<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META content=text/html;charset=utf-8 http-equiv=Content-Type>
<STYLE>BODY {font-family: Tahoma;font-size: 10pt;}</STYLE>
<META name=GENERATOR content="MSHTML 8.00.7600.16588"></HEAD>
<BODY style="PADDING-LEFT: 10px; PADDING-RIGHT: 10px; PADDING-TOP: 15px"
id=MailContainerBody leftMargin=0 topMargin=0 CanvasTabStop="true"
name="Compose message area">
<DIV><FONT size=3 face=Calibri></FONT><FONT size=3 face=Calibri>
<DIV>Understanding Group Policy Settings In Internet Explorer 8</DIV>
<DIV id=ctl00_content_ctl00_page class="content-fragment-page post">
<DIV class=layout>
<DIV id=ctl00_content_ctl00_layout
class="layout-content header-top-content-left-sidebar-right">
<DIV id=ctl00_content_ctl00_content class="layout-region content">
<DIV class="layout-region-inner content">
<DIV id=fragment-3449
class="content-fragment blog-post no-wrapper-with-spacing">
<DIV class="content-fragment-inner fiji-content-fragment-inner">
<DIV class=content-fragment-content>
<DIV class=full-post>
<DIV id=post-metadata>
<DIV class=post-date-block>
<DIV class=month>Jul</DIV>
<DIV class=day>13</DIV>
<DIV class=year>20<BR>10</DIV></DIV>
<DIV class=avatar-shell>
<DIV class=avatar><A
href="wlmailhtml:{A9B22B6C-C985-49B5-9D80-5E37FB1CC592}mid://00000030/!x-usc:http://windowsteamblog.com/members/stephenlrose/default.aspx"><IMG
style="BORDER-RIGHT-WIDTH: 0px; BORDER-TOP-WIDTH: 0px; BORDER-BOTTOM-WIDTH: 0px; BORDER-LEFT-WIDTH: 0px"
alt=""
src="wlmailhtml:{A9B22B6C-C985-49B5-9D80-5E37FB1CC592}mid://00000030/!x-usc:http://windowsteamblog.com/resized-image.ashx/__size/44x44/__key/CommunityServer-Components-Avatars/00-00-03-68-73/avatar.jpg"></A></DIV>
<DIV class=user-name><A class="internal-link view-user-profile"
href="wlmailhtml:{A9B22B6C-C985-49B5-9D80-5E37FB1CC592}mid://00000030/!x-usc:http://windowsteamblog.com/members/stephenlrose/default.aspx"><SPAN></SPAN>by
Stephen L Rose</A></DIV></DIV>
<DIV class=post-comment-shell>
<DIV class=post-comment-item><SPAN
id=ctl00_content_ctl00_fragment_3449_ctl01_ctl06_customCommentCount>0</SPAN>
</DIV></DIV>
<DIV class=post-rating-shell></DIV></DIV>
<DIV class="post-content user-defined-markup">
<P><EM>This weeks post is from Carl Luberti, a Senior Support Escalation
Engineer with the Internet Explorer team.</EM></P>
<P>To start, I wanted to address that Internet Explorer 8 has over 1300 Group
Policy entries that can be configured, which is great for keeping your
environment managed and safe. That can also create some challenges in wrapping
your head around all of the possibilities, so I wanted to begin with a list of
10 entries that are usually the most asked-about control locations for IE8 from
a support perspective. Hopefully, this will give a bit of a "jumping off" point
to managing Internet Explorer with Group Policy. It's one of the most powerful
features of using Internet Explorer 8 in an Active Directory domain, so I want
to make this easier to use and understand.</P>
<P><B>1. Data Execution Prevention (DEP) </B></P>
<P>I'll start at the top, with Data Execution Prevention (DEP) configuration in
Internet Explorer 8. Because browsers are the gateway to the internet, I think
it wise to look at the Data Execution Prevention policy setting for Internet
Explorer 8. By default,<A
href="wlmailhtml:{A9B22B6C-C985-49B5-9D80-5E37FB1CC592}mid://00000030/!x-usc:http://blogs.msdn.com/ie/archive/2008/04/08/ie8-security-part-I_3A00_-dep-nx-memory-protection.aspx">
Internet Explorer 8 opts-in to DEP</A> on platforms that support the <A
