Addresses that should be shown in the Do not use proxy server for addresses beginning with section under the Internet Options Advanced Proxy Settings page are not shown. The registry entries still exist and Internet Explorer will still bypass the Web sites.

Back to the top

This is caused by the configuration of different proxy servers by protocol, where one is the Gopher proxy server.

 

Note Internet Explorer 7 does not support the Gopher protocol. For this problem to occur, the Gopher protocol would have to have been set in older Group Policies or from an earlier version of Internet Explorer before Internet Explorer 7 was installed.

Back to the top

If the configuration was set through Group Policy

 

·         Remove the value for the Gopher proxy server specified in the Group Policy.

 

If the configuration was not set through Group Policy

 

Important This section, method, or task contains steps that tell you how to modify the registry. However, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow these steps carefully. For added protection, back up the registry before you modify it. Then, you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click the following article number to view the article in the Microsoft Knowledge Base:

 

                322756 (/Feedback.aspx?kbNumber=322756) How to back up and restore the registry in Windows

 

To modify the registry entry, follow these steps:

 

1.       Click Start, click Run, and in the Open box, type the following:

 regedit

 

2.       Locate the ProxyServer value under the following key in the registry:

HKEY_CURRENT_USER Software Microsoft Windows CurrentVersion Internet Settings

3.       On the Edit menu, click Edit, String.

4.       Remove the entry associated with Gopher (for example, remove gopher=proxyserver:80;), and then click OK . 

5.       Exit Registry Editor. 

Back to the top

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, MICROSOFT AND/OR ITS SUPPLIERS DISCLAIM AND EXCLUDE ALL REPRESENTATIONS, WARRANTIES, AND CONDITIONS WHETHER EXPRESS, IMPLIED OR STATUTORY, INCLUDING BUT NOT LIMITED TO REPRESENTATIONS, WARRANTIES, OR CONDITIONS OF TITLE, NON INFRINGEMENT, SATISFACTORY CONDITION OR QUALITY, MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE, WITH RESPECT TO THE MATERIALS.

Back to the top

This issue occurs if a Web site that you browse is an Active Server Pages (ASP) page that calls a .NET-managed component.

Note This .NET-managed component uses .NET interop functionality.

Back to the top

Back to the top

Hotfix information for Windows XP

A supported hotfix is now available from Microsoft. However, it is intended to correct only the problem that is described in this article. Apply it only to systems that are experiencing this specific problem. This hotfix may receive additional testing. Therefore, if you are not severely affected by this problem, we recommend that you wait for the next Windows XP service pack that contains this hotfix.

To resolve this problem immediately, contact Microsoft Customer Support Services to obtain the hotfix. For a complete list of Microsoft Customer Support Services telephone numbers and information about support costs, visit the following Microsoft Web site:

Note In special cases, charges that are ordinarily incurred for support calls may be canceled if a Microsoft Support Professional determines that a specific update will resolve your problem. The usual support costs will apply to additional support questions and issues that do not qualify for the specific update in question.

Prerequisites

To apply this hotfix, you must have Windows XP Service Pack 2 (SP2) installed.

Restart requirement

You must restart the computer after you apply this hotfix.

Hotfix replacement information

This hotfix does not replace any other hotfixes.

File information

The English version of this hotfix has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.

File name	File version	File size	Date	Time	Platform
Urlmon.dll	7.0.6000.20733	1,162,752	07-Dec-2007	05:53	x86

Back to the top

Hotfix information for Windows Server 2003

A supported hotfix is now available from Microsoft. However, it is intended to correct only the problem that is described in this article. Apply it only to systems that are experiencing this specific problem. This hotfix may receive additional testing. Therefore, if you are not severely affected by this problem, we recommend that you wait for the next Windows Server 2003 service pack that contains this hotfix.

To resolve this problem immediately, contact Microsoft Customer Support Services to obtain the hotfix. For a complete list of Microsoft Customer Support Services telephone numbers and information about support costs, visit the following Microsoft Web site:

Note In special cases, charges that are ordinarily incurred for support calls may be canceled if a Microsoft Support Professional determines that a specific update will resolve your problem. The usual support costs will apply to additional support questions and issues that do not qualify for the specific update in question.

Prerequisites

To apply this hotfix, you must have Windows Server 2003 Service Pack 2 installed.

Restart requirement

You must restart the computer after you apply this hotfix.

Hotfix replacement information

This hotfix does not replace any other hotfixes.

File information

The English version of this hotfix has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.

File name	File version	File size	Date	Time	Platform
Urlmon.dll	7.0.6000.20733	1,162,752	06-Dec-2007	19:32	x86

Back to the top

Hotfix information for Windows Vista

A supported hotfix is now available from Microsoft. However, it is intended to correct only the problem that is described in this article. Apply it only to systems that are experiencing this specific problem. This hotfix may receive additional testing. Therefore, if you are not severely affected by this problem, we recommend that you wait for the next Windows Vista service pack that contains this hotfix.

To resolve this problem immediately, contact Microsoft Customer Support Services to obtain the hotfix. For a complete list of Microsoft Customer Support Services telephone numbers and information about support costs, visit the following Microsoft Web site:

Note In special cases, charges that are ordinarily incurred for support calls may be canceled if a Microsoft Support Professional determines that a specific update will resolve your problem. The usual support costs will apply to additional support questions and issues that do not qualify for the specific update in question.

Prerequisites

No prerequisites are required.

Restart requirement

You must restart the computer after you apply this hotfix.

Hotfix replacement information

This hotfix does not replace any other hotfixes.

File information

The English version of this hotfix has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.

