With the next release of Windows 10, which is already available through the Insider Preview Program on Build 14986 , we received a new way policy “Keep favorites in sync between Internet Explorer and Microsoft Edge” to configure the favorites in IE and Edge.

The new GPO is located under:

User Configuration\Administrative Templates\Windows Components\Microsoft Edge
“Keep favorites in sync between Internet Explorer and Microsoft Edge”

After enabling this policy, favorites in Edge and Internet Explorer stay synchronized. This means, Favorites you add in Internet Explorer do appear automatically in Microsoft Edge too and Favorites you delete in Edge are deleted in Internet Explorer as well.

Another benefit of this policy, is that this setting eases also the maintenance of the favorites. In addition, the workflow also honors redirected favorites, so you can keep your IE-favorites on a network-share, and those are then copied to your Edge browser on the client.

From a technical point of view, Microsoft Edge still uses its own database at %LOCALAPPDATA%\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\User\Default\DataStore\Data\nouser1\120712-0049\DBStore\spartan.edb to use and manage its favorites and IE still uses the URL-files in the favorites-folder, which may also be redirected on a network-share. But, with the policy enabled, these favorites just stay in sync through Edge:

• When you add a favorite in Edge, it is added in the favorites-folder of IE too.
• When you add a favorite in Internet Explorer while Edge is not running, the database from Edge is not updated, as this is done when Edge is running.
• When you add a favorite in Internet Explorer while Edge is currently running, the favorite will appear in Edge too.

READ MORE ON NEW BUILDS FEATURES!!! – Announcing Windows 10 Insider Preview Build 15002 for PC

This blog has been provided to you by Heiko Mayer!

I am Hari from the Internet Explorer Core team. In this blog, we will discuss a scenario involving Microsoft EDGE and Skype for Business.

SCENARIO: Skype for business does not launch when you click on the “Join the meeting” option from outlook.

PROCESS: Here are the steps the user normally takes to launch Skype client.

1. You click on “Join the meeting”
2. It should invoke Edge (When Edge is configured as default browser which is Windows 10 default configuration), and the Edge would validate the request and handover the meeting operation to Skype for Business and you would join the meeting.

RESULTS: This might not work in some instances and Microsoft Edge might show the below messages:

CAUSE: This issue can occur of the policy setting “Block launching desktop apps associated with a URI scheme” is enabled. This policy setting lets you control whether Windows Store apps can open URIs using the default desktop app for a URI scheme.

GPO ONLINE LINK: http://gpsearch.azurewebsites.net/#7395 [This link explains the “Block launching desktop apps associated with a URI scheme”]

Registry Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Associations

Value:  BlockProtocolElevation

Enabled Value:
decimal: 1

Disabled Value:
decimal: 0

When you remove the policy, the setting allows Edge to launch desktop applications properly irrespective of the URI Scheme.  Since Microsoft Edge is a Windows Store application, this particular policy affects its functionality when configured.

Note:  When you configure the policy locally, make sure that “Runtimebroker.exe” is stopped manually to see immediate effect of the policy.  However, if you still see the issue please have the machine rebooted so that you can see Edge opening Skype for business.

This blog has been provided to you by Hariprasad Raghavan!

This is a quick post to help you identify what could be causing your Favorite links not to show in your favorites when updating to Windows 10  version.

Here are two possible scenarios to look at. :

SCENARIO I: When you build a Windows image from unattended setup, please consider the following:

The unattend.xml file may have an entry like this: <FavoritesDelete>true</FavoritesDelete> When executed this will cause the installation to removed the favorites.

SCENARIO II: You may see an install.ins file with the entry similar to this:

Path: C:\programfiles\internet explorer\Signup\install.ins 

Entry to look for: “FavoritesDelete=1”

• 1 = delete
• 0= preserve

The above entry will also cause your favorites to be deleted

In most cases, these updates were done with managed solutions such SCCM  where can be used to change the values and get the desired results.

