deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-05-12 05:17:22 +00:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity

adding Edge and IE content

Browse Source
This commit is contained in:
Brian Lich 2016-02-24 13:00:21 -08:00
parent f1c492a116
commit 46fa30e897
188 changed files with 11133 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
browsers/TOC.md Normal file
View File

@ -0,0 +1,4 @@
# Table of Contents
## [Edge](edge/)
## [Internet Explorer 11](internet-explorer-11/)

6
browsers/edge/TOC.md Normal file
View File

@ -0,0 +1,6 @@
#Table of Contents
##[Microsoft Edge - Deployment Guide for IT Pros](microsoft-edge-deployment-guide-for-it-pros.md)
##[Microsoft Edge requirements and language support](hardware-and-software-requirements.md)
##[Available policies for Microsoft Edge](available-policies.md)
##[Use Enterprise Mode to improve compatibility](emie-to-improve-compatibility.md)

118
browsers/edge/available-policies.md Normal file
View File

@ -0,0 +1,118 @@
---
Description: 'Microsoft Edge works with Group Policy and Microsoft Intune to help you manage your organization''s computer settings.'
ms.assetid: 2E849894-255D-4F68-AE88-C2E4E31FA165
ms.prod: edge
ms.mktglfcycl: explore
ms.sitesec: library
title: Available policies for Microsoft Edge
---
# Available policies for Microsoft Edge
**Last updated**
- January 7, 2015
**Applies to:**
- Windows 10
- Windows 10 Mobile
Microsoft Edge works with Group Policy and Microsoft Intune to help you manage your organization's computer settings. Group Policy objects (GPO's) can include registry-based Administrative Template policy settings, security settings, software deployment information, scripts, folder redirection, and preferences.
By using Group Policy and Intune, you can set up a policy setting once, and then copy that setting onto many computers. For example, you can set up multiple security settings in a GPO that's linked to a domain, and then apply all of those settings to every computer in the domain.
<p>**Note**<br>For more info about Group Policy, see the [Group Policy TechCenter](http://go.microsoft.com/fwlink/?LinkId=214514). This site provides links to the latest technical documentation, videos, and downloads for Group Policy. For more info about the tools you can use to change your Group Policy objects, see the Internet Explorer 11 topics, [Group Policy and the Group Policy Management Console (GPMC)](http://go.microsoft.com/fwlink/?LinkId=617921), [Group Policy and the Local Group Policy Editor](http://go.microsoft.com/fwlink/?LinkId=617922), [Group Policy and the Advanced Group Policy Management (AGPM)](http://go.microsoft.com/fwlink/?LinkId=617923), and [Group Policy and Windows Powershell](http://go.microsoft.com/fwlink/?LinkId=617924).
 
## Group Policy settings
Microsoft Edge works with these Group Policy settings (`Computer Configuration\Administrative Templates\Windows Components\Microsoft Edge\`) to help you manage your company's web browser configurations:
| Policy name | Description | Options |
| -------------------------------------------- | ----------------------------- | ------------------------------------------------------- |
| Allow employees to send Do Not Track headers | Whether employees can send Do Not Track headers to websites that request tracking info. | **Enable:** Employees can send Do Not Track headers to websites requesting tracking info.<p> **Disable or not configured (default):** Stops employees from sending Do Not Track headers to websites requesting tracking info. |
| Turn off web content in new tab page | Decide what Microsoft Edge shows when opening a new tab. | **Enable or not configured (default):** Employees can see the new tab page with Top Sites, Top Sites with suggested content, or a blank page. <p> **Disable:** Employees see an empty tab and are unable to change the **Open new tabs with** setting. |
| Configure cookies | Decide how your company deals with cookies. | **Enable or not configured (default):** Lets you decide how your company treats cookies. If you use this option, you must also choose whether to <ul><li>**Allow all cookies (default)**. Allows all cookies from all websites</li><li>**Block all cookies**. Blocks all cookies from all websites.</li><li>**Block only 3rd-party cookies**. Blocks only cookies from 3rd-party websites.</li></ul><p> **Disable:** Allows all cookies from all websites. |
| Configure corporate Home pages | Choose which corporate Home pages should appear for domain-joined devices. | **Enable:** Configure corporate Home pages for domain-joined devices. If you use this option, you must also include site URLs.<p>**Example**<br>```<support.contoso.com><support.fabrikam.com>```<p>**Note**<br>You must use this format and the angle brackets if you have multiple pages.<p> **Disable or not configured (default):** Uses the corporate Home pages and URLs specified in the App settings. |
| Configure the Enterprise Mode Site List | Whether your company uses Enterprise Mode and the Enterprise Mode Site List to address common compatibility problems with legacy apps. | **Enable:** Lets you use the Enterprise Mode Site List to address common compatibility problems with legacy apps, if it’s configured. If you use this option, you must also add the location to your site list in the **{URI}** box. When configured, any site on the list will always open in IE11.<p> **Disable or not configured:** You won't be able to use the Enterprise Mode Site List. |
| Configure Favorites | Decide what sites appear on the default **Favorites** list. | **Enable:** Configure the default list of **Favorite** sites for your employees. If you use this option, you must also add the actual names and URLs for the sites. <p> **Disable or not configured (default):** Uses the **Favorites** list names and URLs specified in the **Favorites** hub. |
| Don’t allow SmartScreen Filter warning overrides | Whether employees can override the SmartScreen Filter warnings about potentially malicious websites. | **Enable:** Stops employees from ignoring the SmartScreen Filter warnings and blocks them from visiting the site.<p> **Disable or not configured (default):** Lets employees ignore the SmartScreen Filter warnings about potentially malicious sites and continue to the site.<p>**Note**<br>You can also turn on the SmartScreen Filter, using the **Turn off the SmartScreen Filter** setting and stop employees from ignoring the SmartScreen Filter warnings about unverified file downloads, using the **Don’t allow SmartScreen Filter warning overrides for unverified files** setting. |
| Don’t allow SmartScreen Filter warning overrides for unverified files | Whether employees can override the SmartScreen Filter warnings about downloading unverified files. | **Enable:** Stops employees from ignoring the SmartScreen Filter warnings and stops them from downloading unverified files.<p>**Disable or not configured (default):** Lets employees ignore the SmartScreen Filter warnings about unverified files and lets them continue the download process. <p>**Note**<br>You can also turn on the SmartScreen Filter, using the **Turn off the SmartScreen Filter** setting and stop employees from ignoring the SmartScreen Filter warnings about potentially dangerous websites, using the **Don’t allow SmartScreen Filter warning overrides** setting. |
| Don't allow WebRTC to share the LocalHost IP address | Whether an employee’s LocalHost IP address shows while using the WebRTC protocol | **Enable:** Hides the LocalHost IP address while using the WebRTC protocol. <p> **Disable or not configured (default):** Shows the LocalHost IP address while using the WebRTC protocol. |
| Send all intranet sites to IE11 | Whether your intranet sites should all open using IE11. <p> **Important:** This setting should only be used if there are known compatibility problems with Microsoft Edge. | **Enable:** Automatically opens all intranet sites using IE11. <p> **Disable or not configured (default):** Automatically opens all intranet sites using Microsoft Edge. |
| Turn off **Address** bar search suggestions | Whether search suggestions should appear in the **Address** bar of Microsoft Edge. | **Enable or not configured (default):** Employees can see search suggestions in the **Address** bar of Microsoft Edge. <p> **Disable:** Employees can’t see search suggestions in the **Address** bar of Microsoft Edge. |
| Turn off Autofill | Whether employees can use Autofill to automatically fill in form fields while using Microsoft Edge. | **Enable or not configured (default):** Employees can use Autofill to complete form fields. <p> **Disable:** Employees can’t use Autofill to complete form fields. |
| Turn off Developer Tools | Whether the F12 Developer Tools are available on Microsoft Edge. | **Enable or not configured (default):** Shows the F12 Developer Tools on Microsoft Edge. <p> **Disable:** Hides the F12 Developer Tools on Microsoft Edge. |
| Turn off InPrivate browsing | Whether employees can browse using InPrivate website browsing. | **Enable or not configured (default):** Lets employees use InPrivate browsing while on the corporate network. <p> **Disable:** Stops employees from using inPrivate browsing on the corporate network. |
| Turn off Password Manager | Whether employees can save their passwords locally, using Password Manager. | **Enable or not configured (default):** Employees can use Password Manager to save passwords locally. <p> **Disable:** Employees can't use Password Manager to save passwords locally. |
| Turn off Pop-up Blocker | Whether to turn on Pop-up Blocker and allow pop-ups to appear in secondary windows. | **Enable or not configured (default):** Turns on Pop-up Blocker, stopping pop-up windows. <p> **Disable:** Turns off Pop-up Blocker, allowing pop-up windows. |
|Turn off the SmartScreen Filter | Whether to turn on SmartScreen Filter to help protect your employees from potential phishing scams and malicious software. | **Enable or not configured (default):** Turns on SmartScreen Filter, providing warning messages to your employees about potential phishing scams and malicious software. <p> **Disable:** Turns off SmartScreen Filter.<p>**Note**<br>You can also stop employees from ignoring the SmartScreen Filter warnings about potentially dangerous websites, using the **Don’t allow SmartScreen Filter warning overrides** setting and stop employees from ignoring the SmartScreen Filter warnings about unverified file downloads, using the **Don’t allow SmartScreen Filter warning overrides for unverified files** setting. |
 
## Using Microsoft Intune to manage your Mobile Data Management (MDM) settings for Microsoft Edge
If you manage your policies using Intune, you'll want to use these MDM policy settings. You can see the full list of available policies, on the [Policy CSP]( http://go.microsoft.com/fwlink/?LinkId=722885) page.
<p>**Note**<br>The **Supports** column uses these options:
- **Desktop.** Supports Windows 10 Pro and Windows 10 Enterprise computers that are enrolled with Intune only.
- **Mobile.** Supports Windows 10 Mobile devices only.
- **Both.** Supports both desktop and mobile devices.
All devices must be enrolled with Intune if you want to use the Windows Custom URI Policy.
| Policy name | Supports | Details |
| -------------------------------------------- | --------------------| ------------------------------------------------------- |
| AllowAutofill | Desktop | <ul><li>**URI full path.** ./Vendor/MSFT/Policy/Config/Browser/AllowAutofill</li><li>**Data type.** Integer</li><li>**Allowed values:**<ul><li>**0.** Employees can’t use Autofill to complete form fields.</li><li>**1 (default).** Employees can use Autofill to complete form fields.</li></ul></li></ul> |
| AllowBrowser | Mobile | <ul><li>**URI full path.** ./Vendor/MSFT/Policy/Config/Browser/AllowBrowser</li><li>**Data type.** Integer</li><li>**Allowed values:**<ul><li>**0.** Employees can’t use Microsoft Edge.</li><li>**1 (default).** Employees can use Microsoft Edge.</li></ul></li></ul> |
| AllowCookies | Both | <ul><li>**URI full path.** ./Vendor/MSFT/Policy/Config/Browser/AllowCookies</li><li>**Data type.** Integer</li><li>**Allowed values:**<ul><li>**0.** Block all cookies from all sites.</li><li>**1.** Block only 3rd party cookies.<li>**2 (default).** Don't block. Allow all cookies from all sites.</li></ul></li></ul> |
| AllowDeveloperTools | Desktop | <ul><li>**URI full path.** ./Vendor/MSFT/Policy/Config/Browser/AllowDeveloperTools</li><li>**Data type.** Integer</li><li>**Allowed values:**<ul><li>**0.** Employees can't use the F12 Developer Tools on Microsoft Edge.</li><li>**1 (default).** Employees can use the F12 Developer Tools on Microsoft Edge.</li></ul></li></ul> |
| AllowDoNotTrack | Both | <ul><li>**URI full path.** ./Vendor/MSFT/Policy/Config/Browser/AllowDoNotTrack</li><li>**Data type.** Integer</li><li>**Allowed values:**<ul><li>**0 (default).** Stops employees from sending Do Not Track headers to websites requesting tracking info.</li><li>**1.** Employees can send Do Not Track headers to websites requesting tracking info.</li></ul></li></ul> |
| AllowPasswordManager | Both | <ul><li>**URI full path.** ./Vendor/MSFT/Policy/Config/Browser/AllowPasswordManager</li><li>**Data type.** Integer</li><li>**Allowed values:**<ul><li>**0.** Employees can use Password Manager to save passwords locally.</li><li>**1 (default).** Employees can't use Password Manager to save passwords locally.</li></ul></li></ul>
| AllowPopups | Desktop | <ul><li>**URI full path.** ./Vendor/MSFT/Policy/Config/Browser/AllowPopups</li><li>**Data type.** Integer</li><li>**Allowed values:**<ul><li>**0 (default).** Turns off Pop-up Blocker, stopping pop-up windows</li><li>**1.** Turns on Pop-up Blocker, allowing pop-up windows.</li></ul></li></ul> |
| AllowSearchSuggestionsinAddressBar | Both | <ul><li>**URI full path.** ./Vendor/MSFT/Policy/Config/Browser/AllowSearchSuggestionsinAddressBar</li><li>**Data type.** Integer</li><li>**Allowed values:**<ul><li>**0.** Employees can see search suggestions in the **Address** bar of Microsoft Edge.</li><li>**1 (default).** Employees can’t see search suggestions in the **Address** bar of Microsoft Edge.</li></ul></li></ul> |
| AllowSmartScreen | Both | <ul><li>**URI full path.** ./Vendor/MSFT/Policy/Config/Browser/AllowSmartScreen</li><li>**Data type.** Integer</li><li>**Allowed values:**<ul><li>**0.** Turns on SmartScreen Filter, providing warning messages to your employees about potential phishing scams and malicious software.</li><li>**1 (default).** Turns off SmartScreen Filter.</li></ul></li></ul> |
| EnterpriseModeSiteList | Desktop | <ul><li>**URI full path.** ./Vendor/MSFT/Policy/Config/Browser/EnterpriseModeSiteList</li><li>**Data type.** Integer</li><li>**Allowed values:**<ul><li>**Not configured (default).**</li><li>**1.** Use Enterprise Mode site list, if configured.</li><li>**2.** Specify the location to the site list.</li></ul></li></ul> |
| Favorites | Both | <ul><li>**URI full path.** ./Vendor/MSFT/Policy/Config/Browser/Favorites</li><li>**Data type.** String</li><li>**Allowed values:**<ul><li>URLs to favorite webpages.</li>**Example:**<br>```<contoso.com>```<br>```<fabrikam.com>```<p>**Note** URLs must be on separate lines.</ul></li></ul> |
| FirstRunURL | Mobile | <ul><li>**URI full path.** ./Vendor/MSFT/Policy/Config/Browser/FirstRunURL</li><li>**Data type.** String</li><li>**Allowed values:**<ul><li>URL to first run webpage.</li><p>**Example:**<br>```<contoso.com>```</ul></li></ul> |
| HomePages | Desktop | <ul><li>**URI full path.** ./Vendor/MSFT/Policy/Config/Browser/HomePages</li><li>**Data type.** String</li><li>**Allowed values:**<ul><li>URLs to home pages.</li><p>**Example:**<br>```<contoso.com/support><fabrikam.com/support>```</ul></li></ul> |
| PreventSmartScreenPromptOverride | Both | <ul><li>**URI full path.** ./Vendor/MSFT/Policy/Config/Browser/PreventSmartScreenPromptOverride</li><li>**Data type.** Integer</li><li>**Allowed values:**<ul><li>**0 (default).** Employees can ignore SmartScreen warnings.</li><li>**1.** Employees can't override SmartScreen warnings.</li></ul></li></ul> |
| PreventSmartScreenPromptOverrideForFiles | Both | <ul><li>**URI full path.** ./Vendor/MSFT/Policy/Config/Browser/PreventSmartScreenPromptOverrideForFiles</li><li>**Data type.** Integer</li><li>**Allowed values:**<ul><li>**0 (default).** Employees can ignore SmartScreen warnings for files.</li><li>**1.** Employees can't override SmartScreen warnings for files.</li></ul></li></ul> |
| PreventUsingLocalHostIPAddressforWebRTC | Desktop | <ul><li>**URI full path.** ./Vendor/MSFT/Policy/Config/Browser/PreventUsingLocalHostIPAddressForWebRTC</li><li>**Data type.** Integer</li><li>**Allowed values:**<ul><li>**0 (default).** Shows an employee's LocalHost IP address while using the WebRTC protocol.</li><li>**1.** Hides an employee's LocalHost IP address while using the WebRTC protocol.</li></ul></li></ul> |
## Microsoft Edge and Windows 10-specific Group Policy and MDM settings
These are additional Windows 10-specific settings that work with Microsoft Edge.
| Group Policy setting | Description | Options |
| --------------------------------------- | ----------------------------------------- | ------------------------------------------------------- |
| Computer Configuration\Administrative Templates\Windows Components\Search\Allow Cortana | Whether employees can use Cortana. | **Enable or not configured:** Employees can use Cortana on their devices.<p>**Disable:** Stops employees from using Cortana on their devices.<p>**Note** Employees can still perform searches even with Cortana turned off. |
| Computer Configuration\Administrative Templates\Windows Components\sync your settings\Do not sync | Whether employees can use the **Sync your Settings** options to sync their settings to and from their device. | **Enable:** Turns off the **Sync your Settings** options and none of the **Sync your Setting** groups are synced on the device. You can use the **Allow users to turn syncing on** option to turn the feature off by default, but to let the employee change this setting.<p>**Disable or not configured (default):** Turns on the **Sync your Settings** area by default, letting employees pick what can sync on their device. |
| Computer Configuration\Administrative Templates\Windows Components\sync your settings\Do not sync browser settings | Whether a browser group can use the **Sync your Settings** options to sync their info to and from their device. This includes settings and info like **History** and **Favorites**. | **Enable:** Turns off the **Sync your Settings** options so that browser groups are unable to sync their settings and info. You can use the **Allow users to turn browser syncing on** option to turn the feature off by default, but to let the employee change this setting.<p>**Disable or not configured (default):** Turns on the **Sync your Settings** area by default, letting browser groups pick what can sync on their device. |
## Additional Windows 10-specific MDM policy settings
These are additional Windows 10-specific MDM policy settings that work with Microsoft Edge.
| MDM Policy name | Supports | Details |
| ---------------------------------------| ------------------- | ------------------------------------------------------------------------------ |
| AllowCortana | Both | <ul><li>**URI full path.** ./Vendor/MSFT/Policy/Config/Experience/AllowCortana</li><li>**Data type.** Integer</li><li>**Allowed values:**<ul><li>**0.** Employees can’t use Cortana on their devices.</li><li>**1 (default).** Employees can use Cortana on their devices.</li></ul></li></ul> |
| AllowSyncMySettings | Desktop | <ul><li>**URI full path.** ./Vendor/MSFT/Policy/Config/Experience/AllowSyncMySettings</li><li>**Data type.** Integer</li><li>**Allowed values:**<ul><li>**0.** Employees can’t sync settings between PCs.</li><li>**1 (default).** Employees can sync between PCs.</li></ul></li></ul> |
## Related topics
* [Group Policy TechCenter](http://go.microsoft.com/fwlink/?LinkId=214514)
* [Mobile Data Management (MDM) settings]( http://go.microsoft.com/fwlink/?LinkId=722885)
 
 
 

98
browsers/edge/emie-to-improve-compatibility.md Normal file
View File

@ -0,0 +1,98 @@
---
Description: If you have specific web sites and apps that you know have compatibility problems with Microsoft Edge, you can use the Enterprise Mode site list so that the web sites will automatically open using Internet Explorer 11.
ms.assetid: 89C75F7E-35CA-4CA8-96FA-B3B498B53BE4
ms.prod: edge
ms.mktglfcycl: support
ms.sitesec: library
ms.pagetype: appcompat
title: Use Enterprise Mode to improve compatibility (Microsoft Edge)
---
# Use Enterprise Mode to improve compatibility
**Last updated**
- November 12, 2015
**Applies to:**
- Windows 10
- Windows 10 Mobile
If you have specific web sites and apps that you know have compatibility problems with Microsoft Edge, you can use the Enterprise Mode site list so that the web sites will automatically open using Internet Explorer 11. Additionally, if you know that your intranet sites aren't going to work properly with Microsoft Edge, you can set all intranet sites to automatically open using IE11.
Using Enterprise Mode means that you can continue to use Microsoft Edge as your default browser, while also ensuring that your apps continue working on IE11.
<p>**Note**<br>If you want to use Group Policy to set Internet Explorer as your default browser, you can find the info here, [Set the default browser using Group Policy]( http://go.microsoft.com/fwlink/?LinkId=620714).
## Fix specific websites
Microsoft Edge doesn't support ActiveX controls, Browser Helper Objects, VBScript, or other legacy technology. If you have websites or web apps that still use this technology and need IE11, you can add them to the Enterprise Mode site list, using the Enterprise Mode Site List Manager.
**To add sites to your list**
1. In the Enterprise Mode Site List Manager tool, click **Add**.<p>If you already have an existing site list, you can import it into the tool. After it's in the tool, the xml updates the list, checking **Open in IE** for each site. For info about importing the site list, see [Import your Enterprise Mode site list to the Enterprise Mode Site List Manager](http://go.microsoft.com/fwlink/?LinkId=618322).<p>![Enterprise Mode Site List Manager with Open in IE box](images/emie_open_in_ie.png)
2. Type or paste the URL for the website that’s experiencing compatibility problems, like *&lt;domain&gt;*.com or *&lt;domain&gt;*.com/*&lt;path&gt;* into the **URL** box. <p>You don’t need to include the `http://` or `https://` designation. The tool will automatically try both versions during validation.
3. Type any comments about the website into the **Notes about URL** box.<p>Administrators can only see comments while they’re in this tool.
4. Click **Open in IE** next to the URL that should automatically open in IE11.<p>The path within a domain can require a different compatibility mode from the domain itself. For example, the domain might look fine in the default IE11 browser, but the path might have problems and require the use of Enterprise Mode. If you added the domain previously, your original compatibility choice is still selected. However, if the domain is new, Enterprise Mode is automatically selected.
5. Click **Save** to validate your website and to add it to the site list for your enterprise.<p>If your site passes validation, it’s added to the global compatibility list. If the site doesn’t pass validation, you’ll get an error message explaining the problem. You’ll then be able to either cancel the site or ignore the validation problem and add it to your list anyway.
6. On the **File** menu, go to where you want to save the file, and then click **Save to XML**.<p>You can save the file locally or to a network share. However, you must make sure you deploy it to the location specified in your Group Policy setting. For more info, see [Turn on Enterprise Mode and use a site list](http://go.microsoft.com/fwlink/?LinkId=618952).
### Set up Microsoft Edge to use the Enterprise Mode site list
You must turn on the **Use Enterprise Mode Site List** Group Policy setting before Microsoft Edge can use the Enterprise Mode site list. This Group Policy applies to both Microsoft Edge and IE11, letting Microsoft Edge switch to IE11 as needed, based on the Enterprise Mode site list. For more info about IE11 and Enterprise Mode, see [Enterprise Mode for Internet Explorer 11 (IE11)](http://go.microsoft.com/fwlink/p/?linkid=618377).
**To turn on Enterprise Mode using Group Policy**
1. Open your Group Policy editor and go to the **Administrative Templates\\Windows Components\\Microsoft Edge\\Allows you to configure the Enterprise Mode Site list** setting.<p>Turning this setting on also requires you to create and store a site list.<p>![Local Group Policy Editor for using a site list](images/edge-emie-grouppolicysitelist.png)
2. Click **Enabled**, and then in the **Options** area, type the location to your site list.
3. Refresh your policy in your organization and then view the affected sites in Microsoft Edge.<p>The site shows a message in Microsoft Edge, saying that the page needs IE. At the same time, the page opens in IE11; in a new frame if it's not yet running, or in a new tab if it is.
**To turn on Enterprise Mode using the registry**
1. **To turn on Enterprise Mode for all users on the PC:** Open a registry editor, like regedit.exe and go to `HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\MicrosoftEdge\Main\EnterpriseMode`.
2. Edit the `SiteList` registry key to point to where you want to keep your Enterprise Mode site list file. For example:<p>![Enterprise mode with site list in the registry](images/edge-emie-registrysitelist.png)
- **HTTP location**: *“SiteList”=”http://localhost:8080/sites.xml”*
- **Local network**: *"SiteList"="\\\\network\\shares\\sites.xml"*
- **Local file**: *"SiteList"="file:///c:\\\\Users\\\\&lt;user&gt;\\\\Documents\\\\testList.xml"*
All of your managed devices must have access to this location if you want them to be able to access and use Enterprise Mode and your site list.
3. Refresh your policy in your organization and then view the affected sites in Microsoft Edge.<p>The site shows a message in Microsoft Edge, saying that the page needs IE. At the same time, the page opens in IE11; in a new frame if it's not yet running, or in a new tab if it is.
## Fix your intranet sites
You can add the **Send all intranet traffic over to Internet Explorer** Group Policy setting for Windows 10 so that all of your intranet sites open in IE11. This means that even if your employees are using Microsoft Edge, they will automatically switch to IE11 while viewing the intranet.
<p>**Note**<br>If you want to use Group Policy to set IE as the default browser for Internet sites, you can find the info here, [Set the default browser using Group Policy]( http://go.microsoft.com/fwlink/?LinkId=620714).
**To turn on Sends all intranet traffic over to Internet Explorer using Group Policy**
1. Open your Group Policy editor and go to the `Administrative Templates\Windows Components\Microsoft Edge\Sends all intranet traffic over to Internet Explorer` setting.<p>![Local Group Policy Editor with setting to send all intranet traffic to IE11](images/sendintranettoie.png)
2. Click **Enabled**.
3. Refresh your policy in your organization and then view the affected sites in Microsoft Edge.<p>The site shows a message in Microsoft Edge, saying that the page needs IE. At the same time, the page opens in IE11; in a new frame if it's not yet running, or in a new tab if it is.
## Related topics
* [Blog: How Microsoft Edge and Internet Explorer 11 on Windows 10 work better together in the Enterprise](http://go.microsoft.com/fwlink/?LinkID=624035)
* [Enterprise Mode Site List Manager download](http://go.microsoft.com/fwlink/?LinkId=394378)
* [Enterprise Mode for Internet Explorer 11 (IE11)](http://go.microsoft.com/fwlink/p/?linkid=618377)
* [Set the default browser using Group Policy]( http://go.microsoft.com/fwlink/?LinkId=620714)
 
 

169
browsers/edge/hardware-and-software-requirements.md Normal file
View File

@ -0,0 +1,169 @@
---
Description: Microsoft Edge is pre-installed on all Windows 10-capable devices that meet the minimum system requirements and are on the supported language list.
ms.assetid: 3C5BC4C4-1060-499E-9905-2504EA6DC6AA
ms.prod: edge
ms.mktglfcycl: support
ms.sitesec: library
ms.pagetype: appcompat
title: Microsoft Edge requirements and language support
---
# Microsoft Edge requirements and language support
**Last updated**
- November 12, 2015
**Applies to:**
- Windows 10
- Windows 10 Mobile
Microsoft Edge is pre-installed on all Windows 10-capable devices that meet the minimum system requirements and are on the supported language list.
## Minimum system requirements
Some of the components in this table might also need additional system resources. Check the component's documentation for more information.
| Item | Minimum requirements |
| ------------------ | -------------------------------------------- |
| Computer/processor | 1 gigahertz (GHz) or faster (32-bit (x86) or 64-bit (x64)) |
| Operating system | <ul><li>Windows 10 (32-bit or 64-bit)</li><li>Windows 10 Mobile</li></ul><p>**Note**<br> For specific Windows 10 Mobile requirements, see the [Minimum hardware requirements for Windows 10 Mobile](http://go.microsoft.com/fwlink/?LinkID=699266) topic. |
| Memory | <ul><li>Windows 10 (32-bit) - 1 GB</li><li>Windows 10 (64-bit) - 2 GB</li></ul> |
| Hard drive space | <ul><li>Windows 10 (32-bit) - 16 GB</li><li>Windows 10 (64-bit) - 20 GB</li></ul> |
| DVD drive | DVD-ROM drive (if installing from a DVD-ROM) |
| Display | Super VGA (800 x 600) or higher-resolution monitor with 256 colors |
| Graphics card | Microsoft DirectX 9 or later with Windows Display Driver Model (WDDM) 1.0 driver |
| Peripherals | Internet connection and a compatible pointing device |
 
## Supported languages
Microsoft Edge supports all of the same languages as Windows 10, including:
| Language | Country/Region | Code |
| ------------------------ | -------------- | ------ |
| Afrikaans (South Africa) | South Africa | af-ZA |
| Albanian (Albania) | Albania | sq-AL |
| Amharic | Ethiopia | am-ET |
| Arabic (Saudi Arabia) | Saudi Arabia | ar-SA |
| Armenian | Armenia | hy-AM |
| Assamese | India | as-IN |
| Azerbaijani (Latin, Azerbaijan) | Azerbaijan | az-Latn-AZ |
| Bangla (Bangladesh) | Bangladesh | bn-BD |
| Bangla (India) | India | bn-IN |
| Basque (Basque) | Spain | eu-ES |
| Belarusian (Belarus) | Belarus | be-BY |
| Bosnian (Latin) | Bosnia and Herzegovina | bs-Latn-BA |
| Bulgarian (Bulgaria) | Bulgaria | bg-BG |
| Catalan (Catalan) | Spain | ca-ES |
| Central Kurdish (Arabic) | Iraq | ku-Arab-IQ |
| Cherokee (Cherokee) | United States | chr-Cher-US |
| Chinese (Hong Kong SAR) | Hong Kong Special Administrative Region | zh-HK |
| Chinese (Simplified, China) | People's Republic of China | zh-CN |
| Chinese (Traditional, Taiwan) | Taiwan | zh-TW |
| Croatian (Croatia) | Croatia | hr-HR |
| Czech (Czech Republic) | Czech Republic | cs-CZ |
| Danish (Denmark) | Denmark | da-DK |
| Dari | Afghanistan | prs-AF |
| Dutch (Netherlands) | Netherlands | nl-NL |
| English (United Kingdom) | United Kingdom | en-GB |
| English (United States) | United States | en-US |
| Estonian (Estonia) | Estonia | et-EE |
| Filipino (Philippines) | Philippines | fil-PH |
| Finnish (Finland) | Finland | fi_FI |
| French (Canada) | Canada | fr-CA |
| French (France) | France | fr-FR |
| Galician (Galician) | Spain | gl-ES |
| Georgian | Georgia | ka-GE |
| German (Germany) | Germany | de-DE |
| Greek (Greece) | Greece | el-GR |
| Gujarati | India | gu-IN |
| Hausa (Latin, Nigeria) | Nigeria | ha-Latn-NG |
| Hebrew (Israel) | Israel | he-IL |
| Hindi (India) | India | hi-IN |
| Hungarian (Hungary) | Hungary | hu-HU |
| Icelandic | Iceland | is-IS |
| Igbo | Nigeria | ig-NG |
| Indonesian (Indonesia) | Indonesia | id-ID |
| Irish | Ireland | ga-IE |
| isiXhosa | South Africa | xh-ZA |
| isiZulu | South Africa | zu-ZA |
| Italian (Italy) | Italy | it-IT |
| Japanese (Japan) | Japan | ja-JP |
| Kannada | India | kn-IN |
| Kazakh (Kazakhstan) | Kazakhstan | kk-KZ |
| Khmer (Cambodia) | Cambodia | km-KH |
| K'iche' | Guatemala | quc-Latn-GT |
| Kinyarwanda | Rwanda | rw-RW |
| KiSwahili | Kenya, Tanzania | sw-KE |
| Konkani | India | kok-IN |
| Korean (Korea) | Korea | ko-KR |
| Kyrgyz | Kyrgyzstan | ky-KG |
| Lao (Laos) | Lao P.D.R. | lo-LA |
| Latvian (Latvia) | Latvia | lv-LV |
| Lithuanian (Lithuania) | Lithuania | lt-LT |
| Luxembourgish (Luxembourg) | Luxembourg | lb-LU |
| Macedonian (Former Yugoslav Republic of Macedonia) | Macedonia (FYROM) | mk-MK |
| Malay (Malaysia) | Malaysia, Brunei, and Singapore | ms-MY |
| Malayalam | India | ml-IN |
| Maltese | Malta | mt-MT |
| Maori | New Zealand | mi-NZ |
| Marathi | India | mr-IN |
| Mongolian (Cyrillic) | Mongolia | mn-MN |
| Nepali | Federal Democratic Republic of Nepal | ne-NP |
| Norwegian (Nynorsk) | Norway | nn-NO |
| Norwegian, Bokmål (Norway) | Norway | nb-NO |
| Odia | India | or-IN |
| Polish (Poland) | Poland | pl-PL |
| Portuguese (Brazil) | Brazil | pt-BR |
| Portuguese (Portugal) | Portugal | pt-PT |
| Punjabi | India | pa-IN |
| Punjabi (Arabic) | Pakistan | pa-Arab-PK |
| Quechua | Peru | quz-PE |
| Romanian (Romania) | Romania | ro-RO |
| Russian (Russia) | Russia | ru-RU |
| Scottish Gaelic | United Kingdom | gd-GB |
| Serbian (Cyrillic, Bosnia, and Herzegovina) | Bosnia and Herzegovina | sr-Cyrl-BA |
| Serbian (Cyrillic, Serbia) | Serbia | sr-Cyrl-RS |
| Serbian (Latin, Serbia) | Serbia | sr-Latn-RS |
| Sesotho sa Leboa | South Africa | nso-ZA |
| Setswana (South Africa) | South Africa and Botswana | tn-ZA |
| Sindhi (Arabic) | Pakistan | sd-Arab-PK |
| Sinhala | Sri Lanka | si-LK |
| Slovak (Slovakia) | Slovakia | sk-SK |
| Slovenian (Slovenia) | Slovenia | sl-SL |
| Spanish (Mexico) | Mexico | es-MX |
| Spanish (Spain, International Sort) | Spain | en-ES |
| Swedish (Sweden) | Sweden | sv-SE |
| Tajik (Cyrillic) | Tajikistan | tg-Cyrl-TJ |
| Tamil (India) | India and Sri Lanka | ta-IN |
| Tatar | Russia | tt-RU |
| Telugu | India | te-IN |
| Thai (Thailand) | Thailand | th-TH |
| Tigrinya (Ethiopia) | Ethiopia | ti-ET |
| Turkish (Turkey) | Turkey | tr-TR |
| Turkmen | Turkmenistan | tk-TM |
| Ukrainian (Ukraine) | Ukraine | uk-UA |
| Urdu | Pakistan | ur-PK |
| Uyghur | People's Republic of China | ug-CN |
| Uzbek (Latin, Uzbekistan) | Uzbekistan | uz-Latn-UZ |
| Valencian | Spain | ca-ES-valencia |
| Vietnamese | Vietnam | vi-VN |
| Welsh | United Kingdom | cy-GB |
| Wolof | Senegal | wo-SN |
| Yoruba | Nigeria | yo-NG |
 
 
 

BIN
browsers/edge/images/edge-emie-grouppolicysitelist.png Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 46 KiB

BIN
browsers/edge/images/edge-emie-registrysitelist.png Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 40 KiB

BIN
browsers/edge/images/emie_open_in_ie.png Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 10 KiB

BIN
browsers/edge/images/emieopeninie.png Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 10 KiB

BIN
browsers/edge/images/sendintranettoie.png Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 28 KiB

56
browsers/edge/microsoft-edge-deployment-guide-for-it-pros.md Normal file
View File

