How to Disable CtxIEInterceptorBHO Browser Helper Object Using Group Policy

  • CTX133274
  • Created onMar 26, 2014
  • Updated onApr 16, 2014
Article Topic Other


This article describes how to disable CtxIEInterceptorBHO Class using Active Directory or Local GPO setting changes.


Basic knowledge in Active Directory Group Policy Management


In recent releases of Citrix Receiver for Windows, Citrix has implemented a new Browser Helper Object (BHO) - CtxIEInterceptorBHO (IEInterceptor.dll). This BHO is used to provide URL Redirection functionality for XenApp Cloud Service Provider customers using the Local App Access feature to redirect URLs to the browser of the client OS.

If not using the URL Redirection feature, it can be disabled to prevent conflicts or performance issues with antivirus or anti-malware products.



  • Although this workaround has been tested in internal test environment, users must test this workaround thoroughly in non-production environment before implementing it in any production environments.

  • The policy element Add-on List setting exists on both Machine Policy and User Policy. Pay attention which setting you change and ensure to maintain a record containing information about why and how this change was made.

  • Consider disabling CtxIEInterceptorBHO Class as a temporary workaround as this BHO might be used in future releases of XenApp or XenDesktop and customers might be unable to use certain features if it is disabled.

    1. Open Group Policy Management Editor.

    2. Click Computer Configuration or User Configuration > Administrative Templates > Windows Components > Internet Explorer > Security Features > Add-on Management.

    3. Double-click Add-on List, as displayed in the following screen shot:

      User-added image

    4. Choose Enabled.

      User-added image

    5. Click Show to display the following screen shot:

      User-added image
    6. Specify the CLSID of CtxInterceptorBHO Class - {2C4631FF-5CC8-4EBC-A0DF-34C92291759E} in the Value name field.
      Note: Ensure to include the bracket ({}) at both ends. If CtxVDAIEInterceptorBHO Class has to be disabled, then use {A44B166E-5097-4B07-8732-BFD924C3CF68} as the CLSID.

    7. Specify 0 in the Value field and click OK.
    8. Log on to one of the machines that the policy applies to and run gpupdate /force on the command line to ensure that the Group Policy setting change is correctly reflected.

    9. Open Internet Explorer > Tools > Internet Options > Programs tab > Manage add-ons and confirm that CtxIEInterceptorBHO Class is disabled and that it cannot be enabled by the user.

    Applicable Products

    Automatic translation

    Important: This article was translated by an automatic translation system (also referred to as Machine Translation, or MT) and has not been translated or reviewed by people. Citrix offers a machine translated version of this article to allow for greater access to the support content. However, automatic translation is not always perfect and may contain errors of vocabulary, syntax or grammar. Citrix is not responsible for inconsistencies, errors or damage incurred as a result of the use of MT articles from our customers.Thank you.
    Click here to see the English version of this article.
    Was this helpful?
    Thank you for your feedback

    Share your comments or find out more about this topic

    Citrix Forums