IT/Admin Guide for Internet Explorer 11 Settings for Wisconsin County Agencies

Published on May 17, 2017

This page is intended to provide agency IT staff with general comments and instructions for using CARES applications with Internet Explorer 11. This page includes instructions to disable Enterprise Mode and Compatibility View for CWW while keeping them on for other applications, and instructions for modifying Active X Controls for IE11 so that older Java versions do not inhibit application performance.

Table of Contents

1. Understanding Internet Explorer 11 Enterprise Mode and Compatibility View
2. IE11's Compatibility View
   • 2.1 Turn Compatibility View Off
   • 2.2 Turn Compatibility View On for Specific Subdomains
3. Internet Explorer 11 Enterprise Mode
   • 3.1 Disable Enterprise Mode on an Individual Workstation Using Local Group Policy
   • 3.2 Disable Enterprise mode using the XML "Site List" and Global Group Policy
   • 3.3 Disable Enterprise Mode on an Individual Workstation Using Local Registry Edits
   • 3.4 Confirm Current Enterprise Mode Setting for a Website
4. Deactivate Active X Control Security Alerts
   • 4.1 Deactivate Active X Controls on an Individual Workstation Using Local Group Policy
   • 4.2 Deactivate Active X Controls on an Individual Workstation Using Local Registry Edits
5. Further Links/references

1. Understanding Internet Explorer 11 Enterprise Mode and Compatibility View

When Internet Explorer (IE) 11 was introduced, Microsoft recognized that many line-of-business applications were designed around web standards associated with Internet Explorer 8. Since having to redesign all such applications prior to upgrading to IE 11 would be impractical and costly for many enterprises, Microsoft introduced Enterprise Mode to allow for the upgrade while still maintaining needed functionality. Enterprise mode is a high-performance emulation functionality in IE 11.

Enterprise Mode is similar to, but different, than Compatibility View. Compatibility View is an emulation functionality present in prior versions of IE and which continues to exist in IE 11. Understandable confusion arises on the roles of IE's Compatibility View and Enterprise Mode with respect to one another (this is compounded by the former often being referred to as "Compatibility Mode"). Though they are both the same type of functionality, they originated at different times and for different, though similar, purposes.

Some applications that agencies use continue to require Compatibility View or Enterprise Mode. However CARES Worker Web does not function properly with either Compatibility View or Enterprise Mode enabled. Instructions on this page are provided for using these emulators in a targeted, site-specific fashion. Please see the Application Compatibility Chart for a full list of recommended browser/emulation settings for CARES applications.

2. Internet Explorer 11 Compatibility View

Compatibility View requirements vary between CARES applications. Some applications such as WITS require Compatibility View to be enabled, while others such as CARES Worker Web require Compatibility View to be disabled. Please see the Application Compatibility Chart for a full list of recommended browser/emulation settings for CARES applications.

Instructions in this section show how to turn Compatibility View off for the whole domain, and how to turn it on for subdomains.

2.1. Turn Compatibility View Off

Compatibility View can be turned off both from the Tools menu in the browser and the site list accessible through the Group Policy editor. The ability to adjust the Compatibility View using Group Policy editor is less well-known, and can therefore cause it to remain on when the user believes they've turned it off.

Requirements:

• Changes through the Group Policy Editor require access/authority to modify Group Policy Settings on the workstation.

Steps to Turn Off Compatibility View from the Tools Menu

1. Click Tools → Compatibility View settings in IE 11.
   (Note: Press the 'Alt' key if menu bar is not visible)
   
   

   Figure 1 - Compatibility View Settings

2. If present, select "wisconsin.gov" from the list of sites and click Remove.
   
   

   Figure 2 - Remove site from Compatibility View

3. If you use CWW on your intranet, un-check the box for Display intranet sites in Compatibility View.
   
   

   Figure 3 - Un-check box which engages Compatibility View on intranet sites

4. Click close and restart IE.

Steps to Turn Off Compatibility View from the Group Policy IE7 Site List

1. Click Start and type "gpedit.msc" (without quotes) in the Start Search box then press Enter on your keyboard
2. Choose path Computer Configuration → Administrative Templates → Windows Components → Internet Explorer → Compatibility View.
3. Double click on Use Policy List of Internet Explorer 7 sites.
4. Select Enabled and click Show.
   
