterprise-mode-logging-and-data-collection.md). + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/updated-features-and-tools-with-ie11.md b/browsers/internet-explorer-11/ie11-deploy-guide/updated-features-and-tools-with-ie11.md new file mode 100644 index 0000000000..c653956cb1 --- /dev/null +++ b/browsers/internet-explorer-11/ie11-deploy-guide/updated-features-and-tools-with-ie11.md @@ -0,0 +1,49 @@ +--- +Description: 'Internet Explorer 11 includes several new features and tools. This topic includes high-level info about the each of them.' +MS-HAID: 'p\_ie11deploy.updated\_features\_and\_tools\_\_\_internet\_explorer\_11\_\_ie11\_' +MSHAttr: 'PreferredLib:/library' +title: 'List of updated features and tools - Internet Explorer 11 (IE11)' +--- + +# + + +**Last updated** + +- November 12, 2015 + +**Applies to:** + +- Windows 10 +- Windows 8.1 Update +- Windows 7 with Service Pack 1 (SP1) +- Windows Server 2012 R2 +- Windows Server 2008 R2 with Service Pack 1 (SP1) + +Internet Explorer 11 includes several new features and tools. This topic includes high-level info about the each of them. + +## Updated features and tools + + +- **Updated web standards.** WebGL, Canvas 2D L2 extensions, fullscreen API, encrypted media extensions, media source extensions, CSS flexible box layout module, mutation observers, like DOM4 and 5.3. + +- **Enhanced Protected Mode.** Extends Protected Mode to further restrict the ability of an attacker to access sensitive or personal information in personal and corporate environments. This feature is turned off by default. For more info, see [Enhanced Protected Mode problems with Internet Explorer](enhanced-protected-mode-problems-with-ie11.md). + +- **Enterprise Mode.** Enterprise Mode, a compatibility mode that runs on IE11 on Windows 8.1 Update and Windows 7 devices, lets websites render using a modified browser configuration that’s designed to emulate Windows Internet Explorer 8, avoiding the common compatibility problems associated with web apps written and tested on older versions of Internet Explorer. For info, see [What is Enterprise Mode?](what-is-enterprise-mode.md) + +- **Out-of-date ActiveX control blocking**. Helps to keep your ActiveX controls up-to-date, because malicious software (or malware) can target security flaws in outdated controls, damaging your computer by collecting info from it, installing unwanted software, or by letting someone else control it remotely. For info, see [Out-of-date ActiveX control blocking](out-of-date-activex-control-blocking.md). + +- **Do Not Track (DNT) exceptions.** IE11 lets websites ask whether to track users as they browse a website. If the user approves the request, IE records an exception to the "Do Not Track" rule and sends headers to the website that allow tracking. By respecting these headers and requesting exceptions to the default privacy settings, website owners can develop a trusted relationship with their users about privacy. + + For more information about IE11, see [Internet Explorer 11 - FAQ for IT Pros](http://go.microsoft.com/fwlink/p/?linkid=313985). + +- **IE Administration Kit (IEAK).** Lets you create custom, branded versions of IE11. To get more information and to download the tool, see [Internet Explorer Administration Kit (IEAK) Information and Downloads](http://go.microsoft.com/fwlink/?LinkId=392490). + +- **Unattend Settings.** Lets you update the Unattend.xml file, to customize the home page, favorites, search providers, feeds, Accelerators, Web Slices, and settings for top result searches. To get more information, see the [Unattend Settings: Microsoft-Windows-IE-InternetExplorer](http://go.microsoft.com/fwlink/p/?LinkId=263709). + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/use-the-enterprise-mode-site-list-manager-tool.md b/browsers/internet-explorer-11/ie11-deploy-guide/use-the-enterprise-mode-site-list-manager-tool.md new file mode 100644 index 0000000000..32c37630c2 --- /dev/null +++ b/browsers/internet-explorer-11/ie11-deploy-guide/use-the-enterprise-mode-site-list-manager-tool.md @@ -0,0 +1,158 @@ +--- +Description: Use the Enterprise Mode Site List Manager tool +MS-HAID: 'p\_ie11deploy.use\_the\_enterprise\_mode\_site\_list\_manager\_tool' +MSHAttr: 'PreferredLib:/library' +title: Use the Enterprise Mode Site List Manager tool +--- + +# Use the Enterprise Mode Site List Manager tool + + +**Last updated** + +- November 12, 2015 + +**Applies to:** + +- Windows 10 +- Windows 8.1 +- Windows 7 +- Windows Server 2012 R2 +- Windows Server 2008 R2 with Service Pack 1 (SP1) + +Enterprise Mode is a compatibility mode that runs on Internet Explorer 11, letting websites render using a modified browser configuration that’s designed to emulate either Windows Internet Explorer 8 or Windows Internet Explorer 7, avoiding the common compatibility problems associated with web apps written and tested on older versions of Internet Explorer. + +You can use IE11 and the Enterprise Mode Site List Manager tool to add individual website domains and domain paths and to specify whether the site renders using Enterprise Mode or the default mode. + +## Enterprise Mode Site List Manager tool versions + + +There are currently two versions of the Enterprise Site List Manager tool, both based on your schema and operating system. Download the [Enterprise Mode Site List Manager for Windows 10](http://go.microsoft.com/fwlink/?LinkId=716853) tool or the [Enterprise Mode Site List Manager for Windows 7 and Windows 8.1](http://go.microsoft.com/fwlink/?LinkID=394378) tool, based on your operating system. + + +++++ + + + + + + + + + + + + + + + + + + + +
Operating systemSchema versionEnterprise Site List Manager tool version
Windows 10

Enterprise Mode schema v.2

+

or

+

Enterprise Mode schema v.1

+

Windows 10 supports both versions of the enterprise mode schema. However, the Windows 10 Enterprise Mode Site List Manager tool only supports the v.2 version of the schema. If you import a v.1 version schema into the Windows 10 Enterprise Mode Site List Manager tool, it will save the XML into the v.2 version of the schema.

+

For more info about the different schema versions, see [Enterprise Mode schema v.2 guidance for Windows 10 devices](enterprise-mode-schema-version-2-guidance)

Windows 7 +

or

+Windows 8.1

Enterprise Mode schema v.1

Uses the Windows 7 and Windows 8.1 Enterprise Mode Site List Manager tool.

+

For more info about the different schema versions, see [Enterprise Mode schema v.1 guidance for Windows 7 and Windows 8.1 devices](enterprise-mode-schema-version-1-guidance.md)

+ +  + +## Using the Enterprise Mode Site List Manager tool + + +The following topics give you more information about the things that you can do with the Enterprise Mode Site List Manager tool. + + ++++ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
TopicDescription

[Add sites to the Enterprise Mode site list using the Windows 10 Enterprise Mode Site List Manager tool](add-single-sites-to-enterprise-mode-site-list-using-the-version-2-enterprise-mode-tool.md)

How to add websites to your site list using the Windows 10 Enterprise Mode Site List Manager.

[Add sites to the Enterprise Mode site list using the Windows 7 and Windows 8.1 Enterprise Mode Site List Manager tool](add-single-sites-to-enterprise-mode-site-list-using-the-version-1-enterprise-mode-tool.md)

How to add websites to your site list using the Windows 7 and Windows 8.1 Enterprise Mode Site List Manager.

[Add multiple sites to the Enterprise Mode site list using a file and the Windows 10 Enterprise Mode Site List Manager tool](add-multiple-sites-to-enterprise-mode-site-list-using-the-version-2-schema-and-enterprise-mode-tool.md)

How to add several websites to your site list at the same time, using a text or XML file and the Windows 10 Enterprise Mode Site List Manager.

[Add multiple sites to the Enterprise Mode site list using a file and the Windows 7 and Windows 8.1 Enterprise Mode Site List Manager tool](add-multiple-sites-to-enterprise-mode-site-list-using-using-the-version-1-schema-and-enterprise-mode-tool.md)

How to add several websites to your site list at the same time, using a text or XML file and the Windows 7 and Windows 8.1 Enterprise Mode Site List Manager.

[Edit the Enterprise Mode site list using the Enterprise Mode Site List Manager tool](edit-the-enterprise-mode-site-list-using-the-enterprise-mode-site-list-manager.md)

How to edit the compatibility mode for specific websites.

+

This topic applies to both versions of the Enterprise Mode Site List Manager tool.

[Fix validation problems using the Enterprise Mode Site List Manager tool](fix-validation-problems-using-the-enterprise-mode-site-list-manager.md)

How to fix common site list validation errors.

+

This topic applies to both versions of the Enterprise Mode Site List Manager tool.

[Search your Enterprise Mode site list in the Enterprise Mode Site List Manager tool](search-your-enterprise-mode-site-list-in-the-enterprise-mode-site-list-manager.md)

How to look to see if a site is already in your global Enterprise Mode site list.

+

This topic applies to both versions of the Enterprise Mode Site List Manager tool.

[Save your site list to XML in the Enterprise Mode Site List Manager tool](save-your-site-list-to-xml-in-the-enterprise-mode-site-list-manager.md)

How to save a site list as XML, so you can deploy and use it with your managed systems.

+

This topic applies to both versions of the Enterprise Mode Site List Manager tool.

[Export your Enterprise Mode site list from the Enterprise Mode Site List Manager tool](export-your-enterprise-mode-site-list-from-the-enterprise-mode-site-list-manager.md)

How to export your site list so you can transfer your data and contents to someone else.

+

This topic applies to both versions of the Enterprise Mode Site List Manager tool.

[Import your Enterprise Mode site list to the Enterprise Mode Site List Manager tool](import-into-the-enterprise-mode-site-list-manager.md)

How to import your site list to replace a corrupted or out-of-date list.

+

This topic applies to both versions of the Enterprise Mode Site List Manager tool.

[Delete sites from your Enterprise Mode site list in the Enterprise Mode Site List Manager tool](delete-sites-from-your-enterprise-mode-site-list-in-the-enterprise-mode-site-list-manager.md)

How to delete a website from your site list.

+

This topic applies to both versions of the Enterprise Mode Site List Manager tool.

[Remove all sites from your Enterprise Mode site list in the Enterprise Mode Site List Manager tool](remove-all-sites-from-your-enterprise-mode-site-list-in-the-enterprise-mode-site-list-manager.md)

How to delete all of the websites in a site list.

+

This topic applies to both versions of the Enterprise Mode Site List Manager tool.

+ +  + +## Related topics + + +[Download the Enterprise Mode Site List Manager for Windows 10 tool](http://go.microsoft.com/fwlink/?LinkId=716853) +[Download the Enterprise Mode Site List Manager for Windows 7 and Windows 8.1 tool](http://go.microsoft.com/fwlink/?LinkID=394378) +[Enterprise Mode schema v.2 guidance for Windows 10 devices](enterprise-mode-schema-version-2-guidance.md) +[Enterprise Mode schema v.1 guidance for Windows 7 and Windows 8.1 devices](enterprise-mode-schema-version-1-guidance.md) +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/user-interface-problems-with-ie11.md b/browsers/internet-explorer-11/ie11-deploy-guide/user-interface-problems-with-ie11.md new file mode 100644 index 0000000000..cb4a8af287 --- /dev/null +++ b/browsers/internet-explorer-11/ie11-deploy-guide/user-interface-problems-with-ie11.md @@ -0,0 +1,61 @@ +--- +Description: User interface problems with Internet Explorer 11 +MS-HAID: 'p\_ie11deploy.user\_interface\_problems\_with\_internet\_explorer\_11' +MSHAttr: 'PreferredLib:/library' +title: User interface problems with Internet Explorer 11 +--- + +# User interface problems with Internet Explorer 11 + + +Some of the features in both Internet Explorer 11 and IEAK 11 have moved around. Here are some of the more common changes. + +## Where did features go in the Internet Explorer Customization Wizard 11? + + +Various installation or set up choices can prevent you from seeing certain pages in the Internet Explorer Customization Wizard 11. If, after going through the entire Wizard you still haven't found the screen you were looking for, try: + +- Making sure you picked the right version of IEAK 11 during installation. Most administrators should pick the **Internal** version, which has more screens and options available. + +- Making sure you picked all of the features you wanted from the **Feature Selection** page of the IE Customization Wizard 11. If you don't pick a feature, the associated page won't appear. + +## Where are the security zone settings? + + +You can see your security zone settings by opening Internet Explorer for the desktop, clicking **Internet Options** from the **Tools** menu, and then clicking **Security**. + +## Where did the Favorites, Command, and Status bars go? + + +For IE11, the UI has been changed to provide just the controls needed to support essential functionality, hiding anything considered non-essential, such as the **Favorites Bar**, **Command Bar**, **Menu Bar**, and **Status Bar**. This is intended to help focus users on the content of the page, rather than the browser itself. However, if you want these bars to appear, you can turn them back on using Group Policy settings. + +![](../common/wedge.gif)**To turn the toolbars back on** + +- Right click in the IE toolbar heading and choose to turn on the **Command bar**, **Favorites bar**, and **Status bar** from the menu. + + -or- + + In IE, press **ALT+V** to show the **View** menu, press **T** to enter the **Toolbars** menu, and then press: + + - **C** to turn on the **Command Bar** + + - **F** to turn on the **Favorites Bar** + + - **S** to turn on the **Status Bar** + +## Where did the search box go? + + +IE11 uses the **One Box** feature, which lets users type search terms directly into the **Address bar**. Any text entered into the **Address bar** that doesn't appear to be a URL is automatically sent to the currently selected search provider. + +**Note**   +Depending on how you've set up your intranet search, the text entry might resolve to an intranet site. For more information about this, see [Intranet problems with Internet Explorer 11](intranet-problems-and-ie11.md). + +  + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/using-enterprise-mode.md b/browsers/internet-explorer-11/ie11-deploy-guide/using-enterprise-mode.md new file mode 100644 index 0000000000..69edd220f2 --- /dev/null +++ b/browsers/internet-explorer-11/ie11-deploy-guide/using-enterprise-mode.md @@ -0,0 +1,61 @@ +--- +Description: 'Enterprise Mode gives you a way for your legacy websites and apps to run using emulated versions of Windows Internet Explorer 7 or Windows Internet Explorer 8, while your new sites and apps run using Internet Explorer 11, including modern standards and features.' +MS-HAID: 'p\_ie11deploy.using\_enterprise\_mode' +MSHAttr: 'PreferredLib:/library' +title: Using IE7 Enterprise Mode or IE8 Enterprise Mode +--- + +# Using IE7 Enterprise Mode or IE8 Enterprise Mode + + +**Last updated** + +- November 12, 2015 + +**Applies to:** + +- Windows 10 +- Windows 8.1 +- Windows 7 +- Windows Server 2012 R2 +- Windows Server 2008 R2 with Service Pack 1 (SP1) + +Enterprise Mode gives you a way for your legacy websites and apps to run using emulated versions of Windows Internet Explorer 7 or Windows Internet Explorer 8, while your new sites and apps run using Internet Explorer 11, including modern standards and features. + +Although it’s called IE7 Enterprise Mode, it actually turns on Enterprise Mode along with Internet Explorer 7 or Microsoft Internet Explorer 5 Compatibility View. Compatibility View chooses which document mode to use based on whether there’s a `DOCTYPE` tag in your code: + +- **DOCTYPE tag found.** Webpages render using the Internet Explorer 7 document mode. +- **No DOCTYPE tag found.** Webpages render using the Internet Explorer 5 document mode. + +**Important**   +Because we’ve added the IE7 Enterprise Mode option, we’ve had to rename the original functionality of Enterprise Mode to be IE8 Enterprise Mode. We’ve also replaced Edge Mode with IE11 Document Mode, so you can explicitly use IE11 on Windows 10. + +  + +## Turning on and using IE7 Enterprise Mode or IE8 Enterprise Mode + + +For instructions about how to add IE7 Enterprise Mode or IE8 Enterprise Mode to your webpages and apps, see: + +- [Add sites to the Enterprise Mode site list using the Windows 10 Enterprise Mode Site List Manager](add_sites_to_the_enterprise_mode_site_list_using_the_enterprise_mode_site_list_manager.md) + +- [Add sites to the Enterprise Mode site list using the Windows 7 and Windows 8.1 Enterprise Mode Site List Manager](add_sites_to_the_enterprise_mode_site_list_using_the_windows_7_and_windows_8_1_enterprise_mode_site_list_manager.md) + +- [Add multiple sites to the Enterprise Mode site list using a file and the Windows 10 Enterprise Mode Site List Manager tool](add_multiple_sites_to_the_enterprise_mode_site_list_using_a_file_and_enterprise_mode_site_list_manager.md) + +- [Add multiple sites to the Enterprise Mode site list using a file and the Windows 7 and 8.1 Enterprise Mode Site List Manager tool](add_multiple_sites_to_the_enterprise_mode_site_list_using_a_file_and_the_enterprise_mode_manager.md) + +For instructions and more info about how to fix your compatibility issues using Enterprise Mode, see [Fix web compatibility issues using document modes and the Enterprise Mode site list](fix-compat-issues-with-doc-modes-and-enterprise-mode-site-list.md). + +## Related topics + + +[Download the Enterprise Mode Site List Manager for Windows 10 tool](http://go.microsoft.com/fwlink/?LinkId=716853) +[Download the Enterprise Mode Site List Manager for Windows 7 and Windows 8.1 tool](http://go.microsoft.com/fwlink/?LinkID=394378) +[Use the Enterprise Mode Site List Manager tool](use-the-enterprise-mode-site-list-manager-tool.md) +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/using-ieak11-to-create-install-packages.md b/browsers/internet-explorer-11/ie11-deploy-guide/using-ieak11-to-create-install-packages.md new file mode 100644 index 0000000000..e92ae4c350 --- /dev/null +++ b/browsers/internet-explorer-11/ie11-deploy-guide/using-ieak11-to-create-install-packages.md @@ -0,0 +1,64 @@ +--- +Description: Using IEAK 11 to create packages +MS-HAID: 'p\_ie11deploy.using\_ieak\_11\_to\_create\_packages' +MSHAttr: 'PreferredLib:/library' +title: Using IEAK 11 to create packages +--- + +# Using IEAK 11 to create packages + + +IEAK 11 helps you set up, deploy, and maintain Internet Explorer 11. + +**Note**   +IEAK 11 works in network environments, with or without Microsoft Active Directory. + +  + +## Plan, Customize, and Build with the IEAK 11 + + +Consider these activities while planning, customizing, and building the custom installation package. + +### Plan + +Before you begin, you should: + +- **Check the operating system requirements.** Check that the requirements for the computer you're building your installation package from, and the computers you're installing IE11 to, all meet the system requirements for IEAK 11 and IE11. For Internet Explorer requirements, see [System requirements and language support for Internet Explorer 11 (IE11)](system-requirements-and-language-support-for-ie11.md). For IEAK 11 requirements, see [IEAK 11 - Internet Explorer Administration Kit 11 Users Guide](http://go.microsoft.com/fwlink/p/?linkid=327741). + +- **Decide on your distribution method.** Decide how to distribute your custom installation package: Windows Update, System Center System Center 2012 R2 Configuration Manager, or your network. + +- **Gather URLs and branding and custom graphics.** Collect the URLs for your company's own **Home**, **Search**, and **Support** pages, plus any custom branding and graphic files for the browser toolbar button and the **Favorites** list icons. + +- **Identify trusted network servers.** Decide which servers your employees should use to install the custom IE package. These servers need to be listed as trusted sites. + +- **Set up automatic detection and configuration settings.** Decide whether to automatically customize IE11 the first time it's started. + +- **Identify custom components for uninstallation.** Decide whether to include any custom uninstallation programs. Uninstallation programs let your employees remove your custom components through **Uninstall or change a program** in the Control Panel. + +- **Identify ActiveX controls.** Decide if you'll use ActiveX controls in your company. If you already use ActiveX, you should get an inventory of your active controls. + +### Customize and build + +After installing IE11 and the IEAK 11, you should: + +- **Prepare your build computer.** Create your build environment on the computer you're using to build the custom package. + +- **Create your branding and custom graphics.** If you don't have any, create custom branding and graphic files for the browser toolbar button and icons in your **Favorites** list. + +- **Specify your servers as trusted sites.** Identify your installation servers as trusted sites, in the **Trusted sites zone** of the **Internet Options** box. + +- **Turn on automatic detection and configuration settings (Optional).** Set up your network so that IE is automatically customized the first time it's started. + +- **Set up custom components for uninstallation.** Create the custom .inf file you'll use to register your custom uninstallation programs. + +- **Set up ActiveX controls.** Add any new ActiveX controls to the Axaa.adm file, using a text editor. + +- **Create a custom browser package.** Create your custom installation package, using IE Customization Wizard 11. For more information about using the wizard, see [Internet Explorer Customization Wizard 11 options](http://go.microsoft.com/fwlink/p/?linkid=328022). + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/using-inf-files-to-create-install-packages.md b/browsers/internet-explorer-11/ie11-deploy-guide/using-inf-files-to-create-install-packages.md new file mode 100644 index 0000000000..d9e6f51a18 --- /dev/null +++ b/browsers/internet-explorer-11/ie11-deploy-guide/using-inf-files-to-create-install-packages.md @@ -0,0 +1,45 @@ +--- +Description: 'Using .INF files to create packages' +MS-HAID: 'p\_ie11deploy.using\_inf\_files\_to\_create\_packages' +MSHAttr: 'PreferredLib:/library' +title: 'Using .INF files to create packages' +--- + +# Using .INF files to create packages + + +IEAK 11 uses Setup information (.inf) files to provide uninstallation instructions. Uninstallation instructions let your employees remove components, like files, registry entries, or shortcuts, through the **Uninstall or change a program** box. For details about .inf files, see [INF File Sections and Directives](http://go.microsoft.com/fwlink/?LinkId=327959). + +![](../common/wedge.gif)**To add uninstallation instructions to the .inf files** + +- Open the Registry Editor (regedit.exe) and add these registry keys: + + ``` syntax + HKLM,SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\app-name,"DisplayName",,"description" + HKLM,SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\app-name,"UninstallString",,"command-line" + ``` + + Where **"description"** is the name that shows up in the **Uninstall or change a program** box and **"command-line"** is the command that runs after the component is picked. + + **Note**   + Make sure your script removes the uninstallation registry key, too. Otherwise, the component name will continue to show up in the **Uninstall or change a program**. + +   + +## Limitations + + +.Inf files have limitations: + +- You can't delete directories. + +- You can't use **RenFiles** to move a file to a different location, it only lets you rename a file in its existing location. For detailed information, see [INF RenFiles Directive](http://go.microsoft.com/fwlink/p/?LinkId=298508). + +- You can't use **CopyFiles** to copy a file to another place on your hard drive, it can only copy files from the source disk to the destination directory. For information, see [INF CopyFiles Directive](http://go.microsoft.com/fwlink/p/?LinkId=298510). + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/virtualization-and-compatibility-with-ie11.md b/browsers/internet-explorer-11/ie11-deploy-guide/virtualization-and-compatibility-with-ie11.md new file mode 100644 index 0000000000..5f4ec42ddc --- /dev/null +++ b/browsers/internet-explorer-11/ie11-deploy-guide/virtualization-and-compatibility-with-ie11.md @@ -0,0 +1,31 @@ +--- +Description: Virtualization and compatibility with Internet Explorer 11 +MS-HAID: 'p\_ie11deploy.virtualization\_and\_compatibility\_with\_internet\_explorer\_11' +MSHAttr: 'PreferredLib:/library' +title: Virtualization and compatibility with Internet Explorer 11 +--- + +# Virtualization and compatibility with Internet Explorer 11 + + +If your company is considering upgrading to the latest version of Internet Explorer, but is hesitant because of a large number of web apps that need to be tested and moved, we recommend that you consider virtualization. Virtualization lets you set up a virtual environment where you can run earlier versions of IE. + +**Important**   +We strongly suggest that while you're using virtualization, you also update your web apps so they run natively in the newer version of IE. For more information about how to update your code, see the [Internet Explorer 11 Compatibility Cookbook (Windows)](http://go.microsoft.com/fwlink/?LinkId=279707) to learn about the developer features that have been changed or deprecated since Internet Explorer 10. + +  + +The Microsoft-supported options for virtualizing web apps are: + +- **Microsoft Enterprise Desktop Virtualization (MED-V).** Uses Microsoft Virtual PC to provide an enterprise solution for desktop virtualization. With MED-V, you can easily create, deliver, and manage corporate Virtual PC images on any Windows®-based desktop. For more information, see [MED-V](http://go.microsoft.com/fwlink/?LinkId=271653). + +- **Client Hyper-V.** Uses the same virtualization technology previously available in Windows Server, but now installed for Windows 8.1. For more information, see [Client Hyper-V](http://go.microsoft.com/fwlink/?LinkId=271654). + +For more information about virtualization options, see [Microsoft Desktop Virtualization](http://go.microsoft.com/fwlink/?LinkId=271662). + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/what-is-enterprise-mode.md b/browsers/internet-explorer-11/ie11-deploy-guide/what-is-enterprise-mode.md new file mode 100644 index 0000000000..da01a80354 --- /dev/null +++ b/browsers/internet-explorer-11/ie11-deploy-guide/what-is-enterprise-mode.md @@ -0,0 +1,54 @@ +--- +Description: 'What is Enterprise Mode?' +MS-HAID: 'p\_ie11deploy.what\_is\_enterprise\_mode' +MSHAttr: 'PreferredLib:/library' +title: 'What is Enterprise Mode?' +--- + +# What is Enterprise Mode? + + +**Last updated** + +- December 3, 2015 + +**Applies to:** + +- Windows 10 +- Windows 8.1 +- Windows 7 +- Windows Server 2012 R2 +- Windows Server 2008 R2 with Service Pack 1 (SP1) + +Enterprise Mode, a compatibility mode that runs on Internet Explorer 11 on Windows 8.1 Update and Windows 7 devices, lets websites render using a modified browser configuration that’s designed to emulate either Windows Internet Explorer 7 or Windows Internet Explorer 8, avoiding the common compatibility problems associated with web apps written and tested on older versions of Internet Explorer. + +Many customers identify web app compatibility as a significant cost to upgrading because web apps need to be tested and upgraded before adopting a new browser. The improved compatibility provided by Enterprise Mode can help give customers confidence to upgrade to the latest version of IE. In particular, IE11 lets customers benefit from modern web standards, increased performance, improved security, and better reliability. + +## Enterprise Mode features + + +Enterprise Mode includes the following features: + +- **Improved web app and website compatibility.** Through improved emulation, Enterprise Mode lets many legacy web apps run unmodified on IE11, supporting a number of site patterns that aren’t currently supported by existing document modes. + +- **Tool-based management for website lists.** Use the Enterprise Mode Site List Manager tool to add website domains and domain paths and to specify whether a site renders using Enterprise Mode. + + Download the [Enterprise Mode Site List Manager for Windows 10](http://go.microsoft.com/fwlink/?LinkId=716853) tool or the [Enterprise Mode Site List Manager for Windows 7 and Windows 8.1](http://go.microsoft.com/fwlink/?LinkID=394378) tool, based on your operating system and schema. + +- **Centralized control.** You can specify the websites or web apps to interpret using Enterprise Mode, through an XML file on a website or stored locally. Domains and paths within those domains can be treated differently, allowing granular control. Use Group Policy to let users turn Enterprise Mode on or off from the **Tools** menu and to decide whether the Enterprise browser profile appears on the **Emulation** tab of the F12 developer tools. + +- **Important**   + All centrally-made decisions override any locally-made choices. + +   + +- **Integrated browsing.** When Enterprise Mode is set up, users can browse the web normally, letting the browser change modes automatically to accommodate Enterprise Mode sites. + +- **Data gathering.** You can configure Enterprise Mode to collect local override data, posting back to a named server. This lets you “crowd source” compatibility testing from key users; gathering their findings to add to your central site list. + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-deploy-guide/what-is-the-internet-explorer-11-blocker-toolkit.md b/browsers/internet-explorer-11/ie11-deploy-guide/what-is-the-internet-explorer-11-blocker-toolkit.md new file mode 100644 index 0000000000..bbd8ff61f5 --- /dev/null +++ b/browsers/internet-explorer-11/ie11-deploy-guide/what-is-the-internet-explorer-11-blocker-toolkit.md @@ -0,0 +1,53 @@ +--- +Description: 'The Internet Explorer 11 Blocker Toolkit lets you turn off the automatic delivery of IE11 through the Automatic Updates feature of Windows Update.' +MS-HAID: 'p\_ie11deploy.what\_is\_the\_internet\_explorer\_11\_blocker\_toolkit' +MSHAttr: 'PreferredLib:/library' +title: 'What is the Internet Explorer 11 Blocker Toolkit?' +--- + +# What is the Internet Explorer 11 Blocker Toolkit? + + +**Last updated** + +- November 12, 2015 + +**Applies to:** + +- Windows 10 +- Windows 8.1 +- Windows 7 +- Windows Server 2012 R2 +- Windows Server 2008 R2 with Service Pack 1 (SP1) + +The Internet Explorer 11 Blocker Toolkit lets you turn off the automatic delivery of IE11 through the **Automatic Updates** feature of Windows Update. + +**Important**   +The IE11 Blocker Toolkit doesn't stop users from manually installing IE11 from the [Microsoft Download Center](http://go.microsoft.com/fwlink/p/?linkid=327753). Also, even if you've installed previous versions of the toolkit before, like for Internet Explorer 10, you still need to install this version to prevent the installation of IE11. + +  + +![](../common/wedge.gif)**To install the toolkit** + +1. Download the IE11 Blocker Toolkit from [Toolkit to Disable Automatic Delivery of Internet Explorer 11](http://go.microsoft.com/fwlink/?LinkId=327745). + +2. Accept the license agreement and store the included 4 files on your local computer. + +3. Start an elevated Command Prompt by going to **Start**>**All Programs**>**Accessories**> right-clicking on **Command Prompt**, and then choosing **Run as Administrator**. + +4. In the Command Prompt, change to the location where you put the 4 files. + +5. In the Command Prompt, type `ie11_blocker.cmd /B` and press Enter. + + Wait for the message, **Blocking deployment of IE11 on the local machine. The operation completed successfully.** + +6. Close the Command Prompt. + +For answers to frequently asked questions, see [Internet Explorer 11 Blocker Toolkit: Frequently Asked Questions](http://go.microsoft.com/fwlink/?LinkId=314063). + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-faq/internet-explorer-11---faq-for-it-pros.md b/browsers/internet-explorer-11/ie11-faq/internet-explorer-11---faq-for-it-pros.md new file mode 100644 index 0000000000..11c5e03861 --- /dev/null +++ b/browsers/internet-explorer-11/ie11-faq/internet-explorer-11---faq-for-it-pros.md @@ -0,0 +1,197 @@ +--- +Description: 'Internet Explorer 11 - FAQ for IT Pros' +MS-HAID: 'p\_ie11faq.internet\_explorer\_11\_\_\_faq\_for\_it\_pros' +MSHAttr: 'PreferredLib:/library' +title: 'Internet Explorer 11 - FAQ for IT Pros' +--- + +# Internet Explorer 11 - FAQ for IT Pros + + +Answering frequently asked questions about Internet Explorer 11 features, operating system support, integration with the Windows operating system, Group Policy, and general configuration. + +## Frequently Asked Questions + + +**What operating system does IE11 run on?** + +- Windows 10 + +- Windows 8.1 + +- Windows Server 2012 R2 + +- Windows 7 with Service Pack 1 (SP1) + +- Windows Server 2008 R2 with Service Pack 1 (SP1) + +**How do I install IE11 on Windows 10, Windows 8.1, or Windows Server 2012 R2?** + +IE11 is preinstalled with Windows 8.1 and Windows Server 2012 R2. No additional action is required. + +**How do I install IE11 on Windows 7 with SP1 or Windows Server 2008 R2 with SP1?** + +You can install IE11 on computers running either Windows 7 with SP1 or Windows Server 2008 R2 with SP1. To download IE11, see the IE11[home page](http://go.microsoft.com/fwlink/p/?LinkId=290956). + +**How does IE11 integrate with Windows 8.1?** + +IE11 is the default handler for the HTTP and HTTPS protocols and the default browser for Windows 8.1. There are two experiences in Windows 8.1: Internet Explorer and Internet Explorer for the desktop. IE is the default browser for touch-first, immersive experiences. Internet Explorer for the desktop provides a more traditional window and tab management experience. The underlying platform of IE11 is fully interoperable across both IE and the familiar Internet Explorer for the desktop, letting developers write the same markup for both experiences. + +**What are the new or improved security features?** + +IE11 offers improvements to Enhanced Protected Mode, password manager, and other security features. IE11 also turns on Transport Layer Security (TLS) 1.2 by default. + +**How is Microsoft supporting modern web standards, such as WebGL?** + +Microsoft is committed to providing an interoperable web by supporting modern web standards. Doing this lets developers use the same markup across web browsers, helping to reduce development and support costs. + +Supported web standards include: + +- Web Graphics Library (WebGL) + +- Canvas 2D L2 extensions, including image smoothing using the nearest neighbor, dashed lines, and fill rules + +- Fullscreen API + +- Encrypted media extensions + +- Media source extensions + +- CSS flexible box layout module + +- And mutation observers like DOM4 and 5.3 + +For more information about specific changes and additions, see the [IE11 guide for developers](http://go.microsoft.com/fwlink/?LinkId=313188). + +**What test tools exist to test for potential application compatibility issues?** + +The Compat Inspector tool supports Windows Internet Explorer 9 through IE11. For more information, see [Compat Inspector User Guide](http://go.microsoft.com/fwlink/?LinkId=313189). In addition, you can use the new [F12 Developer Tools](http://go.microsoft.com/fwlink/?LinkId=313190) that are included with IE11, or the [modern.ie](http://go.microsoft.com/fwlink/p/?linkid=308902) website for older versions of IE. + +**Why am I having problems launching my legacy apps with Internet Explorer 11**? + +It’s most likely because IE no longer starts apps that use managed browser hosting controls, like in the .NET Framework 1.1 and 2.0. You can get IE11 to use managed browser hosting controls again, by: + +- **For x86 systems or for 32-bit processes on x64 systems:** Go to the HKLM/SOFTWARE/MICROSOFT/.NETFramework registry key and change the EnableIEHosting value to 1. + +- **For x64 systems or for 64-bit processes on x64 systems:** Go to the HKLM/SOFTWARE/Wow6432Node/.NETFramework registry key and change the EnableIEHosting value to 1. + +For more information, see the [Web Applications](http://go.microsoft.com/fwlink/?LinkId=308903) section of the Application Compatibility in the .NET Framework 4.5 page. + +**Is there a compatibility list for IE?** + +Yes. You can review the XML-based [compatibility list](http://go.microsoft.com/fwlink/p/?LinkId=242586). + +**What is Enterprise Mode?** + +Enterprise Mode is a compatibility mode designed for Enterprises. This mode lets websites render using a modified browser configuration that’s designed to avoid the common compatibility problems associated with web apps written and tested on older versions of IE, like Windows Internet Explorer 7 or Windows Internet Explorer 8. + +For more information, see [Turn on Enterprise Mode and use a site list](p_ie11deploy.turn_on_enterprise_mode_and_use_a_site_list). + +**What is the Enterprise Mode Site List Manager tool?** + +Enterprise Mode Site List Manager tool gives you a way to add websites to your Enterprise Mode site list, without having to manually code XML. + +For more information, see all of the topics in [Use the Enterprise Mode Site List Manager tool](p_ie11deploy.use_the_enterprise_mode_site_list_manager_tool). + +**Are browser plug-ins supported in IE11?** + +The immersive version of IE11 provides an add-on–free experience, so browser plugins won't load and dependent content won't be displayed. This doesn't apply to Internet Explorer for the desktop. For more information, see [Browsing Without Plug-ins](http://go.microsoft.com/fwlink/p/?LinkId=242587). However, Internet Explorer for the desktop and IE11 on Windows 7 with SP1 do support browser plugins, including ActiveX controls such as Adobe Flash and Microsoft Silverlight. + +**Is Adobe Flash supported on IE11?** + +Adobe Flash is included as a platform feature and is available out of the box for Windows 8.1, running on both IE and Internet Explorer for the desktop. Users can turn this feature on or off using the **Manage Add-ons** dialog box, while administrators can turn this feature on or off using the Group Policy setting, **Turn off Adobe Flash in IE and prevent applications from using IE technology to instantiate Flash objects**. + +**Important**   +The preinstalled version of Adobe Flash isn't supported on IE11 running on either Windows 7 with SP1 or Windows Server 2008 R2 with SP1. However, you can still download and install the separate Adobe Flash plug-in. + +  + +**Can I replace IE11 on Windows 8.1 with an earlier version?** + +No. Windows 8.1 doesn't support any of the previous versions of IE. + +**Are there any new Group Policy settings in IE11?** + +IE11 includes all of the previous Group Policy settings you've used to manage and control web browser configuration since Internet Explorer 9. It also includes the following new Group Policy settings, supporting new features: + +- Turn off Page Prediction + +- Turn on the swiping motion for Internet Explorer for the desktop + +- Allow Microsoft services to provide more relevant and personalized search results + +- Turn off phone number detection + +- Allow IE to use the SPDY/3 network protocol + +- Let users turn on and use Enterprise Mode from the **Tools** menu + +- Use the Enterprise Mode IE website list + +For more information, see [New group policy settings for IE11](p_ie11deploy.new_group_policy_settings_for_internet_explorer_11). + +**Is there a version of the Internet Explorer Administration Kit (IEAK) supporting IE11?** + +Yes. The Internet Explorer Administration Kit 11 (IEAK 11) is available for download. IEAK 11 lets you create custom versions of IE11 for use in your organization. For more information, see the following resources: + +- [Internet Explorer Administration Kit Information and Downloads](http://go.microsoft.com/fwlink/p/?LinkId=214250) on the Internet Explorer TechCenter. + +- [Internet Explorer Administration Kit 11 product documentation](http://go.microsoft.com/fwlink/p/?LinkId=327739) on TechNet. + +**Where can I get more information about IE11 for IT pros?** + +Visit the [Springboard Series for IE11](http://go.microsoft.com/fwlink/?LinkId=313191) webpage on TechNet. + +**Is there a version of the Internet Explorer Blocker Toolkit that will prevent automatic installation of IE11?** + +Yes. The IE11 Blocker Toolkit is available for download. For more information, see [Toolkit to Disable Automatic Delivery of IE11](http://go.microsoft.com/fwlink/?LinkId=328195) on the Microsoft Download Center. + +**Can I customize settings for IE on Windows 8.1?** + +Settings can be customized in the following ways: + +- IE11**Settings** charm. + +- IE11-related Group Policy settings. + +- IEAK 11 for settings shared by both IE and Internet Explorer for the desktop. + +**Can I make Internet Explorer for the desktop my default browsing experience?** + +Group Policy settings can be set to open either IE or Internet Explorer for the desktop as the default browser experience. Individual users can configure their own settings in the **Programs** tab of **Internet Options**. The following table shows the settings and results: + + ++++ + + + + + + + + + + + + + + + + + + + + +
SettingResult