href="wlmailhtml:{A9B22B6C-C985-49B5-9D80-5E37FB1CC592}mid://00000030/!x-usc:http://msdn.microsoft.com/en-us/library/bb736299(VS.85).aspx">SetProcessDEPPolicy</A>
API, which means Windows XP SP3 systems and Windows Vista SP1 / Server 2008 and
higher systems. DEP is useful in that it helps to foil attacks by preventing
code from running in memory that is marked non-executable, which helps mitigate
against certain types of attacks that try to make use of placing executable code
in areas of memory not marked as executable, like buffer overrun attacks.</P>
<P>This behavior can be configured in Group Policy, whether you want to make
certain this is happening or if you want to disable DEP opt-in for IE8, and can
be found as a policy item under Computer Configuration\Administrative
Templates\Windows Components\Internet Explorer\Security Features\, called "Turn
off Data Execution Prevention":</P>
<P><BR><A
href="wlmailhtml:{A9B22B6C-C985-49B5-9D80-5E37FB1CC592}mid://00000030/!x-usc:http://windowsteamblog.com/cfs-file.ashx/__key/CommunityServer-Blogs-Components-WeblogFiles/00-00-00-53-72-metablogapi/7384.clip_5F00_image002_5F00_74C319AE.png"><IMG
style="BORDER-RIGHT-WIDTH: 0px; MARGIN: 0px 20px; DISPLAY: inline; BORDER-TOP-WIDTH: 0px; BORDER-BOTTOM-WIDTH: 0px; BORDER-LEFT-WIDTH: 0px"
title=clip_image002 border=0 alt=clip_image002
src="wlmailhtml:{A9B22B6C-C985-49B5-9D80-5E37FB1CC592}mid://00000030/!x-usc:http://windowsteamblog.com/cfs-file.ashx/__key/CommunityServer-Blogs-Components-WeblogFiles/00-00-00-53-72-metablogapi/6254.clip_5F00_image002_5F00_thumb_5F00_737E80CF.png"
width=495 height=451></A></P>
<P>Note that if the Operating System that IE8 is running on is configured to
opt-in to DEP for all processes, then this policy setting has no effect and DEP
is enabled for IE unless it is configured here as an opted-out process:</P>
<P><BR><A
href="wlmailhtml:{A9B22B6C-C985-49B5-9D80-5E37FB1CC592}mid://00000030/!x-usc:http://windowsteamblog.com/cfs-file.ashx/__key/CommunityServer-Blogs-Components-WeblogFiles/00-00-00-53-72-metablogapi/8420.clip_5F00_image004_5F00_1907FE31.png"><IMG
style="BORDER-RIGHT-WIDTH: 0px; MARGIN: 0px 20px; DISPLAY: inline; BORDER-TOP-WIDTH: 0px; BORDER-BOTTOM-WIDTH: 0px; BORDER-LEFT-WIDTH: 0px"
title=clip_image004 border=0 alt=clip_image004
src="wlmailhtml:{A9B22B6C-C985-49B5-9D80-5E37FB1CC592}mid://00000030/!x-usc:http://windowsteamblog.com/cfs-file.ashx/__key/CommunityServer-Blogs-Components-WeblogFiles/00-00-00-53-72-metablogapi/7367.clip_5F00_image004_5F00_thumb_5F00_384AA504.png"
width=352 height=505></A></P>
<P><STRONG>3. SmartScreen Filter</STRONG></P>
<P>Another area of security in Internet Explorer 8 that is configurable from
Group Policy is the <A
href="wlmailhtml:{A9B22B6C-C985-49B5-9D80-5E37FB1CC592}mid://00000030/!x-usc:http://blogs.msdn.com/ie/archive/2008/07/02/ie8-security-part-iii-smartscreen-filter.aspx">SmartScreen
Filter</A>, which is used to help prevent phishing attacks and block access to
sites that are flagged as malware hosting sites. This setting is configured per
zone, which means you can configure SmartScreen scanning to be enabled or
disabled for each individual security zone. For example, you could have it
enabled for the Internet Zone, but disabled for the Trusted Sites zone. By
default, if the SmartScreen filter is not configured from Group Policy, the user
has control over whether or not it is enabled, and also whether or not to visit
a site anyway if SmartScreen determines a site is to be blocked. However, if
this is configured from Group Policy, the user cannot visit a site listed as
blocked, and cannot configure the SmartScreen Filter or bypass it’s settings.
