We know IE! https://docs.microsoft.com/archive/blogs/askie/feed.xml This site discusses all things "Internet Explorer" Sat, 28 Jul 2018 01:50:38 GMT en-US hourly 1 Ho to mange this alert from IE "some add on are ready to use warning" https://docs.microsoft.com/archive/blogs/askie/ho-to-mange-this-alert-from-ie-some-add-on-are-ready-to-use-warning Thu, 28 Jun 2018 00:10:22 GMT https://blogs.msdn.microsoft.com/askie/?p=4345 some add on are ready to use warning" two buttons "Enable" and "Don't enable". You could used the following registry key:
  • Type "regedit" in RUN or start search box and press "Enter." It'll open "Registry Editor."
  • Now go to following key:   HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies
  • Create a new key under "Policies" key and set its name to "Ext."
  • Now select the new "Ext" key and in right-side pane, create a new DWORD "IgnoreFrameApprovalCheck" and set its value to 1
  • In case, you have 64-bit edition of Windows then you need to follow the same steps 3 and 4 for the following key: HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion
  • It will get disabled permanently
GPO: USER CONFIGURATION GPO or COMPUTER CONFIGURATION GPO
  • Type "gpedit.msc" in RUN or start search box and press "Enter." It'll open "Group Policy Editor."
  • Now go to: Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer
  • In right-side pane, double-click on "Automatically activate/enable newly installed add-ons" option and set it to "Enabled."
  • Now, the popup is permanently disabled in Internet Explorer.
]]> How to implement a GPO to block an Add-on? https://docs.microsoft.com/archive/blogs/askie/how-to-implement-a-gpo-to-block-an-add-on Thu, 28 Jun 2018 00:07:17 GMT https://blogs.msdn.microsoft.com/askie/?p=4335 Add-on List GPO CONFIGURATION:
  1. Open GPEDIT.MSC
  2. Navigate to Computer Configuration\Policies\Administrative Templates\Windows Components\Internet Explorer\Security Features\Add-on Management  or User Configuration\Policies\Administrative Templates\Windows Components\Internet Explorer\Security Features\Add-on Management
  3. Open Add-on List, select Enable, select  Show
  4. On Show Contents, select Add.
Example: For Value Name use Class ID {xxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx} [In the example below, we are using the Adobe Acrobat GUID: {CA8A9780-280D-11CF-A24D-444553540000}] and for Value use 0 VALUE ADD INFORMATION:
  • 0 = The add-on is disabled, and users cannot manage the add-on from the user interface.
  • 1 = The add-on is enabled, and users cannot manage the add-on from the user interface.
  • 2 = The add-on is enabled, and users can manage the add-on from the user interface.
The Add-On List GPO Registry location (Example !)
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext] "ListBox_Support_CLSID"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID] "{CA8A9780-280D-11CF-A24D-444553540000}"="0"
ARTICLES ADDITIONAL INFORMATION ON SUPPRESSING THE NEW ADD-ON WARNING If you want to suppress the NEW add-on warning "some add on are ready to use warning" two buttons "Enable" and "Don't enable". You could used the following registry key:
  • Type "regedit" in RUN or start search box and press "Enter." It'll open "Registry Editor."
  • Now go to following key:   HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies
  • Create a new key under "Policies" key and set its name to "Ext."
  • Now select the new "Ext" key and in right-side pane, create a new DWORD "IgnoreFrameApprovalCheck" and set its value to 1
  • In case, you have 64-bit edition of Windows then you need to follow the same steps 3 and 4 for the following key: HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion
  • It will get disabled permanently
GPO: USER CONFIGURATION GPO or COMPUTER CONFIGURATION GPO
  • Type "gpedit.msc" in RUN or start search box and press "Enter." It'll open "Group Policy Editor."
  • Now go to: Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer
  • In right-side pane, double-click on "Automatically activate/enable newly installed add-ons" option and set it to "Enabled."
  • Now, the popup is permanently disabled in Internet Explorer.
]]> Collecting the Application and System Event logs https://docs.microsoft.com/archive/blogs/askie/collecting-the-application-and-system-event-logs Tue, 15 May 2018 04:57:54 GMT https://blogs.msdn.microsoft.com/askie/?p=4265 MANUAL STEPS
  1. Open eventvwr from run/search
  2. Expand Windows Logs
  3. Right click Application and select "save all events as..."
  4. Choose a meaningful name and save it as an evtx file
BATCH FILE
  1. Open Notepad.exe
  2. Copy the batch file on a new notepad file
  3. Save it as GetEventlogs.bat
  4. Run from an Elevated CMD window
:START
REM Requirement: Open with an Elevated Administrator CMD Window @echo off setlocal set MSFTLOGS=%temp%\MSFTLOGS if not exist %MSFTLOGS% ( mkdir %MSFTLOGS% 2>nul ) echo "Hit Enter to collect Event logs" @pause @echo. echo Gathering Event logs copy %windir%\System32\winevt\Logs\Application.evtx %MSFTLOGS% /y copy %windir%\System32\winevt\Logs\System.evtx %MSFTLOGS% /ySETLOCAL ENABLEDELAYEDEXPANSION SET sourceDirPath=%MSFTLOGS% IF [%2] EQU [] ( SET destinationDirPath="%USERPROFILE%\AppData\Local\Temp\MSFTLOGS" ) ELSE ( SET destinationDirPath="%2" ) IF [%3] EQU [] ( SET destinationFileName="MSFT_logs.cab" ) ELSE ( SET destinationFileName="%3" ) SET tempFilePath=%TEMP%\FilesToZip.txt TYPE NUL > %tempFilePath%FOR /F "DELIMS=*" %%i IN ('DIR /B /S /A-D "%sourceDirPath%"') DO (SET filePath=%%i SET dirPath=%%~dpi SET dirPath=!dirPath:~0,-1! SET dirPath=!dirPath:%sourceDirPath%=! SET dirPath=!dirPath:%sourceDirPath%=! ECHO .SET DestinationDir=!dirPath! >> %tempFilePath% ECHO "!filePath!" >> %tempFilePath% ) MAKECAB /D MaxDiskSize=0 /D CompressionType=MSZIP /D Cabinet=ON /D Compress=ON /D UniqueFiles=OFF /D DiskDirectoryTemplate=%destinationDirPath% /D CabinetNameTemplate=%destinationFileName%  /F %tempFilePath% > NUL 2>&1 echo click Continue to delete Event logs from the TEMP folder" @pause @echo. del %temp%\MSFTLOGS\Application.evtx del %temp%\MSFTLOGS\System.evtx @echo. echo Click enter to open the Temp logs file location... start %temp%\MSFTLOGS :END