Let IE decide

Links open in the same type of experience from where they're launched. For example, clicking a link from a Windows Store app, opens IE. However, clicking a link from a desktop app, opens Internet Explorer for the desktop.

Always in IE11

Links always open in IE.

Always in Internet Explorer for the desktop

Links always open in Internet Explorer for the desktop.

+ +  + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-ieak/accelerators-internet-explorer-customization-wizard.md b/browsers/internet-explorer-11/ie11-ieak/accelerators-internet-explorer-customization-wizard.md new file mode 100644 index 0000000000..bb9c1b2109 --- /dev/null +++ b/browsers/internet-explorer-11/ie11-ieak/accelerators-internet-explorer-customization-wizard.md @@ -0,0 +1,39 @@ +--- +Description: 'Accelerators: Internet Explorer Customization Wizard' +MS-HAID: 'p\_ieak\_ie11.accelerators\_internet\_explorer\_customization\_wizard' +MSHAttr: 'PreferredLib:/library' +title: 'Accelerators: Internet Explorer Customization Wizard' +--- + +# Accelerators: Internet Explorer Customization Wizard + + +The **Accelerators** page of the Internet Explorer Customization Wizard 11 lets you add Accelerators to your employee computers. Accelerators are contextual menu options that can quickly get to a web service from any webpage. For example, an Accelerator can look up a highlighted word in the dictionary or a selected location on a map. + +**Note**   +The customizations you make on this page apply only to Internet Explorer for the desktop. + +  + +![](../common/wedge.gif)**To use the Accelerators page** + +1. Click **Import** to automatically import your existing Accelerators from your current version of IE into this list. + +2. Click **Add** to add more Accelerators. + + The **Add Accelerator** box appears. + +3. Use the **Browse** button to go to your custom Accelerator XML file. + +4. Check the **Set this Accelerator as the default for the category** box if you want this Accelerator to be the default value that shows up for the category. + +5. Click **Edit** to change your Accelerator information, click **Set Default** to make an Accelerator the default value for a category, or **Remove** to delete an Accelerator. + +6. Click **Next** to go to the [Favorites, Favorites Bar, and Feeds: Internet Explorer Customization Wizard](favorites_favorites_bar_and_feeds_internet_explorer_customization_wizard.htm) page or **Back** to go to the [Important URLs - Home Page and Support: Internet Explorer Customization Wizard](important_urls___home_page_and_support_internet_explorer_customization_wizard.md). + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-ieak/add-a-root-certificate-internet-explorer-customization-wizard.md b/browsers/internet-explorer-11/ie11-ieak/add-a-root-certificate-internet-explorer-customization-wizard.md new file mode 100644 index 0000000000..ada6323320 --- /dev/null +++ b/browsers/internet-explorer-11/ie11-ieak/add-a-root-certificate-internet-explorer-customization-wizard.md @@ -0,0 +1,20 @@ +--- +Description: 'Add a Root Certificate: Internet Explorer Customization Wizard' +MS-HAID: 'p\_ieak\_ie11.add\_a\_root\_certificate\_internet\_explorer\_customization\_wizard' +MSHAttr: 'PreferredLib:/library' +title: 'Add a Root Certificate: Internet Explorer Customization Wizard' +--- + +# Add a Root Certificate: Internet Explorer Customization Wizard + + +We’re sorry. While we continue to recommend that you digitally sign your package, we’ve removed all of the functionality that allowed you to add a root certificate using the Internet Explorer Customization Wizard 11. The wizard page itself will be removed in a future version of the IEAK. + +Click **Next** to go to the [Programs: Internet Explorer Customization Wizard](programs_internet_explorer_customization_wizard.htm) page or **Back** to go to the [Security and Privacy Settings: Internet Explorer Customization Wizard](security_and_privacy_settings_internet_explorer_customization_wizard.md). + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-ieak/add-and-approve-activex-controls-using-ieak-11.md b/browsers/internet-explorer-11/ie11-ieak/add-and-approve-activex-controls-using-ieak-11.md new file mode 100644 index 0000000000..07733a1ad7 --- /dev/null +++ b/browsers/internet-explorer-11/ie11-ieak/add-and-approve-activex-controls-using-ieak-11.md @@ -0,0 +1,49 @@ +--- +Description: Add and approve ActiveX controls using IEAK 11 +MS-HAID: 'p\_ieak\_ie11.add\_and\_approve\_activex\_controls\_using\_ieak\_11' +MSHAttr: 'PreferredLib:/library' +title: Add and approve ActiveX controls using IEAK 11 +--- + +# Add and approve ActiveX controls using IEAK 11 + + +There are two main approaches to how you can control the use of ActiveX controls in your company. For more information about ActiveX controls, including how to manage the controls using Group Policy, see [ActiveX installation using group policy](p_ie11deploy.activex_installation_using_group_policy) in the [Internet Explorer 11 (IE11) - Deployment Guide for IT Pros](p_ie11deploy.internet_explorer_11__ie11____deployment_guide_for_it_pros). + +**Note**   +ActiveX controls are supported in Internet Explorer for the desktop for Windows 7 and Windows 8.1. They are not supported on the immersive version of Internet Explorer for Windows 8.1. + +  + +## Scenario 1: Limited Internet-only use of ActiveX controls + + +While you might not care about your employees using ActiveX controls while on your intranet sites, you probably do want to limit ActiveX usage while your employee’s on the Internet. By specifying and pre-approving a set of generic controls for use on the Internet, you’re able to let your employees use the Internet, but you can still limit your company’s exposure to potentially hazardous, non-approved ActiveX controls. + +For example, your employees need to access an important Internet site, such as for a business partner or service provider, but there are ActiveX controls on their page. To make sure the site is accessible and functions the way it should, you can visit the site to review the controls, adding them as new entries to your <*systemdrive*>\\Windows\\Downloaded Program Files folder. Then, as part of your browser package, you can enable and approve these ActiveX controls to run on this specific site; while all additional controls are blocked. + +![](../common/wedge.gif)**To add and approve ActiveX controls** + +1. In IE, click **Tools**, and then **Internet Options**. + +2. On the **Security** tab, click the zone that needs to change, and click **Custom Level**. + +3. Go to **Run ActiveX controls and plug-ins**, and then click **Administrator approved**. + +4. Repeat the last two steps until you have configured all the zones you want. + +5. When you run IE Customization Wizard 11 to create a custom package, on the [Additional Settings](0da909a6-d627-462b-a46b-9104e9e36a3c) page, click each folder to expand its contents. Then select the check boxes for the controls you want to approve. + +## Scenario 2: Restricted use of ActiveX controls + + +You can get a higher degree of management over ActiveX controls by listing each of them out and then allowing the browser to use only that set of controls. The biggest challenge to using this method is the extra effort you need to put into figuring out all of the controls, and then actually listing them out. Because of that, we only recommend this approach if your complete set of controls is relatively small. + +After you decide which controls you want to allow, you can specify them as approved by zone, using the process described in the first scenario. + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-ieak/additional-settings-internet-explorer-customization-wizard.md b/browsers/internet-explorer-11/ie11-ieak/additional-settings-internet-explorer-customization-wizard.md new file mode 100644 index 0000000000..386799d996 --- /dev/null +++ b/browsers/internet-explorer-11/ie11-ieak/additional-settings-internet-explorer-customization-wizard.md @@ -0,0 +1,32 @@ +--- +Description: 'Additional Settings: Internet Explorer Customization Wizard' +MS-HAID: 'p\_ieak\_ie11.additional\_settings\_internet\_explorer\_customization\_wizard' +MSHAttr: 'PreferredLib:/library' +title: 'Additional Settings: Internet Explorer Customization Wizard' +--- + +# Additional Settings: Internet Explorer Customization Wizard + + +The **Additional Settings** page of the Internet Explorer Customization Wizard 11 lets you pick additional custom, corporate, and Internet settings that relate to your employee’s desktop, operating system, and security. If you don’t change a setting, it’ll be ignored. + +The additional settings appear in administration (.adm) files that are stored in your <*systemdrive*>:\\Program Files\\Windows IEAK 11\\policies folder. You can also create your own .adm files with options that can be configured using the wizard. Any edits you make to your own .adm file are stored as .ins files, which are used to build the .inf files for your custom install package. + +You can store your user settings in a central location so your employees that log on from computer to computer can use them. For example if you have an employee that requires low security using a computer that’s typically operated by someone that needs more restrictive permissions. + +You’ll only see this page if you are running the **Internal** version of the IE Customization Wizard 11. + +![](../common/wedge.gif)**To use the Additional Settings page** + +1. Double-click **Custom Settings**, **Corporate Settings**, or **Internet Settings**, and review the included policy or restriction settings. + +2. Pick the setting you want to change, and then update its details. + +3. Click **Next** to go to the [Wizard Complete-Next Steps: Internet Explorer Customization Wizard](wizard_complete_next_steps_internet_explorer_customization_wizard.htm) page or **Back** to go to the [Programs: Internet Explorer Customization Wizard](programs_internet_explorer_customization_wizard.md) page. + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-ieak/automatic-configuration-internet-explorer-customization-wizard.md b/browsers/internet-explorer-11/ie11-ieak/automatic-configuration-internet-explorer-customization-wizard.md new file mode 100644 index 0000000000..8f97242154 --- /dev/null +++ b/browsers/internet-explorer-11/ie11-ieak/automatic-configuration-internet-explorer-customization-wizard.md @@ -0,0 +1,51 @@ +--- +Description: 'Automatic Configuration: Internet Explorer Customization Wizard' +MS-HAID: 'p\_ieak\_ie11.automatic\_configuration\_internet\_explorer\_customization\_wizard' +MSHAttr: 'PreferredLib:/library' +title: 'Automatic Configuration: Internet Explorer Customization Wizard' +--- + +# Automatic Configuration: Internet Explorer Customization Wizard + + +The **Automatic Configuration** page of the Internet Explorer Customization Wizard 11 lets you provide URLs to the files that’ll automatically configure Internet Explorer 11 for a group of employees or computers. + +This page only appears if you’re using the **Internal** version of the wizard. + +You can set your proxy settings using Internet setting (.ins) files. You can also configure and maintain your advanced proxy settings using JScript (.js), JavaScript (.jvs), or proxy auto-configuration (.pac) script files. When you provide an auto-proxy script, IE dynamically determines whether to connect directly to a host or to use a proxy server. + +You can use the Domain Name System (DNS) and the Dynamic Host Configuration Protocol (DHCP) naming systems to detect and change a browser’s settings automatically when the employee first starts IE on the network. For more information, see the product documentation for your DNS and DHCP software packages. Also see [Set up automatic detection for DHCP or DNS servers using IEAK 11](set_up_automatic_detection_for_dhcp_or_dns_servers_using_ieak_11.md). + +![](../common/wedge.gif)**To check the existing settings on your employee’s computers** + +1. Open IE, click **Tools**, click **Internet Options**, and then click the **Connections** tab. + +2. Click **LAN Settings** and make sure that the **Use automatic configuration script** box is selected, confirming the path and name of the file in the **Address** box. + +![](../common/wedge.gif)**To use the Automatic Configuration page** + +1. Check the **Automatically detect configuration settings** box to automatically detect browser settings. + +2. Check the **Enable Automatic Configuration** box if you plan to automatically change your IE settings after deployment, using configuration files. You can then: + + - Type the length of time (in minutes) for how often settings are to be applied in your company. Putting zero (**0**), or nothing, in this box will cause automatic configuration to only happen when the computer’s restarted. + + - Type the location to your .ins file. You can edit this file directly to make any necessary changes. + + The updates will take effect the next time your employee starts IE, or during your next scheduled update. + + - Type the location to your automatic proxy script file. + + **Note**   + If you specify URLs for both auto-config and auto-proxy, the auto-proxy URL will be incorporated into the .ins file. The correct form for the URL is *http://share/test.ins*. + +   + +3. Click **Next** to go to the [Proxy Settings: Internet Explorer Customization Wizard](proxy_settings_internet_explorer_customization_wizard.htm) page or **Back** to go to the [Connection Settings: Internet Explorer Customization Wizard](connection_settings_internet_explorer_customization_wizard.md) page. + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-ieak/automatic-version-synchronization-internet-explorer-customization-wizard.md b/browsers/internet-explorer-11/ie11-ieak/automatic-version-synchronization-internet-explorer-customization-wizard.md new file mode 100644 index 0000000000..fea8344649 --- /dev/null +++ b/browsers/internet-explorer-11/ie11-ieak/automatic-version-synchronization-internet-explorer-customization-wizard.md @@ -0,0 +1,41 @@ +--- +Description: 'Automatic Version Synchronization: Internet Explorer Customization Wizard' +MS-HAID: 'p\_ieak\_ie11.automatic\_version\_synchronization\_internet\_explorer\_customization\_wizard' +MSHAttr: 'PreferredLib:/library' +title: 'Automatic Version Synchronization: Internet Explorer Customization Wizard' +--- + +# Automatic Version Synchronization: Internet Explorer Customization Wizard + + +The **Automatic Version Synchronization** page of the Internet Explorer Customization Wizard 11 runs the synchronization process every time you run the wizard, downloading the Internet Explorer 11 Setup file to your computer. The Setup file includes the required full and express packages. + +**Important**   +You must run the **Automatic Version Synchronization** page once for each operating system and language combination of IE. + +  + +The **Automatic Version Synchronization** page tells you: + +- **Version available on your machine**. The version of IE11 that’s running on the computer that’s also running the IE Customization Wizard 11. + +- **Latest version available on web**. The most recently released version of the IE Customization Wizard 11. To get this value, the wizard compares the version of IE on your computer to the latest version of IE on the **Downloads** site. If the versions are different, you’ll be asked to update your version of IE. + +- **Disk space required**. The amount of space on your hard drive needed to update the browser. + +- **Disk space available**. The amount of hard drive space available on the computer that’s running the IE Customization Wizard 11. + +![](../common/wedge.gif)**To use the Automatic Version Synchronization page** + +1. Click **Synchronize**. + + You might receive a security warning before downloading your Setup file, asking if you want to continue. Click **Run** to continue. + +2. Click **Next** to go to the [Custom Components: Internet Explorer Customization Wizard](custom_components_internet_explorer_customization_wizard.htm) page or **Back** to go to the [Feature Selection: Internet Explorer Customization Wizard](feature_selection_internet_explorer_customization_wizard.md). + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-ieak/branding-ins-file-setting.md b/browsers/internet-explorer-11/ie11-ieak/branding-ins-file-setting.md new file mode 100644 index 0000000000..60020d3112 --- /dev/null +++ b/browsers/internet-explorer-11/ie11-ieak/branding-ins-file-setting.md @@ -0,0 +1,225 @@ +--- +Description: '\[Branding\]: .INS file setting' +MS-HAID: 'p\_ieak\_ie11.branding\_ins\_file\_setting' +MSHAttr: 'PreferredLib:/library' +title: '\[Branding\]: .INS file setting' +--- + +# \[Branding\]: .INS file setting + + +Information about the custom branding and setup information in your browser package. + + +++++ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
NameValueDescription