This setting can be found as a policy item in each named security zone folder
under \Administrative Templates\Windows Components\Internet Explorer\Internet
Control Panel\Security Page, called "Use SmartScreen Filter":</P>
<P><BR><A
href="wlmailhtml:{A9B22B6C-C985-49B5-9D80-5E37FB1CC592}mid://00000030/!x-usc:http://windowsteamblog.com/cfs-file.ashx/__key/CommunityServer-Blogs-Components-WeblogFiles/00-00-00-53-72-metablogapi/7230.clip_5F00_image006_5F00_64F35EDD.png"><IMG
style="BORDER-RIGHT-WIDTH: 0px; MARGIN: 0px 20px; DISPLAY: inline; BORDER-TOP-WIDTH: 0px; BORDER-BOTTOM-WIDTH: 0px; BORDER-LEFT-WIDTH: 0px"
title=clip_image006 border=0 alt=clip_image006
src="wlmailhtml:{A9B22B6C-C985-49B5-9D80-5E37FB1CC592}mid://00000030/!x-usc:http://windowsteamblog.com/cfs-file.ashx/__key/CommunityServer-Blogs-Components-WeblogFiles/00-00-00-53-72-metablogapi/4530.clip_5F00_image006_5F00_thumb_5F00_0EF35D06.png"
width=476 height=434></A></P>
<P><STRONG>3. Site to Zone Assignment</STRONG></P>
<P>The Site to Zone assignment list allows you to configure which <A
href="wlmailhtml:{A9B22B6C-C985-49B5-9D80-5E37FB1CC592}mid://00000030/!x-usc:http://support.microsoft.com/kb/174360">security
zones</A> a particular site should render in, allowing you to configure how
restrictive or relaxed security settings should be for a particular site based
on the security zone settings the site renders in. This policy allows you to
ensure that the security settings for the specified zone are applied to the
site. Additionally, you can apply granular control over a site in a zone if
desired, including control over whether a specific protocol is to be checked for
a site, a specific site for that domain is to be specified, or if the entire
domain should exist in a particular zone irrelevant of which protocol or site is
specified in that domain. You can also use this to specify which sites will
reside in the <A
href="wlmailhtml:{A9B22B6C-C985-49B5-9D80-5E37FB1CC592}mid://00000030/!x-usc:http://msdn.microsoft.com/en-us/library/ms537183(VS.85).aspx">Restricted
Sites zone</A>, as part of a defense-in-depth strategy – sites that you do not
trust can be placed in this most restrictive zone, which uses the “HIGH”
security zone setting by default. This setting can be found as a policy item
under \Administrative Templates\Windows Components\Internet Explorer\Internet
Control Panel\Security Page, called "Site to Zone Assignment List":</P>
<P><BR><A
href="wlmailhtml:{A9B22B6C-C985-49B5-9D80-5E37FB1CC592}mid://00000030/!x-usc:http://windowsteamblog.com/cfs-file.ashx/__key/CommunityServer-Blogs-Components-WeblogFiles/00-00-00-53-72-metablogapi/4454.clip_5F00_image008_5F00_26AA946C.png"><IMG
style="BORDER-RIGHT-WIDTH: 0px; MARGIN: 0px 20px; DISPLAY: inline; BORDER-TOP-WIDTH: 0px; BORDER-BOTTOM-WIDTH: 0px; BORDER-LEFT-WIDTH: 0px"
title=clip_image008 border=0 alt=clip_image008
src="wlmailhtml:{A9B22B6C-C985-49B5-9D80-5E37FB1CC592}mid://00000030/!x-usc:http://windowsteamblog.com/cfs-file.ashx/__key/CommunityServer-Blogs-Components-WeblogFiles/00-00-00-53-72-metablogapi/6076.clip_5F00_image008_5F00_thumb_5F00_5A728ABD.png"
