Internet Explorer consumes high memory usage and CPU cycles (not responding)

Couple of weeks ago, colleagues of mine started complaining about not responsive behavior of Internet Explorer 11 when they were using their line of business web application. My response to their complaining was: please reset the Internet Explorer to defaults and reboot your PC, and the problem will be solved. This was a cure in many previous cases of not responsive Internet Explorer behavior. But, in this case this method was not fixing the issue. Number of helpdesk calls and tickets opened were growing, about this Internet Explorer not responsive behavior when users were using their LOB web application.
Here is a screenshot of this high memory consumption and high CPU cycles from Internet Explorer process:

After some investigation, this behavior was typical for users that were working on machines with installed KB3096441 : MS15-106: Cumulative security update for Internet Explorer: October 13, 2015. This behavior was confirmed by Microsoft and hotfix was published with following KB3119070. After installation of this hotfix, Internet Explorer 11 was behaving normally when this LOB web application was used.
Also, this "bad" behavior of Internet Explorer is fixed with KB3104002 MS15-124: Security update for Internet Explorer: December 8, 2015.
 

KB3038314 disables SSL 3.0 in Internet Explorer 11

With latest updates from Microsoft, there is a cumulative security update for Internet Explorer KB3038314 which will disable the SSL 3.0 in Internet Explorer 11. Default settings for Internet Explorer 11 after installing this update will be with disabled SSL 3.0 (without this update the default setting were with SSL 3.0 enabled). This new "behavior" of Internet Explorer 11 is due to a vulnerability in SSL 3.0 that could allow information disclosure published in Microsoft Security Advisory 3009008 https://technet.microsoft.com/en-us/library/security/3009008 .

With SSL 3.0 disabled, you may experience the following error when accessing websites secured with SSL 3.0:

Turn on TLS 1.0,TLS 1.1 and TLS 1.2 in Advanced settings... The error message doesn't suggest to turn on the SSL 3.0 !

And finally, how to find out if SSL 3.0 is in use when accessing https websites ?
I guess, the easiest way is to view the properties of the accessed https webpage. For example:

 

If you need to access secured websites with SSL 3.0, you can override this setting (not recommended). For more info please visit Microsoft Security Advisory 3009008.
 

Unable to open ILO3 with TLS 1.2

In this case I was unable to connect to ILO3 on HP DL 380 G7 with Internet Explorer 11 from Windows 8.1 client workstation. ILO Firmware version was 1.20. Starting from Windows 8.1 and Internet Explorer 11 all TLS protocols are enabled and supported by default:

ILO was not failing back to lower version of TLS if TLS 1.2 was selected. After unselecting TLS 1.2 from Internet Explorer 11, I was able to connect to ILO interface. This is issue was resolved with later version ILO firmware. So, after patching the server with latest ILO firmware, I was able to connect to ILO3 interface using Internet Explorer 11 with TLS 1.2  selected.
 

Group Policy Internet Settings Event ID 4098

In this post I'll explain how I've managed to fix the Warning Event ID 4098 from Group Policy Internet Settings source in Application Log. The following event was logged in Application Event Log on affected machines:

The user 'Internet Explorer 10' preference item in the 'Policy Name and ID' Group Policy Object did not apply because it failed with error code '0x80070005 Access is denied.' This error was suppressed.

The reason for this access denied was because Internet Settings preference 'Internet Explorer 10' was running under user's context.

Removing the check mark from common tab for Run in logged-on user's security context (user policy option) has resolved the warning event log. Preference items created either under computer or user part of the GPO are processed under System security context. For more info about configuring common option check http://technet.microsoft.com/en-us/library/cc772371.aspx .
 

Internet Explorer 11 opens Exchange OWA Light

By default, Internet Explorer 11 will open OWA Light when accessing Exchange (2013,2010,2007) environment. The reason for this behavior is that Internet Explorer 11 does not include MSIE token in user-agent string.
In order to avoid this behavior and let the Internet Explorer 11 to open OWA Premium by default, for Exchange 2013 there is CU2, and for other versions of Exchange the workaround is from client side:

• Open Internet Explorer 11 in private mode

or

• Add OWA site in compatibility view list

Microsoft has published KB for this Internet Explorer 11 behavior. For more info check http://support.microsoft.com/kb/2866064 .

Where is Group Policy Preference for Internet Explorer 11 ?

After joining the Windows 8.1 enterprise into domain environment, I was expecting that GPMC will introduce new GPP template for Internet Explorer 11, but the latest version was still the Internet Explorer 10.
So, how to apply settings to Internet Explorer 11 via GPP ?
Fortunately, GPP for Internet Explorer 10 will also work with Internet Explorer 11. Why ?
I opened GPP for IE10 xml file, and saw that file version filtering for iexplore is between 10 and 99.
Here is the filtering part from the xml file:

path="%ProgramFilesDir%\Internet Explorer\iexplore.exe" type="VERSION" gte="1" min="10.0.0.0" max="99.0.0.0"

My opinion is that with this kind of file filter versioning for iexplore, the GPP template should be named Internet Explorer 10 and higher, not just Internet Explorer 10.