File name	File version	File size	Date	Time	Platform
Update.mum	Not Applicable	2,031	05-Dec-2007	12:47	Not Applicable
X86_395ee482d2c34d4bc21bf30dc6c83930_31bf3856ad364e35_6.0.6000.20733_none_6a8300a61a7b767b.manifest	Not Applicable	724	05-Dec-2007	12:47	Not Applicable
X86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_6.0.6000.20733_none_b369071af2d69a04.manifest	Not Applicable	283,492	05-Dec-2007	12:47	Not Applicable
Urlmon.dll	7.0.6000.20733	1,162,752	05-Dec-2007	04:09	x86

After you apply this hotfix, follow these steps to enable the changes that the hotfix makes:

1.	Click Start, click Run, type regedit , and then click OK.
2.	Locate and then click the following registry subkey: HKEY_LOCAL_MACHINE SOFTWARE Microsoft Internet Explorer MAIN FeatureControl FEATURE_IGNORE_ZONES_INITIALIZATION_FAILURE_KB945701
3.	Right-click FEATURE_IGNORE_ZONES_INITIALIZATION_FAILURE_KB945701, point to New, and then click DWORD Value.
4.	Type w3wp.exe to name the new registry entry, and then press ENTER.
5.	Right-click w3wp.exe, and then click Modify.
6.	In the Value data box, type 1, and then click OK.
7.	Exit Registry Editor.

Note You must apply this hotfix on the Web server that is running Internet Information Services (IIS).

Back to the top

Back to the top

In this scenario, when you try to start Internet Explorer 7 on an alternative desktop, the Internet Explorer 7 browser window does not open. Instead, the Internet Explorer 7 browser window opens on the default desktop.

Back to the top

Because there is one broker process per user, protected mode allows browser windows to open only on the default desktop.

Back to the top

Back to the top

Back to the top

Back to the top

Back to the top

To help resolve this issue, ask the gadget developer to supply the language for the gadget.

Note You may be able to resolve this issue by installing a language pack that includes a language that matches the language in the gadget. For more information about how to install more languages, see Windows Help and Support.

Back to the top

Back to the top

Back to the top

Back to the top

treeDiv = srcDoc.createElement(DIV);treeDiv.id = treeDiv;treeDiv.className = treeDiv;treeDiv.style.pixelTop = 0;scrollDiv.appendChild(treeDiv);treeDiv.onresize = treeResize;treeDiv.innerHTML = loadTree(treeXML);

Back to the top

• Home users:
  http://www.microsoft.com/protect/computer/updates/bulletins/200811.mspx (http://www.microsoft.com/protect/computer/updates/bulletins/200811.mspx)

  Skip the details: Download the updates for your home computer or laptop from the Microsoft Update Web site now:

  http://update.microsoft.com/microsoftupdate (http://update.microsoft.com/microsoftupdate/)
• IT professionals:
  http://www.microsoft.com/technet/security/bulletin/MS08-068.mspx (http://www.microsoft.com/technet/security/bulletin/MS08-068.mspx)

Back to the top

How to obtain help and support for this security update

For home users, no-charge support is available by calling 1-866-PCSAFETY in the United States and Canada or by contacting your local Microsoft subsidiary. For more information about how to contact your local Microsoft subsidiary for support issues with security updates, visit the Microsoft International Support Web site:

North American customers can also obtain instant access to unlimited no-charge e-mail support or to unlimited individual chat support by visiting the following Microsoft Web site:

For enterprise customers, support for security updates is available through your usual support contacts.

Back to the top

Known issues with this security update

Symptoms

After you apply this security update, applications such as Microsoft SQL Server or Internet Information Services (IIS) may fail when they make local NTLM authentication requests.

Cause

This problem occurs because of the way that NT LAN Manager (NTLM) treats different naming conventions as remote entities instead of as local entities. A local authentication failure might occur when the client calculates and caches the correct response to the NTLM challenge that is sent by the server in local lsass memory before the response is sent back to the server. When the server code for NTLM finds the received response in the local lsass cache, the code does not honor the authentication request and treats it as a replay attack. This behavior leads to a local authentication failure.

Resolution

To resolve this problem, you must disable reflection protection so that the affected systems can be authenticated. For more information about how to do this, click the following article number to view the article in the Microsoft Knowledge Base:

How to disable NTLM reflection protection

ImportantThis section, method, or task contains steps that tell you how to change the registry. However, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow these steps carefully. For added protection, back up the registry before you modify it. Then, you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click the following article number to view the article in the Microsoft Knowledge Base:

To disable NTLM reflection protection, you must modify a registry key on the client computer. To do this, follow these steps on the client computer:

1. Click Start, click Run, type regedit in the Open box, and then click OK.
2. Locate and then click the following subkey in the registry:
   HKEY_LOCAL_MACHINE SYSTEM CurrentControlSet Control Lsa
3. On the Edit menu, point to New, and then click DWORD Value.
4. Type DisableLoopbackCheck for the name of the DWORD, and then press ENTER.
5. Right-click DisableLoopbackCheck, and then click Modify.
6. In the Value data box, type 1, and then click OK.
7. Exit Registry Editor, and then restart the computer.

Note You must restart the computer for this change to take effect.

The effect of disabling NTLM reflection protection

Because the NTLM reflection protection is part of the fix for this SMB vulnerability, disabling NTLM reflection protection on an affected system by setting DisableLoopbackCheck to 1 returns the system to a vulnerable state. Therefore, we strongly recommend that you use the BackConnectionHostNames registry key if needed.

How to re-enable NTLM reflection protection

To re-enable NTLM reflection protection, you must modify a registry entry on the client computer. To do this, follow these steps on the client computer:

1. Click Start, click Run, type regedit in the Open box, and then click OK.
2. Locate and then click the following subkey in the registry:
   HKEY_LOCAL_MACHINE SYSTEM CurrentControlSet Control Lsa
3. Right-click DisableLoopbackCheck, and then click Modify.
4. In the Value data box, type 0, and then click OK.
5. Exit Registry Editor, and then restart the computer.

