IE in XP SP2 (Part 2): Information Bar - Stopping the modal dialog madness

re: IE in XP SP2 (Part 2): Information Bar - Stopping the modal dialog madness

Jerry Pisk — Sun, 21 Mar 2004 21:51:00 GMT

ActiveX control will be considered an upgrade only if it's signed with the same certificate? Is Microsoft saying that once you buy a certificate you only have a year (or two) to finalize your code because once you renew your certificate (effectivelly creating a new one) it will not be considered an upgrade to an existing control?

re: IE in XP SP2 (Part 2): Information Bar - Stopping the modal dialog madness

Tony Schreiner — Sun, 21 Mar 2004 22:11:00 GMT

I should be more precise: we check that the certificate is from the same issuer, and issued to the same subject. This should allow for renewals.

re: IE in XP SP2 (Part 2): Information Bar - Stopping the modal dialog madness

Jerry Pisk — Sun, 21 Mar 2004 22:20:00 GMT

Thanks for the clarification, that makes a lot more sense.

re: IE in XP SP2 (Part 2): Information Bar - Stopping the modal dialog madness

Oleg — Mon, 22 Mar 2004 10:53:00 GMT

How about tabbed browsing ? Will IE now have tabbed browsing ?

Oleg Dulin :: Microsoft to Catch Up with Mozilla

TrackBack — Mon, 22 Mar 2004 13:58:00 GMT

Oleg Dulin :: Microsoft to Catch Up with Mozilla

IE/XP sp2 changes

JD on MX — Tue, 23 Mar 2004 00:07:00 GMT

IE/XP sp2 changes: Windows XP is in final testing changes for a significant new updater, and "jeffdav" or Microsoft details how Internet Explorer will change. New window propagation sounds similar to previous implementations: a new window can be opened only...

re: IE in XP SP2 (Part 2): Information Bar - Stopping the modal dialog madness

JC — Mon, 22 Mar 2004 21:48:00 GMT

Will Microsoft update IE's CSS rendering? IE's poor CSS rendering is a significant hindrance to all web designers / developers who try to make W3C standards-compliant markup.

re: IE in XP SP2 (Part 2): Information Bar - Stopping the modal dialog madness

Tony Schreiner — Tue, 23 Mar 2004 04:44:00 GMT

Oleg and JC - I can't comment on future features, sorry.

However, for tabbed browsing you can use Avant Browser or MyIE2, two good browsers that host the IE web browser control.

Also, unless somebody beats me to it, later this week I'll describe how to enable the new IE security mitigations and UI such as the Information Bar for 3rd party browsers such as those.

re: IE in XP SP2 (Part 2): Information Bar - Stopping the modal dialog madness

José Jeria — Tue, 23 Mar 2004 10:08:00 GMT

Is there any chance that any of these bugs will be fixed for the final Service Pack2?
http://www.positioniseverything.net/explorer.html

A simple no would be better than just ignoring all the post asking for better standards support, transparent png etc

Microsoft has mutilated IE and me tired.

administratorX — Tue, 23 Mar 2004 13:12:00 GMT

I just removed the blue e from my quick launch menu. And i replaced it with a little FireFox icon, mainly for the Tabbed browsing but also for the cool plugin abilities and increased browsing security. Thanks you microsoftees.

Windows XP - major security enhancements and more!

Core/Dump: opinion, babes and bondage... — Thu, 25 Mar 2004 00:14:00 GMT

Microsoft has made the Windows XP SP2 "preview" available for downloading, this is a look at what will be happening...

re: IE in XP SP2 (Part 2): Information Bar - Stopping the modal dialog madness

Tony Schreiner — Thu, 25 Mar 2004 01:14:00 GMT

José, see my comment just prior to yours. For XP SP2, security work was the priority. Beyond that I can't comment on CSS, PNG, or other standards support.

