How to turn off enhanced protected mode in Internet Explorer 10 or newer - gHacks Tech News

How to turn off enhanced protected mode in Internet Explorer 10 or newer

For some time now I noticed that several preferences in Internet Explorer 11 could not be changed on a local test machine running Windows 7. This included several security settings, and also prevented the installation of many add-ons that I tried to install in the browser.

Surprisingly enough, it also prevented  Microsoft-own tools like the Bing Bar from being activated after installation. In the case of the Bing Bar, Internet Explorer displayed an error message notifying me of the following:

'Bing Bar' can't run because it isn't compatible with Internet Explorer's enhanced security features. These settings are managed by your system administrator.

The notifications does not mention any settings, and the more info link leads to a page that mentions protected mode. In theory, it is possible to disable protected mode in the Internet Options of Internet Explorer on the security tab there. It can be enabled or disabled individually here for all available zones.

Enhanced Protected Mode vs Protected Mode

enable protected mode

While I was able to disable protected mode by unchecking the preference on the Security tab for each zone individually, it did not resolve the issue that I was facing. Bing Bar would not install in the browser.

Then I read about a new security feature in Internet Explorer 10 called Enhanced Protected Mode. This feature is turned on by default in the web browser.

Enhanced Protected Mode provides additional protection against malicious websites by using 64-bit processes on 64-bit versions of Windows. For computers running Windows 8, Enhanced Protected Mode also limits the locations the Internet Explorer can read from in the Registry and the file system.

It can be disabled under Internet Options > Advanced > Enable Enhanced Protected Mode. I was not able to edit the setting there though, it was displayed in gray and a message at the bottom of the window read the following:

Some settings are managed by your system administrator.

disabled enhanced protected mode

I was signed in with an admin account, and it was quite puzzling that I was not able to modify the setting directly in Internet Explorer.

Solution

Settings restrictions usually mean that preferences have been set by an admin in the Group Policy. Note that this is not available for all editions of Windows 7. To start it do the following:

  • Tap on the Windows key.
  • Enter gpedit.msc into the form and hit enter

Navigate to the following preference folder using the folder structure of the sidebar:

Computer Configuration > Administrative Templates > Windows Components > Internet Explorer > Internet Control Panel > Advanced Page

Here you find the preference "Turn on Enhanced Protected Mode". Double-click it to open its configuration page and select one of the following values for it:

  1. Not configured means that individual users can turn the feature on or off individually and without restrictions.
  2. Enabled means that it is turned on for all user accounts and that it cannot be turned off, not even by admins.
  3. Disabled means that it is turned off or disabled for all user accounts, and that it cannot be enabled by users, not even admins.

turn off enhanced protected mode group policy

If you want to give users the choice to enable or disable the security feature, select not configured here. In my case, it was set to enabled.

Note that Internet Explorer will fall back to Protected Mode if you disable Enhanced Protected Mode in the web browser.





  • We need your help

    Advertising revenue is falling fast across the Internet, and independently-run sites like Ghacks are hit hardest by it. The advertising model in its current form is coming to an end, and we have to find other ways to continue operating this site.

    We are committed to keeping our content free and independent, which means no paywalls, no sponsored posts, no annoying ad formats (video ads) or subscription fees.

    If you like our content, and would like to help, please consider making a contribution:

    Comments

    1. Josh Trenser said on September 11, 2013 at 5:02 pm
      Reply

      Well, it means that it will protect me from various malicious softwares out there while browsing right???

      1. Martin Brinkmann said on September 11, 2013 at 5:55 pm
        Reply

        Enhanced protected mode adds additional security, like 64-bit tabs and AppContainer that the regular protected mode does not offer. More info here: http://msdn.microsoft.com/en-us/library/ie/dn265025%28v=vs.85%29.aspx

    2. Pierre said on September 12, 2013 at 3:31 pm
      Reply

      Enhanced protected mode almost means : runs in 64 bits. It is disabled by default.
      There is a “small” process wich submits the main process in 32 or 64 bits according to “enhanced protected mode” value.
      The other clauses are details

    3. Doc said on September 12, 2013 at 11:48 pm
      Reply

      “How to turn of enhanced” *off*

      1. Martin Brinkmann said on September 13, 2013 at 12:24 am
        Reply

        Thanks, corrected.

    4. Brian said on November 6, 2013 at 2:44 pm
      Reply

      Thanks for this. I found one small error in your instructions.

      You stated: •Tap on the Windows key.
      You should have sated: •Tap on the Windows key + R.

      Thanks again,
      Brian

      1. Martin Brinkmann said on November 6, 2013 at 3:00 pm
        Reply

        No not really Brian. If you press Windows, you open the start menu and can start typing right away. On Windows 8, it opens the start screen and you can start typing as well. Windows-R opens the run box, which works as well.

    5. kim said on September 24, 2015 at 5:10 am
      Reply

      Was hoping this would fix my issues with Dragon Naturally Speaking 12 Premium, but did not :(

    6. Chris said on July 27, 2016 at 2:57 pm
      Reply

      In windows 7 this just enables 64 bit processes.
      In windows 8 this makes IE run in a appcontainer instead of just dropping to lower integrity level.
      In windows 8 there is a separate option “enable 64 bit processes for enhanced protected mode” which toggles 64 bit, note this option is a bit misleading because if you enable this whilst enhanced protected mode is off it still will use 64 bit processes in normal protected mode.

      On my system enhanced protected mode acts weird, IE slows down, and also dns lookups require the dnsclient enabled to work. But there is no doubt applocker is good for security.

    7. Ashwini said on August 5, 2016 at 2:08 pm
      Reply

      Quite helpful, I resolved my issue after reading this document.

    8. Terry said on March 13, 2018 at 8:26 pm
      Reply

      It is amazing to me that Microsoft designed something that should add a layer of security to the IE browser and make that enhancement known to any one using their product but to design something that interferes with the function of your own product is , in my mind , dumb. The idea behind the enhanced protection mode is , in itself , a good one but it should work properly with all of the product iterations and the workout done by Microsoft is inexcusable. I guess they were more worried about bottom line and the ,”so-called ” new OS and Edge browser to be concerned with those of us that still use the IE product. Thanks for throwing us away , I’m sure we will survive without your hypocritical acumen .

    Leave a Reply