Add on URL

http://server/addons/addon.htm

The add-on URL for the product updates command in the browser.

BrowserDefault

0 | 1 | 2

Determines the default browser behavior.

+
    +

  • 0 – Locks down Internet Explorer as the default browser.

    • +

  • 1 – Preserves the existing default browser.

    • +

  • 2 – Lets the employee decide the default browser.

    • +

CMBitmapName

file_name

The file name for the Connection Manager custom bitmap.

CMBitmapPath

path

The full path to the Connection Manager custom bitmap file.

CMProfileName

file_name

The name of the Connection Manager profile.

CMProfilePath

path

The full path to the Connection Manager profile.

CMUseCustom

0 | 1

Determines whether to use a custom Connection Manager profile.

+
    +

  • 0 – Don’t use a custom Connection Manager profile.

    • +

  • 1 – Use a custom Connection Manager profile.

    • +

CompanyName

name

The name of the company with a valid IEAK 11 license, building this .ins file.

EncodeFavs

0 | 1

Determines whether to encode the [Favorites] section for versions of IE earlier than 5.0.

+
    +

  • 0 – Don’t encode the section.

    • +

  • 1 – Encode the section.

    • +

FavoritesDelete

hexadecimal

Lets you remove all existing Favorites and Quick Links.

+
    +

  • 0x89 – Removes all existing Favorites and Quick Links.

    • +

FavoritesOnTop

0 | 1

Determines whether to put new favorite items at the top of the menu.

+
    +

  • 0 – Don’t put the new item at the top of the Favorites menu.

    • +

  • 1 – Put the new item at the top of the Favorites menu.

    • +

IE4 Welcome Msg

0 | 1

Determines whether a Welcome page appears.

+
    +

  • 0 – Don’t go to a Welcome page the first time the browser is opened.

    • +

  • 1 – Go to a Welcome page the first time the browser is opened.

    • +

Language ID

number

Code value for the language used.

Language Locale

locale

The locale of the version of IE being customized, as denoted by a four-letter string — for example, EN-us for English.

NoIELite

0 | 1

Determines whether to optimize the Active Setup Wizard for download.

+
    +

  • 0 – Don’t optimize the Active Setup Wizard.

    • +

  • 1 – Optimize the Active Setup Wizard for download, using existing files, as possible.

    • +

SilentInstall

0 | 1

Determines whether Windows Update Setup runs interactively on the employee’s computer.

+
    +

  • 0 – Run Windows Update Setup interactively.

    • +

  • 1 – Run Windows Update Setup non-interactively, but show progress and error messages to the employee.

    +
    +Note   +

    This only appears for the Internal version of the IEAK 11.

    +
    +
    +  +
    • +

StealthInstall

0 | 1

Determines whether Windows Update Setup shows error messages and dialog boxes.

+
    +

  • 0 – Run Windows Update Setup showing progress and error messages to the employee.

    • +

  • 1 – Run Windows Update Setup without showing error messages to the employee.

    +
    +Note   +

    This only appears for the Internal version of the IEAK 11.

    +
    +
    +  +
    • +

Toolbar Bitmap

path_and_file_name

Full path to the icon bitmap that appears on the browser toolbar.

Type

1 | 2

The version of IEAK 11 being used.

+
    +

  • 1 – Internal version. For use on a corporate intranet or network.

    • +

  • 2 – External version. For use by ISPs, ICPs, or Developers.

    • +

User Agent

string

String to be appended to the default User Agent string.

Version

string

Version number of the browser. For example, 6,0,0,1.

WebIntegrated

0 | 1

Determines whether the IE 4.x integrated shell is included in this package.

+
    +

  • 0 – Don’t include the 4.x integrated shell in your custom package.

    • +

  • 1 – Include the 4.x integrated shell in your custom package.

    • +

Win32DownloadSite

url

URL from where your employees will download the IEsetup.exe file.

Window_Title

string

Customized window title for IE.

Window_Title_CN

string

Company name to be appended to the window title.

WizardVersion

string

Version of the IEAK that created the .ins file. For example, 6.00.0707.2800.

+ +  + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-ieak/browser-user-interface-internet-explorer-customization-wizard.md b/browsers/internet-explorer-11/ie11-ieak/browser-user-interface-internet-explorer-customization-wizard.md new file mode 100644 index 0000000000..b2a55f6418 --- /dev/null +++ b/browsers/internet-explorer-11/ie11-ieak/browser-user-interface-internet-explorer-customization-wizard.md @@ -0,0 +1,56 @@ +--- +Description: 'Browser User Interface: Internet Explorer Customization Wizard' +MS-HAID: 'p\_ieak\_ie11.browser\_user\_interface\_internet\_explorer\_customization\_wizard' +MSHAttr: 'PreferredLib:/library' +title: 'Browser User Interface: Internet Explorer Customization Wizard' +--- + +# Browser User Interface: Internet Explorer Customization Wizard + + +The **Browser User Interface** page of the Internet Explorer Customization Wizard 11 lets you change the toolbar buttons and the title bar text in IE. + +**Note**   +The customizations you make on this page apply only to Internet Explorer for the desktop. + +  + +![](../common/wedge.gif)**To use the Browser User Interface page** + +1. Check the **Customize Title Bars** box so you can add your custom text to the **Title Bar Text** box. + + The text shows up in the title bar as **IE provided by <** *your custom text***>**. + +2. Check the **Delete existing toolbar buttons, if present** box so you can delete all of the toolbar buttons in your employee’s browser, except for the standard buttons installed with IE (which can’t be removed). + + **Note**   + Only Administrators can use this option. + +   + +3. Click **Add** to add new toolbar buttons. + + The **Browser Toolbar Button Information** box appears. + +4. In the **Toolbar caption** box, type the text that shows up when an employee hovers over your custom button. We recommend no more than 10 characters. + +5. In the **Toolbar action** box, browse to your script or executable file that runs when an employee clicks your custom button. + +6. In the **Toolbar icon** box, browse to the icon file that represents your button while active. This icon must be 20x20 pixels. + +7. Check the **This button should be shown on the toolbar by default** box so your custom button shows by default. + + This box should be cleared if you want to offer a custom set of buttons, but want your employees to choose whether or not to use them. In this situation, your buttons will show up in the **Customize Toolbars** dialog box, under **Available toolbar buttons**. Your employees can get to this dialog box in IE by clicking **Tools** from the **Command Bar**, clicking **Toolbars**, and then clicking **Customize**. + +8. Click **OK.** + +9. Click **Edit** to change your custom toolbar button or **Remove** to delete the button. The removed button will disappear from your employee’s computer after you apply the updated customization. Only custom toolbar buttons can be removed. + +10. Click **Next** to go to the [Search Providers: Internet Explorer Customization Wizard](search_providers_internet_explorer_customization_wizard.htm) page or **Back** to go to the [User Experience: Internet Explorer Customization Wizard](user_experience_internet_explorer_customization_wizard.md). + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-ieak/browsertoolbars-ins-file-setting.md b/browsers/internet-explorer-11/ie11-ieak/browsertoolbars-ins-file-setting.md new file mode 100644 index 0000000000..9e26a7e5e2 --- /dev/null +++ b/browsers/internet-explorer-11/ie11-ieak/browsertoolbars-ins-file-setting.md @@ -0,0 +1,80 @@ +--- +Description: '\[BrowserToolbars\]: .INS file setting' +MS-HAID: 'p\_ieak\_ie11.browsertoolbars\_ins\_file\_setting' +MSHAttr: 'PreferredLib:/library' +title: '\[BrowserToolbars\]: .INS file setting' +--- + +# \[BrowserToolbars\]: .INS file setting + + +Customize the appearance of the Internet Explorer toolbar. + + +++++ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
NameValueDescription

Action0

path_and_file_name

Path and file name for the executable (.exe) file associated with your custom toolbar button.

Caption0

caption

Text caption for your custom toolbar button.

DeleteButtons

0 | 1

Determines whether to delete existing custom toolbar buttons during installation.

+
    +

  • 0 – Don’t delete the existing custom toolbar buttons.

    • +

  • 1 – Delete the existing custom toolbar buttons.

    • +

HotIcon0

path_and_file_name

An icon (.ico) file that appears highlighted on the button when the pointer is moved over it.

Icon0

path_and_file_name

An icon (.ico) file that appears dimmed on the button when the pointer isn’t moved over it.

Show0

0 | 1

Determines whether to show the new button on the toolbar by default.

+
    +

  • 0 – Don’t show the button by default.

    • +

  • 1 – Show the button by default.

    • +

ToolTipText0

text

Tooltip text for the custom toolbar button.

+ +  + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-ieak/browsing-options-internet-explorer-customization-wizard.md b/browsers/internet-explorer-11/ie11-ieak/browsing-options-internet-explorer-customization-wizard.md new file mode 100644 index 0000000000..68b056fa6c --- /dev/null +++ b/browsers/internet-explorer-11/ie11-ieak/browsing-options-internet-explorer-customization-wizard.md @@ -0,0 +1,42 @@ +--- +Description: 'Browsing Options: Internet Explorer Customization Wizard' +MS-HAID: 'p\_ieak\_ie11.browsing\_options\_internet\_explorer\_customization\_wizard' +MSHAttr: 'PreferredLib:/library' +title: 'Browsing Options: Internet Explorer Customization Wizard' +--- + +# Browsing Options: Internet Explorer Customization Wizard + + +The **Browsing Options** page of the Internet Explorer Customization Wizard 11 lets you decide how you want to manage the items in the **Favorites, Favorites Bar, and Feeds** section, including the Microsoft-provided default items. + +The choices that you make on this page affect only the items shown on the **Favorites, Favorites Bar, and Feeds** page. + +![](../common/wedge.gif)**To use the Browsing Options page** + +1. Pick how you want to manage links that are already installed on your employee’s computer: + + - **Delete all existing items under Favorites, Favorites Bar and Feeds.** Removes all of the links, Web Slices, feeds, and Accelerators on the computer. This includes links and favorites added by you or the employee. Because this removes everything, we recommend that you use this option with caution. + + - **Only delete the items created by the administrator.** Removes only the items that you added for your employees on the **Favorites, Favorites Bar and Feeds** page. + + - **Don’t delete any items.** Doesn’t remove anything. Links Web Slices, feeds, and Accelerators are added to your employee computers at the top of the list, in the order you picked on the **Favorites, Favorites Bar and Feeds** page. + +2. Pick if you don’t want to add the Microsoft-default items: + + - **Favorites.** Checking this box won’t add the Microsoft-defined links. + + - **Web Slices and Links.** Checking this box won’t add the Microsoft-defined Web Slices or links. + + - **Feeds.** Checking this box won’t add the Microsoft-defined RSS feeds. + + - **Accelerators.** Checking this box won’t add the Microsoft-defined Accelerators. + +3. Click **Next** to go to the [First Run Wizard and Welcome Page Options: Internet Explorer Customization Wizard](first_run_wizard_and_welcome_page_options_internet_explorer_customization_wizard.htm) page or **Back** to go to the [Favorites, Favorites Bar, and Feeds: Internet Explorer Customization Wizard](favorites_favorites_bar_and_feeds_internet_explorer_customization_wizard.md) page. + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-ieak/cabsigning-ins-file-setting.md b/browsers/internet-explorer-11/ie11-ieak/cabsigning-ins-file-setting.md new file mode 100644 index 0000000000..949aab213e --- /dev/null +++ b/browsers/internet-explorer-11/ie11-ieak/cabsigning-ins-file-setting.md @@ -0,0 +1,57 @@ +--- +Description: '\[CabSigning\]: .INS file setting' +MS-HAID: 'p\_ieak\_ie11.cabsigning\_ins\_file\_setting' +MSHAttr: 'PreferredLib:/library' +title: '\[CabSigning\]: .INS file setting' +--- + +# \[CabSigning\]: .INS file setting + + +Digital signature information for your programs. + + +++++ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
NameValueDescription

InfoURL

URL

URL that appears on the Certificate dialog box.

Name

string

Company name associated with the certificate.

pvkFile

file path

Path to the privacy key file.

spcFile

file path

Path to the certificate file.

+ +  + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-ieak/compatibility-view-internet-explorer-customization-wizard.md b/browsers/internet-explorer-11/ie11-ieak/compatibility-view-internet-explorer-customization-wizard.md new file mode 100644 index 0000000000..3f83006be5 --- /dev/null +++ b/browsers/internet-explorer-11/ie11-ieak/compatibility-view-internet-explorer-customization-wizard.md @@ -0,0 +1,20 @@ +--- +Description: 'Compatibility View: Internet Explorer Customization Wizard' +MS-HAID: 'p\_ieak\_ie11.compatibility\_view\_internet\_explorer\_customization\_wizard' +MSHAttr: 'PreferredLib:/library' +title: 'Compatibility View: Internet Explorer Customization Wizard' +--- + +# Compatibility View: Internet Explorer Customization Wizard + + +We’re sorry. We’ve changed the way Compatibility View works in Internet Explorer 11. We’ve removed all of the functionality included on the **Compatibility View** page of the Internet Explorer Customization Wizard 11, making this page useless. For more information about the changes we’ve made to the Compatibility View functionality, see [Missing the Compatibility View Button](p_ie11deploy.missing_the_compatibility_view_button). + +Click **Next** to go to the [Connection Manager: Internet Explorer Customization Wizard](connection_manager_internet_explorer_customization_wizard.htm) page or **Back** to go to the [First Run Wizard and Welcome Page Options: Internet Explorer Customization Wizard](first_run_wizard_and_welcome_page_options_internet_explorer_customization_wizard.md). + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-ieak/connection-manager-internet-explorer-customization-wizard.md b/browsers/internet-explorer-11/ie11-ieak/connection-manager-internet-explorer-customization-wizard.md new file mode 100644 index 0000000000..d6dd09df8b --- /dev/null +++ b/browsers/internet-explorer-11/ie11-ieak/connection-manager-internet-explorer-customization-wizard.md @@ -0,0 +1,20 @@ +--- +Description: 'Connection Manager: Internet Explorer Customization Wizard' +MS-HAID: 'p\_ieak\_ie11.connection\_manager\_internet\_explorer\_customization\_wizard' +MSHAttr: 'PreferredLib:/library' +title: 'Connection Manager: Internet Explorer Customization Wizard' +--- + +# Connection Manager: Internet Explorer Customization Wizard + + +We're sorry. We've removed all of the functionality included on the Connection Manager page of the Internet Explorer Customization Wizard 11, making this page useless. + +Click **Next** to go to the [Connection Settings: Internet Explorer Customization Wizard](connection_settings_internet_explorer_customization_wizard.htm) page or **Back** to go to the [Compatibility View: Internet Explorer Customization Wizard](compatibility_view_internet_explorer_customization_wizard.md). + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-ieak/connection-settings-internet-explorer-customization-wizard.md b/browsers/internet-explorer-11/ie11-ieak/connection-settings-internet-explorer-customization-wizard.md new file mode 100644 index 0000000000..a88447aa58 --- /dev/null +++ b/browsers/internet-explorer-11/ie11-ieak/connection-settings-internet-explorer-customization-wizard.md @@ -0,0 +1,46 @@ +--- +Description: 'Connection Settings: Internet Explorer Customization Wizard' +MS-HAID: 'p\_ieak\_ie11.connection\_settings\_internet\_explorer\_customization\_wizard' +MSHAttr: 'PreferredLib:/library' +title: 'Connection Settings: Internet Explorer Customization Wizard' +--- + +# Connection Settings: Internet Explorer Customization Wizard + + +The **Connection Settings** page of the Internet Explorer Customization Wizard 11 lets you import the connection settings from your computer, to preset the connection settings on your employee’s computers. + +**Note**   +Using the options on the **Additional Settings** page of the wizard, you can let your employees change their connection settings. For more information see [Additional Settings: Internet Explorer Customization Wizard](additional_settings_internet_explorer_customization_wizard.htm). You can also customize additional connection settings using the **Automatic Configuration** page in the wizard. For more information see [Automatic Configuration: Internet Explorer Customization Wizard](automatic_configuration_internet_explorer_customization_wizard.md). + +  + +![](../common/wedge.gif)**To view your current connection settings** + +1. Open IE, click the **Tools** menu, click **Internet Options**, and then click the **Connections** tab. + +2. Click **Settings** to view your dial-up settings and click **LAN Settings** to view your network settings. + +![](../common/wedge.gif)**To use the Connection Settings page** + +1. Decide if you want to customize your connection settings. You can pick: + + - **Do not customize Connection Settings.** Pick this option if you don’t want to preset your employee’s connection settings. + + - **Import the current Connection Settings from this machine.** Pick this option to import your connection settings from your computer and use them as the preset for your employee’s connection settings. + + **Note**   + If you want to change any of your settings, you can click **Modify Settings** to open the **Internet Properties** box, click the **Connection Settings** tab, and make your changes. + +   + +2. Check the **Delete existing Dial-up Connection Settings** box to clear any existing settings on your employee’s computers. + +3. Click **Next** to go to the [Automatic Configuration: Internet Explorer Customization Wizard](automatic_configuration_internet_explorer_customization_wizard.htm) page or **Back** to go to the [Connection Manager: Internet Explorer Customization Wizard](connection_manager_internet_explorer_customization_wizard.md) page. + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-ieak/connectionsettings-ins-file-setting.md b/browsers/internet-explorer-11/ie11-ieak/connectionsettings-ins-file-setting.md new file mode 100644 index 0000000000..2b239bec48 --- /dev/null +++ b/browsers/internet-explorer-11/ie11-ieak/connectionsettings-ins-file-setting.md @@ -0,0 +1,72 @@ +--- +Description: '\[ConnectionSettings\]: .INS file setting' +MS-HAID: 'p\_ieak\_ie11.connectionsettings\_ins\_file\_setting' +MSHAttr: 'PreferredLib:/library' +title: '\[ConnectionSettings\]: .INS file setting' +--- + +# \[ConnectionSettings\]: .INS file setting + + +Information about the network connection settings used to install your custom package. This section creates a common configuration on all of your employee’s computers. + + +++++ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
NameValueDescription

ConnectName0

string

Name for the connection.

ConnectName1

string

Secondary name for the connection.

DeleteConnectionSettings

0 | 1

Determines whether to remove the existing connection settings during installation of your custom package.

+
    +

  • 0 – Don’t remove the connection settings during installation.

    • +

  • 1 – Remove the connection settings during installation.

    +
    +Note   +

    This only appears for the Internal version of the IEAK 11.

    +
    +
    +  +
    • +

Option

0 | 1

Determines whether an employee can import connection settings into the Internet Explorer Customization Wizard 8.

+
    +

  • 0 – Don’t let employees import connection settings.

    • +

  • 1 – Let employees import connection settings.

