How to Disable CtxIEInterceptorBHO Browser Helper Object Using Group Policy

How to Disable CtxIEInterceptorBHO Browser Helper Object Using Group Policy

book

Article ID: CTX133274

calendar_today

Updated On:

Description

This article describes how to disable CtxIEInterceptorBHO Class using Active Directory or Local GPO setting changes.

Requirements

Basic knowledge in Active Directory Group Policy Management

Background

In recent releases of Citrix Receiver for Windows, Citrix has implemented a new Browser Helper Object (BHO) - CtxIEInterceptorBHO (IEInterceptor.dll). This BHO is used to provide URL Redirection functionality for XenApp Cloud Service Provider customers using the Local App Access feature to redirect URLs to the browser of the client OS.

If not using the URL Redirection feature, it can be disabled to prevent conflicts or performance issues with antivirus or anti-malware products.


Instructions

Warnings:

  • Although this workaround has been tested in internal test environment, users must test this workaround thoroughly in non-production environment before implementing it in any production environments.

  • The policy element Add-on List setting exists on both Machine Policy and User Policy. Pay attention which setting you change and ensure to maintain a record containing information about why and how this change was made.

  • Consider disabling CtxIEInterceptorBHO Class as a temporary workaround as this BHO might be used in future releases of XenApp or XenDesktop and customers might be unable to use certain features if it is disabled.

    1. Open Group Policy Management Editor.

    2. Click Computer Configuration or User Configuration > Administrative Templates > Windows Components > Internet Explorer > Security Features > Add-on Management.

    3. Double-click Add-on List, as displayed in the following screen shot:

      User-added image

    4. Choose Enabled.

      User-added image

    5. Click Show to display the following screen shot:

      User-added image
    6. Specify the CLSID of CtxInterceptorBHO Class - {2C4631FF-5CC8-4EBC-A0DF-34C92291759E} in the Value name field.
      Note: Ensure to include the bracket ({}) at both ends. If CtxVDAIEInterceptorBHO Class has to be disabled, then use {A44B166E-5097-4B07-8732-BFD924C3CF68} as the CLSID.

    7. Specify 0 in the Value field and click OK.
    8. Log on to one of the machines that the policy applies to and run gpupdate /force on the command line to ensure that the Group Policy setting change is correctly reflected.

    9. Open Internet Explorer > Tools > Internet Options > Programs tab > Manage add-ons and confirm that CtxIEInterceptorBHO Class is disabled and that it cannot be enabled by the user.
      User-added image

    Issue/Introduction

    This article describes how to disable the Citrix CtxIEInterceptorBHO Browser Helper Object which was introduced in Citrix Receiver 3.2.

    Additional Information

    How to manage Internet Explorer add-ons in Windows XP Service Pack 2.