Windows 8 and 8.1 Forums


Internet Explorer Enhanced Protected Mode - Turn On or Off

  1. #1
    Internet Explorer Enhanced Protected Mode - Turn On or Off

    Internet Explorer Enhanced Protected Mode - Turn On or Off
    How to Turn On or Off Enhanced Protected Mode in IE10 and IE11
    Published by Brink is offline
    26 Sep 2013
    Default Internet Explorer Enhanced Protected Mode - Turn On or Off

    Published by


    Brink's Avatar
    Administrator

    Join Date: Jul 2009
    Posts: 19,320

    How to Turn On or Off Enhanced Protected Mode in IE10 and IE11


    information   Information
    Protected Mode, which was added in IE7 for Windows Vista, is defense in depth feature that helps prevent attackers from installing software or modifying system settings if they manage to run exploit code. It is an extra layer of protection that locks down parts of your system that your browser ordinarily doesn’t need to use. For example, your browser doesn’t usually need to modify system settings or write to your Documents folder. Protected Mode is based on the principle of least privilege -- by reducing the capabilities that Internet Explorer has, the capabilities available to exploit code are reduced as well.

    Enhanced Protected Mode (EPM) takes this concept further by restricting additional capabilities. EPM is a new security feature in Internet Explorer 10 that was introduced in Windows 8.

    In the upcoming Internet Explorer 10 on Windows 7 and Windows Server 2008R2, the only thing that enabling Enhanced Protected Mode does is turn on 64bit Content Processes. But, when running on Windows 8, the EPM option provides even more security by also causing the sandboxed Content Process to run in a new process isolation feature called AppContainer. AppContainer, introduced by Windows 8, offers more fine-grained security permissions and which blocks Write and Read Access to most of the system.

    Tabs running in Enhanced Protected Mode on Windows 8 run inside an AppContainer. On Windows 7 and Windows Server 2008 R2, AppContainer does not exist, so EPM only enables 64-bit tabs on a 64-bit OS. (That also means that enabling EPM on a 32bit Windows 7 system doesn’t do anything, because a 32-bit Windows 7 system supports neither 64-bit nor AppContainer).

    In Windows 8, Metro-style IE tabs in the Internet and Restricted Zone run in Enhanced Protected mode, while tabs in other zones run in 64-bit only. You cannot disable EPM for Metro-style IE except by turning off Protected Mode entirely.

    When EPM was introduced in IE10, AppContainer and 64-bit tabs (EPM) in 64-bit Windows 8 were turned on by default for Internet Explorer in the Windows UI (Metro), but turned off on the desktop IE to run in the Low Integrity Protected Mode with 32-bit tabs. In IE11, AppContainer is turned on now by default in both the Windows UI (Metro) IE11 and desktop IE11, so both environments can share cookies, cache, and other data for a better user experience. EPM is not supported in IE11 Preview on Windows 7.

    When Enhanced Protected Mode is enabled, add-ons such as toolbars, browser helper objects (BHOs), and extensions are loaded only if they are compatible with Enhanced Protected Mode. If you have to load an incompatible add-on, you can turn off Enhanced Protected Mode for the desktop browser. This action lets incompatible add-ons load, but it may increase the risk of having malware or other potentially harmful software installed on your computer.


    For more detailed information about Enhanced Protected Mode in Internet Explorer, see:




    This tutorial will show you how to turn Enhanced Protected Mode (EPM) on or off in IE10 and IE11 for your user account in Windows 7 and Windows 8.





    OPTION ONE
    Turn On or Off Enhanced Protected Mode for IE10/IE11 in Internet Options

    1. Do step 2 or 3 below for how you would like to open Internet Options.

    2. Open the Control Panel (icons view) in Windows 7 or Windows 8, click/tap on the Internet Options icon, and go to step 4 below.

    3. Open Internet Explorer (for desktop in Windows 8), click/tap on the Tools Name:  Tools.jpg
Views: 121957
Size:  12.1 KB button, click/tap on Internet options, and go to step 4 below. (see screenshot below)

    Click image for larger version


    4. Do step 5 or 6 below for what you would like to do.


    5. To Turn On Enhanced Protected Mode in your IE10 or IE11

    A) In the Advanced tab, check the Enable Enhanced Protected Mode box under Security, and go to step 7 below. (see screenshot below step 7)

    6. To Turn Off Enhanced Protected Mode in your IE10 or IE11

    A) In the Advanced tab, uncheck the Enable Enhanced Protected Mode box under Security, and go to step 7 below. (see screenshot below step 7)

    7. Click/tap on OK, and restart the PC to apply.

    Name:  IE_Enhanced_Protected_Mode-2.jpg
Views: 143455
Size:  103.2 KB







    OPTION TWO
    Turn On or Off Enhanced Protected Mode for IE10/IE11 using REG File

    1. Do step 2 or 3 below for what you would like to do.

    2. To Turn On Enhanced Protected Mode in your IE10 or IE11

    A) Click/tap on the Download button below to download the file below, and go to step 4 below.

    Turn_On_EPM_for_IE.reg

    download

    3. To Turn Off Enhanced Protected Mode in your IE10 or IE11

    A) Click/tap on the Download button below to download the file below, and go to step 4 below.