    • +
+ +  + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-ieak/creating-uninstallation--inf--files-for-custom-components.md b/browsers/internet-explorer-11/ie11-ieak/creating-uninstallation--inf--files-for-custom-components.md new file mode 100644 index 0000000000..c468d8d4f7 --- /dev/null +++ b/browsers/internet-explorer-11/ie11-ieak/creating-uninstallation--inf--files-for-custom-components.md @@ -0,0 +1,34 @@ +--- +Description: 'Creating uninstallation (.INF) files for custom components' +MS-HAID: 'p\_ieak\_ie11.creating\_uninstallation\_\_inf\_\_files\_for\_custom\_components' +MSHAttr: 'PreferredLib:/library' +title: 'Creating uninstallation (.INF) files for custom components' +--- + +# files for custom components + + +Internet Explorer Administration Kit 11 (IEAK 11) uses Setup information (.inf) files to provide installation instructions for your custom browser packages. You can also use this file to uninstall your custom components by removing the files, registry entries, and shortcuts, and adding your custom component to the list of programs that can be uninstalled from **Uninstall or change a program**. + +![](../common/wedge.gif)**To uninstall your custom components** + +1. Open the Registry Editor and add a new key and value to: + + HKEY\_LOCAL\_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\*app-name,”DisplayName”,,”description”* + + Where *description* is the string that’s shown in the **Uninstall or change a program** box. + +2. Add another new key and value to: + + HKEY\_LOCAL\_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\*app-name,” UninstallString”,,” command-line”* + + Where *command-line* is the command that’s run when the component is picked from the **Uninstall or change a program** box. + +Your uninstall script must also remove your key from under the **Uninstall** registry key, so that your component no longer appears in the **Uninstall or change a program** after uninstallation. You can also run just a section of an .inf file by using the Setupx.dll InstallHinfSection entry point. To make this work, your installation script must copy the .inf file to the Windows\\Inf folder for your custom component. + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-ieak/custom-components-internet-explorer-customization-wizard.md b/browsers/internet-explorer-11/ie11-ieak/custom-components-internet-explorer-customization-wizard.md new file mode 100644 index 0000000000..dda98cc8bd --- /dev/null +++ b/browsers/internet-explorer-11/ie11-ieak/custom-components-internet-explorer-customization-wizard.md @@ -0,0 +1,60 @@ +--- +Description: 'Custom Components: Internet Explorer Customization Wizard' +MS-HAID: 'p\_ieak\_ie11.custom\_components\_internet\_explorer\_customization\_wizard' +MSHAttr: 'PreferredLib:/library' +title: 'Custom Components: Internet Explorer Customization Wizard' +--- + +# Custom Components: Internet Explorer Customization Wizard + + +The **Custom Components** page of the Internet Explorer Customization Wizard 11 lets you add up to 10 additional components that your employees can install at the same time they install IE. These components can be created by Microsoft or your organization as either compressed cabinet (.cab) or self-extracting executable (.exe) files. If you’re using Microsoft components, make sure you have the latest version and software patches from the [Microsoft Support](http://go.microsoft.com/fwlink/?LinkId=258658) site. To include Microsoft Update components, you must bundle the associated files into a custom component. + +**Important**   +You should sign any custom code that’s being downloaded over the Internet. The default settings of Internet Explorer 11 will automatically reject any unsigned code. For more information about digitally signing custom components, see [IEAK 11 and security](ieak_11_and_security.md). + +  + +![](../common/wedge.gif)**To use the Custom Component page** + +1. Click **Add**. + + The **Add a Custom Component** box appears. + +2. Type in the name of your component and then browse to the location of your file (either .cab or .exe). + +3. Pick when to install the component. This can be before IE, after IE, or after the computer restarts. + + **Important**   + You should install your component before IE if you need to run a batch file to configure your employee settings. You should install your component after IE if you plan to install software updates. + +   + +4. Check the **Only install if IE is installed successfully** box if your component should only install if IE installs successfully. For example, if you’re installing a security update that requires IE. + +5. If your component is a .cab file, you must provide the extraction command into the **Command** box. + +6. If your component has its own globally unique identifier (GUID), replace the value in the **GUID** box. Otherwise, keep the automatically generated GUID. + +7. Describe your component using up to 511 characters in the **Description** box. + +8. Type any command-line options that need to run while installing your component into the **Parameters** box. For example, if you want your component to install silently, without prompts. For more information about using options, see [IExpress command-line options](iexpress_command_line_options.md). + +9. Type the value that Microsoft Update Setup uses to check that the component installed successfully into the **Uninstall Key** box. This check is done by comparing your value to the value in the HKEY\_LOCAL\_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\ApplicationName key. + +10. Type a numeric serial number for your component into the **Version** box, using this format: *xxxx*, *xxxxxx*, *xxxx*, *xxxx*. + +11. Click **Add**. + + The boxes clear and you can add another component. Click **Cancel** to go back to the **Custom Components** page. + +12. Click **Edit** to change your custom component information, **Verify** to make sure the component is digitally signed, or **Remove** to delete the component from your custom installation package. + +13. Click **Next** to go to the [Internal Install: Internet Explorer Customization Wizard](internal_install_internet_explorer_customization_wizard.htm) page or **Back** to go to the [Automatic Version Synchronization: Internet Explorer Customization Wizard](automatic_version_synchronization_internet_explorer_customization_wizard.md). + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-ieak/custombranding-ins-file-setting.md b/browsers/internet-explorer-11/ie11-ieak/custombranding-ins-file-setting.md new file mode 100644 index 0000000000..cb94166cc0 --- /dev/null +++ b/browsers/internet-explorer-11/ie11-ieak/custombranding-ins-file-setting.md @@ -0,0 +1,42 @@ +--- +Description: '\[CustomBranding\]: .INS file setting' +MS-HAID: 'p\_ieak\_ie11.custombranding\_ins\_file\_setting' +MSHAttr: 'PreferredLib:/library' +title: '\[CustomBranding\]: .INS file setting' +--- + +# \[CustomBranding\]: .INS file setting + + +The URL location to your branding cabinet (.cab) file. + + +++++ + + + + + + + + + + + + + + +
NameValueDescription

Branding

URL

URL to the location of the branding .cab file. For example, http://www. <your_server>.net/cabs/branding.cab.

+ +  + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-ieak/customize-automatic-search-for-internet-explorer.md b/browsers/internet-explorer-11/ie11-ieak/customize-automatic-search-for-internet-explorer.md new file mode 100644 index 0000000000..cbb33217ca --- /dev/null +++ b/browsers/internet-explorer-11/ie11-ieak/customize-automatic-search-for-internet-explorer.md @@ -0,0 +1,129 @@ +--- +Description: Customize Automatic Search for Internet Explorer +MS-HAID: 'p\_ieak\_ie11.customize\_automatic\_search\_for\_internet\_explorer' +MSHAttr: 'PreferredLib:/library' +title: Customize Automatic Search for Internet Explorer +--- + +# Customize Automatic Search for Internet Explorer + + +Internet Explorer lets websites advertise any search provider that uses the open search standard described at the A9 website ( [OpenSearch 1.1 Draft 5](http://go.microsoft.com/fwlink/?LinkId=208582)). When IE detects new search providers, the **Search** box becomes active and adds the new providers to the drop-down list of providers. + +Using the **Administrative Templates** section of Group Policy, you can prevent the search box from appearing, you can add a list of acceptable search providers, and you can restrict your employee’s ability to add or remove search providers. + +## Automatic Search configuration + + +You can customize Automatic Search so that your employees can type a single word into the **Address** box to search for frequently used pages. For example, you can let a commonly used webpage about invoices appear if an employee types *invoice* into the **Address** box, even if the URL doesn’t include the term. If a website can’t be associated with the term, or if there are multiple matches, a webpage appears showing the top search results. + +![](../common/wedge.gif)**To set up Automatic Search** + +1. Create a script (.asp) file that conditionally looks for search terms, and post it to an intranet server here: http://ieautosearch/response.asp?MT=*%1*&srch=*%2*. + + **Important**   + If you aren’t using IIS in your company, you’ll need to remap this URL to your script file’s location. For information about the acceptable values for the *%1* and *%2* parameters, see [Automatic Search parameters](#BKMK_Parameters). For an example of the script file, see [Sample Automatic Search script](). + +   + +2. On the **Additional Settings** page of the IEAK 11, click **Internet Settings**, and then click **Advanced Settings**. + +3. Go to the section labeled **Searching** and type *intranet* into the **Search Provider Keyword** box. + +![](../common/wedge.gif)**To redirect to a different site than the one provided by the search results** + +- In the **Advanced Settings** section, go to the section labeled **Searching** and change the **When searching from the address bar** setting to **Just go to the most likely site**. + +![](../common/wedge.gif)**To disable Automatic Search** + +- In the **Advanced Settings** section, go to the section labeled **Searching** and change the **When searching from the address bar** setting to **Do not search from the address bar**. + +## Automatic Search parameters + + +You must replace the Automatic Search script file parameters, *%1* and *%2* so they’re part of the actual URL. + + ++++ + + + + + + + + + + + + + + + + +
ParameterValue

%1

The text string typed by the employee into the Address box.

%2

The type of search chosen by the employee, including:

+
    +

  • 3 – Display the results and go to the most likely site.

    • +

  • 2 – Go to the most likely site.

    • +

  • 1 – Display the results in the main window.

    • +

  • 0 – Do not search from the Address box.

    • +
+ +  + +## Sample Automatic Search script + + +This is a VBScript-based sample of an .asp Automatic Search script. + +``` syntax +<%@ Language=VBScript %> +<% +' search holds the words typed in the Address bar +' by the user, without the "go" or +' "find" or any delimiters like +' "+" for spaces. +' If the user typed +' "Apple pie," search = "Apple pie." +' If the user typed +' "find Apple pie," search = "Apple pie." + +search = Request.QueryString("MT") +search = UCase(search) +searchOption = Request.QueryString("srch") + +' This is a simple if/then/else +' to redirect the browser to the site +' of your choice based on what the +' user typed. +' Example: expense report is an intranet page +' about filling out an expense report + +if (search = "NEW HIRE") then +Response.Redirect("http://admin/hr/newhireforms.htm") +elseif (search = "LIBRARY CATALOG") then +Response.Redirect("http://library/catalog") +elseif (search = "EXPENSE REPORT") then +Response.Redirect("http://expense") +elseif (search = "LUNCH MENU") then +Response.Redirect("http://cafe/menu/") +else + +' If there is not a match, use the +' default IE autosearch server +Response.Redirect("http://auto.search.msn.com/response.asp?MT=" ++ search + "&srch=" + searchOption + +"&prov=&utf8") +end if +%> +``` + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-ieak/extreginf-ins-file-setting.md b/browsers/internet-explorer-11/ie11-ieak/extreginf-ins-file-setting.md new file mode 100644 index 0000000000..9ebd6da298 --- /dev/null +++ b/browsers/internet-explorer-11/ie11-ieak/extreginf-ins-file-setting.md @@ -0,0 +1,67 @@ +--- +Description: '\[ExtRegInf\]: .INS file setting' +MS-HAID: 'p\_ieak\_ie11.extreginf\_ins\_file\_setting' +MSHAttr: 'PreferredLib:/library' +title: '\[ExtRegInf\]: .INS file setting' +--- + +# \[ExtRegInf\]: .INS file setting + + +Names of your Setup information (.inf) files and the installation mode for components. + + +++++ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
NameValueDescription

Chat

string

Name of the .inf file and the install mode for components. For example, *,chat.inf,DefaultInstall.

Conf

string

Name of the .inf file and the install mode for components. For example, *,conf.inf,DefaultInstall.

Inetres

string

Name of the .inf file and the install mode for components. For example, *,inetres.inf,DefaultInstall.

Inetset

string

Name of the .inf file and the install mode for components. For example, *,inetset.inf,DefaultInstall.

Subs

string

Name of the .inf file and the install mode for components. For example, *,subs.inf,DefaultInstall.

ConnectionSettings

string

Name of the .inf file and the install mode for components. For example, *,connect.inf,DefaultInstall.

+ +  + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-ieak/favorites-favorites-bar-and-feeds-internet-explorer-customization-wizard.md b/browsers/internet-explorer-11/ie11-ieak/favorites-favorites-bar-and-feeds-internet-explorer-customization-wizard.md new file mode 100644 index 0000000000..a582176526 --- /dev/null +++ b/browsers/internet-explorer-11/ie11-ieak/favorites-favorites-bar-and-feeds-internet-explorer-customization-wizard.md @@ -0,0 +1,106 @@ +--- +Description: 'Favorites, Favorites Bar, and Feeds: Internet Explorer Customization Wizard' +MS-HAID: 'p\_ieak\_ie11.favorites\_favorites\_bar\_and\_feeds\_internet\_explorer\_customization\_wizard' +MSHAttr: 'PreferredLib:/library' +title: 'Favorites, Favorites Bar, and Feeds: Internet Explorer Customization Wizard' +--- + +# Favorites, Favorites Bar, and Feeds: Internet Explorer Customization Wizard + + +The **Favorites, Favorites Bar, and Feeds** page of the Internet Explorer Customization Wizard 11 lets you add: + +- **Links.** Used so your employees can quickly connect with your important websites. These links can appear in the **Links** folder or on the **Favorites Bar**. + +- **Web Slices.** Used so your employees can subscribe to a section of a webpage, tracking information as it changes, such as for weather reports, stock prices, or the progress of an auction item. + +- **Feeds.** Used so your employees can quickly access your recommended RSS feeds. While you can’t import a folder of RSS feeds, you can add new links. + +Although we provide default items in the **Favorites, Favorites Bar, and Feeds** area, you can remove any of the items, add more items, or add new folders and links as part of your custom package. The customizations you make on this page only apply to Internet Explorer for the desktop. + +![](../common/wedge.gif)**To work with Favorites** + +1. To import your existing folder of links, pick **Favorites**, and then click **Import**. + +2. Go to your existing link folder, most likely in the <*SystemDrive*>:\\Users\\<*user\_name*>\\Favorites folder, and then click **OK**. + + The links are imported and added to the **Favorites, Favorites Bar, and Feeds** page, beneath the **Favorites** folder. + +3. To add a new favorite link, pick **Favorites**, and then click **Add URL**. + + The **Details** box appears. + +4. Type the new link name in the **Name** box. + +5. Type the new URL in the **URL** box. + +6. Optionally, you can add a 16x16 pixel icon to your link by adding the location in the **Icon** box. + +7. Click **OK**. + +8. To add a new **Favorites** folder, pick **Favorites**, and then click **Add Folder**. + + The **Details** box appears. + +9. Type the folder name into the **Name** box, and then click **OK**. + +10. Click **Edit** to change any of your new information, **Test URL** to test each of your links to make sure they go to the right place, or **Remove** to delete a **Favorites** item. + +11. If you have multiple **Favorites** links, you can update their order in the list. Check the **Add to the top of the list** box, click the link you want to move, and then click **Move Up** or **Move Down**. + +12. Check the **Disable IE Suggested Sites** box to disable the Suggested Sites feature. By turning this on, your employees won’t receive suggested sites based on the sites that they visit. + +13. Continue with the next procedures in this topic to add additional **Favorites Bar** or **RSS Feeds** links, or you can click **Next** to go to the [Browsing Options: Internet Explorer Customization Wizard](browsing_options_internet_explorer_customization_wizard.htm) page or **Back** to go to the [Accelerators: Internet Explorer Customization Wizard](accelerators_internet_explorer_customization_wizard.md) page. + +![](../common/wedge.gif)**To work with the Favorites Bar** + +1. To import your existing folder of links, pick **Favorites Bar**, and then click **Import**. + +2. Go to your existing link folder, most likely in the <*SystemDrive*>:\\Users\\<*user\_name*>\\Favorites\\Favorites Bar folder, and then click **OK**. + + The links are imported and added to the **Favorites, Favorites Bar, and Feeds** page, beneath the **Favorites Bar** folder. + +3. To add a new link to the **Favorites Bar**, pick **Favorites Bar**, and then click **Add URL**. + + The **Details** box appears. + +4. Type the new quick link name in the **Name** box. + +5. Type the new URL in the **URL** box. + +6. Optionally, you can add a 16x16 pixel icon to your link by adding the location in the **Icon** box. + +7. Pick whether your link is a simple **Link**, a **Feed**, or a **Web Slice**, and then click **OK**. + +8. Click **Edit** to change any of your new information, **Test URL** to test each of your links to make sure they go to the right place, or **Remove** to delete a **Favorites Bar** item. + +9. If you have multiple **Favorites Bar** links, you can update their order in the list. Check the **Add to the top of the list** box, click the link you want to move, and then click **Move Up** or **Move Down**. + +10. Check the **Disable IE Suggested Sites** box to disable the Suggested Sites feature. By turning this on, your employees won’t receive suggested sites based on the sites that they visit. + +11. Continue with the next procedures in this topic to add additional **Favorites** or **RSS Feeds** links, or you can click **Next** to go to the [Browsing Options: Internet Explorer Customization Wizard](browsing_options_internet_explorer_customization_wizard.htm) page or **Back** to go to the [Accelerators: Internet Explorer Customization Wizard](accelerators_internet_explorer_customization_wizard.md) page. + +![](../common/wedge.gif)**To work with RSS Feeds** + +1. To add a new link to the **RSS Feeds**, pick **Favorites Bar**, and then click **Add URL**. + + The **Details** box appears. + +2. Type the new link name in the **Name** box. + +3. Type the new URL in the **URL** box, and then click **OK**. + +4. Click **Edit** to change any of your new information, **Test URL** to test each of your links to make sure they go to the right place, or **Remove** to delete a **RSS Feeds** item. + +5. If you have multiple **RSS Feeds** links, you can update their order in the list. Check the **Add to the top of the list** box, click the link you want to move, and then click **Move Up** or **Move Down**. + +6. Check the **Disable IE Suggested Sites** box to disable the Suggested Sites feature. By turning this on, your employees won’t receive suggested sites based on the sites that they visit. + +7. Continue with the next procedures in this topic to add additional **Favorites** or **Favorites Bar** links, or you can click **Next** to go to the [Browsing Options: Internet Explorer Customization Wizard](browsing_options_internet_explorer_customization_wizard.htm) page or **Back** to go to the [Accelerators: Internet Explorer Customization Wizard](accelerators_internet_explorer_customization_wizard.md) page. + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-ieak/favoritesex-ins-file-setting.md b/browsers/internet-explorer-11/ie11-ieak/favoritesex-ins-file-setting.md new file mode 100644 index 0000000000..c5b5204279 --- /dev/null +++ b/browsers/internet-explorer-11/ie11-ieak/favoritesex-ins-file-setting.md @@ -0,0 +1,61 @@ +--- +Description: '\[FavoritesEx\]: .INS file setting' +MS-HAID: 'p\_ieak\_ie11.favoritesex\_ins\_file\_setting' +MSHAttr: 'PreferredLib:/library' +title: '\[FavoritesEx\]: .INS file setting' +--- + +# \[FavoritesEx\]: .INS file setting + + +Path to your icon file for **Favorites** and if **Favorites** are available offline. You can also use this section to add URLs to each **Favorites** site. + + +++++ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
NameValueDescription

IconFile1

path_and_file_name

An icon (.ico file) that represents the Favorites item you’re adding.

Offline1

0 | 1

Determines if the Favorites item is available for offline browsing.

+
    +

  • 0 – Makes the Favorites item unavailable for offline browsing.

    • +

  • 1 – Makes the Favorites item available for offline browsing.

    • +

Title1

string

Title for the Favorites item.

Url1

url

URL to the Favorites item.

+ +  + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-ieak/feature-selection-internet-explorer-customization-wizard.md b/browsers/internet-explorer-11/ie11-ieak/feature-selection-internet-explorer-customization-wizard.md new file mode 100644 index 0000000000..6ceddf5d4f --- /dev/null +++ b/browsers/internet-explorer-11/ie11-ieak/feature-selection-internet-explorer-customization-wizard.md @@ -0,0 +1,59 @@ +--- +Description: 'Feature Selection: Internet Explorer Customization Wizard' +MS-HAID: 'p\_ieak\_ie11.feature\_selection\_internet\_explorer\_customization\_wizard' +MSHAttr: 'PreferredLib:/library' +title: 'Feature Selection: Internet Explorer Customization Wizard' +--- + +# Feature Selection: Internet Explorer Customization Wizard + + +The **Feature Selection** page of the Internet Explorer Customization Wizard 11 lets you choose which parts of the setup processes and Internet Explorer 11 to change for your company, including: + +- **Setup Customizations.** Lets you add custom components, decide which components to install, provide your download site information, and modify the Setup title bar and graphics. + +- **Internal Install.** Lets you decide to install the latest updates, run the malicious Software Removal Tool, and set IE11 as the default browser. + +- **Connection Manager.** Lets you import your Connection Manager Profiles, created by the Connection Manager Administration Kit (CMAK). + +- **Browser User Interface.** Lets you change the toolbar buttons, the title bar, and the general look of the browser. + +- **Search Providers.** Lets you add, remove, and pick a new default search provider for IE11. + +- **Important URLs – Home Page and Support.** Lets you choose multiple **Home** pages that open in different tabs in IE. You can also use this page to change the **Welcome** and **Online Support** pages. + +- **Accelerators.** Lets you import, add, edit, or remove Accelerators, the contextual services that give you quick access to external services from any webpage. + +- **Favorites, Favorites Bar, and Feeds.** Lets you pick which favorites, web slices, and feeds are installed with your custom installation package. + +- **Browsing Options.** Lets you pick how you delete items in the Favorites, Favorites Bar, and Feeds folders, and whether to add the Microsoft default items. + +- **Compatibility View.** Lets you decide whether IE renders content using compatibility mode or standards mode. + +- **Connections Customization.** Lets you set up and deploy custom connections. + +- **Security Zones and Content Ratings.** Lets you control what your employees can view and what’s downloaded to their computer. + +- **Programs.** Lets you pick the default program that’s used automatically by email, HTML, newsgroups, Internet calls, calendars, and contact lists. + +- **Additional Settings.** Lets you pre-set and lockdown specific functionality on your employee’s computer. + +**Note**   +Your choices on this page determine what wizard pages appear. + +  + +![](../common/wedge.gif)**To use the Feature Selection page** + +1. Check the box next to each feature you want to include in your custom installation package. + + You can also click **Select All** to add, or **Clear All** to remove, all of the features. + +2. Click **Next** to go to the [Automatic Version Synchronization: Internet Explorer Customization Wizard](automatic_version_synchronization_internet_explorer_customization_wizard.htm) page or **Back** to go to the [Package Type Selection: Internet Explorer Customization Wizard](package_type_selection_internet_explorer_customization_wizard.md). + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-ieak/file-locations-internet-explorer-customization-wizard.md b/browsers/internet-explorer-11/ie11-ieak/file-locations-internet-explorer-customization-wizard.md new file mode 100644 index 0000000000..5af9f00348 --- /dev/null +++ b/browsers/internet-explorer-11/ie11-ieak/file-locations-internet-explorer-customization-wizard.md @@ -0,0 +1,59 @@ +--- +Description: 'File Locations: Internet Explorer Customization Wizard' +MS-HAID: 'p\_ieak\_ie11.file\_locations\_internet\_explorer\_customization\_wizard' +MSHAttr: 'PreferredLib:/library' +title: 'File Locations: Internet Explorer Customization Wizard' +--- + +# File Locations: Internet Explorer Customization Wizard + + +The **File Locations** page of the Internet Explorer Customization Wizard 11 lets you change the location of your folders, including: + +- Where you’ll create and store your custom installation package. + +- Where you’ll download and store Internet Explorer 11. + +**Important**   +You can create a custom installation package on your hard drive and move it to an Internet or intranet server, or you can create it directly on a server. If you create the package on a web server that’s running from your hard drive, use the path to the web server as the destination folder location. Whatever location you choose, it must be protected by appropriate access control lists (ACLs). If the location is not protected, the custom package may be tampered with. + +  + +![](../common/wedge.gif)**To use the File Locations page** + +1. Browse to the location where you’ll store your finished custom IE installation package and the related subfolders. + + **Note**   + Subfolders are created for each language version, based on operating system and media type. For example, if your destination folder is `C:\Inetpub\Wwwroot\Cie\Dist`, then the English-language version is created as `C:\Inetpub\Wwwroot\Cie\Dist\Flat\Win32\En` subfolders. + +   + +2. Click **Advanced Options**. + + The **Advanced Options** box opens and lets you change how the wizard downloads and gets files, and how it imports settings from your .ins file. + +3. Check the box letting IE Customization Wizard 11 look for the latest components, using Automatic Version Synchronization. + + This option lets the wizard connect to the IE **Downloads** page to look for updated versions of IE since you last ran the wizard. + + **Important**   + You must run Automatic Version Synchronization at least once to check for updated components. + +   + +4. Browse to your .ins file location, and then click **Open**. + + By importing settings from an .ins file, you can re-use existing configurations. This saves you time if your packages have the same or similar settings. + +5. Browse to your component download folder. + + Automatic Version Synchronization automatically checks the component download folder to see if you have the latest version of IE. To keep this folder up-to-date, you shouldn’t change its location. However, if you want to keep both a previous version of IE and the latest version, we recommend you download the components to a different location. + +6. Click **OK** to close the **Advanced Options** box, and then click **Next** to go to the [Platform Selection: Internet Explorer Customization Wizard](platform_selection_internet_explorer_customization_wizard.md) page. + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-ieak/first-run-wizard-and-welcome-page-options-internet-explorer-customization-wizard.md b/browsers/internet-explorer-11/ie11-ieak/first-run-wizard-and-welcome-page-options-internet-explorer-customization-wizard.md new file mode 100644 index 0000000000..7c0fbc9830 --- /dev/null +++ b/browsers/internet-explorer-11/ie11-ieak/first-run-wizard-and-welcome-page-options-internet-explorer-customization-wizard.md @@ -0,0 +1,36 @@ +--- +Description: 'First Run Wizard and Welcome Page Options: Internet Explorer Customization Wizard' +MS-HAID: 'p\_ieak\_ie11.first\_run\_wizard\_and\_welcome\_page\_options\_internet\_explorer\_customization\_wizard' +MSHAttr: 'PreferredLib:/library' +title: 'First Run Wizard and Welcome Page Options: Internet Explorer Customization Wizard' +--- + +# First Run Wizard and Welcome Page Options: Internet Explorer Customization Wizard + + +The **First Run Wizard and Welcome Page Options** page of the Internet Explorer Customization Wizard 11 lets you decide what your employee’s see the first time they log on to IE, based on their operating system. + +- **Windows 8.1.** No longer includes a **Welcome** page, so if you pick the **Use Internet Explorer 11 Welcome Page** or the **Use a custom Welcome page** option, IEAK creates an initial **Home** page that loads before all other **Home** pages, as the first tab. This only applies to the Internet Explorer for the desktop. + +- **Windows 7 SP1.** You can disable the first run page for Windows 7 SP1 and then pick a custom **Welcome** page to show instead. If you don’t customize the settings on this page, your employees will see the default IE **Welcome** page. + +![](../common/wedge.gif)**To use the First Run Wizard and Welcome Page Options page** + +1. Check the **Use IE11 First Run wizard (recommended)** box to use the default First Run wizard in IE. + + Clearing this box lets you use the IE11 **Welcome** page or your custom **Welcome** page. + +2. If you cleared the First Run wizard box, you can decide which **Welcome** page to use: + + - **Use IE11 Welcome Page.** Check this box if you want to use the default IE11 **Welcome** page. + + - **Use a custom Welcome Page.** Check this box if you want to use a custom **Welcome** page. If you choose this option, you need to add the URL to your custom page. + +3. Click **Next** to go to the [Compatibility View: Internet Explorer Customization Wizard](compatibility_view_internet_explorer_customization_wizard.htm) page or **Back** to go to the [Browsing Options: Internet Explorer Customization Wizard](browsing_options_internet_explorer_customization_wizard.md) page. + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-ieak/hidecustom-ins-file-setting.md b/browsers/internet-explorer-11/ie11-ieak/hidecustom-ins-file-setting.md new file mode 100644 index 0000000000..635cb516f4 --- /dev/null +++ b/browsers/internet-explorer-11/ie11-ieak/hidecustom-ins-file-setting.md @@ -0,0 +1,46 @@ +--- +Description: '\[HideCustom\]: .INS file setting' +MS-HAID: 'p\_ieak\_ie11.hidecustom\_ins\_file\_setting' +MSHAttr: 'PreferredLib:/library' +title: '\[HideCustom\]: .INS file setting' +--- + +# \[HideCustom\]: .INS file setting + + +Determines whether to hide the globally unique identifier (GUID) for each custom component. + + +++++ + + + + + + + + + + + + + + +
NameValueDescription

GUID

0 | 1

Determines whether this is a hidden component.

