How do I configure an EC2 Windows instance to allow file downloads through Internet Explorer?

Short description

By default, Amazon Machine Images (AMIs) for Windows Server activate the IE Enhanced Security Configuration that blocks file downloads through Internet Explorer. It's not a best practice to browse the web on a server.

To allow downloads on your EC2 Windows instance, deactivate IE Enhanced Security Configuration.

Resolution

Important: Only download files only from trusted sources. After you download and install the software, it's a best practice to reactivate IE Enhanced Security Configuration. The following steps might expose your EC2 Windows instances to websites that contain security risks. For more information about IE Enhanced Security Configuration, see FAQ about Internet Explorer Enhanced Security Configuration (ESC) on the Microsoft website.

To allow an EC2 Windows instance to download files through Internet Explorer, complete the following steps:

1. Use Remote Desktop Protocol (RDP) to connect to your instance.
2. Open the Windows Start menu.
3. In the search bar, enter Server Manager, and then choose Server Manager.
4. Configure the following settings based on the Windows Server version that your instance runs:
   For Windows Server 2012 R2, Windows Server 2016, or Windows Server 2019, choose Local Server from the left navigation pane. For IE Enhanced Security Configuration, select On.
   For Windows Server 2008 R2, choose Server Manager from the navigation pane. In the Server Summary - Security Information section, choose Configure IE ESC.
5. For Administrators, select Off.
6. For Users, select Off.
7. Choose OK.

Note: The security configuration change takes effect when you open a new Internet Explorer session. If Internet Explorer is already open, then you must open a new tab. Or, close the browser, and then reopen it.

Related information

Why can't my Amazon EC2 instance access the internet through an internet gateway?