Registry and Group Policy Settings for Internet Explorer 9

Internet Explorer 9 Configurations

Advanced




Accelerated graphics

Use software rendering instead of GPU rendering*-
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\UseSWRender



Accessibility

Always expand ALT text for images-
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Expand Alt Text

Enable Caret Browsing for new windows and tabs-
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\CaretBrowsing\EnableOnStartup

Move system caret with focus/selection changes-
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Move System Caret

Play system sounds-

Reset text size to medium for new windows and tabs-
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Zoom\ResetTextSizeOnStartup

Reset zoom level for new windows and tabs-
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Zoom\ResetZoomOnStartup2



Browsing

Automatically recover from page layout errors with Compatibility View+

Close unused folders in History and Favorites*-
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\NscSingleExpand

Disable script debugging (Internet Explorer)+
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\DisableScriptDebuggerIE

Disable script debugging (Other)+
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Disable Script Debugger
Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Advanced Page/Turn on script debugging

Display a notification about every script error-
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Error Dlg Displayed On Every Error
Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Advanced Page/Turn on the display of a notification about every script error

Display Accelerator button on selection*+
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Services\SelectionActivityButtonDisable
Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Accelerators/Turn off Accelerators

Enable automatic crash recovery*+
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Recovery\AutoRecover
Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Turn off Automatic Crash Recovery Prompt

Enable FTP folder view (outside of Internet Explorer)+
HKEY_CURRENT_USER\Software\Microsoft\FTP\Use Web Based FTP

Enable suggested sites-
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Suggested Sites\Enabled
Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Turn on Suggested Sites

Enable third-party browser extensions*+
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Enable Browser Extensions
Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Advanced Page/Allow third-party browser extensions

Enable visual styles on buttons and controls in webpages+
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\UseThemes

Enable websites to use the search pane*-
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\EnableSearchPane

Go to an intranet site for a single word entry in the Address bar-
HKCU\Software\Microsoft\Internet Explorer\Main\GotoIntranetSiteForSingleWordEntry
Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Advanced Page/Go to an intranet site for a single word entry in the Address bar

Notify when downloads complete+
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\NotifyDownloadComplete

Reuse windows for launching shortcuts (when tabbed browsing is off)+
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\AllowWindowReuse

Show friendly HTTP error messages+
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Friendly http errors

Underline Links
Always+
Hover
Never
 
Use inline AutoComplete in the Internet Explorer Address Bar and Open Dialog+

Use inline AutoComplete in Windows Explorer and Run Dialog-

Use most recent order when switching tabs with Ctrl+Tab-
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\TabbedBrowsing\UseMRUSwitching

Use Passive FTP (for firewall and DSL modem compatibility)+
HKEY_CURRENT_USER\Software\Microsoft\FTP\Use PASV

Use smooth scrolling+
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\SmoothScroll
Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Settings/Advanced settings/Browsing/Turn off smooth scrolling

 

HTTP 1.1 settings

Use HTTP 1.1+
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\EnableHttp1_1
Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Advanced Page/Use HTTP 1.1


Use HTTP 1.1 through proxy+
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyHttp1.1
Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Advanced Page/Use HTTP 1.1 through proxy connections



International

Always show encoded addresses*-
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ShowPunycode

Send IDN server names*+
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\EnablePunycode (checked:1)

Send IDN server names for Intranet addresses*-
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\EnablePunycode (checked:2)

Send UTF-8 URLs*+
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\UrlEncoding
Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Settings/URL Encoding/Turn off sending URLs as UTF-8 (requires restart)

Show Notification bar for encoded addresses+

Use UTF-8 for mailto links+
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Protocols\Mailto\UTF8Encoding
Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Use UTF-8 for mailto links



Multimedia

Always use ClearType for HTML*+
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\UseClearType
Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Advanced Page/Turn off ClearType

Enable automatic image resizing+
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Enable AutoImageResize
Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Settings/Advanced settings/Multimedia/Turn off automatic image resizing

Play animations in webpages*+
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Play_Animations

Play sounds in webpages+
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Play_Background_Sounds

Show image download placeholders-
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Show image placeholders

Show pictures+
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Display Inline Images



Security

Allow active content from CDs to run on My Computer*-
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN\Settings\LOCALMACHINE_CD_UNLOCK
Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Advanced Page/Allow active content from CDs to run on user machines

Allow active content to run in files on My Computer*-
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN\iexplore.exe

Allow software to run or install even if the signature is invalid-
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download\RunInvalidSignatures
Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Advanced Page/Allow software to run or install even if the signature is invalid

Block unsecured images with other mixed content-
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\MixedContentBlockImages

Check for publisher’s certificate revocation+
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing\State

Check for server certificate revocation*+
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\CertificateRevocation
Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Advanced Page/Check for server certificate revocation

Check for signatures on downloaded programs+
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DownloadCheckExeSignatures
Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Advanced Page/Check for signatures on downloaded programs

Do not save encrypted pages to disk-
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\DisableCachingOfSSLPages
Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Advanced Page/Do not save encrypted pages to disk

Empty Temporary Internet Files folder when browser is closed-
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Persistent
Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Advanced Page/Empty Temporary Internet Files folder when browser is closed

Enable DOM storage+
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\DOMStorage

Enable Integrated Windows Authentication*+
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\EnableNegotiate

Enable native XMLHTTP support+
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\XMLHTTP

Enable SmartScreen Filter-
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\PhishingFilter

Use SSL 2.0-
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\SecureProtocols

Use SSL 3.0+
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\SecureProtocols

Use TLS 1.0+
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\SecureProtocols

Use TLS 1.1-
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\SecureProtocols

Use TLS 1.2-
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\SecureProtocols

Warn about certificate address mismatch*+
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\WarnonBadCertRecving

Warn if changing between secure and not secure mode-
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\WarnonZoneCrossing

Warn if POST submittal is redirected to a zone that does not permit posts+
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\StatusBarWeb