- May 26, 2003
- 44
- 0
- 0
Major Issues in IE (XP)
============
unable to view secure sites and login problems on certian sites
Delete Temporary Internet Files
Start Internet Explorer.
On the Tools menu, click Internet Options, and then click the General tab.
Under Temporary Internet Files, click Delete Cookies.
Click OK when you are prompted to confirm the deletion.
Click Delete Files.
Click OK when you are prompted to confirm the deletion.
Under History, click Clear History.
Click Yes when you are prompted to delete your history of visited Web sites.
Click OK.
--------------------------------------------------------------------------------
Configure Security, Content and Advanced Settings in Internet Explorer
Configure Security Settings for the Trusted Sites Zone in Internet Explorer
In Internet Explorer, on the Tools menu, click Internet Options, and then click the Security tab.
Click Trusted Sites, and then click Default Level.
Add the secure Web site to the Trusted sites zone: To do so, click Sites, type the URL of the site in the Add this Web site to the zone box, click Add, click OK, and then click Apply.
Clear the Secure Sockets Layer (SSL) Slate and AutoComplete History
Click the Content tab.
Under Certificates, click Clear SSL State.
Click OK when you receive the message that the SSL cache was successfully cleared.
Under Personal Information, click AutoComplete.
Under Clear AutoComplete History, click Clear Forms.
Click OK when you are prompted to confirm the operation.
Click Clear Passwords.
Click OK when you are prompted to clear all previously saved passwords, and then click OK two more times.
Verify that Internet Explorer is Configured to Use SSL 2.0 and SSL 3.0
Click the Advanced tab.
In the Settings box, under Security, click to select the Use SSL 2.0 and Use SSL 3.0 check boxes (if they are not already selected), and then click OK.
--------------------------------------------------------------------------------
Verify that the Date and Time Settings on Your Computer Are Correct
Click Start, and then click Control Panel.
Click Date, Time, Language, and Regional Options while in Category View, and then click Date and Time.
Click the Date & Time tab.
Make sure that the date and time settings are configured to use the current date and time, and then click OK.
--------------------------------------------------------------------------------
Verify that Your Computer Is Using 128-Bit Encryption
In Internet Explorer, on the Help menu, click About Internet Explorer.
The level of encryption on your computer appears next to the words Cipher Strength.
Verify that the Cipher Strength value appears as 128-bit.
Click OK.
--------------------------------------------------------------------------------
Use System Restore to Return Your Computer to a Previous State
The System Restore feature in Windows XP takes a "snapshot" of critical system files and some program files and stores this information as restore points. You can use these restore points to return Windows XP to a previous state. For additional information about how to do so, click the following article number to view the article in the Microsoft Knowledge Base:
--------------------------------------------------------------------------------
Check Third-Party Firewall or Antivirus Programs
--------------------------------------------------------------------------------
Use the System File Checker (Sfc.exe) Tool to Verify Protected System Files
Use System File Checker with the /scannow parameter (sfc /scannow) to immediately scan and verify the versions of all protected system files. If System File Checker discovers that a protected file was overwritten, it retrieves the correct version of the file from the cache folder (Systemroot\System32\Dllcache) or from the Windows installation source files, and then replaces the incorrect file. System File Checker also checks and repopulates the cache folder. You must be logged on as an administrator or as a member of the Administrators group to run System File Checker. To run System File Checker with the /scannow parameter:
Click Start, and then click Run.
In the Open box, type cmd, and then click OK.
At the command prompt, type sfc /scannow, and then press <ENTER>.
--------------------------------------------------------------------------------
Verify that the Microsoft Cryptographic Services Service Is Started
To verify that the Cryptographic Services service is started (and to start it if it is not):
Click Start, and then click Run.
In the Open box, type cmd, and then click OK.
At the command prompt, type net start cryptsvc, and then press <ENTER>.
Type exit to quit Command Prompt.
--------------------------------------------------------------------------------
Register .Dll Files
Re-register the following .dll files:
Softpub.dll
Wintrust.dll
Initpki.dll
Dssenh.dll
Rsaenh.dll
Gpkcsp.dll
Sccbase.dll
Slbcsp.dll
Cryptdlg.dll
To do so:
Click Start, and then click Run.
In the Open box, type cmd, and then click OK.
At the Command Prompt, type the following lines and press <ENTER> after each line:
regsvr32 softpub.dll
regsvr32 wintrust.dll
regsvr32 initpki.dll
regsvr32 dssenh.dll
regsvr32 rsaenh.dll
regsvr32 gpkcsp.dll
regsvr32 sccbase.dll
regsvr32 slbcsp.dll
regsvr32 cryptdlg.dll
Click OK when you receive the message that DllRegisterServer in FileName succeeded.