   

   Figure 4 - Show the sites to render in Internet Explorer 7 mode (i.e. Compatibility View)

5. Ensure "wisconsin.gov", "cares.wisconsin.gov", and "prd.cares.wisconsin.gov" are not in the site list.
   
   

   Figure 5 - Sites that should NOT be in the IE7 Site List in Group Policy.

6. Click OK.
7. Click Apply.
8. Reboot the PC.

2.2. Turn Compatibility View On for Specific Subdomains

Requirements and Notes:

• Require access/authority to modify Group Policy Settings on the workstation.

Step to turn Compatibility View On:

1. Click Start and type "gpedit.msc" (without quotes) in the Start Search box then press Enter on your keyboard
2. Choose path Computer Configuration → Administrative Templates → Windows Components → Internet Explorer → Compatibility View.
3. Double click on Use Policy List of Internet Explorer 7 sites.
4. Select Enabled and click Show.
   
   

   Figure 6 - Show the sites to render in Internet Explorer 7 mode (i.e. Compatibility View)

5. Add the following sub-domains that should open in Compatibility View:
   
   
   • pps.cares.wisconsin.gov
   • fsia.cares.wisconsin.gov
   • wits.cares.wisconsin.gov
   
   
   

   Figure 7 - Enter the subdomains that should open in Internet Explorer 7 mode/Compatibility View.

6. Click OK.
7. Click Apply.
8. Reboot the PC.

3. Internet Explorer 11 Enterprise Mode

Enterprise Mode requirements vary between CARES applications. Please see the Application Compatibility Chart for a full list of recommended browser/emulation settings for CARES applications.

3.1. Disable Enterprise Mode on an Individual Workstation Using Local Group Policy

Enterprise mode can be turned off on an individual workstation either from the Tools menu in the browser or the XML "Site List". The Tools menu approach disables Enterprise Mode for all websites, whereas the XML "Site List" approach allows you to target specific application URLs while avoiding others.

Requirements and Notes:

• Requires administrative access to the workstation.
• Requires use of the Group Policy Editor in Microsoft Windows.

Steps to Disable Enterprise Mode in the Tools Menu

With this method, Enterprise Mode can still be toggled 'on' for other applications that might require it.

1. Open the Tools Menu dropdown.
   (If menu hidden, press alt key).
2. Confirm if there is a check mark next to the Enterprise Mode option. A check mark means that Enterprise Mode is currently engaged.
   
   

   Figure 8 - Enterprise Mode Enable

3. If a checkmark is present, click Enterprise Mode to toggle it off. The check mark will disappear when Enterprise Mode is disabled.

Steps to Disable Enterprise Mode by Removing the Group Policy

With this method, Enterprise Mode is made entirely unavailable to the user for all applications. Note: an XML Site List can still be used to "push down" Enterprise Mode to some or all workstations in an application-specific manner.

1. Click Start and type "gpedit.msc" (without quotes) in the Start Search box then press Enter on your keyboard
2. Choose path Computer Configuration → Administrative Templates → Windows Components → Internet Explorer.
3. In the right pane, double click Let users turn on and use Enterprise Mode from the Tools menu.
   
   

   Figure 9 - Enterprise Mode using Group Policy

4. Click Disable.
   
   

   Figure 10 - Enable Enterprise Mode using Group Policy

5. Click Apply.
6. Close the group editor.
7. Reboot the PC.

3.2. Disable Enterprise Mode using the XML "Site List" and Global Group Policy

Agencies may be able to use the "Site List" functionality that accompanies IE 11's Enterprise Mode to target certain applications/URLs for IE 8 emulation, while leaving others to run in "default" mode. In this case, Enterprise Mode's Site List can either be disabled completely, or modified to allow use of Enterprise Mode for specific applications.

Requirements and Notes:

• Requires use of the Group Policy Editor in Microsoft Windows.
• These methods assume that Enterprise Mode was implemented using an XML Site list. The most common reason for this implementation is the need to "push down" Enterprise Mode to a set of workstations, rather than modifying each workstation individually.
• Adjusting the XML Site List directly requires access to the XML Site List itself which is often stored on the domain-controlling server.

