The use of monikers is no longer supported in Internet Explorer after installing the security updates provided by cumulative security update 896727 (MS05-038) (906294)


The information in this article applies to:

  • Microsoft Internet Explorer 6.0 SP1, when used with:
    • Microsoft Windows XP Service Pack 1
    • Microsoft Windows 2000 Server SP4
    • Microsoft Windows 2000 Professional SP4
    • Microsoft Windows 2000 Datacenter Server SP4
    • Microsoft Windows 2000 Advanced Server SP4
    • Microsoft Windows Millennium Edition
    • Microsoft Windows 98 Second Edition
  • Microsoft Internet Explorer 6.0, when used with:
    • Microsoft Windows Server 2003 SP1
    • Microsoft Windows XP Service Pack 2
    • Microsoft Windows Server 2003, Standard Edition
    • Microsoft Windows Server 2003, Enterprise Edition
    • Microsoft Windows Server 2003, Datacenter Edition
    • Microsoft Windows Server 2003, Enterprise Edition for Itanium-based Systems
    • Microsoft Windows Server 2003, Datacenter Edition for Itanium-based Systems
    • Microsoft Windows Server 2003, Standard x64 Edition
    • Microsoft Windows Server 2003, Enterprise x64 Edition
    • Microsoft Windows XP Professional x64 Edition
  • Microsoft Internet Explorer 5.5 SP2, when used with:
    • Microsoft Windows Millennium Edition
  • Microsoft Internet Explorer 5.01 SP4, when used with:
    • Microsoft Windows 2000 Advanced Server SP4
    • Microsoft Windows 2000 Datacenter Server SP4
    • Microsoft Windows 2000 Server SP4
    • Microsoft Windows 2000 Professional SP4
Important This article contains information that shows you how to help lower security settings or how to turn off security features on a computer. You can make these changes to work around a specific problem. Before you make these changes, we recommend that you evaluate the risks that are associated with implementing this workaround in your particular environment. If you implement this workaround, take any appropriate additional steps to help protect your system.

Important This article contains information about how to modify the registry. Make sure to back up the registry before you modify it. Make sure that you know how to restore the registry if a problem occurs. For more information about how to back up, restore, and modify the registry, click the following article number to view the article in the Microsoft Knowledge Base:

256986 Description of the Microsoft Windows registry

SYMPTOMS

When you view a Web page in the products that are listed in the "Applies to" section and the Web page contains a moniker, the Web page may not work as expected. For example, an object that contains a Java moniker may not load.

This problem occurs after you install the cumulative security update that is referenced in the following Microsoft Knowledge Base article:

896727 MS05-038: Cumulative security update for Internet Explorer

RESOLUTION

Because of security changes that were implemented in cumulative security update 896727, the use of custom monikers is no longer enabled. A custom moniker is used to reference and create an instance of an ActiveX control or to run code. For example, these monikers include the following. 
JAVA:
NEW:
SESSION:
If the application uses the Microsoft Java Virtual Machine Java moniker, use one of the following methods to enable the use of custom monikers.

Method 1: Application written in Microsoft Visual J++

To resolve this problem if the application was written in Microsoft Visual J++, convert the application to a Microsoft Visual J# application.

For more information about how to convert the Visual J++ application to a Visual J# application, visit the following Microsoft Developer Network (MSDN) Web sites:

http://msdn.microsoft.com/library/en-us/dv_vjsharp/html/vjgrfUpgradingComponentsThatUseCommswfchtmlPackage.asp

http://msdn.microsoft.com/library/en-us/dv_vjsharp/html/vjsamUpgradingVisualJ60Project.asp

Method 2: Application written to the Microsoft SDK for Java

To resolve this problem if the application was written to the Microsoft SDK for Java, convert the application to a Visual J# application.

For more information about how to convert the Visual J++ application to a Visual J# application, visit the following MSDN Web site:

http://msdn.microsoft.com/en-us/dv_vstechart/html/vjtskMigratingJavaAppletsToMicrosoftJBrowserControls.asp

Note Other applications that use a custom moniker must be rewritten to remove the dependency on the custom moniker.

MORE INFORMATION

Warning This workaround may make your computer or your network more vulnerable to attack by malicious users or by malicious software such as viruses. We do not recommend this workaround but are providing this information so that you can implement this workaround at your own discretion. Use this workaround at your own risk.

Warning Serious problems might occur if you modify the registry incorrectly by using Registry Editor or by using another method. These problems might require that you reinstall your operating system. Microsoft cannot guarantee that these problems can be solved. Modify the registry at your own risk.

Note These steps disable a change that was implemented in cumulative security update 896727 that prevents the use of monikers. After you follow these steps, a Web page that contains a moniker will work as expected. However, we do not recommend that you make this change because it disables part of the security update. You should only make this change temporarily until you implement one of the methods in the "Resolution" section.

To work around this problem and to enable the use of monikers, you must install the cumulative security update for Internet Explorer that is described in security bulletin MS05-052. You must also create or modify registry subkeys. To do this, follow these steps:
  1. Download and then install the cumulative security update for Internet Explorer that is described in security bulletin MS05-052. For more information about how to obtain and install this cumulative security update for Internet Explorer, visit the following Microsoft Web site:

    http://www.microsoft.com/technet/security/bulletin/ms05-052.mspx

  2. Click Start, click Run, type regedit, and then click OK.
  3. Locate and then click one of the following registry subkeys:
    • To enable the use of monikers per user, click the following registry subkey:

      HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\FeatureControl\

    • To enable the use of monikers per computer, click the following registry subkey:

      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\

  4. On the Edit menu, point to New, and then click Key.
  5. Type FEATURE_LIMIT_MONIKERS, and then press ENTER.
  6. Click FEATURE_LIMIT_MONIKERS.
  7. On the Edit menu, point to New, and then click DWORD Value.
  8. Type iexplore.exe, and then press ENTER.
  9. On the Edit menu, click Modify, type 0, and then click OK.

    Note A value of 0 enables monikers to work in an Internet Explorer process. A value of 1 disables the use of monikers.
  10. Quit Registry Editor.
Modification Type:MinorLast Reviewed:7/26/2006
Keywords:kbQFE kbfix kbbug kbHotfixServer kbpubtypekc KB906294 kbAudITPRO kbAudDeveloper
©2004 Microsoft Corporation. All rights reserved.