@ -0,0 +1,56 @@
---
Description: Microsoft Edge is the new, default web browser for Windows 10, helping you to experience modern web standards, better performance, improved security, and increased reliability.
ms.assetid: 70377735-B2F9-4B0B-9658-4CF7C1D745BB
ms.prod: edge
ms.mktglfcycl: general
ms.sitesec: library
title: Microsoft Edge - Deployment Guide for IT Pros
---
# Microsoft Edge - Deployment Guide for IT Pros
**Last updated**
- July 28, 2015
**Applies to:**
- Windows 10
- Windows 10 Mobile
Microsoft Edge is the new, default web browser for Windows 10, helping you to experience modern web standards, better performance, improved security, and increased reliability. Microsoft Edge also introduces new features like Web Note, Reading View, and Cortana that you can use along with your normal web browsing abilities.
Microsoft Edge lets you stay up-to-date through the Windows Store and to manage your enterprise through Group Policy or your mobile device management (MDM) tools.
<p>**Note**<br>This content isn't meant to be a step-by-step guide, so not everything that's talked about in this guide will be necessary for you to manage and deploy Microsoft Edge in your company.
## In this section
| Topic | Description |
| -----------------------| ----------------------------------- |
| [Microsoft Edge requirements and language support](hardware-and-software-requirements.md) | Microsoft Edge is pre-installed on all Windows 10-capable devices that meet the minimum system requirements and are on the supported language list.|
| [Available policies for Microsoft Edge](available-policies.md) | Microsoft Edge works with Group Policy and Microsoft Intune to help you manage your organization's computer settings. <p>Group Policy objects (GPO's) can include registry-based Administrative Template policy settings, security settings, software deployment information, scripts, folder redirection, and preferences. By using Group Policy and Intune, you can set up a policy setting once, and then copy that setting onto many computers. For example, you can set up multiple security settings in a GPO that's linked to a domain, and then apply all of those settings to every computer in the domain. |
| [Use Enterprise Mode to improve compatibility](emie-to-improve-compatibility.md) | If you have specific web sites and apps that you know have compatibility problems with Microsoft Edge, you can use the Enterprise Mode site list so that the web sites will automatically open using Internet Explorer 11. Additionally, if you know that your intranet sites aren't going to work properly with Microsoft Edge, you can set all intranet sites to automatically open using IE11. <p>Using Enterprise Mode means that you can continue to use Microsoft Edge as your default browser, while also ensuring that your apps continue working on IE11. |
## Interoperability goals and enterprise guidance
Our primary goal is that your modern websites work in Microsoft Edge. To that end, we've made Microsoft Edge the default browser.
However, if you're running web apps that continue to use:
* ActiveX controls
* x-ua-compatible headers
* &lt;meta&gt; tags
* Enterprise mode or compatibility view to address compatibility issues
* legacy document modes
You'll need to keep running them using IE11. If you don't have IE11 installed anymore, you can download it from the Windows Store or from the [Internet Explorer 11 download page](http://go.microsoft.com/fwlink/p/?linkid=290956). Alternatively, you can also use Enterprise Mode with Microsoft Edge to transition only the sites that need these technologies to load in IE11. For info about Enterprise Mode and Edge, see [Use Enterprise Mode to improve compatibility](emie-to-improve-compatibility.md).
## Related topics
* [Download Internet Explorer 11](http://go.microsoft.com/fwlink/p/?linkid=290956)

9
browsers/internet-explorer-11/TOC.md Normal file
View File

@ -0,0 +1,9 @@
#Table of Contents
#[Internet Explorer 11](internet-explorer-11.md)
##[ActiveX installation using group policy](ie11-deploy-guide/activex-installation-using-group-policy.md)
##[Add multiple sites to the Enterprise Mode site list using a file and the Windows 10 Enterprise Mode Site List Manager tool](ie11-deploy-guide/add-multiple-sites-to-the-enterprise-mode-site-list-using-a-file-and-enterprise-mode-site-list-manager.md)
##[Add multiple sites to the Enterprise Mode site list using a file and the Windows 7 and Windows 8.1 Enterprise Mode Site List Manager tool](ie11-deploy-guide/add-multiple-sites-to-the-enterprise-mode-site-list-using-a-file-and-the-enterprise-mode-manager.md)
##[Add sites to the Enterprise Mode site list using the Windows 10 Enterprise Mode Site List Manager tool](ie11-deploy-guide/add-sites-to-the-enterprise-mode-site-list-using-the-enterprise-mode-site-list-manager.md)
##[Add sites to the Enterprise Mode site list using the Windows 7 and Windows 8.1 Enterprise Mode Site List Manager tool](ie11-deploy-guide/add-sites-to-the-enterprise-mode-site-list-using-the-windows-7-and-windows-8-1-enterprise-mode-site-list-manager.md)
##[Administrative templates and Internet Explorer 11](ie11-deploy-guide/administrative-templates-and-internet-explorer-11.md)
##[Auto configuration and auto proxy problems with Internet Explorer 11](ie11-deploy-guide/auto-configuration-and-auto-proxy-problems-with-internet-explorer-11.md)

42
browsers/internet-explorer-11/ie11-deploy-guide/activex-installation-using-group-policy.md Normal file
View File

@ -0,0 +1,42 @@
---
Description: ActiveX installation using group policy
ms.assetid: 59185370-558c-47e0-930c-8a5ed657e9e3
ms.prod: IE11
ms.mktglfcycl: deploy
ms.sitesec: library
ms.pagetype: security
title: ActiveX installation using group policy
---
# ActiveX installation using group policy
ActiveX controls are installed and invoked using the HTML object tag with the CODEBASE attribute. This attribute, through a URL, makes Internet Explorer:
- Get the ActiveX control if it's not already installed.
- Download the installation package.
- Perform trust verification on the object.
- Prompt for installation permission, using the IE Information Bar.
During installation, the rendering page registers and invokes the control, so that after installation, any standard user can invoke the control.
**Important**<br>ActiveX control installation requires administrator-level permissions.
## Group Policy for the ActiveX Installer Service
You use the ActiveX Installer Service (AXIS) and Group Policy to manage your ActiveX control deployment. The AXIS-related settings can be changed using either the Group Policy Management Console (GPMC) or the Local Group Policy Editor, and include:
- **Approved Installation Sites for ActiveX Controls.** A list of approved installation sites used by AXIS to determine whether it can install a particular ActiveX control.
- **ActiveX installation policy for sites in trusted zones.** Identifies how AXIS should behave when a website tries to install an ActiveX control. First, AXIS looks to see if the site appears in either the list of approved installation sites or in the **Trusted sites** zone. If the does, then AXIS checks to make sure the control meets your company's policy requirements. If the ActiveX control meets all of these requirements, the control is installed.
For more information about the ActiveX Installer Service, see [Administering the ActiveX Installer Service in Windows 7](http://go.microsoft.com/fwlink/?LinkId=214503).
 
 

109
browsers/internet-explorer-11/ie11-deploy-guide/add-multiple-sites-to-enterprise-mode-site-list-using-the-version-1-schema-and-enterprise-mode-tool.md Normal file
View File

@ -0,0 +1,109 @@
---
Description: You can add multiple sites to your Enterprise Mode site list by creating a custom text (TXT) or Extensible Markup Language (XML) file of problematic sites and then adding it in the Bulk add from file area of the Enterprise Mode Site List Manager tool.
ms.assetid: 20AF07C4-051A-451F-9C46-5A052D9AE27C
ms.prod: IE11
ms.mktglfcycl: deploy
ms.sitesec: library
ms.pagetype: appcompat
title: Add multiple sites to the Enterprise Mode site list using a file and the Windows 7 and Windows 8.1 Enterprise Mode Site List Manager tool
---
# Add multiple sites to the Enterprise Mode site list using a file and the Windows 7 and Windows 8.1 Enterprise Mode Site List Manager tool
**Last updated**
- November 12, 2015
**Applies to:**
- Windows 8.1
- Windows 7
You can add multiple sites to your Enterprise Mode site list by creating a custom text (TXT) or Extensible Markup Language (XML) file of problematic sites and then adding it in the **Bulk add from file** area of the Enterprise Mode Site List Manager tool. You can only add specific URLs, not Internet or Intranet Zones.
If you want to add your websites one at a time, see Add sites to the [Enterprise Mode site list using the Windows 7 and Windows 8.1 Enterprise Mode Site List Manager tool](aadd-single-sites-to-enterprise-mode-site-list-using-the-version-1-enterprise-mode-tool.md).
## Create an Enterprise Mode site list (TXT) file
You can create and use a custom text file to add multiple sites to your Enterprise Mode site list at the same time. <br><br>**Important**<br>This text file is only lets you add multiple sites at the same time. You can’t use this file to deploy Enterprise Mode into your company.
You must separate each site using commas or carriage returns. For example:
```
microsoft.com, bing.com, bing.com/images
```
**-OR-**
```
microsoft.com
bing.com
bing.com/images
```
## Create an Enterprise Mode site list (XML) file using the v.1 version of the Enterprise Mode schema
You can create and use a custom XML file with the Enterprise Mode Site List Manager tool to add multiple sites to your Enterprise Mode site list at the same time. For more info about the v.1 version of the Enterprise Mode schema, see [Enterprise Mode schema v.1 guidance for Windows 7 and Windows 8.1 devices](enterprise-mode-schema-version-1-guidance.md).
Each XML file must include:
- **Version number.** This number must be incremented with each version of the Enterprise Mode site list, letting Internet Explorer know whether the list is new. Approximately 65 seconds after Internet Explorer 11 starts, it compares your site list version to the stored version number. If your file has a higher number, the newer version is loaded. <br><br>**Important**<br>After this check, IE11 won’t look for an updated list again until you restart the browser.
- **&lt;emie&gt; tag.** This tag specifies the domains and domain paths that must be rendered using IE7 Enterprise Mode, IE8 Enterprise Mode, or the default IE11 browser environment.<br><br>**Important**<br>If you decide a site requires IE7 Enterprise Mode, you must add `forceCompatView=”true”` to your XML file. That code tells Enterprise Mode to check for a `DOCTYPE` tag on the specified webpage. If there is, the site renders using Windows Internet Explorer 7. If there’s no tag, the site renders using Microsoft Internet Explorer 5.
- **&lt;docMode&gt; tag.**This tag specifies the domains and domain paths that need either to appear using the specific doc mode you assigned to the site. Enterprise Mode takes precedence over document modes, so sites that are already included in the Enterprise Mode site list won’t be affected by this update and will continue to load in Enterprise Mode, as usual. For more specific info about using document modes, see [Fix web compatibility issues using document modes and the Enterprise Mode site list](fix-compat-issues-with-doc-modes-and-enterprise-mode-site-list.md).
### Enterprise Mode v.1 XML schema example
The following is an example of what your XML file should look like when you’re done adding your sites. For more info about how to create your XML file, see [Enterprise Mode schema v.1 guidance for Windows 7 and Windows 8.1 Update devices](enterprise-mode-schema-version-1-guidance.md).
```
<rules version="1">
<emie>
<domain exclude="false">www.cpandl.com</domain>
<domain exclude="true">www.woodgrovebank.com</domain>
<domain exclude="false" forceCompatView="true">adatum.com</domain>
<domain exclude="true">contoso.com</domain>
<domain exclude="true">relecloud.com
<path exclude="false">/about</path>
</domain>
<domain exclude="false">fabrikam.com
<path exclude="true">/products</path>
</domain>
</emie>
<docMode>
<domain>contoso.com
<path docMode="7">/travel</path>
</domain>
<domain>fabrikam.com
<path docMode="7">/products</path>
</domain>
</docMode>
</rules>
```
To make sure your site list is up-to-date; wait 65 seconds after opening IE and then check that the `CurrentVersion` value in the `HKEY\CURRENT\USER\Software\Microsoft\Internet Explorer\Main\EnterpriseMode\` registry key matches the version number in your file.<br><br>**Important**<br>If `CurrentVersion` is not set or is wrong, it means that the XML parsing failed. This can mean that the XML file isn’t there, that there are access problems, or that the XML file format is wrong. Don’t manually change the `CurrentVersion` registry setting. You must make your changes to your site list and then update the list using the import function in the Windows 7 and Windows 8.1 Enterprise Mode Site List Manager tool.
## Add multiple sites to the Windows 7 and Windows 8.1 Enterprise Mode Site List Manager tool
After you create your .xml or .txt file, you can bulk add the sites to the Windows 7 and Windows 8.1 Enterprise Mode Site List Manager tool.
**To add multiple sites**
1. In the Windows 7 and Windows 8.1 Enterprise Mode Site List Manager tool, click **Bulk add from file**.
2. Go to your site list (either .txt or .xml) to add the included sites to the tool, and then click **Open**.<p>
Each site is validated and if successful, added to the global site list when you click **OK** to close the menu. If a site doesn’t pass validation, you can try to fix the issues or pick the site and click **Add to list** to ignore the validation problem. For more information about fixing validation problems, see [Fix validation problems using the Enterprise Mode Site List Manager tool](fix-compat-issues-with-doc-modes-and-enterprise-mode-site-list.md).
3. Click **OK** to close the **Bulk add sites to the list** menu.
4. On the **File** menu, click **Save to XML**, and save your file.<p>
You can save the file locally or to a network share. However, you must make sure you deploy it to the location specified in your registry key. For more information about the registry key, see [Turn on Enterprise Mode and use a site list](turn-on-enterprise-mode-and-use-a-site-list.md).
## Next steps
After you’ve added all of your sites to the tool and saved the file to XML, you can configure the rest of the Enterprise Mode functionality to use it. You can also turn Enterprise Mode on locally, so your users have the option to use Enterprise Mode on individual websites from the **Tools** menu. For more information, see [Turn on local control and logging for Enterprise Mode](turn-on-local-control-and-logging-for-enterprise-mode.md).
## Related topics
- [Enterprise Mode schema v.1 guidance for Windows 7 and Windows 8.1 Update devices](enterprise-mode-schema-version-1-guidance.md)
- [Download the Enterprise Mode Site List Manager for Windows 7 and Windows 8.1 tool](http://go.microsoft.com/fwlink/?LinkID=394378)
 
 

115
browsers/internet-explorer-11/ie11-deploy-guide/add-multiple-sites-to-enterprise-mode-site-list-using-the-version-2-schema-and-enterprise-mode-tool.md Normal file
View File

@ -0,0 +1,115 @@
---
Description: You can add multiple sites to your Enterprise Mode site list by creating a custom text (TXT) or Extensible Markup Language (XML) file of problematic sites and then adding it in the Bulk add from file area of the Windows 10 Enterprise Mode Site List Manager tool. You can only add specific URLs, not Internet or Intranet Zones.To add your websites one at a time, see Add sites to the Enterprise Mode site list using the Windows 10 Enterprise Mode Site List Manager tool.
ms.assetid: da659ff5-70d5-4852-995e-4df67c4871dd
ms.prod: IE11
ms.mktglfcycl: deploy
ms.sitesec: library
ms.pagetype: appcompat
title: Add multiple sites to the Enterprise Mode site list using a file and the Windows 10 Enterprise Mode Site List Manager tool
---
# Add multiple sites to the Enterprise Mode site list using a file and the Windows 10 Enterprise Mode Site List Manager tool
**Last updated**
- November 12, 2015
**Applies to:**
- Windows 10
You can add multiple sites to your Enterprise Mode site list by creating a custom text (TXT) or Extensible Markup Language (XML) file of problematic sites and then adding it in the **Bulk add from file** area of the Windows 10 Enterprise Mode Site List Manager tool. You can only add specific URLs, not Internet or Intranet Zones.
To add your websites one at a time, see [Add sites to the Enterprise Mode site list using the Windows 10 Enterprise Mode Site List Manager tool](add-single-sites-to-enterprise-mode-site-list-using-the-version-2-enterprise-mode-tool.md).
## Create an Enterprise Mode site list (TXT) file
You can create and use a custom text file with the Windows 10 Enterprise Mode Site List Manager tool to add multiple sites to your Enterprise Mode site list at the same time.<br><br>**Important:**<br>This text file is only lets you add multiple sites at the same time. You can’t use this file to deploy Enterprise Mode into your company.
You must separate each site using commas or carriage returns. For example:
```
microsoft.com, bing.com, bing.com/images
```
**-OR-**
```
microsoft.com
bing.com
bing.com/images
```
## Create an Enterprise Mode site list (XML) file using the v.2 version of the Enterprise Mode schema
You can create and use a custom XML file with the Windows 10 Enterprise Mode Site List Manager tool to add multiple sites to your Enterprise Mode site list at the same time.
Each XML file must include:
- **site-list version number**. This number must be incremented with each version of the Enterprise Mode site list, letting Internet Explorer know whether the list is new. Approximately 65 seconds after Internet Explorer 11 starts, it compares your site list version to the stored version number. If your file has a higher number, the newer version is loaded. <br><br>**Important**<br>After this check, IE11 won’t look for an updated list again until you restart the browser. 
- **&lt;compat-mode&gt; tag.** This tag specifies what compatibility setting are used for specific sites or domains.
- **&lt;open-in&gt; tag.** This tag specifies what browser opens for each sites or domain.
### Enterprise Mode v.2 XML schema example
The following is an example of what your XML file should look like when you’re done adding your sites. For more info about how to create your XML file, see [Enterprise Mode schema v.2 guidance for Windows 10 devices](enterprise-mode-schema-version-2-guidance.md).
```
<site-list version="205">
<!--- File creation header --->
<created-by>
<tool>EnterpriseSitelistManager</tool>
<version>10240</version>
<date-created>20150728.135021</date-created>
</created-by>
<!--- Begin Site List --->
<site url="www.cpandl.com">
<compat-mode>IE8Enterprise</compat-mode>
<open-in>MSEdge</open-in>
</site>
<site url="www.cpandl.com/images">
<compat-mode>IE7Enterprise</compat-mode>
<open-in>IE11</open-in>
</site>
<site url="contoso.com">
<compat-mode>default</compat-mode>
<open-in>IE11</open-in>
</site>
</site-list>
```
In the above example, the following is true:
- cpandl.com, as the main domain, must use IE8 Enterprise Mode. However, bing.com/images must use IE7 Enterprise Mode.
- contoso.com, and all of its domain paths, can use the default compatibility mode for the site.
To make sure your site list is up-to-date; wait 65 seconds after opening IE and then check that the `CurrentVersion` value in the `HKEY\CURRENT\USER\Software\Microsoft\Internet Explorer\Main\EnterpriseMode\` registry key matches the version number in your file. <br><br>**Important**<br>If `CurrentVersion` is not set or is wrong, it means that the XML parsing failed. This can mean that the XML file isn’t there, that there are access problems, or that the XML file format is wrong. Don’t manually change the `CurrentVersion` registry setting. You must make your changes to your site list and then update the list using the import function in the Windows 10 Enterprise Mode Site List Manager tool.
## Add multiple sites to the Windows 10 Enterprise Mode Site List Manager tool
After you create your .xml or .txt file, you can bulk add the sites to the Windows 10 Enterprise Mode Site List Manager tool.
**To add multiple sites**
1. In the Windows 10 Enterprise Mode Site List Manager tool, click **Bulk add from file**.
2. Go to your site list (either .txt or .xml) to add the included sites to the tool, and then click **Open**.<p>
Each site is validated and if successful, added to the global site list when you click **OK** to close the menu. If a site doesn’t pass validation, you can try to fix the issues or pick the site and click **Add to list** to ignore the validation problem. For more information about fixing validation problems, see [Fix validation problems using the Enterprise Mode Site List Manager tool](fix-validation-problems-using-the-enterprise-mode-site-list-manager-tool.md).
3. Click **OK** to close the **Bulk add sites to the list** menu.
4. On the **File** menu, click **Save to XML**, and save your file.<p>
You can save the file locally or to a network share. However, you must make sure you deploy it to the location specified in your registry key. For more information about the registry key, see [Turn on Enterprise Mode and use a site list](turn-on-enterprise-mode-and-use-a-site-list.md).
## Next steps
After you’ve added all of your sites to the tool and saved the file to XML, you can configure the rest of the Enterprise Mode functionality to use it. You can also turn Enterprise Mode on locally, so your users have the option to use Enterprise Mode on individual websites from the **Tools** menu. For more information, see [Turn on local control and logging for Enterprise Mode](turn-on-local-control-and-logging-for-enterprise-mode.md).
## Related topics
- [Download the Enterprise Mode Site List Manager for Windows 10 tool](http://go.microsoft.com/fwlink/?LinkId=716853)
- [Enterprise Mode schema v.2 guidance for Windows 10 devices](enterprise-mode-schema-version-2-guidance.md)
 
 

63
browsers/internet-explorer-11/ie11-deploy-guide/add-single-sites-to-enterprise-mode-site-list-using-the-version-1-enterprise-mode-tool.md Normal file
View File

@ -0,0 +1,63 @@
---
Description: Enterprise Mode is a compatibility mode that runs on Internet Explorer 11, letting websites render using a modified browser configuration that''s designed to emulate either Windows Internet Explorer 7 or Windows Internet Explorer 8, avoiding the common compatibility problems associated with web apps written and tested on older versions of Internet Explorer.
ms.assetid: 042E44E8-568D-4717-8FD3-69DD198BBF26
ms.prod: IE11
ms.mktglfcycl: deploy
ms.sitesec: library
ms.pagetype: appcompat
title: Add sites to the Enterprise Mode site list using the Windows 7 and Windows 8.1 Enterprise Mode Site List Manager tool
---
# Add single sites to the Enterprise Mode site list using the Windows 7 and Windows 8.1 Enterprise Mode Site List Manager tool
**Last updated**
- November 12, 2015
**Applies to:**
- Windows 8.1
- Windows 7
- Windows Server 2008 R2 with Service Pack 1 (SP1)
Enterprise Mode is a compatibility mode that runs on Internet Explorer 11, letting websites render using a modified browser configuration that’s designed to emulate either Windows Internet Explorer 7 or Windows Internet Explorer 8, avoiding the common compatibility problems associated with web apps written and tested on older versions of Internet Explorer.<p>**Important**<br>You can only add specific URLs, not Internet or Intranet Zones.
<p>**Note**<br>If you need to include a lot of sites, instead of adding them one at a time, you can create a list of websites and add them all at the same time. For more information, see [Add multiple sites to the Enterprise Mode site list using a file and the Windows 7 and 8.1 Enterprise Mode Site List Manager tool](add-single-sites-to-enterprise-mode-site-list-using-the-version-1-enterprise-mode-tool.md).
## Adding a site to your compatibility list
You can add individual sites to your compatibility list by using the Enterprise Mode Site List Manager tool.
<p>**Note**<br>If you're using Windows 10 and the v.2 version of the Enterprise Mode schema, you'll need to use the Windows 10 Enterprise Mode Site List Manager tool. For more info, see [Add sites to the Enterprise Mode site list using the Windows 10 Enterprise Mode Site List Manager tool](aadd-single-sites-to-enterprise-mode-site-list-using-the-version-2-enterprise-mode-tool.md).
**To add a site to your compatibility list using the Windows 7 and Windows 8.1 Enterprise Mode Site List Manager tool**
1. In the Windows 7 and Windows 8.1 Enterprise Mode Site List Manager tool, click **Add**.
2. Type the URL for the website that’s experiencing compatibility problems, like *&lt;domain&gt;.com* or *&lt;domain&gt;.com*/*&lt;path&gt;* into the **URL** box.<p>
Don't include the `http://` or `https://` designation. The tool automatically tries both versions during validation.
3. Type any comments about the website into the **Notes about URL** box.<p>
Administrators can only see comments while they’re in this tool.
4. Choose **IE7 Enterprise Mode**, **IE8 Enterprise Mode**, or the appropriate document mode for sites that must be rendered using the emulation of a previous version of IE, or pick **Default IE** if the site should use the latest version of IE.
The path within a domain can require a different compatibility mode from the domain itself. For example, the domain might look fine in the default IE11 browser, but the path might have problems and require the use of Enterprise Mode. If you added the domain previously, your original compatibility choice is still selected. However, if the domain is new, **IE8 Enterprise Mode** is automatically selected.
Enterprise Mode takes precedence over document modes, so sites that are already included in the Enterprise Mode site list won’t be affected by this update and will continue to load in Enterprise Mode, as usual. For more specific info about using document modes, see [Fix web compatibility issues using document modes and the Enterprise Mode site list](fix-compat-issues-with-doc-modes-and-enterprise-mode-site-list.md).
5. Click **Save** to validate your website and to add it to the site list for your enterprise.<p>
If your site passes validation, it’s added to the global compatibility list. If the site doesn’t pass validation, you’ll get an error message explaining the problem. You’ll then be able to either cancel the site or ignore the validation problem and add it to your list anyway.
6. On the **File** menu, go to where you want to save the file, and then click **Save to XML**.<p>
You can save the file locally or to a network share. However, you must make sure you deploy it to the location specified in your registry key. For more information about the registry key, see [Turn on local control and logging for Enterprise Mode](turn-on-local-control-and-logging-for-enterprise-mode.md).
## Next steps
After you’ve added all of your sites to the tool and saved the file to XML, you can configure the rest of the Enterprise Mode functionality to use it. You can also turn Enterprise Mode on locally, so your users have the option to use Enterprise Mode on individual websites from the **Tools** menu. For more information, see [Turn on local control and logging for Enterprise Mode](turn-on-local-control-and-logging-for-enterprise-mode.md).
## Related topics
- [Download the Enterprise Mode Site List Manager for Windows 7 and Windows 8.1 tool](http://go.microsoft.com/fwlink/?LinkID=394378)
 
 

78
browsers/internet-explorer-11/ie11-deploy-guide/add-single-sites-to-enterprise-mode-site-list-using-the-version-2-enterprise-mode-tool.md Normal file
View File

@ -0,0 +1,78 @@
---
Description: Enterprise Mode is a compatibility mode that runs on Internet Explorer 11, letting websites render using a modified browser configuration that''s designed to emulate either Windows Internet Explorer 8 or Windows Internet Explorer 7, avoiding the common compatibility problems associated with web apps written and tested on older versions of Internet Explorer.
ms.assetid: 513e8f3b-fedf-4d57-8d81-1ea4fdf1ac0b
ms.prod: IE11
ms.mktglfcycl: deploy
ms.sitesec: library
ms.pagetype: appcompat
title: Add sites to the Enterprise Mode site list using the Windows 10 Enterprise Mode Site List Manager tool
---
# Add single sites to the Enterprise Mode site list using the Windows 10 Enterprise Mode Site List Manager tool
**Last updated**
- November 12, 2015
**Applies to:**
- Windows 10
Enterprise Mode is a compatibility mode that runs on Internet Explorer 11, letting websites render using a modified browser configuration that’s designed to emulate either Windows Internet Explorer 8 or Windows Internet Explorer 7, avoiding the common compatibility problems associated with web apps written and tested on older versions of Internet Explorer.<p>**Important**<br>You can only add specific URLs, not Internet or Intranet Zones.
<p>**Note**<br>If you need to include a lot of sites, instead of adding them one at a time, you can create a list of websites and add them all at the same time. For more information, see the [Add multiple sites to the Enterprise Mode site list using a file and the Windows 10 Enterprise Mode Site List Manager tool](add-multiple-sites-to-enterprise-mode-site-list-using-the-version-2-schema-and-enterprise-mode-tool.md) or the [Add multiple sites to the Enterprise Mode site list using a file and the Windows 7 and 8.1 Enterprise Mode Site List Manager tool](add-multiple-sites-to-enterprise-mode-site-list-using-using-the-version-1-schema-and-enterprise-mode-tool.md) topic, based on your operating system.
## Adding a site to your compatibility list
You can add individual sites to your compatibility list by using the Enterprise Mode Site List Manager tool.<p>
**Note**<br>If you're using Windows 7 and Windows 8.1 or the v.1 version of the Enterprise Mode schema, you'll need to use the Windows 7 and Windows 8.1 Enterprise Mode Site List Manager tool. For more info, see [Add sites to the Enterprise Mode site list using the Windows 7 and Windows 8.1 Enterprise Mode Site List Manager tool](add-single-sites-to-enterprise-mode-site-list-using-the-version-1-enterprise-mode-tool.md).
**To add a site to your compatibility list using the Windows 10 Enterprise Mode Site List Manager tool**
1. In the Windows 10 Enterprise Mode Site List Manager tool, click **Add**.
2. Type the URL for the website that’s experiencing compatibility problems, like *&lt;domain&gt;.com* or *&lt;domain&gt;.com*/*&lt;path&gt;* into the **URL** box.<p>
Don't include the `http://` or `https://` designation. The tool automatically tries both versions during validation.
3. Type any comments about the website into the **Notes about URL** box.<p>
Administrators can only see comments while they’re in this tool.
4. In the **Compat Mode** box, choose one of the following:
- **IE8Enterprise**. Loads the site in IE8 Enterprise Mode.
- **IE7Enterprise**. Loads the site in IE7 Enterprise Mode.
- **IE\[*x*\]**. Where \[x\] is the document mode number and the site loads in the specified document mode.
- **Default Mode**. Loads the site using the default compatibility mode for the page.
The path within a domain can require a different compatibility mode from the domain itself. For example, the domain might look fine in the default IE11 browser, but the path might have problems and require the use of Enterprise Mode. If you added the domain previously, your original compatibility choice is still selected. However, if the domain is new, **IE8 Enterprise Mode** is automatically selected.
Enterprise Mode takes precedence over document modes, so sites that are already included in the Enterprise Mode site list won’t be affected by this update and will continue to load in Enterprise Mode, as usual. For more specific info about using document modes, see [Fix web compatibility issues using document modes and the Enterprise Mode site list](fix-compat-issues-with-doc-modes-and-enterprise-mode-site-list.md).
5. In conjunction with the compatibility mode, you'll need to use the **Open in** box to pick which browser opens the site.
- **IE11**. Opens the site in IE11, regardless of which browser is opened by the employee.
- **MSEdge**. Opens the site in Microsoft Edge, regardless of which browser is opened by the employee.
- **None**. Opens in whatever browser the employee chooses.
6. Click **Save** to validate your website and to add it to the site list for your enterprise.<p>
If your site passes validation, it’s added to the global compatibility list. If the site doesn’t pass validation, you’ll get an error message explaining the problem. You’ll then be able to either cancel the site or ignore the validation problem and add it to your list anyway.
7. On the **File** menu, go to where you want to save the file, and then click **Save to XML**.<p>
You can save the file locally or to a network share. However, you must make sure you deploy it to the location specified in your registry key. For more information about the registry key, see [Turn on local control and logging for Enterprise Mode](turn-on-local-control-and-logging-for-enterprise-mode.md).
## Next steps
After you’ve added all of your sites to the tool and saved the file to XML, you can configure the rest of the Enterprise Mode functionality to use it. You can also turn Enterprise Mode on locally, so your users have the option to use Enterprise Mode on individual websites from the **Tools** menu. For more information, see [Turn on local control and logging for Enterprise Mode](turn-on-local-control-and-logging-for-enterprise-mode.md).
## Related topics
- [Download the Enterprise Mode Site List Manager for Windows 10 tool](http://go.microsoft.com/fwlink/?LinkId=716853)
 
 

70
browsers/internet-explorer-11/ie11-deploy-guide/administrative-templates-and-ie11.md Normal file
View File

@ -0,0 +1,70 @@
---
Description: Administrative templates and Internet Explorer 11
ms.assetid: 2b390786-f786-41cc-bddc-c55c8a4c5af3
ms.prod: IE11
ms.mktglfcycl: deploy
ms.sitesec: library
ms.pagetype: security
title: Administrative templates and Internet Explorer 11
---
# Administrative templates and Internet Explorer 11
Administrative Templates are made up of a hierarchy of policy categories and subcategories that define how your policy settings appear in the Local Group Policy Editor, including:
- What registry locations correspond to each setting.
- What value options or restrictions are associated with each setting.
- The default value for many settings.
- Text explanations about each setting and the supported version of Internet Explorer.
For a conceptual overview of Administrative Templates, see [Managing Group Policy ADMX Files Step-by-Step Guide](http://go.microsoft.com/fwlink/?LinkId=214519).
## What are Administrative Templates?
Administrative Templates are XML-based, multi-language files that define the registry-based Group Policy settings in the Local Group Policy Editor. There are two types of Administrative Templates:
- **ADMX.** A language-neutral setup file that states the number and type of policy setting, and the location by category, as it shows up in the Local Group Policy Editor.
- **ADML.** A language-specific setup file that provides language-related information to the ADMX file. This file lets the policy setting show up in the right language in the Local Group Policy Editor. You can add new languages by adding new ADML files in the required language.
## How do I store Administrative Templates?
As an admin, you can create a central store folder on your SYSVOL directory, named **PolicyDefinitions**. For example, %*SystemRoot*%\\PolicyDefinitions. This folder provides a single, centralized storage location for your Administrative Templates (both ADMX and ADML) files, so they can be used by your domain-based Group Policy Objects (GPOs).
<p>**Important**<br>Your Group Policy tools use the ADMX files in your store, ignoring any local copies. For more information about creating a central store, see [Scenario 1: Editing the Local GPO Using ADMX Files](http://go.microsoft.com/fwlink/?LinkId=276810).
## Administrative Templates-related Group Policy settings
When you install Internet Explorer 11, it updates the local administrative files, Inetres.admx and Inetres.adml, both located in the **PolicyDefinitions** folder.
<p>**Note**<br>You won't see the new policy settings if you try to view or edit your policy settings on a computer that isn't running IE11. To fix this, you can either install IE11, or you can copy the updated Inetres.admx and Inetres.adml files from another computer to the **PolicyDefinitions** folder on this computer.
IE11 provides these new policy settings, which are editable in the Local Group Policy Editor, and appear in the following policy paths:
- Computer Configuration\\Administrative Templates\\Windows Components\\
- User Configuration\\Administrative Templates\\Windows Components\\
|Catalog |Description |
| ------------------------------------------------ | --------------------------------------------|
|IE |Turns standard IE configuration on and off. |
|Internet Explorer\Accelerators |Sets up and manages Accelerators. |
|Internet Explorer\Administrator Approved Controls |Turns ActiveX controls on and off. |
|Internet Explorer\Application Compatibility |Turns the **Cut**, **Copy**, or **Paste** operations on or off. This setting also requires that `URLACTION_SCRIPT_PASTE` is set to **Prompt**. |
|Internet Explorer\Browser Menus |Shows or hides the IE menus and menu options.|
|Internet Explorer\Corporate Settings |Turns off whether you specify the code download path for each computer. |
|Internet Explorer\Delete Browsing History |Turns the **Delete Browsing History** settings on and off. |
|Internet Explorer\Internet Control Panel |Turns pages on and off in the **Internet Options** dialog box. Also turns on and off the subcategories that manage settings on the **Content**, **General**, **Security** and **Advanced** pages. |
|Internet Explorer\Internet Settings |Sets up and manages the **Advanced settings**, **AutoComplete**, **Display Settings**, and **URL Encoding** options. |
|Internet Explorer\Persistence Behavior |Sets up and manages the file size limits for Internet security zones. |
|Internet Explorer\Privacy |Turns various privacy-related features on and off. |
|Internet Explorer\Security Features |Turns various security-related features on and off in the browser, Windows Explorer, and other applications. |
|Internet Explorer\Toolbars |Turns on and off the ability for users to edit toolbars in the browser. You can also set the default toolbar buttons here. |
|RSS Feeds |Sets up and manages RSS feeds in the browser. |
## Editing Group Policy settings
Regardless which tool you're using to edit your Group Policy settings, you'll need to follow one of these guides for step-by-step editing instructions:
- **If you're using the Group Policy Management Console (GPMC) or the Local Group Policy Editor.** See [Edit Administrative Template Policy Settings](http://go.microsoft.com/fwlink/?LinkId=214521) for step-by-step instructions about editing your Administrative Templates.
- **If you're using GPMC with Advanced Group Policy Management (AGPM).** See [Checklist: Create, Edit, and Deploy a GPO](http://go.microsoft.com/fwlink/?LinkId=214522) for step-by-step instructions about how to check out a GPO from the AGPM archive, edit it, and request deployment.

