Windows Internet Explorer Protected Mode

AdminStudio 2022 | 23.0 | Application Manager

For this operating system compatibility test, the Windows Installer database is scanned for the presence of registry entries that turn off Protected Mode.

Test Group/Test Category

0310—Operating System Compatibility/Windows 8.1 (32-Bit)
0410—Operating System Compatibility/Windows 8.1 (64-Bit)
2810—Operating System Compatibility/Windows 10-1809 (and 2019 LTSC) (32-Bit)
5210—Operating System Compatibility/Windows 10-1909 (32-Bit)
5410—Operating System Compatibility/Windows 10-2004 (32-Bit)
5610—Operating System Compatibility/Windows 10-20H2 (32-Bit)
5810—Operating System Compatibility/Windows 10-21H1 (32-Bit)
7010—Operating System Compatibility/Windows 10-21H2 (32-Bit)
2910—Operating System Compatibility/Windows 10-1809 (and 2019 LTSC) (64-Bit)
5310—Operating System Compatibility/Windows 10-1909 (64-Bit)
5510—Operating System Compatibility/Windows 10-2004 (64-Bit)
5710—Operating System Compatibility/Windows 10-20H2 (64-Bit)
5910—Operating System Compatibility/Windows 10-21H1 (64-Bit)
7110—Operating System Compatibility/Windows 10-21H2 (64-Bit)
6710—Operating System Compatibility/Windows 11-21H2 (64-Bit)
0510—Operating System Compatibility/Windows Server 2012
0610—Operating System Compatibility/Windows Server 2016
1010—Operating System Compatibility/Windows Server 2019

Severity

Warning

Message

This Windows Installer database attempts to turn off Windows Internet Explorer Protected Mode (Table: Registry, Key: [REGISTRY_ENTRY]).

Background

On Windows Vista and later systems, Internet Explorer runs by default in Protected Mode. By preventing unauthorized access to sensitive areas of a user’s system, Protected Mode limits the amount of damage that a compromised Internet Explorer process or malware can cause. As a result, applications that use Internet Explorer cannot write directly to the disk while in the Internet or Intranet zones. In addition to displaying a warning message when web pages try to write to protected areas, Internet Explorer also informs the user when web pages try to run certain software programs.

Resolution

The following resolutions are available.

Manual Fix

An application compatible with the specified Windows operating system should be delivered by its manufacturer. Self-developed applications should be re-engineered to correctly handle Internet Explorer Protected Mode. When this is not feasible, the needed web sites should be added to the list of trusted sites.

Basic Auto Fix

No resolution is available.

Advanced Auto Fix

Registry entries that are responsible for turning off the Internet Explorer Protected Mode are removed in a Windows Installer transform.

This fix is enabled by default.

Note:An additional manual action is needed: the web sites should be added to the list of trusted sites.

See Also