width=482 height=440></A></P>
<P>Note that if you enable the Site to Zone Assignment List policy, users no
longer have control over adding or removing sites from this list, and it becomes
completely controlled by Group Policy. If you disable the policy, any list on
the client is deleted and no specific site assignments are permitted.</P>
<P><STRONG>4. Home Page Settings</STRONG></P>
<P>Configuring the user’s home/start page has been a feature of policy since
Internet Explorer 5, and to go along with the new ability to configure multiple
secondary start pages with Internet Explorer 8 there is a policy to configure
both the initial start page, as well as any secondary start pages that are
desired. Each secondary start page is loaded in a separate tab from the initial
home/start page when the browser is run, although it is worth noting that if you
configure the initial start page or any secondary start pages in group policy
the user can no longer set or modify any start pages from the Internet Explorer
options. These setting can be found as policy items under \Administrative
Templates\Windows Components\Internet Explorer, called "Disable changing home
page settings" (configuring the default start page) and “Disable changing
secondary home page settings”: <BR><BR><A
href="wlmailhtml:{A9B22B6C-C985-49B5-9D80-5E37FB1CC592}mid://00000030/!x-usc:http://windowsteamblog.com/cfs-file.ashx/__key/CommunityServer-Blogs-Components-WeblogFiles/00-00-00-53-72-metablogapi/5811.clip_5F00_image010_5F00_242162AE.png"><IMG
style="BORDER-RIGHT-WIDTH: 0px; MARGIN: 0px 20px; DISPLAY: inline; BORDER-TOP-WIDTH: 0px; BORDER-BOTTOM-WIDTH: 0px; BORDER-LEFT-WIDTH: 0px"
title=clip_image010 border=0 alt=clip_image010
src="wlmailhtml:{A9B22B6C-C985-49B5-9D80-5E37FB1CC592}mid://00000030/!x-usc:http://windowsteamblog.com/cfs-file.ashx/__key/CommunityServer-Blogs-Components-WeblogFiles/00-00-00-53-72-metablogapi/0576.clip_5F00_image010_5F00_thumb_5F00_57E958FF.png"
width=485 height=443></A> <BR><A
href="wlmailhtml:{A9B22B6C-C985-49B5-9D80-5E37FB1CC592}mid://00000030/!x-usc:http://windowsteamblog.com/cfs-file.ashx/__key/CommunityServer-Blogs-Components-WeblogFiles/00-00-00-53-72-metablogapi/2555.clip_5F00_image012_5F00_41B33DAD.png"><IMG
style="BORDER-RIGHT-WIDTH: 0px; MARGIN: 0px 20px; DISPLAY: inline; BORDER-TOP-WIDTH: 0px; BORDER-BOTTOM-WIDTH: 0px; BORDER-LEFT-WIDTH: 0px"
title=clip_image012 border=0 alt=clip_image012
src="wlmailhtml:{A9B22B6C-C985-49B5-9D80-5E37FB1CC592}mid://00000030/!x-usc:http://windowsteamblog.com/cfs-file.ashx/__key/CommunityServer-Blogs-Components-WeblogFiles/00-00-00-53-72-metablogapi/2273.clip_5F00_image012_5F00_thumb_5F00_159640BC.png"
width=487 height=444></A></P>
<P><STRONG>5. First Run Customize Settings</STRONG></P>
<P>Internet Explorer 8 by default runs through the “First Run Customize” wizard
when a user starts the new browser for the first time, and quite a few admins
like to prevent this from running as they’ve already configured user settings,
whether that be via Group Policy, the IEAK, logon scripts and registry values,