55
browsers/internet-explorer-11/ie11-deploy-guide/auto-configuration-and-auto-proxy-problems-with-ie11.md Normal file
View File

@ -0,0 +1,55 @@
---
Description: Auto configuration and auto proxy problems with Internet Explorer 11
ms.assetid: 3fbbc2c8-859b-4b2e-abc3-de2c299e0938
ms.prod: IE11
ms.mktglfcycl: deploy
ms.sitesec: library
ms.pagetype: networking
title: Auto configuration and auto proxy problems with Internet Explorer 11
---
# Auto configuration and auto proxy problems with Internet Explorer 11
You might experience some problems using automatic configuration and auto-proxy with Internet Explorer 11.
## Branding changes aren't distributed using automatic configuration
If you've turned on the **Disable external branding of Internet Explorer** Group Policy Object, you won't be able to use automatic configuration to distribute your branding changes to your users' computers. When this object is turned on, it prevents the branding of IE by a non-Microsoft company or entity, such as an Internet service provider or Internet content provider. For more information about automatic configuration, see [Auto configuration settings for Internet Explorer 11](auto-configuration-settings-for-ie11.md) and [Automatic Configuration: Internet Explorer Customization Wizard](http://go.microsoft.com/fwlink/p/?linkid=327743). For more information about Group Policy settings, see [Group policy objects and Internet Explorer 11 (IE11)](gpo-and-ie11.md).
## Proxy server setup issues
If you experience issues while setting up your proxy server, you can try these troubleshooting steps:
- Check to make sure the proxy server address is right.
- Check that both **Automatically detect settings** and **Automatic configuration** are turned on in the browser.
- Check that the browser is pointing to the right automatic configuration script location.
**To check your proxy server address**
1. On the **Tools** menu, click **Internet Options**, and then **Connections**.
2. Click **Settings** or **LAN Settings**, and then look at your proxy server address.
3. If you have multiple proxy servers, click **Advanced** to look at all of the additional addresses.<p>**Note**<br>If IE11 uses a proxy server for local IP addresses, regardless whether you turned on the **Bypass Proxy Server for Local Addresses** option, see [Internet Explorer Uses Proxy Server for Local IP Address Even if the "Bypass Proxy Server for Local Addresses" Option Is Turned On](http://go.microsoft.com/fwlink/?LinkId=85652).
**To check that you've turned on the correct settings**
1. On the **Tools** menu, click **Internet Options**, and then click **Connections**.
2. Click **Settings** or **LAN Settings**.
3. In the **Automatic configuration** area, check that you've clicked the **Automatically detect settings** box. If you've turned on automatic configuration, check to make sure that you've also clicked the **Use automatic configuration script** box.<p>**Note**<br>If at this point everything is set up correctly, but the proxy server still isn't behaving properly, click the **Detect my network settings** box in the **Error** dialog box to try to detect the proxy server, again.
**To check that you're pointing to the correct automatic configuration script location**
1. On the **Tools** menu, click **Internet Options**, and then click **Connections**.
2. Click **Settings** or **LAN Settings**.
3. In the **Automatic configuration** area, check that you've chosen the **Use automatic configuration script** box, and that it has the correct location to your automatic configuration script or for your automatic proxy URL.
 
 

67
browsers/internet-explorer-11/ie11-deploy-guide/auto-configuration-settings-for-ie11.md Normal file
View File

@ -0,0 +1,67 @@
---
Description: Auto configuration settings for Internet Explorer 11
ms.assetid: 90308d59-45b9-4639-ab1b-497e5ba19023
ms.prod: IE11
ms.mktglfcycl: deploy
ms.sitesec: library
ms.pagetype: networking
title: Auto configuration settings for Internet Explorer 11
---
# Auto configuration settings for Internet Explorer 11
Automatic configuration lets you apply custom branding and graphics to your internal Internet Explorer installations, running on Windows 8.1 or Windows Server 2012 R2. For more information about adding custom branding and graphics to your IE package, see [IEAK 11: Customization guidelines for your Toolbar button and Favorites list icons](http://go.microsoft.com/fwlink/p/?linkid=327742).<p>**Important**<br>You'll only see and be able to use the **IE Customization Wizard 11 - Automatic Configuration** page if you're creating an internal IE installation package. For more information about the **IE Customization Wizard 11 - Automatic Configuration** page, see [Automatic Configuration: Internet Explorer Customization Wizard](http://go.microsoft.com/fwlink/p/?linkid=327743).
## Adding the automatic configuration registry key
For custom graphics and branding, add the `FEATURE\AUTOCONFIG\BRANDING` registry key to your IE installation package.<p>**Important**<br>Follow these directions carefully because serious problems can occur if you update your registry incorrectly. For added protection, back up your registry so you can restore it if a problem occurs.
**To add the registry key**
1. On the **Start** screen, type **regedit**, and then click **Regedit.exe**.
2. Right-click the `HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl` subkey, point to **New**, and then click **Key**.
3. Enter the new key name, `FEATURE\AUTOCONFIG\BRANDING`, and then press Enter.
4. Right-click `FEATURE\AUTOCONFIG\BRANDING`, point to **New**, and then click **DWORD (32-bit) Value**.
5. Enter the new DWORD value name, **iexplore.exe**, and then press Enter.
6. Right-click **iexplore.exe**, and then click **Modify**.
7. In the **Value data** box, enter **1**, and then click **OK**.
8. Exit the registry editor.
## Updating your automatic configuration settings
After adding the `FEATURE\AUTOCONFIG\BRANDING` registry key, you can change your automatic configuration settings to pick up the updated branding.
<p>**Important**<br>Your branding changes won't be added or updated if you've previously chosen the **Disable external branding of IE** setting in the `User Configuration\Administrative Templates\Windows Components\Internet Explorer` Group Policy object. This setting is intended to prevent branding by a third-party, like an Internet service or content provider. For more information about Group Policy, including videos and the latest technical documentation, see the [Group Policy TechCenter](http://go.microsoft.com/fwlink/?LinkId=214514).
**To update your settings**
1. Open the IE Customization Wizard 11, and go to the **Automatic Configuration** page.
2. Choose the **Automatically detect configuration settings** check box to allow automatic detection of browser settings.
3. Choose the **Enable Automatic Configuration** box to let you change the rest of the configuration options, including:
- **Automatically configure every box:** Type how often IE should check for configuration updates. Typing **0** (zero), or not putting in any number, means that automatic configuration only happens when the computer restarts.
- **Automatic Configuration URL (.INS file) box:** Type the location of your automatic configuration script.
- **Automatic proxy URL (.JS, .JVS, or .PAC file) box:** Type the location of your automatic proxy script.<p> **Important**<br>Internet Explorer 11 no longer supports using file server locations with your proxy configuration (.pac) files. To keep using your .pac files, you have to keep them on a web server and reference them using a URL, like *http://share/test.ins*.
If your branding changes aren't correctly deployed after running through this process, see [Auto configuration and auto proxy problems with Internet Explorer 11](auto-configuration-and-auto-proxy-problems-with-ie11.md).
## Locking your automatic configuration settings
You have two options to restrict your users' ability to override the automatic configuration settings, based on your environment.
- **Using Microsoft Active Directory.** Choose **Disable changing Automatic Configuration settings** from the Administrative Templates setting.
- **Not Using Active Directory.** Choose the **Disable changing Automatic Configuration settings** setting in the `User Configuration\Administrative Templates\Windows Components\Internet Explorer` Group Policy object.
 
 

48
browsers/internet-explorer-11/ie11-deploy-guide/auto-detect-settings-for-ie11.md Normal file
View File

@ -0,0 +1,48 @@
---
Description: Auto detect settings Internet Explorer 11
ms.assetid: c6753cf4-3276-43c5-aae9-200e9e82753f
ms.prod: IE11
ms.mktglfcycl: deploy
ms.sitesec: library
ms.pagetype: networking
title: Auto detect settings Internet Explorer 11
---
# Auto detect settings Internet Explorer 11
After you specify the specific settings related to automatic detection on your Dynamic Host Configuration Protocol (DHCP) and Domain Name System (DNS) servers, you can set up your users' browser settings from a central location.
Automatic detection works even if the browser wasn't originally set up or installed by the administrator.
- **Using DHCP servers:** For local area network (LAN)-based users. This server type lets you specify your global and subnet TCP/IP parameters centrally, defining your users' parameters by using reserved addresses. By doing it this way, a computer can move between subnets, automatically reconfiguring for TCP/IP when it starts.
- **Using DNS servers:** For users on dial-up connections. This server type uses a set of protocols and services on a TCP/IP network, which lets users search for other computers by using hierarchical, user-friendly names (hosts), instead of numeric IP addresses.<p>**Note**<br>DHCP has a higher priority than DNS for automatic configuration. If DHCP provides the URL to a .pac, .jvs, .js, or .ins configuration file, the process stops and the DNS lookup doesn't happen.
## Updating your automatic detection settings
To use automatic detection, you have to set up your DHCP and DNS servers.<p>**Note**<br>Your DHCP servers must support the `DHCPINFORM` message, to obtain the DHCP options.
**To turn on automatic detection for DHCP servers**
1. Open the Internet Explorer Customization Wizard 11, and go to the **Automatic Configuration** page.
2. Choose the **Automatically detect configuration settings** box to automatically detect your browser settings. For more information about the **Automatic Configuration** page, see [Automatic Configuration: Internet Explorer Customization Wizard](http://go.microsoft.com/fwlink/p/?linkid=327743).
3. Open the [DHCP Administrative Tool](http://go.microsoft.com/fwlink/?LinkId=302212), create a new option type, using the code number 252, and then associate it with the URL to your configuration file. For detailed instructions about how to do this, see [Create an option 252 entry in DHCP](http://go.microsoft.com/fwlink/p/?LinkId=294649).
**To turn on automatic detection for DNS servers**
1. Open the IE Customization Wizard 11, and go to the **Automatic Configuration** page.
2. Choose the **Automatically detect configuration settings** box to automatically detect your browser settings.
3. In your DNS database file, create a host record named, **WPAD**. This record has the IP address of the web server storing your automatic configuration (.js, .jvs, .pac, or .ins) file.<p>**-OR-**<p>Create a canonical name (CNAME) alias record named, **WPAD**. This record has the resolved name (not the IP address) of the server storing your automatic configuration (.pac) file.<p>**Note**<br>For more information about creating a **WPAD** entry, see [Creating a WPAD entry in DNS](http://go.microsoft.com/fwlink/?LinkId=294651). 
4. After the database file propagates to the server, the DNS name, `wpad.<domain>.com` resolves to the server name that includes your automatic configuration file.<p>**Note**<br>Internet Explorer 11 creates a default URL template based on the host name, **wpad**. For example, `http://wpad.<domain>.com/wpad.dat`. Because of this, you need to set up a file or redirection point in your web server **WPAD** record, named **wpad.dat**. The **wpad.dat** record delivers the contents of your automatic configuration file.
 
 
 

43
browsers/internet-explorer-11/ie11-deploy-guide/auto-proxy-configuration-settings-for-ie11.md Normal file
View File

@ -0,0 +1,43 @@
---
Description: Auto proxy configuration settings for Internet Explorer 11
ms.assetid: 5120aaf9-8ead-438a-8472-3cdd924b7d9e
ms.prod: IE11
ms.mktglfcycl: deploy
ms.sitesec: library
ms.pagetype: networking
title: Auto proxy configuration settings for Internet Explorer 11
---
# Auto proxy configuration settings for Internet Explorer 11
Configure and maintain your proxy settings, like pointing your users' browsers to your automatic proxy script, through the Internet Explorer Customization Wizard 11 running on either Windows 8.1 or Windows Server 2012 R2.
## Updating your auto-proxy settings
You can use your Internet settings (.ins) files to set up your standard proxy settings. You can also specify script files (.js, .jvs, or .pac) to configure and maintain your advanced proxy settings. IE uses your auto-proxy script files to dynamically determine whether to connect to a host or use a proxy server. If a proxy server connection fails, Internet Explorer 11 automatically attempts to connect to another proxy server that you have specified.
**To update your settings**
1. Create a script file with your proxy information, copying it to a server location.
2. Open the IE Customization Wizard 11, and go to the **Automatic Configuration** page.
3. Choose the **Enable Automatic Configuration** box to let you change the rest of the configuration options, including:
- **Automatically configure every box:** Type how often IE should check for configuration updates. Typing **0** (zero), or not putting in any number, means that updates only happen when the computer restarts.
- **Automatic Configuration URL (.INS file) box:** Type the location of the .ins file you want to use for automatic configuration. For more information about setting up **Automatic Configuration**, see [Auto configuration settings for Internet Explorer 11](auto-configuration-settings-for-ie11.md).
- **Automatic proxy URL (.JS, .JVS, or .PAC file) box:** Type the location of your automatic proxy script. This script runs whenever IE11 makes a network request and can include multiple proxy servers for each protocol type.<p>**Important**<br>IE11 no longer supports using file server locations with your proxy configuration (.pac) files. To keep using your .pac files, you have to keep them on a web server and reference them using a URL, like `http://share/test.ins`.
## Locking your auto-proxy settings
You have two options to restrict your users' ability to override the automatic configuration settings, based on your environment.
- **Using Microsoft Active Directory.** Choose **Disable changing proxy settings** from the Administrative Templates setting.
- **Not Using Active Directory.** Choose the **Prevent changing proxy settings** setting in the `User Configuration\Administrative Templates\Windows Components\Internet Explorer` Group Policy object. For more information about Group Policy, see the [Group Policy TechCenter](http://go.microsoft.com/fwlink/?LinkId=214514).
 
 

31
browsers/internet-explorer-11/ie11-deploy-guide/browser-cache-changes-and-roaming-profiles.md Normal file
View File

@ -0,0 +1,31 @@
---
Description: Browser cache changes and roaming profiles
ms.assetid: 85f0cd01-6f82-4bd1-9c0b-285af1ce3436
ms.prod: IE11
ms.mktglfcycl: deploy
ms.sitesec: library
ms.pagetype: performance
title: Browser cache changes and roaming profiles
---
# Browser cache changes and roaming profiles
We’ve redesigned the browser cache to improve the performance, flexibility, reliability, and scalability of Internet Explorer and the apps that rely on the Windows Internet (WinINet) cache. Our new database design stops multiple clients from simultaneously accessing and using cached information, while also providing a higher level of data integrity.
You won’t notice any changes to the management of your roaming profile data if you use our new database implementation in conjunction with the [roaming user profile guidelines](http://go.microsoft.com/fwlink/?LinkId=401544). This means that IE data that’s stored in the `AppData\Roaming` user profile folder is still be uploaded to your normal profile storage location after a user successfully logs off.<p>**Note**<br>Cookies in a roaming profile can only be set by Internet Explorer for the desktop, with Enhanced Protected Mode turned off. Cookies set by the immersive version of IE or by Windows Store apps, can’t be part of a roaming profile. For more information about persistent cookies and roaming, see [Persistent cookies are not roamed in Internet Explorer](http://go.microsoft.com/fwlink/?LinkId=401545).
To get the best results while using roaming profiles, we strongly recommend the following:
- Create a separate roaming repository for each domain account that uses roaming.
- Restrict roaming user profiles so they work on only one computer at a time. Using a single roaming profile on multiple computers isn’t supported (via console or Remote Desktop) and can cause unpredictable results, including cookie loss.
- Allow all computers that let users sign-on with a roaming profile have identical IE cookie policies and settings.
- Make sure to delete the user’s local roaming profile at sign off for any computer using user profile roaming. You can do this by turning on the **Delete cached copies of roaming profiles** Group Policy Object.
 
 

47
browsers/internet-explorer-11/ie11-deploy-guide/check-for-new-enterprise-mode-site-list-xml-file.md Normal file
View File

@ -0,0 +1,47 @@
---
Description: You can have centralized control over Enterprise Mode by creating a single, global XML site list that includes the list of websites to render using Enterprise Mode.
ms.assetid: 2bbc7017-622e-4baa-8981-c0bbda10e9df
ms.prod: IE11
ms.mktglfcycl: deploy
ms.sitesec: library
ms.pagetype: appcompat
title: Check for a new Enterprise Mode site list xml file
---
# Check for a new Enterprise Mode site list xml file
**Last updated**
- November 12, 2015
**Applies to:**
- Windows 10 and later
- Windows 8.1
- Windows 7
- Windows Server 2012 R2
- Windows Server 2008 R2 with Service Pack 1 (SP1)
You can have centralized control over Enterprise Mode by creating a single, global XML site list that includes the list of websites to render using Enterprise Mode. You can add and remove sites from your XML list as frequently as you want, changing which sites should render in Enterprise Mode for your employees. For information about turning on Enterprise Mode and using site lists, see [Turn on Enterprise Mode and use a site list](turn-on-enterprise-mode-and-use-a-site-list.md).
The information in this topic only covers HTTP protocol. We strongly recommend that you use HTTP protocol instead of file protocol due to increased performance.
**How Internet Explorer 11 looks for an updated site list**
1. Internet Explorer starts up and looks for an updated site list in the following places:
1. **In the cache container.** IE first checks the cache container to see if it finds your XML site list.
2. **In the local cache.** If there’s nothing in the cache container, IE checks your local cache for the site list.
3. **On the server.** Based on standard IE caching rules, IE might look for a copy of your site list in the location you put specified in the **SiteList** value of the registry.
2. If there’s an .xml file in the cache container, IE waits 65 seconds and then checks the local cache for a newer version of the file from the server, based on standard caching rules. If the server file has a different version number than the version in the cache container, the server file is used and stored in the cache container.<p>**Note**<br>If you’re already using a site list, enterprise mode continues to work during the 65 second wait; it just uses your existing site list instead of your new one.
 
 
 

23
browsers/internet-explorer-11/ie11-deploy-guide/choose-how-to-deploy-ie11.md Normal file
View File

@ -0,0 +1,23 @@
---
Description: Choose how to deploy Internet Explorer 11 (IE11)
ms.assetid: 21b6a301-c222-40bc-ad0b-27f66fc54d9d
ms.prod: IE11
ms.mktglfcycl: deploy
ms.sitesec: library
title: Choose how to deploy Internet Explorer 11 (IE11)
---
# Choose how to deploy Internet Explorer 11 (IE11)
In this section, you can learn about how to deploy your custom version of Internet Explorer using Automatic Version Synchronization (AVS) or using your software distribution tools.
## In this section
| Topic | Description |
|------------------------------------------------------------- | ------------------------------------------------------ |
|[Deploy IE11 using Automatic Version Synchronization (AVS)](deploy-ie11-using-automatic-version-synchronization-avs.md) |Guidance about how to deploy your custom browser packages using Automatic Version Synchronization (AVS). |
|[Deploy IE11 using software distribution tools](deploy-ie11-using-software-distribution-tools.md) |Guidance about how to deploy your custom browser packages using System Center 2012 R2, Windows Server Update Services (WSUS), Group Policy software installation, or Microsoft Deployment toolkit (MDT). |
 
 

30
browsers/internet-explorer-11/ie11-deploy-guide/choose-how-to-install-ie11.md Normal file
View File

@ -0,0 +1,30 @@
---
Description: Choose how to install Internet Explorer 11 (IE11)
ms.assetid: 572f5f1-5d67-483e-bd63-ffea95053481
ms.prod: IE11
ms.mktglfcycl: deploy
ms.sitesec: library
title: Choose how to install Internet Explorer 11 (IE11)
---
# Choose how to install Internet Explorer 11 (IE11)
Before you install Internet Explorer 11, you should:
- **Migrate Group Policy Objects.** Decide if your Group Policy Objects should migrate to the new version.
- **Check vendor support for updated functionality.** Check whether third-party vendors have new versions or updates to necessary add-ons, apps, or code libraries.
- **Choose the right version of Internet Explorer.** IE11 comes pre-installed on Windows 8.1 and Windows Server 2012 R2 or you can download it for Windows 7 SP1 or Windows Server 2008 R2 with Service Pack 1 (SP1) from the [Internet Explorer Downloads](http://go.microsoft.com/fwlink/?LinkId=214251) site.
- **Choose how you'll deploy your installation package.** Your deployment method should be based on whether you're installing to computers already running Windows, or if you're deploying IE11 as part of a Windows installation.
- **Existing computers running Windows.** Use System Center R2 2012 System Center 2012 R2 Configuration Manager, System Center Essentials 2010, Windows Server Updates Services (WSUS), or Microsoft Intune to deploy IE11. For more information about how to use these systems, see [System Center 2012 R2 Configuration Manager](http://go.microsoft.com/fwlink/p/?LinkID=276664), [System Center Essentials 2010](http://go.microsoft.com/fwlink/?LinkId=395200), [Windows Server Update Services](http://go.microsoft.com/fwlink/p/?LinkID=276790), and [Microsoft Intune Overview](http://go.microsoft.com/fwlink/p/?linkid=276667).
- **As part of a Windows deployment.** Update your Windows images to include IE11, and then add the update to your MDT deployment share or to your Windows image. For instructions about how to create and use Windows images, see [Create and Manage a Windows Image Using DISM](http://go.microsoft.com/fwlink/?LinkId=299408). For general information about deploying IE, see [Microsoft Deployment Toolkit (MDT)](http://go.microsoft.com/fwlink/?LinkId=331148), [Windows ADK Overview](http://go.microsoft.com/fwlink/?LinkId=276669).
 
 

377
browsers/internet-explorer-11/ie11-deploy-guide/collect-data-using-enterprise-site-discovery.md Normal file
View File

@ -0,0 +1,377 @@
---
Description: Use Internet Explorer to collect data on computers running Windows Internet Explorer 8 through Internet Explorer 11 on Windows 10, Windows 8.1, or Windows 7.
ms.assetid: a145e80f-eb62-4116-82c4-3cc35fd064b6
ms.prod: IE11
ms.mktglfcycl: deploy
ms.sitesec: library
ms.pagetype: appcompat
title: Collect data using Enterprise Site Discovery
---
# Collect data using Enterprise Site Discovery
**Last updated**
- January 14, 2015
**Applies to:**
- Windows 10
- Windows 8.1 Update
- Windows 7 with Service Pack 1 (SP1)
Use Internet Explorer to collect data on computers running Windows Internet Explorer 8 through Internet Explorer 11 on Windows 10, Windows 8.1, or Windows 7. This inventory information helps you build a list of websites used by your company so you can make more informed decisions about your IE deployments, including figuring out which sites might be at risk or require overhauls during future upgrades.
## Requirements
Before you start, you need to make sure you have the following:
- Latest cumulative security update (for all supported versions of Internet Explorer):
1. Go to the [Microsoft Security Bulletin](http://go.microsoft.com/fwlink/?LinkID=718223) page, and change the filter to **Windows Internet Explorer 11**.
![microsoft security bulletin techcenter](images/securitybulletin-filter.png)
2. Click the title of the latest cumulative security update, and then scroll down to the **Affected software** table.
![affected software section](images/affectedsoftware.png)
3. Click the link that represents both your operating system version and Internet Explorer 11, and then follow the instructions in the **How to get this update** section.
- [Setup and configuration package](http://go.microsoft.com/fwlink/?LinkId=517719), including:
- Configuration-related PowerShell scripts
- IETelemetry.mof file
- Sample System Center 2012 report templates
You must use System Center 2012 R2 Configuration Manager or later for these samples to work.
Both the PowerShell script and .mof file need to be copied to the same location on the client computer, before you run the scripts.
## What data is collected?
Data is collected on the configuration characteristics of IE and the sites it browses, as shown here.
|Data point |IE11 |IE10 |IE9 |IE8 |Description |
|------------------------|-----|-----|-----|-----|------------------------------------------------------------------------|
|URL | X | X | X | X |URL of the browsed site, including any parameters included in the URL. |
|Domain | X | X | X | X |Top-level domain of the browsed site. |
|ActiveX GUID | X | X | X | X |GUID of the ActiveX controls loaded by the site. |
|Document mode | X | X | X | X |Document mode used by IE for a site, based on page characteristics. |
|Document mode reason | X | X | | |The reason why a document mode was set by IE. |
|Browser state reason | X | X | | |Additional information about why the browser is in its current state. Also called, browser mode. |
|Hang count | X | X | X | X |Number of visits to the URL when the browser hung. |
|Crash count | X | X | X | X |Number of visits to the URL when the browser crashed. |
|Most recent navigation failure (and count) | X | X | X | X |Description of the most recent navigation failure (like, a 404 bad request or 500 internal server error) and the number of times it happened. |
|Number of visits | X | X | X | X |Number of times a site has been visited. |
|Zone | X | X | X | X |Zone used by IE to browse sites, based on browser settings. |
<p>**Important**<br>By default, IE doesn’t collect this data; you have to turn this feature on if you want to use it. After you turn on this feature, data is collected on all sites visited by IE, except during InPrivate sessions.
The data collection process is silent, so there’s no notification to the employee. Therefore, you must get consent from the employee before you start collecting info. You must also make sure that using this feature complies with all applicable local laws and regulatory requirements.
## Where is the data stored and how do I collect it?
The data is stored locally, in an industry-standard WMI class, Managed Object Format (.MOF) file or in an XML file, depending on your configuration. This file remains on the client computer until it’s collected. To collect the files, we recommend:
- **WMI file**. Use Microsoft Configuration Manager or any agent that can read the contents of a WMI class on your computer.
- **XML file**. Any agent that works with XML can be used.
## WMI Site Discovery suggestions
We recommend that you collect your data for at most a month at a time, to capture a user’s typical workflow. We don’t recommend collecting data longer than that because the data is stored in a WMI provider and can fill up your computer’s hard drive. You may also want to collect data only for pilot users or a representative sample of people, instead of turning this feature on for everyone in your company.
On average, a website generates about 250bytes of data for each visit, causing only a minor impact to Internet Explorer’s performance. Over the course of a month, collecting data from 20 sites per day from 1,000 users, you’ll get about 150MB of data:<br>\[250bytes (per site visit) \* 20sites/day\* 30days = (approximately) 150KB \*1000users = (approximately) 150MB\].
<p>**Important**<br>The data collection process is silent, so there’s no notification to the employee. Therefore, you must get consent from the employee before you start collecting info. You must also make sure that using this feature complies with all applicable local laws and regulatory requirements.
## Getting ready to use Enterprise Site Discovery
You need to set up your computers for data collection by running the provided PowerShell script (IETelemetrySetUp.ps1) to compile the .mof file and to update security privileges for the new WMI classes.
<p>**Important**<br>You must run this script if you’re using WMI as your data output. It's not necessary if you're using XML as your data output.
**To set up Enterprise Site Discovery**
- Start PowerShell in elevated mode (using admin privileges) and run IETElemetrySetUp.ps1 by by-passing the PowerShell execution policy, using this command: `powershell -ExecutionPolicy Bypass .\IETElemetrySetUp.ps1`. For more info, see [about Execution Policies](http://go.microsoft.com/fwlink/p/?linkid=517460).
### Optional: Set up your firewall for WMI data
If you choose to use WMI as your data output, you need to make sure that your WMI data can travel through your firewall for the domain. If you’re sure, you can skip this section; otherwise, follow these steps:
**To set up your firewall**
1. In **Control Panel**, click **System and Security**, and then click **Windows Firewall**.
2. In the left pane, click **Allow an app or feature through Windows Firewall** and scroll down to check the box for **Windows Management Instrumentation (WMI)**.
3. Restart your computer to start collecting your WMI data.
## Setting up Enterprise Site Discovery using PowerShell
After you finish the initial setup for Site Discovery using PowerShell, you have the option to continue with PowerShell or to switch to Group Policy.
<p>**Important**<br>The .ps1 file updates turn on Enterprise Site Discovery and WMI collection for all users on a device.
### Setting up zones or domains for data collection
You can determine which zones or domains are used for data collection, using PowerShell.
- **Domain allow list.** If you have a domain allow list, a comma-separated list of domains that should have this feature turned on, you should use this process.
- **Zone allow list.** If you have a zone allow list, a comma-separated list of zones that should have this feature turned on, you should use this process.
**To set up data collection using a domain allow list**
- Start PowerShell in elevated mode (using admin privileges) and run IETElemetrySetUp.ps1, using this command: `.\IETElemetrySetUp.ps1 [other args] -SiteAllowList sharepoint.com,outlook.com,onedrive.com`.
<p>**Important**<br>Wildcards, like \*.microsoft.com, aren’t supported.
**To set up data collection using a zone allow list**
- Start PowerShell in elevated mode (using admin privileges) and run IETElemetrySetUp.ps1, using this command: `.\IETElemetrySetUp.ps1 [other args] -ZoneAllowList Computer,Intranet,TrustedSites,Internet,RestrictedSites`.
<p>**Important**<br>Only Computer, Intranet, TrustedSites, Internet, and RestrictedSites are supported.
## Setting up Enterprise Site Discovery using Group Policy
If you don’t want to continue using PowerShell, you can switch to Group Policy after the initial Site Discovery setup.
<p>**Note**<br> All of the Group Policy settings can be used individually or as a group.
**To set up Enterprise Site Discovery using Group Policy**
- Open your Group Policy editor, and go to these new settings:
|Setting name and location |Description |Options |
|---------------------------|-------------|---------|
|Administrative Templates\Windows Components\Internet Explorer\Turn on Site Discovery WMI output |Writes collected data to a WMI class, which can be aggregated using a client-management solution like Configuration Manager. |<ul><li>**On.** Turns on WMI recording.</li><li>**Off.** Turns off WMI recording.</li></ul> |
|Administrative Templates\Windows Components\Internet Explorer\Turn on Site Discovery XML output |Writes collected data to an XML file, which is stored in your specified location. |<ul><li>**XML file path.** Including this turns on XML recording.</li> <li>**Blank.** Turns off XML recording.</li></ul> |
|Administrative Templates\Windows Components\Internet Explorer\Limit Site Discovery output by Zone |Manages which zone can collect data. |To specify which zones can collect data, you must include a binary number that represents your selected zones, based on this order:<p>0 – Restricted Sites zone<br>0 – Internet zone<br>0 – Trusted Sites zone<br>0 – Local Intranet zone<br>0 – Local Machine zone<p>**Example 1:** Include only the Local Intranet zone<p>Binary representation: *00010*, based on:<p>0 – Restricted Sites zone<br>0 – Internet zone<br>0 – Trusted Sites zone<br>1 – Local Intranet zone<br>0 – Local Machine zone<p>**Example 2:** Include only the Restricted Sites, Trusted Sites, and Local Intranet zones<p>Binary representation: *10110*, based on:<p>1 – Restricted Sites zone<br>0 – Internet zone<br>1 – Trusted Sites zone<br>1 – Local Intranet zone<br>1 – Local Machine zone |
|Administrative Templates\Windows Components\Internet Explorer\Limit Site Discovery output by domain |Manages which domains can collect data |To specify which domains can collect data, you must include your selected domains, one domain per line, in the provided box. It should look like:<p>microsoft.sharepoint.com<br>outlook.com<br>onedrive.com<br>timecard.contoso.com<br>LOBApp.contoso.com |
### Combining WMI and XML Group Policy settings
You can use both the WMI and XML settings individually or together, based on:
**To turn off Enterprise Site Discovery**
<ul>
<li><b>Turn on Site Discovery WMI output:</b> Off</li>
<li><b>Turn on Site Discovery XML output:</b> Blank</li>
</ul>
**To turn on WMI recording only**
<ul>
<li><b>Turn on Site Discovery WMI output:</b> On</li>
<li><b>Turn on Site Discovery XML output:</b> Blank</li>
</ul>
**To turn on XML recording only**
<ul>
<li><b>Turn on Site Discovery WMI output:</b> Off</li>
<li><b>Turn on Site Discovery XML output:</b> XML file path</li>
</ul>
**To turn on both WMI and XML recording**
<ul>
<li><b>Turn on Site Discovery WMI output:</b> On</li>
<li><b>Turn on Site Discovery XML output:</b> XML file path</li>
</ul>
## Use Configuration Manager to collect your data
After you’ve collected your data, you’ll need to get the local files off of your employee’s computers. To do this, use the hardware inventory process in Configuration Manager, in one of the following ways.
### Collect your hardware inventory using the MOF Editor while connecting to a computer
You can collect your hardware inventory using the MOF Editor, while you’re connected to your client computers.
**To collect your inventory**
1. From the Configuration Manager, click **Administration**, click **Client Settings**, double-click **Default Client Settings**, click **Hardware Inventory**, and then click **Set Classes**.
![Configuration Manager, showing the hardware inventory settings for client computers](images/configmgrhardwareinventory.png)
2. Click **Add**, click **Connect**, and connect to a computer that has completed the setup process and has already existing classes.
3. Change the **WMI Namespace** to `root\cimv2\IETelemetry`, and click **Connect**.
![Configuration Manager, with the Connect to Windows Management Instrumentation (WMI) box](images/ie11-inventory-addclassconnectscreen.png)
4. Select the check boxes next to the following classes, and then click **OK**:
- IESystemInfo
- IEURLInfo
- IECountInfo
5. Click **OK** to close the default windows.<br>
Your environment is now ready to collect your hardware inventory and review the sample reports.
### Collect your hardware inventory using the MOF Editor with a MOF import file
You can collect your hardware inventory using the MOF Editor and a MOF import file.
**To collect your inventory**
1. From the Configuration Manager, click **Administration**, click **Client Settings**, double-click **Default Client Settings**, click **Hardware Inventory**, and then click **Set Classes**.
2. Click **Import**, choose the MOF file from the downloaded package we provided, and click **Open**.
3. Pick the inventory items to install, and then click **Import**.
4. Click **OK** to close the default windows.<br>
Your environment is now ready to collect your hardware inventory and review the sample reports.
### Collect your hardware inventory using the SMS\DEF.MOF file
You can collect your hardware inventory using the using the Systems Management Server (SMS\DEF.MOF) file.
**To collect your inventory**
1. Using a text editor like Notepad, open the SMS\DEF.MOF file, located in your `<Config_Manager_install_location>\inboxes\clifiles.src\hinv` directory.
2. Add this text to the end of the file:
```
[SMS_Report (TRUE),
SMS_Group_Name ("IESystemInfo"),
SMS_Class_ID ("MICROSOFT|IESystemInfo|1.0"),
Namespace ("root\\\\cimv2\\\\IETelemetry") ]
Class IESystemInfo: SMS_Class_Template
{
[SMS_Report (TRUE), Key ]
String SystemKey;
[SMS_Report (TRUE) ]
String IEVer;
};
[SMS_Report (TRUE),
SMS_Group_Name ("IEURLInfo"),
SMS_Class_ID ("MICROSOFT|IEURLInfo|1.0"),
Namespace ("root\\\\cimv2\\\\IETelemetry") ]
Class IEURLInfo: SMS_Class_Template
{
[SMS_Report (TRUE), Key ]
String URL;
[SMS_Report (TRUE) ]
String Domain;
[SMS_Report (TRUE) ]
UInt32 DocMode;
[SMS_Report (TRUE) ]
UInt32 DocModeReason;
[SMS_Report (TRUE) ]
UInt32 Zone;
[SMS_Report (TRUE) ]
UInt32 BrowserStateReason;
[SMS_Report (TRUE) ]
String ActiveXGUID[];
[SMS_Report (TRUE) ]
UInt32 CrashCount;
[SMS_Report (TRUE) ]
UInt32 HangCount;
[SMS_Report (TRUE) ]
UInt32 NavigationFailureCount;
[SMS_Report (TRUE) ]
UInt32 NumberOfVisits;
[SMS_Report (TRUE) ]
UInt32 MostRecentNavigationFailure;
};
[SMS_Report (TRUE),
SMS_Group_Name ("IECountInfo"),
SMS_Class_ID ("MICROSOFT|IECountInfo|1.0"),
Namespace ("root\\\\cimv2\\\\IETelemetry") ]
Class IECountInfo: SMS_Class_Template
{
[SMS_Report (TRUE), Key ]
String CountKey;
[SMS_Report (TRUE) ]
UInt32 CrashCount;
[SMS_Report (TRUE) ]
UInt32 HangCount;
[SMS_Report (TRUE) ]
UInt32 NavigationFailureCount;
};
```
3. Save the file and close it to the same location.<br>
Your environment is now ready to collect your hardware inventory and review the sample reports.
### Viewing the sample reports
The sample reports, **SCCM Report Sample – ActiveX.rdl** and **SCCM Report Sample – Site Discovery.rdl**, work with System Center 2012, so you can review your collected data.
### SCCM Report Sample – ActiveX.rdl
Gives you a list of all of the ActiveX-related sites visited by the client computer.
![ActiveX.rdl report, lists all ActiveX-related sites visited by the client computer](images/configmgractivexreport.png)
### SCCM Report Sample – Site Discovery.rdl
Gives you a list of all of the sites visited by the client computer.
![Site Discovery.rdl report, lists all websites visited by the client computer](images/ie-site-discovery-sample-report.png)
## View the collected XML data
After the XML files are created, you can use your own solutions to extract and parse the data. The data will look like:
``` xml
<IETelemetry>
<IECountInfo>
<CrashCount>[dword]</CrashCount>
<HangCount>[dword]</HangCount>
<NavigationFailureCount>[dword]</NavigationFailureCount>
</IECountInfo>
<IEURLInfo>
<URL>[string]</URL>
<ActiveXGUID>
<GUID>[guid]</GUID>
</ActiveXGUID>
<DocModeReason>[dword]</DocModeReason>
<DocMode>[dword]</DocMode>
<NumberOfVisits>[dword]</NumberOfVisits>
<BrowserStateReason>[dword]</BrowserStateReason>
<Zone>[dword]</Zone>
<CrashCount>[dword]</CrashCount>
<HangCount>[dword]</HangCount>
<NavigationFailureCount>[dword]</NavigationFailureCount>
<Domain>[string]</Domain>
<MostRecentNavigationFailure>[dword]</MostRecentNavigationFailure>
</IEURLInfo>
<IEURLInfo>…</IEURLInfo>
<IEURLInfo>…</IEURLInfo>
</IETelemetry>
```
You can import this XML data into the [Enterprise Mode Site List Manager](http://go.microsoft.com/fwlink/p/?linkid=394378), automatically adding the included sites to your Enterprise Mode site list.
**To add your XML data to your Enterprise Mode site list**
1. Open the Enterprise Mode Site List Manager tool, click **File**, and then click **Bulk add from file**.
![Enterprise Mode Site List Manager with Bulk add from file option](images/bulkadd-emiesitelistmgr.png)
2. Go to your XML file to add the included sites to the tool, and then click **Open**.<br>
Each site is validated and if successful, added to the global site list when you click **OK** to close the menu. If a site doesn’t pass validation, you can try to fix the issues or pick the site and click **Add to list** to ignore the validation problem. For more information about fixing validation problems, see [Fix validation problems using the Enterprise Mode Site List Manager tool](fix-validation-problems-using-the-enterprise-mode-site-list-manager-tool.md).
3. Click **OK** to close the **Bulk add sites to the list** menu.
## Turn off data collection on your client computers
After you’ve collected your data, you’ll need to turn Enterprise Site Discovery off.
**To stop collecting data, using PowerShell**
- On your client computer, start Windows PowerShell in elevated mode (using admin privileges) and run `IETelemetrySetUp.ps1`, using this command: `powershell -ExecutionPolicy Bypass .\IETElemetrySetUp.ps1 –IEFeatureOff`.<p>**Note**<br>
Turning off data collection only disables the Enterprise Site Discovery feature – all data already written to WMI stays on your employee’s computer.
 