For an SCCM deployment,  and dealing with the install.ins scenario you can you can change the file through a task sequence.

This blog has been provided to you by the IE/EDGE Support team!

That is a good question and in this blog, we hope to shed some light and help understand what the DefaultConnectionSettings  key is and what it maps to when looking at the IE Connection / Lan Settings User Interface(UI).

SIMPLIFIED ANSWER:

DefaultConnectionSettings is a registry value that contains the currently configured connection settings for the browser.  For example, if you configure internet settings to use a proxy server, connect directly, or use a configuration script, those settings are stored in this registry entry.

EXAMPLE:

In this screenshot we have set a proxy server abcde and port 80. Reviewing the defaultconnectionsettings registry value reflects these settings:

REGISTRY KEY LOCATION:

Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections

VALUE DEFINITION:

• DefaultConnectionSettings. This entry specifies the configuration of the default connection used by Internet Explorer.
• SavedLegacySettings. This entry is a copy of DefaultconnectionSettings, and specifies the configuration used by network connections other than the default connection.

Related articles:

• How to configure Proxy Settings for IE10 and IE11 as IEM is not available
• How to use GPP Registry to uncheck automatically detect settings?
• How can I configure Proxy AutoConfigURL Setting using Group Policy Preference (GPP) ?
• WPAD detection in Internet Explorer
• HOW TO CONFIGURE A PROXY SERVER URL AND PORT USING GPP REGISTRY ?

This blog has been provided to you by the IE Support team!

In the blog-post “Description of Event ID 1085 from “Internet Explorer Zonemapping” we already explained that an invalid entry within the Site To Zone Assignment List policy will cause the Event 1085, but it is still not easy to determine which exact entries are invalid and by that are not converted into the intended Zone-Mapping.

When examining a handful of those entries it may appear appropriate to enter the URLs as a Trusted Site within the Internet Options on a client that does not receive the Assignment policy until you find the invalid entry that causes the following message:

But when this list exceeds a few pages in the Group Policy Report the effort is very high then.

In order to help the Administrator to find such invalid entries I wrote the attached command-line utility  Site2ZoneMap.exe, which interprets the entries below the two registry-keys:

[HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zonemapkey]

[HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zonemapkey]

Command-line utility with parameters:

EXAMPLE: Assume the following policy, which has a correct value and an invalid entry (*.com):

When you execute the tool with Parameter “-test“, you receive the following output in CMD:

C:\>site2zonemap -test

Processing [HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zonemapkey]

==========================================================================

Success: *.microsoft.com

Error 87 for URL: *.com

1 Errors found.

When you execute the tool with Parameter “-erroronly “, you receive the following output in CMD:

C:\>site2zonemap -erroronly

Processing [HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zonemapkey]

==========================================================================

Error 87 for URL: *.com

1 Errors found.

DOWNLOAD: Site2ZoneMap

This blog has been provided to you by Heiko Mayer and the IE Support team!

There are different options on how you can find this information.

Finding the MS Edge version using the UI

To check which version of Microsoft Edge you are using follow the below steps:

1. Open Microsoft Edge.
2. Select More actions in the upper-right corner, and then select Settings.
3. Look for your version under About this app.

Please note that this is an example done from a Windows 10 Creator update 1703. To help you find the ProgID, you can look at the OEMDefaultAssociations.xml file. I have some steps at the end of this blog to help you find the version. You can modify the the Batch sample and reg export command accordingly!

