How to disable "Open in Immersive Browser" in IE 11

Hello,<o:p></o:p>
I am trying to stop our users from using the Immersive Browser in Windows 8.1 and IE11, as our filtering is done by a local application using a plugin. This BHO does not work in immersive view,
and therefore bypasses all of our black lists and filtering.<o:p></o:p>
Initially I thought setting Internet Explorer to "Always open links in Internet Explorer in the desktop" in GP would disabled the Immersive Brower, however there is an option
under File called "Open in Immersive Browser" which overrides this setting and load the App version.<o:p></o:p>
I used Group Policy to disable the toolbar which worked, however it turns out if you right click on an open Tab you get the same option, thus bypassing our security again.<o:p></o:p>
I would ideally like a GPO setting to remove the "Open in Immersive Browser" option full stop, but as there doesn't appear to be one the next best thing would be a registry fix.<o:p></o:p>
After some investigation I found these keys:<o:p></o:p>
HKCU\Software\Microsoft\Windows\Shell\Associations\UrlAssociations\http\UserChoice<o:p></o:p>
HKCU\Software\Microsoft\Windows\Shell\Associations\UrlAssociations\https\UserChoice<o:p></o:p>
If I change the value "ProgID" to anything other "IE.HTTP" it causes the "Open in Immersive Browser” link to open in a new tab, and not the Immersive Browser ..perfect!
So within GP I set “Don’t check if IE is the default browser”, and “don’t inform user if IE is not the default browser” and changed the registry keys “ProgID” to “DisableImmersive” <o:p></o:p>
Unfortunately once again there is a quick and easy work around for our would be hackers. The ” it appears nothing happens. The truth is, behind the scenes IE is overwriting the As such if you
select Open in Immersive Browser a second time, it opens and I am back to square one.
We have mandatory profiles for some users, and I have edited the ntuser.man files for those profiles by loading the hive offline, and removing all permissions to those particular registry keys.
To do this I disabled inheritance and deleting all the remaining permissions. This has worked and as such, this is now my goal for our roaming profiles.<o:p></o:p>
I have looked at RegIni, ICACLS, CACLS, subinacl and SetACL but none seem to allow me to remove inheritance of registry key permissions, or deny access. I am unfamiliar with VB scripts and Power
Shell, but wondered if these would give me the power
to remove access to these keys as part of our logon scripts?<o:p></o:p>
If anyone can help me out with a script to deny access to these keys, or a custom ADM that can remove the link to “Open in Immersive Browser” completely I would be extremely grateful.<o:p></o:p>
Regards
Mr..D<o:p></o:p>

Hello again,
I am sorry this post has raised so many hackles, and that you believe it was posted in the wrong forum. I still don't believe that is the case, as I don't think IE or GP hold the solution.
OK to respond to the last few posts:
I honestly don't believe that Immersive Browser can be fully disabled using group policy, however I will happily try any settings that you think I may have over looked, and report back, as I cannot be the only administrator who would rather it wasn't
used. It would also be a more eloquent solution. I have however already set:
Do not check if IE is the Default Browser
Do not inform user if IE is not the default user.
Open all link in Desktop Mode
Disable the Toolbar.
The issue is the user can still right click on an open tab (on the tab itself) and select open in Immersive Browser.
As for changing the Registry settings in GP, I agree you can. However it doesn't allow me to prevent them from being changed straight back by IE. 
In my tests when a user logs on, Immersive Browser is indeed disabled. However if the user tries to open immersive browser IE immediately overwrites the reg keys back to IE.HPPT. If the user then selects "Open in Immersive Browser" a second time the Immersive
Browser opens.
This leads to I can change registry permissions in GP. Again yes I can, but not for User Configuration. If I could I would have exactly what I need, however to the best of my knowledge this can only be done for Computer Configuration and therefore HKLM.
OK the next suggestion is to have the users run a REG file with correct permissions set. I absolutely agree, but do not know how to achieve this, hence asking for help with the script.  I have tried exporting the required reg keys and
simply importing them into a users profile at logon. This changes the keys but not the permissions. I would be very interested to learn how to export a reg key with the permissions I want set so I can simply import via logon script. I know I can achieve this
with files and folders using XCOPY etc, but I have no knowledge of how to do this with a registry key.
Finally, Fred. Thank you for your script, it is good of you to point me in this direction when you don't entirely agree with my methods. What is really frustrating is I had looked into this and could not get the first command to work, which thwarted my progress.
On comparing my work to yours, I wasn't completely there but was heading in the right direction. The issue was simply my Syntax. I had missed the : after HKCU ...Very frustrating!
All that said I would still be interested to know if I have in fact overlooked a GP setting to fully disable the Immersive Browser. A way of setting Registry permissions under User Configuration in GP, and or a way of exporting Reg keys with
permissions intact.
I'm guessing the reality is I have outstayed my welcome and no further help will be forthcoming. If that is indeed the case thank you all for your advise and thank you Fred for the script which has got me sorted out.
Regards Mr..D