**To stop collecting data, using Group Policy**
1. Open your Group Policy editor, go to `Administrative Templates\Windows Components\Internet Explorer\Turn on Site Discovery WMI output`, and click **Off**.
2. Go to `Administrative Templates\Windows Components\Internet Explorer\Turn on Site Discovery XML output`, and clear the file path location.
### Delete already stored data from client computers
You can completely remove the data stored on your employee’s computers.
**To delete all existing data**
- On the client computer, start PowerShell in elevated mode (using admin privileges) and run these four commands:
- `Remove-WmiObject -Namespace root/cimv2/IETelemetry IEURLInfo`
- `Remove-WmiObject -Namespace root/cimv2/IETelemetry IESystemInfo`
- `Remove-WmiObject -Namespace root/cimv2/IETelemetry IECountInfo`
- `Remove-Item -Path 'HKCU:\Software\Microsoft\Internet Explorer\WMITelemetry'`
 
 

36
browsers/internet-explorer-11/ie11-deploy-guide/create-install-packages-for-multiple-operating-systems-or-languages.md Normal file
View File

@ -0,0 +1,36 @@
---
Description: Create packages for multiple operating systems or languages
ms.assetid: 44051f9d-63a7-43bf-a427-d0a0a1c717da
ms.prod: IE11
ms.mktglfcycl: deploy
ms.sitesec: library
title: Create packages for multiple operating systems or languages
---
# Create packages for multiple operating systems or languages
You'll create multiple versions of your custom browser package if:
- You support more than 1 version of Windows®.
- You support more than 1 language.
- You have custom installation packages with only minor differences. Like, having a different phone number.
**To create a new package**
1. Create an installation package using the Internet Explorer Customization Wizard 11, as described in the [Internet Explorer Customization Wizard 11 options](http://go.microsoft.com/fwlink/p/?linkid=328022) topic.
2. Go to your **CIE/Custom** folder and rename the `Install.ins`file. For example, if you need a version for employees in Texas, rename the file to Texas.ins.
3. Run the wizard again, using the Custom folder as the destination directory.<p>
**Important**<br>
Except for the **Title bar** text, **Favorites**, **Links bar**, **Home page**, and **Search bar**, keep all of your wizard settings the same for all of your build computers.
 
 
 

37
browsers/internet-explorer-11/ie11-deploy-guide/customize-ie11-install-packages.md Normal file
View File

@ -0,0 +1,37 @@
---
Description: Customize Internet Explorer 11 installation packages
ms.assetid: 10a14a09-673b-4f8b-8d12-64036135e7fd
ms.prod: IE11
ms.mktglfcycl: deploy
ms.sitesec: library
title: Customize Internet Explorer 11 installation packages
---
# Customize Internet Explorer 11 installation packages
You can customize Internet Explorer 11 to support various browser behaviors, multiple operating system versions and languages, and Setup information (.inf) files.
|Topic |Description |
|------------------------------------------------------------------------|----------------------------------------------------|
|[Using IEAK 11 to create packages](using-ieak-11-to-create-install-packages.md) |How to use the Internet Explorer Administration Kit 11 (IEAK 11) and the IE Customization Wizard 11 to set up, configure, deploy, and maintain IE11 |
|[Create packages for multiple operating systems or languages](create-install-packages-for-multiple-operating-systems-or-languages.md) |How to create multiple versions of your custom installation package, to support multiple operating systems or languages. |
|[Using .INF files to create packages](using-inf-files-to-create-install-packages.md) |How to use the Microsoft® Windows Setup Engine to automate setup tasks and customize your component installations. |
In addition, you can configure IE before, during, or after deployment, using these tools:
- **IE Administration Kit 11 (IEAK 11)**. Creates customized installation packages that can be deployed through your software distribution system. For more information about the IEAK 11, see [IEAK 11 - Internet Explorer Administration Kit 11 Users Guide](http://go.microsoft.com/fwlink/p/?linkid=327741).
- **Group Policy**. Configures and enforces IE11 settings. For more information about settings and configuration options, see [Group policy objects and Internet Explorer 11 (IE11)](gpo-and-ie11.md).
- **Unattend.xml**. Customizes some of the IE settings during your Windows installation. This option only applies if you're updating a Windows image with IE11.<p>**Note**<br>
You'll only see the new IE11 Unattend.xml settings if your Unattend.xml file's associated with a Windows image that includes the IE11 update. For more information about editing and using the Unattend.xml file, see [Unattended Windows Setup Reference](http://go.microsoft.com/fwlink/?LinkId=276788). For more information about using the Windows System Image Manager, see [Windows System Image Manager Technical Reference](http://go.microsoft.com/fwlink/?LinkId=276789).
 
 
 

45
browsers/internet-explorer-11/ie11-deploy-guide/delete-sites-from-your-enterprise-mode-site-list-in-the-enterprise-mode-site-list-manager.md Normal file
View File

@ -0,0 +1,45 @@
---
Description: You can delete a single site from your global Enterprise Mode site list. If you delete a site by mistake, you’ll need to manually add it back using the instructions in the following topics, based on operating system.
title: Delete sites from your Enterprise Mode site list in the Enterprise Mode Site List Manager
ms.assetid: 41413459-b57f-48da-aedb-4cbec1e2981a
ms.prod: IE11
ms.mktglfcycl: deploy
ms.sitesec: library
ms.pagetype: appcompat
---
# Delete sites from your Enterprise Mode site list in the Enterprise Mode Site List Manager
**Last updated**
- November 12, 2015
**Applies to:**
- Windows 10
- Windows 8.1
- Windows 7
- Windows Server 2012 R2
- Windows Server 2008 R2 with Service Pack 1 (SP1)
**To delete a single site from your global Enterprise Mode site list**
- From the Enterprise Mode Site List Manager, pick the site you want to delete, and then click **Delete**.<br>
The site is permanently removed from your list.
If you delete a site by mistake, you’ll need to manually add it back using the instructions in the following topics, based on operating system.
- [Add sites to the Enterprise Mode site list using the Windows 10 Enterprise Mode Site List Manager tool](add-single-sites-to-enterprise-mode-site-list-using-the-version-2-enterprise-mode-tool.md)
- [Add sites to the Enterprise Mode site list using the Windows 7 and Windows 8.1 Enterprise Mode Site List Manager tool](add-single-sites-to-enterprise-mode-site-list-using-the-version-1-enterprise-mode-tool.md)
## Related topics
- [Download the Enterprise Mode Site List Manager for Windows 10 tool](http://go.microsoft.com/fwlink/?LinkId=716853)
- [Download the Enterprise Mode Site List Manager for Windows 7 and Windows 8.1 tool](http://go.microsoft.com/fwlink/?LinkID=394378)
- [Use the Enterprise Mode Site List Manager tool](use-the-enterprise-mode-site-list-manager-tool.md)
 
 

27
browsers/internet-explorer-11/ie11-deploy-guide/deploy-ie11-using-automatic-version-synchronization-avs.md Normal file
View File

@ -0,0 +1,27 @@
---
Description: You can deploy Internet Explorer 11 to your users' computers by using your custom browser packages and Automatic Version Synchronization (AVS).
ms.assetid: f51224bd-3371-4551-821d-1d62310e3384
ms.prod: IE11
ms.mktglfcycl: deploy
ms.sitesec: library
title: Deploy Internet Explorer 11 using Automatic Version Synchronization (AVS)
---
# Deploy Internet Explorer 11 using Automatic Version Synchronization (AVS)
You can deploy Internet Explorer 11 to your users' computers by using your custom browser packages and Automatic Version Synchronization (AVS).
## What is Automatic Version Synchronization?
Automatic Version Synchronization (AVS) lets you use the Internet Explorer Administration Kit 11 (IEAK 11) to synchronize the IE11 setup files on a local computer with the latest setup files on the web.
You must synchronize the setup files at least once on the local computer, for each language and operating system combination, before proceeding through the rest of the wizard. If your packages have more than one version of IE, you need to keep the versions in separate component download folders, which can be pointed to from the **File Locations** page of the IEAK 11. For more information about using the AVS feature, see [Automatic Version Synchronization: Internet Explorer Customization Wizard](http://go.microsoft.com/fwlink/p/?linkid=327744).
##Related topics
- [IEAK 11 - Internet Explorer Administration Kit 11 Users Guide](https://technet.microsoft.com/en-us/library/dn454924.aspx)
- [Customize Internet Explorer 11 installation packages](customize-ie11-install-packages.md)
 
 

26
browsers/internet-explorer-11/ie11-deploy-guide/deploy-ie11-using-software-distribution-tools.md Normal file
View File

@ -0,0 +1,26 @@
---
Description: Deploy Internet Explorer 11 using software distribution tools
ms.assetid: fd027775-651a-41e1-8ec3-d32eca876d8a
ms.prod: IE11
ms.mktglfcycl: deploy
ms.sitesec: library
title: Deploy Internet Explorer 11 using software distribution tools
---
# Deploy Internet Explorer 11 using software distribution tools
If you already manage software distribution and updates on your network through software distribution tools, you can also use these tools for ongoing deployments of Internet Explorer. Software distribution tools include:
- **System Center R2 2012 System Center 2012 R2 Configuration Manager.** Deploy and install Internet Explorer 11 on your user's computers through a software distribution package. For more information about using this tool, see [System Center R2 2012 Configuration Manager](http://go.microsoft.com/fwlink/p/?LinkID=276664).
- **Windows Server Update Services (WSUS).** Download a single copy of the IE11 updates, caching them to local servers so your users' computers can receive the updates directly from the WSUS servers, instead of through Windows Update. For more information about using this tool, see [Windows Server Update Services](http://go.microsoft.com/fwlink/p/?LinkID=276790).
- **Group Policy Software Installation.** Deploy and install IE11 on your user's computers through a combination of Group Policy and Microsoft Active Directory. For more information about using this tool, see [Group Policy Software Installation overview](http://go.microsoft.com/fwlink/p/?LinkId=296365).
- **Microsoft Deployment Toolkit (MDT).** Add the IE11 update to your deployment share, using MDT to update your previously-deployed Windows image. For more information about using this tool, see [Microsoft Deployment Toolkit (MDT)](http://go.microsoft.com/fwlink/p/?LinkID=331148).
 
 

117
browsers/internet-explorer-11/ie11-deploy-guide/deploy-pinned-sites-using-mdt-2013.md Normal file
View File

@ -0,0 +1,117 @@
---
Description: 'You can pin websites to the Windows 8.1 taskbar for quick access.'
ms.assetid: 24f4dcac-9032-4fe8-bf6d-2d712d61cb0c
ms.prod: IE11
ms.mktglfcycl: deploy
ms.sitesec: library
title: 'Deploy pinned websites using Microsoft Deployment Toolkit (MDT) 2013'
---
# Deploy pinned websites using Microsoft Deployment Toolkit (MDT) 2013
**Last updated**
- November 12, 2015
**Applies to:**
- Windows 10
- Windows 8.1
- Windows 7
- Windows Server 2012 R2
- Windows Server 2008 R2 with Service Pack 1 (SP1)
You can pin websites to the Windows 8.1 taskbar for quick access. You pin a website simply by dragging its tab to the taskbar. Some websites can also extend the icon’s Jump List.
The ability to pin websites to the Windows 8.1 taskbar can help make end users in businesses more productive. As an IT professional, for example, you can pin intranet and SharePoint websites to the taskbar to make them immediately available to users. In this article, you learn how to deploy pinned websites by using Lite Touch Installation in the [Microsoft Deployment Toolkit (MDT) 2013](http://go.microsoft.com/fwlink/?LinkId=398474).
## Deploying pinned websites in MDT 2013
This topic requires that you have a complete MDT 2013 deployment share that contains Windows 8.1 which comes with Internet Explorer 11. If you’re deploying to Windows 7 clients and need to learn how to add IE11 to an MDT 2013 deployment share as an update, see [Installing Internet Explorer 11 using Microsoft Deployment Toolkit (MDT)](http://go.microsoft.com/fwlink/?LinkId=398475) in the TechNet library.
Deploying pinned websites in MDT 2013 is a 4-step process:
1. Create a .website file for each website that you want to deploy. When you pin a website to the taskbar, Windows 8.1 creates a .website file that describes how the icon should look and feel.
2. Copy the .website files to your deployment share.
3. Copy the .website files to your target computers.
4. Edit the task sequence of your Unattend.xml answer files to pin the websites to the taskbar. In particular, you want to add each .website file to the **TaskbarLinks** item in Unattend.xml during oobeSystem phase. You can add up to six .website files to the **TaskbarLinks** item.
Pinned websites are immediately available to every user who logs on to the computer although the user must click each icon to populate its Jump List.
**Important**<br>
To follow the examples in this topic, you’ll need to pin the Bing (http://www.bing.com/) and MSN (http://www.msn.com/) websites to the taskbar.
### Step 1: Creating .website files
The first step is to create a .website file for each website that you want to pin to the Windows 8.1 taskbar during deployment. A .website file is like a shortcut, except it’s a plain text file that describes not only the website’s URL but also how the icon looks.
**To create each .website file**
1. Open the website in IE11.
2. Drag the website’s tab and drop it on the Windows 8.1 taskbar.
3. Go to `%USERPROFILE%\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar` in Windows Explorer, and copy the bing.website and msn.website files to your desktop.
### Step 2: Copying the .website files to the deployment share
Next, you must enable your deployment share to copy the bing.website and msn.website files to the **Start** menu on each target computer.
**To copy .website files to the deployment share**
1. Open your MDT 2013 deployment share in Windows Explorer.
2. In the `$OEM$` folder, create the path `$1\Users\Public\Public Links`. If the `$OEM$` folder doesn’t exist, create it at the root of your deployment share.
3. Copy the bing.website and msn.website files from your desktop to `$OEM$\$1\Users\Public\Public Links` in your deployment share.<br>
### Step 3: Copying .website files to target computers
After your operating system is installed on the target computer, you need to copy the .website files over so they can be pinned to the taskbar.
**To copy .website files to target computers**
1. In the **Deployment Workbench** of MDT 2013, open the deployment share containing the task sequence during which you want to deploy pinned websites, and then click **Task Sequences**.
2. In the right pane of the **Deployment Workbench**, right-click your task sequence (create a new one if you don’t have one yet), and click **Properties**.
3. In the **Task Sequence** tab, click the **Postinstall** folder, click **General** from the **Add** button, and then click **Run Command Line**.
4. Rename the newly created item to *Copy Files* and move it up to the top of the **Postinstall** folder.
5. In the **Command Line** box enter the following text, `xcopy “%DEPLOYROOT%\$OEM$\$1” “%OSDisk%\” /yqe`.
6. Click the **Apply** button to save your changes.
### Step 4: Pinning .website files to the Taskbar
With the .website files ready to copy to the **Public Links** folder on target computers for all users, the last step is to edit the Unattend.xml answer files to pin those .website files to the taskbar. You will need to complete the following steps for each task sequence during which you want to pin these websites to the taskbar.
**To pin .website files to the Taskbar**
1. Open the Windows System Image Manager (Windows SIM).
2. On the **OS Info** tab, click **Edit Unattend.xml** to open the Unattend.xml file.
2. In the **Windows Image** pane, under **Components** and then **Microsoft-Windows-Shell-Setup**, right-click **TaskbarLinks**, and then click **Add Setting to Pass 7 oobeSystem**.
3. In the **TaskbarLinks Properties** pane, add the relative path to the target computer’s (not the deployment share’s) .website files that you created earlier. You can add up to six links to the **TaskbarLinks** item. For example, `%PUBLIC%\Users\Public\Public Links\Bing.website` and `%PUBLIC%\Users\Public\Public Links\MSN.website`
4. On the **File** menu, click **Save Answer File**, and then close Windows SIM.
5. To close the task sequence, click **OK**.
## Updating intranet websites for pinning
The MDT 2013 deployment share and task sequences are now ready to pin websites to the taskbar during deployment. This pinning feature can include intranet sites important in your organization.
You can make your intranet websites act more like applications by extending them to fully support the Windows 8.1 taskbar. This includes creating custom Jump Lists, thumbnail previews, and notifications. For info about extending your intranet websites, see [Pinned Sites Developer Documentation](http://go.microsoft.com/fwlink/?LinkId=398484) on MSDN. For more ideas about what to pin, see [Add-ons](http://go.microsoft.com/fwlink/?LinkId=398483) in the Internet Explorer Gallery.
## Related topics
- [Unattended Windows Setup Reference](http://go.microsoft.com/fwlink/?LinkId=276788)
- [Windows System Image Manager Technical Reference](http://go.microsoft.com/fwlink/?LinkId=276789)
- [Microsoft Deployment Toolkit (MDT)](http://go.microsoft.com/fwlink/?LinkId=331148)
- [Windows ADK Overview](http://go.microsoft.com/fwlink/?LinkId=276669)
 
 

57
browsers/internet-explorer-11/ie11-deploy-guide/deprecated-document-modes.md Normal file
View File

@ -0,0 +1,57 @@
---
Description: 'Windows Internet Explorer 8 introduced document modes as a way to move from the proprietary coding of web features to a more standardized type of coding that could run on multiple browsers and devices.'
ms.assetid: 00cb1f39-2b20-4d37-9436-62dc03a6320b
ms.prod: IE11
ms.mktglfcycl: deploy
ms.sitesec: library
ms.pagetype: appcompat
title: Deprecated document modes and Internet Explorer 11
---
# Deprecated document modes and Internet Explorer 11
**Last updated**
- November 12, 2015
**Applies to:**
- Windows 10
- Windows 8.1
- Windows 7
- Windows Server 2012 R2
- Windows Server 2008 R2 with Service Pack 1 (SP1)
Windows Internet Explorer 8 introduced document modes as a way to move from the proprietary coding of web features to a more standardized type of coding that could run on multiple browsers and devices. Starting with Windows 10, we’re deprecating document modes.
This means that while Internet Explorer 11 will continue to support document modes, Microsoft Edge won’t. And because of that, it also means that if you want to use Microsoft Edge, you’re going to have to update your legacy webpages and apps to support modern features, browsers, and devices.
**Note**<br>
For specific details about the technologies and APIs that are no longer supported in Microsoft Edge, see [A break from the past, part 2: Saying goodbye to ActiveX, VBScript, attachEvent](http://go.microsoft.com/fwlink/?LinkId=615953).
## What is document mode?
Each release after Internet Explorer 8 has helped with the transition by introducing additional document modes that emulated previously supported versions, while also introducing support for features defined by industry standards. During this time, numerous websites and apps were updated to the latest and greatest industry standards, while many other sites and apps continued to simply rely on document modes to work properly.
Because our goal with Microsoft Edge is to give users the best site and app viewing experience possible, we’ve decided to stop support for document modes. All websites and apps using legacy features and code will need to be updated to rely on the new modern standards and practices.
If you have legacy sites and apps that can’t be updated to modern standards, you can continue to use IE11 and document modes. We recommend that you use the **IE11 Standards document mode** because it represents the highest support available for modern standards. You should also use the HTML5 document type declaration to turn on the latest supported standards while using IE11:`<!DOCTYPE html>`.
## Document modes and IE11
The compatibility improvements made in IE11 lets older websites just work in the latest standards mode, by default, without requiring emulation of the previous browser behavior. Because older websites are now just working, we’ve decided that Internet Explorer 10 document mode will be the last new document mode. Instead, developers will need to move to using the IE11 document mode going forward.
## Document mode selection flowchart
This flowchart shows how IE11 works when document modes are used.
![Flowchart detailing how document modes are chosen in IE11](images/docmodeflow2.png)
## Known Issues with Internet Explorer 8 document mode in Enterprise Mode
The default document mode for Enterprise Mode is Internet Explorer 8. While this mode provides a strong emulation of that browser, it isn’t an exact match. For example, Windows Internet Explorer 9 fundamentally changed how document modes work with iframes and document modes can’t undo architectural changes. It’s also a known issue that Windows 10 supports GDI font rendering while using Enterprise Mode, but uses natural metrics once outside of Enterprise Mode.
## Related topics
- [Enterprise Mode for Internet Explorer 11](enterprise-mode-overview-for-ie11.md)
 
 

49
browsers/internet-explorer-11/ie11-deploy-guide/edit-the-enterprise-mode-site-list-using-the-enterprise-mode-site-list-manager.md Normal file
View File

@ -0,0 +1,49 @@
---
Description: 'You can use Internet Explorer 11 and the Enterprise Mode Site List Manager tool to change whether page rendering should use Enterprise Mode or the default Internet Explorer browser configuration. You can also add, remove, or delete associated comments.'
ms.assetid: 76aa9a85-6190-4c3a-bc25-0f914de228ea
ms.prod: IE11
ms.mktglfcycl: deploy
ms.sitesec: library
ms.pagetype: appcompat
title: Edit the Enterprise Mode site list using the Enterprise Mode Site List Manager
---
# Edit the Enterprise Mode site list using the Enterprise Mode Site List Manager
**Last updated**
- December 3, 2015
**Applies to:**
- Windows 10
- Windows 8.1
- Windows 7
- Windows Server 2012 R2
- Windows Server 2008 R2 with Service Pack 1 (SP1)
You can use Internet Explorer 11 and the Enterprise Mode Site List Manager tool to change whether page rendering should use Enterprise Mode or the default Internet Explorer browser configuration. You can also add, remove, or delete associated comments.
If you need to edit a lot of websites, you probably don’t want to do it one at a time. Instead, you can edit your saved XML or TXT file and add the sites back again. For information about how to do this, depending on your operating system and schema version, see [Add multiple sites to the Enterprise Mode site list using a file and Windows 10 Enterprise Mode Site List Manager tool](add-multiple-sites-to-enterprise-mode-site-list-using-the-version-2-schema-and-enterprise-mode-tool.md) or [Add multiple sites to the Enterprise Mode site list using a file and the Windows 7 and Windows 8.1 Enterprise Mode Site List Manager tool](add-multiple-sites-to-enterprise-mode-site-list-using-using-the-version-1-schema-and-enterprise-mode-tool.md).
**To change how your page renders**
1. In the Enterprise Mode Site List Manager tool, double-click the site you want to change.
2. Change the comment or the compatibility mode option.
3. Click **Save** to validate your changes and to add the updated information to your site list.<br>
If your change passes validation, it’s added to the global site list. If the update doesn’t pass validation, you’ll get an error message explaining the problem. You’ll then be able to either cancel the update or ignore the validation problem and add it to your list anyway. For more information about fixing validation issues, see [Fix validation problems using the Enterprise Mode Site List Manager tool](fix-validation-problems-using-the-enterprise-mode-site-list-manager-tool.md).
4. On the **File** menu, click **Save to XML**, and save the updated file.<br>
You can save the file locally or to a network share. However, you must make sure you deploy it to the location specified in your registry key. For more information about the registry key, see [Turn on Enterprise Mode and use a site list](turn-on-enterprise-mode-and-use-a-site-list.md).
## Related topics
- [Download the Enterprise Mode Site List Manager for Windows 10 tool](http://go.microsoft.com/fwlink/?LinkId=716853)
- [Download the Enterprise Mode Site List Manager for Windows 7 and Windows 8.1 tool](http://go.microsoft.com/fwlink/?LinkID=394378)
- [Use the Enterprise Mode Site List Manager tool](use-the-enterprise-mode-site-list-manager-tool.md)
 
 

94
browsers/internet-explorer-11/ie11-deploy-guide/enable-and-disable-add-ons-using-administrative-templates-and-group-policy.md Normal file
View File

@ -0,0 +1,94 @@
---
Description: 'Enable and disable add-ons using administrative templates and group policy'
ms.assetid: c6fe1cd3-0bfc-4d23-8016-c9601f674c0b
ms.prod: IE11
ms.mktglfcycl: deploy
ms.sitesec: library
ms.pagetype: security
title: 'Enable and disable add-ons using administrative templates and group policy'
---
# Enable and disable add-ons using administrative templates and group policy
Add-ons let your employees personalize Internet Explorer. You can manage IE add-ons using Group Policy and Group Policy templates.
There are 4 types of add-ons:
- **Search Providers.** Type a term and see suggestions provided by your search provider.
- **Accelerators.** Highlight text on a web page and then click the blue **Accelerator** icon to email, map, search, translate, or do many other tasks.
- **Web Slices.** Subscribe to parts of a website to get real-time information on the Favorites bar.
- **Toolbars.** Add features (like stock tickers) to your browser.
## Using the Local Group Policy Editor to manage group policy objects
You can use the Local Group Policy Editor to change how add-ons work in your organization.
**To manage add-ons**
1. In the Local Group Policy Editor, go to `Computer Configuration\Administrative Templates\Windows Components\Internet Explorer`.
2. Change any or all of these settings to match your company’s policy and requirements.
- Turn off add-on performance notifications
- Automatically activate newly installed add-ons
- Do not allow users to enable or disable add-ons
3. Go into the **Internet Control Panel\\Advance Page** folder, where you can change:
- Do not allow resetting IE settings
- Allow third-party browser extensions
4. Go into the **Security Features\\Add-on Management** folder, where you can change:
- Add-on List
- Deny all add-ons unless specifically allowed in the Add-on List
- Turn off Adobe Flash in IE and prevent applications from using IE technology to instantiate Flash objects
5. Close the Local Group Policy Editor when you’re done.
## Using the CLSID and Administrative Templates to manage group policy objects
Because every add-on has a Class ID (CLSID), you can use it to enable and disable specific add-ons, using Group Policy and Administrative Templates.
**To manage add-ons**
1. Get the CLSID for the add-on you want to enable or disable:
1. Open IE, click **Tools**, and then click **Manage Add-ons**.
2. Pick the add-on you want to change, and then right-click **More Information**.
3. Click **Copy** and then close **Manage Add-ons** and IE.
2. From the copied information, select and copy just the **Class ID** value.
3. Open the Group Policy Management Editor and go to `Computer Configuration\Policies\Administrative Templates\Windows Components\Internet Explorer\Security Features\Add-on Management`.
<br>**-OR-**<br>
Open the Local Group Policy Editor and go to `Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Add-on Management`.
4. Open the **Add-on List** Group Policy Object, pick **Enabled**, and then click **Show**.<br>
**Show Contents** box appears.
5. In **Value Name**, put your copied Class ID.
6. In **Value**, put:
- **0**. The add-on is disabled and your employees can’t change it.
- **1**. The add-on is enabled and your employees can’t change it.
- **2**. The add-on is enabled and your employees can change it.
7. Click **OK** and close the Group Policy editor.
 
 

23
browsers/internet-explorer-11/ie11-deploy-guide/enhanced-protected-mode-problems-with-ie11.md Normal file
View File

@ -0,0 +1,23 @@
---
Description: Enhanced Protected Mode problems with Internet Explorer
ms.assetid: 15890ad1-733d-4f7e-a318-10399b389f45
ms.prod: IE11
ms.mktglfcycl: deploy
ms.sitesec: library
ms.pagetype: security
title: Enhanced Protected Mode problems with Internet Explorer
---
# Enhanced Protected Mode problems with Internet Explorer
Enhanced Protected Mode further restricts Protected Mode to deny potential attackers access to sensitive or personal information. If this feature is turned on, users might start to see errors asking them to turn it off, like **This webpage wants to run "npctrl.dll. If you trust this site, you can disable Enhanced Protected Mode for this site to run the control**. If your users click the **Disable** box, Enhanced Protected Mode is turned off for only the single visit to that specific site. After the user leaves the site, Enhanced Protected Mode is automatically turned back on.
You can use your company’s Group Policy to turn Enhanced Protected Mode on or off for all users. For more information, see the [Group policy objects and Internet Explorer 11 (IE11)](gpo-and-ie11.md) information in this guide.
For more information about Enhanced Protected Mode, see the [Enhanced Protected Mode](http://go.microsoft.com/fwlink/p/?LinkId=267512) post on IEBlog, and both the [Understanding Enhanced Protected Mode](http://go.microsoft.com/fwlink/?LinkId=282662) and the [Enhanced Protected Mode and Local Files](http://go.microsoft.com/fwlink/?LinkId=282663) blog posts on IEInternals.
 
