State of Wisconsin Logo

IT/Admin Guide for Internet Explorer 11 Settings for Wisconsin County Agencies

Published on May 17, 2017


This page is intended to provide agency IT staff with general comments and instructions for using CARES applications with Internet Explorer 11. This page includes instructions to disable Enterprise Mode and Compatibility View for CWW while keeping them on for other applications, and instructions for modifying Active X Controls for IE11 so that older Java versions do not inhibit application performance.


Table of Contents

  1. Understanding Internet Explorer 11 Enterprise Mode and Compatibility View
  2. IE11's Compatibility View
  3. Internet Explorer 11 Enterprise Mode
  4. Deactivate Active X Control Security Alerts
  5. Further Links/references


1. Understanding Internet Explorer 11 Enterprise Mode and Compatibility View

When Internet Explorer (IE) 11 was introduced, Microsoft recognized that many line-of-business applications were designed around web standards associated with Internet Explorer 8. Since having to redesign all such applications prior to upgrading to IE 11 would be impractical and costly for many enterprises, Microsoft introduced Enterprise Mode to allow for the upgrade while still maintaining needed functionality. Enterprise mode is a high-performance emulation functionality in IE 11.

Enterprise Mode is similar to, but different, than Compatibility View. Compatibility View is an emulation functionality present in prior versions of IE and which continues to exist in IE 11. Understandable confusion arises on the roles of IE's Compatibility View and Enterprise Mode with respect to one another (this is compounded by the former often being referred to as "Compatibility Mode"). Though they are both the same type of functionality, they originated at different times and for different, though similar, purposes.

Some applications that agencies use continue to require Compatibility View or Enterprise Mode. However CARES Worker Web does not function properly with either Compatibility View or Enterprise Mode enabled. Instructions on this page are provided for using these emulators in a targeted, site-specific fashion. Please see the Application Compatibility Chart for a full list of recommended browser/emulation settings for CARES applications.


2. Internet Explorer 11 Compatibility View

Compatibility View requirements vary between CARES applications. Some applications such as WITS require Compatibility View to be enabled, while others such as CARES Worker Web require Compatibility View to be disabled. Please see the Application Compatibility Chart for a full list of recommended browser/emulation settings for CARES applications.

Instructions in this section show how to turn Compatibility View off for the whole domain, and how to turn it on for subdomains.

2.1. Turn Compatibility View Off

Compatibility View can be turned off both from the Tools menu in the browser and the site list accessible through the Group Policy editor. The ability to adjust the Compatibility View using Group Policy editor is less well-known, and can therefore cause it to remain on when the user believes they've turned it off.

Requirements:

Steps to Turn Off Compatibility View from the Tools Menu

  1. Click Tools → Compatibility View settings in IE 11.
    (Note: Press the 'Alt' key if menu bar is not visible)

    Figure 1 - Compatibility View Settings

    Figure 1 - Compatibility View Settings

  2. If present, select "wisconsin.gov" from the list of sites and click Remove.

    Figure 2 - Remove site from Compatibility View

    Figure 2 - Remove site from Compatibility View

  3. If you use CWW on your intranet, un-check the box for Display intranet sites in Compatibility View.

    Figure 3 - Un-check box which engages Compatibility View on intranet sites

    Figure 3 - Un-check box which engages Compatibility View on intranet sites

  4. Click close and restart IE.

Steps to Turn Off Compatibility View from the Group Policy IE7 Site List

  1. Click Start and type "gpedit.msc" (without quotes) in the Start Search box then press Enter on your keyboard
  2. Choose path Computer Configuration → Administrative Templates → Windows Components → Internet Explorer → Compatibility View.
  3. Double click on Use Policy List of Internet Explorer 7 sites.
  4. Select Enabled and click Show.

    Show Internet Explorer 7 Policy list

    Figure 4 - Show the sites to render in Internet Explorer 7 mode (i.e. Compatibility View)

  5. Ensure "wisconsin.gov", "cares.wisconsin.gov", and "prd.cares.wisconsin.gov" are not in the site list.

    Remove CWW from Internet Explorer 7 Policy List

    Figure 5 - Sites that should NOT be in the IE7 Site List in Group Policy.

  6. Click OK.
  7. Click Apply.
  8. Reboot the PC.

2.2. Turn Compatibility View On for Specific Subdomains

Requirements and Notes:

Step to turn Compatibility View On:

  1. Click Start and type "gpedit.msc" (without quotes) in the Start Search box then press Enter on your keyboard
  2. Choose path Computer Configuration → Administrative Templates → Windows Components → Internet Explorer → Compatibility View.
  3. Double click on Use Policy List of Internet Explorer 7 sites.
  4. Select Enabled and click Show.

    Internet Explorer 7 Policy List

    Figure 6 - Show the sites to render in Internet Explorer 7 mode (i.e. Compatibility View)

  5. Add the following sub-domains that should open in Compatibility View:



    Adding subdomains to Internet Explorer 7 Policy List

    Figure 7 - Enter the subdomains that should open in Internet Explorer 7 mode/Compatibility View.