Note You must restart the computer for this change to take effect.

How to disable NTLM reflection protection for a particular SPN

You can disable NTLM reflection protection for a particular Service Principal Name (SPN) that is causing the corresponding authentication to break.To do this, follow these steps on the client computer:

1. Click Start, click Run, type regedit in the Open box, and then click OK.
2. Locate and then click the following subkey in the registry:
   HKEY_LOCAL_MACHINE SYSTEM CurrentControlSet Control Lsa MSV1_0
3. On the Edit menu, point to New, and then click Multi-String Value.
4. Type BackConnectionHostNames for the name of the Multi-String Value, and then press ENTER.

   Note If the BackConnectionHostNames registry entry exists as a REG_DWORD, you must delete the BackConnectionHostNames registry entry.

5. Right-click BackConnectionHostNames, and then click Modify.
6. In the Value data box, type the CNAME or the DNS alias that is used for the local shares on the computer, and then click OK.

   Note You must type each host name on a separate line.

7. Exit Registry Editor, and then restart the computer.

Note You must restart the computer for this change to take effect.

The effect of disabling NTLM reflection protection for a particular SPN

Because NTLM reflection protection is part of the fix for this SMB vulnerability, disabling NTLM reflection protection on an affected system will return the system to a vulnerable state for the particular SPN for which the reflection protection was disabled.

How to re-enable NTLM reflection protection for a particular SPN

To do this, follow these steps on the client computer:

1. Click Start, click Run, type regedit in the Open box, and then click OK.
2. Locate and then click the following subkey in the registry:
   HKEY_LOCAL_MACHINE SYSTEM CurrentControlSet Control Lsa MSV1_0
3. Right-click BackConnectionHostNames, and then click Modify.
4. In the Value data box, delete the CNAME or the DNS alias that is used for the local shares on the computer, and then click OK.

   Note You must type each host name on a separate line.

5. Exit Registry Editor, and then restart the computer.

Note You must restart the computer for this change to take effect.

Back to the top

File information

The English (United States) version of this software update installs files that have the attributes that are listed in the following tables. The dates and times for these files are listed in Coordinated Universal Time (UTC). The dates and times for these files on your local computer are displayed in your local time and with your current daylight saving time (DST) bias. Additionally, the dates and times may change when you perform certain operations on the files.

For all supported editions of Microsoft Windows 2000 Service Pack 4

Windows XP and Windows Server 2003 file information notes

• The files that apply to a specific milestone (RTM, SPn) and service branch (QFE, GDR) are noted in the SP requirement and Service branch columns.
• GDR service branches contain only those fixes that are widely released to address widespread, critical issues. QFE service branches contain hotfixes in addition to widely released fixes.
• In addition to the files that are listed in these tables, this software update also installs an associated security catalog file (KBnumber.cat) that has a Microsoft digital signature.

For all supported x86-based versions of Windows XP

For all supported x64-based versions of Windows Server 2003 and of Windows XP Professional x64 edition

For all supported x86-based versions of Windows Server 2003

For all supported IA-64-based versions of Windows Server 2003

Windows Vista and Windows Server 2008 file information notes

• The files that apply to a specific product, milestone (RTM, SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table.
  Collapse this tableExpand this table

  Version	Product	Milestone	Service branch
  6.0.6000.16xxx	Windows Vista	RTM	GDR
  6.0.6000.20xxx	Windows Vista	RTM	LDR
  6.0.6001.18xxx	Windows Vista SP1 and Windows Server 2008 SP1	SP1	GDR
  6.0.6001.22xxx	Windows Vista SP1 and Windows Server 2008 SP1	SP1	LDR

• Service Pack 1 is integrated into the release version of Windows Server 2008. Therefore, RTM milestone files apply only to Windows Vista. RTM milestone files have a 6.0.0000. xxxxxx version number.
• GDR service branches contain only those fixes that are widely released to address widespread, critical issues. LDR service branches contain hotfixes in addition to widely released fixes.
• The MANIFEST files (.manifest) and the MUM files (.mum) that are installed for each environment are listed separately. MUM and MANIFEST files, and the associated security catalog (.cat) files, are critical to maintaining the state of the updated component. The security catalog files (attributes not listed) have a Microsoft digital signature.

For all supported x86-based versions of Windows Server 2008 and of Windows Vista

For all supported x64-based versions of Windows Server 2008 and of Windows Vista

For all supported IA-64-based versions of Windows Server 2008

Back to the top

Additional file information for Windows Server 2008 and for Windows Vista

Additional files for all supported x86-based versions of Windows Server 2008 and of Windows Vista

Additional files for all supported x64-based versions of Windows Server 2008 and of Windows Vista

Additional files for all supported IA-64-based versions of Windows Server 2008

Back to the top

Back to the top

This update also improves the compatibility between Outlook 2007 and some IMAP e-mail servers.

Back to the top

Update information

How to obtain and to install the update

This update is available from the Microsoft Download Center. To download this update and to obtain installation instructions and deployment strategies, visit the following Microsoft Web site:

Previously released security updates and hotfixes that are contained in this update

Back to the top

How to determine whether the update is installed

This update contains files that have the versions that are listed in the following table.