 

49
browsers/internet-explorer-11/ie11-deploy-guide/enterprise-mode-overview-for-ie11.md Normal file
View File

@ -0,0 +1,49 @@
---
Description: 'Use the topics in this section to learn how to set up and use Enterprise Mode and the Enterprise Mode Site List Manager tool in your company.'
ms.assetid: d52ba8ba-b3c7-4314-ba14-0610e1d8456e
ms.prod: IE11
ms.mktglfcycl: deploy
ms.sitesec: library
ms.pagetype: appcompat
title: Enterprise Mode for Internet Explorer 11
---
# Enterprise Mode for Internet Explorer 11
**Last updated**
- November 12, 2015
**Applies to:**
- Windows 10
- Windows 8.1
- Windows 7
- Windows Server 2012 R2
- Windows Server 2008 R2 with Service Pack 1 (SP1)
Use the topics in this section to learn how to set up and use Enterprise Mode and the Enterprise Mode Site List Manager tool in your company.
## In this section
|Topic |Description |
|----------------------------------------------------------------------------|-----------------------------------------------------------------------------------|
|[What is Enterprise Mode?](what-is-enterprise-mode.md) |Includes descriptions of the features of Enterprise Mode. |
|[Set up Enterprise Mode logging and data collection](set-up-enterprise-mode-logging-and-data-collection.md) |Guidance about how to turn on local control of Enterprise Mode and how to use ASP or the GitHub sample to collect data from your local computers. |
|[Turn on Enterprise Mode and use a site list](turn-on-enterprise-mode-and-use-a-site-list.md) |Guidance about how to turn on Enterprise Mode and set up a site list, using Group Policy or the registry. |
|[Enterprise Mode schema v.2 guidance for Windows 10 devices](enterprise-mode-schema-version-2-guidance.md) |Guidance about how to write the XML for your site list, including what not to include, how to use trailing slashes, and info about how to target specific sites. |
|[Enterprise Mode schema v.1 guidance for Windows 7 and Windows 8.1 devices](enterprise-mode-schema-version-1-guidance.md) |Guidance about how to write the XML for your site list, including what not to include, how to use trailing slashes, and info about how to target specific sites. |
|[Check for a new Enterprise Mode site list xml file](check-for-new-enterprise-mode-site-list-xml-file.md) |Guidance about how the Enterprise Mode functionality looks for your updated site list. |
|[Turn on local control and logging for Enterprise Mode](turn-on-local-control-and-logging-for-enterprise-mode.md) |Guidance about how to turn on local control of Enterprise Mode, using Group Policy or the registry.|
|[Use the Enterprise Mode Site List Manager tool](use-the-enterprise-mode-site-list-manager-tool.md) |Guidance about how to use the Enterprise Mode Site List Manager tool, including how to add and update sites on your site list. |
|[Using Enterprise Mode](using-enterprise-mode.md) |Guidance about how to turn on either IE7 Enterprise Mode or IE8 Enterprise Mode. |
|[Fix web compatibility issues using document modes and the Enterprise Mode Site List](fix-compat-issues-with-doc-modes-and-enterprise-mode-site-list.md) |Guidance about how to decide and test whether to use document modes or Enterprise Mode to help fix compatibility issues. |
|[Remove sites from a local Enterprise Mode site list](remove-sites-from-a-local-enterprise-mode-site-list.md) |Guidance about how to remove websites from a device's local Enterprise Mode site list. |
|[Remove sites from a local compatibility view list](remove-sites-from-a-local-compatibililty-view-list.md) |Guidance about how to remove websites from a device's local compatibility view list. |
|[Turn off Enterprise Mode](turn-off-enterprise-mode.md) |Guidance about how to stop using your site list and how to turn off local control, using Group Policy or the registry. |
 
 
 

271
browsers/internet-explorer-11/ie11-deploy-guide/enterprise-mode-schema-version-1-guidance.md Normal file
View File

@ -0,0 +1,271 @@
---
Description: Use the Enterprise Mode Site List Manager tool to create and update your Enterprise Mode site list for devices running Windows 7 or Windows 8.1 Update.
ms.assetid: 17C61547-82E3-48F2-908D-137A71938823
ms.prod: IE11
ms.mktglfcycl: deploy
ms.sitesec: library
ms.pagetype: appcompat
title: 'Enterprise Mode schema v.1 guidance for Windows 7 and Windows 8.1 Update devices'
---
# Enterprise Mode schema v.1 guidance for Windows 7 and Windows 8.1 Update devices
**Last updated**
- November 12, 2015
**Applies to:**
- Windows 8.1
- Windows 7
Use the Enterprise Mode Site List Manager tool to create and update your Enterprise Mode site list for devices running Windows 7 or Windows 8.1 Update. If you don't want to use the Enterprise Mode Site List Manager, you also have the option to update your XML schema using Notepad, or any other XML-editing app.
If you're using a Windows 10-based device, we strongly recommend moving to the new schema, v.2. For more info, see [Enterprise Mode schema v.2 guidance for Windows 10 devices](enterprise-mode-schema-version-2-guidance.md).
## Enterprise Mode schema v.1 example
The following is an example of the Enterprise Mode schema v.1. This schema can run on devices running Windows 7, Windows 8.1, and Windows 10.
**Important**<br>
Make sure that you don't specify a protocol when adding your URLs. Using a URL like `<domain>contoso.com</domain>` automatically applies to both http://contoso.com and https://contoso.com.
``` xml
<rules version="1">
<emie>
<domain exclude="false">www.cpandl.com</domain>
<domain exclude="true">www.woodgrovebank.com</domain>
<domain exclude="false" forceCompatView="true">adatum.com</domain>
<domain exclude="true">contoso.com</domain>
<domain exclude="true">relecloud.com
<path exclude="false">/about</path>
</domain>
<domain exclude="false">fabrikam.com
<path exclude="true">/products</path>
</domain>
</emie>
<docMode>
<domain>contoso.com
<path docMode="7">/travel</path>
</domain>
<domain>fabrikam.com
<path docMode="7">/products</path>
</domain>
</docMode>
</rules>
```
### Schema elements
This table includes the elements used by the Enterprise Mode schema.
<table>
<thead>
<tr class="header">
<th>Element</th>
<th>Description</th>
<th>Supported browser</th>
</tr>
</thead>
<tbody>
<tr>
<td>&lt;rules&gt;</td>
<td>Root node for the schema.
<p><b>Example</b>
<pre class="syntax">
&lt;rules version="205"&gt;
&lt;emie&gt;
&lt;domain&gt;contoso.com&lt;/domain&gt;
&lt;/emie&gt;
&lt;/rules&gt;</pre></td>
<td>Internet Explorer 11 and Microsoft Edge</td>
</tr>
<tr>
<td>&lt;emie&gt;</td>
<td>The parent node for the Enterprise Mode section of the schema. All &lt;domain&gt; entries will have either IE8 Enterprise Mode or IE7 Enterprise Mode applied.
<p><b>Example</b>
<pre class="syntax">
&lt;rules version="205"&gt;
&lt;emie&gt;
&lt;domain&gt;contoso.com&lt;/domain&gt;
&lt;/emie&gt;
&lt;/rules>&gt;</pre></td>
<td>Internet Explorer 11 and Microsoft Edge</td>
</tr>
<tr>
<td>&lt;docMode&gt;</td>
<td>The parent node for the document mode section of the section. All &lt;domain&gt; entries will get IE5 - IE11 document modes applied. If there's a &lt;domain&gt; element in the &lt;docMode&gt; section that uses the same value as a &lt;domain&gt; element in the &lt;emie&gt; section, the &lt;emie&gt; element is applied.
<p><b>Example</b>
<pre class="syntax">
&lt;rules version="205"&gt;
&lt;docMode&gt;
&lt;domain docMode="7"&gt;contoso.com&lt;/domain&gt;
&lt;/docMode&gt;
&lt;/rules&gt;</pre></td>
<td>Internet Explorer 11</td>
</tr>
<tr>
<td>&lt;domain&gt;</td>
<td>A unique entry added for each site you want to put on the Enterprise Mode site list. The first &lt;domain&gt; element will overrule any additional &lt;domain&gt; elements that use the same value for the section. You can use port numbers for this element.
<p><b>Example</b>
<pre class="syntax">
&lt;emie&gt;
&lt;domain&gt;contoso.com:8080&lt;/domain&gt;
&lt;/emie&gt;</pre></td>
<td>Internet Explorer 11 and Microsoft Edge</td>
</tr>
<tr>
<td>&lt;path&gt;</td>
<td>A unique entry added for each path under a domain you want to put on the Enterprise Mode site list. The &lt;path&gt; element is a child of the &lt;domain&gt; element. Additionally, the first &lt;path&gt; element will overrule any additional &lt;path&gt; elements in the schema section.
<p><b>Example</b>
<pre class="syntax">
&lt;emie&gt;
&lt;domain exclude="false"&gt;fabrikam.com
&lt;path exclude="true"&gt;/products&lt;/path&gt;
&lt;/domain&gt;
&lt;/emie&gt;</pre><p>
Where http://fabrikam.com doesn't use IE8 Enterprise Mode, but http://fabrikam.com/products does.</td>
<td>Internet Explorer 11 and Microsoft Edge</td>
</tr>
</table>
### Schema attributes
This table includes the attributes used by the Enterprise Mode schema.
<table>
<thead>
<tr class="header">
<th>Attribute</th>
<th>Description</th>
<th>Supported browser</th>
</tr>
</thead>
<tbody>
<tr>
<td>&lt;version&gt;</td>
<td>Specifies the version of the Enterprise Mode Site List. This attribute is supported for the &lt;rules&gt; element.</td>
<td>Internet Explorer 11 and Microsoft Edge</td>
</tr>
<tr>
<td>&lt;exclude&gt;</td>
<td>Specifies the domain or path that is excluded from getting the behavior applied. This attribute is supported on the &lt;domain&gt; and &lt;path&gt; elements.
<p><b>Example</b>
<pre class="syntax">
&lt;emie&gt;
&lt;domain exclude="false"&gt;fabrikam.com
&lt;path exclude="true"&gt;/products&lt;/path&gt;
&lt;/domain&gt;
&lt;/emie&gt;</pre><p>
Where http://fabrikam.com doesn't use IE8 Enterprise Mode, but http://fabrikam.com/products does.</td>
<td>Internet Explorer 11 and Microsoft Edge</td>
</tr>
<tr>
<td>&lt;docMode&gt;</td>
<td>Specifies the document mode to apply. This attribute is only supported on &lt;domain&gt; or &lt;path&gt; elements in the &lt;docMode&gt; section.
<p><b>Example</b>
<pre class="syntax">
&lt;docMode&gt;
&lt;domain exclude="false"&gt;fakrikam.com
&lt;path docMode="7"&gt;/products&lt;/path&gt;
&lt;/domain&gt;
&lt;/docMode&gt;</pre></td>
<td>Internet Explorer 11</td>
</tr>
</table>
### What not to include in your schema
We recommend that you not add any of the following items to your schema because they can make your compatibility list behave in unexpected ways:
- Don’t use protocols. For example, `http://`, `https://`, or custom protocols. They break parsing.
- Don’t use wildcards.
- Don't use IP Addresses.
- Don’t use query strings, ampersands break parsing.
## How to use trailing slashes
You can use trailing slashes at the path-level, but not at the domain-level:
- **Domain-level.** Don’t add trailing slashes to a domain, it breaks parsing.
- **Path-level.** Adding a trailing slash to a path means that the path ends at that point. By not adding a trailing slash, the rule applies to all of the sub-paths.
**Example**
``` xml
<domain exclude="true">contoso.com
<path exclude="false">/about/</path>
</domain>
```
In this example, `contoso.com/about/careers` will use the default version of Internet Explorer, even though `contoso.com/about/` uses Enterprise Mode.
## How to target specific sites
If you want to target specific sites in your organization.
<table>
<thead>
<tr class="header">
<th>Targeted site</th>
<th>Example</th>
<th>Explanation</th>
</tr>
</thead>
<tbody>
<tr>
<td>You can specify subdomains in the domain tag</td>
<td>
<pre class="syntax">
&lt;docMode&gt;
&lt;domain docMode="5"&gt;contoso.com&lt;/domain&gt;
&lt;domain docMode="9"&gt;info.contoso.com&lt;/domain&gt;
&lt;docMode&gt;</pre></td>
<td>
<ul>
<li>contoso.com uses document mode 5.</li>
<li>info.contoso.com uses document mode 9.</li>
<li>test.contoso.com also uses document mode 5.</li>
</ul>
</td></tr>
<tr>
<td>You can specify exact URLs by listing the full path</td>
<td>
<pre class="syntax">
&lt;emie&gt;
&lt;domain exclude="false"&gt;bing.com&lt;/domain&gt;
&lt;domain exclude="false" forceCompatView="true"&gt;contoso.com&lt;/domain&gt;
&lt;emie&gt;</pre></td>
<td>
<ul>
<li>bing.com uses IE8 Enterprise Mode.</li>
<li>contoso.com uses IE7 Enterprise Mode.</li>
</ul>
</td></tr>
<tr>
<td>You can nest paths underneath domains</td>
<td>
<pre class="syntax">
&lt;emie&gt;
&lt;domain exclude="true"&gt;contoso.com
&lt;path exclude="false"&gt;/about&lt;/path&gt;
&lt;path exclude="true"&gt;/about/business&lt;/path&gt;
&lt;/domain&gt;
&lt;/emie&gt;</pre></td>
<td>
<ul>
<li>contoso.com will use the default version of IE.</li>
<li>contoso.com/about and everything underneath that node will load in Enterprise Mode, except contoso.com/about/business, which will load in the default version of IE.</li>
</ul>
</td></tr>
<tr>
<td>You can’t add a path underneath a path. The file will still be parsed, but the sub-path will be ignored</td>
<td>
<pre class="syntax">
&lt;emie&gt;
&lt;domain exclude="true"&gt;contoso.com
&lt;path&gt;/about
&lt;path exclude="true"&gt;/business&lt;/path&gt;
&lt;/path&gt;
&lt;/domain&gt;
&lt;/emie&gt;</pre></td>
<td>
<ul>
<li>contoso.com will use the default version of IE.</li>
<li>contoso.com/about and everything underneath that node will load in Enterprise Mode, including contoso.com/about/business because the last rule is ignored.</li>
</ul>
</td></tr>
</table>

269
browsers/internet-explorer-11/ie11-deploy-guide/enterprise-mode-schema-version-2-guidance.md Normal file
View File

@ -0,0 +1,269 @@
---
Description: Use the Enterprise Mode Site List Manager tool to create and update your Enterprise Mode site list for devices running Windows 10.
ms.assetid: 909ca359-5654-4df9-b9fb-921232fc05f5
ms.prod: IE11
ms.mktglfcycl: deploy
ms.sitesec: library
ms.pagetype: appcompat
title: 'Enterprise Mode schema v.2 guidance for Windows 10-based devices'
---
# Enterprise Mode schema v.2 guidance for Windows 10-based devices
**Last updated**
- November 12, 2015
**Applies to:**
- Windows 10
Use the Enterprise Mode Site List Manager tool to create and update your site list for devices running Windows 10, using the version 2.0 (v.2) of the Enterprise Mode schema. If you don't want to use the Enterprise Mode Site List Manager, you also have the option to update your XML schema using Notepad, or any other XML-editing app.
**Important**<br>
These schema updates only apply to devices running Windows 10. For devices running Windows 7 or Windows 8.1, see [Enterprise Mode schema guidance for Windows 7 and Windows 8.1 devices](enterprise-mode-schema-version-1-guidance.md).
## Enterprise Mode schema v.2 updates
Because of the schema changes, you can't combine the old version (v.1) with the new version (v.2) of the schema. If you look at your XML file, you can tell which version you're using by:
- &lt;rules&gt;. If your schema root node includes this key, you're using the v.1 version of the schema.
- &lt;site-list&gt;. If your schema root node includes this key, you're using the v.2 version of the schema.
You can continue to use the v.1 version of the schema on Windows 10, but you won't have the benefits of the new v.2 version schema updates and new features. Additionally, if you save the v.1 version of the schema in the new Enterprise Mode Site List Manager tool for Windows 10, it will automatically update the file to use the v.2 version of the schema.
### Enterprise Mode v.2 schema example
The following is an example of the v.2 version of the Enterprise Mode schema.
**Important**<br>
Make sure that you don't specify a protocol when adding your URLs. Using a URL like `<url="contoso.com">`, automatically applies to both http://contoso.com and https://contoso.com.
 
``` xml
<site-list version="205">
<!--- File creation header --->
<created-by>
<tool>EnterpriseSitelistManager</tool>
<version>10240</version>
<date-created>20150728.135021</date-created>
</created-by>
<!--- Begin Site List --->
<site url="www.cpandl.com">
<compat-mode>IE8Enterprise</compat-mode>
<open-in>MSEdge</open-in>
</site>
<site url="www.woodgrovebank.com">
<compat-mode>default</compat-mode>
<open-in>IE11</open-in>
</site>
<site url="adatum.com">
<compat-mode>IE7Enterprise</compat-mode>
<open-in>IE11</open-in>
</site>
<site url="contoso.com">
<compat-mode>default</compat-mode>
<open-in>IE11</open-in>
</site>
<site url="relecloud.com"/>
<compat-mode>default</compat-mode>
<open-in>none</open-in>
<site url="relecloud.com/about">
<compat-mode>IE8Enterprise"</compat-mode>
</site>
<site url="contoso.com/travel">
<compat-mode>IE7</compat-mode>
<open-in>IE11</open-in>
</site>
<site url="fabrikam.com">
<compat-mode>IE8Enterprise</compat-mode>
<open-in>IE11</open-in>
</site>
<site url="fabrikam.com/products">
<compat-mode>IE7</compat-mode>
<open-in>IE11</open-in>
</site>
</site-list>
```
### Updated schema elements
This table includes the elements used by the v.2 version of the Enterprise Mode schema.
<table>
<thead>
<tr class="header">
<th>Element</th>
<th>Description</th>
<th>Supported browser</th>
</tr>
</thead>
<tbody>
<tr>
<td>&lt;site-list&gt;</td>
<td>A new root node with this text is using the updated v.2 version of the schema. It replaces &lt;rules&gt;.
<p><b>Example</b>
<pre class="syntax">
&lt;site-list version="205"&gt;
&lt;site url="contoso.com"&gt;
&lt;compat-mode&gt;IE8Enterprise&lt;/compat-mode&gt;
&lt;open-in&gt;IE11&lt;/open-in&gt;
&lt;/site&gt;
&lt;/site-list&gt;</pre></td>
<td>Internet Explorer 11 and Microsoft Edge</td>
</tr>
<tr>
<td>&lt;site&gt;</td>
<td>A unique entry added for each site you want to put on the Enterprise Mode site list. The first &lt;site&gt; element will overrule any additional &lt;site&gt; elements that use the same value for the &lt;url&gt; element.
<p><b>Example</b>
<pre class="syntax">
&lt;site url="contoso.com"&gt;
&lt;compat-mode&gt;default&lt;/compat-mode&gt;
&lt;open-in&gt;none&lt;/open-in&gt;
&lt;/site&gt;</pre><p>
You can also use the self-closing version, &lt;url="contoso.com" /&gt;, which also sets:
<ul>
<li>&lt;compat-mode&gt;default&lt;/compat-mode&gt;</li>
<li>&lt;open-in&gt;none&lt;/open-in&gt;</li>
</ul></td>
<td>Internet Explorer 11 and Microsoft Edge</td>
</tr>
<tr>
<td>&lt;compat-mode&gt;</td>
<td>A child element that controls what compatibility setting is used for specific sites or domains. This element is only supported in IE11.
<p><b>Example</b>
<pre class="syntax">
&lt;site url="contoso.com"&gt;
&lt;compat-mode&gt;IE8Enterprise&lt;/compat-mode&gt;
&lt;/site&gt;</pre><p>
Where:
<ul>
<li><b>IE8Enterprise.</b> Loads the site in IE8 Enterprise Mode.<br>This element is required for sites included in the <b>EmIE</b> section of the v.1 schema and is needed to load in IE8 Enterprise Mode.</li><p>
<li><b>IE7Enterprise.</b> Loads the site in IE7 Enterprise Mode.<br>This element is required for sites included in the <b>EmIE</b> section of the v.1 schema and is needed to load in IE7 Enterprise Mode.<p><b>Important</b><br>This tag replaces the combination of the `"forceCompatView"="true"` attribute and the list of sites specified in the EmIE section of the v.1 version of the schema.</li><p>
<li><b>IE<i>[x]</i>.</b> Where <i>[x]</i> is the document mode number into which the site loads.</li><p>
<li><b>Default or not specified.</b> Loads the site using the default compatibility mode for the page. In this situation, X-UA-compatible meta tags or HTTP headers are honored.</li>
</ul></td>
<td>Internet Explorer 11</td>
</tr>
<tr>
<td>&lt;open-in&gt;</td>
<td>A child element that controls what browser is used for sites. This element supports the <b>Open in IE11</b> or <b>Open in Microsoft Edge</b> experiences, for devices running Windows 10.
<p><b>Example</b>
<pre class="syntax">
&lt;site url="contoso.com"&gt;
&lt;open-in&gt;none&lt;/open-in&gt;
&lt;/site&gt;</pre><p>
Where:
<ul>
<li><b>IE11.</b> Opens the site in IE11, regardless of which browser is opened by the employee.</li><p>
<li><b>MSEdge.</b> Opens the site in Microsoft Edge, regardless of which browser is opened by the employee.</li><p>
<li><b>None or not specified.</b> Opens in whatever browser the employee chooses.</li>
</ul></td>
<td>Internet Explorer 11 and Microsoft Edge</td>
</tr>
</table>
### Updated schema attributes
The &lt;url&gt; attribute, as part of the &lt;site&gt; element in the v.2 version of the schema, replaces the &lt;domain&gt; element from the v.1 version of the schema.
<table>
<thead>
<tr class="header">
<th>Attribute</th>
<th>Description</th>
<th>Supported browser</th>
</tr>
</thead>
<tbody>
<tr>
<td>version</td>
<td>Specifies the version of the Enterprise Mode Site List. This attribute is supported for the &lt;site-list&gt; element.</td>
<td>Internet Explorer 11 and Microsoft Edge</td>
</tr>
<tr>
<td>url</td>
<td>Specifies the URL (and port number using standard port conventions) to which the child elements apply. The URL can be a domain, sub-domain, or any path URL.
<br><b>Note</b><br>
Make sure that you don't specify a protocol. Using &lt;site url="contoso.com"&gt; applies to both http://contoso.com and https://contoso.com.
<p><b>Example</b>
<pre class="syntax">
&lt;site url="contoso.com:8080"&gt;
&lt;compat-mode&gt;IE8Enterprise&lt;/compat-mode&gt;
&lt;open-in&gt;IE11&lt;/open-in&gt;
&lt;/site&gt;</pre>
In this example, going to http://contoso.com:8080 using Microsoft Edge, causes the site to open in IE11 and load in IE8 Enterprise Mode.</td>
<td>Internet Explorer 11 and Microsoft Edge</td>
</tr>
</table>
### Deprecated attributes
These v.1 version schema attributes have been deprecated in the v.2 version of the schema:
<table>
<thead>
<tr class="header">
<th>Deprecated attribute</th>
<th>New attribute</th>
<th>Replacement example</th>
</tr>
</thead>
<tbody>
<tr>
<td>&lt;forceCompatView&gt;</td>
<td>&lt;compat-mode&gt;</td>
<td>Replace &lt;forceCompatView="true"&gt; with &lt;compat-mode&gt;IE7Enterprise&lt;/compat-mode&gt;</td>
</tr>
<tr>
<td>&lt;docMode&gt;</td>
<td>&lt;compat-mode&gt;</td>
<td>Replace &lt;docMode="IE5"&gt; with &lt;compat-mode&gt;IE5&lt;/compat-mode&gt;</td>
</tr>
<tr>
<td>&lt;doNotTransition&gt;</td>
<td>&lt;open-in&gt;</td>
<td>Replace &lt;doNotTransition="true"&gt; with &lt;open-in&gt;none&lt;/open-in&gt;</td>
</tr>
<tr>
<td>&lt;domain&gt; and &lt;path&gt;</td>
<td>&lt;site&gt;</td>
<td>Replace:
<pre class="syntax">
&lt;emie&gt;
&lt;domain exclude="false"&gt;contoso.com&lt;/domain&gt;
&lt;/emie&gt;</pre>
With:
<pre class="syntax">
&lt;site url="contoso.com"/&gt;
&lt;compat-mode&gt;IE8Enterprise&lt;/compat-mode&gt;
&lt;/site&gt;</pre>
<b>-AND-</b><p>
Replace:
<pre class="syntax">
&lt;emie&gt;
&lt;domain exclude="true"&gt;contoso.com
&lt;path exclude="false" forceCompatView="true"&gt;/about&lt;/path&gt;
&lt;/domain&gt;
&lt;/emie&gt;</pre>
With:
<pre class="syntax">
&lt;site url="contoso.com/about"&gt;
&lt;compat-mode&gt;IE7Enterprise&lt;/compat-mode&gt;
&lt;/site&gt;</pre></td>
</tr>
</table>
While the old, replaced attributes aren't supported in the v.2 version of the schema, they'll continue to work in the v.1 version of the schema. If, however, you're using the v.2 version of the schema and these attributes are still there, the v.2 version schema takes precedence. We don’t recommend combining the two schemas, and instead recommend that you move to the v.2 version of the schema to take advantage of the new features.
**Important**<br>
Saving your v.1 version of the file using the new Enterprise Mode Site List Manager tool for Windows 10 automatically updates the XML to the new v.2 version of the schema.
### What not to include in your schema
We recommend that you not add any of the following items to your schema because they can make your compatibility list behave in unexpected ways:
- Don’t use protocols. For example, http://, https://, or custom protocols. They break parsing.
- Don’t use wildcards.
- Don't use IP Addresses.
- Don’t use query strings, ampersands break parsing.
## Related topics
- [Use the Enterprise Mode Site List Manager tool](https://technet.microsoft.com/en-us/library/dn640701.aspx)

45
browsers/internet-explorer-11/ie11-deploy-guide/export-your-enterprise-mode-site-list-from-the-enterprise-mode-site-list-manager.md Normal file
View File

@ -0,0 +1,45 @@
---
Description: After you create your Enterprise Mode site list in the Enterprise Mode Site List Manager, you can export the contents to an Enterprise Mode (.EMIE) file.
ms.assetid: 9ee7c13d-6fca-4446-bc22-d23a0213a95d
ms.prod: IE11
ms.mktglfcycl: deploy
ms.sitesec: library
ms.pagetype: appcompat
title: Export your Enterprise Mode site list from the Enterprise Mode Site List Manager tool
---
# Export your Enterprise Mode site list from the Enterprise Mode Site List Manager tool
**Last updated**
- November 12, 2015
**Applies to:**
- Windows 10
- Windows 8.1
- Windows 7
- Windows Server 2012 R2
- Windows Server 2008 R2 with Service Pack 1 (SP1)
After you create your Enterprise Mode site list in the Enterprise Mode Site List Manager, you can export the contents to an Enterprise Mode (.EMIE) file. This file includes all of your URLs, including your compatibility mode selections and should be stored somewhere safe. If your list gets deleted by mistake you can easily import this file and return everything back to when this file was last saved.
**Important**<br> 
This file is not intended for distribution to your managed devices. Instead, it is only for transferring data and comments from one manager to another. For example, if one administrator leaves and passes the existing data to another administrator. Internet Explorer doesn’t read this file.
**To export your compatibility list**
1. On the **File** menu of the Enterprise Mode Site List Manager, click **Export**.
2. Export the file to your selected location. For example, `C:\Users\<user_name>\Documents\sites.emie`.
## Related topics
- [Download the Enterprise Mode Site List Manager for Windows 10 tool](http://go.microsoft.com/fwlink/?LinkId=716853)
- [Download the Enterprise Mode Site List Manager for Windows 7 and Windows 8.1 tool](http://go.microsoft.com/fwlink/?LinkID=394378)
- [Use the Enterprise Mode Site List Manager tool](use-the-enterprise-mode-site-list-manager-tool.md)
 
 

102
browsers/internet-explorer-11/ie11-deploy-guide/fix-compat-issues-with-doc-modes-and-enterprise-mode-site-list.md Normal file
View File

@ -0,0 +1,102 @@
---
Description: The Internet Explorer 11 Enterprise Mode site list lets you specify document modes for specific websites, helping you fix compatibility issues without changing a single line of code on the site.
ms.assetid: 4b21bb27-aeac-407f-ae58-ab4c6db2baf6
ms.prod: IE11
ms.mktglfcycl: deploy
ms.sitesec: library
ms.pagetype: appcompat
title: Fix web compatibility issues using document modes and the Enterprise Mode site list
---
# Fix web compatibility issues using document modes and the Enterprise Mode site list
The Internet Explorer 11 Enterprise Mode site list lets you specify document modes for specific websites, helping you fix compatibility issues without changing a single line of code on the site. This addition to the site list is a continuation of our commitment to help you upgrade and stay up-to-date on the latest version of Internet Explorer, while still preserving your investments in existing apps.
## What does this mean for me?
Enterprises can have critical apps that are coded explicitly for a specific browser version and that might not be in their direct control, making it very difficult and expensive to update to modern standards or newer browser versions. Because you can decide which URLs should open using specific document modes, this update helps ensure better compatibility, faster upgrades, and reduced testing and fixing costs.
## How does this fix work?
You can continue to use your legacy and orphaned web apps, by specifying a document mode in the centralized Enterprise Mode site list. Then, when IE11 goes to a site on your list, the browser loads the page in the specified document mode just as it would if it were specified through an X-UA-Compatible meta tag on the site. For more information about document modes and X-UA-compatible headers, see [Defining document compatibility](http://go.microsoft.com/fwlink/?LinkId=518412).
**Important**<br>
Enterprise Mode takes precedence over document modes, so sites that are already included in the Enterprise Mode site list won’t be affected by this update and will continue to load in Enterprise Mode, as usual.
### When do I use document modes versus Enterprise Mode?
While the `<emie>` functionality provides great compatibility for you on Windows Internet Explorer 8 or Windows Internet Explorer 7, the new `<docMode>` capabilities can help you stay up-to-date regardless of which versions of IE are running in your environment. Because of this, we recommend starting your testing process like this:
- If your enterprise primarily uses Internet Explorer 8 or Internet Explorer 7 start testing using Enterprise Mode.
- If your enterprise primarily uses Windows Internet Explorer 9 or Internet Explorer 10, start testing using the various document modes.
Because you might have multiple versions of IE deployed, you might need to use both Enterprise Mode and document modes to effectively move to IE11.
### Test your sites for document mode compatibility
To see if this fix might help you, run through this process one step at a time, for each of your problematic sites:
1. Go to a site having compatibility problems, press **F12** to open the **F12 Developer Tools**, and go to the **Emulation** tool.
![Emulation tool showing document mode selection](images/docmode-f12.png)
2. Starting with the **11 (Default)** option, test your broken scenario.<br>
If that doesn’t work, continue down to the next lowest document mode, stopping as soon as you find a document mode that fixes your problems. For more information about the Emulation tool, see [Emulate browsers, screen sizes, and GPS locations](http://go.microsoft.com/fwlink/?LinkId=518417).
3. If none of the document modes fix your issue, change the **Browser Profile** to **Enterprise**, pick the mode you want to test with starting with **8** (IE8 Enterprise Mode), and then test your broken scenario.
### Add your site to the Enterprise Mode site list
After you’ve figured out the document mode that fixes your compatibility problems, you can add the site to your Enterprise Mode site list.
**Note**<br>
There are two versions of the Enterprise Mode site list schema and the Enterprise Mode Site List Manager tool, based on your operating system. For more info about the schemas, see [Enterprise Mode schema v.2 guidance for Windows 10 devices](enterprise-mode-schema-version-2-guidance.md) or [Enterprise Mode schema v.1 guidance for Windows 7 and Windows 8.1 devices](enterprise-mode-schema-version-1-guidance.md). For more info about the different site list management tools, see [Use the Enterprise Mode Site List Manager tool](use-the-enterprise-mode-site-list-manager-tool.md).
**To add your site to the site list**
1. Open the Enterprise Mode Site List Manager tool, and click **Add**.
![Enterprise Mode Site List Manager, showing the available modes](images/emie-listmgr.png)
2. Add the **URL** and pick the document mode from the **Launch in** box. This should be the same document mode you found fixed your problems while testing the site.<br>
Similar to Enterprise Mode, you can specify a document mode for a particular web path—such as contoso.com/ERP—or at a domain level. In the above, the entire contoso.com domain loads in Enterprise Mode, while microsoft.com is forced to load into IE8 Document Mode and bing.com loads in IE11.
**Note**<br>
For more information about Enterprise Mode, see [What is Enterprise Mode?](what-is-enterprise-mode.md) For more information about the Enterprise Mode Site List Manager tool and how to add sites to your site list, see [Enterprise Mode Site List Manager tool](use-the-enterprise-mode-site-list-manager-tool.md).
### Review your Enterprise Mode site list
Take a look at your Enterprise Mode site list and make sure everything is the way you want it. The next step will be to turn the list on and start to use it in your company. The Enterprise Mode Site List Manager tool will look something like:
![Enterprise Mode Site List Manager tool, showing the different modes](images/emie-sitelistmgr.png)
And the underlying XML code will look something like:
``` xml
<rules version="1">
<emie>
<domain exclude="false">bing.com<path exclude="false" forceCompatView="true">/images</path></domain>
<domain exclude="true">www.msn.com<path exclude="true">/news</path></domain>
</emie>
<docmode />
<docMode>
<domain docMode="edge">timecard</domain>
<domain docMode="edge">tar</domain>
<domain docMode="9">msdn.microsoft.com</domain>
</docMode>
</rules>
```
### Turn on Enterprise Mode and using your site list
If you haven’t already turned on Enterprise Mode for your company, you’ll need to do that. You can turn on Enterprise Mode using Group Policy or your registry. For specific instructions and details, see [Turn on Enterprise Mode and use a site list](turn-on-enterprise-mode-and-use-a-site-list.md).
## Turn off default Compatibility View for your intranet sites
By default, IE11 uses the **Display intranet sites in Compatibility View** setting. However, we’ve heard your feedback and know that you might want to turn this functionality off so you can continue to upgrade your web apps to more modern standards.
To help you move forward, you can now use the Enterprise Mode site list to specify sites or web paths to use the IE7 document mode, which goes down to IE5 “Quirks” mode if the page doesn’t have an explicit `DOCTYPE` tag. Using this document mode effectively helps you provide the Compatibility View functionality for single sites or a group of sites, which after thorough testing, can help you turn off Compatibility View as the default setting for your intranet sites.
## Related topics
- [Download the Enterprise Mode Site List Manager for Windows 10 tool](http://go.microsoft.com/fwlink/?LinkId=716853)
- [Download the Enterprise Mode Site List Manager for Windows 7 and Windows 8.1 tool](http://go.microsoft.com/fwlink/?LinkID=394378)
- [Enterprise Mode Site List Manager tool](use-the-enterprise-mode-site-list-manager-tool.md)
 
 

44
browsers/internet-explorer-11/ie11-deploy-guide/fix-validation-problems-using-the-enterprise-mode-site-list-manager.md Normal file
View File

@ -0,0 +1,44 @@
---
Description: When you add multiple sites to your Enterprise Mode site list entries, they’re validated by the Enterprise Mode Site List Manager before they’re entered into your global list.
ms.assetid: 9f80e39f-dcf1-4124-8931-131357f31d67
ms.prod: IE11
ms.mktglfcycl: deploy
ms.sitesec: library
ms.pagetype: appcompat
title: Fix validation problems using the Enterprise Mode Site List Manager tool
---
# Fix validation problems using the Enterprise Mode Site List Manager tool
**Last updated**
- November 12, 2015
**Applies to:**
- Windows 10
- Windows 8.1
- Windows 7
- Windows Server 2012 R2
- Windows Server 2008 R2 with Service Pack 1 (SP1)
When you add multiple sites to your Enterprise Mode site list entries, they’re validated by the Enterprise Mode Site List Manager tool before they’re entered into your global list. If a site doesn’t pass validation, you’ll have a couple of options to address it.
There are typically 3 types of errors you’ll see:
- **Validation**. The site caused a validation error. Typically these occur because of typos, malformed URLs, or access-related issues. You can pick the site, click **Add to list** to ignore the problem and accept the site to your site list, or you can click **OK** to keep the site off of your site list.
- **Duplicate**. The site already exists in the global compatibility list with a different compatibility mode. For example, the site was originally rendered in Enterprise Mode, but this update is for Default IE. You can pick the site, click **Add to list** to ignore the problem and accept the change to your site list, or you can click **OK** to keep your original compatibility mode.
- **Redirection**. This is the least common type of validation error. Typically in this situation, a site redirects from an easy-to-remember URL to a longer URL. Like `\\tar` redirects to `\\timecard`. You can add the short URL or you can add both the short and long versions to your list.<br>
Another possibility is that redirection happens multiple times, with an intermediary site experiencing compatibility issues. For example, an employee types a short URL that then redirects multiple times, finally ending up on a non-intranet site. In this situation, you might want to add the intermediary URLs to your Enterprise Mode site list, in case there’s logic in one of them that has compatibility issues.
## Related topics
- [Download the Enterprise Mode Site List Manager for Windows 10 tool](http://go.microsoft.com/fwlink/?LinkId=716853)
- [Download the Enterprise Mode Site List Manager for Windows 7 and Windows 8.1 tool](http://go.microsoft.com/fwlink/?LinkID=394378)
- [Use the Enterprise Mode Site List Manager tool](use-the-enterprise-mode-site-list-manager-tool.md)
 
 

36
browsers/internet-explorer-11/ie11-deploy-guide/group-policy-and-advanced-group-policy-mgmt-ie11.md Normal file
View File

@ -0,0 +1,36 @@
---
Description: Overview about Group Policy, Advanced Group Policy Management (AGPM), and Internet Explorer 11
ms.assetid: 63a7ef4a-6de2-4d08-aaba-0479131e3406
ms.prod: IE11
ms.mktglfcycl: deploy
ms.sitesec: library
ms.pagetype: security
title: Group Policy, Advanced Group Policy Management (AGPM), and Internet Explorer 11
---
# Group Policy, Advanced Group Policy Management (AGPM), and Internet Explorer 11
Advanced Group Policy Management (AGPM) is an add-on license that available for the Microsoft Desktop Optimization Pack (MDOP). This license gives you change control and a role assignment-model that helps optimize Group Policy management and reduce the risk of widespread failures.
From AGPM you can:
- **Edit GPOs outside of your production environment.** Your GPOs are stored in an outside archive for editing, reviewing, and approving. Then, when you deploy, AGPM moves the GPOs to your production environment.
- **Assign roles to your employees.** You can assign 3 roles to your employees or groups, including:
- **Reviewer.** Can view and compare GPOs in the archive. This role can't edit or deploy GPOs.
- **Editor.** Can view, compare, check-in and out, and edit GPOs in the archive. This role can also request GPO deployment.
- **Approver.** Can approve GPO creation and deployment to the production environment.
- **Manage your GPO lifecycle with change control features.** You can use the available version-control, history, and auditing features to help you manage your GPOs while moving through your archive, to your editing process, and finally to your GPO deployment.
**Note**<br>
For more information about AGPM, and to get the license, see [Microsoft Advanced Group Policy Management 4.0 SP1 Step-by-Step Guide](http://go.microsoft.com/fwlink/?LinkId=294916).
 
