By default, Internet Explorer on Windows Server is locked down to guard against browser-based attacks on production servers. However, if you are configuring an instance that is not yet in production, or are using an instance for demonstration, development, or testing purposes, the extreme security settings may make Internet Explorer difficult (and sometimes even impossible) to use.
These instructions work on Windows Server 2012.
If you want to disable IEESC on the Local Server, go to your Server Manager, and choose "Local Server" from the sidebar. In the "Properties" section, the 3rd option of the 4th column is "IE Enhanced Security Configuration". By clicking on "On" (which represents the status), you can set it up for Administrators and Users.
If you want Administrators to be able to turn off the IEESC, choose "Off" for Administrators; same goes for Users: if you want users to be able to turn off the IEESC, click on "Off". This will turn the IEESC on or off.
If you want to enable the IEESC after disabling it, follow the same steps but simply change your choice for Administrators and Users.
These instructions work on Windows Server 2008 and later.
Connect to your server and open a text editor such as Notepad. Paste in the following:
Windows Registry Editor Version 5.00
;Start admin section.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\]
"IsInstalled"=dword:00000000
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{A509B1A7-37EF-4b3f-8CFC-4F3A74704073}]
"IsInstalled"=dword:00000000
;end admin section.
;Start user section.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\]
"IsInstalled"=dword:00000000
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{A509B1A8-37EF-4b3f-8CFC-4F3A74704073}]
"IsInstalled"=dword:00000000
;End user section.
If you wish to disable the enhanced security configuration for all users, there is no need to modify the registry file. To disable for administrators only, remove ;Start user section.
, ;End user section.
, and everything in between. To disable for users only, remove ;Start admin section.
, ;End admin section.
, and everything in between. When finished, save the file with a .reg
extension.
Find and open the registry file you have created. Answer "yes" when Windows prompts you to import the registry values.
Reboot your server, or kill explorer.exe
using Command Prompt, Task Manager, or another process management utility.