I am testing windows 8.1 preview.
I installed office 365 pro plus using the application virtualization technology (click-to-run).
Enhanced protected mode is enabled on IE 11 and consequently protected mode is enabled too.
As I already asked at http://blogs.msdn.com/b/ieinternals/archive/2011/07/14/url-protocols-application-protocols-and-asynchronous-pluggable-protocols-oh-my.aspx I cannot control the IE protected mode elevation policyfor the office applications.
For non-office applications I successfully enabled many policies related to IE 11 Low rights elevation using the admx file found at http://blogs.technet.com/b/juanand/archive/2010/10/29/internet-explorer-protected-mode-elevation-policy-and-administrative-templates.aspx=
For any of the office 365 applications creating any low rights elevation policy with the above admx file has no effect on launching those applications from IE 11, that is all office applications are started as medium integrity processes (The office applications are launched in protected view mode but nevertheless the main office applications processesare always started as medium integrity level processes).
Anyway the policy that one can enable for any application started from IE using the above admx file are:
- "Prevent the process from starting"
- "Silently starts as low integrity process"
- "Prompt to start as medium integrity process"
- "Silently starts as medium integrity process"
I just can’t enable a policy to "Prevent the process from starting" for any of the office applications, it simply doesn’t work.
And I have also deleted all the other (other than the ones created by the above admx file) office registry sub keys related to IE "Low rights" key included those ones under "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\15.0\ClickToRun\REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\Low Rights" and "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\15.0\ClickToRun\REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights".
How can I enable a Protected Mode Elevation policy on IE 11 for office 365 applications?
Thanks for reading and helping.