 

41
browsers/internet-explorer-11/ie11-deploy-guide/group-policy-and-group-policy-mgmt-console-ie11.md Normal file
View File

@ -0,0 +1,41 @@
---
Description: Overview about Group Policy, the Group Policy Management Console (GPMC), and Internet Explorer 11
ms.assetid: ae3d227d-3da7-46b8-8a61-c71bfeae0c63
ms.prod: IE11
ms.mktglfcycl: deploy
ms.sitesec: library
ms.pagetype: security
title: Group Policy, the Group Policy Management Console (GPMC), and Internet Explorer 11
---
# Group Policy, the Group Policy Management Console (GPMC), and Internet Explorer 11
A Microsoft Management Console (MMC)-based tool that uses scriptable interfaces to manage Group Policy. The 32-bit and 64-bit versions are included with Windows Server R2 with Service Pack 1 (SP1) and Windows Server 2012 R2.
## Why use the GPMC?
The GPMC lets you:
- Import, export, copy, paste, backup and restore GPOs.
- Search for existing GPOs.
- Create reports, including providing the Resultant Set of Policy (RSoP) data in HTML reports that you can save and print.
- Use simulated RSoP data to prototype your Group Policy before implementing it in the production environment.
- Obtain RSoP data to view your GPO interactions and to troubleshoot your Group Policy deployment.
- Create migration tables to let you import and copy GPOs across domains and across forests. Migration tables are files that map references to users, groups, computers, and Universal Naming Convention (UNC) paths in the source GPO to new values in the destination GPO.
- Create scriptable interfaces to support all of the operations available within the GPMC. You can't use scripts to edit individual policy settings in a GPO.
For more information about the GPMC, see [Group Policy Management Console](http://go.microsoft.com/fwlink/?LinkId=214515) on TechNet.
## Searching for Group Policy settings
To search for Group Policy settings in the Group Policy Management Console (GPMC), use the [Group Policy Search tool](http://go.microsoft.com/fwlink/p/?LinkId=279857). To find the Group Policy settings, click **Windows Components**, and then click **Internet Explorer**.
 
 

43
browsers/internet-explorer-11/ie11-deploy-guide/group-policy-and-ie11.md Normal file
View File

@ -0,0 +1,43 @@
---
Description: 'Use the topics in this section to learn about Group Policy and how to use it to manage Internet Explorer.'
ms.assetid: 50383d3f-9ac9-4a30-8852-354b6eb9434a
ms.prod: IE11
ms.mktglfcycl: deploy
ms.sitesec: library
ms.pagetype: security
title: 'Group Policy and Internet Explorer 11 (IE11)'
---
**Last updated**
- November 12, 2015
**Applies to:**
- Windows 10
- Windows 8.1
- Windows 7
- Windows Server 2012 R2
- Windows Server 2008 R2 with Service Pack 1 (SP1)
Use the topics in this section to learn about Group Policy and how to use it to manage Internet Explorer.
## In this section
|Topic |Description |
|----------------------------------------------------|-----------------------------------------------------------------|
|[New group policy settings for Internet Explorer 11](new-group-policy-settings-for-ie11.md) |Info about many of the new group policy settings added for Internet Explorer 11. |
|[Group Policy management tools](group-policy-objects-and-ie11.md) |Guidance about how to use Microsoft Active Directory Domain Services (AD DS) to manage your Group Policy settings. |
|[ActiveX installation using group policy](activex-installation-using-group-policy.md) |Info about using the ActiveX Installer Service (AXIS) and Group Policy to manage your ActiveX control deployment. |
|[Group Policy and compatibility with Internet Explorer 11](group-policy-compatability-with-ie11.md) |Our Group Policy recommendations for security, performance, and compatibility with previous versions of IE, regardless of which Zone the website is in. |
|[Group policy preferences and Internet Explorer 11](group-policy-preferences-and-ie11.md) |Info about Group Policy preferences, as compared to Group Policy settings. |
|[Administrative templates and Internet Explorer 11](administrative-templates-and-ie11.md) |Info about Administrative Templates, including where to store them and the related Group Policy settings. |
|[Enable and disable add\-ons using administrative templates and group policy](enable-and-disable-add-ons-using-administrative-templates-and-group-policy.md) |Guidance about how to use your local Group Policy editor or the CLSID and Administrative Templates to manage your Group Policy objects.
 
 
 

29
browsers/internet-explorer-11/ie11-deploy-guide/group-policy-and-local-group-policy-editor-ie11.md Normal file
View File

@ -0,0 +1,29 @@
---
Description: 'Group Policy, the Local Group Policy Editor, and Internet Explorer 11'
ms.assetid: 6fc30e91-efac-4ba5-9ee2-fa77dcd36467
ms.prod: IE11
ms.mktglfcycl: deploy
ms.sitesec: library
ms.pagetype: security
title: 'Group Policy, the Local Group Policy Editor, and Internet Explorer 11'
---
# Group Policy, the Local Group Policy Editor, and Internet Explorer 11
A Microsoft Management Console (MMC)-based tool that manages both computer and user-related configurations for an individual computer policy. This tool is included with Windows® 7 Service Pack 1 (SP1) and Windows 8.1.
Here's a list of the policy settings you can use, based on the configuration type. For more info, see [Local Group Policy Editor](http://go.microsoft.com/fwlink/p/?LinkId=294912).
|Computer configuration |User configuration |
|-----------------------|-------------------|
|Windows settings:<ul><li>Name Resolution policy</li><li>Scripts (Startup/Shutdown)</li><li>Deployed printers</li><li>Security settings</li><li>Policy-based Quality of Service (QoS)</li></ul> |Windows settings:<ul><li>Scripts (Startup/Shutdown)</li><li>Deployed printers</li><li>Security settings</li><li>Policy-based Quality of Service (QoS)</li><br></ul> |
|Administrative templates:<ul><li>Control Panel</li><li>Network</li><li>Printers</li><li>Server</li><li>System</li><li>Windows components</li><li>All settings</li><br></ul> |Administrative templates:<ul><li>Control Panel</li><li>Desktop</li><li>Network</li><li>Shared folders</li><li>Start menu and taskbar</li><li>System</li><li>Windows components</li><li>All settings</li></ul> |
 
 
 

31
browsers/internet-explorer-11/ie11-deploy-guide/group-policy-compatability-with-ie11.md Normal file
View File

@ -0,0 +1,31 @@
---
Description: Group Policy suggestions for compatibility with Internet Explorer 11
ms.assetid: 7482c99f-5d79-4344-9e1c-aea9f0a68e18
ms.prod: IE11
ms.mktglfcycl: deploy
ms.sitesec: library
ms.pagetype: security
title: Group Policy and compatibility with Internet Explorer 11
---
# Group Policy and compatibility with Internet Explorer 11
Internet Explorer 11 has many Group Policy entries that can be configured for keeping your environment managed and safe. This table includes all of our recommendations around security, performance, and compatibility with the previous versions of Internet Explorer, regardless of which Zone the website is in.
|Activity |Location |Setting the policy object |
|---------------------------------|----------------------------------------------|-------------------------------------------------------------------------|
|Turn on Compatibility View for all intranet zones |`Administrative Templates\Windows Components\Internet Explorer\Compatibility View` |Double-click **Turn on IE Standards Mode for local intranet** , and then click **Disabled**. |
|Turn on Compatibility View for selected websites, using Group Policy |`Administrative Templates\Windows Components\Internet Explorer\Compatibility View` |Double-click **Use Policy List of Windows Internet Explorer 7 sites** , and then click **Enabled**.Users will be able to add or remove sites manually to their local Compatibility View list, but they won’t be able to remove the sites you specifically added. |
|Turn on Quirks mode for selected websites, using Group Policy |`Administrative Templates\Windows Components\Internet Explorer\Compatibility View` |Double-click **Use Policy List of Quirks Mode sites**, and then click **Enabled**. |
|Ensure your users are using the most up-to-date version of Microsoft’s compatibility list. |`Administrative Templates\Windows Components\Internet Explorer\Compatibility View` |Double-click **Include updated Web site lists from Microsoft**, and then click **Enabled**. |
|Restrict users from making security zone configuration changes. |`Administrative Templates\ Windows Components\Internet Explorer\Internet Control Panel` |Double-click **Disable the Security Page**, and then click **Enabled**. |
|Control which security zone settings are applied to specific websites. |`Administrative Templates\ Windows Components\Internet Explorer\Internet Control Panel\Security Page` |Double-click **Site to Zone Assignment List**, click **Enabled**, and then enter your list of websites and their applicable security zones. |
|Turn off Data Execution Prevention (DEP). |`Administrative Templates\ Windows Components\Internet Explorer\Security Features` |Double-click **Turn off Data Execution Prevention**, and then click **Enabled**. |
 
 
 

48
browsers/internet-explorer-11/ie11-deploy-guide/group-policy-objects-and-ie11.md Normal file
View File

@ -0,0 +1,48 @@
---
Description: Overview of the available Group Policy management tools
ms.assetid: e33bbfeb-6b80-4e71-8bba-1d0369a87312
ms.prod: IE11
ms.mktglfcycl: deploy
ms.sitesec: library
ms.pagetype: security
title: Group Policy management tools
---
# Group Policy management tools
Group Policy, based on Microsoft Active Directory Domain Services (AD DS), lets you manage your organization's computer and user settings as part of your Group Policy objects (GPOs), which are added and changed in the Group Policy Management Console (GPMC). GPOs can include registry-based Administrative Template policy settings, security settings, software deployment information, scripts, folder redirection, and preferences. The most effective way to target a specific GPO is to use Windows Management Instrumentation (WMI) filters. Like, creating a WMI filter that applies a GPO only to computers with a specific make and model.
By using Group Policy, you can set up a policy setting once, and then copy that setting onto many computers. For example, you can set up multiple Internet Explorer 11 security settings in a GPO that's linked to a domain, and then apply all of those settings to every computer in the domain.
**Note**<br>  
For more information about Group Policy, see the [Group Policy TechCenter](http://go.microsoft.com/fwlink/?LinkId=214514). This site provides links to the latest technical documentation, videos, and downloads for Group Policy.
## Managing settings with GPOs
After deploying IE11 to your organization, you can continue to manage the browser settings by using Active Directory Domain Services (AD DS) together with the following Group Policy-related setting management groups:
- [Administrative templates and Internet Explorer 11](administrative-templates-and-ie11.md). Used to manage registry-based policies and options.
- [Group policy preferences and Internet Explorer 11](group-policy-preferences-and-ie11.md). Used to set up and manage options that can be changed by the user after installation.
**Note**<br>
Whenever possible, we recommend that you manage IE11 using Administrative Templates, because these settings are always written to secure policy branches in the registry. In addition, we recommend that you deploy using standard user accounts instead of letting your users log on to their computers as administrators. This helps to prevent your users from making unwanted changes to their systems or overriding Group Policy settings.
 
Users won't be able to use the IE11 user interface or the registry to change any managed settings on their computers. However, they will be able to change many of the preferences associated with the settings you set up using the Internet Explorer Administration Kit 11 (IEAK 11).
## Which GPO tool should I use?
You can use any of these tools to create, manage, view, and troubleshoot Group Policy objects (GPOs). For information about each, see:
- [Group Policy, the Group Policy Management Console (GPMC), and Internet Explorer 11](group-policy-and-group-policy-mgmt-console-ie11.md). Provides a single location to manage all GPOs, WMI filters, and Group Policy–related permissions across multiple forests in an organization.
- [Group Policy, the Local Group Policy Editor, and Internet Explorer 11](group-policy-and-local-group-policy-editor-ie11.md). Provides a user interface that lets you edit settings within individual GPOs.
- [Group Policy, Advanced Group Policy Management (AGPM), and Internet Explorer 11](group-policy-and-advanced-group-policy-mgmt-ie11.md). An add-on license for the Microsoft Desktop Optimization Pack (MDOP) that helps to extend Group Policy for Software Assurance customers.
- [Group Policy, Windows Powershell, and Internet Explorer 11](group-policy-windows-powershell-ie11.md). A command-line shell and scripting language that helps automate Windows and application administration on a single computer locally, or across many computers remotely.
 
 

31
browsers/internet-explorer-11/ie11-deploy-guide/group-policy-preferences-and-ie11.md Normal file
View File

@ -0,0 +1,31 @@
---
Description: Info about Group Policy preferences versus Group Policy settings
ms.assetid: f2264c97-7f09-4f28-bb5c-58ab80dcc6ee
ms.prod: IE11
ms.mktglfcycl: deploy
ms.sitesec: library
ms.pagetype: security
title: Group policy preferences and Internet Explorer 11
---
# Group policy preferences and Internet Explorer 11
Group Policy preferences are less strict than Group Policy settings, based on:
| |Group Policy preferences |Group Policy settings |
|-----|-------------------------|----------------------|
|Enforcement |<ul><li>Not enforced</li><li>Has the user interface turned on</li><li>Can only be refreshed or applied once</li></ul> |<ul><li>Enforced</li><li>Has the user interface turned off</li><li>Can be refreshed multiple times</li></ul> |
|Flexibility |Lets you create preference items for registry settings, files, and folders. |<ul><li>Requires app support</li><li>Needs you to create Administrative Templates for new policy settings</li><li>Won't let you create policy settings to manage files and folders</li></ul> |
|Local Group Policy |Not available |Available
|Awareness |Supports apps that aren't Group Policy-aware |Requires apps to be Group Policy-aware |
|Storage |<ul><li>Overwrites the original settings</li><li>Removing the preference doesn't restore the original setting</li></ul> |<ul><li>Doesn't overwrite the original settings</li><li>Stored in the Policy branches of the registry</li><li>Removing the setting restores the original setting</li></ul> |
|Targeting and filtering |<ul><li>Targeting is specific, with a user interface for each type of targeting item</li><li>Supports targeting at the individual preference item level</li></ul> |<ul><li>Filtering is based on Windows Management Instrumentation (WMI), and requires writing WMI queries</li><li>Supports filtering at the Group Policy Object (GPO) level</li></ul> |
For more information about Group Policy preferences, see the [Group Policy Settings Reference for Windows and Windows Server](http://go.microsoft.com/fwlink/?LinkId=279876).
 
 

22
browsers/internet-explorer-11/ie11-deploy-guide/group-policy-problems-ie11.md Normal file
View File

@ -0,0 +1,22 @@
---
Description: Links to troubleshooting topics and log files that can help address Group Policy problems with Internet Explorer 11.
ms.assetid: 0da0d9a9-200c-46c4-96be-630e82de017b
ms.prod: IE11
ms.mktglfcycl: deploy
ms.sitesec: library
ms.pagetype: security
title: Group Policy problems with Internet Explorer 11
---
# Group Policy problems with Internet Explorer 11
If you're having problems with Group Policy and Internet Explorer 11, or if you're looking for high-level information about the concepts and techniques used to troubleshoot Group Policy, as well as links to detailed reference topics, procedures, and troubleshooting scenario guides, see [Group Policy Analysis and Troubleshooting Overview](http://go.microsoft.com/fwlink/?LinkId=279872).
## Group Policy Object-related Log Files
You can use the Event Viewer to review Group Policy-related messages in the **Windows Logs**, **System** file. All of the Group Policy-related events are shown with a source of **GroupPolicy**. For more information about the Event Viewer, see [What information appears in event logs? (Event Viewer)](http://go.microsoft.com/fwlink/p/?LinkId=294917).
 
 

42
browsers/internet-explorer-11/ie11-deploy-guide/group-policy-shortcut-extensions-ie11.md Normal file
View File

@ -0,0 +1,42 @@
---
Description: Instructions about how to create and configure shortcut preference extensions to file system objects, URLs, and shell objects.
ms.assetid: c6fbf990-13e4-4be7-9f08-5bdd43179b3b
ms.prod: IE11
ms.mktglfcycl: deploy
ms.sitesec: library
ms.pagetype: security
title: 'Group Policy, Shortcut Extensions, and Internet Explorer 11'
---
# Group Policy, Shortcut Extensions, and Internet Explorer 11
Group Policy includes the Shortcuts preference extension, which lets you configure shortcuts to:
- **File system objects.** Traditional shortcuts that link to apps, files, folders, drives, shares, or computers. For example, linking a shortcut to an app from the **Start** screen.
- **URLs.** Shortcuts to webpages or FTP sites. For example, a link to your intranet site from your employee's **Favorites** folder.
- **Shell objects.** Shortcuts to objects that appear in the shell namespace, such as printers, desktop items, Control Panel items, the Recycle Bin, and so on.
## How do I configure shortcuts?
You can create and configure shortcuts for any domain-based Group Policy Object (GPO) in the Group Policy Management Console (GPMC).
**To create a new Shortcut preference item**
1. Open GPMC, right-click the Group Policy object that needs the new shortcut extension, and click **Edit**.
2. From **Computer Configuration** or **User Configuration**, go to **Preferences**, and then go to **Windows Settings**.
3. Right-click **Shortcuts**, click **New**, and then choose **Shortcut**.
4. Choose what the shortcut should do, including **Create**, **Delete**, **Replace**, or **Update**.
5. Type the required shortcut settings and your comments into the **Description** box, and click **OK**.
For more information about shortcut extensions, including step-by-step guidance, see [Shortcuts Extension](http://go.microsoft.com/fwlink/?LinkId=214525) and [Configure a Shortcut Item](http://go.microsoft.com/fwlink/?LinkId=301837).
 
 

31
browsers/internet-explorer-11/ie11-deploy-guide/group-policy-windows-powershell-ie11.md Normal file
View File

@ -0,0 +1,31 @@
---
Description: 'Overview about how Group Policy works with Windows Powershell and Internet Explorer 11'
ms.assetid: e3607cde-a498-4e04-9daa-b331412967fc
ms.prod: IE11
ms.mktglfcycl: deploy
ms.sitesec: library
ms.pagetype: security
title: 'Group Policy, Windows Powershell, and Internet Explorer 11'
---
# Group Policy, Windows Powershell, and Internet Explorer 11
Your domain-joined Group Policy Objects (GPOs) can use any of Group Policy-related “cmdlets” that run within Windows PowerShell.
Each cmdlet is a single-function command-line tool that can:
- Create, edit, remove, back up, and import GPOs.
- Create, update, and remove Group Policy links.
- Set inheritance flags and permissions on organizational units (OU) and domains.
- Configure registry-based policy settings and registry settings for Group Policy preferences.
For more info about PowerShell and Group Policy management, see [Use Windows PowerShell to Manage Group Policy](http://go.microsoft.com/fwlink/?LinkId=276828).
 
 

56
browsers/internet-explorer-11/ie11-deploy-guide/ie11-deployment-guide-for-it-pros.md Normal file
View File

@ -0,0 +1,56 @@
---
Description: Use this guide to learn about the several options and processes you''ll need to consider while you''re planning for, deploying, and customizing Internet Explorer 11 for your employee''s computers.
ms.assetid: bddc2d97-c38d-45c5-9588-1f5bbff2e9c3
ms.prod: IE11
ms.mktglfcycl: deploy
ms.sitesec: library
title: Internet Explorer 11 (IE11) - Deployment Guide for IT Pros
---
# Internet Explorer 11 (IE11) - Deployment Guide for IT Pros
**Last updated**
- December 17, 2015
**Applies to:**
- Windows 10
- Windows 8.1
- Windows 7
- Windows Server 2012 R2
- Windows Server 2008 R2 with Service Pack 1 (SP1)
Use this guide to learn about the several options and processes you'll need to consider while you're planning for, deploying, and customizing Internet Explorer 11 for your employee's computers.
**Important**<br>
Because this content isn't intended to be a step-by-step guide, not all of the steps are necessary to deploy IE11.
## In this guide
|Topic |Description |
|------|------------|
|[System requirements and language support for Internet Explorer 11 (IE11)](system-requirements-and-language-support-for-ie11.md) |IE11 is available for a number of systems and languages. This topic provides info about the minimum system requirements and language support. |
|[List of updated features and tools - Internet Explorer 11 (IE11)](updated-features-and-tools-with-ie11.md) |IE11 includes several new features and tools. This topic includes high-level info about the each of them. |
|[Install and Deploy Internet Explorer 11 (IE11)](install-and-deploy-ie11.md) |Use the topics in this section to learn how to customize your Internet Explorer installation package, how to choose the right method for installation, and how to deploy IE into your environment. You can also find more info about your virtualization options for legacy apps. |
|[Collect data using Enterprise Site Discovery](collect-data-using-enterprise-site-discovery.md) |Use IE to collect data on computers running Windows Internet Explorer 8 through IE11 on Windows 10, Windows 8.1, or Windows 7. This inventory information helps you build a list of websites used by your company so you can make more informed decisions about your IE deployments, including figuring out which sites might be at risk or require overhauls during future upgrades. |
|[Enterprise Mode for Internet Explorer 11 (IE11)](enterprise-mode-overview-for-ie11.md) |Use the topics in this section to learn how to set up and use Enterprise Mode and the Enterprise Mode Site List Manager tool in your company. |
|[Group Policy and Internet Explorer 11 (IE11)](group-policy-and-ie11.md) |Use the topics in this section to learn about Group Policy and how to use it to manage IE. |
|[Manage Internet Explorer 11](manage-ie11-overview.md) |Use the topics in this section to learn about how to auto detect your settings, auto configure your configuration settings, and auto configure your proxy configuration settings for IE. |
|[Troubleshoot Internet Explorer 11 (IE11)](troubleshoot-ie11-.md) |Use the topics in this section to learn how to troubleshoot several of the more common problems experienced with IE. |
|[Out-of-date ActiveX control blocking](out-of-date-activex-control-blocking.md) |ActiveX controls are small apps that let websites provide content, like videos, games, and let you interact with content like toolbars. Unfortunately, because many ActiveX controls aren’t automatically updated, they can become outdated as new versions are released. It’s very important that you keep your ActiveX controls up-to-date because malicious software (or malware) can target security flaws in outdated controls, damaging your computer by collecting info from it, installing unwanted software, or by letting someone else control it remotely. To help avoid this situation, IE includes a new security feature, called <em>out-of-date ActiveX control blocking</em>. |
|[Deprecated document modes and Internet Explorer 11](deprecated-document-modes.md) |Internet Explorer 8 introduced document modes as a way to move from the proprietary coding of web features to a more standardized type of coding that could run on multiple browsers and devices. Starting with Windows 10, we’re deprecating document modes.<p>This means that while IE11 will continue to support document modes, Microsoft Edge won’t. And because of that, it also means that if you want to use Microsoft Edge, you’re going to have to update your legacy webpages and apps to support modern features, browsers, and devices.<p><b>Note</b><br>For specific details about the technologies and APIs that are no longer supported in Microsoft Edge, see [A break from the past, part 2: Saying goodbye to ActiveX, VBScript, attachEvent](http://go.microsoft.com/fwlink/?LinkId=615953). |
|[What is the Internet Explorer 11 Blocker Toolkit?](what-is-the-internet-explorer-11-blocker-toolkit.md) |The IE11 Blocker Toolkit lets you turn off the automatic delivery of IE11 through the <b>Automatic Updates</b> feature of Windows Update. |
|[Missing Internet Explorer Maintenance (IEM) settings for Internet Explorer 11](missing-internet-explorer-maintenance-settings-for-ie11.md) |The Internet Explorer Maintenance (IEM) settings have been deprecated in favor of Group Policy preferences, Administrative Templates (.admx), and the Internet Explorer Administration Kit 11 (IEAK 11).<p>Because of this change, your IEM-configured settings will no longer work on computers running Internet Explorer 10 or newer. To fix this, you need to update the affected settings using Group Policy preferences, Administrative Templates (.admx), or the IEAK 11.<p>Because Group Policy Preferences and IEAK 11 run using asynchronous processes, you should choose to use only one of the tools within each group of settings. For example, using only IEAK 11 in the <b>Security</b> settings or Group Policy Preferences within the <b>Internet Zone</b> settings. Also, it's important to remember that policy is enforced and can't be changed by the user, while preferences are configured, but can be changed by the user. |
|[Missing the Compatibility View Button](missing-the-compatibility-view-button.md) |Compatibility View was introduced in Internet Explorer 8 to help existing content continue to work with Windows Internet Explorer 7, while developers updated their content to support modern interoperable web standards. Since then, the IE web platform, and the web itself, have changed so that most public web content looks for standards-based features instead of IE 7-compatible behavior.<p>Thanks to these changes, using IE11 in the latest standards mode is more compatible with the web than ever before. As a result, IE11 simplifies web page compatibility for users by removing the <b>Compatibility View</b> button and reducing the number of compatibility options in the F12 developer tools for developers. |
|[Deploy pinned websites using Microsoft Deployment Toolkit (MDT) 2013](deploy-pinned-sites-using-mdt-2013.md) |You can pin websites to the Windows 8.1 taskbar for quick access. You pin a website simply by dragging its tab to the taskbar. Some websites can also extend the icon’s Jump List.<p>The ability to pin websites to the Windows 8.1 taskbar can help make end-users in businesses more productive. As an IT professional, for example, you can pin intranet and SharePoint websites to the taskbar to make them immediately available to employees. In this article, you learn how to deploy pinned websites by using Lite Touch Installation in the [Microsoft Deployment Toolkit (MDT) 2013](http://go.microsoft.com/fwlink/?LinkId=398474).
## IE11 naming conventions
IE11 offers differing experiences in Windows 8.1:
|Name |Description |
|-----|------------|
|Internet Explorer or IE |The immersive browser, or IE, without a specific version. |
|Internet Explorer for the desktop |The desktop browser. This is the only experience available when running IE11 on Windows 7 SP1 |
|Internet Explorer 11 or IE11 |The whole browser, which includes both IE and Internet Explorer for the desktop. |

BIN
browsers/internet-explorer-11/ie11-deploy-guide/images/affectedsoftware.png Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 18 KiB

BIN
browsers/internet-explorer-11/ie11-deploy-guide/images/bulkadd-emiesitelistmgr.png Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 12 KiB

BIN
browsers/internet-explorer-11/ie11-deploy-guide/images/configmgractivexreport.png Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 74 KiB

BIN
browsers/internet-explorer-11/ie11-deploy-guide/images/configmgrhardwareinventory.png Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 63 KiB

BIN
browsers/internet-explorer-11/ie11-deploy-guide/images/docmode-f12.png Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 7.1 KiB

BIN
browsers/internet-explorer-11/ie11-deploy-guide/images/docmodeflow2.png Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 226 KiB

BIN
browsers/internet-explorer-11/ie11-deploy-guide/images/emie-listmgr.png Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 14 KiB

BIN
browsers/internet-explorer-11/ie11-deploy-guide/images/emie-sitelistmgr.png Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 7.2 KiB

BIN
browsers/internet-explorer-11/ie11-deploy-guide/images/ie-emie-editbindings.png Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 33 KiB

BIN
browsers/internet-explorer-11/ie11-deploy-guide/images/ie-emie-editpolicy.png Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 39 KiB

BIN
browsers/internet-explorer-11/ie11-deploy-guide/images/ie-emie-editregistrystring.png Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 2.5 KiB

BIN
browsers/internet-explorer-11/ie11-deploy-guide/images/ie-emie-grouppolicy.png Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 21 KiB

BIN
browsers/internet-explorer-11/ie11-deploy-guide/images/ie-emie-grouppolicysitelist.png Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 30 KiB

BIN
browsers/internet-explorer-11/ie11-deploy-guide/images/ie-emie-logfile.png Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 7.7 KiB

BIN
browsers/internet-explorer-11/ie11-deploy-guide/images/ie-emie-logging.png Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 26 KiB

BIN
browsers/internet-explorer-11/ie11-deploy-guide/images/ie-emie-packageupdate.png Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 11 KiB

BIN
browsers/internet-explorer-11/ie11-deploy-guide/images/ie-emie-publishsolution.png Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 60 KiB

BIN
browsers/internet-explorer-11/ie11-deploy-guide/images/ie-emie-publishweb.png Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 13 KiB

BIN
browsers/internet-explorer-11/ie11-deploy-guide/images/ie-emie-registrysitelist.png Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 14 KiB

BIN
browsers/internet-explorer-11/ie11-deploy-guide/images/ie-emie-reportwdetails.png Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 6.0 KiB

BIN
browsers/internet-explorer-11/ie11-deploy-guide/images/ie-emie-toolsmenu.png Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 11 KiB

BIN
browsers/internet-explorer-11/ie11-deploy-guide/images/ie-site-discovery-sample-report.png Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 234 KiB

BIN
browsers/internet-explorer-11/ie11-deploy-guide/images/ie11-inventory-addclassconnectscreen.png Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 20 KiB

BIN
browsers/internet-explorer-11/ie11-deploy-guide/images/ieoutdatedcontroloutsideofie.png Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 121 KiB

BIN
browsers/internet-explorer-11/ie11-deploy-guide/images/ieoutdatedcontrolwarning.png Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 3.4 KiB

BIN
browsers/internet-explorer-11/ie11-deploy-guide/images/outdatedcontrolwarning.png Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 3.8 KiB

BIN
browsers/internet-explorer-11/ie11-deploy-guide/images/securitybulletin-filter.png Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 22 KiB

BIN
browsers/internet-explorer-11/ie11-deploy-guide/images/setdefaultbrowsergp.png Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 37 KiB

46
browsers/internet-explorer-11/ie11-deploy-guide/import-into-the-enterprise-mode-site-list-manager.md Normal file
View File

@ -0,0 +1,46 @@
---
Description: If you need to replace your entire site list because of errors, or simply because it’s out of date, you can import your exported Enterprise Mode site list using the Enterprise Mode Site List Manager.
ms.assetid: cacd5d68-700b-4a96-b4c9-ca2c40c1ac5f
ms.prod: IE11
ms.mktglfcycl: deploy
ms.sitesec: library
ms.pagetype: appcompat
title: Import your Enterprise Mode site list to the Enterprise Mode Site List Manager (Internet Explorer 11)
---
# Import your Enterprise Mode site list to the Enterprise Mode Site List Manager
**Last updated**
- November 12, 2015
**Applies to:**
- Windows 10
- Windows 8.1
- Windows 7
- Windows Server 2012 R2
- Windows Server 2008 R2 with Service Pack 1 (SP1)
If you need to replace your entire site list because of errors, or simply because it’s out of date, you can import your exported Enterprise Mode site list using the Enterprise Mode Site List Manager.
**Important**  
Importing your file overwrites everything that’s currently in the tool, so make sure it’s what you really mean to do.
**To import your compatibility list**
1. On the **File** menu of the Enterprise Mode Site List Manager, click **Import**.
2. Go to your exported .EMIE file (for example, `C:\users\<user_name>\documents\sites.emie`), and then click **Open**.
3. Review the alert message about all of your entries being overwritten. If you still want to import the file, click **Yes**.
## Related topics
- [Download the Enterprise Mode Site List Manager for Windows 10 tool](http://go.microsoft.com/fwlink/?LinkId=716853)
- [Download the Enterprise Mode Site List Manager for Windows 7 and Windows 8.1 tool](http://go.microsoft.com/fwlink/?LinkID=394378)
- [Use the Enterprise Mode Site List Manager tool](use-the-enterprise-mode-site-list-manager-tool.md)
 
 

40
browsers/internet-explorer-11/ie11-deploy-guide/install-and-deploy-ie11.md Normal file
View File

@ -0,0 +1,40 @@
---
Description: Use the topics in this section to learn how to customize your Internet Explorer installation package, how to choose the right method for installation, and how to deploy IE into your environment.
ms.assetid: caca18c1-d5c4-4404-84f8-d02bc562915f
ms.prod: IE11
ms.mktglfcycl: deploy
ms.sitesec: library
title: Install and Deploy Internet Explorer 11 (IE11)
---
# Install and Deploy Internet Explorer 11 (IE11)
**Last updated**
- November 12, 2015
**Applies to:**
- Windows 10
- Windows 8.1 Update
- Windows 7 with Service Pack 1 (SP1)
- Windows Server 2012 R2
- Windows Server 2008 R2 with Service Pack 1 (SP1)
Use the topics in this section to learn how to customize your Internet Explorer installation package, how to choose the right method for installation, and how to deploy IE into your environment. You can also find more info about your virtualization options for legacy apps.
## In this section
|Topic |Description |
|------|------------|
|[Customize Internet Explorer 11 installation packages](customize-ie11-install-packages.md) |Guidance about how to use .INF files or the IE Administration Kit 11 (IEAK 11) to create custom packages and about how to create those packages for multiple operating systems. |
|[Choose how to install Internet Explorer 11 (IE11)](choose-how-to-install-ie11.md) |Guidance for the different ways you can install IE, including using System Center 2012 R2 Configuration Manager, Windows Server Update Services (WSUS), Microsoft Intune, your network, the operating system deployment system, or third-party tools. |
|[Choose how to deploy Internet Explorer 11 (IE11)](choose-how-to-deploy-ie11.md) |Guidance about how to deploy your custom version of IE using Automatic Version Synchronization (AVS) or using your software distribution tools. |
|[Virtualization and compatibility with Internet Explorer 11](virtualization-and-compatibility-with-ie11.md) |Info about the Microsoft-supported options for virtualizing web apps. |
 
 
 

47
browsers/internet-explorer-11/ie11-deploy-guide/install-ie11-using-microsoft-intune.md Normal file
View File

@ -0,0 +1,47 @@
---
Description: How to add and deploy the Internet Explorer 11 update, using Microsoft Intune.
ms.assetid: b2dfc08c-78af-4c22-8867-7be3b92b1616
ms.prod: IE11
ms.mktglfcycl: deploy
ms.sitesec: library
title: Install Internet Explorer 11 (IE11) - Microsoft Intune
---
# Install Internet Explorer 11 (IE11) using Microsoft Intune
Internet Explorer 11 is available as an update in Microsoft Intune. Microsoft Intune uses Windows cloud services to help you manage updates, monitor and protect your computers, provide remote assistance, track hardware and software inventory, and set security policies. For more information, see the [Documentation Library for Microsoft Intune](http://go.microsoft.com/fwlink/?LinkId=301805).
## Adding and deploying the IE11 package
You can add and then deploy the IE11 package to any computer that's managed by Microsoft Intune.
**To add the IE11 package**
1. From the Microsoft Intune administrator console, start the Microsoft Intune Software Publisher.
2. Add your IE11 package as either an external link or as a Windows installer package (.exe or .msi).
For more info about how to decide which one to use, and how to use it, see [Adding Software Packages](http://go.microsoft.com/fwlink/?LinkId=301806).
**To automatically deploy and install the IE11 package**
1. From the Microsoft Intune administrator console, start and run through the Deploy Software wizard.
2. Deploy the package to any of your employee computers that are managed by Microsoft Intune.
3. After the package is on your employee's computers, the installation process runs, based on what you set up in your wizard.
For more info about this, see [Automatically Deploying Software Packages to Devices and Users](http://go.microsoft.com/fwlink/?LinkId=301807)
**To let your employees install the IE11 package**
1. Install the package on your company's Microsoft Intune site, marking it as **Available** for the appropriate groups.
2. Any employee in the assigned group can now install the package.
For more info about this, see [User Initiated Software Installation](http://go.microsoft.com/fwlink/?LinkId=301808)
 
 

58
browsers/internet-explorer-11/ie11-deploy-guide/install-ie11-using-operating-system-deployment-systems.md Normal file
View File

@ -0,0 +1,58 @@
---
Description: 'Install Internet Explorer 11 (IE11) - Operating system deployment systems'
MS-HAID: 'p\_ie11deploy.install\_internet\_explorer\_11\_\_ie11\_\_\_\_operating\_system\_deployment\_systems'
MSHAttr: 'PreferredLib:/library'
title: 'Install Internet Explorer 11 (IE11) - Operating system deployment systems'
---
# - Operating system deployment systems
You can install Internet Explorer 11 (IE11) using Microsoft Deployment Toolkit (MDT) and your Windows images.
You'll need to extract the .cab file for each supported operating system and platform combination and the .msu file for each prerequisite update. Download the IE11 update and prerequisites here:
- [Microsoft Download Center](http://go.microsoft.com/fwlink/?LinkId=279697)
- [Microsoft Update Catalog](http://go.microsoft.com/fwlink/?LinkId=214287)
After you install the .msu file updates, you'll need to add them to your MDT deployment. You'll also need to extract the IE11 .cab update file from the IE11 installation package, using the `/x` command-line option. For example, `IE11-Windows6.1-x64-en-us.exe /x:c:\ie11cab`.
##
MDT adds IE11 to your Windows images, regardless whether you are creating or deploying a customized or non-customized image. MDT also lets you perform offline servicing during the System Center 2012 R2 Configuration Manager task sequence, letting you add IE11 before starting Windows. For info, see [Microsoft Deployment Toolkit (MDT)](http://go.microsoft.com/fwlink/p/?linkid=331148).
![](../common/wedge.gif)**To add IE11 to a MDT deployment share**
1. Right-click **Packages** from each **Deployment Shares** location, and then click **Import OS Packages**.
2. Go to the **Specify Directory** page, search for your folder with your update files (.cab and .msu) for import, and click **Next**.
3. Go to the **Summary** page and click **Next**.
MDT starts importing your update files.
**Note**  
Ignore any warnings that say, "Skipping invalid CAB file". This shows up because the **Import OS Packages** wizard skips the IE11\_Support.cab file, which isn't an actual update file.
 
