• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 2059
  • Last Modified:

How do I REMOVE the IE restrictions put in place by IEAK

We have a version of IE that is distributed to customer agents on their workstations. It includes many restrictions such as the inability to download files and the inability to quit (you have to use the Task Manager). I don't know much about IEAK but I know that's what was used. It was a long time ago.

I have inherited a Windows NT PDC on which some fool installed the restricted version of IE. I want to get rid of it but I don't know how. I tried to upgrade to IE 6 (from IE 5) but restrictions stayed in place.

I have looked everywhere for answers, asked the question on various forums, to no avail. How do I restore normal functionality? PLEASE don;t let this be another place where my question sits unanswered!


1 Solution
All those changes will be in the registry in various places, depending on the changes made.  There's no one "undo" that I can point you to.  For each restriction, you'll have to find the corresponding registry key where that is set.

Most of them will probably be found in the branch HKLM\Software\Microsoft\Internet Explorer
mikebernhardtAuthor Commented:
Yesterday I went through an unaltered machine with Regedit and compared every key I could find in the HKLM\Software\Microsoft\Internet Explorer tree- and every other IE tree also. I found a few discrepancies, but altering them didn't alter the 3 remaining restrictions: I can't exit the application without using Task Manager; I can't use Windows Update; I can't download files. In all three cases I get an alert that I can't do it due to restrictions in place on the workstation. In the case of Windows Update, it complains after a certain point in the interaction, while it's trying to customize the patch list (it's badly out of date on the security patches).

I could easily have missed something in my search yesterday. If someone could tell me what specific keys cause these specific restrictions, and what to do with them, I will be in good shape.

If I just delete ALL IE keys and reinstall IE will that fix it or will I be committing suicide? Are we certain that these restrictions are even created by keys in the IE trees or do they reside elsewhere?
Hi Mikebernharbt...
i think if you use Policy Editor (PolEdit.exe) to opent the local registery it will be much easier for your find the settings and change them. go though the different options for Local Machine and Local user as well and see where you can make changes.
Cloud Class® Course: Python 3 Fundamentals

This course will teach participants about installing and configuring Python, syntax, importing, statements, types, strings, booleans, files, lists, tuples, comprehensions, functions, and classes.

mikebernhardtAuthor Commented:
Thanks. But nothing in the policy editor helped with this issue. I opened the registry and also the default user policy. The restrictions I've described are specific to IE, no other apps.

I can't get into IE's Tools/ Internet Options because the restriction won't let me. Maybe the file download and windows update restrictions are in there, but I can't get in to find out.
if you have the permissions, download IEAK and see if you can undo any settings
mikebernhardtAuthor Commented:
IEAK is installed. But I don't know how to use it to undo what's been done. The original build files are nowhere to be found.
ok search for *.ins files, if can find it then open the IEAK Profile manage and goto file open, it will open the profile, you can amend it then.
The places to look for the current restrictions might be under HKCU and HKLM; look in Software\Policies\Microsoft\Internet Explorer and Software\Microsoft\Windows\CurrentVersion\Policies\Explorer.
To make that work using poledit, look for the following templates: axaa.adm, conf.adm, inetcorp.adm, inetres.adm, inetset.adm, oe.adm, sp1shell.adm, subs.adm, wmp.adm; they should be in %systemroot%\inf; if not, they might be in the IEAK installation folder under policies. Then start poledit, first go to Options--Policy Templates, add those files. Then choose "Open registry" from the menu and check for restrictions.
Note: Even if you reset the restrictions using regedit or poledit, they will still apply to new users. To get rid of them, you'll have to create a new installation with no restrictions using the IEAK and install it over the current one.
mikebernhardtAuthor Commented:
In the referenced registry locations, I just deleted the entire "Retrictions" folders. This enabled me to download files, quite normally, etc. oBdA is correct that logging in as a different user leaves me with all the same restrictions as before.

But now I can work with IEAK to create a new unrestricted version of Explorer that I can install on top of the old one, and use the existing IE in the meantime.
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Cloud Class® Course: Amazon Web Services - Basic

Are you thinking about creating an Amazon Web Services account for your business? Not sure where to start? In this course you’ll get an overview of the history of AWS and take a tour of their user interface.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now