Internet Explorer 11 (IE11) may Ignore GPO and Registry Home Page Settings

  • 7017835
  • 11-Jul-2016
  • 11-Jul-2016

Environment

Novell ZENworks Configuration Management

Situation

The latest Internet Explorer 11 (IE11) Security Updates introduces a new feature that disables reading the registry, honoring IE GPO settings, or IEAK Settings for the Home Page or Search Settings for Non-Domain PCs.
If this security update is in place, Users will be prompted to change their Default Home Page to MSN.COM (Default Option) or to Retain their Current Settings (Requires Users to Change the Default)
 
After the IE Security Updates are applied, Users are only permitted to change their Home Page and Search Engine settings manually via the "Internet Options" menu within Internet Explorer.
GPO settings to block changing these values are still honored, which may result in the Security Update Both Changing the Default Home Page and prohibiting the user from fixing it.

Resolution

Setting the following registry key appears to disable this new "Feature" of Internet Explorer and allowing Registry Keys, Local GPOs, and IEAK Settings to be honored:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_EUPP_GLOBAL_FORCE_DISABLE,iexplore.exe=1 (Dword)
 
Reminder: Micro Focus has no control over the changes to Internet Explorer Code that now prohibits the use of IEAK, Registry Settings, or Local GPOs to set the IE Homepage nor can Micro Focus ensure Microsoft will always permit the disabling of this feature in the future.

Additional Information