File name	File version	File size	Date	Time
Contab32.dll	12.0.6300.5000	136,232	13-Dec-2007	06:56
Dlgsetp.dll	12.0.6308.5000	90,656	23-Mar-2008	02:14
Emsmdb32.dll	12.0.6307.5000	1,477,224	16-Mar-2008	08:29
Exsec32.dll	12.0.6300.5000	394,752	13-Dec-2007	06:56
Mimedir.dll	12.0.6309.5000	343,568	28-Mar-2008	03:24
Mspst32.dll	12.0.6308.5000	1,107,040	23-Mar-2008	02:14
Olmapi32.dll	12.0.6309.5000	2,953,776	28-Mar-2008	03:24
Omsmain.dll	12.0.6300.5000	663,088	13-Dec-2007	08:40
Omsxp32.dll	12.0.6300.5000	195,136	13-Dec-2007	08:40
Outlmime.dll	12.0.6309.5000	601,160	28-Mar-2008	03:24
Outlook.exe	12.0.6309.5000	12,840,480	28-Mar-2008	03:25
Outlph.dll	12.0.6300.5000	180,800	13-Dec-2007	06:56
Outlrpc.dll	12.0.6302.5000	47,624	07-Feb-2008	03:57
Outlvbs.dll	12.0.6300.5000	60,448	07-Dec-2007	07:05
Pstprx32.dll	12.0.6309.5000	416,280	28-Mar-2008	03:25
Scanpst.exe	12.0.6300.5000	40,520	07-Dec-2007	07:05
Scnpst32.dll	12.0.6308.5000	265,816	23-Mar-2008	02:14
Scnpst64.dll	12.0.6308.5000	275,552	23-Mar-2008	02:14

For information about how to distribute product updates for the 2007 Microsoft Office system, visit the following Microsoft Web site:

The Office System TechCenter contains the latest administrative updates and strategic deployment resources for all versions of Office. For more information about the Office System TechCenter, visit the following Microsoft Web site:

Back to the top

Consider the following scenario:

·         You log in to a Windows 2008 Server using Remote Desktop.

·         You are using a roaming profile.

·         Icons are viewed as Large or Middle size icons (shortcut (.url)) on desktop.

·         You have changed an Icon image to be different than its default icon.

In this scenario when you use remote desktop you notice that the icon that is displayed for Internet shortcut files changes to the default system icon.

Back to the top

When you log in to Windows 2008 server by using Remote Desktop, Internet Explorer 7 has a limitation in that the .url handler for IExtractIcon will fail all requests for icons larger than 48×48, and if asked for a 48×48 icon, will return a default page icon.

Back to the top

Right click on desktop and choose Classic icons from view.

Back to the top

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, MICROSOFT AND/OR ITS SUPPLIERS DISCLAIM AND EXCLUDE ALL REPRESENTATIONS, WARRANTIES, AND CONDITIONS WHETHER EXPRESS, IMPLIED OR STATUTORY, INCLUDING BUT NOT LIMITED TO REPRESENTATIONS, WARRANTIES, OR CONDITIONS OF TITLE, NON INFRINGEMENT, SATISFACTORY CONDITION OR QUALITY, MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE, WITH RESPECT TO THE MATERIALS.

Back to the top

In this scenario, incorrect colors may be displayed in multiple document interfaces (MDI) child forms on the Web page.

Note This problem does not occur in Microsoft Internet Explorer 6.

Back to the top

Security update information

To resolve this problem, install the most current cumulative security update for Internet Explorer. To install the most current updates, visit the following Microsoft Web site:

For more technical information about the most current cumulative security update for Internet Explorer, visit the following Microsoft Web site:

Note This fix was first included in security update 947864 (security bulletin MS08-024). For more information, click the following article number to view the article in the Microsoft Knowledge Base:

A hotfix is also available to resolve this problem in Internet Explorer 7.

Back to the top

Windows Vista hotfix information

A supported hotfix is now available from Microsoft. However, this hotfix is intended to correct only the problem that this article describes. Apply this hotfix only to systems that are experiencing this specific problem.

To resolve this problem, submit a request to Microsoft Online Customer Services to obtain the hotfix. To submit an online request to obtain the hotfix, visit the following Microsoft Web site:

Note If additional issues occur or any troubleshooting is required, you might have to create a separate service request. The usual support costs will apply to additional support questions and issues that do not qualify for this specific hotfix. To create a separate service request, visit the following Microsoft Web site:

Prerequisites

There are no prerequisites.

Restart requirement

You have to restart the computer after you apply this hotfix.

Hotfix replacement information

This hotfix does not replace any other hotfixes.

Registry information

Important This section, method, or task contains steps that tell you how to modify the registry. However, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow these steps carefully. For added protection, back up the registry before you modify it. Then, you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click the following article number to view the article in the Microsoft Knowledge Base:

To enable this hotfix, follow these steps:

1.	Click Start , type regedit in the Start Search box, and then press ENTER.
2.	Locate and then click the following registry subkey: HKEY_LOCAL_MACHINE SOFTWARE Microsoft Internet Explorer Main FeatureControl
3.	On the Edit menu, point to New, and then click Key.
4.	Type the following key name, and then press ENTER: FEATURE_THROW_NESTED_EXCEPTIONS_KB944397
5.	On the Edit menu, point to New, and then click DWORD Value.
6.	Type iexplore.exe, and then press ENTER.
7.	On the Edit menu, click Modify.
8.	Type 00000001, and then click OK.
9.	Exit Registry Editor.

File information

The global version of this hotfix has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.

Windows Vista, 32-bit editions

Windows Vista with Service Pack 1, 32-bit editions

Back to the top

Windows XP hotfix information

A supported hotfix is now available from Microsoft. However, this hotfix is intended to correct only the problem that this article describes. Apply this hotfix only to systems that are experiencing this specific problem.

To resolve this problem, submit a request to Microsoft Online Customer Services to obtain the hotfix. To submit an online request to obtain the hotfix, visit the following Microsoft Web site:

Note If additional issues occur or any troubleshooting is required, you might have to create a separate service request. The usual support costs will apply to additional support questions and issues that do not qualify for this specific hotfix. To create a separate service request, visit the following Microsoft Web site:

Prerequisites

You must have Windows XP Service Pack 2 (SP2) installed to apply this hotfix.

Restart requirement

You have to restart the computer after you apply this hotfix.