Using Powershell option

From an elevated command windows type:

powershell get-appxpackage *edge* >c:\MSEdgeVersion.txt

RESULT:

Name              : Microsoft.MicrosoftEdge
Publisher         : CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
Architecture      : Neutral
ResourceId        :
Version           : 40.15063.0.0
PackageFullName   : Microsoft.MicrosoftEdge_40.15063.0.0_neutral__8wekyb3d8bbwe
InstallLocation   : C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe
IsFramework       : False
PackageFamilyName : Microsoft.MicrosoftEdge_8wekyb3d8bbwe
PublisherId       : 8wekyb3d8bbwe
IsResourcePackage : False
IsBundle          : False
IsDevelopmentMode : False
IsPartiallyStaged : False

REGISTRY EXPORT

From an elevated command window type:

reg export "HKEY_CLASSES_ROOT\AppX3xxs313wwkfjhythsb8q46xdsq8d2cvv\Application" C:\MSEDGE_Version_Key.txt /y

RESULT:

Note: The output will give you the Prog ID and Version

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\AppX3xxs313wwkfjhythsb8q46xdsq8d2cvv\Application]
"ApplicationName"="@{Microsoft.MicrosoftEdge_40.15063.0.0_neutral__8wekyb3d8bbwe?ms-resource://Microsoft.MicrosoftEdge/Resources/AppName}"
"ApplicationCompany"="Microsoft Corporation"
"ApplicationIcon"="@{Microsoft.MicrosoftEdge_40.15063.0.0_neutral__8wekyb3d8bbwe?ms-resource://Microsoft.MicrosoftEdge/Files/Assets/MicrosoftEdgeSquare44x44.png}"
"ApplicationDescription"="ms-resource:AppDescription"
"AppUserModelID"="Microsoft.MicrosoftEdge_8wekyb3d8bbwe!MicrosoftEdge"

Batch File that will execute the PowerShell and Registry export for you!

:Run from Elevated CMD window
:Start Batch 
 
setlocal
set _FOLDERNAME=MSEDGE_logs_temp
set _TEMPDIR=%systemdrive%\%_FOLDERNAME%
 
@echo.
echo -------------------------------------------
echo Copying logs to temporary folder ...
echo -------------------------------------------
mkdir %_TEMPDIR% 2> NUL

@echo.
echo -------------------------------------------
echo Get MS EDGE Version ...
echo -------------------------------------------
powershell get-appxpackage *edge* >%_TEMPDIR%\MSEdgeVersion.txt
reg export "HKEY_CLASSES_ROOT\AppX3xxs313wwkfjhythsb8q46xdsq8d2cvv\Application" %_TEMPDIR%\MSEDGE_Version_Key.txt /y

goto end
 
:end
 
pause

@echo.
echo -------------------------------------------
echo Go to c:\MSEDGE_logs_temp
echo -------------------------------------------
start c:\MSEDGE_logs_temp

:End of Batch

If you want to see what the OEM xml file have and compare it with the output, you can export the OEMDefaultAssociations.xml to notepad. Here is how:

When you open the OEMDefaultAssociations.xml in notepad, find the .htm and .html file extension to help you find the application handler. In this case, Windows 10 default .htm and .html is Microsoft Edge.

Example:

<Association Identifier=".htm" ProgId="AppX4hxtad77fbk3jkkeerkrm0ze94wjf3s9" ApplicationName="Microsoft Edge" ApplyOnUpgrade="true" OverwriteIfProgIdIs="AppX6k1pws1pa7jjhchyzw9jce3e6hg6vn8d" />
<Association Identifier=".html" ProgId="AppX4hxtad77fbk3jkkeerkrm0ze94wjf3s9" ApplicationName="Microsoft Edge" ApplyOnUpgrade="true" OverwriteIfProgIdIs="AppX6k1pws1pa7jjhchyzw9jce3e6hg6vn8d" />

This blog has been provided to you by the IE Support team!

I am Hari from the Browser team sharing some scenarios where web font’s icons are missing when loading web applications using these highly used web HTML font  Icons ("Example: font-awesome, @font-face, graphic shell-icons, GDI fonts") and share a few informative resources.

Here is a list of key words covering the different terms used to describe the behavior.