This blog has been provided by the Browser Support Team!

]]> Temporary Internet Files Setting Reference https://docs.microsoft.com/archive/blogs/askie/temporary-internet-files-setting-reference Wed, 09 May 2018 13:05:36 GMT https://blogs.msdn.microsoft.com/askie/?p=4205 Browser History / Setting  / Temporary  Internet files Tab configured in the registry. The Default configuration is set to Automatically to help optimize performance.
Reminder: We do not recommend changing from the Automatically default setting as it can impact your client or servers performance!

REGISTRY LOCATION

key : HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings value : SyncMode5 type : REG_DWORD
First option: Every time I visit the webpage key : HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings value : SyncMode5 Data: 0x00000003
Second option: Every time I start Internet Explorer key : HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings Name: SyncMode5 Type: REG_DWORD Data: 0x00000002
Third option(Default): Automatically key : HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings Name: SyncMode5 Type: REG_DWORD Data: 0x00000004
Fourth option: Never key : HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings Name: SyncMode5 Type: REG_DWORD Never : 0x00000000

This blog has been provided by the Browser Support Team!

]]> Troubleshoot Browser scenarios using Problem Step Recorder (PSR.EXE) https://docs.microsoft.com/archive/blogs/askie/troubleshoot-browser-scenarios-using-problem-step-recorder-psr-exe Tue, 17 Apr 2018 22:08:03 GMT https://blogs.msdn.microsoft.com/askie/?p=4155 PSR.exe), was first shipped in Windows 7 (and above). This tool enables the collection of the actions performed by a user while using Windows. The Captured steps will include screenshots that are extremely helpful. The default location of PSR is under %windir%\system32\psr.exe and can be run from the CMD or RUN window. The main benefit of using this tool is the amount of time saved while troubleshooting a windows scenario you been asked to assist with. As you can see, the PSR tool is very cool easy to use utility and highly used by Microsoft support while troubleshooting with end users.

Here is how you can start PSR

  • From Start / Run or CMD window type: psr.exe

  • PSR will open

  • To start, click on the Start Record
  • You can add comments as you step thru the reproduction of the scenario
  • Stop when reproduction is done.
  • Save the recording (Alt+ V)
  • Give it a friendly name. This will save it with the .zip file extension
NEXT: Extract the file and open the mht file. It may look something like this: Recording_20180417_1702.mht and it should open using IE.
The mht file, while opened in IE will allow you to do this:
  • Review the recorded steps
  • Review the recorded steps as a slide show
  • Review the additional details

This blog has been provided by the Browser Support Team!

