The devil's guide to Windows Vista security

29.11.2006

Neuter the built-in Windows Internet Explorer protections

The new Protected Mode -- available in Windows Vista -- runs IE in an isolated security setting, working in conjunction with most of the other, under-the-hood, architectural improvements in Windows Vista. With Protected Mode enabled, Internet Explorer runs within a low-right environment no matter which user actually launched the process.

Add-ins, like ActiveX controls and browser toolbars, subsequently run with low rights as well. This helps to prevent browser-based malware from latching onto your system through IE, which was a significant problem in previous versions of Windows.

But maybe you want to surf with all caution to the wind, since you trust yourself. Or maybe some of the restrictions of Protected Mode, like having to open separate windows to switch between intranet sites and Internet sites or other cross-security zone jumps, drive you crazy. In this case, you can turn off Protected Mode by double-clicking the lower right corner of any IE window, and on the resulting Internet Security dialog box, unchecking the Enable Protected Mode box. You'll have to restart IE to make the change effective.