etc. This can be configured in Group Policy so that the user does not see the
First Run Customize wizard, but is instead shown their default home page (and
any subsequent start pages on separate tabs), and can be found as a policy item
under \Administrative Templates\Windows Components\Internet Explorer called
“Prevent performance of First Run Customize settings”:</P>
<P><BR><A
href="wlmailhtml:{A9B22B6C-C985-49B5-9D80-5E37FB1CC592}mid://00000030/!x-usc:http://windowsteamblog.com/cfs-file.ashx/__key/CommunityServer-Blogs-Components-WeblogFiles/00-00-00-53-72-metablogapi/1055.clip_5F00_image014_5F00_1451A7DD.png"><IMG
style="BORDER-RIGHT-WIDTH: 0px; MARGIN: 0px 20px; DISPLAY: inline; BORDER-TOP-WIDTH: 0px; BORDER-BOTTOM-WIDTH: 0px; BORDER-LEFT-WIDTH: 0px"
title=clip_image014 border=0 alt=clip_image014
src="wlmailhtml:{A9B22B6C-C985-49B5-9D80-5E37FB1CC592}mid://00000030/!x-usc:http://windowsteamblog.com/cfs-file.ashx/__key/CommunityServer-Blogs-Components-WeblogFiles/00-00-00-53-72-metablogapi/7840.clip_5F00_image014_5F00_thumb_5F00_3E51A605.png"
width=477 height=435></A></P>
<P><STRONG>6. Suggested Sites</STRONG></P>
<P>Suggested Sites is a new feature of Internet Explorer 8 that can recommend
sites a user may wish to visit based on the user’s browsing activity, and an
admin may wish to control this behavior in a domain environment due to the fact
that the user’s site visit history is sent to Microsoft on a periodic basis when
this feature is enabled (privacy information on this and other features can be
found <A
href="wlmailhtml:{A9B22B6C-C985-49B5-9D80-5E37FB1CC592}mid://00000030/!x-usc:http://www.microsoft.com/windows/internet-explorer/privacy.aspx">here</A>).
This setting can be found as a policy item under User
Configuration\Administrative Templates\Windows Components\Internet Explorer
called “Turn on Suggested Sites”:</P>
<P><BR><A
href="wlmailhtml:{A9B22B6C-C985-49B5-9D80-5E37FB1CC592}mid://00000030/!x-usc:http://windowsteamblog.com/cfs-file.ashx/__key/CommunityServer-Blogs-Components-WeblogFiles/00-00-00-53-72-metablogapi/4150.clip_5F00_image016_5F00_4ADF5321.png"><IMG
style="BORDER-RIGHT-WIDTH: 0px; MARGIN: 0px 20px; DISPLAY: inline; BORDER-TOP-WIDTH: 0px; BORDER-BOTTOM-WIDTH: 0px; BORDER-LEFT-WIDTH: 0px"
title=clip_image016 border=0 alt=clip_image016
src="wlmailhtml:{A9B22B6C-C985-49B5-9D80-5E37FB1CC592}mid://00000030/!x-usc:http://windowsteamblog.com/cfs-file.ashx/__key/CommunityServer-Blogs-Components-WeblogFiles/00-00-00-53-72-metablogapi/6560.clip_5F00_image016_5F00_thumb_5F00_50B9F6BA.png"
width=480 height=437></A></P>
<P><STRONG>7. New Tab Settings</STRONG></P>
<P>Some administrators like to configure the new tab behavior of what Internet
Explorer opens when a new tab is created, and with Internet Explorer 8 this is
configurable via Group Policy. You can specify that when a user opens a new tab,
that one of three things happens: the tab opens a blank page (about:blank), the
“new tab page” page (which is the default behavior), or the tab opens their
primary start page. This can be found as a policy item under \Administrative