+
    +

  • 0 – The component isn’t hidden.

    • +

  • 1 – The component is hidden.

    • +
+ +  + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-ieak/ieak-11---internet-explorer-administration-kit-11-users-guide.md b/browsers/internet-explorer-11/ie11-ieak/ieak-11---internet-explorer-administration-kit-11-users-guide.md new file mode 100644 index 0000000000..8ea3cf6d02 --- /dev/null +++ b/browsers/internet-explorer-11/ie11-ieak/ieak-11---internet-explorer-administration-kit-11-users-guide.md @@ -0,0 +1,62 @@ +--- +Description: 'IEAK 11 - Internet Explorer Administration Kit 11 Users Guide' +MS-HAID: 'p\_ieak\_ie11.ieak\_11\_\_\_internet\_explorer\_administration\_kit\_11\_users\_guide' +MSHAttr: 'PreferredLib:/library' +title: 'IEAK 11 - Internet Explorer Administration Kit 11 Users Guide' +--- + +# IEAK 11 - Internet Explorer Administration Kit 11 Users Guide + + +Internet Explorer Administration Kit 11 (IEAK 11) includes: + +- **For enterprises.** Programs and tools to customize, deploy, and administer Internet Explorer 11 for your employee computers. + +- **For Internet service and content providers.** Programs and tools to customize, deploy, and administer IE11 for your customers. + +IEAK 11 works in network environments, with or without Microsoft Active Directory service. + +## Naming conventions + + +IE11 and IEAK 11 offers differing experiences in Windows 8.1: + + ++++ + + + + + + + + + + + + + + + + + + + + + + + + +
NameDescription

IE

The immersive browser, or IE, without a specific version.

Internet Explorer for the desktop

The desktop browser. This is the only experience available when running IE11 on Windows 7 SP1.

IE11

The whole browser, which includes both IE and Internet Explorer for the desktop.

IE Customization wizard 11

Step-by-step wizard screens that help you create custom IE11 installation packages.

+ +  + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-ieak/ieak-11-and-custom-browser-package-troubleshooting.md b/browsers/internet-explorer-11/ie11-ieak/ieak-11-and-custom-browser-package-troubleshooting.md new file mode 100644 index 0000000000..d35e69f188 --- /dev/null +++ b/browsers/internet-explorer-11/ie11-ieak/ieak-11-and-custom-browser-package-troubleshooting.md @@ -0,0 +1,146 @@ +--- +Description: IEAK 11 and Custom Browser Package Troubleshooting +MS-HAID: 'p\_ieak\_ie11.ieak\_11\_and\_custom\_browser\_package\_troubleshooting' +MSHAttr: 'PreferredLib:/library' +title: IEAK 11 and Custom Browser Package Troubleshooting +--- + +# IEAK 11 and Custom Browser Package Troubleshooting + + +While the Internet Explorer Customization Wizard 11 has been around for quite a while, there are still some known issues that you might encounter while deploying or managing your custom IE install package. + +## I can’t locate some of the wizard pages + + +The most common reasons you won’t see certain pages is because of: + +- **Your licensing agreement with Microsoft.** Your licensing agreement determines whether you install the **Internal** or **External** version of the IE Customization Wizard 11, and there are different features available for each version. For information about which features are available for each version, see [IEAK 11: Determine the licensing version and features to use](ieak_11_determine_the_licensing_version_and_features_to_use.md). + +- **Your choice of operating system.** Depending on the operating system you picked from the **Platform Selection** page of the wizard, you might not see all of the pages. Some features aren’t available for all operating systems. For more information, see [Platform Selection: Internet Explorer Customization Wizard](platform_selection_internet_explorer_customization_wizard.md). + +- **Your choice of features.** Depending on what you selected from the **Feature Selection** page of the wizard, you might not see all of the pages. You need to make sure that the features you want to customize are all checked. For more information, see [Feature Selection: Internet Explorer Customization Wizard](feature_selection_internet_explorer_customization_wizard.md). + +## IE Setup fails on employee computers + + +Various issues can cause problems during Setup, including missing files, trust issues, or URL monikers. You can troubleshoot these issues by reviewing the Setup log file: IE11\_main.log from the **Windows** folder (typically, C:\\Windows). The log file covers the entire Setup process from the moment IE11Setup.exe starts until the last .cab file finishes, providing error codes that you can use to help determine the cause of the failure. + +**Log File Codes** + + ++++ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
CodeDescription

0

Initializing, making a temporary folder, and checking disk space.

1

Checking for all dependencies.

2

Downloading files from the server.

3

Copying files from download location to the temporary installation folder.

4

Restarting download and retrying Setup, because of a time-out error or other download error.

5

Checking trust and checking permissions.

6

Extracting files.

7

Running Setup program (an .inf or .exe file).

8

Installation is finished.

9

Download finished, and all files are downloaded.

+ +  + +**Error Codes** + + ++++ + + + + + + + + + + + + + + + + + + + + +
CodeDescription

80100003

Files are missing from the download folder during installation.

800bxxxx

An error code starting with 800b is a trust failure.

800Cxxxx

An error code starting with 800C is a Urlmon.dll failure.

+ +  + +## IE Setup connection times out + + +IE Setup can switch servers during the installation process to maintain maximum throughput or to recover from a non-responsive download site (you receive less than 1 byte in 2 minutes). If the connection times out, but Setup is able to connect to the next download site on the list, your download starts over. If however the connection times out and Setup can’t connect to a different server, it’ll ask if you want to stop the installation or try again. + +To address connection issues (for example, as a result of server problems) where Setup can’t locate another download site by default, we recommend you overwrite your first download server using this workaround: + +``` syntax +\ie11setup.exe /C:"ie11wzd.exe /S:""\ie11setup.exe"" /L:""http://your_Web_server/your_Web_site/ie11sites.dat""" +``` + +Where *<path>* represents the folder location where you stored IE11setup.exe. + +## Employees can’t uninstall IE + + +If you can’t uninstall IE using **Uninstall or change a program** in the Control Panel, it could be because the uninstall information isn’t on the computer. To fix this issue, you should: + +1. Review the uninstall log file, IE11Uninst.log file, which is located in the C:\\Windows folder. This log file covers the entire uninstallation process, including every file change, every registry change, and any dialog boxes that are shown. + +2. Try to manually uninstall IE. Go to the backup folder, < *systemdrive*>\\Windows\\$ie11$, and run the uninstall file, `Spunist.exe`. + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-ieak/ieak-11-and-security.md b/browsers/internet-explorer-11/ie11-ieak/ieak-11-and-security.md new file mode 100644 index 0000000000..0519fcf63c --- /dev/null +++ b/browsers/internet-explorer-11/ie11-ieak/ieak-11-and-security.md @@ -0,0 +1,70 @@ +--- +Description: IEAK 11 and security +MS-HAID: 'p\_ieak\_ie11.ieak\_11\_and\_security' +MSHAttr: 'PreferredLib:/library' +title: IEAK 11 and security +--- + +# IEAK 11 and security + + +Use Internet Explorer in conjunction with your new and existing security measures, to make sure the computers in your company aren’t compromised while on the Internet. + +## Enhanced Protection Mode + + +Introduced in Internet Explorer 10, Enhanced Protected Mode applies new functionality to the existing Protected Mode processes. Including: + +- Restricting access to higher-level processes in the AppContainer. This is turned on by default for both IE and Internet Explorer for the desktop + +- Improving security against memory safety exploits in 64-bit tab processes. This is turned on by default for IE, but needs to be turned on for Internet Explorer for the desktop + +## Certificates and Digital Signatures + + +Web browsers have security features that help protect users from downloading harmful programs. Depending on the security level and the platform that you are using, the user may be prevented from, or warned against, downloading programs that are not digitally signed. Digital signatures show users where programs come from, verify that the programs have not been altered, and ensure that users do not receive unnecessary warnings when installing the custom browser. + +Because of this, the custom .cab files created by the IE Customization Wizard 10 should be signed, unless you pre-configure the Local intranet zone with a Low security setting. Any custom components you distribute with your browser package for these platforms should also be signed. + +### Understanding certificates + +To sign your package and custom programs digitally, you must first obtain a digital certificate. You can obtain a certificate from a certification authority or a privately-controlled certificate server. For more information about obtaining certificates or setting up a certificate server, see the following: + +- Microsoft-trusted certification authorities ([Windows root certificate program members](http://go.microsoft.com/fwlink/?linkid=59547)). + +- Certificates overview documentation ([Certificates](http://go.microsoft.com/fwlink/?linkid=68942)). + +- Microsoft Active Directory Certificate Services ( [Active Directory Certificate Services](http://go.microsoft.com/fwlink/?LinkId=259521)). + +- Enterprise public key infrastructure (PKI) snap-in documentation ([Enterprise PKI](http://go.microsoft.com/fwlink/?LinkId=259526)). + +When you get a certificate, you should note the public and private keys, which are a matched set of keys that are created by the software publisher for encryption and decryption. They are generated on your computer at the time the certificate is requested, and your private key is never sent to the certification authority or any other party. + +### Understanding code signing + +- **If you plan to distribute custom packages over the Internet**, you must sign all custom components and the CMAK profile package (if used). Before you start the IE Customization Wizard 11, make sure that both are signed. Typically, their respective manufacturers will have signed them. Otherwise, you can sign these using the Sign Tool (SignTool.exe) ( [SignTool.exe (Sign Tool)](http://go.microsoft.com/fwlink/?LinkId=71298)) or use the File Signing Tool (Signcode.exe) ([Signcode.exe (File Signing Tool)](http://go.microsoft.com/fwlink/?LinkId=71299)). You should read the documentation included with these tools for more information about all of the signing options. + + In addition, after you run the Internet Explorer 10 Customization Wizard, we highly recommend that you sign the IEAK package and the Branding.cab file (if you are using it separately from the package). You can do this also using the tools mentioned above. + + For more information, download Code-Signing Best Practices ([Code-Signing Best Practices](http://go.microsoft.com/fwlink/?LinkId=71300)). + +- **If you plan to distribute your custom packages over an intranet**, sign the custom files or preconfigure the Local intranet zone with a Low security setting, because the default security setting does not allow users to download unsigned programs or code. + +### Understanding your private key + +Your computer creates two keys during the enrollment process of your digital certificate. One is a public key, which is sent to anyone you want to communicate with, and one is a private key, which is stored on your local computer and must be kept secret. You use the private key to encrypt your data and the corresponding public key to decrypt it. + +You must keep your private key, private. To do this, we recommend: + +- **Separate test and release signing.** Set up a parallel code signing infrastructure, using test certificates created by an internal test root certificate authority. This helps to ensure that your certificates aren’t stored on an insecure build system, reducing the likelihood that they will be compromised. + +- **Tamperproof storage.** Save your private keys on secure, tamper-proof hardware devices. + +- **Security.** Protect your private keys using physical security measures, such as cameras and card readers. + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-ieak/ieak-11-create-the-build-computer-folder-structure.md b/browsers/internet-explorer-11/ie11-ieak/ieak-11-create-the-build-computer-folder-structure.md new file mode 100644 index 0000000000..00454b86e1 --- /dev/null +++ b/browsers/internet-explorer-11/ie11-ieak/ieak-11-create-the-build-computer-folder-structure.md @@ -0,0 +1,49 @@ +--- +Description: 'IEAK 11: Create the build computer folder structure' +MS-HAID: 'p\_ieak\_ie11.ieak\_11\_create\_the\_build\_computer\_folder\_structure' +MSHAttr: 'PreferredLib:/library' +title: 'IEAK 11: Create the build computer folder structure' +--- + +# IEAK 11: Create the build computer folder structure + + +Create your build environment on the computer that you’ll use to build your custom browser package. Your license agreement determines your folder structure and which version of Internet Explorer Administration Kit 11 (IEAK 11) you’ll use:**Internal** or **External**. + +The *root\_folder* is a placeholder that represents the name for your main folder. This folder includes the files built by IEAK 11: + + +++++ + + + + + + + + + + + + + + + + + + + +
NameVersionDescription

\root_folder

Internal and External

The parent folder used for all files built by IEAK or that you referenced in your custom package.

\root_folder\Dist

Internal only

Destination directory for your files. You’ll only need this folder if you’re creating your browser package on a network drive.

+ +  + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-ieak/ieak-11-customization-guidelines-for-your-toolbar-button-and-favorites-list-icons.md b/browsers/internet-explorer-11/ie11-ieak/ieak-11-customization-guidelines-for-your-toolbar-button-and-favorites-list-icons.md new file mode 100644 index 0000000000..2fe8e85c0d --- /dev/null +++ b/browsers/internet-explorer-11/ie11-ieak/ieak-11-customization-guidelines-for-your-toolbar-button-and-favorites-list-icons.md @@ -0,0 +1,52 @@ +--- +Description: 'IEAK 11: Customization guidelines for your Toolbar button and Favorites list icons' +MS-HAID: 'p\_ieak\_ie11.ieak\_11\_customization\_guidelines\_for\_your\_toolbar\_button\_and\_favorites\_list\_icons' +MSHAttr: 'PreferredLib:/library' +title: 'IEAK 11: Customization guidelines for your Toolbar button and Favorites list icons' +--- + +# IEAK 11: Customization guidelines for your Toolbar button and Favorites list icons + + +Customize the browser toolbar button and the **Favorites** list icons, using your own branding and graphics. + +**Important**   +Check your license agreement to make sure this customization is available. + +  + + +++++ + + + + + + + + + + + + + + + + + + + +
GraphicSize and typeNotes

Browser toolbar button

2 icon files with color images for active and inactive states

Favorites list icons

1 computer icon (.ico) file for each new URL

Your icons must use the .ico file extension, no other image file extension works.

+ +  + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-ieak/ieak-11-determine-the-licensing-version-and-features-to-use.md b/browsers/internet-explorer-11/ie11-ieak/ieak-11-determine-the-licensing-version-and-features-to-use.md new file mode 100644 index 0000000000..c2208c9fdd --- /dev/null +++ b/browsers/internet-explorer-11/ie11-ieak/ieak-11-determine-the-licensing-version-and-features-to-use.md @@ -0,0 +1,151 @@ +--- +Description: 'IEAK 11: Determine the licensing version and features to use' +MS-HAID: 'p\_ieak\_ie11.ieak\_11\_determine\_the\_licensing\_version\_and\_features\_to\_use' +MSHAttr: 'PreferredLib:/library' +title: 'IEAK 11: Determine the licensing version and features to use' +--- + +# IEAK 11: Determine the licensing version and features to use + + +You must pick a version of IEAK 11 during installation, either **External** or **Internal**, based on your license agreement. Your version selection decides the options you can pick from, the steps you’ll have to follow to deploy your Internet Explorer 11 package, and how you’ll manage the browser after deployment. + +- **External Distribution as an ISP, Content Provider, or Developer.** This version is for Internet service providers (ISP), Internet content providers (ICP), and Developers. If you’re an ISP or an ICP, your license agreement also says that you have to show the Internet Explorer logo on your packaging and promotional goods, as well as on your website. + + **Important**   + Original Equipment Manufacturers (OEMs) that install IEAK 11 as part of a Windows product, under an OEM license agreement with Microsoft, must use the Windows 8.1 OEM Preinstallation document (OPD) as the guide for allowable customizations. + +   + +- **Internal Distribution via a Corporate Intranet.** This version is for network admins that plan to directly deploy IE11 into a corporate environment. + +## Available features by version + + + ++++ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
InternalExternal

Welcome screen

Welcome screen

File locations

File locations

Platform selection

Platform selection

Language selection

Language selection

Package type selection

Package type selection

Feature selection

Feature selection

Automatic Version Synchronization (AVS)

Automatic Version Synchronization (AVS)

Custom components

Custom components

Internal install

N/A

User experience

N/A

Browser user interface

Browser user interface

Search providers

Search providers

Important URLs – Home page and support

Important URLs – Home page and support

Accelerators

Accelerators

Favorites, Favorites bar, and feeds

Favorites, Favorites bar, and feeds

Browsing options

N/A

First Run wizard and Welcome page options

First Run wizard and Welcome page options

Connection manager

Connection manager

Connection settings

Connection settings

Automatic configuration

N/A

Proxy settings

Proxy settings

Security and privacy settings

N/A

N/A

Add a root certificate

Programs

Programs

Additional settings

N/A

Wizard complete

Wizard complete

+ +  + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-ieak/ieak-11-file-types.md b/browsers/internet-explorer-11/ie11-ieak/ieak-11-file-types.md new file mode 100644 index 0000000000..abe2352af5 --- /dev/null +++ b/browsers/internet-explorer-11/ie11-ieak/ieak-11-file-types.md @@ -0,0 +1,98 @@ +--- +Description: IEAK 11 file types +MS-HAID: 'p\_ieak\_ie11.ieak\_11\_file\_types' +MSHAttr: 'PreferredLib:/library' +title: IEAK 11 file types +--- + +# IEAK 11 file types + + +File types used or generated by tools in IEAK 11: + + ++++ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
File typeDescription

.adm

An administration file used by Group Policy to define the system policies and restrictions for Windows. You can use IEAK to change and restrict these settings. View the file in your <systemdrive>:\Program Files\Windows IEAK 11\policies folder.

.bat

An ASCII text file that includes a sequence of operating system commands, including the parameters and operators supported by the batch command language. When you run the batch file from a command prompt, the computer processes each command sequentially.

.bmp, .gif, .jpeg, .jpg

Graphic files you use in your custom browser package, which can include .bmp, .gif, .jpeg, or .jpg file formats. For more information about the requirements for graphics that you customize, see [IEAK 11: Customization guidelines for your Toolbar button and Favorites list icons](ieak_11_customization_guidelines_for_your_toolbar_button_and_favorites_list_icons.md).

.cab

Cabinet files are used to organize and maintain the compressed installation files that are copied to your employee’s computer. They can also include additional self-extracting .exe files that you use to install browser and custom components. IEAK includes tools to help you build and digitally sign the .cab files you create for custom components. For more information, see [IEAK 11 and security](ieak_11_and_security.md).

.cif

The component information file (IESetup.cif), which identifies the components you’re going to install with Internet Explorer, including any new components or component updates. Each component in this file has an associated ComponentID, which is used by Windows Update Setup to determine if a component already exists with that ID, and if a newer version exists.

.cmp

Connection profile files are created by the Connection Manager Administration Kit (CMAK), and include information specified by your employees. Don’t edit these files. Any changes you make can be overwritten by the employee.

.cms

Service provider files are generated by CMAK, and specify the configuration of the phone book and most of the other functions of your service profiles.

.exe

The executable file controls the setup process, by installing the .cab files that install the custom browser package on your employee’s computers.

.inf

Setup information files that are associated with .cab files to provide additional installation and version information. The .inf file can reference files in the .cab file, as well as files at other URLs. For more information see, [Creating uninstallation (.INF) files for custom components](creating_uninstallation__inf__files_for_custom_components.md).

.ins

Internet settings files, which configure the browser and its components during setup. You can create multiple versions of your custom browser package by customizing this file. For more information, see [Using Internet Settings (.INS) Files](using_internet_settings__ins__files.md).

.pac, .js, .jvs

The Auto-proxy script file format that tells your custom version of IE whether to connect directly to a host or to use a proxy server. This file can be in the Jscript (.js), JavaScript (.jvs), or proxy auto-configuration (.pac) file format. For more information, see [Automatic Configuration: Internet Explorer Customization Wizard](automatic_configuration_internet_explorer_customization_wizard.md).

.pvk

A private key file that includes the private key associated with a digital signature. For more information, see [IEAK 11 and security](ieak_11_and_security.md).

.sed

Connection profile files, created by CMAK, which include the instructions for building the self-extracting executable (.exe) file for your service profiles. You must not edit your .sed files.

.spc

The software publishing certificate file, which includes:

+
    +

  • The name and other identifying information of the owner of the certificate.

    • +

  • The public key associated with the certificate.

    • +

  • The serial number.

    • +

  • The length of time the certificate is valid.

    • +

  • The digital signature of the certification authority that issued the certificate.

    • +
+ +  + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-ieak/ieak-11-hardware-and-software-requirements.md b/browsers/internet-explorer-11/ie11-ieak/ieak-11-hardware-and-software-requirements.md new file mode 100644 index 0000000000..7d3b7ea7d2 --- /dev/null +++ b/browsers/internet-explorer-11/ie11-ieak/ieak-11-hardware-and-software-requirements.md @@ -0,0 +1,48 @@ +--- +Description: 'IEAK 11: Hardware and software requirements' +MS-HAID: 'p\_ieak\_ie11.ieak\_11\_hardware\_and\_software\_requirements' +MSHAttr: 'PreferredLib:/library' +title: 'IEAK 11: Hardware and software requirements' +--- + +# IEAK 11: Hardware and software requirements + + +Install Internet Explorer 11 before you try to use IEAK 11 and the Internet Explorer Customization Wizard 11. For more information about installing IE11, see [IEAK 11: Determine the licensing version and features to use](ieak_11_determine_the_licensing_version_and_features_to_use.md). + +## Hardware requirements + + +Before you start the IE Customization wizard, check how much disk space you have on the drive you’ll use to build the IE11 installation package. This drive can be on the same computer as the computer running the customization wizard; it just needs to have a secure destination folder. + +Before you start to build your IE11 installation packages, you need to meet all of the IE requirements, plus you need: + +- Up to 100 megabytes (MB) of disk space, depending on how many components you include in the installation package. + +- An additional 100 MB of disk space for each custom installation package built. Different media types are considered separate packages. + +## Software requirements + + +- Make sure that the computer you’re using to build your installation packages includes IE11 and is running one of these operating systems: + + - Windows 10 + + However, only the "Configuration-only package" is available, and you must use the Windows 8.1 target platform. + + - Windows 8.1 + + - Windows Server 2012 R2 + + - Windows® 7 Service Pack 1 (SP1) + + - Windows Server 2008 R2 (SP1) + +- Make sure that the computer you’re using to run IEAK 11 is using the same version of the operating system as the computer where you’ll build your installation packages. + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-ieak/ieak-11-list-of-tasks-and-references-to-create-manage-and-deploy-internet-explorer-11-custom-packages.md b/browsers/internet-explorer-11/ie11-ieak/ieak-11-list-of-tasks-and-references-to-create-manage-and-deploy-internet-explorer-11-custom-packages.md new file mode 100644 index 0000000000..fb97ebb2c9 --- /dev/null +++ b/browsers/internet-explorer-11/ie11-ieak/ieak-11-list-of-tasks-and-references-to-create-manage-and-deploy-internet-explorer-11-custom-packages.md @@ -0,0 +1,114 @@ +--- +Description: 'IEAK 11: List of tasks and references to create, manage, and deploy Internet Explorer 11 custom packages' +MS-HAID: 'p\_ieak\_ie11.ieak\_11\_list\_of\_tasks\_and\_references\_to\_create\_manage\_and\_deploy\_internet\_explorer\_11\_custom\_packages' +MSHAttr: 'PreferredLib:/library' +title: 'IEAK 11: List of tasks and references to create, manage, and deploy Internet Explorer 11 custom packages' +--- + +# IEAK 11: List of tasks and references to create, manage, and deploy Internet Explorer 11 custom packages + + +Use Internet Explorer Administration Kit 11 (IEAK 11) to set up, deploy, and manage Internet Explorer 11 in your company. + + ++++ + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
TaskReferences

Review the IEAK 11 concepts and requirements, including information about the version and features you will use.

    +

  • [IEAK 11: Hardware and software requirements](ieak_11_hardware_and_software_requirements.md)

    • +

  • [IEAK 11: Determine the licensing version and features to use](ieak_11_determine_the_licensing_version_and_features_to_use.md)

    • +

  • [IEAK 11: What to do before you create your custom package](ieak_11_what_to_do_before_you_create_your_custom_package.md)

    • +

Prepare your environment and get all of the information you’ll have to provide while you’re running IEAK 11.

