- Apr 12, 2006
- 3,399
- 3
- 71
I am new to MS Vista and have installed Vista Home Premium with SP1. Through Internet Explorer 7, I am unable to download any files, even from safe sites such as microsoft.com, mozilla.com, and java.com. However, IE7 allows the downloads to occur when I turn off Protected Mode by unchecking the box for "Enable Protected Mode" found in Internet Options | Security tab.
I have tried changing the settings on the Security tab in the "Custom Level" button as well as the Advanced tab but with no effect. The default settings have been reset in both the Security tab and the Advanced tab.
The only thing I have done differently is to move the User Profile and "User" folders over to the D: drive, by using the instructions on this page. http://joshmouch.wordpress.com...der-location-in-vista/ The dos command "echo %userprofile%" provides the correct directory for my use, D:\Vista\Users\Admin. This is mentioned since the User Access Control apparently accesses the %userprofile% environment variable and this is the only non-standard change that I have made to the system.
Understanding and Working in Protected Mode Internet Explorer
Has anyone else had this problem? What am I doing wrong? This is a fresh installation. Does anyone know how to configure the settings to leave Protected Mode enabled and still allow downloads to occur?
Thank you for your help.
EDIT:
This is an administrator account, the first account created on the system during installation.
Virtualization is enabled in the bios.
Flash is installed.
All updates have been installed.
Just downloaded and installed the Java Runtime Environment (JRE) through Firefox. Now, with Protected Mode enabled, the java.com website closes the IE7 browser when I attempt to download the JRE. With Protected Mode disabled, visiting the java.com website opens a new browser window with the following statement. Even microsoft.com gets this statement.
I am going to try reinstalling Vista SP1 on a spare hard drive and not make the changes to the User Profile and User structure. My instincts are telling me that this is the problem.
EDIT2:
The reinstall of Vista SP1 on the spare hard drive, without changing the User Profile to another drive, allowed IE7 to download files with Protected Mode enabled. This means that something went wrong when changing the User Profile to a different drive.
I am going to try digging around in the registry of my current installation to see if I can find a setting that did not transfer to my D: drive properly. If that does not work, then I will reinstall Vista.
Does anyone know how to safely change the User Profile to another drive while maintaining the integrity of UAC and Protected Mode in IE7?
EDIT3:
It seems that someone else ran into a problem with Protected Mode and left this comment. I will see if this helps my situation.
EDIT4
Yes, the above comment fixed the problem that I have been experiencing. I logged into Safe Mode and ran the following command for my user named "Admin". Then ran a similar command for my "Home" user.
icacls D:\Vista\Users\Admin\AppData\Local\Temp\Low /setintegritylevel (OI)(CI)low
SUMMARY
For Vista, there is a procedure on the following webpage that will allow you to successfully change your User Profile to another hard drive. This allows you to move the User folder and your personal files onto another hard drive or another partition. This includes the Desktop and My Documents folders.
http://joshmouch.wordpress.com...der-location-in-vista/
After this procedure is complete, it may be necessary to reset the correct integrity level on a temporary directory to allow Protected Mode to work properly in Internet Explorer 7. This is the necessary command, it may be necessary to login to Safe Mode by rebooting and repeatedly pressing the F8 key. This command needs to be executed for each user that currently exists. Any users created after this change to the UserProfile will not need to have the integrity level reset.
icacls D:\Vista\Users\<username>\AppData\Local\Temp\Low /setintegritylevel (OI)(CI)low
Here is a description of the command, icacls
I found the Reg Organizer to work best for the Registry Find/Replace portion of the procedure. Reviewed by PC World and TopTenReviews. A free 30 day trial is available at Download.com, Tucows.com, and MajorGeeks.
The Registry Workshop also worked well.
I have tried changing the settings on the Security tab in the "Custom Level" button as well as the Advanced tab but with no effect. The default settings have been reset in both the Security tab and the Advanced tab.
The only thing I have done differently is to move the User Profile and "User" folders over to the D: drive, by using the instructions on this page. http://joshmouch.wordpress.com...der-location-in-vista/ The dos command "echo %userprofile%" provides the correct directory for my use, D:\Vista\Users\Admin. This is mentioned since the User Access Control apparently accesses the %userprofile% environment variable and this is the only non-standard change that I have made to the system.
Understanding and Working in Protected Mode Internet Explorer
Has anyone else had this problem? What am I doing wrong? This is a fresh installation. Does anyone know how to configure the settings to leave Protected Mode enabled and still allow downloads to occur?
Thank you for your help.
EDIT:
This is an administrator account, the first account created on the system during installation.
Virtualization is enabled in the bios.
Flash is installed.
All updates have been installed.
Just downloaded and installed the Java Runtime Environment (JRE) through Firefox. Now, with Protected Mode enabled, the java.com website closes the IE7 browser when I attempt to download the JRE. With Protected Mode disabled, visiting the java.com website opens a new browser window with the following statement. Even microsoft.com gets this statement.
Internet Explorer needs to open a new window to display this webpage.
For your computer's security, websites that are in different security zones must open in different windows.
I am going to try reinstalling Vista SP1 on a spare hard drive and not make the changes to the User Profile and User structure. My instincts are telling me that this is the problem.
EDIT2:
The reinstall of Vista SP1 on the spare hard drive, without changing the User Profile to another drive, allowed IE7 to download files with Protected Mode enabled. This means that something went wrong when changing the User Profile to a different drive.
I am going to try digging around in the registry of my current installation to see if I can find a setting that did not transfer to my D: drive properly. If that does not work, then I will reinstall Vista.
Does anyone know how to safely change the User Profile to another drive while maintaining the integrity of UAC and Protected Mode in IE7?
EDIT3:
It seems that someone else ran into a problem with Protected Mode and left this comment. I will see if this helps my situation.
David on November 27, 2007
I am running IE7 in protected mode and there was one other thing I had to do. I needed to set the correct integrity level on the :\\\AppData\Local\Temp\Low using the following command:
icacls :\\\AppData\Local\Temp\Low /setintegritylevel (OI)(CI)low
EDIT4
Yes, the above comment fixed the problem that I have been experiencing. I logged into Safe Mode and ran the following command for my user named "Admin". Then ran a similar command for my "Home" user.
icacls D:\Vista\Users\Admin\AppData\Local\Temp\Low /setintegritylevel (OI)(CI)low
SUMMARY
For Vista, there is a procedure on the following webpage that will allow you to successfully change your User Profile to another hard drive. This allows you to move the User folder and your personal files onto another hard drive or another partition. This includes the Desktop and My Documents folders.
http://joshmouch.wordpress.com...der-location-in-vista/
After this procedure is complete, it may be necessary to reset the correct integrity level on a temporary directory to allow Protected Mode to work properly in Internet Explorer 7. This is the necessary command, it may be necessary to login to Safe Mode by rebooting and repeatedly pressing the F8 key. This command needs to be executed for each user that currently exists. Any users created after this change to the UserProfile will not need to have the integrity level reset.
icacls D:\Vista\Users\<username>\AppData\Local\Temp\Low /setintegritylevel (OI)(CI)low
Here is a description of the command, icacls
I found the Reg Organizer to work best for the Registry Find/Replace portion of the procedure. Reviewed by PC World and TopTenReviews. A free 30 day trial is available at Download.com, Tucows.com, and MajorGeeks.
The Registry Workshop also worked well.