• Website graphic shell-icons are missing
• Web font-face icon missing
• Font-awesome icons missing
• Fonts blocked when using Windows 10 Internet explorer 11
• Office 365 icons missing - right navigation doesn't display the icons
• CRM right navigation doesn't display the icons
• Yammer right navigation doesn't display the icons
• MSN icons missing
• Microsoft.com website icon missing
• Web icons missing when browsing sites using Windows 7 IE11 (see scenario II)

The browser team recommends you use Microsoft EDGE to avoid the described scenarios!

SCENARIO I

The missing web font icon can be missing if the Mitigation System GPO Block untrusted fonts is configured in Windows 10 operating system. To learn more about this GPO, please read the following documents. Also, know that in future Windows 10 Operating system, the “Untrusted Font Blocking” setting will be dropped. See articles below for more information!

When the Untrusted Font Blocking is implemented a few registry keys are created.

GPO Registry Location:

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\NT\MitigationOptions with the following name and value: MitigationOptions_FontBocking*"="1000000000000"

ARTICLES:

• Block untrusted fonts in an enterprise
• GPO Reference: http://gpsearch.azurewebsites.net/#10949
• Dropping the “Untrusted Font Blocking” setting

If you were to open the F12 Developer Tools (by depressing the F12 key), under the console information you should find the following errors:

CSS3111: @font-face encountered unknown error.

Shell-icons-0.4.0.eot

CSS3114: @font-face failed OpenType embedding permission check. Permission must be Installable.

MWFMDL2.ttf

Screenshot:

SCENARIO II

The GPO Allow Font Download is enabled. This GPO can be configured for each Internet Explore Zones: Internet, Local Intranet, Trusted Sites and Restricted Zone.

Here are all the relevant information you can use to help you determine the client have this GPO Enabled.

Configure the Allow Font Downloads IE Setting on the Internet, Restricted Zone (on by default) via GPO and add the affected Websites to the Trusted Sites or Local Intranet Zone

GPO REF:

• COMPUTER
• USER

Policy name: Allow font downloads
Category Path: Computer Configuration or User Configuration - Administrative Templates\Windows Components\Internet Explorer\Internet\Control Panel\Security Page\Internet Zone\
Supported On: At least Internet Explorer 6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1

Registry Key: HKLM or HKCU \Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3

Value: 1604

Admx: inetres.admx
DESCRIPTION: This policy setting allows you to manage whether pages of the zone may download HTML fonts.

If you enable this policy setting, HTML fonts can be downloaded automatically. If you enable this policy setting and Prompt is selected in the drop-down box, users are queried whether to allow HTML fonts to download.

If you disable this policy setting, HTML fonts are prevented from downloading.
If you do not configure this policy setting, HTML fonts can be downloaded automatically.

Detailed values:
Id: IZ_Partname1604
ValueName: 1604
item: decimal: 0 => Enable
item: decimal: 3 => Disable
item: decimal: 1 => Prompt

TIP: While troubleshooting, we suggest to also look under the Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\ 0,1,2,3 zones to make sure, these have not changed if the GPO was not configured!

SCENARIO III

If the above scenarios do not assist in resolving the missing icon issue, please make sure you Disable your Antivirus application that have also known to prevent the Fonts Icon from displaying in the IE11 browser.

ADDITIONAL INFORMATION:

If you are using Symantec DLP, please check for the below link that’s speaks about the resolution that making changes to the DLP Settings.

• https://support.symantec.com/en_US/article.TECH240808.html Known Issues for DLP Agent Support of Microsoft Windows 10 Creators Update

Great question and the answer is No. You can have one URL(Same Exact) per Zone and if the Site already exist on another Zone, lets say you had it in the intranet zone and now wants to add it to the trusted site zone a warning should come up.

Here is a sample scenario you can test:

Add the https://domain.com site to the Local Intranet zone in IE.

Screenshot:

Now, try adding the same https://domain.com site to the Trusted Site Zone. A warning will come up.