    +

  • [IEAK 11: Create the build computer folder structure](ieak_11_create_the_build_computer_folder_structure.md)

    • +

  • [IEAK 11: Customization guidelines for your Toolbar button and Favorites list icons](ieak_11_customization_guidelines_for_your_toolbar_button_and_favorites_list_icons.md)

    • +

  • [Prepare for a network install of your custom package with IEAK 11](prepare_for_a_network_install_of_your_custom_package_with_ieak_11.md)

    • +

  • [Set up automatic detection for DHCP or DNS servers using IEAK 11](set_up_automatic_detection_for_dhcp_or_dns_servers_using_ieak_11.md)

    • +

  • [Register an uninstall app for your custom components using IEAK 11](register_an_uninstall_app_for_your_custom_components_using_ieak_11.md)

    • +

  • [Add and approve ActiveX controls using IEAK 11](add_and_approve_activex_controls_using_ieak_11.md)

    • +

  • [Internet Explorer Customization Wizard 11 options](internet_explorer_customization_wizard_11_options.md)

    • +

  • [IEAK 11 and security](ieak_11_and_security.md)

    • +

  • [Why create a CMAK profile in your Internet Explorer 11 (IE11) package](p_ieak_ie11.why_create_a_cmak_profile_in_your_internet_explorer_11__ie11__package)

    • +

Run the IE Customization Wizard 11.

    +

  • [File Locations: Internet Explorer Customization Wizard](file_locations_internet_explorer_customization_wizard.md)

    • +

  • [Platform Selection: Internet Explorer Customization Wizard](platform_selection_internet_explorer_customization_wizard.md)

    • +

  • [Language Selection: Internet Explorer Customization Wizard](language_selection_internet_explorer_customization_wizard.md)

    • +

  • [Package Type Selection: Internet Explorer Customization Wizard](package_type_selection_internet_explorer_customization_wizard.md)

    • +

  • [Feature Selection: Internet Explorer Customization Wizard](feature_selection_internet_explorer_customization_wizard.md)

    • +

  • [Automatic Version Synchronization: Internet Explorer Customization Wizard](automatic_version_synchronization_internet_explorer_customization_wizard.md)

    • +

  • [Custom Components: Internet Explorer Customization Wizard](custom_components_internet_explorer_customization_wizard.md)

    • +

  • [Internal Install: Internet Explorer Customization Wizard](internal_install_internet_explorer_customization_wizard.md)

    • +

  • [User Experience: Internet Explorer Customization Wizard](user_experience_internet_explorer_customization_wizard.md)

    • +

  • [Browser User Interface: Internet Explorer Customization Wizard](browser_user_interface_internet_explorer_customization_wizard.md)

    • +

  • [Search Providers: Internet Explorer Customization Wizard](search_providers_internet_explorer_customization_wizard.md)

    • +

  • [Important URLs - Home Page and Support: Internet Explorer Customization Wizard](important_urls___home_page_and_support_internet_explorer_customization_wizard.md)

    • +

  • [Accelerators: Internet Explorer Customization Wizard](accelerators_internet_explorer_customization_wizard.md)

    • +

  • [Favorites, Favorites Bar, and Feeds: Internet Explorer Customization Wizard](favorites_favorites_bar_and_feeds_internet_explorer_customization_wizard.md)

    • +

  • [Browsing Options: Internet Explorer Customization Wizard](browsing_options_internet_explorer_customization_wizard.md)

    • +

  • [First Run Wizard and Welcome Page Options: Internet Explorer Customization Wizard](first_run_wizard_and_welcome_page_options_internet_explorer_customization_wizard.md)

    • +

  • [Compatibility View: Internet Explorer Customization Wizard](compatibility_view_internet_explorer_customization_wizard.md)

    • +

  • [Connection Manager: Internet Explorer Customization Wizard](connection_manager_internet_explorer_customization_wizard.md)

    • +

  • [Connection Settings: Internet Explorer Customization Wizard](connection_settings_internet_explorer_customization_wizard.md)

    • +

  • [Automatic Configuration: Internet Explorer Customization Wizard](automatic_configuration_internet_explorer_customization_wizard.md)

    • +

  • [Proxy Settings: Internet Explorer Customization Wizard](proxy_settings_internet_explorer_customization_wizard.md)

    • +

  • [Security and Privacy Settings: Internet Explorer Customization Wizard](security_and_privacy_settings_internet_explorer_customization_wizard.md)

    • +

  • [Add a Root Certificate: Internet Explorer Customization Wizard](add_a_root_certificate_internet_explorer_customization_wizard.md)

    • +

  • [Programs: Internet Explorer Customization Wizard](programs_internet_explorer_customization_wizard.md)

    • +

  • [Additional Settings: Internet Explorer Customization Wizard](additional_settings_internet_explorer_customization_wizard.md)

    • +

  • [Wizard Complete-Next Steps: Internet Explorer Customization Wizard](wizard_complete_next_steps_internet_explorer_customization_wizard.md)

    • +

Review your policy settings and create multiple versions of your install package.

    +

  • [Using IEAK 11 to Create Multiple Versions of the Custom Browser Package](using_ieak_11_to_create_multiple_versions_of_the_custom_browser_package.md)

    • +

  • [Using the Resultant Set of Policy (RSoP) snap-in to review policy settings](using_the_resultant_set_of_policy__rsop__snap_in_to_review_policy_settings.md)

    +
    +Note   +

    For deployment instructions, additional troubleshooting, and post-installation management, see the [Internet Explorer 11 (IE11) - Deployment Guide for IT Pros](p_ie11deploy.internet_explorer_11__ie11____deployment_guide_for_it_pros)

    +
    +
    +  +
    • +

Review the general IE Customization Wizard 11 information, which applies throughout the process.

    +

  • [IEAK 11 and Custom Browser Package Troubleshooting](ieak_11_and_custom_browser_package_troubleshooting.md)

    • +

  • [IEAK 11 file types](ieak_11_file_types.md)

    • +

  • [Customize Automatic Search for Internet Explorer](customize_automatic_search_for_internet_explorer.md)

    • +

  • [Creating uninstallation (.INF) files for custom components](creating_uninstallation__inf__files_for_custom_components.md)

    • +

  • [Using Internet Settings (.INS) Files](using_internet_settings__ins__files.md)

    • +

  • [Proxy auto-configuration examples](proxy_auto_configuration_examples.md)

    • +

  • [IExpress Wizard for Windows Server 2008 R2 with SP1](iexpress_wizard_for_windows_server_2008_r2_with_sp1.md)

    • +
+ +  + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-ieak/ieak-11-what-to-do-before-you-create-your-custom-package.md b/browsers/internet-explorer-11/ie11-ieak/ieak-11-what-to-do-before-you-create-your-custom-package.md new file mode 100644 index 0000000000..b1841bcee2 --- /dev/null +++ b/browsers/internet-explorer-11/ie11-ieak/ieak-11-what-to-do-before-you-create-your-custom-package.md @@ -0,0 +1,28 @@ +--- +Description: 'IEAK 11: What to do before you create your custom package' +MS-HAID: 'p\_ieak\_ie11.ieak\_11\_what\_to\_do\_before\_you\_create\_your\_custom\_package' +MSHAttr: 'PreferredLib:/library' +title: 'IEAK 11: What to do before you create your custom package' +--- + +# IEAK 11: What to do before you create your custom package + + +Go through this list, making sure you’ve answered all of the questions before you run Internet Explorer Administration Kit 11 (IEAK 11) and the IE Customization Wizard 11. + +- Have you determined which version of IE Administration Kit 11 (IEAK 11) to install? See [IEAK 11: Determine the licensing version and features to use](ieak_11_determine_the_licensing_version_and_features_to_use.md). + +- Do you meet the necessary hardware and software requirements? See [IEAK 11: Hardware and software requirements](ieak_11_hardware_and_software_requirements.md). + +- Have you gotten all of the URLs you’ll need so you can customize your **Home**, **Search**, and **Support** pages? See [Important URLs - Home Page and Support: Internet Explorer Customization Wizard](important_urls___home_page_and_support_internet_explorer_customization_wizard.md). + +- Have you reviewed the security features, determining how you want to set up and manage them? See [IEAK 11 and security](ieak_11_and_security.md). + +- Have you created a test lab, where you can run the test version of your browser package to make sure it runs properly? + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-ieak/iexpress-command-line-options.md b/browsers/internet-explorer-11/ie11-ieak/iexpress-command-line-options.md new file mode 100644 index 0000000000..58cbf3d759 --- /dev/null +++ b/browsers/internet-explorer-11/ie11-ieak/iexpress-command-line-options.md @@ -0,0 +1,77 @@ +--- +Description: 'IExpress command-line options' +MS-HAID: 'p\_ieak\_ie11.iexpress\_command\_line\_options' +MSHAttr: 'PreferredLib:/library' +title: 'IExpress command-line options' +--- + +# IExpress command-line options + + +The IExpress Wizard (IExpress.exe) lets you use command-line options to control the custom browser package extraction process for Internet Explorer. + +These are the available options for IExpress with IE: + +**Ie11setup *<IExpress options>* /c:"ie11wzd *<Internet Explorer options>*"** + + ++++ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
ParametersAction

/q

Specifies quiet mode, hiding all of the prompts, while files are being extracted. This option won’t suppress prompts during Setup.

/q:u

Specifies user-quiet mode, letting some of the progress and error messages appear to the employee.

/q:a

Specifies administrator-quiet mode, hiding all of the progress and error messages from the employee.

/t:<path>

Specifies where to store your extracted files.

/c:

Extracts all of the files without installing them. If t:/<path> isn’t used, you’ll be prompted for a storage folder.

/c:<path>

Specifies the UNC path and name of the Setup .inf or .exe file.

/r:n

Never restarts the computer after installation.

/r:a

Always restarts the computer after installation.

/r:s

Restarts the computer after installation without prompting the employee.

+ +  + +For more information, see [Command-line switches for IExpress software update packages](http://go.microsoft.com/fwlink/?LinkId=317973). + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-ieak/iexpress-wizard-for-windows-server-2008-r2-with-sp1.md b/browsers/internet-explorer-11/ie11-ieak/iexpress-wizard-for-windows-server-2008-r2-with-sp1.md new file mode 100644 index 0000000000..129333bc5d --- /dev/null +++ b/browsers/internet-explorer-11/ie11-ieak/iexpress-wizard-for-windows-server-2008-r2-with-sp1.md @@ -0,0 +1,70 @@ +--- +Description: IExpress Wizard for Windows Server 2008 R2 with SP1 +MS-HAID: 'p\_ieak\_ie11.iexpress\_wizard\_for\_windows\_server\_2008\_r2\_with\_sp1' +MSHAttr: 'PreferredLib:/library' +title: IExpress Wizard for Windows Server 2008 R2 with SP1 +--- + +# IExpress Wizard for Windows Server 2008 R2 with SP1 + + +You can use the IExpress Wizard and its associated command-line options to create self-extracting files that automatically run your custom Internet Explorer Setup (.inf or .exe file) program that’s contained inside. + +## IExpress location + + +The IExpress Wizard (Iexpress.exe) is included as part of Windows Server 2008 R2 with Service Pack 1 (SP1), in the *<systemdrive>*:\\WINDOWS\\system32 folder. The wizard uses a self-extraction directive (.sed) file to store your package’s information. When you run the wizard, you have the option to start with an existing .sed file, or to create a new one. + +## IExpress features + + +The IExpress Wizard: + +- Performs silent, unattended installations of your custom IE packages. + +- Supports upgrading IE without removing previous installations. + +- Supports repeated updating or performing clean installations of the same IE build. + +## IExpress settings + + +The IExpress Wizard lets you: + +- Decide whether the self-installing package is for administrators or for general employees. + +- Set multiple ways to run the installation command, such as in normal or silent mode. + +- Determine whether the IExpress dynamic-link libraries (.dll files) are updated on an employee’s computer. + +- Determine the compatibility of the installation package, based on the operating system version range, the browser version range, or any application version range. + +- Update and add files to the IExpress package, using the UPDFILE tool, without having to rebuild the package. + +- Replace Runonce with RunOnceEx (if the newer version of Iernonce.dll exists); giving you control over the job run order and status display. + +- Let corporate administrators set up support for roaming employees. + +- Let Internet Content Providers (ICPs) and Internet Service Providers (ISPs) generate packages for preconfigured desktops with custom, current content. + +- Save disk space by cleaning up the hard drive when running in Setup, uninstallation, and maintenance modes. + +- Provide support for multiple download sites. + +- Provide support for internal and external development, customization, expandability, and enhanced debugging. + +- Provide support for the extended character set, beyond single-byte characters (SBCS). + +- Provide support for using the .inf file format to download Internet components. For more information, see [Creating uninstallation (.INF) files for custom components](creating_uninstallation__inf__files_for_custom_components.md). + +## Related topics + + +[IExpress command-line options](iexpress_command_line_options.md) +[Internet Explorer Setup command-line options and return codes](internet_explorer_setup_command_line_options_and_return_codes.md) +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-ieak/important-urls---home-page-and-support-internet-explorer-customization-wizard.md b/browsers/internet-explorer-11/ie11-ieak/important-urls---home-page-and-support-internet-explorer-customization-wizard.md new file mode 100644 index 0000000000..bce1d69664 --- /dev/null +++ b/browsers/internet-explorer-11/ie11-ieak/important-urls---home-page-and-support-internet-explorer-customization-wizard.md @@ -0,0 +1,30 @@ +--- +Description: 'Important URLs - Home Page and Support: Internet Explorer Customization Wizard' +MS-HAID: 'p\_ieak\_ie11.important\_urls\_\_\_home\_page\_and\_support\_internet\_explorer\_customization\_wizard' +MSHAttr: 'PreferredLib:/library' +title: 'Important URLs - Home Page and Support: Internet Explorer Customization Wizard' +--- + +# Important URLs - Home Page and Support: Internet Explorer Customization Wizard + + +The **Important URLS – Home Page and Support** page of the Internet Explorer Customization Wizard 11 lets you choose one or more **Home** pages and an online support page for your customized version of IE. + +![](../common/wedge.gif)**To use the Important URLS – Home Page and Support page** + +1. In the **Add a homepage URL** box, type the URL to the page your employees go to when they click the **Home** button, and then click **Add**. + + If you add multiple **Home** pages, each page appears on a separate tab in the browser. If you don’t add a custom **Home** page, IE uses http://www.msn.com by default. If you want to delete an existing page, click the URL and then click **Remove**. + +2. Check the **Retain previous Home Page (Upgrade)** box if you have employees with previous versions of IE, who need to keep their **Home** page settings when the browser is updated. + +3. Check the **Online support page URL** box to type in the URL to your own support page. Customizing the support page is only supported in Internet Explorer for the desktop. + +4. Click **Next** to go to the [Accelerators: Internet Explorer Customization Wizard](accelerators_internet_explorer_customization_wizard.htm) page or **Back** to go to the [Search Providers: Internet Explorer Customization Wizard](search_providers_internet_explorer_customization_wizard.md). + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-ieak/internal-install-internet-explorer-customization-wizard.md b/browsers/internet-explorer-11/ie11-ieak/internal-install-internet-explorer-customization-wizard.md new file mode 100644 index 0000000000..d4bec1fefa --- /dev/null +++ b/browsers/internet-explorer-11/ie11-ieak/internal-install-internet-explorer-customization-wizard.md @@ -0,0 +1,33 @@ +--- +Description: 'Internal Install: Internet Explorer Customization Wizard' +MS-HAID: 'p\_ieak\_ie11.internal\_install\_internet\_explorer\_customization\_wizard' +MSHAttr: 'PreferredLib:/library' +title: 'Internal Install: Internet Explorer Customization Wizard' +--- + +# Internal Install: Internet Explorer Customization Wizard + + +The **Internal Install** page of the Internet Explorer Customization Wizard 11 lets you customize Setup for the default browser and the latest browser updates, based on your company’s guidelines. + +**Note**   +The customizations made on this page only apply to Internet Explorer for the desktop on Windows 7. + +  + +![](../common/wedge.gif)**To use the Internal Install page** + +1. Pick either: + + - **Allow user to choose**. Lets your employees pick their own default browser. + + - **Do not set IE as the default browser** . Won’t set IE as the default browser. However, your employees can still make IE the default. + +2. Click **Next** to go to the [User Experience: Internet Explorer Customization Wizard](user_experience_internet_explorer_customization_wizard.htm) page or **Back** to go to the [Custom Components: Internet Explorer Customization Wizard](custom_components_internet_explorer_customization_wizard.md). + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-ieak/internet-explorer-customization-wizard-11-options.md b/browsers/internet-explorer-11/ie11-ieak/internet-explorer-customization-wizard-11-options.md new file mode 100644 index 0000000000..cc9615bc52 --- /dev/null +++ b/browsers/internet-explorer-11/ie11-ieak/internet-explorer-customization-wizard-11-options.md @@ -0,0 +1,174 @@ +--- +Description: Internet Explorer Customization Wizard 11 options +MS-HAID: 'p\_ieak\_ie11.internet\_explorer\_customization\_wizard\_11\_options' +MSHAttr: 'PreferredLib:/library' +title: Internet Explorer Customization Wizard 11 options +--- + +# Internet Explorer Customization Wizard 11 options + + +Use the IEAK 11 and the Internet Explorer Customization Wizard 11 to customize your installation packages that you’ll deploy to your company’s employees. + +## IE Customization Wizard 11 options + + +IEAK 11 lets you customize a lot of Internet Explorer 11, including the IE and Internet Explorer for the desktop experiences. For more information about the experiences, see [Internet Explorer 11 (IE11) - Deployment Guide for IT Pros](p_ie11deploy.internet_explorer_11__ie11____deployment_guide_for_it_pros). For information about which pages appear in the **Internal** or **External** version of IE Customization Wizard 11, see [IEAK 11: Determine the licensing version and features to use](ieak_11_determine_the_licensing_version_and_features_to_use.md). + + +++++ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
IE Customization Wizard 11 pageBrowser ExperienceDescription

Custom Components

Internet Explorer for the desktop

Add up to 10 additional components that your employees can install at the same time they install IE.

Internal Install

Internet Explorer for the desktop

Choose to set IE11 as the default browser.

+
+Note   +

This customization only applies to IE11 on Windows 7 SP1.

+
+
+  +

User Experience

Internet Explorer for the desktop

Control the installation and restart experience for your employees.

+
+Note   +

This customization only applies to IE11 on Windows 7 SP1.

+
+
+  +

Browser User Interface

Internet Explorer for the desktop

Customize your Title Bars and toolbar buttons.

Search Providers

Both

Import and add Search providers.

Important URLs – Home page and Support

The Support page is supported by both experiences. The Home page is only supported on Internet Explorer for the desktop.

Add URLs for your Home and Support pages.

Accelerators

Internet Explorer for the desktop

Import and add default Accelerators.

Favorites, Favorites Bar and Feeds

Internet Explorer for the desktop

Import and add items to the Favorites folder, the Favorites Bar, and the Feeds folder.

+
+Note   +

You can turn off the entire Suggested Sites feature from this page.

+
+
+  +

Browsing Options

Doesn’t apply

Choose how to manage items in the Favorites folder, the Favorites Bar, and the Feeds folder. You can also turn off the Microsoft-default Favorites, Web slices, links, feeds, and Accelerators.

First Run Wizard and Welcome Page Options

Doesn’t apply

Decide if the First Run wizard appears the first time an employee starts IE. You can also use the IE11 Welcome page, or link to a custom Welcome page.

Compatibility View

Both

This functionality has been removed for IE11. For more information, see [Missing the Compatibility View Button](p_ie11deploy.missing_the_compatibility_view_button).

Connection Manager

Doesn’t apply

This functionality has been removed for IE11.

Connection Settings

Both

Choose whether to customize your connection settings. You can also choose to delete old dial-up connection settings.

Automatic Configuration

Both

Choose whether to automatically detect configuration settings, and whether to turn on and customize automatic configuration.

Proxy Settings

Both

Turn on and set up your proxy servers.

+
+Note   +

We don’t support Gopher Server anymore.

+
+
+  +

Add a Root Certificate

Both

This functionality has been removed for IE11.

Security and Privacy Settings

The Security Zones and Privacy settings are supported by both experiences. The Content Ratings are only supported on Internet Explorer for the desktop.

Decide if you want to:

+
    +

  • Customize your security zones and privacy settings

    +

    -or-

    • +

  • Import your current security zones and privacy settings

    +

    • +

  • Customize your content ratings settings

    +

    -or-

    • +

  • Import your current content ratings settings

    • +

Programs

Doesn’t apply

Decide which default programs to open, or import your current settings.

Additional Settings

Doesn’t apply

Decide how to set up multiple IE settings that appear in the Internet Options box.

+ +  + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-ieak/internet-explorer-setup-command-line-options-and-return-codes.md b/browsers/internet-explorer-11/ie11-ieak/internet-explorer-setup-command-line-options-and-return-codes.md new file mode 100644 index 0000000000..f4f2284f54 --- /dev/null +++ b/browsers/internet-explorer-11/ie11-ieak/internet-explorer-setup-command-line-options-and-return-codes.md @@ -0,0 +1,207 @@ +--- +Description: 'Internet Explorer Setup command-line options and return codes' +MS-HAID: 'p\_ieak\_ie11.internet\_explorer\_setup\_command\_line\_options\_and\_return\_codes' +MSHAttr: 'PreferredLib:/library' +title: 'Internet Explorer Setup command-line options and return codes' +--- + +# Internet Explorer Setup command-line options and return codes + + +You can package your custom version of Internet Explorer and the appropriate command-line options, using a tool like IExpress, and then perform a batch installation across your company. + +## IE Setup command-line options + + +These command-line options work with IE Setup: + +**\[/help\] \[/passive | /quiet\] \[/update-no\] \[/no-default\] \[/nobackup\] \[/ieak-full:*<path>* | /ieak-branding: *<path>*\] \[/norestart | /forcerestart\] \[/log: *<path>*** + + ++++ + + + + + + + + + + + + + + + + +
Parameter (Setup modes)Description

/passive

Runs the installation without requiring any input from the employee.

/quiet

Identical to /passive, but doesn’t show any of the progress or error messages to the employee.

+ +  + + ++++ + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Parameter (Setup options)Description

/update-no

Doesn’t look for IE updates.

/no-default

Doesn’t make IE the default browser.

/no-backup

Doesn’t back up the files necessary to uninstall IE.

/ieak-full:<path>

Reserved for use by IE Administration Kit 11 (IEAK 11).

/ieak-branding:<path>

Reserved for use by IEAK 11.

+ +  + + ++++ + + + + + + + + + + + + + + + + +
Parameter (restart options)Description

/norestart

Doesn’t restart after installation.

/forcerestart

Restarts after installation.

+ +  + + ++++ + + + + + + + + + + + + + + + + +
Parameter (miscellaneous options)Description

/help

Provides help information. Can’t be used with any other option.

/log:<path>

Creates a log file about the installation process, at the specified location.

+ +  + +## Windows Setup return and status codes + + +Setup needs to tell you whether IE successfully installed. However, because IE11wzd.exe is packaged insider your IE11setup.exe file, the return codes can’t be sent directly back to you. Instead, Setup needs to return the information (both success and failure) to the HKEY\_LOCAL\_MACHINE\\Software\\Microsoft\\Active Setup\\InstallInfo registry branch. + + +++++ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
SubkeyData typeValue

Complete

String

0 = Success

Complete

String

0x80100003 = Files are missing for the requested installation.

Complete

String

0x80100001 = Setup partially succeeded. One or more components weren’t downloaded or installed. Check the FailedComponents subkey for the list of components.

Complete

String

0x80100002 = Setup partially succeeded, but the employee cancelled Setup. One or more components weren’t downloaded or installed. Check the FailedComponents subkey for the list of components.

FailedComponents

MultiSZ

<Name of components from CIFID>Null<Name of Component...>

InstallStatus

binary

0 = Install completed successfully

InstallStatus

binary

1 = Suspend Setup. The employee cancelled Setup and is then asked to confirm:

+
    +

  • 2 = No, don’t cancel. Resume Setup.

    • +

  • 3 = Yes, cancel confirmed. Quit Setup as soon as possible.

    • +
+
+Important   +

If the cancel is confirmed, Setup will quit as soon as all of the in-progress tasks complete, like copying or extracting files.

+
+
+  +
+ +  + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-ieak/isp-security-ins-file-setting.md b/browsers/internet-explorer-11/ie11-ieak/isp-security-ins-file-setting.md new file mode 100644 index 0000000000..85806e4ea9 --- /dev/null +++ b/browsers/internet-explorer-11/ie11-ieak/isp-security-ins-file-setting.md @@ -0,0 +1,42 @@ +--- +Description: '\[ISP\_Security\]: .INS file setting' +MS-HAID: 'p\_ieak\_ie11.isp\_security\_ins\_file\_setting' +MSHAttr: 'PreferredLib:/library' +title: '\[ISP\_Security\]: .INS file setting' +--- + +# \[ISP\_Security\]: .INS file setting + + +The root certificate you’re adding to your custom package. + + +++++ + + + + + + + + + + + + + + +
NameValueDescription

RootCertPath

path_and_file_name

The location and name of the root certificate you want to add to your custom installation package.

