Article ID: 967941 - View products that this article applies to.
After you install security update 961260 (MS09-002) on a computer that is running Windows Vista or Windows Server 2008, you may experience a problem when you visit some Web pages that are in different Internet Explorer security zones. When the problem occurs, you receive a message that resembles the following:This problem occurs if the navigation causes Protected Mode settings to change from On to Off. You can determine which Internet Explorer security zone a Web page is in by looking at the status bar at the bottom of the Internet Explorer 7 window.
This problem occurs because Internet Explorer 7 switches Protected Mode settings when certain Web pages are configured in the Trusted Sites area of the Security tab of the Internet Options dialog box. By default, Protected Mode is set to Off for Web sites that are configured in the Trusted Sites area.
Security update informationTo resolve this problem, install the most current cumulative security update for Internet Explorer. To install the most current updates, visit the following Microsoft Web site:
http://update.microsoft.comFor more technical information about the most current cumulative security update for Internet Explorer, visit the following Microsoft Web site:
http://www.microsoft.com/technet/security/current.aspxNote This update was first included in security update 963027 (MS09-014). For more information, click the following article number to view the article in the Microsoft Knowledge Base:
963027Note If you previously applied either of the following workarounds that were previously documented in this article, you must remove the specific workaround.
(http://support.microsoft.com/kb/963027/ )MS09-014: Cumulative security update for Internet Explorer
Undo workaround method 3: Disable Protected Mode for the "Trusted Sites" zone
Undo workaround method 4: Edit the registry to disable a Feature Control key that will enable the functionality that was introduced in security update 961260 (MS09-002)
To do this, modify the DWORD value that is named iexplore.exe and set its value to 1 in the following registry subkey:
Important This section, method, or task contains steps that tell you how to modify the registry. However, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow these steps carefully. For added protection, back up the registry before you modify it. Then, you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click the following article number to view the article in the Microsoft Knowledge Base:
(http://support.microsoft.com/kb/322756/ )How to back up and restore the registry in Windows
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.
For more information about security update 961260 (MS09-002), click the following article number to view the article in the Microsoft Knowledge Base:
(http://support.microsoft.com/kb/961260/ )MS09-002: Cumulative security update for Internet Explorer
(http://go.microsoft.com/fwlink/?LinkId=151500)for other considerations.
Article ID: 967941 - Last Review: February 3, 2011 - Revision: 8.1