]]> How to enable Blob-Downloads in IE through in Trusted Sites https://docs.microsoft.com/archive/blogs/askie/how-to-enable-blob-downloads-in-ie-through-in-trusted-sites Fri, 09 Feb 2018 21:03:07 GMT https://blogs.msdn.microsoft.com/askie/?p=4015 File Download" option in the Internet security zone.

By that, users are only able to download files from Local Intranet or from pages that are located in the Trusted Sites. But there is a special case where the download will fail, although the originating site had been configured to Trusted Sites. These cases had one common pattern: they were using a blob-download as described in the following article: So taking the Example 1 from the above article, I added http://samples.msdn.microsoft.com to the Trusted Sites, but received the information that the file couldn't be downloaded:

But in case I add "blob" to the Trusted Sites in addition, the Blob-download starts working as the security context of the blob-Object is now explicitly set:

  So taking back the content of the script which was used in the samples , here is the relevant part where the relationship to "Blob" gets exposed:
-- snip --

var blobObject = new Blob(["I scream. You scream. We all scream for ice cream."]);

window.navigator.msSaveBlob(blobObject, 'msSaveBlob_testFile.txt'); // The user only has the option of clicking

-- snip --
  Note: In addition, Blob-Downloads from pages which are located in the Internet zone will still fail, as the file download is still disabled in that zone.

This blog has been provided by Heiko Mayer from our Browsers Support Team!

]]> How do I set the home page in Edge? https://docs.microsoft.com/archive/blogs/askie/how-do-i-set-the-home-page-in-edge Wed, 04 Oct 2017 18:54:01 GMT https://blogs.msdn.microsoft.com/askie/?p=3945 CONFIGURE YOUR HOMEPAGE:
  • In Microsoft Edge, select More ... > Settings, and then scroll down to select View advanced settings.
  • Turn on Show the home button, select A specific page, type the URL of the home page you want, then select Save
  • Optional: To change what you see when you first open Microsoft Edge, select More ... > Settings, and then select the option you want under Open Microsoft Edge with.

Here is a good article on how you would setup a homepage in Microsoft Edge Change your home page

[caption id="attachment_3985" align="alignnone" width="300"]Animated GIF on how to configure your homepage, so when you click on the Home icon it takes you to the prefer homepage URL Click on the Animated GIF image above to see  how to configure your homepage, so when you click on the Home icon it takes you to the preferred homepage URL.[/caption]

Here is the registry key when you manually configured the Homepage

Windows Registry Editor Version 5.00 [HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Main] "HomeButtonPage"="https://www.bing.com/" "HomeButtonEnabled"=dword:00000001
Here is a sample Batch you can use to push the homepage:
ECHO OFF REM Configure MSEdge Homepage REM Author: AxelrMsft ECHO ON REG ADD "HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Main" /v "HomeButtonPage" /t REG_SZ /d "https://www.bing.com" /f REG ADD "HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Main" /v "HomeButtonEnabled" /t REG_DWORD /d 1 /f

CONFIGURING YOUR START PAGE USING GROUP POLICY:

In order to allow users edit the start page, both of these policies will have to be configured.

1) Policy name: Configure Start pages

This policy setting lets you configure one or more Start pages for domain-joined devices. Your employees won´t be able to change this after you set it.

If you enable this setting, you can configure one or more Start pages. If this setting is enabled, you must also include URLs to the pages, separating multiple pages by using angle brackets in this format: <http://www.website.com> 

You can add multiple sites: <http://www.website.com> <http://www.website.com>

Version 1703 or later: If you don´t want to send traffic to Microsoft, you can use the value about:blank, which is honored for both domain- and non-domain-joined machines, when it´s the only configured URL.

If you disable or don´t configure this setting, your default Start pages are the webpages specified in App settings.

Detailed values: Id: HomePagesPrompt ValueName: ProvisionedHomePages

2) Policy name: Disable lockdown of Start pages

This policy setting lets you disable the lock down of Start pages, letting users modify the Start pages when the "Configure Start pages" setting is in effect.

Note: This setting only applies when you´re using the "Configure Start pages" setting.

Important: This setting can only be used with domain-joined or MDM-enrolled devices. For more info, see the Microsoft browser extension policy (aka.ms/browserpolicy).

If you enable this setting, you can't lock down any Start pages that are configured using the "Configure Start pages" setting, which means that users can modify them.