+ +  + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-ieak/language-selection-internet-explorer-customization-wizard.md b/browsers/internet-explorer-11/ie11-ieak/language-selection-internet-explorer-customization-wizard.md new file mode 100644 index 0000000000..c541a7f0f0 --- /dev/null +++ b/browsers/internet-explorer-11/ie11-ieak/language-selection-internet-explorer-customization-wizard.md @@ -0,0 +1,36 @@ +--- +Description: 'Language Selection: Internet Explorer Customization Wizard' +MS-HAID: 'p\_ieak\_ie11.language\_selection\_internet\_explorer\_customization\_wizard' +MSHAttr: 'PreferredLib:/library' +title: 'Language Selection: Internet Explorer Customization Wizard' +--- + +# Language Selection: Internet Explorer Customization Wizard + + +The **Language Selection** page of the Internet Explorer Customization Wizard 11 lets you choose the language for your IE Administration Kit 10 (IEAK 10) custom package. You can create custom Internet Explorer 11 packages in any of the languages your operating system version is available in. + +**Important**   +Make sure that the language of your IEAK 11 matches the language of your custom IE package. If the languages don’t match, IEAK 11 won’t work properly. + +  + +![](../common/wedge.gif)**To use the Language Selection page** + +1. Pick the language you want your custom IE11 installation package to use. + + You can support as many languages as you want, but each localized version must be in its own installation package. + + **Note**   + To keep your settings across multiple versions of the package, you can pick the same destination folder for all versions. The different language versions are then saved in separate subfolders within that destination folder. Like, for an English version, `C:\Cie\Build1\Flat\Win32_WIN8\en-US\` and for a German version, `C:\Cie\Build1\Flat\Win32_WIN8\de-DE\`. + +   + +2. Click **Next** to go to the [Package Type Selection: Internet Explorer Customization Wizard](package_type_selection_internet_explorer_customization_wizard.htm) page or **Back** to go to the [Platform Selection: Internet Explorer Customization Wizard](platform_selection_internet_explorer_customization_wizard.md). + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-ieak/media-ins-file-setting.md b/browsers/internet-explorer-11/ie11-ieak/media-ins-file-setting.md new file mode 100644 index 0000000000..e354d1fb58 --- /dev/null +++ b/browsers/internet-explorer-11/ie11-ieak/media-ins-file-setting.md @@ -0,0 +1,46 @@ +--- +Description: '\[Media\]: .INS file setting' +MS-HAID: 'p\_ieak\_ie11.media\_ins\_file\_setting' +MSHAttr: 'PreferredLib:/library' +title: '\[Media\]: .INS file setting' +--- + +# \[Media\]: .INS file setting + + +The types of media your custom installation package is available in, such as DVD. + + +++++ + + + + + + + + + + + + + + +
NameValueDescription

Build_LAN

0 | 1

Determines whether you want to create a LAN-based installation package.

+
    +

  • 0 – Don’t create the LAN-based installation package.

    • +

  • 1 – Create the LAN-based installation package.

    • +
+ +  + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-ieak/package-type-selection-internet-explorer-customization-wizard.md b/browsers/internet-explorer-11/ie11-ieak/package-type-selection-internet-explorer-customization-wizard.md new file mode 100644 index 0000000000..6b131af08b --- /dev/null +++ b/browsers/internet-explorer-11/ie11-ieak/package-type-selection-internet-explorer-customization-wizard.md @@ -0,0 +1,38 @@ +--- +Description: 'Package Type Selection: Internet Explorer Customization Wizard' +MS-HAID: 'p\_ieak\_ie11.package\_type\_selection\_internet\_explorer\_customization\_wizard' +MSHAttr: 'PreferredLib:/library' +title: 'Package Type Selection: Internet Explorer Customization Wizard' +--- + +# Package Type Selection: Internet Explorer Customization Wizard + + +The **Package Type Selection** page of the Internet Explorer Customization Wizard 11 lets you pick which type of media you’ll use to distribute your custom installation package. You can pick more than one type, if you need it. + +![](../common/wedge.gif)**To use the File Locations page** + +1. Check the **Full Installation Package** box if you’re going to build your package on, or move your package to, a local area network (LAN). This media package includes the Internet Explorer 11 installation files, and is named **IE11-Setup-Full.exe**, in the <*systemdrive*>:\\<*destination\_folder*>\\FLAT\\<*OS\_version*>\\<*language\_code*> folder. + + **Important**   + You can't create a full installation package for deployment to Windows 10 computers. This only works for computers running Windows 7 or Windows 8.1. + +   + +2. Check the **Configuration-only package** box if you want to update an existing installation of IE11. This media package is named **IE11- Setup-Branding.exe**, in the <*systemdrive*>:\\<*destination\_folder*>\\BrndOnly\\<*OS\_version*>\\<*language\_code*> folder. + + You can distribute this file on any media format or server. It customizes the IE11 features without re-installing IE. + + **Important**   + You can’t include custom components in a configuration-only package. + +   + +3. Click **Next** to go to the [Feature Selection: Internet Explorer Customization Wizard](feature_selection_internet_explorer_customization_wizard.htm) page or **Back** to go to the [Language Selection: Internet Explorer Customization Wizard](language_selection_internet_explorer_customization_wizard.md). + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-ieak/platform-selection-internet-explorer-customization-wizard.md b/browsers/internet-explorer-11/ie11-ieak/platform-selection-internet-explorer-customization-wizard.md new file mode 100644 index 0000000000..8656ffc82f --- /dev/null +++ b/browsers/internet-explorer-11/ie11-ieak/platform-selection-internet-explorer-customization-wizard.md @@ -0,0 +1,33 @@ +--- +Description: 'Platform Selection: Internet Explorer Customization Wizard' +MS-HAID: 'p\_ieak\_ie11.platform\_selection\_internet\_explorer\_customization\_wizard' +MSHAttr: 'PreferredLib:/library' +title: 'Platform Selection: Internet Explorer Customization Wizard' +--- + +# Platform Selection: Internet Explorer Customization Wizard + + +The **Platform Selection** page of the Internet Explorer Customization Wizard 11 lets you choose the operating system and processor type (32 or 64 bit) for the computers you’re going to install the custom installation package on. + +![](../common/wedge.gif)**To use the Platform Selection page** + +1. Pick the operating system and architecture for the computers that you’re going to install the custom package on. + + You must create individual packages for each supported operating system. + + **Note**   + To keep your settings across several operating system packages, you can specify the same destination folder. Then, after running the wizard, you can reuse the resulting .ins file. Any additional changes to the .ins file are saved. + +   + + For more information about using .ins files, see [Using Internet Settings (.INS) Files](using_internet_settings__ins__files.htm). For more information about adding in your .ins file, see [File Locations: Internet Explorer Customization Wizard](file_locations_internet_explorer_customization_wizard.md). + +2. Click **Next** to go to the [Language Selection: Internet Explorer Customization Wizard](language_selection_internet_explorer_customization_wizard.htm) page or **Back** to go to the [File Locations: Internet Explorer Customization Wizard](file_locations_internet_explorer_customization_wizard.md). + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-ieak/prepare-for-a-network-install-of-your-custom-package-with-ieak-11.md b/browsers/internet-explorer-11/ie11-ieak/prepare-for-a-network-install-of-your-custom-package-with-ieak-11.md new file mode 100644 index 0000000000..3dc86ae09c --- /dev/null +++ b/browsers/internet-explorer-11/ie11-ieak/prepare-for-a-network-install-of-your-custom-package-with-ieak-11.md @@ -0,0 +1,34 @@ +--- +Description: Prepare for a network install of your custom package with IEAK 11 +MS-HAID: 'p\_ieak\_ie11.prepare\_for\_a\_network\_install\_of\_your\_custom\_package\_with\_ieak\_11' +MSHAttr: 'PreferredLib:/library' +title: Prepare for a network install of your custom package with IEAK 11 +--- + +# Prepare for a network install of your custom package with IEAK 11 + + +Employees can install your custom browser package using a network server. However, you must either lower the intranet security level or make the server a trusted site. + +![](../common/wedge.gif)**To lower your intranet security** + +1. In Internet Explorer 11, click **Tools**, **Internet Options**, and then the **Security** tab. + +2. Click **Local intranet**, and then **Sites**. + +3. Uncheck **Automatically detect intranet network**, uncheck **Include all network paths (UNC)**, and then click **OK**. + +![](../common/wedge.gif)**To make your server a trusted site** + +1. From the **Security** tab, click **Trusted sites**, and then **Sites**. + +2. Type the location of the server with the downloadable custom browser package, and then click **Add**. + + Repeat this step for every server that’ll include the custom browser package for download. + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-ieak/programs-internet-explorer-customization-wizard.md b/browsers/internet-explorer-11/ie11-ieak/programs-internet-explorer-customization-wizard.md new file mode 100644 index 0000000000..ea3d4fd7c3 --- /dev/null +++ b/browsers/internet-explorer-11/ie11-ieak/programs-internet-explorer-customization-wizard.md @@ -0,0 +1,35 @@ +--- +Description: 'Programs: Internet Explorer Customization Wizard' +MS-HAID: 'p\_ieak\_ie11.programs\_internet\_explorer\_customization\_wizard' +MSHAttr: 'PreferredLib:/library' +title: 'Programs: Internet Explorer Customization Wizard' +--- + +# Programs: Internet Explorer Customization Wizard + + +The **Programs** page of the Internet Explorer Customization Wizard 11 lets you pick the default programs to use for Internet services, like email, contact lists, and newsgroups, by importing settings from your computer. + +The customizations you make on this page only apply to Internet Explorer for the desktop. + +![](../common/wedge.gif)**To use the Programs page** + +- Decide if you want to customize your connection settings. You can pick: + + - **Do not customize Program Settings.** Pick this option if you don’t want to set program associations for your employee’s computers. + + - **Import the current Program Settings.** Pick this option to import the program associations from your computer and use them as the preset for your employee’s program settings. + + **Note**   + If you want to change any of your settings, you can click **Modify Settings** to open the **Internet Properties** box, click **Set associations**, and make your changes. + +   + + - Click **Next** to go to the [Additional Settings: Internet Explorer Customization Wizard](additional_settings_internet_explorer_customization_wizard.htm) page or **Back** to go to the [Add a Root Certificate: Internet Explorer Customization Wizard](add_a_root_certificate_internet_explorer_customization_wizard.md) page. + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-ieak/proxy-auto-configuration-examples.md b/browsers/internet-explorer-11/ie11-ieak/proxy-auto-configuration-examples.md new file mode 100644 index 0000000000..700998a9e4 --- /dev/null +++ b/browsers/internet-explorer-11/ie11-ieak/proxy-auto-configuration-examples.md @@ -0,0 +1,218 @@ +--- +Description: 'Proxy auto-configuration examples' +MS-HAID: 'p\_ieak\_ie11.proxy\_auto\_configuration\_examples' +MSHAttr: 'PreferredLib:/library' +title: 'Proxy auto-configuration examples' +--- + +# Proxy auto-configuration examples + + +These are examples of the various ways you can use a proxy auto-configuration (.pac) file to specify an automatic proxy URL. To use these examples, you must change the proxy names, port numbers, and IP addresses to match your corporate information. + +## Connect directly if the host is local + + +For this example, if the host is local, it can connect directly. However, if the server isn’t local, it must connect through a proxy server. Specifically, the `isPlainHostName` function looks to see if there are any periods (or dots) in the host name. If the function finds dots, it means the host isn’t local and it returns false. Otherwise, the function returns true. + +``` syntax +function FindProxyForURL(url, host) + { + if (isPlainHostName(host)) + return "DIRECT"; + else + return "PROXY proxy:80"; + } +``` + +## Connect directly if the host is inside the firewall + + +For this example, if the host is inside the firewall, it can connect directly. However, if the server is outside the firewall, it must connect through a proxy server. Specifically, `localHostOrDomainIs` function will only run for URLs in the local domain. If the host domain name matches the provided domain information, the `dnsDomainIs` function returns true. + +``` syntax +function FindProxyForURL(url, host) + { + if ((isPlainHostName(host) || + dnsDomainIs(host, ".company.com")) && + !localHostOrDomainIs(host, "www.company.com") && + !localHostOrDoaminIs(host, "home.company.com")) + return "DIRECT"; + else + return "PROXY proxy:80"; +} +``` + +## Connect directly if the host name is resolvable + + +For this example, if the host name can be resolved, it can connect directly. However, if the name can’t be resolved, the server must connect through a proxy server. Specifically, this function requests the DNS server to resolve the host name passed to it. If it can, then a direct connection is made. If it cannot, the connection is made using a proxy. + +This is useful when an internal DNS server is used to resolve all internal host names. + +**Important**   +The `isResolvable` function queries a Domain Name System (DNS) server. References to Object Model objects, properties, or methods cause the proxy auto-configuration file to fail silently. For example, the references `window.open(...)`, `alert(...)`, and `password(...)` all cause the proxy auto-configuration file to fail. + +  + +``` syntax +function FindProxyForURL(url, host) + { + if (isResolvable(host)) + return "DIRECT"; + else + return "PROXY proxy:80"; + } +``` + +## Connect directly if the host is in specified subnet + + +For this example, if the host is in a specified subnet, it can connect directly. However, if the server is outside of the specified subnet, it must connect through a proxy server. Specifically, the `isInNet` (host, pattern, mask) function returns true if the host IP address matches the specified pattern. The mask indicates which part of the IP address to match (255=match, 0=ignore). + +**Important**   +The `isInNet` function queries a DNS server. References to Object Model objects, properties, or methods cause the proxy auto-configuration file to fail silently. For example, the references `window.open(...)`, `alert(...)`, and `password(...)` all cause the proxy auto-configuration file to fail. + +  + +``` syntax +function FindProxyForURL(url, host) + { + if (isInNet(host, "999.99.9.9", "255.0.255.0")) + return "DIRECT"; + else + return "PROXY proxy:80"; + } +``` + +## Determine the connection type based on the host domain + + +For this example, if the host is local, the server can connect directly. However, if the host isn’t local, this function determines which proxy to use based on the host domain. Specifically, the `shExpMatch(str, shexp)` function returns true if `str` matches the `shexp` using shell expression patterns. + +This is useful when the host domain name is one of the criteria for proxy selection. + +``` syntax +function FindProxyForURL(url, host) + { + if (isPlainHostName(host)) + return "DIRECT"; + else if (shExpMatch(host, "*.com")) + return "PROXY comproxy:80"; + else if (shExpMatch(host, "*.edu")) + return "PROXY eduproxy:80"; + else + return "PROXY proxy"; + } +``` + +## Determine the connection type based on the protocol + + +For this example, the in-use protocol is extracted from the server and used to make a proxy selection. If no protocol match occurs, the server is directly connected. Specifically the `substring` function extracts the specified number of characters from a string. + +This is useful when protocol is one of the criteria for proxy selection. + +``` syntax +function FindProxyForURL(url, host) + { + if (url.substring(0, 5) == "http:") { + return "PROXY proxy:80"; + } + else if (url.substring(0, 4) == "ftp:") { + return "PROXY fproxy:80"; + } + else if (url.substring(0, 7) == "gopher:") { + return "PROXY gproxy"; + } + else if (url.substring(0, 6) == "https:") { + return "PROXY secproxy:8080"; + } + else { + return "DIRECT"; + } + } +``` + +## Determine the proxy server based on the host name matching the IP address + + +For this example, the proxy server is selected by translating the host name into an IP address and then comparing the address to a specified string. + +**Important**   +The `dnsResolve` function queries a DNS server. References to Object Model objects, properties, or methods cause the proxy auto-configuration file to fail silently. For example, the references `window.open(...)`, `alert(...)`, and `password(...)` all cause the proxy auto-configuration file to fail. + +  + +``` syntax +function FindProxyForURL(url, host) + { + if (dnsResolve(host) == "999.99.99.999") { // = http://secproxy + return "PROXY secproxy:8080"; + } + else { + return "PROXY proxy:80"; + } + } +``` + +## Connect using a proxy server if the host IP address matches the specified IP address + + +For this example, the proxy server is selected by explicitly getting the IP address and then comparing it to a specified string. If no protocol match occurs, the server makes a direct connection. Specifically, the `myIpAddress` function returns the IP address (in integer-dot format) for the host that the browser is running on. + +``` syntax +function FindProxyForURL(url, host) + { + if (myIpAddress() == "999.99.999.99") { + return "PROXY proxy:80"; + } + else { + return "DIRECT"; + } + } +``` + +## Connect using a proxy server if there are dots in the host name + + +For this example, the function looks to see if there are periods (or dots) in the host name. If there are any dots, the connection occurs using a proxy server. If there are no dots, a direct connection occurs. Specifically, the `dnsDomainLevels` function returns an integer equal to the number of dots in the host name. + +**Note**   +This is another way to determine connection types based on host name characteristics. + +  + +``` syntax +function FindProxyForURL(url, host) + { + if (dnsDomainLevels(host) > 0) { // if the number of dots in host > 0 + return "PROXY proxy:80"; + } + return "DIRECT"; + } +``` + +## Connect using a proxy server based on specific days of the week + + +For this example, the function decides whether to connect to a proxy server, based on the days of the week. Connecting on days that don’t fall between the specified date parameters let the server make a direct connection. Specifically the `weekdayRange(day1 [,day2] [,GMT] )` function returns whether the current system time falls within the range specified by the parameters `day1`, `day2`, and `GMT`. Only the first parameter is required. The GMT parameter presumes time values are in Greenwich Mean Time rather than the local time zone. + +This function is useful for situations where you want to use a proxy server for heavy traffic times, but allow a direct connection when traffic is light. + +``` syntax +function FindProxyForURL(url, host) + { + if(weekdayRange("WED", "SAT", "GMT")) + return "PROXY proxy:80"; + else + return "DIRECT"; + } +``` + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-ieak/proxy-ins-file-setting.md b/browsers/internet-explorer-11/ie11-ieak/proxy-ins-file-setting.md new file mode 100644 index 0000000000..eb773f1c42 --- /dev/null +++ b/browsers/internet-explorer-11/ie11-ieak/proxy-ins-file-setting.md @@ -0,0 +1,85 @@ +--- +Description: '\[Proxy\]: .INS file setting' +MS-HAID: 'p\_ieak\_ie11.proxy\_ins\_file\_setting' +MSHAttr: 'PreferredLib:/library' +title: '\[Proxy\]: .INS file setting' +--- + +# \[Proxy\]: .INS file setting + + +Determines whether to use a proxy server. If yes, this also includes the host names for the proxy server. + + +++++ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
NameValueDescription

FTP_Proxy_Server

proxy

The host name for the FTP proxy server.

Gopher_Proxy_Server

proxy

The host name for the Gopher proxy server.

HTTP_Proxy_Server

proxy

The host name for the HTTP proxy server.

Proxy_Enable

0 | 1

Determines whether to use a proxy server.

+
    +

  • 0 – Don’t use a proxy server.

    • +

  • 1 – Use a proxy server.

    • +

Proxy_Override

string

The host name for the proxy server. For example, <LOCAL>.

Secure_Proxy_Server

proxy

The host name for the secure proxy server.

Socks_Proxy_Server

proxy

The host name for the SOCKS proxy server.

Use_Same_Proxy

0 | 1

Determines whether to use a single proxy server for all services.

+
    +

  • 0 – Don’t use the same proxy server for all services.

    • +

  • 1 – Use the same proxy server for all services.

    • +
+ +  + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-ieak/proxy-settings-internet-explorer-customization-wizard.md b/browsers/internet-explorer-11/ie11-ieak/proxy-settings-internet-explorer-customization-wizard.md new file mode 100644 index 0000000000..0a5dee0eda --- /dev/null +++ b/browsers/internet-explorer-11/ie11-ieak/proxy-settings-internet-explorer-customization-wizard.md @@ -0,0 +1,48 @@ +--- +Description: 'Proxy Settings: Internet Explorer Customization Wizard' +MS-HAID: 'p\_ieak\_ie11.proxy\_settings\_internet\_explorer\_customization\_wizard' +MSHAttr: 'PreferredLib:/library' +title: 'Proxy Settings: Internet Explorer Customization Wizard' +--- + +# Proxy Settings: Internet Explorer Customization Wizard + + +The **Proxy Settings** page of the Internet Explorer Customization Wizard 11 lets you pick which proxy servers your employees use to connect for services required by the custom install package. + +Using a proxy server lets you limit access to the Internet. You can also use the **Additional Settings** page of the wizard to further restrict your employees from changing the proxy settings. + +![](../common/wedge.gif)**To use the Proxy Settings page** + +1. Check the **Enable proxy settings** box if you want to use proxy servers for any of your services. + +2. Type the address of the proxy server you want to use for your services into the **Address of proxy** box. In most cases, a single proxy server is used for all of your services. + + Proxy locations that don’t begin with a protocol (like, http:// or ftp://) are assumed to be a CERN-type HTTP proxy. For example, the entry *proxy* is treated the same as the entry *http://proxy*. + +3. Type the port for each service. The default value is *80*. + +4. Check the **Use the same proxy server for all addresses** box to use the same proxy server settings for all of your services. + +5. Type any services that shouldn’t use a proxy server into the **Do not use proxy server for addresses beginning with** box. + + When filling out your exceptions, keep in mind: + + - Proxy bypass entries can begin with a protocol type, such as http://, https://, or ftp://. However, if a protocol type is used, the exception entry applies only to requests for that protocol. + + - Protocol values are not case sensitive and you can use a wildcard character ( \* ) in place of zero or more characters. + + - You must use a semicolon between your entries. + + - This list is limited to **2064** characters. + +6. Check the **Do not use proxy server for local (intranet) addresses** to bypass your proxy servers for all addresses on your intranet. + +7. Click **Next** to go to the [Security and Privacy Settings: Internet Explorer Customization Wizard](security_and_privacy_settings_internet_explorer_customization_wizard.htm) page or **Back** to go to the [Automatic Configuration: Internet Explorer Customization Wizard](automatic_configuration_internet_explorer_customization_wizard.md) page. + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-ieak/register-an-uninstall-app-for-your-custom-components-using-ieak-11.md b/browsers/internet-explorer-11/ie11-ieak/register-an-uninstall-app-for-your-custom-components-using-ieak-11.md new file mode 100644 index 0000000000..545ed54222 --- /dev/null +++ b/browsers/internet-explorer-11/ie11-ieak/register-an-uninstall-app-for-your-custom-components-using-ieak-11.md @@ -0,0 +1,59 @@ +--- +Description: Register an uninstall app for your custom components using IEAK 11 +MS-HAID: 'p\_ieak\_ie11.register\_an\_uninstall\_app\_for\_your\_custom\_components\_using\_ieak\_11' +MSHAttr: 'PreferredLib:/library' +title: Register an uninstall app for your custom components using IEAK 11 +--- + +# Register an uninstall app for your custom components using IEAK 11 + + +Register the uninstall apps for any custom components you’ve included in your Internet Explorer 11 package. Registering these apps lets your employees remove the components later, using **Uninstall or change a program** in the Control Panel. + +## Register your uninstallation program + + +While you’re running your custom component setup process, your app can add information to the subkeys in the `HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\ApplicationName` registry key, registering your uninstallation program. + +**Note**   +IE11 also uses this registry key to verify that the component installed successfully during setup. + +  + + +++++ + + + + + + + + + + + + + + + + + + + +
SubkeyData typeValue

DisplayName

String

Friendly name for your uninstall app

+

This name must match what you type for the Uninstall Key in the Add a Custom Component page of the Internet Explorer Customization Wizard 11. For more information, see [Custom Components: Internet Explorer Customization Wizard](custom_components_internet_explorer_customization_wizard.md).