Steps to Deactivate Enterprise Mode's Site List for All Applications

1. Click Start and type "gpedit.msc" (without quotes) in the Start Search box then press Enter on your keyboard
2. Choose path Forest → Domains → the specifically targeted domain (e.g. "yourcounty.gov").
3. Set the relevant Organizational Unit (OU).
   • Any OU below a domain can be right-clicked and edited. This presents the option to link that OU (or subset of it) to the Group Policy.
   • Figure 11 shows subsets of several OU's ("ECCComputers," "ECCLaptops," etc.) linked to a policy.
4. Expand the Group Policy Objects folder found at the bottom of the OU folder list.
5. Right click Enterprise Mode - IE, and select Edit to open the Group Policy Management Editor.
   
   

   Figure 11 - The Group Policy Management Console

6. In the Group Policy Management Editor's left pane expand Administrative Templates → Policies → Windows Components → Internet Explorer.
   
   

   Figure 12 - The Group Policy Management Console

7. In the right pane double-click Use the Enterprise Mode IE website list.
   
   

   Figure 13 - Using the Enterprise Mode Web Site List

8. Click Disabled to deactivate the setting.
9. Click Apply.
10. Close the Enterprise Mode Group Policy Management Editor.
11. Return to the Group Policy Management console, and select the Settings tab.
12. Confirm the changes made are reflected here. (e.g. the site list address, etc.)
    
    

    Figure 14 - Group Policy Management Console: Settings

13. Reboot the PC.

Steps to Modify the Site List XML to Turn Off Enterprise Mode Only for CARES Worker Web

1. Access the XML Site List, wherever it is stored on your system.
2. Modify the 'node'/tag set that addresses CARES Worker Web to look as the following:
   
   

   	<emie>
   		<domain exclude="true">
   			prd.cares.wisconsin.gov
   			<path exclude="true">/cares</path>
   			<path exclude="true">/cares/CaresController</path>
   			<path exclude="true">/cares/LoginServlet</path>
   		</domain>
   	</emie>
   							

3. Locate the "version number" at the top of the XML document, and increment the number up by 1. (E.g. If it was "4", change it to "5").
   
   
   • This is a crucial step. Process will only work if version number is adjusted.
   • In order to increase performance, IE11 will not check for new Site List changes unless it sees that this number has been changed.
4. Save the Site List in the location that you've specified for referencing it.
5. Restart IE.

3.3. Disable Enterprise Mode at an individual workstation Using Local Registry Edits

Requirements and Notes:

• Requires administrative access to the workstation.
• Assuming Enterprise mode was enabled at an individual workstation via the Registry.

Steps to disable Enterprise Mode using Local Registry Edits:

1. Click on Search button on windows and type Run
   
   

   Figure 15 - Windows Start Command
   
   

   Figure 16 - Windows Run Command

2. Type "regedit" (without quotes), and then click OK.
   
   

   Figure 17 - Windows Registry Edit Command

3. In left pane, expand HKEY_CURRENT_USER → Software → Policies → Microsoft → Internet Explorer → Main → EnterpriseMode.




Figure 18 - Enterprise Mode Registry Key



4. In the right pane find and delete the Enable string:
   
   

   Figure 19 - Enterprise Mode Enable String
   

5. Close 'regedit' and restart IE 11.

3.4. Confirm Current Enterprise Mode Setting for a Website

1. Check for the Enterprise Mode building icon in the address bar.
   • If the building icon is present in the address bar: Enterprise Mode is on.
   • If the building icon is absent in the address bar: Enterprise Mode is off.
   
   
   

   Figure 20 - Address Bar Icon Present When Enterprise Mode Enabled
   
   

   Figure 21 - Address Bar Icon Absent When Enterprise Mode Disabled

4. Deactivate Active X Control Security Alerts

Active X controls are small apps that facilitate interactive content. However, different/newer Java Runtime Environments (JREs) utilize different security models. The JRE that is packaged with IE 11 (JRE 1.7) is incompatible with several state applications which require JRE 1.6.x. Microsoft has provided a workaround to disable JRE update alerts from 1.7, allowing you to run IE 11 in tandem with JRE 1.6.x, without receiving these stifling security alerts.

4.1. Deactivate Active X Controls at an Individual Workstation Using Local Group Policy

Requirements and Notes:

• Requires admin access to the workstation.
• Requires use of the Group Policy Editor in Microsoft Windows.