IE in XP SP2 (Part 3): Web Site Compatibility

Tony Schreiner's WebLog — Tue, 30 Mar 2004 10:24:00 GMT

re: IE in XP SP2 (Part 2): Information Bar - Stopping the modal dialog madness

David M. Kean — Tue, 30 Mar 2004 13:51:00 GMT

Can you please explain why Local Machine is locked down more than a site in the Internet zone?

re: IE in XP SP2 (Part 2): Information Bar - Stopping the modal dialog madness

Tony Schreiner — Tue, 30 Mar 2004 23:14:00 GMT

David, I'm considering doing a more in-depth post on this later but I need to do some asking around first since I don't know much about that feature.

I suspect it's because you can do more within the same zone than across zones, even with the same permissions. This means once an attacker can stick their foot in the door and get into the LMZ, even with internet-level permissions they could roam around in that zone and potentially find another exploit that lets them do something more harmful.

It's all about defense in depth.

re: IE in XP SP2 (Part 2): Information Bar - Stopping the modal dialog madness

JC — Mon, 19 Apr 2004 16:11:00 GMT

If there is an activex download initiated by the user, can a developer avoid the information bar?

re: IE in XP SP2 (Part 2): Information Bar - Stopping the modal dialog madness

Tony Schreiner — Mon, 19 Apr 2004 21:43:00 GMT

JC, currently there is no such thing as an ActiveX control install directly initiated by the user. The only alternative right now is to package the control in a small exe-based installer and do a regular download.

This is a scenario we continue to think about.

re: IE in XP SP2: LMZ locked-down by default?

Sean — Thu, 22 Apr 2004 20:40:00 GMT

Is LMZ lock-down the default setting? Or does one have to choose to lock it down?

Where do the "old local machine zone settings" come from? They're not available for users to set in Tools | Internet Options | Security.

Session bypassing of LMZ lock-down?

Sean — Thu, 22 Apr 2004 20:54:00 GMT

You say "... a menu item that lets you temporarily disable the lockdown..."

Can you define "temporarily" ?

Does that mean click the "override" menu item once, and you get to view one local HTML file... and to see another local HTML file you have to click the menu item AGAIN?

How does a user disable the LMZ lockdown for an entire browsing session? This is essential for anyone who needs to locally view browser-based app's... such as online training.

re: IE in XP SP2 (Part 2): Information Bar - Stopping the modal dialog madness

JC — Fri, 23 Apr 2004 17:40:00 GMT

I have an asp.net page that downloads an activex object. I now have it to where it waits for the user to click on the information bar. The problem is that when the user clicks on the information bar, IE refreshes, giving me the "The page cannot be refreshed without resending the information" dialog.

I've tried setting the cacheability, etc., but it seems that IE invalidates the cache regardless.

How am I supposed to get around this?

re: IE in XP SP2 (Part 2): Information Bar - Stopping the modal dialog madness

Tony Schreiner — Fri, 23 Apr 2004 20:08:00 GMT

I recommend moving the ActiveX install earlier in the process, on a page that does not require posting information back to the server.

re: IE in XP SP2 (Part 2): Information Bar - Stopping the modal dialog madness

Tony Schreiner — Sun, 25 Apr 2004 19:02:00 GMT

Sean, temporarily means it only lasts for that session of IE. Once you exit that instance of the browser you would have to click again.

Local browser-based apps that are hosted in IE and require script should use the "mark of the web" as described in the XP SP2 documentation. They can also be configured to run un an HTA or other host.

The last resort would be to disable this security mitigation using the registry keys.

re: IE in XP SP2 (Part 2): Information Bar - Stopping the modal dialog madness

TheICrow — Sat, 05 Jun 2004 13:29:00 GMT

that means clicking over and over for any html-based local content (like html-help). screw'em, i wan't to decide for myself balance of usability - security.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LocalMachine_Lockdown
setting REG_DWORD values to 0 disables LMZ lock-down.
do i have to spend hours hacking the registry for having some, at least partially, useable OS? some more suprises like this one and next there's *nix or a Mac.
annoyed,
TheICrow.

re: IE in XP SP2 (Part 2): Information Bar - Stopping the modal dialog madness

Tony Schreiner — Sat, 05 Jun 2004 19:15:00 GMT

TheICrow, the solution is to use the Mark of the Web on local content, or host it in another container such as an HTA. For things like standard HTMLHelp, this is already the case.