The site you specified already exist in the local intranet zone. Would you like to move it to the Trusted site zone?

What if I used the Site To Zone Assignment List GPO to push this, what will happened? Same answer, No.

A warning will appear:

The name "http://domain.com" has already been specified. Make sure that you specify a unique value.

This blog has been provided by the Browser Support Team!

Here are some options to reset IE to default settings via a script or command line.

From Elevated command prompt type: (User interaction is needed to complete. The option to delete user personal setting will come up).

rundll32.exe inetcpl.cpl ResetIEtoDefaults

There is a PowerShell Script that will perform the same the above command line option. Visit the TechNet article here:

Reset all Internet Explorer setting to default using PowerShell.

VBScript Sample below. This will execute silently:

'IE Reset Automation
Set objAP = CreateObject("wscript.shell")
objAP.Run "rundll32.exe inetcpl.cpl ResetIEtoDefaults"
wscript.sleep 1000

objAP.AppActivate "Reset Internet Explorer Settings"
objAP.SendKeys "%r", True

wscript.sleep 2000

If objAP.AppActivate("Reset Internet Explorer Settings") Then objAP.SendKeys "%c"
wscript.sleep 2000

If objAP.AppActivate("Reset Internet Explorer Settings") Then objAP.SendKeys "%c"
wscript.sleep 2000

If objAP.AppActivate("Reset Internet Explorer Settings") Then objAP.SendKeys "%c"

Yes, there is a group policy you can use to help you manage the about:flags page in Microsoft Edge.
The Policy is available in both Computer and User Configuration administrative templates.

GPO Details:

Policy name: Prevent access to the about:flags page in Microsoft Edge
Category Path: User or Computer Configuration\Administrative Templates\Windows Components\Microsoft Edge\
Supported On: Microsoft Edge on Windows 10, Version 1607 or later
Registry Key: HKCU\Software\Policies\Microsoft\MicrosoftEdge\Main
Value: PreventAccessToAboutFlagsInMicrosoftEdge
Admx file: MicrosoftEdge.admx

Explanation:

Here are a few ways you can configure MS Edge Start page.

MANUALY:

• In Microsoft Edge, select More ... > Settings, and then scroll down to select View advanced settings.
• Turn on Show the home button, select A specific page, type the URL of the home page you want, then select Save
• Optional: To change what you see when you first open Microsoft Edge, select More ... > Settings, and then select the option you want under Open Microsoft Edge with.

Here is a good article on how you would setup a homepage in Microsoft Edge Change your home page

USING GROUP POLICY:

In order to allow users edit the start page, both of these policies will have to be configured.

Policy name: Configure Home pages

• User Configuration: http://gpsearch.azurewebsites.net/#13459
• Computer Configuration: http://gpsearch.azurewebsites.net/#13336

This policy setting lets you configure one or more Home pages. for domain-joined devices. Your employees won't be able to change this after you set it.

If you enable this setting, you can configure one or more Home pages. If this setting is enabled, you must also include URLs to the pages, separating multiple pages by using angle brackets in this format:

If you disable or don't configure this setting, your default Home page is the webpage specified in App settings.

Detailed values:

Id: HomePagesPrompt

ValueName: ProvisionedHomePages

Policy name: Disable lockdown of Start pages

• User Configuration: http://gpsearch.azurewebsites.net/#13615
• Computer Configuration: http://gpsearch.azurewebsites.net/#13616

This policy setting lets you disable the lock down of Start pages, letting users modify the Start pages when the "Configure Start pages" setting is in effect.

Note: This setting only applies when you´re using the "Configure Start pages" setting.

Important: This setting can only be used with domain-joined or MDM-enrolled devices. For more info, see the Microsoft browser extension policy (aka.ms/browserpolicy).

If you enable this setting, you can't lock down any Start pages that are configured using the "Configure Start pages" setting, which means that users can modify them.