  6. Click OK.
  7. Click Apply.
  8. Reboot the PC.

3. Internet Explorer 11 Enterprise Mode

Enterprise Mode requirements vary between CARES applications. Please see the Application Compatibility Chart for a full list of recommended browser/emulation settings for CARES applications.

3.1. Disable Enterprise Mode on an Individual Workstation Using Local Group Policy

Enterprise mode can be turned off on an individual workstation either from the Tools menu in the browser or the XML "Site List". The Tools menu approach disables Enterprise Mode for all websites, whereas the XML "Site List" approach allows you to target specific application URLs while avoiding others.

Requirements and Notes:

Steps to Disable Enterprise Mode in the Tools Menu

With this method, Enterprise Mode can still be toggled 'on' for other applications that might require it.

  1. Open the Tools Menu dropdown.
    (If menu hidden, press alt key).
  2. Confirm if there is a check mark next to the Enterprise Mode option. A check mark means that Enterprise Mode is currently engaged.

    Enterprise Mode Enable

    Figure 8 - Enterprise Mode Enable

  3. If a checkmark is present, click Enterprise Mode to toggle it off. The check mark will disappear when Enterprise Mode is disabled.

Steps to Disable Enterprise Mode by Removing the Group Policy

With this method, Enterprise Mode is made entirely unavailable to the user for all applications. Note: an XML Site List can still be used to "push down" Enterprise Mode to some or all workstations in an application-specific manner.

  1. Click Start and type "gpedit.msc" (without quotes) in the Start Search box then press Enter on your keyboard
  2. Choose path Computer Configuration → Administrative Templates → Windows Components → Internet Explorer.
  3. In the right pane, double click Let users turn on and use Enterprise Mode from the Tools menu.

    Enterprise Mode using Group Policy

    Figure 9 - Enterprise Mode using Group Policy

  4. Click Disable.

    Enable Enterprise Mode using Group Policy

    Figure 10 - Enable Enterprise Mode using Group Policy

  5. Click Apply.
  6. Close the group editor.
  7. Reboot the PC.

3.2. Disable Enterprise Mode using the XML "Site List" and Global Group Policy

Agencies may be able to use the "Site List" functionality that accompanies IE 11's Enterprise Mode to target certain applications/URLs for IE 8 emulation, while leaving others to run in "default" mode. In this case, Enterprise Mode's Site List can either be disabled completely, or modified to allow use of Enterprise Mode for specific applications.

Requirements and Notes:

Steps to Deactivate Enterprise Mode's Site List for All Applications

  1. Click Start and type "gpedit.msc" (without quotes) in the Start Search box then press Enter on your keyboard
  2. Choose path Forest → Domains → the specifically targeted domain (e.g. "yourcounty.gov").
  3. Set the relevant Organizational Unit (OU).
  4. Expand the Group Policy Objects folder found at the bottom of the OU folder list.
  5. Right click Enterprise Mode - IE, and select Edit to open the Group Policy Management Editor.

    The Group Policy Management Console

    Figure 11 - The Group Policy Management Console

  6. In the Group Policy Management Editor's left pane expand Administrative Templates → Policies → Windows Components → Internet Explorer.

    The Group Policy Management Console

    Figure 12 - The Group Policy Management Console

  7. In the right pane double-click Use the Enterprise Mode IE website list.

    Using the Enterprise Mode Web Site List

    Figure 13 - Using the Enterprise Mode Web Site List

  8. Click Disabled to deactivate the setting.
  9. Click Apply.
  10. Close the Enterprise Mode Group Policy Management Editor.
  11. Return to the Group Policy Management console, and select the Settings tab.
  12. Confirm the changes made are reflected here. (e.g. the site list address, etc.)

    Group Policy Management Console: Settings

    Figure 14 - Group Policy Management Console: Settings

  13. Reboot the PC.

Steps to Modify the Site List XML to Turn Off Enterprise Mode Only for CARES Worker Web

  1. Access the XML Site List, wherever it is stored on your system.
  2. Modify the 'node'/tag set that addresses CARES Worker Web to look as the following:

    	<emie>
    		<domain exclude="true">
    			prd.cares.wisconsin.gov
    			<path exclude="true">/cares</path>
    			<path exclude="true">/cares/CaresController</path>
    			<path exclude="true">/cares/LoginServlet</path>
    		</domain>
    	</emie>
    							
  3. Locate the "version number" at the top of the XML document, and increment the number up by 1. (E.g. If it was "4", change it to "5").

