Policy

Turn on Enhanced Protected Mode

Enhanced Protected Mode provides additional protection against malicious websites by using 64-bit processes on 64-bit versions of Windows. For computers running at least Windows 8, Enhanced Protected Mode also limits the locations Internet Explorer can read from in the registry and the file system. If you enable this policy setting, Enhanced Protected Mode will be turned on. Any zone that has Protected Mode enabled will use Enhanced Protected Mode. Users will not be able to disable Enhanced Protected Mode. If you disable this policy setting, Enhanced Protected Mode will be turned off. Any zone that has Protected Mode enabled will use the version of Protected Mode introduced in Internet Explorer 7 for Windows Vista. If you do not configure this policy, users will be able to turn on or turn off Enhanced Protected Mode on the Advanced tab of the Internet Options dialog.

Policy
Pack Microsoft Windows
Category Windows Components / Internet Explorer / Internet Control Panel / Advanced Page
Policy ID 0fd9691674d8
Internal name Advanced_EnableEnhancedProtectedMode

Registry

Copy registry mappings

HKLM\Software\Policies\Microsoft\Internet Explorer\Main\Isolation (enabled) = PMEM
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\Isolation (disabled) = PMIL
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\Isolation (enabled) = PMEM
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\Isolation (disabled) = PMIL

Policy notes

Enhanced Protected Mode provides additional protection against malicious websites by using 64-bit processes on 64-bit versions of Windows. For computers running at least Windows 8, Enhanced Protected Mode also limits the locations Internet Explorer can read from in the registry and the file system. If you enable this policy setting, Enhanced Protected Mode will be turned on. Any zone that has Protected Mode enabled will use Enhanced Protected Mode. Users will not be able to disable Enhanced Protected Mode. If you disable this policy setting, Enhanced Protected Mode will be turned off. Any zone that has Protected Mode enabled will use the version of Protected Mode introduced in Internet Explorer 7 for Windows Vista. If you do not configure this policy, users will be able to turn on or turn off Enhanced Protected Mode on the Advanced tab of the Internet Options dialog.

Related policies

Allow active content from CDs to run on user machinesAllow Install On Demand (except Internet Explorer)Allow Install On Demand (Internet Explorer)Allow Internet Explorer to use the HTTP2 network protocolAllow Internet Explorer to use the SPDY/3 network protocolAllow software to run or install even if the signature is invalidAllow third-party browser extensions