Hotfix replacement information

This hotfix does not replace any other hotfixes.

Registry information

Important This section, method, or task contains steps that tell you how to modify the registry. However, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow these steps carefully. For added protection, back up the registry before you modify it. Then, you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click the following article number to view the article in the Microsoft Knowledge Base:

To enable this hotfix, follow these steps:

1.	Click Start, click Run, type regedit, and then press ENTER.
2.	Locate and then click the following registry subkey: HKEY_LOCAL_MACHINE SOFTWARE Microsoft Internet Explorer Main FeatureControl
3.	On the Edit menu, point to New, and then click Key.
4.	Type the following key name, and then press ENTER: FEATURE_THROW_NESTED_EXCEPTIONS_KB944397
5.	On the Edit menu, point to New, and then click DWORD Value.
6.	Type iexplore.exe, and then press ENTER.
7.	On the Edit menu, click Modify.
8.	Type 00000001, and then click OK.
9.	Exit Registry Editor.

File information

The English version of this hotfix has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.

File name	File version	File size	Date	Time	Platform
Ieframe.dll	7.0.6000.20790	6,068,224	17-Mar-2008	23:43	x86

Back to the top

Windows Server 2003 hotfix information

A supported hotfix is now available from Microsoft. However, this hotfix is intended to correct only the problem that this article describes. Apply this hotfix only to systems that are experiencing this specific problem.

To resolve this problem, submit a request to Microsoft Online Customer Services to obtain the hotfix. To submit an online request to obtain the hotfix, visit the following Microsoft Web site:

Note If additional issues occur or any troubleshooting is required, you might have to create a separate service request. The usual support costs will apply to additional support questions and issues that do not qualify for this specific hotfix. To create a separate service request, visit the following Microsoft Web site:

Prerequisites

You must have Windows Server 2003 SP2 installed to apply this hotfix.

Restart requirement

You have to restart the computer after you apply this hotfix.

Hotfix replacement information

This hotfix does not replace any other hotfixes.

Registry information

Important This section, method, or task contains steps that tell you how to modify the registry. However, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow these steps carefully. For added protection, back up the registry before you modify it. Then, you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click the following article number to view the article in the Microsoft Knowledge Base:

To enable this hotfix, follow these steps:

1.	Click Start, click Run, type regedit, and then press ENTER.
2.	Locate and then click the following registry subkey: HKEY_LOCAL_MACHINE SOFTWARE Microsoft Internet Explorer Main FeatureControl
3.	On the Edit menu, point to New, and then click Key.
4.	Type the following key name, and then press ENTER: FEATURE_THROW_NESTED_EXCEPTIONS_KB944397
5.	On the Edit menu, point to New, and then click DWORD Value.
6.	Type iexplore.exe, and then press ENTER.
7.	On the Edit menu, click Modify.
8.	Type 00000001, and then click OK.
9.	Exit Registry Editor.

File information

The English version of this hotfix has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.

File name	File version	File size	Date	Time	Platform
Ieframe.dll	7.0.6000.20790	6,068,224	17-Mar-2008	23:23	x86

Back to the top

Back to the top

Back to the top

For more information about software update terminology, click the following article number to view the article in the Microsoft Knowledge Base:

Back to the top

In this scenario, nothing happens. Sync Center does not start as expected.

Back to the top

Back to the top

NoteAfter you install Windows Desktop Experience, you must restart the computer.

Back to the top

This synchronization functionality is part of Windows Desktop Experience.

Back to the top

Back to the top

Back to the top

List of issues fixed

This update fixes various issues that may occur when you use Web folders from the client computer to connect to a server that supports Web Distributed Authoring and Versioning (WebDAV).

This update fixes the following issues:

•	A document that is opened from a Microsoft Office SharePoint Server 2007site may be downloaded two times when you click Edit in Microsoft Office program.
•	The download progress indicator does not work for some documents on the SharePoint site.
•	You cannot rename or copy files that have a display name in a non-Internet Information Services (IIS) Web folder.

Additionally, this update includes security enhancements to Web folders.

Back to the top

Update information

The following file is available for download from the Microsoft Download Center:
Download the Software Update for Web Folders package now. (http://www.microsoft.com/downloads/details.aspx?FamilyId=17C36612-632E-4C04-9382-987622ED1D64)

Release Date: May 18, 2007

For more information about how to download Microsoft support files, click the following article number to view the article in the Microsoft Knowledge Base:

Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help prevent any unauthorized changes to the file.

Restart information

You may have to restart the computer after you apply this update.

Update replacement information

This update replaces the Software Update for Web Folders that is dated January 25, 2005.

For more information about the Software Update for Web Folders that is dated January 25, 2005, click the following article number to view the article in the Microsoft Knowledge Base:

File information

After the update is installed, the English version of this update has the file attributes, or a later version of the file attributes, that are listed in the following table:

File name	File version	File size	Date	Time
Fp4autl.dll	4.0.2.3216	589,880	17-Nov-2004	22:33
Fp4awec.dll	4.0.2.2611	450,669	17-Nov-2004	22:33
Fpext_fp4.msg	Not Applicable	78,706	17-Nov-2004	22:33
Msdaipp.dll	12.0.4518.1014	1,011,488	27-Oct-2006	00:49
Msdapml.dll	12.0.4518.1014	163,104	27-Oct-2006	00:49
Msonsext.dll	12.0.4518.1014	970,528	27-Oct-2006	00:49
Nsextint.dll	12.0.4518.1014	75,552	27-Oct-2006	00:49

Additional notes

For more information about software update terminology, click the following article number to view the article in the Microsoft Knowledge Base:

Back to the top

If you need to troubleshoot Internet Explorer 7 installation problems, you are in the right place.

Let’s get started troubleshooting Internet Explorer 7 installation problems.