Type exit to quit Command Prompt.
--------------------------------------------------------------------------------
Create a New User Profile
In certain situations, you may not be able to browse secure sites if your Windows user profile is damaged. To troubleshoot, log on to the computer as another user and try to connect to a secure Web site. If you can connect to secure Web sites when you are logged in as a different user, this may indicate that your user profile is corrupted. In this situation, back up the information and settings that you want from your profile (for example, the My Documents and Favorites folders), and then delete the damaged profile. To delete a user profile:
Log on to the computer as Administrator or as a member of the Administrators group.
Click Start, and then click Control Panel.
Click Performance and Maintenance, and then click System.
Click the Advanced tab, and then under User Profiles, click Settings.
In the Profiles stored on this computer list, click the user profile that you want to delete, and then click Delete.
Click Yes when you are prompted to confirm the deletion.
Click OK, click OK, and then quit Control Panel.
Log off the computer as Administrator, and then log on as the user.
Windows creates a new profile for the user.
===============================================
Steps for win me in secure sites issue
Microsoft Windows Millennium Edition (Me)
Start the computer in Safe Mode.
NOTE: For starting the computer in Safe Mode refer to FA1027295 "How do I start my computer in safe mode"
Click the Start button, click Run, and then type msconfig.
Extract the following files from the Windows Me cab files located at c:\windows\Options\cabs into the c:\windows\system folder.
Rsabase.dll
Rsaenh.dll
Schannel.dll
Advapi32.dll
NOTE: For more information about extracting files in Windows ME, refer to Dell Knowledge Base Article TT1050069 "How do I extract files off of my Microsoft® Windows® Millennium Edition (Me) CD to replace files that have been deleted or changed?"
Re-register each of these three .dll files.
To do so, click Start, click Run, and type the following commands, clicking OK each time you type the command in the run dialog box.
Regsvr32 C:\windows\system\schannel.dll
Regsvr32 C:\windows\system\rsabase.dll
Regsvr32 C:\windows \system\rsaenh.dll
NOTE: If the extracted file Advapi32.dll is not at least version 4.90.0.3000 you will get a Failed message when you re-register the three dll files. (If the file Advapi32.dll extracted from the location C:\windows\options\cabs is not of the above mentioned version, restart the computer in normal mode use "Msconfig" to extract the file Advapi32.dll from the "WINDOWS ME CD located in X:\win9X folder, Where X: is the drive letter of your CD-Rom drive, restart the computer in safe mode again, re-register the three .dll files.
Restart the computer in Normal mode.
Internet Explorer should now display 128-bit cipher strength and you should be able to connect to secure sites.
Microsoft 95, Microsoft 98, Microsoft 98 Second Edition
Click the Start button, click Shutdown, click Restart in MS-DOS Mode, and then click Yes.
At the Command Prompt type the following commands and press the <Enter> key after each command:
CD\Windows\System
ren schannel.dll schannel.old
ren rsaenh.dll rsaenh.old
ren schannel.dll schannel.oldl
exit
The computer will restart.
Download and install, or reinstall Microsoft Internet Explorer 5.5 SP1 from the following Web site:
http://support.microsoft.com/default.aspx?scid=http://www.microsoft.com/windows/ie
NOTE: You cannot download the 128-bit encryption from the site if you have 5.5 installed. Instead you need to run the file ie501dom.exe located in the C:\Windows Update Setup Files folder. You may need to first reinstall IE 5.5.
Restart your computer.
Internet Explorer should now display 56-bit cipher strength.
Download and install the Microsoft Internet Explorer High Encryption Pack for Internet Explorer 5.01 for Windows 95, Windows 98, and Windows NT® 4.0 from the following Web site:
http://support.microsoft.com/defaul...soft.com/windows/ie/download/128bit/intro.htm
NOTE: If you access the above Web site by using any version of Internet Explorer later than version 5.01, you may receive a message stating that downloading this Encryption Pack is not necessary. Please disregard this message.
Restart your computer.
Internet Explorer should now display 128-bit cipher strength.
If you restore to 128-bit cipher strength, and you are still unable to view secure sites, perform the following steps:
Right-click the Internet Explorer icon and click Properties.
The Internet Properties window appears.
Click the Advanced tab.
Click to check SSL2.0 and SSL3.0 under the Security category.
===============================================
The success rate is very low... even after followin the the document
Some other Steps ...
1. Changing MTU settings
Expertise required... to solve this hell...