Step(s):

1. Click Start and type "gpedit.msc" (without quotes) in the Start Search box then press Enter on your keyboard
2. Choose path Computer Configuration → Administrative Templates → Windows Components → Internet Explorer Security Features → Add-on Management.
3. In the right pane of 'Add-on Management' is the list of 'Settings'.
4. To enable a setting, double click on the setting in the right pane and select Edit.
   
   

   Figure 22 - Add-on Management Settings

5. To enable a feature, select Enabled then press OK.




Figure 23 - Turn on ActiveX Control Logging

6. Repeat steps 4-5 for each setting to be enabled.
   
   Note: This process does not remove the "Update" button in the out-of-date ActiveX control blocking notification for Internet Explorer. See instructions in Section 4.2 to change this setting.

4.2. Deactivate Active X controls at an Individual Workstation Using Local Registry Edits

Requirements and Notes:

1. Requires admin access to the workstation.

Step(s):

1. Click Start then type "cmd" in the Search program and files field.
2. Right click on cmd.exe and select Run as administrator.
   
   

   Figure 24 - Elevated Command Prompt

3. Type the following commands and press Enter after each to automatically turn on the setting.
   • Turn on ActiveX control logging in Internet Explorer:

     reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Ext" /v AuditModeEnabled /t REG_DWORD /d 1 /f

   • Remove the "Run This Time" button for outdated ActiveX controls in Internet Explorer:

     reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Ext" /v RunThisTimeEnabled /t REG_DWORD /d 0 /f

   • Turn off blocking of outdated ActiveX controls for Internet Explorer on specific domains:

     reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Ext\Domain" /v wisconsin.gov /t REG_SZ /f

   • Turn off blocking of outdated ActiveX controls for Internet Explorer:

     reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Ext" /v VersionCheckEnabled /t REG_DWORD /d 0 /f

   • Remove the "Update" button in the out-of-date ActiveX control blocking notification for Internet Explorer:

     reg add "HKCU\Software\Microsoft\Internet Explorer\VersionManager" /v UpdateEnabled /t REG_DWORD /d 0 /f

     
     

     Figure 24 - Automatic Command Line Registry Update

5. Further links/references

1. Microsoft. Internet Explorer begins blocking out-of-date ActiveX controls.
   https://blogs.msdn.com/b/ie/archive/2014/08/06/internet-explorer-begins-blocking-out-of-date-activex-controls.aspx
2. Group Policy and Active Directory Domain Services.
   https://technet.microsoft.com/en-us/library/Cc978249.aspx
3. Microsoft. Stay up-to-date with Internet Explorer.
   https://blogs.msdn.com/b/ie/archive/2014/08/07/stay-up-to-date-with-internet-explorer.aspx
4. Oracle. New Deployment Policies for Java SE Customers.
   https://www.oracle.com/technetwork/java/javase/deployment-policy-135751.html
5. Out-of-date ActiveX control blocking
   https://technet.microsoft.com/en-us/library/dn761713.aspx
6. Better app compatibility with Enterprise Mode for internet explorer presentation
   https://www.youtube.com/watch?v=oaJRG4oFDSM
7. Document modes and compatibility with Internet Explorer 11
   https://msdn.microsoft.com/en-us/library/dn321432.aspx
8. Fix site display problems with compatibility view
   https://windows.microsoft.com/en-US/internet-explorer/use-compatibility-view#ie=ie-11
9. What is Enterprise Mode?
   https://technet.microsoft.com/library/dn640687.aspx
10. Introducing Compatibility View
    https://blogs.msdn.com/b/ie/archive/2008/08/27/introducing-compatibility-view.aspx
11. Turn on Enterprise Mode and use a site list
    https://technet.microsoft.com/en-us/library/dn640699.aspx
12. Turn on local control and logging for Enterprise Mode
    https://technet.microsoft.com/en-us/library/dn640690.aspx
13. Add multiple sites to the Enterprise Mode site list using a file and Enterprise Mode Site List Manager
    https://technet.microsoft.com/en-us/library/dn640696.aspx
14. Download Administrative Templates for Internet Explorer
    https://www.microsoft.com/en-us/download/details.aspx?id=40905
15. Windows 7: Group Policy - Apply to a Specific User or Group: How to
    https://www.sevenforums.com/tutorials/151415-group-policy-apply-specific-user-group.html

Return To Top

Return To The Gateway Page