If you disable or don't configure this setting, users can't change any Start pages configured using the "Configure Start pages" setting. The Start pages will remain locked down.

Detailed values: 

  • Enabled Value: decimal: 1
  • Disabled Value: decimal: 0
Here is an example of the registry after the GPO is applied:

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Policies\Microsoft\MicrosoftEdge\Internet Settings]

"DisableLockdownOfStartPages"=dword:00000001

"ProvisionedHomePages"="<http://www.website.com>"

NOTE:  After deploying your Start Page GPO "Configure Start pages" users are not able to edit the Start page setting. If you need to allow users to edit the predefined GPO start page setting, you can accomplish this by configuring both policies: "Configure Start pages" and "Disable lockdown of Start pages"

This blog has been provided by the Browser Support Team!

]]> Is there a way to manage the About:Flags page in MS Edge? https://docs.microsoft.com/archive/blogs/askie/is-there-a-way-to-manage-the-aboutflags-page-in-ms-edge Tue, 03 Oct 2017 16:18:02 GMT https://blogs.msdn.microsoft.com/askie/?p=3936 about:flags page in Microsoft Edge. The Policy is available in both Computer and User Configuration administrative templates.

GPO Details:

Policy name: Prevent access to the about:flags page in Microsoft Edge Category Path: User or Computer Configuration\Administrative Templates\Windows Components\Microsoft Edge\ Supported On: Microsoft Edge on Windows 10, Version 1607 or later Registry Key: HKCU\Software\Policies\Microsoft\MicrosoftEdge\Main Value: PreventAccessToAboutFlagsInMicrosoftEdge Admx file: MicrosoftEdge.admx

Explanation:

This policy settings lets you decide whether employees can access the about:flags page, which is used to change developer settings and to enable experimental features. If you enable this policy setting, employees can´t access the about:flags page. If you disable or don´t configure this setting, employees can access the about:flags page. Detailed values: Enabled Value: decimal: 1 Disabled Value: decimal: 0
REF:

This blog has been provided by the Browser Support Team!

]]> How to reset IE11 to default configuration via a script? https://docs.microsoft.com/archive/blogs/askie/how-to-reset-ie11-to-default-configuration-via-a-script Tue, 26 Sep 2017 11:45:58 GMT https://blogs.msdn.microsoft.com/askie/?p=3916
This is a command that will get the Default settings.
From Elevated command prompt type: (User interaction is needed to complete. The option to delete user personal setting will come up). 
rundll32.exe inetcpl.cpl ResetIEtoDefaults
There is a PowerShell Script that will perform the same action as the above command line option. Visit the TechNet article here:
Reset all Internet Explorer setting to default using PowerShell.
VBScript Sample below.
This will execute the operation without user interaction and the IE setting dialog box is not suppressed and visible to the user!
'IE Reset Automation
Set objAP = CreateObject("wscript.shell")
objAP.Run "rundll32.exe inetcpl.cpl ResetIEtoDefaults"
wscript.sleep 1000

objAP.AppActivate "Reset Internet Explorer Settings"
objAP.SendKeys "%r", True

wscript.sleep 2000

If objAP.AppActivate("Reset Internet Explorer Settings") Then objAP.SendKeys "%c"
wscript.sleep 2000

If objAP.AppActivate("Reset Internet Explorer Settings") Then objAP.SendKeys "%c"
wscript.sleep 2000

If objAP.AppActivate("Reset Internet Explorer Settings") Then objAP.SendKeys "%c"

This blog has been provided by the Browser Support Team!

]]> Can I add the same website address to both local and trusted site zones? https://docs.microsoft.com/archive/blogs/askie/can-i-add-the-same-website-address-to-both-local-and-trusted-site-zones Fri, 22 Sep 2017 22:13:15 GMT https://blogs.msdn.microsoft.com/askie/?p=3866 No. You can have one URL(Same Exact) per Zone and if the Site already exist on another Zone, lets say you had it in the intranet zone and now wants to add it to the trusted site zone a warning should come up.

Here is a sample scenario you can test:

Add the https://domain.com site to the Local Intranet zone in IE.

Screenshot:

Now, try adding the same https://domain.com site to the Trusted Site Zone. A warning will come up.

The site you specified already exist in the local intranet zone. Would you like to move it to the Trusted site zone?

What if I used the Site To Zone Assignment List GPO to push this, what will happened? Same answer, No.

A warning will appear:

The name "http://domain.com" has already been specified. Make sure that you specify a unique value.

This blog has been provided by the Browser Support Team!

]]>