Similar Messages

  • How to disable Display PDF in Browser in Adobe Reader XI?

    I am having troubles with opening a report in PDF form from a web browser, and I'm trying to figure out how to disable opening a PDF in a browser in Reader XI.  I tried disabling "Open in Read Mode" and "Allow Fast Web View" both individually and seperately, and none of those combinations did the trick.
    Any suggestions/help are appreciated.  Thanks.

    Hello Lloyd6770
    Try these steps.  ( I'm using Windows 7 x64 Ultimate, Internet Explorer 9,  and Adobe XI )
    1. Open Adobe XI
    2. Click Edit
    3. Click Accessibility
    4. Click Setup Assistant
    5. Click top radio button 'Set Options for Screen Readers'
    6. Click Next
    7. Do not change options on Screen 2 of 4, Click Next
    8. Do not change options on Screen 3 of 4, Click Next
    9. On screen 4 of 4, remove the check mark on ' Display PDF documents in the web browser '
    NOTE: I checked Internet Explorer 9 / Tools / Manage add-ons and Adobe PDF Link Helper is still enabled in Internet Explorer 9.
    PDF's will open in Adobe XI as you preferred and not in your brower.
    Cheers!

  • How to disable Refresh,Reload in browser and user should not allow to multiple browser sessions ?

    Dear All,
    How to disable Refresh,Reload in browser and end user should not allow to multiple browser sessions in portal.Where we need to configure the settings or any code in masthead or any other component. My server version is 7.4 - SP5 .Please help us.
    Thanks for advance,
    BR,
    Durga Rao.

    Dear all,
    i am able to logoff the click refresh button on keyboard.I am using this code to log off the user into the portal.
    document.onkeydown = function(e)
      var key;
      if (window.event) key = event.keyCode
      else
      var unicode = e.keyCode ? e.keyCode : e.charCode
      key = unicode
      switch (key)
      { //event.keyCode
      case 116: //F5 button
        LSAPI.sessionPlugin.logoff();
      event.returnValue = false;
      key = 0; //event.keyCode = 0;
      return false;
      case 82: //R button
      if (event.ctrlKey)
    LSAPI.sessionPlugin.logoff();
      event.returnValue = false;
      key = 0; //event.keyCode = 0;
      return false;
      case 91: // ctrl + R Button
    LSAPI.sessionPlugin.logoff();
      event.returnValue= false;
      key=0;
      return false;
    Thanks.
    But i am unable to control the multiple windows opening the browser.So any one can tell me the how to block the new window and new tab/duplicate tab option.
    BR,
    Durga Rao.