Templates\Windows Components\Internet Explorer called “Configure new tab page
default behavior”:</P>
<P><A
href="wlmailhtml:{A9B22B6C-C985-49B5-9D80-5E37FB1CC592}mid://00000030/!x-usc:http://windowsteamblog.com/cfs-file.ashx/__key/CommunityServer-Blogs-Components-WeblogFiles/00-00-00-53-72-metablogapi/8640.clip_5F00_image018_5F00_21880B23.png"><IMG
style="BORDER-RIGHT-WIDTH: 0px; MARGIN: 0px 20px; DISPLAY: inline; BORDER-TOP-WIDTH: 0px; BORDER-BOTTOM-WIDTH: 0px; BORDER-LEFT-WIDTH: 0px"
title=clip_image018 border=0 alt=clip_image018
src="wlmailhtml:{A9B22B6C-C985-49B5-9D80-5E37FB1CC592}mid://00000030/!x-usc:http://windowsteamblog.com/cfs-file.ashx/__key/CommunityServer-Blogs-Components-WeblogFiles/00-00-00-53-72-metablogapi/5543.clip_5F00_image018_5F00_thumb_5F00_2E15B83F.png"
width=484 height=441></A></P>
<P><STRONG>8. InPrivate Browsing and InPrivate Filtering</STRONG></P>
<P><A
href="wlmailhtml:{A9B22B6C-C985-49B5-9D80-5E37FB1CC592}mid://00000030/!x-usc:http://www.microsoft.com/windows/internet-explorer/features/safer.aspx">InPrivate
browsing</A> is a feature in Internet Explorer 8 that allows a user to browse
leaving virtually no traces of the web browsing actions performed in an
InPrivate session, including preventing the browsing history, temporary internet
files, cookies, usernames and passwords, etc. from being stored and retained
locally by the browser. An administrator might not want users to be able to
utilize InPrivate browsing, or they may wish to have some control over the
defaults of InPrivate browsing, like whether or not toolbars or browser helper
objects (BHOs) are loaded during an InPrivate session, or whether or not
InPrivate Filtering is disabled or available for use. These policy items can be
configured via a number of entries under \Administrative Templates\Windows
Components\Internet Explorer\InPrivate and \Administrative Templates\Windows
Components\Internet Explorer\Delete Browsing History:</P>
<P><BR><A
href="wlmailhtml:{A9B22B6C-C985-49B5-9D80-5E37FB1CC592}mid://00000030/!x-usc:http://windowsteamblog.com/cfs-file.ashx/__key/CommunityServer-Blogs-Components-WeblogFiles/00-00-00-53-72-metablogapi/7043.clip_5F00_image020_5F00_5EC8BFEA.png"><IMG
style="BORDER-RIGHT-WIDTH: 0px; MARGIN: 0px 20px; DISPLAY: inline; BORDER-TOP-WIDTH: 0px; BORDER-BOTTOM-WIDTH: 0px; BORDER-LEFT-WIDTH: 0px"
title=clip_image020 border=0 alt=clip_image020
src="wlmailhtml:{A9B22B6C-C985-49B5-9D80-5E37FB1CC592}mid://00000030/!x-usc:http://windowsteamblog.com/cfs-file.ashx/__key/CommunityServer-Blogs-Components-WeblogFiles/00-00-00-53-72-metablogapi/2625.clip_5F00_image020_5F00_thumb_5F00_5D84270B.png"
width=568 height=407></A> <BR><A
href="wlmailhtml:{A9B22B6C-C985-49B5-9D80-5E37FB1CC592}mid://00000030/!x-usc:http://windowsteamblog.com/cfs-file.ashx/__key/CommunityServer-Blogs-Components-WeblogFiles/00-00-00-53-72-metablogapi/6862.clip_5F00_image022_5F00_14EA383A.png"><IMG
style="BORDER-RIGHT-WIDTH: 0px; MARGIN: 0px 20px; DISPLAY: inline; BORDER-TOP-WIDTH: 0px; BORDER-BOTTOM-WIDTH: 0px; BORDER-LEFT-WIDTH: 0px"
title=clip_image022 border=0 alt=clip_image022