Will really appreciate every bit of help from u..
============
unable to view secure sites and login problems on certian sites
Delete Temporary Internet Files
Start Internet Explorer.
On the Tools menu, click Internet Options, and then click the General tab.
Under Temporary Internet Files, click Delete Cookies.
Click OK when you are prompted to confirm the deletion.
Click Delete Files.
Click OK when you are prompted to confirm the deletion.
Under History, click Clear History.
Click Yes when you are prompted to delete your history of visited Web sites.
Click OK.
--------------------------------------------------------------------------------
Configure Security, Content and Advanced Settings in Internet Explorer
Configure Security Settings for the Trusted Sites Zone in Internet Explorer
In Internet Explorer, on the Tools menu, click Internet Options, and then click the Security tab.
Click Trusted Sites, and then click Default Level.
Add the secure Web site to the Trusted sites zone: To do so, click Sites, type the URL of the site in the Add this Web site to the zone box, click Add, click OK, and then click Apply.
Clear the Secure Sockets Layer (SSL) Slate and AutoComplete History
Click the Content tab.
Under Certificates, click Clear SSL State.
Click OK when you receive the message that the SSL cache was successfully cleared.
Under Personal Information, click AutoComplete.
Under Clear AutoComplete History, click Clear Forms.
Click OK when you are prompted to confirm the operation.
Click Clear Passwords.
Click OK when you are prompted to clear all previously saved passwords, and then click OK two more times.
Verify that Internet Explorer is Configured to Use SSL 2.0 and SSL 3.0
Click the Advanced tab.
In the Settings box, under Security, click to select the Use SSL 2.0 and Use SSL 3.0 check boxes (if they are not already selected), and then click OK.
--------------------------------------------------------------------------------
Verify that the Date and Time Settings on Your Computer Are Correct
Click Start, and then click Control Panel.
Click Date, Time, Language, and Regional Options while in Category View, and then click Date and Time.
Click the Date & Time tab.
Make sure that the date and time settings are configured to use the current date and time, and then click OK.
--------------------------------------------------------------------------------
Verify that Your Computer Is Using 128-Bit Encryption
In Internet Explorer, on the Help menu, click About Internet Explorer.
The level of encryption on your computer appears next to the words Cipher Strength.
Verify that the Cipher Strength value appears as 128-bit.
Click OK.
--------------------------------------------------------------------------------
Use System Restore to Return Your Computer to a Previous State
The System Restore feature in Windows XP takes a "snapshot" of critical system files and some program files and stores this information as restore points. You can use these restore points to return Windows XP to a previous state. For additional information about how to do so, click the following article number to view the article in the Microsoft Knowledge Base:
--------------------------------------------------------------------------------
Check Third-Party Firewall or Antivirus Programs
--------------------------------------------------------------------------------
Use the System File Checker (Sfc.exe) Tool to Verify Protected System Files
Use System File Checker with the /scannow parameter (sfc /scannow) to immediately scan and verify the versions of all protected system files. If System File Checker discovers that a protected file was overwritten, it retrieves the correct version of the file from the cache folder (Systemroot\System32\Dllcache) or from the Windows installation source files, and then replaces the incorrect file. System File Checker also checks and repopulates the cache folder. You must be logged on as an administrator or as a member of the Administrators group to run System File Checker. To run System File Checker with the /scannow parameter:
Click Start, and then click Run.
In the Open box, type cmd, and then click OK.
At the command prompt, type sfc /scannow, and then press <ENTER>.
--------------------------------------------------------------------------------
Verify that the Microsoft Cryptographic Services Service Is Started
To verify that the Cryptographic Services service is started (and to start it if it is not):
Click Start, and then click Run.
In the Open box, type cmd, and then click OK.
At the command prompt, type net start cryptsvc, and then press <ENTER>.
Type exit to quit Command Prompt.
--------------------------------------------------------------------------------
Register .Dll Files
Re-register the following .dll files:
Softpub.dll
Wintrust.dll
Initpki.dll
Dssenh.dll
Rsaenh.dll
Gpkcsp.dll
Sccbase.dll
Slbcsp.dll
Cryptdlg.dll
To do so:
Click Start, and then click Run.
In the Open box, type cmd, and then click OK.
At the Command Prompt, type the following lines and press <ENTER> after each line:
regsvr32 softpub.dll
regsvr32 wintrust.dll
regsvr32 initpki.dll
regsvr32 dssenh.dll
regsvr32 rsaenh.dll
regsvr32 gpkcsp.dll
regsvr32 sccbase.dll
regsvr32 slbcsp.dll
regsvr32 cryptdlg.dll
Click OK when you receive the message that DllRegisterServer in FileName succeeded.
