By default, Internet Explorer 7 in Windows Vista runs in Protected-Mode, which adds additional defenses to help enable a safer browsing experience for users. In Protected-Mode, Internet Explorer runs with reduced permissions to mitigate software vulnerabilities exploitation by eliminating the possibility to alter user or system files without user’s explicit permission.

While Protected-Mode is enabled by default in Internet Explorer 7, the default installation settings of Vista let users disable the mode, which reduces overall security. Administrators must prevent users from turning off this option. These four steps ensure that users will not be able to turn off protected mode:

1. Click ‘Start’ and select ‘Run’
2. Type ‘gpedit.msc’ and press enter. If User Access Control is enabled, click ‘Continue’
3. Navigate to Computer Configuration->Administrative Templates->Windows Components->Internet Explorer->Internet Control Panel->Security Page
4. For each Internet Security Zone, except the Trusted Zone, enable the ‘Turn on Protected Mode’ policy object.