  4. Save the Site List in the location that you've specified for referencing it.
  5. Restart IE.

3.3. Disable Enterprise Mode at an individual workstation Using Local Registry Edits

Requirements and Notes:

Steps to disable Enterprise Mode using Local Registry Edits:

  1. Click Start and then click Run.

    Windows Start Command

    Figure 15 - Windows Start Command

    Windows Run Command

    Figure 16 - Windows Run Command

  2. Type "regedit" (without quotes), and then click OK.

    Windows Registry Edit Command

    Figure 17 - Windows Registry Edit Command

  3. In left pane, expand HKEY_CURRENT_USER → Software → Policies → Microsoft → Internet Explorer → Main → EnterpriseMode.


  4. EnterpriseMode Registry Key

    Figure 18 - Enterprise Mode Registry Key

  5. In the right pane find and delete the Enable string:

    EnterpriseMode Enable String

    Figure 19 - Enterprise Mode Enable String

  6. Close 'regedit' and restart IE 11.

3.4. Confirm Current Enterprise Mode Setting for a Website

  1. Check for the Enterprise Mode building icon in the address bar.

    Verify Enterprise Mode Enabled

    Figure 20 - Address Bar Icon Present When Enterprise Mode Enabled

    Verify Enterprise Mode Disabled

    Figure 21 - Address Bar Icon Absent When Enterprise Mode Disabled


4. Deactivate Active X Control Security Alerts

Active X controls are small apps that facilitate interactive content. However, different/newer Java Runtime Environments (JREs) utilize different security models. The JRE that is packaged with IE 11 (JRE 1.7) is incompatible with several state applications which require JRE 1.6.x. Microsoft has provided a workaround to disable JRE update alerts from 1.7, allowing you to run IE 11 in tandem with JRE 1.6.x, without receiving these stifling security alerts.

4.1. Deactivate Active X Controls at an Individual Workstation Using Local Group Policy

Requirements and Notes:

Step(s):

  1. Click Start and type "gpedit.msc" (without quotes) in the Start Search box then press Enter on your keyboard
  2. Choose path Computer Configuration → Administrative Templates → Windows Components → Internet Explorer Security Features → Add-on Management.
  3. In the right pane of 'Add-on Management' is the list of 'Settings'.
  4. To enable a setting, double click on the setting in the right pane and select Edit.

    Add-on Management Settings

    Figure 22 - Add-on Management Settings

  5. To enable a feature, select Enabled then press OK.


  6. Turn on ActiveX Control Logging

    Figure 23 - Turn on ActiveX Control Logging

  7. Repeat steps 4-5 for each setting to be enabled.

    Note: This process does not remove the "Update" button in the out-of-date ActiveX control blocking notification for Internet Explorer. See instructions in Section 4.2 to change this setting.

4.2. Deactivate Active X controls at an Individual Workstation Using Local Registry Edits

Requirements and Notes:

  1. Requires admin access to the workstation.

Step(s):

  1. Click Start then type "cmd" in the Search program and files field.
  2. Right click on cmd.exe and select Run as administrator.

    Elevated Command Prompt

    Figure 24 - Elevated Command Prompt

  3. Type the following commands and press Enter after each to automatically turn on the setting.

5. Further links/references

  1. Microsoft. Internet Explorer begins blocking out-of-date ActiveX controls.
    http://blogs.msdn.com/b/ie/archive/2014/08/06/internet-explorer-begins-blocking-out-of-date-activex-controls.aspx
  2. Group Policy and Active Directory Domain Services.
    https://technet.microsoft.com/en-us/library/Cc978249.aspx
  3. Microsoft. Stay up-to-date with Internet Explorer.
    http://blogs.msdn.com/b/ie/archive/2014/08/07/stay-up-to-date-with-internet-explorer.aspx
  4. Oracle. New Deployment Policies for Java SE Customers.
    http://www.oracle.com/technetwork/java/javase/deployment-policy-135751.html
  5. Out-of-date ActiveX control blocking
    http://technet.microsoft.com/en-us/library/dn761713.aspx
  6. Better app compatibility with Enterprise Mode for internet explorer presentation
    https://www.youtube.com/watch?v=oaJRG4oFDSM
  7. Document modes and compatibility with Internet Explorer 11
    http://msdn.microsoft.com/en-us/library/dn321432.aspx
  8. Fix site display problems with compatibility view
    http://windows.microsoft.com/en-US/internet-explorer/use-compatibility-view#ie=ie-11
  9. What is Enterprise Mode?
    http://technet.microsoft.com/library/dn640687.aspx
  10. Introducing Compatibility View
    http://blogs.msdn.com/b/ie/archive/2008/08/27/introducing-compatibility-view.aspx
  11. Turn on Enterprise Mode and use a site list
    http://technet.microsoft.com/en-us/library/dn640699.aspx
  12. Turn on local control and logging for Enterprise Mode
    http://technet.microsoft.com/en-us/library/dn640690.aspx
  13. Add multiple sites to the Enterprise Mode site list using a file and Enterprise Mode Site List Manager
    http://technet.microsoft.com/en-us/library/dn640696.aspx
  14. Download Administrative Templates for Internet Explorer
    http://www.microsoft.com/en-us/download/details.aspx?id=40905
  15. Windows 7: Group Policy - Apply to a Specific User or Group: How to
    http://www.sevenforums.com/tutorials/151415-group-policy-apply-specific-user-group.html