SPECIAL NOTE FOR PEOPLE WHO REACHED THIS ARTICLE BY CLICKING AN ICON ON THE DESKTOP

If you clicked this icon thinking that it would open your home page in Internet Explorer, you are in the wrong place. Go to the Why do I have an icon leading to this page on my desktop and how do I delete it? section for more information.

SYMPTOMS OF THE PROBLEM

When you try to install Internet Explorer 7, the installation wizard finishes. However, you receive the following error message:

Back to the top

To troubleshoot the problem, follow these three steps in order:

•	Step 1: Use Windows Update to update Windows and Internet Explorer
•	Step 2: Scan your computer for malware
•	Step 3: Try installing Internet Explorer 7 again

The Step-by-step instructions section below contains detailed instructions about how to perform these steps.

You might need to restart your computer for some of these troubleshooting methods. If you restart your computer, the content that you are now viewing will no longer be displayed.

You might find it easier to follow these steps if you print this article first. Or, you can return to this page after your computer restarts. You can use the Internet Explorer Troubleshooting icon on your desktop to return to this page. If you’re not sure if you have this icon, you can create a shortcut to this Web page on your desktop so that you can easily return to this page by double-clicking the shortcut. To create a shortcut to this Web page on your desktop, follow these steps:

1.	Right-click this page, and then click Create Shortcut.
2.	In the Internet Explorer dialog box, click Yes to create a shortcut on your desktop.

Step-by-step instructions

Step 1: Use Windows Update to update Windows and Internet Explorer

a.	Start Windows Update and check for updates. If you need the steps, here they are. 1. In Internet Explorer, visit the following Microsoft Web site: http://windowsupdate.microsoft.com/ (http://windowsupdate.microsoft.com/) 2. To check for important updates, click Express. Note If you receive an error message when you visit Windows Update, go to the How do I troubleshoot Windows Update issues? section to solve the Windows Update issues first.
b.	Install all important updates. If you need the steps, here they are. 1. If any important updates are available for your computer, install them. To do this, click Install updates. 2. If you are prompted to restart your computer after all the updates are installed, restart your computer. Important You might have to restart your computer after you install certain updates. When you restart your computer, the content that you are now viewing will no longer be displayed. So, before you continue, you might find it helpful to print this article.
c.	Repeat this step until you receive a page that contains the following text: No high-priority updates for your computer are available After you see this page, go to Step 2.

Step 2: Scan your computer for malware

How you scan your computer for malware depends on the malware-protection programs that you have.

Important If you use your own antivirus and antimalware software, update the antivirus and antimalware definition files before you scan your computer.

If you do not know how to update your antivirus and antimalware definition files or if you do not know how to scan your computer, an easy and free way to do this is to use the Windows Live OneCare safety scanner. To use the Windows Live OneCare safety scanner, follow these steps:

a.

In Internet Explorer, visit the following Microsoft Web site: http://onecare.live.com/scan (http://onecare.live.com/scan)

b.

Click Full Service Scan. Note The behavior that you will see on the Windows Live OneCare Web page might be a bit different from what we describe here, but basically this is what will happen. The Windows Live OneCare safety scanner is downloaded and installed on your computer the first time that you perform a scan. The scanner will inspect your computer. Then, it will give you results and recommendations when the scan is finished. This might take a while, so be prepared for that. Note If you currently have no malware-protection programs, you can download a 90-day free trial of Windows Live OneCare. To do this, click Download free trial under Get continuous protection for your PC with Windows Live OneCare on the Windows Live OneCare Web page.

Step 3: Try installing Internet Explorer 7 again

Try installing Internet Explorer 7 again. To download Internet Explorer 7, visit the following Microsoft Web site:

If you can install Internet Explorer 7

If you can install Internet Explorer 7, you have solved your problem. The cause of the problem was either that you were missing an update or that malware, such as a virus or spyware, had somehow gotten on your computer.

You can also now safely delete the shortcuts to this content. To delete the icons, right-click an icon, and then click Delete.

If you still cannot install Internet Explorer 7

If you still cannot install Internet Explorer 7, you have a decision to make. Would you mind trying some advanced troubleshooting on your own or would you rather ask someone you know for help or contact support (http://support.microsoft.com/contactus)?

Back to the top

Advanced method 1: Temporarily disable programs that might prevent installation

Important These steps may increase your security risk. These steps may also make the computer or the network more vulnerable to attack by malicious users or by malicious software such as viruses. We recommend the process that this article describes to enable programs to operate as they are designed to or to implement specific program capabilities. Before you make these changes, we recommend that you evaluate the risks that are associated with implementing this process in your particular environment. If you decide to implement this process, take any appropriate additional steps to help protect the system. We recommend that you use this process only if you really require this process.

1.	Temporarily disable any programs that may be preventing Internet Explorer 7 from updating system files or the registry. Some examples are security programs such as some antivirus or antispyware programs. a. Locate the antivirus or the antispyware icon in the notification area. You can find the notification area at the lower-right side of your screen near the clock. The notification area displays the icons of the programs that you are currently running. When you move your pointer over the icons, Windows displays the name of the program. b. Right-click the antivirus or the antispyware icon, and then click Disable Auto-Protect. A red X will appear over the icon in the notification area to show that the application is now disabled. Note Antivirus and antispyware programs work differently. If the previous steps did not help you disable your program, you may have to look in the antivirus program’s Help system for steps about how to do this task. Also, you can usually find the steps to disable the antivirus program on the Internet. To find the steps to disable the program by using your favorite Internet search engine, type disable virus scan, type the name of your antivirus program, and then click Search.
2.	Install Internet Explorer 7. Note If the installation wizard never finishes, you are experiencing a different problem than the problem that this article describes. For more information about how to resolve the problem that the installation wizard never finishes, click the following article number to view the article in the Microsoft Knowledge Base: 926716 (/Feedback.aspx?kbNumber=926716/) The Windows Internet Explorer 7 installation program stops responding when you select the Install the latest updates for Internet Explorer and the Microsoft Windows Malicious Software Removal Tool (recommended) check box
3.	Turn on (re-enable) the antivirus or the antispyware program. To do this, right-click the antivirus or the antispyware icon in the notification area, and then click Enable. Antivirus and antispyware products protect the system from computer viruses and malicious attacks. Because new viruses are created every day, and the system is susceptible at any time, it is important to keep the antivirus and the antispyware products turned on (enabled).