    Turn_Off_EPM_for_IE.reg

    download

    4. Save the .reg file to your desktop.

    5. Double click/tap on the downloaded .reg file to merge it.

    6. Click/tap on Run, Yes (UAC), Yes, and OK when prompted to approve the merge.

    7. Restart the PC to apply.

    8. When finished, you can delete the downloaded .reg file if you like.


    That's it,
    Shawn


  2. #1


    Posts : 1
    windows 8


    My Enhanced button was "UNCHECKED" and I always got this annoying bar at the bottom to ask if I wanted to open or save.
    ENOUGH already! WIN 8 and IE 11 are toys for kids. it's taking me more time trying to save time it's insane!
    Does anyone have any real idea on how to remove the thing or not?

      My System SpecsSystem Spec

  3. #2



    Posts : 19,320
    64-bit Windows 8.1 Enterprise (RTM)


    Hello tcbelle, and welcome to Eight Forums.

    The Open or Save at the bottom of IE has nothing to do with Enhanced Protection Mode.

    Open or Save are the options you get when you click on a link to either download a file (save) or open it if it's say a text type file.
      My System SpecsSystem Spec

  4. #3


    Posts : 9
    Windows 8


    tried Turn_Off_EPM_for_IE.reg but it did not work for me. Using Windows 8.1 with ie11. The box remains greyed out and check mark cannot be removed. any ideas??
      My System SpecsSystem Spec


  5. #4



    Posts : 19,320
    64-bit Windows 8.1 Enterprise (RTM)


    Hello dlddemon,

    It sounds like you have Enhanced Protection Mode disabled by group policy.

    If you like, download and merge the .reg file below, approve merging it, and restart the computer to apply. This will remove the group policy setting to be back to default, and hopefully allow you to change the Enhanced Protection Mode setting afterwards.

    Enable_IE_Enhanced_Protected_Mode.reg
      My System SpecsSystem Spec

  6. #5


    Posts : 9
    Windows 8


    Hi Brink,
    I tried to remove the group policy setting as you suggested and then re applied the, turn off EPM, but unfortunately did not get rid of the greyed out check box.
      My System SpecsSystem Spec

  7. #6



    Posts : 19,320
    64-bit Windows 8.1 Enterprise (RTM)


    In that case, see if the .reg file below to remove all Internet Explorer policies may help.

    Remove_IE_Policies.reg
      My System SpecsSystem Spec

  8. #7


    Posts : 9
    Windows 8


    Thanks again Brink but no luck with this either.
      My System SpecsSystem Spec

  9. #8



    Posts : 19,320
    64-bit Windows 8.1 Enterprise (RTM)


    If you like, you could do a system restore using a restore point dated before you think this happened to undo it. You may have to try using another older restore point if the first one you try turns out not to be before.
      My System SpecsSystem Spec

  10. #9


    Posts : 9
    Windows 8


    Yes, Thanks Brink.
    I think that is what I will have to do.
    Will let you know how I make out.
      My System SpecsSystem Spec

Page 1 of 2 12 LastLast
Internet Explorer Enhanced Protected Mode - Turn On or Off

Similar Threads
Tutorial Forum
Hyper-V Enhanced Session Mode - Turn On or Off
How to Turn On or Off Hyper-V Enhanced Session Mode in Windows 8.1 Enhanced Session Mode allows your Hyper-V virtual machines to access local resources from your Hyper-V host (your PC). You will not need a network connection to the Virtual Machine as it uses the VMbus. The following are a list...
Tutorials
Internet Explorer Settings-Protected Mode question
I was checking the Internet Explorer default security settings for the different zones. I haven't changed anything and mine are showing Protected Mode is Enabled for the Internet and Restricted zones. But Protected Mode is set to Off for Local Intranet and Trusted sites. Are these settings the...
Browsers & Mail
Internet Explorer 11 to get new 'enterprise mode'
Read more at: Internet Explorer 11 to get new 'enterprise mode' | ZDNet
Windows 8 News
Internet Explorer 11 Store your Passwords - Turn On or Off
How to Turn On or Off to Store your Passwords for Websites in Internet Explorer 11 (IE11) When you visit a website that requires you to sign in to your account—like an email, banking, or shopping site—Internet Explorer will ask if you want your user name and password remembered. The next time...
Tutorials
Internet Explorer Location Sharing - Turn On or Off
How to Turn On or Off Location Sharing in IE10 and IE11 in Windows 8 and 8.1 Location Services lets sites ask for your physical location in order to improve your experience. For example, a mapping site can request your physical location in order to center the map for you. Internet Explorer...
Tutorials
Why is Internet Explorer in Windows 8 in classic mode?
Hi, I just upgraded to Windows 8 from 7. I chose to keep my files and settings. Win8 is working fine but the theme of the desktop and Internet Explorer seems to be in classic mode. I had Win7 tweaked for gaming and have some services off. Playing with the control panel, theme menu and others I...
Browsers & Mail
Enhanced Protected Mode
More... See also: Enhanced Mitigation Experience Toolkit (EMET) - Windows 7 Help Forums
Windows 8 News

Eight Forums Android App Eight Forums IOS App Follow us on Facebook