IE Protected Mode: Off?

E

Elliot

What's causing the Protected Mode of IE to be Off?
The option "Enable Protected Mode" under Security tab is checked. Is Live
OneCare causing?
 
J

Jon

Elliot said:
What's causing the Protected Mode of IE to be Off?
The option "Enable Protected Mode" under Security tab is checked. Is Live
OneCare causing?

UAC need to be enabled.
 
J

Jon

Elliot said:
But I don't want to be prompted whenever I open an utility or install a
program.


Ok, well there are other ways of configuring UAC to leave it on, but keep
the protected mode.

If you change this registry key to 0, (with UAC on) then you won't see the
prompts, but you'll at least benefit from protected mode...

Start > Regedit

ConsentPromptBehaviorAdmin (assuming you're using an administrator
level account)

at

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System


Personally I wouldn't surf the net with UAC / Protected mode turned off.
 
J

Jon

You'd need to reboot after making the change, and also if the site is in
your Trusted Zones it would be off too
 
E

Elliot

It remains the same after rebooting my system.
I also looked at the settings of UAC using Group Policy snap-in, found that
all are set to the default choice.
 
M

MICHAEL

This is the main problem I have with UAC- it is
an all or nothing package. That's unacceptable,
and not particularly clever or well thought out.

I don't see why there can not be a wizard type setup
for users when they first install the OS or boot
it up for the very first time. The wizard would briefly,
in average Joe language, explain the importance of UAC,
and then have several options to tweak. Each "tweak"
having a Microsoft recommended setting and some type of
other options. Like- turn a particular prompt off, turn
off prompts just for that action or program, pause prompts.
Have UAC off for main OS operations, but active when IE is
opened. I mean there are numerous ways this could refined.
With the all or nothing approach, a lot of users are turning
it off. Letting folks use UAC, even in some type of reduced
strength/warning level, is better than not using UAC at all.

Oh, while Windows Server 2008 doesn't do those things, it
does have a *much* better "less annoying factor" UAC.... well,
Windows Server 2008 is just much better that Vista- period.
It really is quite shocking.

Speaking of better.... I've been beta testing Windows Home Server,
and as some of you may know, I've been pleased with how well it works.
Home Server is really Windows Server 2003 SBS with some more user
friendly components added to it. Counting Home Server, I have 5
machines networked together, and I am pleased at the overall performance.
Although, it is clearly obvious which computers perform worse when networked-
Vista, of course. Most of the time, I have three Vista machines and one XP
machine attached to the network. Two of those Vista machines still have XP
on another partition, so I boot back those back to XP at times. XP's networking
speed/performance really overwhelms Vista... at times it's not even close,
and Vista is supposed to have this new and improved, much ballyhooed, "new
generation" network stack. Microsoft and the developers of that TCP/IP
stack should be embarrassed and apologize. Having IPv6 on by default
when 99.9% users have no need for it now or anytime soon, well, it's
just ignorant... actually, it's arrogant tech head bull*hit.

Anyway, when playing around with Home Server, which has been tweaked to make
it easy for users to change GUI settings than the regular Server line,
you are reminded of what a great OS Windows Server 2003 is. Even when
used as a workstation/server combo... which, I have a feeling some users
will do. Microsoft hasn't stated definitely whether they are going to sell
Home Server as a separate product or just as part of some server appliance,
but it looks like they will make it available to end users. Depending on
the price, I believe Microsoft will have a hit with this.
There are a lot of users out there who already use a Windows Server OS as
a workstation, expensive choice- but, to some, well worth it.
Of course, if some folks use Home Server on their network and also use
it as a workstation, it's not like their home network is serving an army
of machines, and it can surely handle both roles at the same time. From
what I've seen, I know that it can.

Okay, that's my morning tangent.

Take care, Mike.


-Michael


* Mike Hall MVP:
 
J

Jon

Try resetting Internet Explorer to its default settings

Alt key (within IE) > Tools > Internet Options > Advanced (tab)> Reset

--
Jon


Elliot said:
It remains the same after rebooting my system.
I also looked at the settings of UAC using Group Policy snap-in, found
that all are set to the default choice.
 
E

Elliot

Any alternative? I won't reset my choices.


Jon said:
Try resetting Internet Explorer to its default settings

Alt key (within IE) > Tools > Internet Options > Advanced (tab)> Reset
 
M

Mike Hall MVP

Michael

I agree. There should be a way of keeping IE protected mode without having
UAC enabled. Unfortunately there isn't :-(. C'est la guerre, je pense..


MICHAEL said:
This is the main problem I have with UAC- it is
an all or nothing package. That's unacceptable,
and not particularly clever or well thought out.

I don't see why there can not be a wizard type setup
for users when they first install the OS or boot
it up for the very first time. The wizard would briefly,
in average Joe language, explain the importance of UAC,
and then have several options to tweak. Each "tweak"
having a Microsoft recommended setting and some type of
other options. Like- turn a particular prompt off, turn
off prompts just for that action or program, pause prompts.
Have UAC off for main OS operations, but active when IE is
opened. I mean there are numerous ways this could refined.
With the all or nothing approach, a lot of users are turning
it off. Letting folks use UAC, even in some type of reduced
strength/warning level, is better than not using UAC at all.

Oh, while Windows Server 2008 doesn't do those things, it
does have a *much* better "less annoying factor" UAC.... well,
Windows Server 2008 is just much better that Vista- period.
It really is quite shocking.

Speaking of better.... I've been beta testing Windows Home Server,
and as some of you may know, I've been pleased with how well it works.
Home Server is really Windows Server 2003 SBS with some more user
friendly components added to it. Counting Home Server, I have 5
machines networked together, and I am pleased at the overall performance.
Although, it is clearly obvious which computers perform worse when
networked-
Vista, of course. Most of the time, I have three Vista machines and one
XP
machine attached to the network. Two of those Vista machines still have XP
on another partition, so I boot back those back to XP at times. XP's
networking
speed/performance really overwhelms Vista... at times it's not even close,
and Vista is supposed to have this new and improved, much ballyhooed, "new
generation" network stack. Microsoft and the developers of that TCP/IP
stack should be embarrassed and apologize. Having IPv6 on by default
when 99.9% users have no need for it now or anytime soon, well, it's
just ignorant... actually, it's arrogant tech head bull*hit.

Anyway, when playing around with Home Server, which has been tweaked to
make
it easy for users to change GUI settings than the regular Server line,
you are reminded of what a great OS Windows Server 2003 is. Even when
used as a workstation/server combo... which, I have a feeling some users
will do. Microsoft hasn't stated definitely whether they are going to
sell
Home Server as a separate product or just as part of some server
appliance,
but it looks like they will make it available to end users. Depending on
the price, I believe Microsoft will have a hit with this.
There are a lot of users out there who already use a Windows Server OS as
a workstation, expensive choice- but, to some, well worth it.
Of course, if some folks use Home Server on their network and also use
it as a workstation, it's not like their home network is serving an army
of machines, and it can surely handle both roles at the same time. From
what I've seen, I know that it can.

Okay, that's my morning tangent.

Take care, Mike.


-Michael


* Mike Hall MVP:
Elliot, it is the way things are.. I also run without IE protected mode..

--


Mike Hall
MS MVP Windows Shell/User
http://msmvps.com/blogs/mikehall/
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top