On a fresh Windows Server the built-in Internet Explorer blocks almost everything, file downloads included. This is Internet Explorer Enhanced Security Configuration (ESC). It is on by default and protects the server from accidental visits to risky sites.
Usually you only need IE once, to download a proper browser. Below are three ways to do that: turn Enhanced Security off completely, allow downloads in IE's own settings, or download the file with no browser at all, through PowerShell.
Which Windows Server version this applies to
Internet Explorer 11 is built into Windows Server 2019 and 2022.
Windows Server 2025 no longer has a separate Internet Explorer and uses Microsoft Edge instead, so there you can simply open Edge. The screenshots below are from Windows Server 2019.
Why IE will not download files
When you first open Internet Explorer, it offers to pick settings. Leave Use recommended security, privacy, and compatibility settings and click OK.
The Internet Explorer first run with recommended settings
Then, when you open a site, IE shows a warning about an insecure connection. Leave the checkbox and click OK.
The insecure connection warning
Next comes a content-blocking dialog. Clear the checkbox so these dialogs stop appearing and click Close.
IE blocks the site content
And when you try to download anything, IE states plainly that the security settings do not allow the download. Click OK and move on to one of the methods below.
The download is blocked by the security settings
Option 1. Turn off Enhanced Security in Server Manager
The fastest and most predictable path. Enhanced Security turns off with a single switch, and IE starts downloading files right away.
- Open Server Manager.
- On the left, select Local Server.
- Find the IE Enhanced Security Configuration row and click its On value.
- In the window that opens, choose Off for administrators and click OK.
Close and reopen Internet Explorer, and downloads will work. This is the best option when you just need to grab a browser installer and be done with it.
Option 2. Allow downloads in the IE settings
Use this when you cannot touch Enhanced Security but still need to download a file.
Click the gear in the top-right corner of the browser and choose Internet options.
The Internet options item in the browser menu
Go to the Security tab and prepare the Internet zone.
The Security tab with the Internet zone selected
- Select the Internet zone with the globe icon.
- Clear the Enable Protected Mode checkbox.
- Click Custom level....
Scroll to the Downloads section and switch both items to Enable.
File download and Font download set to Enable
The first item, File download, allows downloading any files.
The second, Font download, is for fonts.
Click OK, and IE will ask whether you really want to change the zone settings. Click Yes.
Confirming the zone settings change
Back in the Internet Options window, click Apply to save the changes.
The Apply button saves the changes
IE will warn once more that the lowered settings increase the risk. Agree and close the window.
The warning about the lowered settings
Option 3. Download the file through PowerShell, no browser
The most reliable way when you need to grab an installer from a direct link once. The browser and its settings are not involved at all. Open PowerShell as administrator and run the command.
# Download the installer into the current folder
Invoke-WebRequest -Uri "https://link/to/file.exe" -OutFile "installer.exe" -UseBasicParsingThe -UseBasicParsing switch is needed when Internet Explorer is disabled in the system, otherwise the command may fail.
If you prefer curl syntax, Windows Server 2019 and later ship a real curl.exe.
# The -O flag saves the file under its original name
curl.exe -O https://link/to/file.exeThe result
After option 1 or 2, Internet Explorer downloads files without complaint. The first thing to grab is a proper browser, such as Google Chrome, Mozilla Firefox or Microsoft Edge.
IE offers to save the browser installer
Once a modern browser is installed, you can turn IE's Enhanced Security back on and never deal with its settings again.
Frequently asked questions
Is it safe to turn off IE Enhanced Security
On a server where you only visit sites you know, it is acceptable. The risk is that you lose the extra protection against accidental visits to dangerous pages. The best approach is to turn Enhanced Security off only to download a proper browser, then turn it back on.
There is no Internet Explorer on the server
Windows Server 2025 removed Internet Explorer, so just open Microsoft Edge, which is already installed. You can also download a file from a direct link through PowerShell with Invoke-WebRequest, as shown in option 3.
The download still does not work
Make sure you saved the changes with Apply and restart Internet Explorer. If the site has a self-signed certificate, IE may block that too. In that case it is easier to use option 1 or download the file through PowerShell.
Our resources
Telegram channel: https://t.me/f3cloud_news
Our website: https://f3cloud.com