If you disable or don't configure this setting, users can't change any Start pages configured using the "Configure Start pages" setting. The Start pages will remain locked down.

Detailed values: 

• Enabled Value: decimal: 1
• Disabled Value: decimal: 0

The Registry policy key may look like this:

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Policies\Microsoft\MicrosoftEdge\Internet Settings]

"DisableLockdownOfStartPages"=dword:00000001

"ProvisionedHomePages"="<http://www.website.com>"

This blog has been provided by the Browser Support Team!

This post covers the File Download IE setting, IE Zone settings and Saving files locally using Blob and msSaveBlob.

In case you want to limit the users to download files in the Internet zone, you can disable the "File Download" option in the Internet security zone.

By that, users are only able to download files from Local Intranet or from pages that are located in the Trusted Sites.

But there is a special case where the download will fail, although the originating site had been configured to Trusted Sites.

These cases had one common pattern: they were using a blob-download as described in the following article:

• Saving files locally using Blob and msSaveBlob

So taking the Example 1 from the above article, I added http://samples.msdn.microsoft.com to the Trusted Sites, but received the information that the file couldn't be downloaded:

But in case I add "blob" to the Trusted Sites in addition, the Blob-download starts working as the security context of the blob-Object is now explicitly set:

So taking back the content of the script which was used in the samples , here is the relevant part where the relationship to "Blob" gets exposed:

-- snip --

var blobObject = new Blob(["I scream. You scream. We all scream for ice cream."]);

window.navigator.msSaveBlob(blobObject, 'msSaveBlob_testFile.txt'); // The user only has the option of clicking

-- snip --

Note: In addition, Blob-Downloads from pages which are located in the Internet zone will still fail, as the file download is still disabled in that zone.

This blog has been provided by Heiko Mayer from our Browsers Support Team!

Hi there! In this blog post, we are sharing the PSR windows build-in tools you can use to help record scenarios that are not always easy to explain over the phone.

The Problem Steps Recorder (PSR.exe), was first shipped in Windows 7 (and above). This tool enables the collection of the actions performed by a user while using Windows. The Captured steps will include screenshots that are extremely helpful. The default location of PSR is under %windir%\system32\psr.exe and can be run from the CMD or RUN window.

The main benefit of using this tool is the amount of time saved while troubleshooting a windows scenario you been asked to assist with. As you can see, the PSR tool is very cool easy to use utility and highly used by Microsoft support while troubleshooting with end users.

Here is how you can start PSR

• From Start / Run or CMD window type: psr.exe

• PSR will open

• To start, click on the Start Record
• You can add comments as you step thru the reproduction of the scenario
• Stop when reproduction is done.
• Save the recording (Alt+ V)
• Give it a friendly name. This will save it with the .zip file extension

NEXT: Extract the file and open the mht file. It may look something like this: Recording_20180417_1702.mht and it should open using IE.

This is an informational blog and intended to help you familiarized where is the Browser History / Setting  / Temporary  Internet files Tab configured in the registry. The Default configuration is set to Automatically to help optimize performance.

Reminder: We do not recommend changing from the Automatically default setting as it can impact your client or servers performance!

REGISTRY LOCATION

key : HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings
value : SyncMode5
type : REG_DWORD

First option: Every time I visit the webpage
key : HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings
value : SyncMode5
Data: 0x00000003

Second option: Every time I start Internet Explorer
key : HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings
Name: SyncMode5
Type: REG_DWORD
Data: 0x00000002

Third option(Default): Automatically
key : HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings
Name: SyncMode5
Type: REG_DWORD
Data: 0x00000004

Fourth option: Never
key : HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings
Name: SyncMode5
Type: REG_DWORD
Never : 0x00000000

This blog has been provided by the Browser Support Team!

In this quick blog post, we are sharing steps you can follow to help gather the Application and System event logs that are often requested when troubleshooting Browsers related scenarios by our Browsers Support team. This can also be useful for other Windows related troubleshooting steps. The Batch file can be modify to meet your needs!

