Press Ctrl/Cmd + P to print
or save as PDF

Disable Enhanced Security Configuration for Internet Explorer in Windows Server 2019/2016

Disable Enhanced Security Configuration for Internet Explorer in Windows Server 2019/2016

The Enhanced Security Configuration (IE ESC) is designed to protect a server against dangerous websites capable of malware infecting the system. To open all its content in IE you need to add a website to the Trusted sites zone. Enhanced Security Configuration on Windows Server 2019/2016 is supported by default in Internet Explorer. These security restrictions are genuinely beneficial in most situations. But in some cases, you might want to allow Internet Explorer to open all websites without adding them as trusted ones, including all third-party content. This guide shows how you can deactivate enhanced security settings for Internet Explorer in your Windows Server 2019/2016.

Here is just one example. When allowing Internet Explorer Enhanced Security Configuration, you will see this Start page when launching IE:

res://iesetup.dll/HardAdmin.htm

If you try to open a website, you will see a pop-up window that tells you the Content from the website listed below is being blocked by the IE ESC:

You must either click Add to add the website to the Trusted sites zone or click Close to open in a restricted mode. A part of the content of the website (such as JavaScript or Web fonts) will not be available in the last case. As a result, most websites will lose some of their functionality.

How to disable?

You can disable IE ESC for Internet Explorer in Windows Server 2019/2016 in just a few minutes. Follow the steps in the tutorial below:

Step 1
Firstly, click the Start Button and Launch Server Manager.

Step 2
Then, head to the Local Server.

Step 3
Find IE Enhanced Security Configuration and click on On.

Step 4
After that, turn off IE ESC for Administrators and/or for Users and click OK.

Step 5
Also, be sure to restart Internet Explorer!

Now when you launch IE you will see a soft configuration page telling you Internet Explorer Enhanced Security Configuration not enable:

res://iesetup.dll/SoftAdmin.htm

You can visit all websites without adding them to the Trusted sites zone.