Type exit to quit Command Prompt.
--------------------------------------------------------------------------------
Create a New User Profile
In certain situations, you may not be able to browse secure sites if your Windows user profile is damaged. To troubleshoot, log on to the computer as another user and try to connect to a secure Web site. If you can connect to secure Web sites when you are logged in as a different user, this may indicate that your user profile is corrupted. In this situation, back up the information and settings that you want from your profile (for example, the My Documents and Favorites folders), and then delete the damaged profile. To delete a user profile:
Log on to the computer as Administrator or as a member of the Administrators group.
Click Start, and then click Control Panel.
Click Performance and Maintenance, and then click System.
Click the Advanced tab, and then under User Profiles, click Settings.
In the Profiles stored on this computer list, click the user profile that you want to delete, and then click Delete.
Click Yes when you are prompted to confirm the deletion.
Click OK, click OK, and then quit Control Panel.
Log off the computer as Administrator, and then log on as the user.
Windows creates a new profile for the user.
===============================================
Steps for win me in secure sites issue
Microsoft Windows Millennium Edition (Me)
Start the computer in Safe Mode.
NOTE: For starting the computer in Safe Mode refer to FA1027295 "How do I start my computer in safe mode"
Click the Start button, click Run, and then type msconfig.
Extract the following files from the Windows Me cab files located at c:\windows\Options\cabs into the c:\windows\system folder.
Rsabase.dll
Rsaenh.dll
Schannel.dll
Advapi32.dll
NOTE: For more information about extracting files in Windows ME, refer to Dell Knowledge Base Article TT1050069 "How do I extract files off of my Microsoft® Windows® Millennium Edition (Me) CD to replace files that have been deleted or changed?"
Re-register each of these three .dll files.
To do so, click Start, click Run, and type the following commands, clicking OK each time you type the command in the run dialog box.
Regsvr32 C:\windows\system\schannel.dll
Regsvr32 C:\windows\system\rsabase.dll
Regsvr32 C:\windows \system\rsaenh.dll
NOTE: If the extracted file Advapi32.dll is not at least version 4.90.0.3000 you will get a Failed message when you re-register the three dll files. (If the file Advapi32.dll extracted from the location C:\windows\options\cabs is not of the above mentioned version, restart the computer in normal mode use "Msconfig" to extract the file Advapi32.dll from the "WINDOWS ME CD located in X:\win9X folder, Where X: is the drive letter of your CD-Rom drive, restart the computer in safe mode again, re-register the three .dll files.
Restart the computer in Normal mode.
Internet Explorer should now display 128-bit cipher strength and you should be able to connect to secure sites.
Microsoft 95, Microsoft 98, Microsoft 98 Second Edition
Click the Start button, click Shutdown, click Restart in MS-DOS Mode, and then click Yes.
At the Command Prompt type the following commands and press the <Enter> key after each command:
CD\Windows\System
ren schannel.dll schannel.old
ren rsaenh.dll rsaenh.old
ren schannel.dll schannel.oldl
exit
The computer will restart.
Download and install, or reinstall Microsoft Internet Explorer 5.5 SP1 from the following Web site:
http://support.microsoft.com/default.aspx?scid=http://www.microsoft.com/windows/ie
NOTE: You cannot download the 128-bit encryption from the site if you have 5.5 installed. Instead you need to run the file ie501dom.exe located in the C:\Windows Update Setup Files folder. You may need to first reinstall IE 5.5.
Restart your computer.
Internet Explorer should now display 56-bit cipher strength.
Download and install the Microsoft Internet Explorer High Encryption Pack for Internet Explorer 5.01 for Windows 95, Windows 98, and Windows NT® 4.0 from the following Web site:
http://support.microsoft.com/defaul...soft.com/windows/ie/download/128bit/intro.htm
NOTE: If you access the above Web site by using any version of Internet Explorer later than version 5.01, you may receive a message stating that downloading this Encryption Pack is not necessary. Please disregard this message.
Restart your computer.
Internet Explorer should now display 128-bit cipher strength.
If you restore to 128-bit cipher strength, and you are still unable to view secure sites, perform the following steps:
Right-click the Internet Explorer icon and click Properties.
The Internet Properties window appears.
Click the Advanced tab.
Click to check SSL2.0 and SSL3.0 under the Security category.
===============================================
The success rate is very low... even after followin the the document
Some other Steps ...
1. Changing MTU settings
Expertise required... to solve this hell...
Will really appreciate every bit of help from u..