4. After the import finishes, click **Finish**.
### Offline servicing with MDT
You can add the IE11 update while you're performing offline servicing, or slipstreaming, of your Windows images. This method lets you deploy IE11 without needing any additional installation after you've deployed Windows.
These articles have step-by-step details about adding packages to your Windows images:
- For Windows 8.1, see [Add or Remove Packages Offline Using DISM](http://go.microsoft.com/fwlink/?LinkId=276791).
- For Windows 7 SP1, see [Add or Remove Packages Offline](http://go.microsoft.com/fwlink/?LinkId=214490).
 
 

30
browsers/internet-explorer-11/ie11-deploy-guide/install-ie11-using-system-center-configuration-manager.md Normal file
View File

@ -0,0 +1,30 @@
---
Description: 'Install Internet Explorer 11 (IE11) - System Center 2012 R2 Configuration Manager'
MS-HAID: 'p\_ie11deploy.install\_internet\_explorer\_11\_\_ie11\_\_\_\_system\_center\_2012\_r2\_configuration\_manager'
MSHAttr: 'PreferredLib:/library'
title: 'Install Internet Explorer 11 (IE11) - System Center 2012 R2 Configuration Manager'
---
# - System Center 2012 R2 Configuration Manager
You can install Internet Explorer 11 (IE11) by using [System Center R2 2012 Configuration Manager](http://go.microsoft.com/fwlink/p/?linkid=276664). Complete these steps for each operating system and platform combination.
![](../common/wedge.gif)**To install IE11**
1. Download and approve the [System requirements and language support for Internet Explorer 11 (IE11)](system-requirements-and-language-support-for-ie11.md).
2. Create a software distribution package that includes the IE11 installation package.
3. Create a program that includes the command-line needed to run the IE11 installation package. To run the package silently, without restarting and without checking the Internet for updates, use:`ie11_package.exe /quiet /norestart /update-no`.
4. Move the installation package to your distribution points, and then advertise the package.
You can also use System Center Essentials 2010 to deploy IE11 installation packages. For info, see [System Center Essentials 2010](http://go.microsoft.com/fwlink/p/?linkid=395200) and the [System Center Essentials 2010 Operations Guide](http://go.microsoft.com/fwlink/?LinkId=214266).
 
 

38
browsers/internet-explorer-11/ie11-deploy-guide/install-ie11-using-the-network.md Normal file
View File

@ -0,0 +1,38 @@
---
Description: 'Install Internet Explorer 11 (IE11) - Network'
MS-HAID: 'p\_ie11deploy.install\_internet\_explorer\_11\_\_ie11\_\_\_\_network'
MSHAttr: 'PreferredLib:/library'
title: 'Install Internet Explorer 11 (IE11) - Network'
---
# - Network
You can install Internet Explorer 11 (IE11) over your network by putting your custom IE11 installation package in a shared network folder and letting your employees run the Setup program on their own computers. You can create the network folder structure manually, or you can run IEAK 11.
**Note**  
If you support multiple architectures and operating systems, create a subfolder for each combination. If you support multiple languages, create a subfolder for each localized installation file.
 
![](../common/wedge.gif)**To manually create the folder structure**
- Copy your custom IE11 installation file into a folder on your network, making sure it's available to your employees.
![](../common/wedge.gif)**To create the folder structure using IEAK 11**
- Run the Internet Explorer Customization Wizard 11 using the **Full Installation Package** option.
The wizard automatically puts your custom installation files in your \\*build\_directory*\\Flat folder. Where *build\_directory* is the location of your other build files.
**Note**  
Use the localized versions of the IE Customization Wizard 11 to create localized IE11 installation packages.
 
 
 

107
browsers/internet-explorer-11/ie11-deploy-guide/install-ie11-using-third-party-tools.md Normal file
View File

@ -0,0 +1,107 @@
---
Description: 'Install Internet Explorer 11 (IE11) - Third-party tools'
MS-HAID: 'p\_ie11deploy.install\_internet\_explorer\_11\_\_ie11\_\_\_\_third\_party\_tools'
MSHAttr: 'PreferredLib:/library'
title: 'Install Internet Explorer 11 (IE11) - Third-party tools'
---
# - Third-party tools
You can install Internet Explorer 11 (IE11) using third-party electronic software distribution (ESD) systems and these command-line options:
## Setup Modes
<table>
<colgroup>
<col width="50%" />
<col width="50%" />
</colgroup>
<tbody>
<tr class="odd">
<td align="left"><p><strong>Command-line options</strong></p></td>
<td align="left"><p><strong>Description</strong></p></td>
</tr>
<tr class="even">
<td align="left"><p>/passive</p></td>
<td align="left"><p>Installs without customer involvement.</p></td>
</tr>
<tr class="odd">
<td align="left"><p>/quiet</p></td>
<td align="left"><p>Installs without customer involvement and without showing the UI.</p></td>
</tr>
</tbody>
</table>
 
## Setup Options
<table>
<colgroup>
<col width="50%" />
<col width="50%" />
</colgroup>
<tbody>
<tr class="odd">
<td align="left"><p><strong>Command-line options</strong></p></td>
<td align="left"><p><strong>Description</strong></p></td>
</tr>
<tr class="even">
<td align="left"><p>/update-no</p></td>
<td align="left"><p>Installs without checking for updates.</p>
<div class="alert">
<strong>Important</strong>  
<p>If you don't use this option, you'll need an Internet connection to finish your installation.</p>
</div>
<div>
 
</div></td>
</tr>
<tr class="odd">
<td align="left"><p>/no-default</p></td>
<td align="left"><p>Installs without making IE11 the default web browser.</p></td>
</tr>
<tr class="even">
<td align="left"><p>/closeprograms</p></td>
<td align="left"><p>Automatically closes running programs.</p></td>
</tr>
</tbody>
</table>
 
## Restart Options
<table>
<colgroup>
<col width="50%" />
<col width="50%" />
</colgroup>
<tbody>
<tr class="odd">
<td align="left"><p><strong>Command-line options</strong></p></td>
<td align="left"><p><strong>Description</strong></p></td>
</tr>
<tr class="even">
<td align="left"><p>/norestart</p></td>
<td align="left"><p>Installs without restarting the computer.</p></td>
</tr>
<tr class="odd">
<td align="left"><p>/forcerestart</p></td>
<td align="left"><p>Installs and restarts after installation.</p></td>
</tr>
</tbody>
</table>
 
 
 

46
browsers/internet-explorer-11/ie11-deploy-guide/install-ie11-using-windows-server-update-services-wsus.md Normal file
View File

@ -0,0 +1,46 @@
---
Description: 'Install Internet Explorer 11 (IE11) - Windows Server Update Services (WSUS)'
MS-HAID: 'p\_ie11deploy.install\_internet\_explorer\_11\_\_ie11\_\_\_\_windows\_server\_update\_services\_\_wsus\_'
MSHAttr: 'PreferredLib:/library'
title: 'Install Internet Explorer 11 (IE11) - Windows Server Update Services (WSUS)'
---
#
Windows Server Update Services (WSUS) lets you download a single copy of the Microsoft product update and cache it on your local WSUS servers. You can then configure your computers to get the update from your local servers instead of Windows Update. For more information about WSUS, see [Windows Server Update Services](http://go.microsoft.com/fwlink/p/?LinkID=276790).
![](../common/wedge.gif)**To import from Windows Update to WSUS**
1. Open your WSUS admin site. For example, `http://WSUSServerName/WSUSAdmin/`.
Where *WSUSServerName* is the name of your WSUS server.
2. Choose the top server node or the **Updates** node, and then click **Import Updates**.
3. To get the updates, install the Microsoft Update Catalog ActiveX control.
4. Search for Internet Explorer 11 and add its contents to your basket.
5. After you're done browsing, go to your basket and click **Import**.
You can also download the updates without importing them by unchecking the **Import directly into Windows Server Update Services** box.
![](../common/wedge.gif)**To approve Internet Explorer in WSUS for installation**
1. Open your WSUS admin site and check the **Review synchronization settings** box from the **To Do** list.
2. Click **Synchronize now** to sync your WSUS server with Windows Update, and then click **Updates** from the navigation bar.
3. Enter **Internet Explorer 11** into the **Search Contains** box, and then click **Apply**.
4. Choose the right version of IE11 for your operating system, and click **Approve for installation**.
5. Click each computer group you want to set up for the WSUS server, picking the right approval level, and then click **OK**.
 
 

57
browsers/internet-explorer-11/ie11-deploy-guide/install-problems-with-ie11.md Normal file
View File

@ -0,0 +1,57 @@
---
Description: Install problems with Internet Explorer 11
MS-HAID: 'p\_ie11deploy.install\_problems\_with\_internet\_explorer\_11'
MSHAttr: 'PreferredLib:/library'
title: Install problems with Internet Explorer 11
---
# Install problems with Internet Explorer 11
Most Internet Explorer 11 installations are straightforward and work the way they should. But it's possible that you might have problems.
If you do, you can:
- Check that you meet the minimum operating system requirements and have the prerequisites installed.
- Check that there are no other updates or restarts waiting.
- Temporarily turn off your antispyware and antivirus software.
- Try another IE11 installer. For example from [Windows Update](http://go.microsoft.com/fwlink/?LinkId=302315) or from the [Download Internet Explorer 11](http://go.microsoft.com/fwlink/p/?linkid=327753) website.
- Review the IE11\_main.log file in the \\Windows folder. This log file has information about each installation and is appended for each subsequent installation.
- Make sure you use the same download server URLs that you entered during the Setup process.
## Internet Explorer didn't finish installing
If Internet Explorer doesn't finish installing, it might mean that Windows Update wasn't able to install an associated update, that you have a previous, unsupported version of IE installed, or that there's a problem with your copy of IE. We recommend you try this:
![](../common/wedge.gif)**To fix this issue**
1. Uninstall IE:
1. In the Control Panel, open the **Programs and Features** box, scroll down to IE11, and then click **Uninstall**.
2. After the uninstall finishes, restart your computer.
2. Run [Windows Update](http://go.microsoft.com/fwlink/?LinkId=302315), clicking **Check for updates**.
3. Check the list for IE11. If it's included in the list of updates for download, exclude it before you update your computer.
If you get an error during the Windows Update process, see [Fix the problem with Microsoft Windows Update that is not working](http://go.microsoft.com/fwlink/?LinkId=302316).
4. Restart your computer, making sure all of your the updates are finished.
5. Try to reinstall IE11 from either Windows Update (if you saw it in Step 3) or from the [Download Internet Explorer 11](http://go.microsoft.com/fwlink/p/?linkid=327753) website.
If these steps didn't fix your problem, see [Troubleshooting a failed installation of Internet Explorer 11](http://go.microsoft.com/fwlink/?LinkId=304130).
 
 

39
browsers/internet-explorer-11/ie11-deploy-guide/intranet-problems-and-ie11.md Normal file
View File

@ -0,0 +1,39 @@
---
Description: Intranet problems with Internet Explorer 11
MS-HAID: 'p\_ie11deploy.intranet\_problems\_with\_internet\_explorer\_11'
MSHAttr: 'PreferredLib:/library'
title: Intranet problems with Internet Explorer 11
---
# Intranet problems with Internet Explorer 11
You might experience the following issues with your intranet site, after upgrading to the latest version of Internet Explorer.
## Why is my intranet redirecting me to search results?
Internet Explorer 11 works differently with search, based on whether your organization is domain-joined.
- **Domain-joined computers.** A single word entry is treated as a search term. However, IE11 also checks for available intranet sites and offers matches through the **Notification bar**. If you select **Yes** from the **Notification bar** to navigate to the intranet site, IE11 associates that word with the site so that the next time you type in the intranet site name, inline auto-complete will resolve to the intranet site address.
- **Non-domain-joined computers.** A single word entry is treated as an intranet site. However, if the term doesn't resolve to a site, IE11 then treats the entry as a search term and opens your default search provider.
To explicitly go to an intranet site, regardless of the environment, users can type either a trailing slash, like" contoso/", or the http:// prefix. Either of these will cause IE11 to treat the entry as an intranet search.
You can change the default behavior so that IE11 treats your single word entry in the address bar as an intranet site, regardless of your environment.
![](../common/wedge.gif)**To enable single-word intranet search**
1. Open Internet Explorer for the desktop, click the **Tools** menu, and then click **Internet Options**.
2. Click **Advanced**, check the **Go to an intranet site for a single word entry in the Address bar** box, and then click **OK**.
If you'd like your entire organization to have single word entries default to an intranet site, you can turn on the **Go to an intranet site for a single word entry in the Address bar** Group Policy. With this policy turned on, a search for “contoso” automatically resolves to http://contoso.
 
 

62
browsers/internet-explorer-11/ie11-deploy-guide/manage-ie11-overview.md Normal file
View File

@ -0,0 +1,62 @@
---
Description: 'Use the topics in this section to learn about how to auto detect your settings, auto configure your configuration settings, and auto configure your proxy configuration settings for Internet Explorer.'
MS-HAID: 'p\_ie11deploy.manage\_internet\_explorer\_11'
MSHAttr: 'PreferredLib:/library'
title: Manage Internet Explorer 11
---
# Manage Internet Explorer 11
**Last updated**
- November 12, 2015
**Applies to:**
- Windows 10
- Windows 8.1
- Windows 7
- Windows Server 2012 R2
- Windows Server 2008 R2 with Service Pack 1 (SP1)
Use the topics in this section to learn about how to auto detect your settings, auto configure your configuration settings, and auto configure your proxy configuration settings for Internet Explorer.
## In this section
<table>
<colgroup>
<col width="50%" />
<col width="50%" />
</colgroup>
<thead>
<tr class="header">
<th align="left">Topic</th>
<th align="left">Description</th>
</tr>
</thead>
<tbody>
<tr class="odd">
<td align="left"><p>[Auto detect settings Internet Explorer 11](auto-detect-settings-for-ie11.md)</p></td>
<td align="left"><p>Guidance about how to update your automatic detection of DHCP and DNS servers.</p></td>
</tr>
<tr class="even">
<td align="left"><p>[Auto configuration settings for Internet Explorer 11](auto-configuration-settings-for-ie11.md)</p></td>
<td align="left"><p>Guidance about how to add, update and lock your auto configuration settings.</p></td>
</tr>
<tr class="odd">
<td align="left"><p>[Auto proxy configuration settings for Internet Explorer 11](auto-proxy-configuration-settings-for-ie11.md)</p></td>
<td align="left"><p>Guidance about how to add, update, and lock your auto-proxy settings.</p></td>
</tr>
</tbody>
</table>
 
 
 

230
browsers/internet-explorer-11/ie11-deploy-guide/missing-internet-explorer-maintenance-settings-for-ie11.md Normal file
View File

@ -0,0 +1,230 @@
---
Description: 'The Internet Explorer Maintenance (IEM) settings have been deprecated in favor of Group Policy Preferences, Administrative Templates (.admx), and the IE Administration Kit 11 (IEAK 11).Because of this change, your IEM-configured settings will no longer work on computers running Internet Explorer 10 or newer. To fix this, you need to update the affected settings using Group Policy Preferences, Administrative Templates (.admx), or IE Administration Kit 11 (IEAK 11).Because Group Policy Preferences and IEAK 11 run using asynchronous processes, you should choose to use only one of the tools within each group of settings. For example, using only IEAK 11 in the Security settings or Group Policy Preferences within the Internet Zone settings. Also, it''s important to remember that policy is enforced and can''t be changed by the user, while preferences are configured, but can be changed by the user.'
MS-HAID: 'p\_ie11deploy.missing\_internet\_explorer\_maintenance\_settings\_for\_internet\_explorer\_11'
MSHAttr: 'PreferredLib:/library'
title: Missing Internet Explorer Maintenance settings for Internet Explorer 11
---
# Missing Internet Explorer Maintenance settings for Internet Explorer 11
**Last updated**
- November 12, 2015
**Applies to:**
- Windows 10
- Windows 8.1
- Windows 7
- Windows Server 2012 R2
- Windows Server 2008 R2 with Service Pack 1 (SP1)
The Internet Explorer Maintenance (IEM) settings have been deprecated in favor of Group Policy Preferences, Administrative Templates (.admx), and the IE Administration Kit 11 (IEAK 11).
Because of this change, your IEM-configured settings will no longer work on computers running Internet Explorer 10 or newer. To fix this, you need to update the affected settings using Group Policy Preferences, Administrative Templates (.admx), or IE Administration Kit 11 (IEAK 11).
Because Group Policy Preferences and IEAK 11 run using asynchronous processes, you should choose to use only one of the tools within each group of settings. For example, using only IEAK 11 in the **Security** settings or Group Policy Preferences within the **Internet Zone** settings. Also, it's important to remember that policy is enforced and can't be changed by the user, while preferences are configured, but can be changed by the user.
For more information about all of the new options and Group Policy, see:
- [Group policy preferences and Internet Explorer 11](group-policy-preferences-and-ie11.md)
- [Administrative templates and Internet Explorer 11](aadministrative-templates-and-ie11.md)
- [IEAK 11 - Internet Explorer Administration Kit 11 Guide](http://go.microsoft.com/fwlink/p/?linkid=327741)
- [Group Policy Settings Reference for Windows and Windows Server](http://go.microsoft.com/fwlink/?LinkId=279876)
- [Group Policy ADMX Syntax Reference Guide](http://go.microsoft.com/fwlink/?LinkId=276830)
- [Enable and Disable Settings in a Preference Item](http://go.microsoft.com/fwlink/?LinkId=282671)
## IEM replacements
The IEM settings have replacements you can use in either Group Policy Preferences or IEAK 11.
IEM setting
Description
Replacement tool
**Browser User Interface**
Browser title
Lets you customize the text that shows up in the title bar of the browser.
On the **Browser User Interface** page of IEAK 11, click **Customize Title Bars**, and then type the text that appears on the title bar of the **Title Bar Text** box.
Your text is appended to the text," Microsoft Internet Explorer provided by".
Browser toolbar customizations (background and buttons)
Lets you customize the buttons on the browser toolbar.
- **Buttons.** Customizes the buttons on the Internet Explorer 11 toolbar.
- **Background.** No longer available.
On the **Browser User Interface** page of IEAK 11, click **Add**, type your new toolbar caption, action, and icon, and if the button should appear by default, and then click **OK**. You can also edit, remove, or delete an existing toolbar button from this page.
**Important**  
This setting isn't available anymore.
 
Custom logo and animated bitmaps
Lets you replace the static and animated logos in the upper-right corner of the IE window with customized logos.
**Important**  
This setting isn't available anymore.
 
**Connection**
Connection settings
Lets you import your connection settings from a previously set up computer. These settings define how your employees interact with the connection settings on the **System Polices and Restrictions** page. You can also remove old dial-up connections settings from your employee's computers.
In the **Internet Settings Group Policy Preferences** dialog box, click the **Connections** tab, and set up your proxy settings.
-or-
On the **Connection Settings** page of IEAK 11, change your connection settings, including importing your current connection settings and deleting existing dial-up connection settings (as needed).
Automatic browser configuration
Lets you update your employee's computer after you've deployed IE11, by specifying a URL to an .ins file, an auto-proxy URL, or both. You can decide when the update occurs, in minutes. Typing zero, or not putting in any number, means that automatic configuration only happens after the browser is started and used to go to a page.
In the **Internet Settings Group Policy Preferences** dialog box, click the **Automatic Configuration** tab, and then add your URL.
On the **Automatic Configuration** page of IEAK 11, modify the configuration settings, including providing the URL to an .ins file or an auto-proxy site.
Proxy settings
Lets you specify your proxy servers.
In the **Internet Settings Group Policy Preferences** dialog box, click the **Connections** tab, click **LAN Settings**, and then choose whether to turn on automatic detection of your configuration settings and if you want to use proxy servers.
-or-
On the **Proxy Settings** page of IEAK 11, turn on your proxy settings, adding your proxy server addresses and exceptions.
User Agent string
Lets the browser provide identification to visited servers. This string is often used to keep Internet traffic statistics.
This setting isn't available anymore.
**Important**  
This setting isn't available anymore.
 
**URLs**
Favorites and links
Lets you use custom URLs for the **Favorites** and **Links** folders. You can also specify the folder order, disable IE Suggested Sites, and import an existing folder structure.
On the **Favorites, Favorites Bar and Feeds** page of IEAK 11, add your custom URLs to the **Favorites**, **Favorites Bar**, or **RSS Feeds** folders, or create new folders.
You can also edit, test, or remove your URLs, sort the list order, or disable IE Suggested Sites.
Important URLs
Lets you add custom **Home** pages that can open different tabs. You can also add a **Support** page that shows up when an employee clicks online Help.
In the **Internet Settings Group Policy Preferences** dialog box, click the **General** tab, and add your custom **Home** page.
On the **Important URLs - Home page and Support** page of IEAK 11, add the custom URLs to your **Home** and **Support** pages.
You can also click to retain the previous home page information when the user upgrades to a newer version of IE.
**Security Zones and Content Ratings**
Security zones
Lets you change your security settings, by zone.
In the **Internet Settings Group Policy Preferences** dialog box, click the **Security** tab, and update your security settings, based on zone.
-or-
On the **Security and Privacy Settings** page of IEAK 11, choose your **Security Zones and Privacy** setting, changing it, as necessary.
Content ratings
Lets you change your content ratings so your employees can't view sites with risky content.
On the **Security and Privacy Settings** page of IEAK 11, choose your **Content Ratings** setting, changing it, as necessary.
Authenticode settings
Lets you pick your trustworthy software publishers and stop your employees from adding new, untrusted publishers while browsing.
**Important**  
These settings aren't available anymore.
 
**Programs**
Programs
Lets you import your default program settings, which specify the programs Windows uses for each Internet service.
In the **Internet Settings Group Policy Preferences** dialog box, click the **Programs** tab, and choose how to open IE11 links.
-or-
On the **Programs** page of IEAK 11, choose whether to customize or import your program settings.
 
The Advanced IEM settings, including Corporate and Internet settings, were also deprecated. However, they also have replacements you can use in either Group Policy Preferences or IEAK 11.
**Note**  
Advanced IEM Settings were shown under **Programs** and only available when running in **Preference** mode.
 
<table>
<colgroup>
<col width="33%" />
<col width="33%" />
<col width="33%" />
</colgroup>
<thead>
<tr class="header">
<th align="left">IEM setting</th>
<th align="left">Description</th>
<th align="left">New tool</th>
</tr>
</thead>
<tbody>
<tr class="odd">
<td align="left"><p>Corporate settings</p></td>
<td align="left"><p>Specifies the location of the file with the settings you use to make IE work best in your organization.</p></td>
<td align="left"><p>On the <strong>Additional Settings</strong> page of IEAK 11, expand <strong>Corporate Settings</strong>, and then customize how your organization handles temporary Internet files, code downloads, and menu items and toolbar buttons.</p></td>
</tr>
<tr class="even">
<td align="left"><p>Internet settings</p></td>
<td align="left"><p>Specifies the location of the file that includes your default IE settings.</p></td>
<td align="left"><p>In the <strong>Internet Settings Group Policy Preferences</strong> dialog box, click the <strong>Advanced</strong> tab, and then update your Internet-related settings, as required</p>
<p>-or-</p>
<p>On the <strong>Additional Settings</strong> page of IEAK 11, expand <strong>Internet Settings</strong>, and then customize your default values in the <strong>Internet Options</strong> dialog box.</p></td>
</tr>
</tbody>
</table>
 
 
 

57
browsers/internet-explorer-11/ie11-deploy-guide/missing-the-compatibility-view-button.md Normal file
View File

@ -0,0 +1,57 @@
---
Description: 'Compatibility View was introduced in Windows Internet Explorer 8 to help existing content continue to work with Windows Internet Explorer 7, while developers updated their content to support modern interoperable web standards.'
MS-HAID: 'p\_ie11deploy.missing\_the\_compatibility\_view\_button'
MSHAttr: 'PreferredLib:/library'
title: Missing the Compatibility View Button
---
# Missing the Compatibility View Button
**Last updated**
- November 12, 2015
**Applies to:**
- Windows 10
- Windows 8.1
- Windows 7
- Windows Server 2012 R2
- Windows Server 2008 R2 with Service Pack 1 (SP1)
Compatibility View was introduced in Windows Internet Explorer 8 to help existing content continue to work with Windows Internet Explorer 7, while developers updated their content to support modern interoperable web standards. Since then, the Internet Explorer web platform, and the web itself, have changed so that most public web content looks for standards-based features instead of IE 7-compatible behavior.
Thanks to these changes, using Internet Explorer 11 in the latest standards mode is more compatible with the web than ever before. As a result, IE11 simplifies web page compatibility for users by removing the **Compatibility View** button and reducing the number of compatibility options in the F12 developer tools for developers.
## What happened to the Compatibility View button?
In previous versions of IE, the **Compatibility View** button would attempt to fix a broken standards-based website, by getting the page to appear like it did in Internet Explorer 7. Today however, more standards-based websites are broken by attempting to appear like they did in Internet Explorer 7. So instead of implementing and using Compatibility View, developers are updating their server configuration to add X-UA-Compatible meta tags, which forces the content to the “edge”, making the **Compatibility View** button disappear. In support of these changes, the Compatibility View button has been completely removed for IE11.
## What if I still need Compatibility View?
There might be extenuating circumstances in your company, which require you to continue to use Compatibility View. In this situation, this process should be viewed strictly as a workaround. You should work with the website vendor to make sure that the affected pages are updated to match the latest web standards. The functionality described here is currently deprecated and will be removed at a time in the future.
**Important**  
This functionality is only available in Internet Explorer for the desktop.
 
![](../common/wedge.gif)**To change your Compatibility View settings**
1. Open Internet Explorer for the desktop, click **Tools**, and then click **Compatibility View settings**.
2. In the **Compatibility View Settings** box, add the problematic website URL, and then click **Add**.
Compatibility View is turned on for this single website, for this specific computer.
3. Decide if you want your intranet sites displayed using Compatibility View, decide whether to use Microsoft compatibility lists, and then click **Close**.
 
 

28
browsers/internet-explorer-11/ie11-deploy-guide/net-framework-problems-with-ie11.md Normal file
View File

@ -0,0 +1,28 @@
---
Description: '.NET Framework problems with Internet Explorer 11'
MS-HAID: 'p\_ie11deploy.net\_framework\_problems\_with\_internet\_explorer\_11'
MSHAttr: 'PreferredLib:/library'
title: '.NET Framework problems with Internet Explorer 11'
---
# .NET Framework problems with Internet Explorer 11
If you’re having problems launching your legacy apps while running Internet Explorer 11, it’s most likely because Internet Explorer no longer starts apps that use managed browser hosting controls, like in the .NET Framework 1.1 and 2.0.
You can get IE11 to use managed browser hosting controls again, by:
![](../common/wedge.gif)**To turn managed browser hosting controls back on**
1. **For x86 systems or for 32-bit processes on x64 systems:** Go to the HKLM/SOFTWARE/MICROSOFT/.NETFramework registry key and change the **EnableIEHosting** value to 1.
2. **For x64 systems or for 64-bit processes on x64 systems:** Go to the HKLM/SOFTWARE/Wow6432Node/.NETFramework registry key and change the **EnableIEHosting** value to 1.
For more information, see the [Web Applications](http://go.microsoft.com/fwlink/?LinkId=308903) section of the Application Compatibility in the .NET Framework 4.5 page.
 
 

217
browsers/internet-explorer-11/ie11-deploy-guide/new-group-policy-settings-for-ie11.md Normal file
View File