  • Disabling open pdf in browser in adobe PRO XI not reader

    I have deployed adobe pro out to our user base and i understand in adobe PRO X there was a check box that would disable open pdf in a browser but that has gone away. I have gone under the preferences and on the internet section in PRO XI there is a link that takes you
    here: http://helpx.adobe.com/acrobat/using/display-pdf-browser-acrobat-xi.html I have created a GPO that disables the active X control in both IE 8 and IE 10 as you can see from this screen shot the adobe pdf reader is disabled so according to the instructions on the web all pdf files should open in PRO XI. This is not the case. The pdf will still open in the browser. I have checked the new customizations wizzard for adobe PRO XI and there is nothing to disable disply pdf in the browser to uncheck that i am aware of. I have read about the bdisablewebintegration but this have not worked either under the FeatureLockDown. In adobe reader you can go under the accessibilty options and disable open within a browser there but I have been unable to find that option in PRO XI. Had anyone found a fix for this issue to where it can be deployed out?
    Please let me know
    Thanks
    pjhernan

    From the screenshot it looks like you have both Acrobat and Reader on the machine and only Reader is disabled.
    Check again. If you think the doc is incorrect, post back.
    --- more info ---
    All browser integration prefs were deprecated with 11.x because browser companies are releasing new versions every 6 weeks or more. It was simply not possible to keep pace without requiring admins to update every few weeks. Moreover, most browsers are gradually phasing out such plugins or at least disable them by default (e.g. Chrome). Many companies provide a browser-specific PDF viewer. Acrobat and Reader share the same config and there's nothing different between the two.
    Ben

  • How can I open a new browser window!!!  Very Challenging!!!

    I have a form (name=MAIN) with a submit button (name=Button A). Button A opens a new browser window (name=SEARCH), via an HTML form target tag (<FORM TARGET=A>). Window SEARCH has multiple submit buttons (10-15). Each button has a different action which is handled by a servlet (form name and button name are passed to a servlet as a hidden field in the form to determine the action), which is setup to be an action handler. When a button in the SEARCH window is clicked the results are retrieved from an Oracle database and should be displayed in the text fields in window MAIN.
    For example, some results may be displayed in window SEARCH (_self) and and other results may be required to be sent to window MAIN depending on the button clicked.
    How can I setup window SEARCH so each button can have a different target window (some may be window MAIN or other windows)? Using a form tag for each button doesn't give desirable results. Is there a way to do this with JSP or some form of Java code?
    A form tag can only have one target. Basically I have one form with multiple submit buttons. How can I get it to send each submit buttons results to a specific window?
    Thanks.

    <!-- try this -->
    <script language="JavaScript1.2">
    function mysubmit(mytarget){
    document.myform.target=mytarget;
    document.myform.submit();
    function validation(myform){
    //validation stuff
    return [true | false];
    </script>
    <form target='none' name='myform' action='myaction.jsp' method='post' [onsubmit='return validation(this)']>
    <input type=button name='submit1' value='submit1' onclick='mysubmit("target1")'>
    <input type=button name='submit2' value='submit2' onclick='mysubmit("target2")'>
    <input type=button name='submit3' value='submit3' onclick='mysubmit("target3")'>
    <input type=button name='submit4' value='submit4' onclick='mysubmit("target4")'>
    </form>

  • Disable 'open PDF in browser'

    Hi,
    I'm trying to disable the open PDF in browser option in a corporate enviroment. The Adobe knowledge base said that this can be done by disabling the addon called 'Adobe PDF Reader'
    I've set a policy to disable this addon, but the PDF still open in the browser.  Any ideas?
    Also is there a registry key to disable instead? We are using IE11 as a browser.
    Thanks
    Dave

    Hello,
    Please try the below reg.
    [HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\11.0\Originals]
    “bBrowserIntegration”=dword:00000000
    ~Deepak

  • How can I open a new browser window from UIX?

    I need to open a new browser window from an event handler. How that can be done? HELP!
    Thanks!
    Martin Patrici

    HTML doesn't really let you do this on the server side; the client is in charge
    of creating new windows, not the server.
    If you know that clicking a certain link/button, etc. will always raise a new window,
    then you should use Javascript or "targetFrame" accordingly.
    If the decision will only be made on the server side, then you could reload the current
    window, only this time use an "onLoad" on the <body> to raise a window.

  • How do i open a new browser window(IE or Netscape)?