src="wlmailhtml:{A9B22B6C-C985-49B5-9D80-5E37FB1CC592}mid://00000030/!x-usc:http://windowsteamblog.com/cfs-file.ashx/__key/CommunityServer-Blogs-Components-WeblogFiles/00-00-00-53-72-metablogapi/8867.clip_5F00_image022_5F00_thumb_5F00_4F65380E.png"
width=572 height=410></A></P>
<P>More detailed information about InPrivate browsing and filtering can be found
<A
href="wlmailhtml:{A9B22B6C-C985-49B5-9D80-5E37FB1CC592}mid://00000030/!x-usc:http://www.microsoft.com/windows/internet-explorer/readiness/new-features.aspx">here</A>.</P>
<P><STRONG>9. Compatibility View Settings</STRONG></P>
<P>Compatibility View is a feature that allows the browser to display a web page
that may not render correctly when viewed in the default Internet Explorer 8
Standards Mode in a mode that is more compatible with content that is not
necessarily written to common Internet standards. This allows the browser to
provide greater compatibility with these sites, although standards mode Web
pages viewed under Compatibility View will render in Internet Explorer 7
Standards Mode rather than Internet Explorer 8 Standards Mode, and newer content
written to common Internet standards may not display correctly in this mode.</P>
<P>This particular feature can be configured in Group Policy amongst a number of
policy items that control whether or not this feature is enabled and forced for
all sites that the user may visit, whether it is enabled for the Local Intranet
zone (the default behavior) or whether the browser should use the latest
Internet Explorer Standards Mode for the Local Intranet zone, a list of sites to
be explicitly viewed under Compatibility View, etc:</P>
<P><BR><A
href="wlmailhtml:{A9B22B6C-C985-49B5-9D80-5E37FB1CC592}mid://00000030/!x-usc:http://windowsteamblog.com/cfs-file.ashx/__key/CommunityServer-Blogs-Components-WeblogFiles/00-00-00-53-72-metablogapi/2548.clip_5F00_image024_5F00_18A7DD0A.png"><IMG
style="BORDER-RIGHT-WIDTH: 0px; MARGIN: 0px 20px; DISPLAY: inline; BORDER-TOP-WIDTH: 0px; BORDER-BOTTOM-WIDTH: 0px; BORDER-LEFT-WIDTH: 0px"
title=clip_image024 border=0 alt=clip_image024
src="wlmailhtml:{A9B22B6C-C985-49B5-9D80-5E37FB1CC592}mid://00000030/!x-usc:http://windowsteamblog.com/cfs-file.ashx/__key/CommunityServer-Blogs-Components-WeblogFiles/00-00-00-53-72-metablogapi/2313.clip_5F00_image024_5F00_thumb_5F00_656BA3A0.png"
width=562 height=403></A></P>
<P><STRONG>10. Maximum Number of Connections per Server (for AJAX)</STRONG></P>
<P>Internet Explorer uses a configured number of maximum persistent connections
per server per session for both HTTP 1.0 and HTTP 1.1 connections, and in
Internet Explorer 8 the control for this behavior has been modified so that it
is configurable via Group Policy. By default, Internet Explorer 8 uses a maximum
of 6 persistent connections for HTTP 1.1 and HTTP 1.0 server connections when
over a high-speed or broadband connection, and a maximum of 2 persistent
connections for HTTP 1.1 and 4 persistent connections for HTTP 1.0 server
connections when over a low-speed or dial-up connection. It is worth noting that
