-
Title
Previously enabled add-ons are disabled in Internet Explorer after a workstation is processed and moved -
Description
A workstation is processed successfully with Resource Update Manager (RUM) and moved to the target Domain. Upon login to the new domain and launching Internet Explorer, the user is prompted with a message stating ‘Several add-ons are ready for use’, with an option to ‘Choose add-ons’ or ‘Don’t enable’.
If the customer clicks on ‘Don’t enable’, then those add-ons, which were previously enabled, become disabled.
-
Cause
This is caused by 2 factors:
- How Microsoft stores User Consent for add-ons
- Group Policy Setting
When a new add-on is installed, the following Group Policy setting forces the pop-up prompt, causing the end-user to grant consent:
Computer Configuration | Administrative Templates | Windows Components | Internet Explorer |
"Automatically activate/enable newly installed add-ons"User Consent, once received, is stored in Protected Storage, then the add-on hash is added to the registry under HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\INTERNET EXPLORER\APPROVED EXTENSIONS.
Though RUM Processing updates the HKEY_CURRENT_USER branch of the registry, RUM cannot process Protected Storage. After a processing, the User Consent is lost and the Group Policy settings take over.
-
Resolution
Set the Group Policy setting to Enabled in the Target domain. This will allow all Add-ons to be enabled without User Consent. If this is Disabled or Not Configured, the user must provide User Consent for each add-on. -
Additional Information
Protected Storage https://msdn.microsoft.com/en-us/library/aa939852(v=winembedded.5).aspx Group Policy Setting: https://technet.microsoft.com/en-us/library/dn454941.aspx Description of Setting: This policy setting allows you to configure whether newly installed add-ons are automatically activated in the Internet Explorer 9 browser. Any add-ons that were activated in a previous version of Internet Explorer are considered to be the same as newly installed add-ons and are not activated when the user upgrades to Internet Explorer 9. In Internet Explorer 9, add-ons are defined as toolbars, Browser Helper Objects, or Explorer bars. ActiveX controls are referred to as plug-ins and are not part of this definition. If you enable this policy setting, newly installed add-ons are automatically activated in the browser. If you disable or do not configure this policy setting, newly installed add-ons are not automatically activated in the browser. Internet Explorer notifies the user when newly installed add-ons are ready for use. The user must choose to activate them by responding to the notification, using Manage Add-ons, or using other methods. https://support.quest.com/migration-manager-for-ad/kb/35173 https://support.quest.com/migration-manager-for-ad/kb/64294 https://support.quest.com/migration-manager-for-ad/kb/14497 https://support.quest.com/migration-manager-for-ad/kb/18305 https://support.quest.com/migration-manager-for-ad/kb/18932