Edit

Internet Explorer settings

  • Article

Note

Because support for Internet Explorer 11 is deprecated, support for IE Process has also been discontinued in Unified Service Desk. More information: Deprecation announcement

In the context of Best Practices Analyzer and the Unified Service Desk client application, certain parameters of Internet Explorer settings are important for Unified Service Desk to work seamlessly.

Tab Process Growth (TabProcGrowth)

Best Practices Analyzer checks for the TabProcGrowth registry key and displays an error message when the value isn't set to 16.

Tab Process Growth is the rate at which Internet Explorer creates new tab processes. Unified Service Desk works best when the value is 16.

Mitigation

Set TabProcGrowth value to 16:

  1. Open C:/ > Windows > regedit.

  2. Go to Computer\HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main.

  3. Right-click TabProcGrowth, and then select Modify.

    Note

    If the registry key isn't present, create it:
    1. Right-click the blank area, and then select New > DWORD (32-bit) Value. You can see new file.
    2. Type TabProcGrowth as the file name, and then select Modify.

  4. In the Value data field, type 16.

  5. Select OK.

Tab Shutdown Delay (TabShutdownDelay)

Best Practices Analyzer checks for the TabShutdownDelay registry key and displays an error message when the key is enabled (value set to 0).

Tab Shutdown Delay causes the Internet Explorer processes to terminate on demand. If the value isn't set to zero, Tab Shutdown Delay is enabled. Unified Service Desk works best when Tab Shutdown Delay is disabled (value set to 0).

Mitigation

Set TabShutdownDelay value to 0:

  1. Open C:/ > Windows > regedit.

  2. Go to Computer\HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main.

  3. Right-click TabShutdownDelay, and then select Modify.

    Note

    If the registry key isn't present, create it:
    1. Right-click the blank area, and then select New > DWORD (32-bit) Value. You can see new file.
    2. Type TabShutdownDelay as the file name, and then select Modify.

  4. In the Value data field, type 0.

  5. In the Base group box, select Decimal.

  6. Select OK.

Enable Enhanced Protected Mode

Best Practices Analyzer checks for Enable Enhanced Protected Mode by checking for the Isolation registry key and displays an error message when the key is enabled (value set to PMEM).

Enable Enhanced Protected Mode is a security feature. When this feature is enabled, add-ons such as toolbars and extensions are loaded only if they're compatible with Enhanced Protected Mode.

Unified Service Desk works best when Enable Enhanced Protected Mode is disabled (value set to PMIL).

Mitigation

Disable Enable Enhanced Protected Mode.

You can disable the option using the Registry Editor or Internet options.

To disable Enable Enhanced Protected Mode using the Registry Editor:

  1. Open C:/ > Windows > regedit.

  2. Go to Computer\HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main.

  3. Right-click Isolation, and then select Modify.

    Note

    If the registry key isn't present, create it:
    1. Right-click the blank area, and then select New > String Value. You can a see new file.
    2. Type Isolation as the file name, and then select Modify.

  4. In the Value data field, type PMIL.

  5. Select OK.

To disable the option using Internet options:

  1. Open Internet Explorer.
  2. Select Tools > Internet Options > Advanced tab.
  3. In the Security section, clear the Enable Enhanced Protected Mode check box.
  4. Select Apply, and then select OK.

Enable Automatic Crash Recovery

Best Practices Analyzer checks for Enable Automatic Crash Recovery by checking for the AutoRecover registry key and displays an error message when the key is enabled (value set to 0).

Enable Automatic Crash Recovery is a feature that allows you to restore your previous browsing session in the event of crash.

Unified Service Desk works best when Enable Automatic Crash Recovery is disabled (value is set to 2).

Mitigation

Disable the Enable Automatic Crash Recovery option.

You can disable the option using the Registry Editor or Internet options.

To disable the option using the Registry Editor:

  1. Open C:/ > Windows > regedit.

  2. Go to Computer\HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Recovery.

  3. Right-click AutoRecover, and then select Modify.

    Note

    If the registry key isn't present, create it:
    1. Right-click the blank area, and then select New > String Value. You can a see new file.
    2. Type Isolation as the file name, and then select Modify.

  4. In the Value data field, type 2.

  5. Select OK.

To disable the option using Internet options:

  1. Open Internet Explorer.
  2. Select Tools > Internet Options > Advanced tab.
  3. In the Browsing section, clear the Enable automatic crash recovery check box.
  4. Select Apply, and then select OK.

Enable Protected Mode

Best Practices Analyzer checks for Enable Protected Mode by checking for the 2500 registry key and displays an error message when the key is disabled (value set to 3).

Enable Protected Mode is a security feature where Internet Explorer provides multiple layers of defense from untrustworthy access to the Internet Explorer process. Unified Service Desk works best when Enable Protected Mode is enabled (value is set to 0).

Mitigation

Enable the Enable Protected Mode option.

You can enable the option using the Registry Editor or Internet options.

To enable the option using the Registry Editor:

  1. Open C:/ > Windows > regedit.

  2. Go to Computer\HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\\\<numerically named key folder>.
    Numerically named folders are as follows:

    • 1 (Intranet zone)
    • 2 (Trusted Sites zone)
    • 3 (Internet zone)
    • 4 (Restricted Sites zone)

  3. Right-click the 2500 file, and then select Modify.

    Note

    If the registry key isn't present, create it:
    1. Right-click the blank area, and then select New > DWORD (32-bit) Value. You can a see new file.
    2. Type 2500 as the file name, and then select Modify.

  4. In the Value data field, type 0.

  5. Select OK.

To enable the option using Internet options:

  1. Open Internet Explorer.
  2. Select Tools > Internet Options > Security tab.
  3. Select a zone to change the security settings.
    Following are the zones:
    • Internet
    • Local intranet
    • Trusted sites
    • Restricted sites
  4. Select the Enable Protected Mode check box for the all the zones.
  5. Select Apply, and then select OK.

Tip

An alternative mitigation is retaining the default settings in the Security zones, and adding the instance and authentication URLs to the Trusted sites. For more information, see the blog.

Cleanup HTCs

Best Practices Analyzer checks for the Cleanup HTCs registry key and displays an error message when the key is disabled (value set to No).

Unified Service Desk works best when the Cleanup HTCs option is set to Yes.

Mitigation

Set the Cleanup HTCs option to Yes:

  1. Go to C:/ > Windows > regedit
  2. Double-click to open regedit.
  3. Go to Computer\HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer.
  4. Right-click Cleanup HTCs, and then select Modify.
  5. In the Value data field, select Yes.
  6. Select OK.

Internet Explorer version

Best Practices Analyzer checks for the Internet Explorer version and recommends using the latest version of Internet Explorer.

Unified Service Desk works best with the latest version of Internet Explorer 11. If you are running Windows 8.1 or Windows 10, you already have Internet Explorer 11.

Mitigation

Use the latest version of Internet Explorer.

If you're running Windows 7 or earlier, download Internet Explorer 11.

More information: Internet Explorer Downloads

See also

Analyze best practices in Unified Service Desk

Download and install Best Practices Analyzer

Read Best Practices Analyzer report

List of rule categories and parameters

System configurations

Unified Service Desk configurations