    I need to open a new browser window to show a web page returned by a PHP aplication.
    If i use an editorpane the returned page is shown unformatted.
    PLEASE HELP!
    Rui

    or to open a window using a hyperlink, u can try this:
    Link Name
    This will open a window and send then send u to the page you want for processing.

  • How do I open a new browser window from Flash

    I wish to open a new browser window from Flash and when the new window closes to return to the location from whence I started.
    ThomasChen

    The command to open a new window would be the "_blank" part of a command to link to a web page in the code below.
    navigateToURL(new URLRequest("http://www.anothersite.com", "_blank"));
    As far as the new window closing and getting back to where you were in the original window, I don't understand where that original window might have gone to... You should be wherever you last left it.

  • How can I open the Wndows Browse window from forms..

    I am using forms 5.0 and at run time I want to open the
    MSWINDOWS "BROWSE" window.Can any body help me?.

    I found this example in a book, which is useful for retrieving an
    image file from a local drive and inserting it into a table.
    I hope you find this helpful.
    DECLARE
         v_dirname          VARCHAR2(255);
         v_filename          VARCHAR2(255);
    BEGIN
         v_dirname := 'C:\';
         v_filename := get_file_name(v_dirname, NULL,
              'Bitmap file (*.bmp)|*.bmp|'                    ||
              'JPEG file (*.jpg)|*.jpg|'                         );
         IF v_filename IS NOT NULL THEN
              read_image_file(v_filename, 'ANY', 'av_data_image.blob_data');
         END IF;
    END;

  • How to disable "Open, Save and Save As" prompt

    I'm using IE 10.
    I'd like to disable the prompt "Open, Save or Save as". Each time I tried to any document (ex. DOC or PDF file), IE will popup the follow prompt: "What do you want to do with ..." 
    I saw there are some similar threads, but they are particular for SharePoint. 
    Thank you!
    Peter

    Each time I tried to any document (ex. DOC or PDF file), IE will popup the follow prompt: "What do you want to do with ..." 
    You might be able to add Open with... to a right-click menu.   But that will probably only help for files which are local, e.g. don't need to be downloaded.  I think the reason for the prompt is essentially to help route the download and notify
    users of the fact that if they just try to open it they will be opening a temporary file.  E.g. it typically always goes into the TIF first.  You could probably confirm and refine these ideas using ProcMon, e.g. looking for tests of registry
    values and writes of files.
    For example, I just did a BING search for  filetype:doc, did a right-click Open (as one of the other thread's responders had suggested) and still see the above prompt, because the file has not been downloaded yet.  That's IE's job so that's how
    it does it, with a prompt.  But then since there is a filetype association for the .doc extension when I choose Open no more intervention is required (although as the prompt notes "The file won't be saved automatically." so if a user tries to update it,
    e.g. a Word document or a spreadsheet, anything they do would only be preserved if they did a File Save As... or whatever those applications provide for that use case.)
    In fact, that warning is probably the main reason for the prompt when such an explicit Open command is given.  It would be interesting to see if IE could take advantage of some information left in the filetype that would indicate that it wouldn't matter
    if the file was temporary because it couldn't be reused anyway--for example, if the program associated with the open action could not update the file, examples being Acrobat Reader and WordViewer.   Again, I think the simplest way to find out would
    be to trace what happens and make changes to try to exploit the possibilities implied by the trace.
    On another tack you could see if there are any hints or tips given by using
    FileTypesMan  from NirSoft.  E.g. it might help you find some particular values to try for EditFlags and BrowserFlags  (some obscure registry values which are somewhat obsolete but may still have at least some of their original
    effect).
    FYI
    Robert Aldwinckle

  • How to disable Open File dialog in Preview

    After I upgraded from Mavericks to Yosemite, Preview app started popping up the Open File dialog box every time I launch it.  It used to just launch and do nothing.
    Is there a way to prevent Preview in Yosemite to present the Open File dialog box to the user?  I vaguely recall a "defaults write" kind of command that would disable this feature.
    The use case this behavior is breaking is as follows:
    1. Want to take a screenshot and save it to a file.
    2. Press Cmd-Ctrl-Shift-4 to snap a screenshot and save it on the clipboard.
    3. Cmd-Space to bring up Spotlight, type Preview and launch Preview
    4. Cmd-N to instruct Preview to paste the contents of the clipboard to a new file.
    With Yosemite, step-4 above breaks, since I have to hit Esc first to clear the dialog box.

