Internet Explorer 11 (IE11) and Enhanced Protected Mode, 64-bit, and Security in Windows

Now-days, a working Internet browser is vital. A while back, (while still running Windows-7/64bit) I got tired of my IE-11 occasionally locking-up, crashing and other strange things. This seemed to happen on websites with minor errors in code, long-running scripts, or even malicious ad-code that snuck into legitimate websites via their subscribed ad-network. I also wanted the maximum protection against security exploits. I turned on Enhanced Protected Mode (EPM) and IE11 was like a new browser. I like Add-Ons as much as the next user, but most are 32-bit and I value dependability and security more (only Add-Ons that are 64-bit compatible will run in Protected Mode).

Windows-7: IE-11/Internet Options/Advanced tab/Security section/
Enable Enhanced Protected Mode
Close everything and reboot computer.

Windows-8.1: IE-11/Internet Options/Advanced tab/Security section/
Enable Enhanced Protected Mode
Enable 64-bit processes for Enhanced Protected Mode
Close everything and reboot computer.

Windows-10: IE-11/Internet Options/Advanced tab/Security section/
Enable Enhanced Protected Mode
Enable 64-bit processes for Enhanced Protected Mode
Close everything and reboot computer.

So while IE-11 can use Enhanced Protected Mode in Windows-7 (64bit), it's not as secure as the same browser (with similar settings in a newer OS) due to a limitation in the Operating System itself. It's better than nothing, but only Windows-8.1 and 10 support AppContainers and 64-bit browser-Tabs. AppContainers are an isolated memory space (Sandbox if you will) that the rest of the OS is protected from. Like you, I liked Windows-7 too (Windows-8, not so much), but this is just one reason why newer versions of Windows are better.

Here are my Add-Ons in Win-10/IE-11 after visiting a few websites and using Outlook.com and Word Online. Notice which are "32bit and 64bit Architecture" (allows them to be enabled in EPM), and which are actually Enabled. You can show "Currently loaded Add-ons" but there are others that load as needed (some without additional permission because they are from a trusted Publisher).

Now that I have upgraded to Windows-10, I will use IE-11 with the settings above. And while you should probably just skip websites that warrant it, "InPrivate Browsing" is there in Safety options if you need it. It's easy to switch your default browser away from Edge in Windows-10.

Using Edge is another option and might also be better for less technically-inclined or casual computer users. I'm trying to use it more myself. Looks like Enterprise Mode might be a way to ease the transition. Remember that there is also a "Open with Internet Explorer" menu-option in Edge (if you come across a legitimate website that is not working properly in Edge). Like it or not, the new Microsoft Edge browser is the future since Microsoft has ceased development on Internet Explorer (Edge is their new browser ... they had to start over). I still have Google Chrome installed as (rarely used) tertiary browser. Who has time for computer problems ... we have some flying to do.

More References:

http://www.eightforums.com/tutorials/31977-internet-explorer-enhanced-protected-mode-turn-off.html

http://stackoverflow.com/questions/19029208/how-does-internet-explorer-11-differ-between-windows-7-and-windows-8-1

... or just Google it :)

Windows 10 - Upgrades and version 1511,10586" (aka "Threshold-2")

Since many of us use Windows in our hobby, I thought these notes might be helpful to someone. These tips should work on various computers.

HP21-2010 All-in-One Touch (HP AMD-based quad-core with Radeon-R3 graphics)
- ESC on boot for Post-Menu (BIOS and UEFI Diags)

This is not my main computer but I do use it. While I usually prefer "clean-installs" there is something to be said for easier overlay-installs (if they work). With broadband and more of a cloud focus, I am becoming more trusting of it. However, research of my problem lead to cause being that it was initially upgraded by overlay (aka in-place upgrade) from Windows 8.1.

(8-2014) Came with Windows 8.1. Using Microsoft Account login and Outlook.com email and cloud.
(9-2015) I verified with HP that this model was eligible, so I answered Microsoft's offer and online upgraded (by overlay) to Win-10 from WindowsUpdate soon after its release. No data or pre-installed apps were lost and this computer has been working fine since.
I also installed HP Support Assistant . It's a nice updater for HP drivers and Apps. (It updates itself from it's own separate "About" prompt.)

(1-2016) Threshold-2 Upgrade
Computer has been working fine.
WindowsUpdate tried to "Upgrade to Windows 10 Home. version 1511,10586" (aka "Threshold-2") but Failed Auto-Install several times (as revealed in logs).

Hard-drive Error-check reveals no problems.
For all these procedures, start CommandPrompt as Admin and stay connected to Internet.
Start Version CommandPrompt> ver = 10.0.10240

CommandPrompt> SFC /scannow
- Says it found UN-REPAIRABLE errors

I think options at this point are to try Deployment Image Servicing and Management tool (DISM) or re-install (Overlay or Clean) from full Win10 .ISO (on flash drive)

CommandPrompt> dism.exe /online /cleanup-image /restorehealth
- Says it found UN-REPAIRABLE errors
- HOWEVER, I left PC for a while. Upon return I found that the Auto-Upgrade had started itself again and appeared to be working.
- Win10 (Threshold-2, 1511, 10586) install took about 2 hours (over WiFi) but worked fine. No apps or data-files were erased.

Now Version CommandPrompt says> ver = 10.0.10586
CommandPrompt> SFC /scannow
- SFC PASSES NOW

HP Support Assistant - Installed suggested driver updates - Now Current
WindowsUpdate - Installed suggested software updates - Now Current
- WindowsUpdate History resets and starts-over now (after Threshold-2 update was installed)
Computer working fine with latest version of Windows 10 Home (64bit).

Dell Venue Pro 8345 Tablet (Intel Atom and 32gb SSD ... initially shipped with Windows-8)
- Hold Power & Down-Volume from Power-On to access BIOS.

This machine was also suffering from multiple failed long auto-update (on it's own) Windows-10 upgrade attempts.

The main problems preventing the upgrade were:
1. Lack of "work space" on small SSD/flash memory (about 4gb) . This was compounded by the fact that Dell Backup and Restore (DBaR) was using a good portion (10 gb) of the available space for a Windows-8 Recovery Partition.
2. I installed the recommended (for Win-10 support) BIOS upgrade before attempting it again.
3. Current Win-8 WiFi driver seemed to be having a problem staying connected long enough for the large download installer download. Updated to latest version.

Then, I installed a SD-card in tablet and let Windows use that for Windows-10 Undo Files (these can be deleted later). The upgrade to Windows-10 finally completed successfully.

Dell Backup and Restore (DBaR) can then be uninstalled. It's not supported under Windows-10 anyway ( you now use Microsoft bundled backup tools). After reboot, if DBar's (old Win-8) recovery partition is still there, you can manually remove it. New free space on C: is 14gb.

Nice tablet. Might be a good way to run full Windows MissionPlanner in the field.