27

I'm unable to download the Google Chrome installer when I'm in Internet Explorer for Windows Server 2012 R2. I normally set the allowed sites under security, but that doesn't work. What is preventing me from clicking the "Download Chrome" button?

https://www.google.com/chrome/browser/desktop/#

  • 3
    The answer is Internet Explorer Enhanced Security Configuration. if you want to see what it does, open IE and click the link "Effects of Internet Explorer Enhanced Security Configuration" to see the list of config settings. To install, do it the easy way, and just download the offline installer on another box and copy over to the server. Its just plain easier than configing IE to allow the download and install. if you really want to config IE though, paste this url into IE to view instructions on how to do so: res://iesetup.dll/IESecHelp.htm#turnoff – Frank Thomas Dec 2 '15 at 21:42
  • Frank - I would move that to the answer field if I were you. – Richie086 Dec 2 '15 at 21:49
  • I agree with Richie. – MacGyver Dec 3 '15 at 6:26
28

Windows servers ship IE with a locked down configuration that they reffer to as Internet Explorer Enhanced Security Configuration. This configuration consists of a set of Zone settings, and additional Advanced settings as well. In their default state, these browsers will display a message about the configuration.

enter image description here

To see the details of the IE ESC, click the link with the text Effects of Internet Explorer Enhanced Security Configuration to see the specific settings.

In prior versions you could simply give the Internet Zone the right to download Files, but that no longer works as well as it had, and Chrome web-based installation also requires scripts and local installer execution, so it in particular is difficult.

If you are just going to use another browser anyway (either to avoid IE, or to get around the configuration), you can consider just disabling IE ESC. To do so, review the help for your specific version of IE, by entering this url: res://iesetup.dll/IESecHelp.htm#turnoff.

For Windows Server 2012 and 2012 R2, the instructions are as follows:

Keeping the Internet Explorer Enhanced Security Configuration enabled on your servers is recommended to help ensure that your servers are not inadvertently exposed to malware or other browser-based attacks. However, in some environments you might wish to turn off the Internet Explorer Enhanced Security Configuration protections to enable easier browsing for administrators or standard users.

To turn off Internet Explorer Enhanced Security Configuration

  1. Close any Internet Explorer browser windows that you might have open.

  2. Open Server Manager

  3. If your server is running Windows Server® 2008 R2, in the Security Information section of Server Summary, click Configure IE ESC to open the Internet Explorer Enhanced Security Configuration dialog.

    If your server is running Windows Server® 2012, click Configure this local server to open the Local Server configuration page. Then, in the Properties area, next to IE Enhanced Security Configuration, click On to open the Internet Explorer Enhanced Security Configuration dialog.

  4. To allow members of the local Administrators group to use Internet Explorer in its default client configuration, under Administrators click Off.

    To allow members of all other groups to use Internet Explorer in its default client configuration, under Users click Off.

    Note Once the Internet Explorer Enhanced Configuration is turned off for one set of users, Server Manager will display Off next to Internet Explorer Enhanced Security Configuration.

  5. Click OK to apply your changes

| improve this answer | |
16

I use powershell for install Chrome in Windows Server 2012 R2:

$LocalTempDir = $env:TEMP; $ChromeInstaller = "ChromeInstaller.exe"; (new-object System.Net.WebClient).DownloadFile('http://dl.google.com/chrome/install/375.126/chrome_installer.exe', "$LocalTempDir\$ChromeInstaller"); & "$LocalTempDir\$ChromeInstaller" /silent /install; $Process2Monitor =  "ChromeInstaller"; Do { $ProcessesFound = Get-Process | ?{$Process2Monitor -contains $_.Name} | Select-Object -ExpandProperty Name; If ($ProcessesFound) { "Still running: $($ProcessesFound -join ', ')" | Write-Host; Start-Sleep -Seconds 2 } else { rm "$LocalTempDir\$ChromeInstaller" -ErrorAction SilentlyContinue -Verbose } } Until (!$ProcessesFound)

Of course I Know is not recommendable, but sometimes you need a browser for get some files.

| improve this answer | |
1

Just Add https://www.google.com to your Trusted Sites and turn then go into Custom Level on the Security and disable Pop-up Blocking.

| improve this answer | |
0

For me, I did the following and I was able to download chrome on windows server 2019.

  1. Turn off Internet Explorer Enhanced Security Configuration. Click here to see how.
  2. Enable File download. Click here to see how
  3. Enable Active Scripting (JavaScript). Click here to see how

The download chrome button worked fine after I did all that.

| improve this answer | |
0

In Windows Server 2019, open IE, go to IE options ---> Security ----> Custom -----> select Medium-High (default) from drop down.

| improve this answer | |

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.