UninstallString

String

Full command-line text, including the path, to uninstall your component

+

Don’t use a batch file or a sub-process

+ +  + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-ieak/search-providers-internet-explorer-customization-wizard.md b/browsers/internet-explorer-11/ie11-ieak/search-providers-internet-explorer-customization-wizard.md new file mode 100644 index 0000000000..a7532def60 --- /dev/null +++ b/browsers/internet-explorer-11/ie11-ieak/search-providers-internet-explorer-customization-wizard.md @@ -0,0 +1,51 @@ +--- +Description: 'Search Providers: Internet Explorer Customization Wizard' +MS-HAID: 'p\_ieak\_ie11.search\_providers\_internet\_explorer\_customization\_wizard' +MSHAttr: 'PreferredLib:/library' +title: 'Search Providers: Internet Explorer Customization Wizard' +--- + +# Search Providers: Internet Explorer Customization Wizard + + +The **Search Providers** page of the Internet Explorer Customization Wizard 11 lets you add a default search provider (typically, Bing®) and additional providers to your custom version of IE. + +**Note**   +The IE Customization Wizard 11 offers improved and extended search settings. However, you can still optionally include support for Search Suggestions and Favicons, as well as Accelerator previews by using an .ins file from a previous version of IEAK. + +  + +![](../common/wedge.gif)**To use the Search Providers page** + +1. Click **Import** to automatically import your existing search providers from your current version of IE into this list. + +2. Click **Add** to add more providers. + + The **Search Provider** box appears. + +3. In the **Display Name** box, type the text that appears in the **Search Options** menu for the search provider. + +4. In the **URL** box, type the full URL to the search provider, including the `http://` prefix. + +5. In the **Favicon URL** box, type the full URL to any icon to associate with your provider. + +6. In the **Suggestions URL (XML)** box, type the associated search suggestions in XML format. + +7. In the **Suggestions URL (JSON)** box, type the associated search suggestions in JavaScript Object Notation format. + +8. In the **Accelerator Preview URL** box, type the associated Accelerator preview URL for each provider, if it’s necessary. + +9. Check the **Display Search Suggestions for this provider** box to turn on search suggestions for the provider, and then click **OK**. + +10. Check the **Search Guide URL Customization** box if you’re going to add your search providers to a custom webpage for your employees. Then, type the URL to the custom webpage in the text box. + +11. Click **Edit** to change your search provider information, click **Set Default** to make a search provider the default for your employees, or **Remove** to delete a search provider. + +12. Click **Next** to go to the [Important URLs - Home Page and Support: Internet Explorer Customization Wizard](important_urls___home_page_and_support_internet_explorer_customization_wizard.htm) page or **Back** to go to the [Browser User Interface: Internet Explorer Customization Wizard](browser_user_interface_internet_explorer_customization_wizard.md). + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-ieak/security-and-privacy-settings-internet-explorer-customization-wizard.md b/browsers/internet-explorer-11/ie11-ieak/security-and-privacy-settings-internet-explorer-customization-wizard.md new file mode 100644 index 0000000000..9ca6360c07 --- /dev/null +++ b/browsers/internet-explorer-11/ie11-ieak/security-and-privacy-settings-internet-explorer-customization-wizard.md @@ -0,0 +1,44 @@ +--- +Description: 'Security and Privacy Settings: Internet Explorer Customization Wizard' +MS-HAID: 'p\_ieak\_ie11.security\_and\_privacy\_settings\_internet\_explorer\_customization\_wizard' +MSHAttr: 'PreferredLib:/library' +title: 'Security and Privacy Settings: Internet Explorer Customization Wizard' +--- + +# Security and Privacy Settings: Internet Explorer Customization Wizard + + +The **Security and Privacy Settings** page of the Internet Explorer Customization Wizard 11 lets you manage your security zones, privacy settings, and content ratings. These settings help restrict the types of content your employees can access from the Internet, including any content that might be considered offensive or otherwise inappropriate in a corporate setting. + +![](../common/wedge.gif)**To use the Security and Privacy Settings page** + +1. Decide if you want to customize your security zones and privacy settings. You can pick: + + - **Do not customize security zones and privacy.** Pick this option if you don’t want to customize your security zones and privacy settings. + + - **Import the current security zones and privacy.** Pick this option to import your security zone and privacy settings from your computer and use them as the preset for your employee’s settings. + + **Note**   + To change your settings, click **Modify Settings** to open the **Internet Properties** box, and then click the **Security** and **Privacy** tabs to make your changes. + +   + +2. Decide if you want to customize your content ratings. You can pick: + + - **Do not customize content ratings.** Pick this option if you don’t want to customize content ratings. + + - **Import the current content ratings settings.** Pick this option to import your content rating settings from your computer and use them as the preset for your employee’s settings. + + **Note**   + Not all Internet content is rated. If you choose to allow users to view unrated sites, some of those sites could contain inappropriate material. To change your settings, click **Modify Settings** to open the **Content Advisor** box, where you can make your changes. + +   + +3. Click **Next** to go to the [Add a Root Certificate: Internet Explorer Customization Wizard](add_a_root_certificate_internet_explorer_customization_wizard.htm) page or **Back** to go to the [Proxy Settings: Internet Explorer Customization Wizard](proxy_settings_internet_explorer_customization_wizard.md) page. + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-ieak/security-imports-ins-file-setting.md b/browsers/internet-explorer-11/ie11-ieak/security-imports-ins-file-setting.md new file mode 100644 index 0000000000..8ae8eb0508 --- /dev/null +++ b/browsers/internet-explorer-11/ie11-ieak/security-imports-ins-file-setting.md @@ -0,0 +1,82 @@ +--- +Description: '\[Security Imports\]: .INS file setting' +MS-HAID: 'p\_ieak\_ie11.security\_imports\_ins\_file\_setting' +MSHAttr: 'PreferredLib:/library' +title: '\[Security Imports\]: .INS file setting' +--- + +# \[Security Imports\]: .INS file setting + + +Determines whether to import security information from your local computer to your custom package. + + +++++ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
NameValueDescription

ImportAuthCode

0 | 1

Determines whether to import the existing Authenticode settings.

+
    +

  • 0 – Don’t import the existing settings.

    • +

  • 1 – Import the existing settings.

    • +

ImportRatings

0 | 1

Determines whether to import the existing Content Ratings settings.

+
    +

  • 0 – Don’t import the existing settings.

    • +

  • 1 – Import the existing settings.

    • +

ImportSecZones

0 | 1

Determines whether to import the existing Security Zone settings.

+
    +

  • 0 – Don’t import the existing settings.

    • +

  • 1 – Import the existing settings.

    • +

ImportSiteCert

0 | 1

Determines whether to import the existing site certification authorities.

+
    +

  • 0 – Don’t import the existing authorities.

    • +

  • 1 – Import the existing authorities.

    • +

Win16SiteCerts

0 | 1

Determines whether to use site certificates for computers running 16-bit versions of Windows.

+
    +

  • 0 – Don’t use the site certificates.

    • +

  • 1 – Use the site certificates.

    • +
+ +  + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-ieak/set-up-automatic-detection-for-dhcp-or-dns-servers-using-ieak-11.md b/browsers/internet-explorer-11/ie11-ieak/set-up-automatic-detection-for-dhcp-or-dns-servers-using-ieak-11.md new file mode 100644 index 0000000000..4f5b15e971 --- /dev/null +++ b/browsers/internet-explorer-11/ie11-ieak/set-up-automatic-detection-for-dhcp-or-dns-servers-using-ieak-11.md @@ -0,0 +1,99 @@ +--- +Description: Set up automatic detection for DHCP or DNS servers using IEAK 11 +MS-HAID: 'p\_ieak\_ie11.set\_up\_automatic\_detection\_for\_dhcp\_or\_dns\_servers\_using\_ieak\_11' +MSHAttr: 'PreferredLib:/library' +title: Set up automatic detection for DHCP or DNS servers using IEAK 11 +--- + +# Set up automatic detection for DHCP or DNS servers using IEAK 11 + + +Set up your network to automatically detect and customize Internet Explorer 11 when it’s first started. Automatic detection is supported on both Dynamic Host Configuration Protocol (DHCP) and Domain Name System (DNS), letting your servers detect and set up your employee’s browser settings from a central location, using a configuration URL (.ins file) or a JavaScript proxy configuration file (.js, .jvs, or .pac). + +Before you can set up your environment to use automatic detection, you need to turn the feature on. + +![](../common/wedge.gif)**To turn on the automatic detection feature** + +- Open Internet Explorer Administration Kit 11 (IEAK 11), run the IE Customization Wizard 11 and on the **Automatic Configuration** page, check **Automatically detect configuration settings**. For more information, see [Automatic Configuration: Internet Explorer Customization Wizard](automatic_configuration_internet_explorer_customization_wizard.md). + +## Automatic detection on DHCP and DNS servers + + +Automatic detection works even if the browser wasn't originally set up or installed by the administrator. + +- **Using DHCP servers:** For local area network (LAN)-based users. This server type lets you specify your global and subnet TCP/IP parameters centrally, defining your users' parameters by using reserved addresses. By doing it this way, a computer can move between subnets, automatically reconfiguring for TCP/IP when it starts. + + **Note**   + Your DHCP servers must support the DHCPINFORM message, to obtain the DHCP options. + +   + +- **Using DNS servers:** For users on dial-up connections. This server type uses a set of protocols and services on a TCP/IP network, which lets users search for other computers by using hierarchical, user-friendly names (hosts), instead of numeric IP addresses. To use this, you have to set up either the host record or the CNAME alias record in the DNS database file. + +**Note**   +DHCP has a higher priority than DNS for automatic configuration. If DHCP provides the URL to a .pac, .jvs, .js, or .ins configuration file, the process stops and the DNS lookup doesn't happen. + +  + +![](../common/wedge.gif)**To set up automatic detection for DHCP servers** + +- Open the [DHCP Administrative Tool](http://go.microsoft.com/fwlink/?LinkId=302212), create a new option type, using the code number 252, and then associate it with the URL to your configuration file. For detailed instructions about how to do this, see [Create an option 252 entry in DHCP](http://go.microsoft.com/fwlink/p/?LinkId=294649). + + **Examples** + + ``` syntax + http://www.microsoft.com/webproxy.pac + ``` + + ``` syntax + http://marketing/config.ins + ``` + + ``` syntax + http://###.#.###.#/account.pac + ``` + + For more detailed information about how to set up your DHCP server, see your server documentation. + +![](../common/wedge.gif)**To set up automatic detection for DNS servers** + +1. In your DNS database file, the file that’s used to associate your host (computer) names to static IP addresses in a zone, you need to create a host record named, **WPAD**. This record contains entries for all of the hosts that require static mappings, such as workstations, name servers, and mail servers. It also has the IP address to the web server storing your automatic configuration (.js, .jvs, .pac, or .ins) file. + + The syntax is: <*host name*> IN A <*ip address of host*> + + **Examples** + + ``` syntax + corserv IN A 192.55.200.143 + ``` + + ``` syntax + nameserver2 IN A 192.55.200.2 + ``` + + ``` syntax + mailserver1 IN A 192.55.200.51 + ``` + + -OR- + + Create a canonical name (CNAME) alias record, named **WPAD**. This record lets you use more than one name to point to a single host, letting you host both an FTP server and a web server on the same computer. It also includes the resolved name (not the IP address) of the server storing your automatic configuration (.pac) file. + + **Note**   + For more information about creating a **WPAD** entry, see [Creating a WPAD entry in DNS](http://go.microsoft.com/fwlink/?LinkId=294651). + +   + +2. After the database file propagates to the server, the DNS name, *wpad.<domain>.com* resolves to the server name that includes your automatic configuration file. + + **Note**   + IE11 creates a default URL template based on the host name,**wpad**. For example, *http://wpad.<domain>.com/wpad.dat*. Because of this, you need to set up a file or redirection point in your web server **WPAD** record, named **wpad.dat**. The **wpad.dat** record delivers the contents of your automatic configuration file. + +   + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-ieak/url-ins-file-setting.md b/browsers/internet-explorer-11/ie11-ieak/url-ins-file-setting.md new file mode 100644 index 0000000000..917e69ac56 --- /dev/null +++ b/browsers/internet-explorer-11/ie11-ieak/url-ins-file-setting.md @@ -0,0 +1,143 @@ +--- +Description: '\[URL\]: .INS file setting' +MS-HAID: 'p\_ieak\_ie11.url\_ins\_file\_setting' +MSHAttr: 'PreferredLib:/library' +title: '\[URL\]: .INS file setting' +--- + +# \[URL\]: .INS file setting + + +Determines whether to use an auto-configured proxy server. If yes, this also includes the URLs to the pages that appear when your employees first connect to that server. + + +++++ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
NameValueDescription

AutoConfig

0 | 1

Determines whether to automatically configure the customized browser on your employee’s computer.

+
    +

  • 0 – Don’t automatically configure the browser.

    • +

  • 1 – Automatically configure the browser.

    • +

AutoConfigJSURL

URL

The URL for the proxy auto-config file (.js or .jvs)

AutoConfigTime

integer

Automatically configures the browser on your employee’s computer after its run for a specified length of time.

AutoConfigURL

URL

The URL for the proxy auto-config (.pac) file.

FirstHomePage

URL

The page that appears the first time the custom browser is opened on the employee’s computer.

Help_Page

URL

The URL to your internal technical support site.

Home_Page

URL

The URL to your default Home page.

NoWelcome

0 | 1

Determines whether to show the Welcome page the first time the browser’s used on an employee’s computer.

+
    +

  • 0 – Display the Welcome page.

    • +

  • 1 – Don’t display the Welcome page.

    • +

Quick_Link_1

URL

The URL to your first Quick Link.

Quick_Link_1_Name

string

The name of the site associated with Quick_Link_1.

Quick_Link_2

URL

The URL to your second Quick Link.

Quick_Link_2_Name

string

The name of the site associated with Quick_Link_2.

Quick_Link_X

URL

A URL to another Quick Link.

Quick_Link_X_Icon

path_and_file_name

A Quick Links icon (.ico) file.

Quick_Link_X_Name

string

The name of the site associated with Quick_Link_1.

Quick_Link_X_Offline

0 | 1

Determines whether to make the Quick Links available for offline browsing.

+
    +

  • 0 – Don’t make the Quick Links available offline.

    • +

  • 1 – Make the Quick Links available offline.

    • +

Search_Page

URL

The URL to the default search page.

UseLocalIns

0 | 1

Determines whether to use a local Internet Settings (.ins) file.

+
    +

  • 0 – Don’t use a local .ins file.

    • +

  • 1 – Use a local .ins file.

    • +
+ +  + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-ieak/user-experience-internet-explorer-customization-wizard.md b/browsers/internet-explorer-11/ie11-ieak/user-experience-internet-explorer-customization-wizard.md new file mode 100644 index 0000000000..a203414607 --- /dev/null +++ b/browsers/internet-explorer-11/ie11-ieak/user-experience-internet-explorer-customization-wizard.md @@ -0,0 +1,55 @@ +--- +Description: 'User Experience: Internet Explorer Customization Wizard' +MS-HAID: 'p\_ieak\_ie11.user\_experience\_internet\_explorer\_customization\_wizard' +MSHAttr: 'PreferredLib:/library' +title: 'User Experience: Internet Explorer Customization Wizard' +--- + +# User Experience: Internet Explorer Customization Wizard + + +The **User Experience** page of the Internet Explorer Customization Wizard 11 lets you decide how much you want your employees to interact with the custom package’s Setup process. + +**Note**   +You’ll only see this page if you are running the **Internal** version of the IE Customization Wizard 11. The customizations you make on this page only apply to Internet Explorer for the desktop on Windows 7. + +  + +![](../common/wedge.gif)**To use the User Experience page** + +1. Choose how your employee should interact with Setup, including: + + - **Interactive installation**. Lets your employees change installation options while installing your custom package. This experience shows all of the progress and error messages throughout the process. + + - **Hands-free installation**. Lets you make all of the decisions for your employees. However, they’ll still see all of the progress and error messages throughout the process. + + - **Completely silent installation**. Lets you make all of the decisions for your employees and hides all of the progress and error messages. Because this mode is completely silent, if the installation fails, your employees won’t know and they won’t be able to run the installation package again. + + Both the hands-free and completely silent installation options will: + + - Answer prompts so Setup can continue. + + - Accept the license agreement. + + - Determine that Internet Explorer 11 is installed and not just downloaded. + + - Perform your specific installation type. + + - Install IE in the default location, unless it is already installed. In that case, the new version of the browser is installed in the same location as the previous version. + +2. Choose how your employee’s computer will restart at the end of Setup. + + - **Default**. Prompts your employees to restart after installing IE. + + - **No restart**. Doesn’t restart the computer after installing IE. The employee will have to manually restart later. + + - **Force restart**. Automatically restarts the computer after installing IE. + +3. Click **Next** to go to the [Browser User Interface: Internet Explorer Customization Wizard](browser_user_interface_internet_explorer_customization_wizard.htm) page or **Back** to go to the [Internal Install: Internet Explorer Customization Wizard](internal_install_internet_explorer_customization_wizard.md). + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-ieak/using-ieak-11-to-create-multiple-versions-of-the-custom-browser-package.md b/browsers/internet-explorer-11/ie11-ieak/using-ieak-11-to-create-multiple-versions-of-the-custom-browser-package.md new file mode 100644 index 0000000000..a4d3e9f07a --- /dev/null +++ b/browsers/internet-explorer-11/ie11-ieak/using-ieak-11-to-create-multiple-versions-of-the-custom-browser-package.md @@ -0,0 +1,41 @@ +--- +Description: Using IEAK 11 to Create Multiple Versions of the Custom Browser Package +MS-HAID: 'p\_ieak\_ie11.using\_ieak\_11\_to\_create\_multiple\_versions\_of\_the\_custom\_browser\_package' +MSHAttr: 'PreferredLib:/library' +title: Using IEAK 11 to Create Multiple Versions of the Custom Browser Package +--- + +# Using IEAK 11 to Create Multiple Versions of the Custom Browser Package + + +You'll need to create multiple versions of your custom browser package if: + +- You support more than 1 version of Windows®. + +- You support more than 1 language. + +- You have custom installation packages with only minor differences. Like, having a different phone number or a different set of URLs in the **Favorites** folder. + +The Internet Explorer Customization Wizard 11 stores your original settings in the Install.ins file and will show them each time you re-open the wizard. For more information about .ins files, see [Using Internet Settings (.INS) Files](using_internet_settings__ins__files.md). + +![](../common/wedge.gif)**To create multiple versions of your browser package** + +1. Use the IE Customization Wizard 11 to create a custom browser package. For more information about how to run the wizard, start with the [File Locations: Internet Explorer Customization Wizard](file_locations_internet_explorer_customization_wizard.md) topic. + +2. Go to the Cie\\Custom folder and rename the Install.ins file to a name that reflects the version. Like, if you need a version for your employees in Texas, you could name the file Texas.ins. + +3. Run the wizard again, choosing the newly renamed folder as the destination directory for your output files. + + **Important**   + Except for the **Title bar** text, **Favorites**, **Links bar**, **Home** page, and **Search bar**, keep all of your wizard settings the same for all of your build computers. + +   + +4. Repeat this process until you’ve created a package for each version of your custom installation package. + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-ieak/using-internet-settings--ins--files.md b/browsers/internet-explorer-11/ie11-ieak/using-internet-settings--ins--files.md new file mode 100644 index 0000000000..1f50f8fc08 --- /dev/null +++ b/browsers/internet-explorer-11/ie11-ieak/using-internet-settings--ins--files.md @@ -0,0 +1,89 @@ +--- +Description: 'Using Internet Settings (.INS) Files' +MS-HAID: 'p\_ieak\_ie11.using\_internet\_settings\_\_ins\_\_files' +MSHAttr: 'PreferredLib:/library' +title: 'Using Internet Settings (.INS) Files' +--- + +# Files + + +Use Internet Explorer Administration Kit 11 (IEAK 11) to configure your Internet Settings (.ins) files, configuring your custom browser and its components. You can create multiple versions of your custom package by customizing copies of this file. + +The .ins file includes these sections: + + ++++ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
SectionDescription

[[Branding]: .INS file setting](branding_ins_file_setting.md)

Information about the custom branding and setup information in your browser package.

[[BrowserToolbars]: .INS file setting](browsertoolbars_ins_file_setting.md)

Customize the appearance of the IE toolbar.

[[CabSigning]: .INS file setting](cabsigning_ins_file_setting.md)

Digital signature information for your programs.

[[ConnectionSettings]: .INS file setting](connectionsettings_ins_file_setting.md)

Information about the dial-up networking connection settings used to install your custom package. This section creates a common configuration on all of your employee’s computers.

[[CustomBranding]: .INS file setting](custombranding_ins_file_setting.md)

URL location to your branding cabinet (.cab) file.

[[ExtRegInf]: .INS file setting](extreginf_ins_file_setting.md)

Names of your Setup information (.inf) files and the installation mode for components.

[[FavoritesEx]: .INS file setting](favoritesex_ins_file_setting.md)

Path to your icon file for Favorites and if Favorites are available offline. You can also use this section to add URLs to each Favorites site.

[[HideCustom]: .INS file setting](hidecustom_ins_file_setting.md)

Determines whether to hide the globally unique identifier (GUID) for each custom component.

[[ISP_Security]: .INS file setting](isp_security_ins_file_setting.md)

The root certificate you’re adding to your custom package.

[[Media]: .INS file setting](media_ins_file_setting.md)

The types of media your custom installation package is available in, such as DVD.

[[Proxy]: .INS file setting](proxy_ins_file_setting.md)

Determines whether to use a proxy server. If yes, this also includes the host names for the proxy server.

[[Security Imports]: .INS file setting](security_imports_ins_file_setting.md)

Determines whether to import security information from your local computer to your custom package.

[[URL]: .INS file setting](url_ins_file_setting.md)

Determines whether to use an auto-configured proxy server. If yes, this also includes the URLs to the pages that appear when your employees first connect to that server.

+ +  + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-ieak/using-the-resultant-set-of-policy--rsop--snap-in-to-review-policy-settings.md b/browsers/internet-explorer-11/ie11-ieak/using-the-resultant-set-of-policy--rsop--snap-in-to-review-policy-settings.md new file mode 100644 index 0000000000..71b417b9e4 --- /dev/null +++ b/browsers/internet-explorer-11/ie11-ieak/using-the-resultant-set-of-policy--rsop--snap-in-to-review-policy-settings.md @@ -0,0 +1,40 @@ +--- +Description: 'Using the Resultant Set of Policy (RSoP) snap-in to review policy settings' +MS-HAID: 'p\_ieak\_ie11.using\_the\_resultant\_set\_of\_policy\_\_rsop\_\_snap\_in\_to\_review\_policy\_settings' +MSHAttr: 'PreferredLib:/library' +title: 'Using the Resultant Set of Policy (RSoP) snap-in to review policy settings' +--- + +# snap-in to review policy settings + + +After you’ve deployed your custom Internet Explorer package to your employees, you can use the Resultant Set of Policy (RSoP) snap-in to view your created policy settings. The RSoP snap-in is a two-step process. First, you run the RSoP wizard to determine what information should be viewed. Second, you open the specific items in the console window to view the settings. For complete instructions about how to use RSoP, see [Resultant Set of Policy](http://go.microsoft.com/fwlink/?LinkId=259479). + +![](../common/wedge.gif)**To add the RSoP snap-in** + +1. On the **Start** screen, type *MMC*. + + The Microsoft Management Console opens. + +2. Click **File**, and then click **Add/Remove Snap-in**. + +3. In the **Available snap-ins** window, go down to the **Resultant Set of Policy** snap-in option, click **Add**, and then click **OK**. + + You’re now ready to use the RSoP snap-in from the console. + +![](../common/wedge.gif)**To use the RSoP snap-in** + +1. Right-click **Resultant Set of Policy** and then click **Generate RSoP Data**. + + You’ll only need to go through the resulting RSoP Wizard first time you run the snap-in. + +2. Click **Next** on the **Welcome** screen. + +3. Under **Computer Configuration**, click **Administrative Templates**, click **Windows Components**, click **IE**, and then click the feature you want to review the policy settings for. + +  + +  + + + diff --git a/browsers/internet-explorer-11/ie11-ieak/wizard-complete-next-steps-internet-explorer-customization-wizard.md b/browsers/internet-explorer-11/ie11-ieak/wizard-complete-next-steps-internet-explorer-customization-wizard.md new file mode 100644 index 0000000000..b06e294d49 --- /dev/null +++ b/browsers/internet-explorer-11/ie11-ieak/wizard-complete-next-steps-internet-explorer-customization-wizard.md @@ -0,0 +1,20 @@ +--- +Description: 'Wizard Complete-Next Steps: Internet Explorer Customization Wizard' +MS-HAID: 'p\_ieak\_ie11.wizard\_complete\_next\_steps\_internet\_explorer\_customization\_wizard' +MSHAttr: 'PreferredLib:/library' +title: 'Wizard Complete-Next Steps: Internet Explorer Customization Wizard' +--- + +# Wizard Complete-Next Steps: Internet Explorer Customization Wizard + + +The **Wizard Complete – Next Steps** page of the Internet Explorer Customization Wizard 11 lets you build your custom installation package, after you click **Finish**. + +In most cases, your next steps will be to prepare your files for installation from your network or from another distribution method. If you haven’t already done it, you’ll need to digitally sign any program or .cab files that are going to be distributed over the Internet or over an intranet that isn’t configured to allow downloads. After that, the steps you’ll use to distribute your customized browser will vary, depending on your version of IEAK (Internal or External) and the media you’re using to distribute the package. For more information, see the [Internet Explorer 11 (IE11) - Deployment Guide for IT Pros](p_ie11deploy.internet_explorer_11__ie11____deployment_guide_for_it_pros). + +  + +  + + + diff --git a/browsers/internet-explorer-11/internet-explorer-11.md b/browsers/internet-explorer-11/internet-explorer-11.md new file mode 100644 index 0000000000..c4d0b26bc7 --- /dev/null +++ b/browsers/internet-explorer-11/internet-explorer-11.md @@ -0,0 +1,27 @@ +--- +Description: 'Find info about Internet Explorer 11 that''s important to IT Pros.' +MS-HAID: 'p\_browsernodes.internet\_explorer\_11' +MSHAttr: 'PreferredLib:/library' +ms.prod: 'IE11' +ms.mktglfcycl: 'deploy' +ms.sitesec: 'library' +title: Internet Explorer 11 +--- + +# Internet Explorer 11 + + +Find info about Internet Explorer 11 that's important to IT Pros. + +- [Internet Explorer 11 (IE11) - FAQ for IT Pros](http://go.microsoft.com/fwlink/?LinkId=618481) + +- [Internet Explorer 11 (IE11) - Deployment Guide for IT Pros](http://go.microsoft.com/fwlink/p/?linkid=618480) + +- [IEAK 11 - Internet Explorer Administration Kit 11 Users Guide](http://go.microsoft.com/fwlink/p/?linkid=615679) + +  + +  + + +