Protected Mode

In Windows XP or 2000, you can run applications in two modes: as administrator or as normal user

In Windows Vista,there is another, new, mode: Protected Mode. Protected Mode is a new feature in Vista, and is one of the pieces of User Account Control (UAC). Protected mode is designed to protect the computer by restricting the parts of the system that code running in the IE process can affect. If a malicious web page exploits a code-injection bug in IE or an IE plugin, that code will not be able to do damage to the system.

In Windows Vista, Internet Explorer runs by default in Protected Mode.

In Protected Mode IE writes/reads special Low versions of the Cache, TEMP folder, Cookies and History:

• Cache: c:\users\jdoe\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low
• Temp: c:\users\jdoe\AppData\Local\Temp\Low
• Cookies: c:\users\jdoe\AppData\Roaming\Microsoft\Windows\Cookies\Low
• History: c:\users\jdoe\AppData\Local\Microsoft\Windows\History\Low

As Internet Explorer can run in both normal and protected mode, in practice History and Cookies are each stored in two folders. For, example, History is stored in the following two places:

• Normal mode: c:\users\jdoe\AppData\Local\Microsoft\Windows\History
• Protected mode: c:\users\jdoe\AppData\Local\Microsoft\Windows\History\Low