I've been using SP2 on my main home and work machines for several months now, and haven't encountered LMZ lockdown very often, especially with the newer builds. The exception is when testing web pages locally before putting them up on a server.

In recent builds there is a new setting, "Allow active content to run in files on my computer" under Internet Options / Advanced / Security. This will keep you from having to mess with the registry.

Where is the Information Bar?

Developer — Tue, 29 Jun 2004 17:30:00 GMT

The Information Bar does not appear when a web site tries to install an ActiveX control on a XP SP2 Professional machine . If a different user logs into the same machine, it does. All the security settings are the same in both the cases. What could be the reason for this behavior?

re: IE in XP SP2 (Part 2): Information Bar - Stopping the modal dialog madness

Tony Schreiner — Wed, 07 Jul 2004 20:12:00 GMT

Developer, is the user an Admin? Non-admins typically can't install ActiveX controls. In future releases we will improve the error handling for the non-admin scenario.

re: IE in XP SP2 (Part 2): Information Bar - Stopping the modal dialog madness

Mike — Tue, 13 Jul 2004 16:26:00 GMT

well, that's too late.

IE made me sick -> switched to firefox on friday.

re: IE in XP SP2 (Part 2): Information Bar - Stopping the modal dialog madness

João Amaro Lagedo — Tue, 13 Jul 2004 16:58:00 GMT

Ok one more FireFox Nazy, tabbed Brosing + Pop Block + extensions + W3C = Firefox

re: IE in XP SP2 (Part 2): Information Bar - Stopping the modal dialog madness

MS — Tue, 10 Aug 2004 19:31:00 GMT

Am I the only one that finds the "Information Bar" just as annoying as the modal prompt for "ActiveX is disabled. The web page may not display properly" ...?

When you disable download of ActiveX controls, you should have the option of disabling the Information Bar entirely, or maybe displaying a icon on the status bar as it does for Pop-Ups.

I find the information bar just as intrusive. Also, if you don't know how to change it's default sound for ActiveX blocks, it's enough to drive you crazy mad...

Tweaking XP SP2 popup blocker

Q Daily News — Wed, 18 Aug 2004 17:01:00 GMT

I love the new popup killer that's part of the Windows XP Service Pack 2 updates to Internet Explorer, but I have a question. Is there a way to tell IE that, for specific websites, you don't want the Information...

Mer uppf

Jeppe's WebLog — Wed, 08 Sep 2004 06:54:00 GMT

» Internet Explorer, ActiveX, Macromedia Captivate and Flash

» Internet Explorer, ActiveX, Macromedia Captivate and Flash — Tue, 07 Nov 2006 03:54:23 GMT

PingBack from http://www.breakitdownblog.com/2006/11/06/internet-explorer-activex-macromedia-captivate-and-flash/

always allow activex without message ie reg

always allow activex without message ie reg — Tue, 24 Jun 2008 20:01:38 GMT

PingBack from http://tatyana.videomarketsite.com/alwaysallowactivexwithoutmessageiereg.html

turn off internet explorer information bar

turn off internet explorer information bar — Wed, 09 Jul 2008 15:26:21 GMT

PingBack from http://german.infovideoclub.info/turnoffinternetexplorerinformationbar.html

Tony Schreiner s WebLog IE in XP SP2 Part 2 Information Bar | Paid Surveys

Tony Schreiner s WebLog IE in XP SP2 Part 2 Information Bar | Paid Surveys — Fri, 29 May 2009 19:26:27 GMT

PingBack from http://paidsurveyshub.info/story.php?title=tony-schreiner-s-weblog-ie-in-xp-sp2-part-2-information-bar

Tony Schreiner s WebLog IE in XP SP2 Part 2 Information Bar | Green Tea Fat Burner

Tue, 09 Jun 2009 22:29:10 GMT

PingBack from http://greenteafatburner.info/story.php?id=4890

Tony Schreiner s WebLog IE in XP SP2 Part 2 Information Bar | bar stools

Tony Schreiner s WebLog IE in XP SP2 Part 2 Information Bar | bar stools — Sun, 14 Jun 2009 08:26:17 GMT

PingBack from http://barstoolsite.info/story.php?id=9