Advanced method 2: Reset permissions for any unwriteable registry subkeys

1.

Determine whether a problem is preventing the registry from being updated: a. Click Start , click Run , type %windir% ie7.log , and then click OK to open the ie7.log file. Note By default, the ie7.log file is located in the C: Windows folder. b. Press CTRL+END to move to the end of the ie7.log file. c. On the Edit menu, click Find. d. In the Find what box, type IECUSTOM: Key is still unwriteable. e. Under Direction , click Up , and then click Find Next. If you find the Key is still unwriteable text, a problem is preventing the registry from being updated. For example, text that resembles the following in the log file indicates that a problem exists: time_stamp: IECUSTOM: Key is still unwriteable registry_subkey In this example, registry_subkey is the name of the registry subkey that is causing the problem. If you do not find the Key is still unwriteable text in the ie7.log file, go to Step 2 for additional troubleshooting steps.

2.

Reset the registry permissions for the registry subkey that has the incorrect permissions. To update the permissions of the registry subkey, follow these steps: a. Click Start , click Run , type regedit , and then click OK. b. Locate and then right-click each registry subkey that you noted in Step 1e, and then click Permissions on the Edit menu. Note The ie7.log file contains the following abbreviations: • HKCR= HKEY_CLASSES_ROOT • HKLM= HKEY_LOCAL_MACHINE • HKCU= HKEY_CURRENT_USER c. Under Group or user names , click Administrators. d. Under Permissions for Administrators , make sure that the Allow check box is selected for the following entries: • Full Control • Read Make sure that the Deny check box is not selected for any users or groups. For more information about how to modify the registry, click the following article number to view the article in the Microsoft Knowledge Base: 310426 (/Feedback.aspx?kbNumber=310426/) How to set or change registry editing permissions in Windows XP or in Windows Server 2003 e. Click Apply , and then click OK. f. On the File menu, click Exit. g. Try to install Internet Explorer 7 again. You may have to repeat these steps if there are other keys that have permissions that prevent Internet Explorer 7 from installing.

Advanced method 3: Check for any files that cannot be backed up or updated

1.	Determine whether a problem is preventing the files from being backed up or updated. To do this, follow these steps: a. Click Start , click Run , type %windir% ie7.log , and then click OK to open the ie7.log file. Note By default, the ie7.log file is located in the C: Windows folder. b. Press CTRL+END to move to the end of the ie7.log file. c. On the Edit menu, click Find. d. In the Find what box, type ArchiveFileForUninstall:ArchiveSingleFile Cancelled. e. Under Direction , click Up , and then click Find Next. If you find the ArchiveFileForUninstall:ArchiveSingleFile Cancelled text, this indicates that there is a problem that is preventing an IE6 file from being saved for uninstall. For example, text that resembles the following in the log file indicates that there is a problem: Time_stamp: ArchiveFileForUninstall:ArchiveSingleFile Cancelled Time_stamp: DoInstallation:UpdSpCommitFileQueue for AlwaysQueue Failed: 0x4c7 If you do not find the ArchiveFileForUninstall:ArchiveSingleFile Cancelled text in the ie7.log file, use Method 4 for additional troubleshooting steps.
2.	Reset the permissions for the Vgx.dll file. To set the permissions of the file to the default settings, click Start , click Run , type cmd , and then click OK. At command prompt, type one of the following commands, and then press ENTER: • If you are running Windows XP, type the following command: echo y| cacls%CommonProgramFiles% Microsoft Shared VGX vgx.dll /P BUILTIN Users:RBUILTIN Power Users:C BUILTIN Administrators:FNT AUTHORITY SYSTEM:F • If you are running Windows Server 2003, type the following command: echo y| cacls%CommonProgramFiles% Microsoft Shared VGX vgx.dll /P BUILTIN Users:RBUILTIN Power Users:C BUILTIN Administrators:FNT AUTHORITY SYSTEM:FNT AUTHORITY TERMINAL SERVER USER:C
3.	Try installing Internet Explorer 7. If Internet Explorer cannot be installed, check the log file again by following the steps in Method 2. If the log file shows a problem, repeat all the steps in this method.
4.	If you repeat the process and Internet Explorer 7 still cannot be installed, but the log file is clean, go to the next troubleshooting method.

Advanced method 4: Reregister Cryptographic Services files

Use this method if you receive an error message about the Cryptographic Services that resembles the following error message:

For more information about what to do if you receive this error message, click the following article number to view the article in the Microsoft Knowledge Base:

If the problem still occurs after you follow the steps in Microsoft Knowledge Base article 822798, your installation package may be corrupted. To resolve this problem and download Internet Explorer 7 again, visit the following Microsoft Web site:

Note If you still have problems, you might want to ask someone for help or contact support. For information about how to contact support, visit the following Microsoft Web site:

Back to the top

If no methods in this article resolved your problem, visit the following Internet Explorer 7 Support Web page:

You can also find additional information, bug reporting methods, support information for Internet Explorer 7 by visiting the Internet Explorer Support Web page.

The third-party products that this article discusses are manufactured by companies that are independent of Microsoft. Microsoft makes no warranty, implied or otherwise, about the performance or reliability of these products.

