05 augustus, 2014 at 2:17 PM

 

 source: http://trekker.net/archives/prevent-the-your-browser-has-been-upgraded-tab-in-internet-explorer/

 Microsoft’s June Cumulative Security Update for Internet Explorer (MS14-035 / KB2957689) had a change that caught many IT departments off guard. If you’re in an environment running Windows 7 with either Internet Explorer 9 or Internet Explorer 10 your users may have received an additional tab that opened after the reboot from their monthly updates applying:

 

Initially, users were redirected to http://windows.microsoft.com/en-us/internet-explorer/products/ie-9/windows-internet-explorer-9-privacy-statement, a rather lengthy privacy statement for Internet Explorer 9. After customer complaints/user feedback, Microsoft altered the redirect to send users to http://windows.microsoft.com/en-us/internet-explorer/ie-9-welcome-upgrade3.

Unfortunately, this still isn’t expected behavior in a corporate environment. End users tend to either ignore something like this completely or open a help desk ticket costing the IT organization money in the form of the help desk request. The problem is compounded by: (#1) Microsoft not warning corporate IT departments this change was coming, (#2) Microsoft not giving corporate IT departments a way to suppress the extra tab with the warning, and (#3) some users receiving the additional tab every time they open an IE window instead of seeing it just once.

The good news is that this extra tab can be suppressed with a Registry entry. The easiest way to do this in a managed environment is with Group Policy.  In a Group Policy Object (GPO) that applies to user accounts, go to User Configuration > Preferences > Windows Settings > Registry.  Right-click on Registry and choose New > Registry Item.

 

In the Properties for the new Registry item, set the following:

Action:  Update Hive:  HKEY_CURRENT_USER Key Path: Software\Microsoft\Internet Explorer\Main Value Name: PrivacyPolicyShown Value Type: REG_DWORD Value Data: 00000001

Obviously this won’t help you for the hordes of end users that have already received the extra tab, but it should prevent anyone logging into a system for the first time from seeing it down the road.

 

 

Commentaar