    Try this it will give the full directory structure.
    REPORT  ZTEST3460  line-count 30(2)   .
    PARAMETERS: FILE LIKE RLGRAP-FILENAME.
    AT SELECTION-SCREEN ON VALUE-REQUEST FOR FILE.
                         CALL FUNCTION '/SAPDMC/LSM_F4_SERVER_FILE'
                         EXPORTING
                           DIRECTORY              = ' '
                           FILEMASK               = ' '
                          IMPORTING
                            SERVERFILE             = FILE
                         EXCEPTIONS
                           CANCELED_BY_USER       = 1
                           OTHERS                 = 2
    Cheers

  • How do I open my firefox browser?

    I downloaded the firefox browser on my tablet. It says installed but it doesn't show up in my aps anywhere. Thereis no sign of firefox anywhere. I can't open, use or uninstall it because my tablet says its not there. What do I do?

    Go to the Play store and see if is installed based on that. If it says it is, uninstall from there and install again.

  • How do I open a Firefox browser window?

    Man, is this frustrating!
    I have a Samsung Galaxy 10.1. I downloaded Firefox from Google Play. I synched it. I added the "full screen" add-on. So where's the browser? I can't even get to anything that will let me type in a URL or a Google search term, much less the same bookmarks and tabs that I have on my Windows laptop -- which is what I thought "synch" was about.
    I tried uninstalling and reinstalling. Didn't work. I'm stuck at a "top sites" screen that gives an array of nine tiles. Not a single one of those tiles is a Firefox browser of any kind at all. What the (blank) am I supposed to do?

    Thanks for your ongoing help. (And if this winds up being a duplicate post, my apologies in advance.)
    I typed about:synch-log into the address bar and got an exclamation point inside a triangle next to a boldfaced message that reads "The address isn't valid."
    Below that, in a box:
    The URL is not valid and cannot be loaded
    Then a line then two bullet points
    * Web address are usually written like http://www.example.com
    * Make sure that you're using forward slashes (i.e. /)

  • How can i open pdf in browser

    adobe reader downloaded, updated, etc
    get blank screen with small black box with x  in it.

    http://helpx.adobe.com/acrobat/kb/cant-view-pdf-web.html

Maybe you are looking for

  • Financial reports 9.2 - Network Error

    Hi All, We've one financial report which behaves very strange sometime. Sometime I can open the report, but there are times when I get the below error message: 5200: Error executing query: colhyp77.corp.com/WSO/Plan//Error(1042013) Network error [100

  • Where to see the IR/ID import progress?

    Hi! Sometimes the ID/IR import can last for a long time. Can we monitor the real time progress somewhere? Where is the log/trace for ID/IR import? (ID=Integration Directory;  IR=Integration Repository) Points are guaranteed, thanks!

  • Installing AM on Tomcat 4.1.27

    Hi! I've installed AM on Tomcat 4.1.27. But I'm getting an exception if I use java 1.3.1 . Upgrading java 1.4.x solving the problem, but my other applications can't run on 1.4.x . Is there any way I can install AM on Tomcat using 1.3.1? The exception

  • How to  reverse the excise entries in RG23 C-Posted through 'J1IEX'.

    Dear Guru's My client has posted wrong excise entry in RG23 C register through u201CJ1IEXu201D, Now I want reversal that entry , but the problem is all further activities like goods issue(MIGO) and invoice(MIRO) are done. So I want to reversal all en

  • Same command works on the server but not on the workstation

    Scenario Exchange 2010 sp3 Name                           Value CLRVersion                     2.0.50727.4984 BuildVersion                   6.1.7600.16385 PSVersion                      2.0 WSManStackVersion              2.0 PSCompatibleVersions