Back to the top

Self-help steps for beginning to intermediate computer users are available to troubleshoot similar problems at the following Microsoft Web site:

If you are still having problems, you may be having a different problem. For more information, click the following article numbers to view the articles in the Microsoft Knowledge Base:

If these articles do not help you resolve the problem or if you experience symptoms that differ from those that are described in this article, search the Microsoft Knowledge Base for more information. To search the Microsoft Knowledge Base, visit the following Microsoft Web site:

Then, type the text of the error message that you receive, or type a description of the problem in the Search Support (KB) box.

For more information about this problem, click the following article number to view the article in the Microsoft Knowledge Base:

For more information about the Windows Internet Explorer 7 Solution Center, visit the following Microsoft Web site:

Why do I have an icon leading to this page on my desktop and how do I delete it?

When Windows Internet Explorer 7 is not installed successfully on your computer, the Internet Explorer 7 Setup program puts an icon on your desktop. This icon links you to this article about how to troubleshoot Internet Explorer 7 installation problems. So if you clicked this icon thinking that it would open your home page in Internet Explorer, you might be in the wrong place. There are two things you can do. You can delete this icon from your desktop. Or, you can troubleshoot to make sure that Internet Explorer 7 is successfully installed.

To delete the Internet Explorer Troubleshooting icon from your desktop, right-click the icon, and then click Delete. To troubleshoot Internet Explorer 7 installation issues, click here.

If you are not sure whether Internet Explorer 7 is installed on your computer, you can click About Internet Explorer on the Help menu in Internet Explorer. The About Internet Explorer dialog box shows the version number of Internet Explorer that is currently installed on your computer.

To start Internet Explorer 7 in the future, use the Internet Explorer command on the Start menu, or use whatever other method that you usually use to start Internet Explorer.

How do I troubleshoot Windows Update issues?

If you received an error message when you visited Windows Update, you must first resolve the Windows Update error message before you can continue with the methods described in this article. Search for more information about the error message on the following Microsoft Web site:

If the error message that you received is not listed on the Microsoft Update site or if you experienced some other problem with Windows Update, we recommend that you ask someone you know for help or that you contact support. For more information about contacting support, visit the following Microsoft Web site:

On this Web page, click Contacts, and then click the appropriate link under Support professionals (by issue).

Back to the top

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the Applies to section.

Back to the top

Update information

The following files are available for download from the MicrosoftDownload Center:

Update for Windows Vista (KB959130)

Collapse this imageExpand this image

Download the update for Windows Vista (KB959130) package now. (http://www.microsoft.com/downloads/details.aspx?FamilyId=D14C96B8-67B0-44B3-9069-EA6230B9A934)

Update for Windows Vista for x64-based systems (KB959130)

Collapse this imageExpand this image

Download the update for Windows Vista for x64-based systems (KB959130) package now. (http://www.microsoft.com/downloads/details.aspx?FamilyId=3D09953F-49D6-4740-8C9C-F7FC161C10F1)

Update for Windows Server 2008 (KB959130)

Collapse this imageExpand this image

Download the update for Windows Server 2008 (KB959130) package now. (http://www.microsoft.com/downloads/details.aspx?FamilyId=8A6AE7B7-4D4D-42AC-A09B-45155FF4B53A)

Update for Windows Server 2008 x64 Edition (KB959130)

Collapse this imageExpand this image

Download the update for Windows Server 2008 x64 Edition (KB959130) package now. (http://www.microsoft.com/downloads/details.aspx?FamilyId=4DA93F4F-318F-4E64-BF7B-52065A500D46)

Update for Windows Server 2008 for Itanium-Based systems (KB959130)

Collapse this imageExpand this image

Download the update for Windows Server 2008 for Itanium-based Systems (KB959130) package now. (http://www.microsoft.com/downloads/details.aspx?FamilyId=9A411BB6-FEF0-4D9B-8FF6-8BD086F697E2)

Release Date: November 25, 2008

For more information about how to download Microsoft support files, click the following article number to view the article in the Microsoft Knowledge Base:

Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help prevent any unauthorized changes to the file.

Prerequisites

There are no prerequisites for installing this update.

Restart requirement

After you apply this update, you must restart the computer if the Connect to the Internet Wizard is running.

Update replacement information

This update does not replace a previously released update.

File information

The English version of this update has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.

Windows Vista and Windows Server 2008 file information notes

• The files that apply to a specific product, milestone (RTM, SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table.
  Collapse this tableExpand this table

  Version	Product	Milestone	Service branch
  6.0.6000.16xxx	Windows	RTM	GDR
  6.0.6000.20xxx	Windows	RTM	LDR
  6.0.6001.18xxx	Windows Vista SP1 and Windows Server 2008 SP1	SP1	GDR
  6.0.6001.22xxx	Windows Vista SP1 and Windows Server 2008 SP1	SP1	LDR

• Service Pack 1 is integrated into Windows Server 2008. Therefore, RTM milestone files apply only to Windows Vista. RTM milestone files have a 6.0.0000.xxxxxx version number.
• The MANIFEST files (.manifest) and MUM files (.mum) installed for each environment are listed separately. MUM and MANIFEST files, and the associated security catalog (.cat) files, are critical to maintaining the state of the updated component. The security catalog files (attributes not listed) are signed with a Microsoft digital signature.

For all supported x86-based versions of Windows Server 2008 and Windows Vista

For all supported x64-based versions of Windows Server 2008 and Windows Vista

For all supported Itanium-Based versions of Windows Server 2008

Back to the top

Back to the top

Additional file information for Windows Server 2008 and Windows Vista

Additional files for all supported x86-based versions of Windows Server 2008 and Windows Vista

Additional files for all supported x64-based versions of Windows Server 2008 and Windows Vista

Additional files for all supported Itanium-based versions of Windows Server 2008

Back to the top