@ -0,0 +1,217 @@
---
Description: New group policy settings for Internet Explorer 11
MS-HAID: 'p\_ie11deploy.new\_group\_policy\_settings\_for\_internet\_explorer\_11'
MSHAttr: 'PreferredLib:/library'
title: New group policy settings for Internet Explorer 11
---
# New group policy settings for Internet Explorer 11
Internet Explorer 11 gives you some new Group Policy settings to help you manage your company's web browser configurations, including:
<table>
<colgroup>
<col width="25%" />
<col width="25%" />
<col width="25%" />
<col width="25%" />
</colgroup>
<thead>
<tr class="header">
<th align="left">Policy</th>
<th align="left">Category path</th>
<th align="left">Supported on</th>
<th align="left">Explanation</th>
</tr>
</thead>
<tbody>
<tr class="odd">
<td align="left"><p>Turn off loading websites and content in the background to optimize performance</p></td>
<td align="left"><p>Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Advanced Page</p></td>
<td align="left"><p>IE11</p></td>
<td align="left"><p>This policy setting determines whether Internet Explorer preemptively loads websites and content in the background, speeding up performance such that when the user clicks a hyperlink, the background page seamlessly switches into view.</p>
<p>If you enable this policy setting, IE doesn't load any websites or content in the background.</p>
<p>If you disable this policy setting, IE preemptively loads websites and content in the background.</p>
<p>If you don’t configure this policy setting, users can turn this behavior on or off, using IE settings. This feature is turned on by default.</p></td>
</tr>
<tr class="even">
<td align="left"><p>Allow Microsoft services to provide enhanced suggestions as the user types in the Address bar</p></td>
<td align="left"><p>Administrative Templates\Windows Components\Internet Explorer</p></td>
<td align="left"><p>IE11</p></td>
<td align="left"><p>This policy setting allows IE to provide enhanced suggestions as the user types in the Address bar. To provide enhanced suggestions, the user’s keystrokes are sent to Microsoft through Microsoft services.</p>
<p>If you enable this policy setting, users receive enhanced suggestions while typing in the Address bar. In addition, users won’t be able to change the Suggestions setting on the Settings charm.</p>
<p>If you disable this policy setting, users won’t receive enhanced suggestions while typing in the Address bar. In addition, users won’t be able to change the Suggestions setting on the Settings charm.</p>
<p>If you don’t configure this policy setting, users can change the Suggestions setting on the Settings charm.</p></td>
</tr>
<tr class="odd">
<td align="left"><p>Turn off phone number detection</p></td>
<td align="left"><p>Administrative Templates\Windows Components\Internet Explorer\Internet Settings\Advanced settings\Browsing</p></td>
<td align="left"><p>IE11</p></td>
<td align="left"><p>This policy setting determines whether phone numbers are recognized and turned into hyperlinks, which can be used to invoke the default phone application on the system.</p>
<p>If you enable this policy setting, phone number detection is turned off. Users won’t be able to modify this setting.</p>
<p>If you disable this policy setting, phone number detection is turned on. Users won’t be able to modify this setting.</p>
<p>If you don't configure this policy setting, users can turn this behavior on or off, using IE settings. The default is on.</p></td>
</tr>
<tr class="even">
<td align="left"><p>Allow IE to use the HTTP2 network protocol</p></td>
<td align="left"><p>Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Advanced Page</p></td>
<td align="left"><p>IE11 on Windows 8.1</p></td>
<td align="left"><p>This policy setting determines whether IE uses the HTTP2 network protocol. HTTP2 works with HTTP requests to optimize the latency of network requests through compression, multiplexing, and prioritization.</p>
<p>If you enable this policy setting, IE uses the HTTP2 network protocol.</p>
<p>If you disable this policy setting, IE won't use the HTTP2 network protocol.</p>
<p>If you don't configure this policy setting, users can turn this behavior on or off, using IE Advanced Internet Options settings. The default is on.</p></td>
</tr>
<tr class="odd">
<td align="left"><p>Don't run antimalware programs against ActiveX controls</p>
<p>(Internet, Restricted Zones)</p></td>
<td align="left"><ul>
<li><p>Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone</p></li>
<li><p>Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Internet Zone</p></li>
<li><p>Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone</p></li>
<li><p>Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Restricted Sites Zone</p></li>
</ul></td>
<td align="left"><p>IE11</p></td>
<td align="left"><p>This policy setting determines whether IE runs antimalware programs against ActiveX controls, to check if they're safe to load on pages.</p>
<p>If you enable this policy setting, IE won't check with your antimalware program to see if it's safe to create an instance of the ActiveX control.</p>
<p>If you disable this policy setting, IE always checks with your antimalware program to see if it's safe to create an instance of the ActiveX control.</p>
<p>If you don't configure this policy setting, IE always checks with your antimalware program to see if it's safe to create an instance of the ActiveX control. Users can turn this behavior on or off, using IE Security settings.</p></td>
</tr>
<tr class="even">
<td align="left"><p>Don't run antimalware programs against ActiveX controls</p>
<p>(Intranet, Trusted, Local Machine Zones)</p></td>
<td align="left"><ul>
<li><p>Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Intranet Zone</p></li>
<li><p>Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Intranet Zone</p></li>
<li><p>Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Trusted Sites Zone</p></li>
<li><p>Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Trusted Sites Zone</p></li>
<li><p>Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Local Machine Zone</p></li>
<li><p>Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Local Machine Zone</p></li>
</ul></td>
<td align="left"><p>IE11</p></td>
<td align="left"><p>This policy setting determines whether IE runs antimalware programs against ActiveX controls, to check if they're safe to load on pages.</p>
<p>If you enable this policy setting, IE won't check with your antimalware program to see if it's safe to create an instance of the ActiveX control.</p>
<p>If you disable this policy setting, IE always checks with your antimalware program to see if it's safe to create an instance of the ActiveX control.</p>
<p>If you don't configure this policy setting, IE won't check with your antimalware program to see if it's safe to create an instance of the ActiveX control. Users can turn this behavior on or off, using IE Security settings.</p></td>
</tr>
<tr class="odd">
<td align="left"><p>Turn on 64-bit tab processes when running in Enhanced Protected Mode on 64-bit versions of Windows</p></td>
<td align="left"><p>Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Advanced Page</p></td>
<td align="left"><p>IE11</p></td>
<td align="left"><p>This policy setting determines whether IE11 uses 64-bit processes (for greater security) or 32-bit processes (for greater compatibility) when running in Enhanced Protected Mode on 64-bit versions of Windows.</p>
<p>Important: Some ActiveX controls and toolbars may not be available when 64-bit processes are used.</p>
<p>If you enable this policy setting, IE11 will use 64-bit tab processes when running in Enhanced Protected Mode on 64-bit versions of Windows.</p>
<p>If you disable this policy setting, IE11 will use 32-bit tab processes when running in Enhanced Protected Mode on 64-bit versions of Windows.</p>
<p>If you don't configure this policy setting, users can turn this feature on or off using IE settings. This feature is turned off by default.</p></td>
</tr>
<tr class="even">
<td align="left"><p>Turn off sending UTF-8 query strings for URLs</p></td>
<td align="left"><p>Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Advanced Page</p></td>
<td align="left"><p>IE11</p></td>
<td align="left"><p>This policy setting determines whether IE uses 8-bit Unicode Transformation Format (UTF-8) to encode query strings in URLs before sending them to servers or to proxy servers.</p>
<p>If you enable this policy setting, you must specify when to use UTF-8 to encode query strings:</p>
<p><strong>0)</strong> Never encode query strings.</p>
<p><strong>1)</strong> Only encode query strings for URLs that aren't in the Intranet zone.</p>
<p><strong>2)</strong> Only encode query strings for URLs that are in the Intranet zone.</p>
<p><strong>3)</strong> Always encode query strings.</p>
<p>If you disable or don't configure this policy setting, users can turn this behavior on or off, using IE Advanced Options settings. The default is to encode all query strings in UTF-8.</p></td>
</tr>
<tr class="odd">
<td align="left"><p>Turn off sending URL path as UTF-8</p></td>
<td align="left"><p>User Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Settings\URL Encoding</p></td>
<td align="left"><p>At least Windows Internet Explorer 7</p></td>
<td align="left"><p>This policy setting determines whether to let IE send the path portion of a URL using the UTF-8 standard. This standard defines characters so they're readable in any language and lets you exchange Internet addresses (URLs) with characters included in any language.</p>
<p>If you enable this policy setting, UTF-8 is not allowed. Users won't be able to change this setting.</p>
<p>If you disable this policy setting, UTF-8 is allowed. Users won't be able to change this setting.</p>
<p>If you don't configure this policy setting, users can turn this behavior on or off.</p></td>
</tr>
<tr class="even">
<td align="left"><p>Turn off the flip ahead with page prediction feature</p></td>
<td align="left"><p>Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Advanced Page</p></td>
<td align="left"><p>At least Internet Explorer 10 on Windows 8</p></td>
<td align="left"><p>This policy setting determines whether a user can swipe across a screen or click Forward to go to the next pre-loaded page of a website.</p>
<p>Microsoft collects your browsing history to improve how flip ahead with page prediction works. This feature isn’t available for Internet Explorer for the desktop.</p>
<p>If you enable this policy setting, flip ahead with page prediction is turned off and the next webpage isn’t loaded into the background.</p>
<p>If you disable this policy setting, flip ahead with page prediction is turned on and the next webpage is loaded into the background.</p>
<p>If you don’t configure this setting, users can turn this behavior on or off, using the Settings charm.</p></td>
</tr>
<tr class="odd">
<td align="left"><p>Prevent deleting ActiveX Filtering, Tracking Protection and Do Not Track data</p></td>
<td align="left"><p>Administrative Templates\Windows Components\Internet Explorer\Delete Browsing History</p></td>
<td align="left"><p>At least Windows Internet Explorer 9</p></td>
<td align="left"><p>In Internet Explorer 9 and Internet Explorer 10:</p>
<p>This policy setting prevents users from deleting ActiveX Filtering and Tracking Protection data, which includes the list of websites for which the user has chosen to disable ActiveX Filtering or Tracking Protection. In addition, Tracking Protection data is also collected if users turn on the Personalized Tracking Protection List, which blocks third-party items while the user is browsing.</p>
<p>With IE11:</p>
<p>This policy setting prevents users from deleting ActiveX Filtering, Tracking Protection data, and Do Not Track exceptions stored for visited website.</p>
<p>This feature is available in the Delete Browsing History dialog box.</p>
<p>If you enable this policy setting, ActiveX Filtering, Tracking Protection and Do Not Track data is preserved when the user clicks Delete.</p>
<p>If you disable this policy setting, ActiveX Filtering, Tracking Protection and Do Not Track data is deleted when the user clicks Delete.</p>
<p>If you don’t configure this policy setting, users can turn this feature on and off, determining whether to delete ActiveX Filtering, Tracking Protection, and Do Not Track data when clicking Delete.</p></td>
</tr>
<tr class="even">
<td align="left"><p>Always send Do Not Track header</p></td>
<td align="left"><p>Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Advanced Page</p></td>
<td align="left"><p>At least Internet Explorer 10</p></td>
<td align="left"><p>This policy setting allows you to configure how IE sends the Do Not Track (DNT) header.</p>
<p>If you enable this policy setting, IE sends a DNT:1 header with all HTTP and HTTPS requests. The DNT:1 header signals to the servers not to track the user.</p>
<p>For Internet Explorer 9 and 10:</p>
<p>If you disable this policy setting, IE only sends the Do Not Track header if a Tracking Protection List is enabled or inPrivate Browsing mode is used.</p>
<p>At least IE11:</p>
<p>If you disable this policy setting, IE only sends the Do Not Track header if inPrivate Browsing mode is used.</p>
<p>If you don't configure the policy setting, users can select the Always send Do Not Track header option on the Advanced tab of the Internet Options dialog box. By selecting this option, IE sends a DNT:1 header with all HTTP and HTTPS requests; unless the user grants a site-specific exception, in which case IE sends a DNT:0 header. By default, this option is enabled.</p></td>
</tr>
<tr class="odd">
<td align="left"><p>Let users turn on and use Enterprise Mode from the Tools menu</p></td>
<td align="left"><p>Administrative Templates\Windows Components\Internet Explorer</p></td>
<td align="left"><p>IE11</p></td>
<td align="left"><p>This policy setting lets you decide whether users can turn on Enterprise Mode for websites with compatibility issues. Optionally, this policy also lets you specify where to get reports (through post messages) about the websites for which users turn on Enterprise Mode using the Tools menu.</p>
<p>If you turn this setting on, users can see and use the Enterprise Mode option from the Tools menu. If you turn this setting on, but don’t specify a report location, Enterprise Mode will still be available to your users, but you won’t get any reports.</p>
<p>If you disable or don’t configure this policy setting, the menu option won’t appear and users won’t be able to turn on Enterprise Mode locally.</p></td>
</tr>
<tr class="even">
<td align="left"><p>Use the Enterprise Mode IE website list</p></td>
<td align="left"><p>Administrative Templates\Windows Components\Internet Explorer</p></td>
<td align="left"><p>IE11</p></td>
<td align="left"><p>This policy setting lets you specify where to find the list of websites you want opened using Enterprise Mode, instead of Standard mode, because of compatibility issues. Users can’t edit this list.</p>
<p>If you enable this policy setting, IE downloads the website list from HKCU or HKLM\Software\policies\Microsoft\Internet Explorer\Main\EnterpriseMode, opening all included websites using Enterprise Mode. We recommend storing and downloading your list from a secure web server (https://), to help protect against data tampering.</p>
<p>If you disable or don’t configure this policy setting, IE opens all websites using Standard mode.</p></td>
</tr>
</tbody>
</table>
 
## Removed Group Policy settings
IE11 no longer supports these Group Policy settings:
- Turn on Internet Explorer 7 Standards Mode
- Turn off Compatibility View button
- Turn off Quick Tabs functionality
- Turn off the quick pick menu
- Use large icons for command buttons
## Viewing your policy settings
After you've finished updating and deploying your Group Policy, you can use the Resultant Set of Policy (RSoP) snap-in to view your settings.
![](../common/wedge.gif)**To use the RSoP snap-in**
1. Open and run the Resultant Set of Policy (RSoP) wizard, specifying the information you want to see.
2. Open your wizard results in the Group Policy Management Console (GPMC).
For complete instructions about how to add, open, and use RSoP, see [Use the RSoP Snap-in](http://go.microsoft.com/fwlink/p/?LinkId=395201)
 
 

457
browsers/internet-explorer-11/ie11-deploy-guide/out-of-date-activex-control-blocking.md Normal file
View File

@ -0,0 +1,457 @@
---
Description: 'ActiveX controls are small apps that let websites provide content, like videos, games, and let you interact with content like toolbars.'
MS-HAID: 'p\_ie11deploy.out\_of\_date\_activex\_control\_blocking'
MSHAttr: 'PreferredLib:/library'
title: 'Out-of-date ActiveX control blocking'
---
# Out-of-date ActiveX control blocking
**Last updated**
- November 12, 2015
**Applies to:**
- Windows 10
- Windows 8.1
- Windows 7
- Windows Server 2012 R2
- Windows Server 2008 R2 with Service Pack 1 (SP1)
- Windows Vista SP2
ActiveX controls are small apps that let websites provide content, like videos, games, and let you interact with content like toolbars. Unfortunately, because many ActiveX controls aren’t automatically updated, they can become outdated as new versions are released. It’s very important that you keep your ActiveX controls up-to-date because malicious software (or malware) can target security flaws in outdated controls, damaging your computer by collecting info from it, installing unwanted software, or by letting someone else control it remotely. To help avoid this situation, Internet Explorer includes a new security feature, called *out-of-date ActiveX control blocking*.
Out-of-date ActiveX control blocking lets you:
- Know when IE prevents a webpage from loading common, but outdated ActiveX controls.
- Interact with other parts of the webpage that aren’t affected by the outdated control.
- Update the outdated control, so that it’s up-to-date and safer to use.
The out-of-date ActiveX control blocking feature works with all [Security Zones](http://go.microsoft.com/fwlink/?LinkId=403863), except the Local Intranet Zone and the Trusted Sites Zone.
It also works with these operating system and IE combinations:
<table>
<colgroup>
<col width="50%" />
<col width="50%" />
</colgroup>
<thead>
<tr class="header">
<th align="left">Windows operating system</th>
<th align="left">IE version</th>
</tr>
</thead>
<tbody>
<tr class="odd">
<td align="left"><p>Windows 10</p></td>
<td align="left"><p>All supported versions of IE.</p>
<p>Microsoft Edge doesn't support ActiveX controls.</p></td>
</tr>
<tr class="even">
<td align="left"><p>Windows 8.1 and Windows 8.1 Update</p></td>
<td align="left"><p>All supported versions of IE.</p></td>
</tr>
<tr class="odd">
<td align="left"><p>Windows 7 SP1</p></td>
<td align="left"><p>All supported versions of IE.</p></td>
</tr>
<tr class="even">
<td align="left"><p>Windows Server 2012</p></td>
<td align="left"><p>All supported versions of IE.</p></td>
</tr>
<tr class="odd">
<td align="left"><p>Windows Server 2008 R2 SP1</p></td>
<td align="left"><p>All supported versions of IE.</p></td>
</tr>
<tr class="even">
<td align="left"><p>Windows Server 2008 SP2</p></td>
<td align="left"><p>Windows Internet Explorer 9 only</p></td>
</tr>
<tr class="even">
<td align="left"><p>Windows Vista SP2</p></td>
<td align="left"><p>Windows Internet Explorer 9 only</p></td>
</tr>
</tbody>
</table>
 
For more info about this new feature, see [Internet Explorer begins blocking out-of-date ActiveX controls](http://go.microsoft.com/fwlink/?LinkId=507691) blog. To see the complete list of out-of-date Active controls blocked by this feature, go [here](http://go.microsoft.com/fwlink/?LinkId=517023).
## What does the out-of-date ActiveX control blocking notification look like?
When IE blocks an outdated ActiveX control, you’ll see a notification bar similar to this, depending on your version of IE:
**Internet Explorer 9 through Internet Explorer 11**
![warning about outdated activex controls (ie9+)](images/outdatedcontrolwarning.png)
**Windows Internet Explorer 8**
![warning about outdated activex controls (ie8)](images/ieoutdatedcontrolwarning.png)
Out-of-date ActiveX control blocking also gives you a security warning that tells you if a webpage tries to launch specific outdated apps, outside of IE:
![warning about outdated activex controls outside ie](images/ieoutdatedcontroloutsideofie.png)
## How do I fix an outdated ActiveX control or app?
From the notification about the outdated ActiveX control, you can go to the control’s website to download its latest version.
![](../common/wedge.gif)**To get the updated ActiveX control**
1. From the notification bar, tap or click **Update**.
IE opens the ActiveX control’s website.
2. Download the latest version of the control.
**Security Note:  **
If you don’t fully trust a site, you shouldn’t allow it to load an outdated ActiveX control. However, although we don’t recommend it, you can view the missing webpage content by tapping or clicking **Run this time**. This option runs the ActiveX control without updating or fixing the problem. The next time you visit a webpage running the same outdated ActiveX control, you’ll get the notification again.
![](../common/wedge.gif)**To get the updated app**
1. From the security warning, tap or click **Update** link.
IE opens the app’s website.
2. Download the latest version of the app.
**Security Note:  **
If you don’t fully trust a site, you shouldn’t allow it to launch an outdated app. However, although we don’t recommend it, you can let the webpage launch the app by tapping or clicking **Allow**. This option opens the app without updating or fixing the problem. The next time you visit a webpage running the same outdated app, you’ll get the notification again.
## How does IE decide which ActiveX controls to block?
IE uses Microsoft’s versionlist.xml file to determine whether an ActiveX control should be stopped from loading. This file is updated with newly-discovered out-of-date ActiveX controls, which IE automatically downloads to your local copy of the file.
You can see your copy of the versionlist.xml file here `%LOCALAPPDATA%\Microsoft\Internet Explorer\VersionManager\versionlist.xml`, or you can view Microsoft’s version at [Internet Explorer version list](http://go.microsoft.com/fwlink/?LinkId=403864).
**Security Note:  **
Although we strongly recommend against it, if you don’t want your computer to automatically download the updated version list from Microsoft, run the following command from a command prompt:
`reg add "HKCU\Software\Microsoft\Internet Explorer\VersionManager" /v DownloadVersionList /t REG_DWORD /d 0 /f`
Turning off this automatic download breaks the out-of-date ActiveX control blocking feature by not letting the version list update with newly outdated controls, potentially compromising the security of your computer. Use this configuration option at your own risk.
## Out-of-date ActiveX control blocking on managed devices
Out-of-date ActiveX control blocking includes 4 new Group Policy settings that you can use to manage your web browser configuration, based on your domain controller. You can download the administrative templates, including the new settings, from the [Administrative Templates for Internet Explorer](http://go.microsoft.com/fwlink/?LinkId=444484) page.
### Group Policy settings
Here’s a list of the new Group Policy info, including the settings, location, requirements, and Help text strings. All of these settings can be set in either the Computer Configuration or User Configuration scope, but Computer Configuration takes precedence over User Configuration.
**Important**  
Out-of-date ActiveX control blocking is turned off in the Local Intranet Zone; therefore, intranet websites and line-of-business apps will continue to use out-of-date ActiveX controls without disruption.
 
<table>
<colgroup>
<col width="25%" />
<col width="25%" />
<col width="25%" />
<col width="25%" />
</colgroup>
<thead>
<tr class="header">
<th align="left">Setting</th>
<th align="left">Category path</th>
<th align="left">Supported on</th>
<th align="left">Help text</th>
</tr>
</thead>
<tbody>
<tr class="odd">
<td align="left"><p>Turn on ActiveX control logging in IE</p></td>
<td align="left"><p>Administrative Templates\Windows Components\Internet Explorer\Security Features\Add-on Management</p></td>
<td align="left"><p>Internet Explorer 8 through IE11</p></td>
<td align="left"><p>This setting determines whether IE saves log information for ActiveX controls.</p>
<p>If you enable this setting, IE logs ActiveX control information (including the source URI that loaded the control and whether it was blocked) to a local file.</p>
<p>If you disable or don't configure this setting, IE won't log ActiveX control information.</p>
<p>Note that you can turn this setting on or off regardless of the <strong>Turn off blocking of outdated ActiveX controls for IE</strong> or <strong>Turn off blocking of outdated ActiveX controls for IE on specific domains</strong> settings.</p></td>
</tr>
<tr class="even">
<td align="left"><p>Remove the <strong>Run this time</strong> button for outdated ActiveX controls in IE</p></td>
<td align="left"><p>Administrative Templates\Windows Components\Internet Explorer\Security Features\Add-on Management</p></td>
<td align="left"><p>Internet Explorer 8 through IE11</p></td>
<td align="left"><p>This setting allows you stop users from seeing the <strong>Run this time</strong> button and from running specific outdated ActiveX controls in IE.</p>
<p>If you enable this setting, users won't see the <strong>Run this time</strong> button on the warning message that appears when IE blocks an outdated ActiveX control.</p>
<p>If you disable or don't configure this setting, users will see the <strong>Run this time</strong> button on the warning message that appears when IE blocks an outdated ActiveX control. Clicking this button lets the user run the outdated ActiveX control once.</p></td>
</tr>
<tr class="odd">
<td align="left"><p>Turn off blocking of outdated ActiveX controls for IE on specific domains</p></td>
<td align="left"><p>Administrative Templates\Windows Components\Internet Explorer\Security Features\Add-on Management</p></td>
<td align="left"><p>Internet Explorer 8 through IE11</p></td>
<td align="left"><p>This setting allows you to manage a list of domains on which IE will stop blocking outdated ActiveX controls. Outdated ActiveX controls are never blocked in the Intranet Zone.</p>
<p>If you enable this setting, you can enter a custom list of domains for which outdated ActiveX controls won't be blocked in IE. Each domain entry must be formatted like one of the following:</p>
<ul>
<li><p><strong>&quot;domainname.TLD&quot;.</strong> For example, if you want to include *.contoso.com/*, use &quot;contoso.com&quot;.</p></li>
<li><p><strong>&quot;hostname&quot;.</strong> For example, if you want to include http://example, use &quot;example&quot;.</p></li>
<li><p><strong>&quot;file:///path/filename.htm&quot;.</strong> For example, use file:///C:/Users/contoso/Desktop/index.htm.</p></li>
</ul>
<p>If you disable or don't configure this setting, the list is deleted and IE continues to block specific outdated ActiveX controls on all domains in the Internet Zone.</p></td>
</tr>
<tr class="even">
<td align="left"><p>Turn off blocking of outdated ActiveX controls for IE</p></td>
<td align="left"><p>Administrative Templates\Windows Components\Internet Explorer\Security Features\Add-on Management</p></td>
<td align="left"><p>Internet Explorer 8 through IE11</p></td>
<td align="left"><p>This setting determines whether IE blocks specific outdated ActiveX controls. Outdated ActiveX controls are never blocked in the Intranet Zone.</p>
<p>If you enable this setting, IE stops blocking outdated ActiveX controls.</p>
<p>If you disable or don't configure this setting, IE continues to block specific outdated ActiveX controls.</p></td>
</tr>
<tr class="odd">
<td align="left"><p>Remove the <strong>Update</strong> button in the out-of-date ActiveX control blocking notification for IE</p></td>
<td align="left"><p>This functionality is only available through the registry</p></td>
<td align="left"><p>Internet Explorer 8 through IE11</p></td>
<td align="left"><p>This setting determines whether the out-of-date ActiveX control blocking notification shows the <strong>Update</strong> button. This button points users to update specific out-of-date ActiveX controls in IE.</p></td>
</tr>
</tbody>
</table>
 
If you don't want to use Group Policy, you can also turn these settings on or off using the registry. You can update the registry manually or you can use an elevated command prompt and these commands to automatically turn on the settings.
<table>
<colgroup>
<col width="50%" />
<col width="50%" />
</colgroup>
<thead>
<tr class="header">
<th align="left">Setting</th>
<th align="left">Registry setting</th>
</tr>
</thead>
<tbody>
<tr class="odd">
<td align="left"><p>Turn on ActiveX control logging in IE</p></td>
<td align="left"><p><code>reg add &quot;HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Ext&quot; /v AuditModeEnabled /t REG_DWORD /d 1 /f</code></p>
<p>Where:</p>
<ul>
<li><p><strong>0 or not configured</strong> = Logs ActiveX control information (including the source URI that loaded the control and whether it was blocked) to a local file.</p></li>
<li><p><strong>1</strong> = Logs ActiveX control information.</p></li>
</ul></td>
</tr>
<tr class="even">
<td align="left"><p>Remove <strong>Run this time</strong> button for outdated ActiveX controls in IE</p></td>
<td align="left"><p><code>reg add &quot;HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Ext&quot; /v RunThisTimeEnabled /t REG_DWORD /d 0 /f</code></p>
<p>Where:</p>
<ul>
<li><p><strong>0</strong> = Removes the <strong>Run this time</strong> button.</p></li>
<li><p><strong>1 or not configured</strong> = Leaves the <strong>Run this time</strong> button.</p></li>
</ul></td>
</tr>
<tr class="odd">
<td align="left"><p>Turn off blocking of outdated ActiveX controls for IE on specific domains</p></td>
<td align="left"><p><code>reg add &quot;HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Ext\Domain&quot; /v contoso.com /t REG_SZ /f</code></p>
<p>Where:</p>
<ul>
<li><p><strong>contoso.com</strong> = A single domain on which outdated ActiveX controls won't be blocked in IE. Use a new <code>reg add</code> command for each domain you wish to add to the Allow list.</p></li>
</ul></td>
</tr>
<tr class="even">
<td align="left"><p>Turn off blocking of outdated ActiveX controls for IE</p></td>
<td align="left"><p><code>reg add &quot;HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Ext&quot; /v VersionCheckEnabled /t REG_DWORD /d 0 /f</code></p>
<p>Where:</p>
<ul>
<li><p><strong>0</strong> = Stops blocking outdated ActiveX controls.</p></li>
<li><p><strong>1 or not configured</strong> = Continues to block specific outdated ActiveX controls.</p></li>
</ul></td>
</tr>
<tr class="odd">
<td align="left"><p>Remove the <strong>Update</strong> button in the out-of-date ActiveX control blocking notification for IE</p></td>
<td align="left"><p><code>reg add &quot;HKCU\Software\Microsoft\Internet Explorer\VersionManager&quot; /v UpdateEnabled /t REG_DWORD /d 0 /f</code></p>
<ul>
<li><p><strong>0</strong> = Removes the <strong>Update</strong> button.</p></li>
<li><p><strong>1 or not configured</strong> = Leaves the <strong>Update</strong> button.</p></li>
</ul></td>
</tr>
</tbody>
</table>
 
## Inventory your ActiveX controls
You can inventory the ActiveX controls being used in your company, by turning on the **Turn on ActiveX control logging in IE** setting:
- **Windows 10:** Through a comma-separated values (.csv) file or through a local Windows Management Instrumentation (WMI) class.
- **All other versions of Microsoft Windows:** Through a .csv file only.
### Inventory your ActiveX controls by using a .CSV file
If you decide to inventory the ActiveX controls being used in your company by turning on the **Turn on ActiveX control logging in IE** setting, IE logs the ActiveX control information to the ` %LOCALAPPDATA%\Microsoft\Internet Explorer\AuditMode\VersionAuditLog.csv` file.
Here’s a detailed example and description of what’s included in the VersionAuditLog.csv file.
<table style="width:100%;">
<colgroup>
<col width="14%" />
<col width="14%" />
<col width="14%" />
<col width="14%" />
<col width="14%" />
<col width="14%" />
<col width="14%" />
</colgroup>
<thead>
<tr class="header">
<th align="left">Source URI</th>
<th align="left">File path</th>
<th align="left">Product version</th>
<th align="left">File version</th>
<th align="left">Allowed/Blocked</th>
<th align="left">Reason</th>
<th align="left">EPM-compatible</th>
</tr>
</thead>
<tbody>
<tr class="odd">
<td align="left"><p>http://contoso.com/test1.html</p></td>
<td align="left"><p>C:\Windows\System32\Macromed\Flash\Flash.ocx</p></td>
<td align="left"><p>14.0.0.125</p></td>
<td align="left"><p>14.0.0.125</p></td>
<td align="left"><p>Allowed</p></td>
<td align="left"><p>Not in blocklist</p></td>
<td align="left"><p>EPM compatible</p></td>
</tr>
<tr class="even">
<td align="left"><p>http://contoso.com/test2.html</p></td>
<td align="left"><p>C:\Program Files\Java\jre6\bin\jp2iexp.dll</p></td>
<td align="left"><p>6.0.410.2</p></td>
<td align="left"><p>6.0.410.2</p></td>
<td align="left"><p>Blocked</p></td>
<td align="left"><p>Out of date</p></td>
<td align="left"><p>Not EPM compatible</p></td>
</tr>
</tbody>
</table>
 
- **Source URI.** The URL of the page that loaded the ActiveX control.
- **File path.** The location of the binary that implements the ActiveX control.
- **Product version.** The product version of the binary that implements the ActiveX control.
- **File version.** The file version of the binary that implements the ActiveX control.
- **Allowed/Blocked** Whether IE blocked the ActiveX control.
- **Reason.** The ActiveX control can be blocked or allowed for any of these reasons:
<table>
<colgroup>
<col width="33%" />
<col width="33%" />
<col width="33%" />
</colgroup>
<thead>
<tr class="header">
<th align="left">Reason</th>
<th align="left">Corresponds to</th>
<th align="left">Description</th>
</tr>
</thead>
<tbody>
<tr class="odd">
<td align="left"><p>Version not in blocklist</p></td>
<td align="left"><p>Allowed</p></td>
<td align="left"><p>The version of the loaded ActiveX control is explicitly allowed by the IE version list.</p></td>
</tr>
<tr class="even">
<td align="left"><p>Trusted domain</p></td>
<td align="left"><p>Allowed</p></td>
<td align="left"><p>The ActiveX control was loaded on a domain listed in the <strong>Turn off blocking of outdated ActiveX controls for IE on specific domains</strong> setting.</p></td>
</tr>
<tr class="odd">
<td align="left"><p>File doesn’t exist</p></td>
<td align="left"><p>Allowed</p></td>
<td align="left"><p>The loaded ActiveX control is missing required binaries to run correctly.</p></td>
</tr>
<tr class="even">
<td align="left"><p>Out-of-date</p></td>
<td align="left"><p>Blocked</p></td>
<td align="left"><p>The loaded ActiveX control is explicitly blocked by the IE version list because it is out-of-date.</p></td>
</tr>
<tr class="odd">
<td align="left"><p>Not in blocklist</p></td>
<td align="left"><p>Allowed</p></td>
<td align="left"><p>The loaded ActiveX control isn’t in the IE version list.</p></td>
</tr>
<tr class="even">
<td align="left"><p>Managed by policy</p></td>
<td align="left"><p>Allowed</p></td>
<td align="left"><p>The loaded ActiveX control is managed by a Group Policy setting that isn’t listed here, and will be managed in accordance with that Group Policy setting.</p></td>
</tr>
<tr class="odd">
<td align="left"><p>Trusted Site Zone or intranet</p></td>
<td align="left"><p>Allowed</p></td>
<td align="left"><p>The ActiveX control was loaded in the Trusted Sites Zone or the Local Intranet Zone.</p></td>
</tr>
<tr class="even">
<td align="left"><p>Hardblocked</p></td>
<td align="left"><p>Blocked</p></td>
<td align="left"><p>The loaded ActiveX control is blocked in IE because it contains known security vulnerabilities.</p></td>
</tr>
<tr class="odd">
<td align="left"><p>Unknown</p></td>
<td align="left"><p>Allowed or blocked</p></td>
<td align="left"><p>None of the above apply.</p></td>
</tr>
</tbody>
</table>
 
- **Enhanced Protected Mode (EPM)-compatible.** Whether the loaded ActiveX control is compatible with [Enhanced Protected Mode](http://go.microsoft.com/fwlink/?LinkId=403865).
**Note**  
Enhanced Protected Mode isn’t supported on Internet Explorer 9 or earlier versions of IE. Therefore, if you’re using Internet Explorer 8 or Internet Explorer 9, all ActiveX controls will always be marked as not EPM-compatible.
 
### Inventory your ActiveX controls by using a local WMI class
For Windows 10 you also have the option to log your inventory info to a local WMI class. Info logged to this class includes all of info you get from the .csv file, plus the CLSID of the loaded ActiveX control or the name of any apps started from an ActiveX control.
### Before you begin
Before you can use WMI to inventory your ActiveX controls, you need to [download the configuration package (.zip file)](http://go.microsoft.com/fwlink/?LinkId=616971), which includes:
- **ConfigureWMILogging.ps1**. A Windows PowerShell script.
- **ActiveXWMILogging.mof**. A managed object file.
Before running the PowerShell script, you must copy both the .ps1 and .mof file to the same directory location, on the client computer.
![](../common/wedge.gif)**To configure IE to use WMI logging**
1. Open your Group Policy editor and turn on the **Administrative Templates\\Windows Components\\Internet Explorer\\Turn on ActiveX control logging in IE** setting.
2. On the client device, start PowerShell in elevated mode (using admin privileges) and run ConfigureWMILogging.ps1 by by-passing the PowerShell execution policy, using this command: `powershell –ExecutionPolicy Bypass .\ConfigureWMILogging.ps1`. For more info, see [about\_Execution\_Policies](http://go.microsoft.com/fwlink/p/?linkid=517460).
3. **Optional:** Set up your domain firewall for WMI data. For more info, see [Collect data using Enterprise Site Discovery](collect-data-using-enterprise-site-discovery.md).
The inventory info appears in the WMI class, `IEAXControlBlockingAuditInfo`, located in the WMI namespace, *root\\cimv2\\IETelemetry*. To collect the inventory info from your client computers, we recommend using System Center 2012 R2 Configuration Manager or any agent that can access the WMI data. For more info, see [Collect data using Enterprise Site Discovery](collect-data-using-enterprise-site-discovery.md).
 
 

77
browsers/internet-explorer-11/ie11-deploy-guide/problems-after-installing-ie11.md Normal file
View File

@ -0,0 +1,77 @@
---
Description: Problems after installing Internet Explorer 11
MS-HAID: 'p\_ie11deploy.problems\_after\_installing\_internet\_explorer\_11'
MSHAttr: 'PreferredLib:/library'
title: Problems after installing Internet Explorer 11
---
# Problems after installing Internet Explorer 11
After you install Internet Explorer 11 in your organization, you might run into the following issues. By following these suggestions, you should be able to fix them.
## Internet Explorer is in an unusable state
If IE11 gets into an unusable state on an employee's computer, you can use the **Reset Internet Explorer Settings (RIES)** feature to restore the default settings for many of the browser features, including:
- Search scopes
- Appearance settings
- Toolbars
- ActiveX® controls (resets to the opt-in state, unless they're pre-approved)
- Branding settings created with IEAK 11
RIES does not:
- Clear the Favorites list, RSS feeds, or Web slices.
- Reset connection or proxy settings.
- Affect the applied Administrative Template Group Policy settings.
RIES turns off all custom toolbars, browser extensions, and customizations installed with IE11. If you change your mind, you can turn each of the customizations back on through the **Manage Add-ons** dialog box. For more information about resetting IE settings, see [How to Reset Internet Explorer Settings](http://go.microsoft.com/fwlink/?LinkId=214528).
## IE is crashing or seems slow
If you notice that CPU usage is running higher than normal, or that IE is frequently crashing or slowing down, you should check your browser add-ons and video card. By default, IE11 uses graphics processing unit (GPU) rendering mode. However, some outdated video cards and video drivers don't support GPU hardware acceleration. If IE11 determines that your current video card or video driver doesn't support GPU hardware acceleration, it'll use Software Rendering mode.
![](../common/wedge.gif)**To check your browser add-ons**
1. Start IE11 in **No Add-ons mode** by running the **Run** command from the **Start** menu, and then typing **iexplore.exe -extoff** into the box.
2. Check if IE still crashes.
If the browser doesn't crash, open Internet Explorer for the desktop, click the **Tools** menu, and click **Manage Add-ons**.
3. Click **Toolbars and Extensions**, click each toolbar or extension, clicking **Disable** to turn off all of the browser extensions and toolbars.
4. Restart IE11. Go back to the **Manage Add-Ons** window and turn on each item, one-by-one.
After you turn each item back on, see if IE crashes or slows down. Doing it this way will help you identify the add-on that's causing IE to crash.
After you've figured out which add-on was causing the problem, turn it off until you have an update from the manufacturer.
![](../common/wedge.gif)**To check for Software Rendering mode**
1. Open Internet Explorer for the desktop, click the **Tools** menu, and then click **Internet Options**.
2. On the **Advanced** tab, go to the **Accelerated graphics** section, and then turn on Software Rendering mode by choosing the **Use software rendering instead of GPU rendering** box.
If the **Use software rendering instead of GPU rendering** option is greyed out, it means that your current video card or video driver doesn't support GPU hardware acceleration. For more information, see [Is Internet Explorer slow? 5 things to try](http://go.microsoft.com/fwlink/?LinkId=214531).
## Adaptive streaming and DRM playback don’t work with Windows Server 2012 R2
IE11 in Windows Server 2012 R2 doesn’t include media features like adaptive streaming or Digital Rights Management (DRM) playback. To add these features, you’ll need to download and install the Media Feature Pack from the [Microsoft Download Center](http://go.microsoft.com/fwlink/?LinkId=320789), as well as an app that uses PlayReady DRM from the Windows Store, such as the Xbox Music app or Xbox Video app. The app must be installed to specifically turn on DRM features, while all other media features are installed with the Media Feature Pack.
 
 

49
browsers/internet-explorer-11/ie11-deploy-guide/remove-all-sites-from-your-enterprise-mode-site-list-in-the-enterprise-mode-site-list-manager.md Normal file
View File

@ -0,0 +1,49 @@
---
Description: 'You can clear all of the sites from your global Enterprise Mode site list.'
MS-HAID: 'p\_ie11deploy.remove\_all\_sites\_from\_your\_enterprise\_mode\_site\_list\_in\_the\_enterprise\_mode\_site\_list\_manager'
MSHAttr: 'PreferredLib:/library'
title: Remove all sites from your Enterprise Mode site list in the Enterprise Mode Site List Manager
---
# Remove all sites from your Enterprise Mode site list in the Enterprise Mode Site List Manager
**Last updated**
- November 12, 2015
**Applies to:**
- Windows 10
- Windows 8.1
- Windows 7
- Windows Server 2012 R2
- Windows Server 2008 R2 with Service Pack 1 (SP1)
You can clear all of the sites from your global Enterprise Mode site list.
**Important**  
This is a permanent removal and erases everything. However, if you determine it was a mistake, and you saved an XML copy of your list, you can add the file again by following the steps in the [Add multiple sites to the Enterprise Mode site list using a file and Windows 10 Enterprise Mode Site List Manager tool](add-multiple-sites-to-enterprise-mode-site-list-using-the-version-2-schema-and-enterprise-mode-tool.md) or [Add multiple sites to the Enterprise Mode site list using a file and the Windows 7 and Windows 8.1 Enterprise Mode Site List Manager tool](add-single-sites-to-enterprise-mode-site-list-using-the-version-1-enterprise-mode-tool.md), depending on your operating system.
 
![](../common/wedge.gif)**To clear your compatibility list**
1. On the **File** menu of the Enterprise Mode Site List Manager, click **Clear list**.
2. Click **Yes** in the warning message.
Your sites are all cleared from your list.
## Related topics
[Download the Enterprise Mode Site List Manager for Windows 10 tool](http://go.microsoft.com/fwlink/?LinkId=716853)
[Download the Enterprise Mode Site List Manager for Windows 7 and Windows 8.1 tool](http://go.microsoft.com/fwlink/?LinkID=394378)
[Use the Enterprise Mode Site List Manager tool](use-the-enterprise-mode-site-list-manager-tool.md)
 
 

Some files were not shown because too many files have changed in this diff Show More