Internet Explorer (iexplore)

Run: iexplore.exe

Status: DEPRECATED AND REMOVED

• End of life: June 15, 2022
• Removed from: Windows 11 (all versions), Windows 10 22H2+
• Current behavior: On systems where IE is retired, iexplore.exe redirects to Microsoft Edge automatically

IE Mode in Microsoft Edge

For legacy web applications requiring Internet Explorer compatibility (ActiveX controls, legacy JavaScript engines, NTLM SSO to intranet sites):

Edge → Settings → Default browser → Internet Explorer mode
→ Add sites that require IE mode
→ Those sites open in an IE rendering engine tab within Edge

IE Mode uses the IE11 rendering engine (Trident/MSHTML) inside an Edge tab. Supports ActiveX, document modes, and legacy authentication. Configure via GPO for enterprise deployment.

Historical Attack Vectors

IE accumulated hundreds of CVEs over its lifetime:

• Drive-by downloads — visiting a malicious page executed code via browser vulnerabilities
• VBScript execution — VBScript enabled in Internet Zone by default for years
• ActiveX controls — arbitrary code execution via malicious ActiveX objects
• MHTML handling — multiple critical vulnerabilities in .mht file processing
• Security zones bypass — content from Internet zone executing with Intranet zone permissions

Disabling IE Completely

Registry:
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer\Main
Value: DisableIE = 1 (DWORD)

GPO: Computer Config → Admin Templates → Windows Components → 
     Internet Explorer → Disable Internet Explorer 11 as standalone browser

Security Zones (Still Relevant via Internet Options)

Even without IE, the Security Zone configuration in inetcpl.cpl affects WinINet-based applications, Edge IE Mode, and legacy apps using the IE COM object. Internet, Local Intranet, Trusted Sites, and Restricted Sites zones remain active.