this is an increase from previous versions of Internet Explorer, which used 2
maximum persistent connections for HTTP 1.1 and 4 persistent connections for
HTTP 1.0 server connections regardless of connection speed. These settings can
be found as a set of policy items under \Administrative Templates\Windows
Components\Internet Explorer\Security Features\AJAX:</P>
<P><BR><A
href="wlmailhtml:{A9B22B6C-C985-49B5-9D80-5E37FB1CC592}mid://00000030/!x-usc:http://windowsteamblog.com/cfs-file.ashx/__key/CommunityServer-Blogs-Components-WeblogFiles/00-00-00-53-72-metablogapi/0602.clip_5F00_image026_5F00_55E891D1.png"><IMG
style="BORDER-RIGHT-WIDTH: 0px; MARGIN: 0px 20px; DISPLAY: inline; BORDER-TOP-WIDTH: 0px; BORDER-BOTTOM-WIDTH: 0px; BORDER-LEFT-WIDTH: 0px"
title=clip_image026 border=0 alt=clip_image026
src="wlmailhtml:{A9B22B6C-C985-49B5-9D80-5E37FB1CC592}mid://00000030/!x-usc:http://windowsteamblog.com/cfs-file.ashx/__key/CommunityServer-Blogs-Components-WeblogFiles/00-00-00-53-72-metablogapi/5432.clip_5F00_image026_5F00_thumb_5F00_02914BAB.png"
width=582 height=418></A></P>
<P>More information about this change and why the decision was made to increase
maximum persistent connections in Internet Explorer 8 can be found <A
href="wlmailhtml:{A9B22B6C-C985-49B5-9D80-5E37FB1CC592}mid://00000030/!x-usc:http://msdn.microsoft.com/en-us/library/cc304129(VS.85).aspx">here</A>.</P>
<P>If you want to learn more about Group Policy and Internet Explorer 8, or get
a Group Policy Settings Reference that describes each and every policy item and
its location in policy and the registry, the following links should be of
assistance:</P>
<UL>
<LI><A
href="wlmailhtml:{A9B22B6C-C985-49B5-9D80-5E37FB1CC592}mid://00000030/!x-usc:http://technet.microsoft.com/en-us/library/cc985351.aspx">Group
Policy and Internet Explorer 8</A>
<LI><A
href="wlmailhtml:{A9B22B6C-C985-49B5-9D80-5E37FB1CC592}mid://00000030/!x-usc:http://technet.microsoft.com/en-us/library/cc985339.aspx">Internet
Explorer 8 Deployment Guide</A>
<LI><A
href="wlmailhtml:{A9B22B6C-C985-49B5-9D80-5E37FB1CC592}mid://00000030/!x-usc:http://www.microsoft.com/downloads/details.aspx?FamilyID=ab4655f2-0a3c-42eb-974d-24b2790bf592">Group
Policy Settings Reference for Windows Internet Explorer 8</A>
<LI><A
href="wlmailhtml:{A9B22B6C-C985-49B5-9D80-5E37FB1CC592}mid://00000030/!x-usc:http://www.microsoft.com/windows/internet-explorer/readiness/it-pro.aspx">Internet
Explorer 8 Readiness Toolkit</A>
</LI></UL></DIV></DIV></DIV></DIV></DIV></DIV></DIV></DIV></DIV></DIV></FONT></DIV>
<DIV><A href="http://www.isihatiteddybearcute.blogspot.com/">Blog saya</A> <A
href="http://twitter.com/tai_cute">Twitter saya</A> <A
href="http://www.facebook.com/tai.cute">Facebook saya</A> <A
href="mailto:blind_boy007@live.com.my">Windows Live Messenger saya</A> <A
href="mailto:puteri_kencana_dewi1@yahoo.com.my">Yahoo messenger saya</A> Skype:
ultraman5984 <A href="http://www.1malaysia.com.my/">Laman 1Malaysia</A> <A
href="http://www.facebook.com/pages/Dato-Sri-Najib-Tun-Abdul-Razak/27767103249">Laman
Facebook Dato Sri Najib Tun Abdul Razak</A></DIV></BODY></HTML>