MANUAL STEPS

1. Open eventvwr from run/search
2. Expand Windows Logs
3. Right click Application and select "save all events as..."
4. Choose a meaningful name and save it as an evtx file

BATCH FILE

1. Open Notepad.exe
2. Copy the batch file on a new notepad file
3. Save it as GetEventlogs.bat
4. Run from an Elevated CMD window

This blog has been provided by the Browser Support Team!

You can use the Add-on List GPO to help you manage Internet Explorer add-ons.

Available GPO for: Add-on List

• REF: Computer Configuration
• REF: User Configuration

GPO CONFIGURATION:

1. Open GPEDIT.MSC
2. Navigate to Computer Configuration\Policies\Administrative Templates\Windows Components\Internet Explorer\Security Features\Add-on Management  or User Configuration\Policies\Administrative Templates\Windows Components\Internet Explorer\Security Features\Add-on Management
3. Open Add-on List, select Enable, select  Show
4. On Show Contents, select Add.

Example:

For Value Name use Class ID {xxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx} [In the example below, we are using the Adobe Acrobat GUID: {CA8A9780-280D-11CF-A24D-444553540000}] and for Value use 0

VALUE ADD INFORMATION:

• 0 = The add-on is disabled, and users cannot manage the add-on from the user interface.
• 1 = The add-on is enabled, and users cannot manage the add-on from the user interface.
• 2 = The add-on is enabled, and users can manage the add-on from the user interface.

The Add-On List GPO Registry location (Example !)

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext]
"ListBox_Support_CLSID"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID]
"{CA8A9780-280D-11CF-A24D-444553540000}"="0"

ARTICLES

• How to manage Internet Explorer add-ons in Windows XP Service Pack 2

ADDITIONAL INFORMATION ON SUPPRESSING THE NEW ADD-ON WARNING

If you want to suppress the NEW add-on warning "some add on are ready to use warning" two buttons "Enable" and "Don't enable". You could used the following registry key:

• Type "regedit" in RUN or start search box and press "Enter." It'll open "Registry Editor."
• Now go to following key:   HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies
• Create a new key under "Policies" key and set its name to "Ext."
• Now select the new "Ext" key and in right-side pane, create a new DWORD "IgnoreFrameApprovalCheck" and set its value to 1
• In case, you have 64-bit edition of Windows then you need to follow the same steps 3 and 4 for the following key: HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion
• It will get disabled permanently

GPO: USER CONFIGURATION GPO or COMPUTER CONFIGURATION GPO

• Type "gpedit.msc" in RUN or start search box and press "Enter." It'll open "Group Policy Editor."
• Now go to: Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer
• In right-side pane, double-click on "Automatically activate/enable newly installed add-ons" option and set it to "Enabled."
• Now, the popup is permanently disabled in Internet Explorer.

If you want to suppress the NEW add-on warning "some add on are ready to use warning" two buttons "Enable" and "Don't enable". You could used the following registry key:

• Type "regedit" in RUN or start search box and press "Enter." It'll open "Registry Editor."
• Now go to following key:   HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies
• Create a new key under "Policies" key and set its name to "Ext."
• Now select the new "Ext" key and in right-side pane, create a new DWORD "IgnoreFrameApprovalCheck" and set its value to 1
• In case, you have 64-bit edition of Windows then you need to follow the same steps 3 and 4 for the following key: HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion
• It will get disabled permanently

GPO: USER CONFIGURATION GPO or COMPUTER CONFIGURATION GPO

• Type "gpedit.msc" in RUN or start search box and press "Enter." It'll open "Group Policy Editor."
• Now go to: Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer
• In right-side pane, double-click on "Automatically activate/enable newly installed add-ons" option and set it to "Enabled."
• Now, the popup is permanently disabled in Internet Explorer.